memtrails 0.4.1 → 0.4.2

package/CHANGELOG.md

@@ -5,6 +5,12 @@ versions follow [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [0.4.2] — 2026-11-05
+
+- Fixes: the first start no longer fails when run as root (as in most containers) with "is not this user's alone":
+  the downloaded Qdrant binary was unpacked with the archive's owner and then refused. TypeScript and Python; the Rust
+  version was not affected and is released at the same version.
+
 ## [0.4.1] — 2026-11-05
 
 - Native Python (`pip install memtrails`, asyncio) and Rust (`cargo add memtrails`, tokio) versions, with the same

package/dist/core/qdrant-binary.js

@@ -77,10 +77,13 @@ export function qdrantReady(a = qdrantAsset()) {
 function tarProgram() {
     return process.platform === 'win32' ? join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'tar.exe') : 'tar';
 }
-/** Unpack one archive with the system's tar (bsdtar on macOS and Windows reads zip too). */
+/**
+ * Unpack one archive with the system's tar (bsdtar on macOS and Windows reads zip too). Run as root, tar would give
+ * the files the archive's owner, and the binary would then not be this user's alone.
+ */
 function untar(archive, into) {
     return new Promise((resolve, reject) => {
-        const child = spawn(tarProgram(), ['-xf', archive, '-C', into], { stdio: 'ignore' });
+        const child = spawn(tarProgram(), ['--no-same-owner', '-xf', archive, '-C', into], { stdio: 'ignore' });
         child.once('error', reject);
         child.once('exit', (code) => (code === 0 ? resolve() : reject(new Error(`tar exited ${code}`))));
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "memtrails",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "description": "Retrieval and exploration for any text — e-mail, chat, notes, documents, news, commits, conversations. Searchable at once, on your own machine, in any language; optional consolidation into typed knowledge with a language model.",
   "keywords": [
     "retrieval",