context-saver-mcp 1.0.0 → 1.0.1

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 All notable changes to this project are documented here. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and this project adheres to [Semantic Versioning](https://semver.org/).
 
+## [1.0.1] — 2026-11-03
+
+Patch release — hardening found by the CI matrix on real GitHub runners (every fix demonstrated with a failing test first).
+
+### Fixed
+- **Windows / all platforms**: transport-level upstream failures (`McpError` `ConnectionClosed`/`RequestTimeout` — e.g. an upstream that dies before the MCP handshake) are now normalized into the gateway's JSON error envelope instead of surfacing as raw protocol text.
+- **Node 18**: shimmed `globalThis.crypto` (WebCrypto is only default-global since Node 19) — required by the SDK's Streamable HTTP core for SSE stream ids; without it every HTTP-transport POST failed on Node 18 with `ReferenceError: crypto is not defined`.
+- **Cross-version CI**: `npm test` now enumerates test files itself (`tests/run-all.mjs`) — `node --test` glob expansion is a Node-22+ feature, so the glob form broke on Node 18/20 (and cmd.exe never expands globs).
+- **Release workflow**: every job now carries an explicit version-tag guard so Dependabot branch pushes that modify the workflow file can no longer create phantom red runs, and a manual dispatch from a branch can never create a GitHub Release.
+
 ## [1.0.0] — 2026-11-03
 
 First public release. One gateway connection instead of dozens; lazy tool schemas kill the 15k–20k token upfront burn.

package/context-saver-mcp.js

@@ -92,6 +92,16 @@ import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/
 import { ErrorCode, McpError } from '@modelcontextprotocol/sdk/types.js';
 import { z } from 'zod';
 
+// Node 18 support guard: Node exposes globalThis.crypto (WebCrypto) by default
+// only since v19 — on 18.19 it requires --experimental-global-webcrypto. The
+// SDK's Streamable HTTP core uses the global crypto.randomUUID() for SSE
+// response stream ids, so without this shim every /mcp POST on Node 18 dies
+// with 'ReferenceError: crypto is not defined' (observed in CI run #8/#11).
+if (typeof globalThis.crypto === 'undefined') {
+  const { webcrypto } = await import('node:crypto');
+  globalThis.crypto = webcrypto;
+}
+
 export const NAME = 'context-saver-mcp';
 export const VERSION = '1.0.0';
 
@@ -1168,7 +1178,14 @@ export function buildGatewayServer(runtime) {
       }
       return { content, isError: result?.isError === true };
     } catch (err) {
-      if (err instanceof McpError) throw err;
+      // Parameter-level errors (e.g. upstream InvalidParams for wrong args) are
+      // protocol errors and must pass through. TRANSPORT-level McpErrors —
+      // ConnectionClosed when an upstream dies at boot, RequestTimeout when the
+      // wire times out — are availability problems: normalize them into the
+      // JSON error envelope so the host model sees one consistent shape.
+      const transportLevel = err instanceof McpError
+        && (err.code === ErrorCode.ConnectionClosed || err.code === ErrorCode.RequestTimeout);
+      if (err instanceof McpError && !transportLevel) throw err;
       return errorResult(`call_tool ${server}/${tool} failed: ${err.message}`, {
         server,
         tool,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "context-saver-mcp",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "The Context-Saver: Multi-Server Multiplexer (Aggregator) MCP Server. One gateway connection instead of dozens — lazy tool schemas cut MCP context burn by ~90%.",
   "type": "module",
   "license": "MIT",
@@ -22,13 +22,13 @@
   },
   "scripts": {
     "start": "node context-saver-mcp.js",
-    "test": "node --test \"tests/unit/*.test.js\" \"tests/integration/*.test.js\" \"tests/http/*.test.js\"",
-    "test:unit": "node --test \"tests/unit/*.test.js\"",
-    "test:integration": "node --test \"tests/integration/*.test.js\"",
-    "test:http": "node --test \"tests/http/*.test.js\"",
+    "test": "node tests/run-all.mjs",
+    "test:unit": "node tests/run-all.mjs tests/unit",
+    "test:integration": "node tests/run-all.mjs tests/integration",
+    "test:http": "node tests/run-all.mjs tests/http",
     "lint": "eslint .",
     "smoke": "node tests/smoke/smoke.mjs",
-    "bundle": "esbuild context-saver-mcp.js --bundle --platform=node --format=esm --outfile=dist/context-saver-mcp.bundle.js --banner:js=\"#!/usr/bin/env node\""
+    "bundle": "esbuild context-saver-mcp.js --bundle --platform=node --format=esm --outfile=dist/context-saver-mcp.bundle.js --banner:js=\"import { createRequire } from 'node:module'; const require = createRequire(import.meta.url);\""
   },
   "keywords": [
     "mcp",