Merge pull request #7 from celstnblacc/chore/release-v1.0.4

chore: release v1.0.4
2026-03-31 13:21:57 +02:00 · 2026-03-31 13:19:31 +02:00 · 2026-03-31 13:18:12 +02:00 · 2026-03-31 13:14:25 +02:00 · 2026-03-30 22:42:46 +02:00
4 changed files with 21 additions and 19 deletions
@@ -5,6 +5,12 @@ Format: [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)

 ## [Unreleased]

+## [1.0.3] - 2026-03-30
+
+### Fixed
+- Global install crash (`Schema method literal must be a string`) — upgraded `zod` from `3.25.5` to `^4.3.6` so the package uses real zod v4 rather than falling back to zod 3.x's v4 compatibility shim, which lacks the `.value` getter required by `@modelcontextprotocol/sdk@1.26.0`
+- `z.record(z.any())` call updated to `z.record(z.string(), z.any())` to satisfy zod v4's stricter record key-type requirement
+
 ## [1.0.2] - 2026-03-30

 ### Added
@@ -96,3 +102,8 @@ Format: [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)

 ### Fixed
 - Labels stored as label.text (e.g. from MCP updates) now survive page refresh — expandLabelsToNative pre-converts them to bound text before Excalidraw renders
+
+## [1.0.4] - 2026-03-31
+
+### Fixed
+- `npm install -g excalidraw-mcp-sentinel` crashed on Windows — `postinstall` script used Unix-only `2>/dev/null || true` syntax which cmd.exe does not support; replaced with a cross-platform `node -e` inline script
@@ -1,12 +1,12 @@
 {
  "name": "excalidraw-mcp-sentinel",
-  "version": "1.0.1",
+  "version": "1.0.3",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "excalidraw-mcp-sentinel",
-      "version": "1.0.1",
+      "version": "1.0.3",
      "hasInstallScript": true,
      "license": "MIT",
      "dependencies": {
@@ -25,7 +25,7 @@
        "react-dom": "^18.3.1",
        "winston": "^3.11.0",
        "ws": "8.20.0",
-        "zod": "3.25.5",
+        "zod": "^4.3.6",
        "zod-to-json-schema": "^3.22.3"
      },
      "bin": {
@@ -1572,15 +1572,6 @@
        "node": ">= 0.6"
      }
    },
-    "node_modules/@modelcontextprotocol/sdk/node_modules/zod": {
-      "version": "4.3.6",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-4.3.6.tgz",
-      "integrity": "sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==",
-      "license": "MIT",
-      "funding": {
-        "url": "https://github.com/sponsors/colinhacks"
-      }
-    },
    "node_modules/@noble/hashes": {
      "version": "1.8.0",
      "resolved": "https://registry.npmjs.org/@noble/hashes/-/hashes-1.8.0.tgz",
@@ -9138,9 +9129,9 @@
      }
    },
    "node_modules/zod": {
-      "version": "3.25.5",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.5.tgz",
-      "integrity": "sha512-ualArhgJydGAKkSdtxQyu6RXFW8nHFKWaw20jey8UFXU9uzkHYqWXJ93Iz+hUVVJb37VpF4LCCsOOfj6xaCVRQ==",
+      "version": "4.3.6",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.3.6.tgz",
+      "integrity": "sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==",
      "license": "MIT",
      "peer": true,
      "funding": {
@@ -1,6 +1,6 @@
 {
  "name": "excalidraw-mcp-sentinel",
-  "version": "1.0.2",
+  "version": "1.0.4",
  "description": "Hardened, self-hosted Excalidraw MCP server with SQLite persistence, multi-tenancy, auto-sync, security middleware, and 369 tests",
  "main": "dist/index.js",
  "type": "module",
@@ -17,7 +17,7 @@
    "dev": "concurrently \"npm run dev:server\" \"vite\"",
    "dev:server": "npx tsc --watch",
    "production": "npm run build && npm run canvas",
-    "postinstall": "npm rebuild better-sqlite3 --update-binary 2>/dev/null || true",
+    "postinstall": "node -e \"const {execSync}=require('child_process');try{execSync('npm rebuild better-sqlite3 --update-binary',{stdio:'ignore'})}catch(e){}\"",
    "prepublishOnly": "npm run build",
    "setup": "node dist/index.js setup",
    "update": "node dist/index.js update",
@@ -47,7 +47,7 @@
    "react-dom": "^18.3.1",
    "winston": "^3.11.0",
    "ws": "8.20.0",
-    "zod": "3.25.5",
+    "zod": "^4.3.6",
    "zod-to-json-schema": "^3.22.3"
  },
  "devDependencies": {
@@ -378,7 +378,7 @@ const DistributeElementsSchema = z.object({

 const QuerySchema = z.object({
  type: z.enum(Object.values(EXCALIDRAW_ELEMENT_TYPES) as [ExcalidrawElementType, ...ExcalidrawElementType[]]).optional(),
-  filter: z.record(z.any()).optional()
+  filter: z.record(z.string(), z.any()).optional()
 });

 const ResourceSchema = z.object({
Author	SHA1	Message	Date
Maxime Roy (new.blacc)andGitHub	81f38de508	Merge pull request #7 from celstnblacc/chore/release-v1.0.4 chore: release v1.0.4	2026-03-31 13:21:57 +02:00
newblaccandClaude Sonnet 4.6	80c82665ea	chore: release v1.0.4 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-31 13:19:31 +02:00
Maxime Roy (new.blacc)andGitHub	d020459e90	Merge pull request #6 from celstnblacc/fix/windows-postinstall fix: make postinstall cross-platform for Windows	2026-03-31 13:18:12 +02:00
newblaccandClaude Sonnet 4.6	ae52198729	fix: make postinstall script cross-platform for Windows compatibility Replace Unix-only `2>/dev/null \|\| true` with a `node -e` inline script that silently ignores better-sqlite3 rebuild failures on all platforms. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-31 13:14:25 +02:00
newblaccandClaude Sonnet 4.6	c368d4088a	fix: upgrade zod to v4 to fix global install crash @modelcontextprotocol/sdk@1.26.0 uses zod/v4 APIs (specifically z.literal().value getter). When installed globally, npm shared the project's zod@3.25.5 instead of the SDK's nested zod@4.3.6; the 3.25.5 v4 compat shim lacks the .value getter, throwing 'Schema method literal must be a string' on startup. Also updates z.record(z.any()) to z.record(z.string(), z.any()) for zod v4 strict record key typing. 446/446 tests passing. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-30 22:42:46 +02:00