mcp-3d-printer-server 1.2.17 → 1.2.19

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 1.2.19 — 2026-10-30
+
+### Fixed
+
+- Restore Node.js 18 support removed in 1.2.18. The MCP SDK's streamable HTTP transport calls the global `crypto`, which Node.js 18 lacks and `@hono/node-server` 2.x no longer installs; the server now provides it from `node:crypto` when missing. The package again declares Node.js 18 or newer and CI tests 18 through 24. Fresh npm installs on Node.js 18 resolve `@hono/node-server` 1.19.17, as they did for 1.2.18 apart from an engine warning. That version is inside GHSA-rmxm-3fg6-px4f's range, which affects only `serveStatic`; this server does not use it. Node.js 20 or newer installs the patched 2.1.5, which the repository lock keeps, so Node.js 18 CI and clones run it outside its declared Node.js 20 range. A regression starts the HTTP and SSE entrypoints without the global; the full suite and packed-install test pass on Node.js 18.20.8 and 24. Offline tests only; no printer is contacted.
+
+## 1.2.18 — 2026-10-30
+
+### Changed
+
+- Require Node.js 20 or newer. Node.js 18 reached end-of-life in April 2025, and the patched `@hono/node-server` relies on the global Web Crypto API that Node.js 18 does not expose by default, so streamable HTTP fails there. CI now tests Node.js 20, 22 and 24.
+
+### Dependencies
+
+- Refresh the installation lock to `@hono/node-server` 2.1.5 for GHSA-rmxm-3fg6-px4f using `npm audit fix` without forcing dependency ranges. The MCP SDK already accepts this version. The updated dependency declares Node 20 or newer; no patched 1.x release is available. This lock controls reproducible installs, not existing consumers’ locks. Validation uses offline tests and mocked transports; no printer is contacted.
+
 ## 1.2.17 — 2026-10-27
 
 ### Fixed

package/dist/ensure-web-crypto.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/ensure-web-crypto.js

@@ -0,0 +1,12 @@
+// Node.js 18 exposes Web Crypto only as node:crypto's webcrypto, but the MCP
+// SDK's streamable HTTP transport calls the global crypto, which
+// @hono/node-server 2.x no longer installs. Newer Node.js already provides it.
+import { webcrypto } from "node:crypto";
+if (typeof globalThis.crypto === "undefined") {
+    Object.defineProperty(globalThis, "crypto", {
+        value: webcrypto,
+        configurable: true,
+        enumerable: false,
+        writable: true,
+    });
+}

package/dist/index.d.ts

@@ -1,2 +1,2 @@
 #!/usr/bin/env node
-export {};
+import "./ensure-web-crypto.js";

package/dist/index.js

@@ -1,4 +1,6 @@
 #!/usr/bin/env node
+// Must stay first: Node.js 18 needs the global crypto before any SDK transport code runs.
+import "./ensure-web-crypto.js";
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "mcp-3d-printer-server",
     "mcpName": "io.github.DMontgomery40/mcp-3d-printer-server",
-    "version": "1.2.17",
+    "version": "1.2.19",
     "description": "MCP server for connecting Claude with 3D printer management systems",
     "main": "dist/index.js",
     "repository": "https://github.com/DMontgomery40/mcp-3D-printer-server",
@@ -41,6 +41,8 @@
         "dist/test",
         "dist/types.d.ts",
         "dist/types.js",
+        "dist/ensure-web-crypto.d.ts",
+        "dist/ensure-web-crypto.js",
         "src/3mf_parser.ts",
         "src/fulu-orca.ts",
         "src/http-server.ts",
@@ -55,6 +57,7 @@
         "src/test/stl-manipulator-test.ts",
         "src/test/tsconfig.json",
         "src/types.ts",
+        "src/ensure-web-crypto.ts",
         "README.md",
         "LICENSE",
         "dist/blender-mcp-bridge.js",

package/server.json

@@ -7,12 +7,12 @@
     "url": "https://github.com/DMontgomery40/mcp-3D-printer-server",
     "source": "github"
   },
-  "version": "1.2.17",
+  "version": "1.2.19",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "mcp-3d-printer-server",
-      "version": "1.2.17",
+      "version": "1.2.19",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"

package/src/ensure-web-crypto.ts

@@ -0,0 +1,13 @@
+// Node.js 18 exposes Web Crypto only as node:crypto's webcrypto, but the MCP
+// SDK's streamable HTTP transport calls the global crypto, which
+// @hono/node-server 2.x no longer installs. Newer Node.js already provides it.
+import { webcrypto } from "node:crypto";
+
+if (typeof globalThis.crypto === "undefined") {
+  Object.defineProperty(globalThis, "crypto", {
+    value: webcrypto,
+    configurable: true,
+    enumerable: false,
+    writable: true,
+  });
+}

package/src/index.ts

@@ -1,5 +1,7 @@
 #!/usr/bin/env node
 
+// Must stay first: Node.js 18 needs the global crypto before any SDK transport code runs.
+import "./ensure-web-crypto.js";
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";