mcpscraper-memory 1.18.0 → 1.19.0

package/CHANGELOG.md

@@ -4,6 +4,25 @@ All notable changes to MCP Memory are documented here. The format is based on [K
 
 ## [Unreleased]
 
+## [1.19.0] - 2026-08-27
+
+### Added
+
+- Added authenticated MCP Scraper artifact resolution for Gmail file and image attachments, with owner binding, filename and MIME preservation, a 25 MiB ceiling, and SHA-256 verification before private storage.
+- Added generated `file_asset_save` and `file_asset_get` contracts to the hosted and standalone Memory server alongside the existing image tools.
+
+### Changed
+
+- Gmail attachment replay now uses stable source references so the same provider part deduplicates even when an upstream aggregate artifact receives a new ID.
+- Pinned the corrected database package and omitted source maps from the public npm artifact.
+- Hosted builds now fail unless the generated Vercel function contains and can import the exact released database and tools dependencies.
+
+## [1.18.1] - 2026-08-13
+
+### Fixed
+
+- Build the standalone stdio CLI automatically before packing and publishing so the npm artifact contains its declared executable and source map.
+
 ## [1.18.0] - 2026-08-13
 
 ### Added
@@ -166,7 +185,8 @@ All notable changes to MCP Memory are documented here. The format is based on [K
 - The hosted service now consumes `mcpscraper-memory-db` 1.5 and `mcpscraper-memory-tools` 1.6, aligning direct OAuth and stdio clients with the current 14-vault Smart RAG contract, including bounded multi-query retrieval, graph expansion, and Jina reranking metadata.
 - Server guidance now documents the Skills vault and the exact hybrid retrieval workflow exposed by `memory-search`.
 
-[Unreleased]: https://github.com/VilovietaSEO/mcp-memory/compare/v1.18.0...HEAD
+[Unreleased]: https://github.com/VilovietaSEO/mcp-memory/compare/v1.18.1...HEAD
+[1.18.1]: https://github.com/VilovietaSEO/mcp-memory/compare/v1.18.0...v1.18.1
 [1.18.0]: https://github.com/VilovietaSEO/mcp-memory/compare/v1.17.2...v1.18.0
 [1.17.2]: https://github.com/VilovietaSEO/mcp-memory/compare/v1.17.1...v1.17.2
 [1.17.1]: https://github.com/VilovietaSEO/mcp-memory/compare/v1.17.0...v1.17.1

