vault-go 0.19.0 → 0.19.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -29,7 +29,7 @@ Chaves de API** uma chave apenas com `memory:read` e configure:
29
29
  ```sh
30
30
  export VAULT_GO_TOKEN='<chave-memory-read>'
31
31
  codex mcp add vault-go \
32
- --url https://vault.resolveup.com.br/api/mcp \
32
+ --url https://vaultmemoryai.com/api/mcp \
33
33
  --bearer-token-env-var VAULT_GO_TOKEN
34
34
  ```
35
35
 
@@ -40,7 +40,7 @@ Configuração genérica para clientes com transporte HTTP:
40
40
  "mcpServers": {
41
41
  "vault-go": {
42
42
  "type": "http",
43
- "url": "https://vault.resolveup.com.br/api/mcp",
43
+ "url": "https://vaultmemoryai.com/api/mcp",
44
44
  "headers": {
45
45
  "Authorization": "Bearer ${VAULT_GO_TOKEN}"
46
46
  }
package/dist/updater.js CHANGED
@@ -1,7 +1,7 @@
1
1
  import { execFile } from 'node:child_process';
2
2
  import { randomUUID } from 'node:crypto';
3
3
  import { chmodSync, closeSync, existsSync, lstatSync, mkdirSync, mkdtempSync, openSync, readFileSync, realpathSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync } from 'node:fs';
4
- import { delimiter, dirname, join, resolve, sep } from 'node:path';
4
+ import { delimiter, dirname, isAbsolute, join, resolve, sep } from 'node:path';
5
5
  import { fileURLToPath } from 'node:url';
6
6
  import { promisify } from 'node:util';
7
7
  const REGISTRY = 'https://registry.npmjs.org';
@@ -302,8 +302,14 @@ function validatePackage(root, version, container) {
302
302
  }
303
303
  function processOptions(directory) {
304
304
  // Allowlist instead of inheriting login credentials, NODE_OPTIONS or npm hooks/config.
305
+ // Keep the selected fnm/nvm/mise binaries discoverable, without allowing cwd or
306
+ // relative PATH entries to execute files from the downloaded staging directory.
307
+ const searchPath = [...new Set([
308
+ ...(process.env.PATH ?? '').split(delimiter).filter(entry => isAbsolute(entry) && !entry.includes('\0')),
309
+ dirname(process.execPath), '/opt/homebrew/bin', '/usr/local/bin', '/usr/bin', '/bin',
310
+ ])];
305
311
  const env = {
306
- PATH: [dirname(process.execPath), '/opt/homebrew/bin', '/usr/local/bin', '/usr/bin', '/bin'].join(delimiter),
312
+ PATH: searchPath.join(delimiter),
307
313
  NPM_CONFIG_USERCONFIG: join(directory, '.npmrc'),
308
314
  NPM_CONFIG_GLOBALCONFIG: join(directory, '.npmrc-global'),
309
315
  NPM_CONFIG_CACHE: join(directory, '.npm-cache'),
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "vault-go",
3
- "version": "0.19.0",
3
+ "version": "0.19.1",
4
4
  "description": "Servidor MCP universal com autenticação e instalação multi-cliente para a plataforma Vault.",
5
5
  "type": "module",
6
6
  "bin": {