proton-drive-mcp 1.0.38 → 1.0.39
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +14 -0
- package/package.json +2 -2
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,19 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 1.0.39 — 2026-09-26
|
|
4
|
+
|
|
5
|
+
Test-suite hardening only — no `src/` changes, no behavior change.
|
|
6
|
+
|
|
7
|
+
A parallel verification round re-tested every claim in the v1.0.37 changelog live against a real account, re-audited its safety mechanisms adversarially, re-checked process lifecycle after the v1.0.38 dependency bump, verified the CI/publish pipeline and package integrity end to end, and mutation-tested the v1.0.37 test suite itself. Verdict: no regressions, no new bugs — but the round surfaced two real gaps in the *tests*, both now closed.
|
|
8
|
+
|
|
9
|
+
### Fixed
|
|
10
|
+
- **Flaky full test-suite runs.** `node --test test/*.test.mjs` defaulted to unbounded per-file concurrency (14 on a typical machine); several files spawn real `dist/index.js`/`dist/cli.js` processes against a fake CLI over stdio, and running enough of them at once caused occasional resource-contention failures (`server exited before reply`, spurious CLI-call-count assertions) — about 1 run in 10, never on a standalone file. Capped to `--test-concurrency=4`; 20 consecutive full-suite runs since (5 by hand, 15 by the fixing agent) are all clean at 418/418, for about a 1-second cost.
|
|
11
|
+
- **5 of 6 low-severity coverage gaps** found by mutation-testing the v1.0.37 safety code, now covered: the `confirmed`-gate refusal message is asserted distinct from a schema-type error; `checkArgs`'s `limit`/`offset` boundaries (1, 1000, 1001, 0, -1) are exercised exactly at the edge; `paginate()`'s `hasMore` is tested at an exact page boundary, a partial last page, and an empty result; `move()` rejects a rename to a destination name containing an escaped `\/` before any CLI call, while a same-name cross-folder move with `\/` in it still succeeds; a non-string element in `photoPaths` is rejected before reaching the CLI. The sixth gap — a true time-of-check-to-time-of-use race in `syncfs.ts`'s read-size recheck — isn't reproducible as a black-box unit test without instrumenting `src/`, and is left as a known, real but very narrow residual gap.
|
|
12
|
+
|
|
13
|
+
### Still outstanding (GitHub owner settings, not code)
|
|
14
|
+
- Branch protection on `main` is not enabled.
|
|
15
|
+
- Dependabot security updates are disabled.
|
|
16
|
+
|
|
3
17
|
## 1.0.38 — 2026-09-21
|
|
4
18
|
|
|
5
19
|
Dependency refresh only — no source changes.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "proton-drive-mcp",
|
|
3
|
-
"version": "1.0.
|
|
3
|
+
"version": "1.0.39",
|
|
4
4
|
"description": "MCP server and CLI that gives Claude full access to Proton Drive — upload, download, share, and manage your end-to-end encrypted files without leaving the conversation.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "dist/index.js",
|
|
@@ -18,7 +18,7 @@
|
|
|
18
18
|
"dev": "tsc --watch",
|
|
19
19
|
"start": "node dist/index.js",
|
|
20
20
|
"cli": "npm run build && node dist/cli.js",
|
|
21
|
-
"test": "npm run build && node --test test/*.test.mjs",
|
|
21
|
+
"test": "npm run build && node --test --test-concurrency=4 test/*.test.mjs",
|
|
22
22
|
"lint": "tsc --noEmit",
|
|
23
23
|
"clean": "rm -rf dist",
|
|
24
24
|
"ci": "npm run lint && npm test",
|