Fixed
- Turso browser OAuth on Windows now works. The login URL no longer goes through
cmd.exe, which truncated the query string at & and dropped redirect / state / type params. Browser launch on Windows now uses rundll32.exe url.dll,FileProtocolHandler (mcp-server/admin/auth.js).
- OAuth loopback race eliminated. The temporary server now binds an ephemeral port before the login URL is built, so the
port= in the URL is always the real one. This also removes EADDRINUSE failures on the old fixed port 48900.
- OAuth
state (CSRF) check preserved and covered: matching state → 200, mismatched → 400 with state parameter mismatch.
Tests
- Extended
tests/cloud/phase1_cloud.test.js: Windows launch spec (no cmd.exe, full query string preserved), loopback bind on port 0, state match/mismatch.
- Made
tests/unit/policy_retrieval.test.js offline-deterministic (generateEmbeddings: false, guaranteed DB/temp cleanup), so a corrupted ONNX cache no longer fails the whole suite and blocks the runner.
Also in this release (since v1.6.8)
- Website: landing page, Memory Matrix motion, grouped Quick Start (all-client + per-client), uninstall commands, GitHub Pages deploy (excluded from npm package).
- Docs: one-shot
npx workflow consistency, roadmap with web dashboard, README architecture visuals.
Upgrade
npm i -g @lotargo/memory_plugin@1.6.9