package/dist/bin/mcp-stdio-server.js

@@ -0,0 +1,122 @@
+#!/usr/bin/env node
+
+// bin/mcp-stdio-server.ts
+import { readFileSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { ListToolsRequestSchema, CallToolRequestSchema } from "@modelcontextprotocol/sdk/types.js";
+
+// src/version.ts
+var PACKAGE_VERSION = "1.19.0";
+
+// bin/mcp-stdio-server.ts
+var wantsHelp = process.argv.includes("--help") || process.argv.includes("-h");
+var forceStdio = process.argv.includes("--stdio") || process.env.MCP_MEMORY_FORCE_STDIO === "1";
+var interactiveTerminal = Boolean(process.stdin.isTTY && process.stdout.isTTY);
+function readApiKeyFile() {
+  const explicitPath = process.env.MCP_MEMORY_KEY_PATH?.trim();
+  const paths = [explicitPath, join(homedir(), ".mcp-memory-key")].filter(Boolean);
+  for (const path of paths) {
+    try {
+      const value = readFileSync(path, "utf8").trim();
+      if (value) return value;
+    } catch {
+    }
+  }
+  return void 0;
+}
+var apiKey = (process.env.MCP_MEMORY_API_KEY ?? process.env.MCP_MEMORY_KEY ?? readApiKeyFile())?.trim();
+function renderHelp() {
+  const status = apiKey ? "configured" : "NOT configured";
+  return [
+    `mcp-memory v${PACKAGE_VERSION} \u2014 local stdio bridge to memory.mcpscraper.dev`,
+    "",
+    `API key: ${status}`,
+    "",
+    "This package is a thin proxy: every tool call is forwarded over HTTPS to",
+    "your hosted mcp-memory account, the same one used by the OAuth remote",
+    "connector. Nothing runs or is stored locally.",
+    "",
+    "Setup:",
+    "  1. Get your key from memory.mcpscraper.dev (or the mobile automations link).",
+    "  2. Set it: export MCP_MEMORY_API_KEY=mk_...",
+    "     (or write it to ~/.mcp-memory-key)",
+    "  3. Add to your MCP client config:",
+    '     { "command": "npx", "args": ["-y", "mcpscraper-memory"],',
+    '       "env": { "MCP_MEMORY_API_KEY": "mk_..." } }',
+    "",
+    "Flags: --stdio (skip this screen and run directly), --help",
+    ""
+  ].join("\n");
+}
+if (!forceStdio && (interactiveTerminal || wantsHelp)) {
+  process.stdout.write(renderHelp());
+  process.exit(0);
+}
+if (!apiKey) {
+  process.stderr.write("MCP_MEMORY_API_KEY env var or ~/.mcp-memory-key is required\n");
+  process.exit(1);
+}
+var baseUrl = (process.env.MCP_MEMORY_BASE_URL?.trim() || "https://memory.mcpscraper.dev").replace(/\/$/, "");
+var remoteUrl = `${baseUrl}/mcp`;
+var rpcId = 0;
+function parseRpcBody(text) {
+  const dataLine = text.split("\n").find((line) => line.startsWith("data:"));
+  const payload = dataLine ? dataLine.slice(5).trim() : text;
+  return JSON.parse(payload);
+}
+async function rpc(method, params) {
+  const res = await fetch(remoteUrl, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Accept: "application/json, text/event-stream",
+      Authorization: `Bearer ${apiKey}`
+    },
+    body: JSON.stringify({ jsonrpc: "2.0", id: ++rpcId, method, params })
+  });
+  const text = await res.text();
+  if (!res.ok) {
+    throw new Error(`mcp-memory HTTP ${res.status}: ${text.slice(0, 500)}`);
+  }
+  const body = parseRpcBody(text);
+  if (body.error) throw new Error(body.error.message ?? "remote mcp-memory error");
+  return body.result;
+}
+async function main() {
+  let remoteInfo = {};
+  try {
+    remoteInfo = await rpc("initialize", {
+      protocolVersion: "2025-06-18",
+      capabilities: {},
+      clientInfo: { name: "mcp-memory-stdio-proxy", version: PACKAGE_VERSION }
+    });
+  } catch (err) {
+    process.stderr.write(`Failed to reach ${remoteUrl}: ${err instanceof Error ? err.message : String(err)}
+`);
+    process.exit(1);
+  }
+  const server = new Server(
+    { name: "mcp-memory", version: PACKAGE_VERSION },
+    { capabilities: { tools: {} }, instructions: remoteInfo.instructions }
+  );
+  server.setRequestHandler(ListToolsRequestSchema, async () => {
+    const result = await rpc("tools/list");
+    return { tools: result.tools };
+  });
+  server.setRequestHandler(CallToolRequestSchema, async (request) => {
+    return await rpc("tools/call", {
+      name: request.params.name,
+      arguments: request.params.arguments
+    });
+  });
+  const transport = new StdioServerTransport();
+  await server.connect(transport);
+}
+main().catch((err) => {
+  process.stderr.write(`${err instanceof Error ? err.message : String(err)}
+`);
+  process.exit(1);
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mcpscraper-memory",
-  "version": "1.18.0",
+  "version": "1.19.0",
   "description": "mcp-memory — a hosted, multi-tenant, access-controlled per-user Obsidian/Neon memory exposed AS an MCP server, with a scheduled optimization layer. Its own standalone MCP product.",
   "type": "module",
   "bin": {
@@ -22,8 +22,9 @@
   },
   "scripts": {
     "dev": "mastra dev",
-    "build": "mastra build",
+    "build": "mastra build && node scripts/verify-mastra-build.mjs",
     "build:cli": "tsup",
+    "prepack": "npm run build:cli",
     "test": "node --import tsx --test tests/*.test.mjs src/mastra/mcp/tools/*.test.ts",
     "typecheck": "tsc --noEmit"
   },
@@ -33,8 +34,8 @@
     "@mastra/mcp": "latest",
     "@mastra/pg": "latest",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "mcpscraper-memory-db": "1.14.0",
-    "mcpscraper-memory-tools": "1.15.0",
+    "mcpscraper-memory-db": "1.15.1",
+    "mcpscraper-memory-tools": "1.16.0",
     "zod": "^3.25.0"
   },
   "devDependencies": {