th-memory-mcp 2.2.0 → 2.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1591,4 +1591,7 @@ All previously-deferred future features are implemented. AI-assisted extraction
1591
1591
  ## Release
1592
1592
  - v2.0.0: released — npm `th-memory-mcp@2.0.0` (latest), GitHub Release `v2.0.0`, Official MCP Registry `io.github.worakorn-prince/th-memory-mcp@2.0.0`, Glama listed.
1593
1593
  - v2.1.0: implemented and tested locally; publish skipped (superseded by v2.2.0).
1594
- - v2.2.0: tag + GitHub Release created by the build agent. **npm / Official MCP Registry / Glama publish pending** — requires the owner to re-authenticate (`npm login` / `mcp-publisher` GitHub OAuth) because the publish token expired.
1594
+ - v2.2.0: fully released — tag + GitHub Release, **npm published** (`th-memory-mcp@2.2.0`), Official MCP Registry auto-ingested from npm (manual `mcp-publisher publish` is redundant and errors `duplicate version`), Glama synced. Only `npm publish` + Glama Sync are required.
1595
+ - v2.2.1: Glama quality fix (server failed to start — better-sqlite3 native binding missing under pnpm 10 on Node 24). Added `pnpm.onlyBuiltDependencies: ["better-sqlite3"]` so pnpm runs the install script that downloads the Node 24 prebuild; bumped better-sqlite3 to `^12.9.0`; added `ip-address@^10.2.0` overrides (npm + pnpm) to clear transitive XSS via `@modelcontextprotocol/sdk`. No code changes. Pending `npm publish` + Glama re-test.
1596
+
1597
+ **Packaging note (Glama / Smithery):** these registries build with `pnpm install` + `pnpm run build` on **Node 24** and disable postinstall scripts by default (pnpm 10). Any native dependency (e.g. `better-sqlite3`) MUST be listed in `pnpm.onlyBuiltDependencies` in `package.json`, otherwise its native binary is never fetched and the server crashes at startup with `Could not locate the bindings file`.
package/design.md CHANGED
@@ -55,4 +55,5 @@
55
55
 
56
56
  ## Release
57
57
  - v2.0.0 ปล่อยแล้ว (npm, GitHub Release, Official MCP Registry, Glama)
58
- - v2.2.0 — tag + GitHub Release สร้างโดย build agent; `npm` / Official MCP Registry / Glama publish รอเจ้าของ re-auth (publish token หมดอายุ)
58
+ - v2.2.0 — ปล่อยครบ: tag + GitHub Release, **npm publish เรียบร้อย**, Official MCP Registry ดึงจาก npm อัตโนมัติ (ไม่ต้องรัน mcp-publisher แยก), Glama Sync เรียบร้อย
59
+ - v2.2.1 — แก้ Glama quality: เพิ่ม `pnpm.onlyBuiltDependencies: ["better-sqlite3"]` ให้ pnpm รันสคริปต์ดาวน์โหลด native binary สำหรับ Node 24, ขยับ better-sqlite3 เป็น `^12.9.0`, เพิ่ม override `ip-address@^10.2.0` (npm+pnpm) อุดช่องโหว่ XSS ผ่าน MCP SDK ไม่มีการเปลี่ยนโค้ด รอ `npm publish` + Glama ทดสอบใหม่
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "th-memory-mcp",
3
- "version": "2.2.0",
3
+ "version": "2.2.1",
4
4
  "mcpName": "io.github.worakorn-prince/th-memory-mcp",
5
5
  "description": "Adaptive Memory MCP server - SQLite-backed memory for OpenCode",
6
6
  "author": "worakorn-prince",
@@ -36,9 +36,20 @@
36
36
  },
37
37
  "dependencies": {
38
38
  "@modelcontextprotocol/sdk": "^1.0.0",
39
- "better-sqlite3": "^12.0.0",
39
+ "better-sqlite3": "^12.9.0",
40
40
  "zod": "^3.25.0"
41
41
  },
42
+ "overrides": {
43
+ "ip-address": "^10.2.0"
44
+ },
45
+ "pnpm": {
46
+ "onlyBuiltDependencies": [
47
+ "better-sqlite3"
48
+ ],
49
+ "overrides": {
50
+ "ip-address": "^10.2.0"
51
+ }
52
+ },
42
53
  "devDependencies": {
43
54
  "@types/better-sqlite3": "^7.6.0",
44
55
  "@types/node": "^22.0.0",