Skip to content

Releases

v1.2.0 - Query Builder, Security Fixes & OAuth Modernization

Choose a tag to compare

@randynov randynov released this 23 Jan 18:36
3b0bd02

🔒 Security

  • Fix incomplete query escaping in Drive API - Added backslash escaping to escapeQueryValue() per Google Drive API requirements. Both backslashes and single quotes must be escaped in query strings.
  • Fix query injection in listSharedDrives - Use buildSearchClause() instead of inline interpolation to prevent malicious input from bypassing filters.

✨ Features

  • Expose createdAfter parameter for temporal filtering - Add createdAfter parameter to listGoogleDocs, searchGoogleDocs, and listGoogleSheets for time-based filtering.
  • Modernize OAuth flow and improve onboarding UX - Replace deprecated OAuth OOB flow with localhost callback server that automatically captures authorization codes. Add health check command for setup validation.

🐛 Bug Fixes

  • Make server.js executable for npx - Add postbuild script to chmod +x dist/server.js after TypeScript compilation.
  • Move assets to docs folder for GitHub Pages - Fix 404s by relocating assets to /docs/assets/ and updating image paths.
  • Use PNG icons consistently in landing page - Changed from inline SVG to PNG images for Google Workspace icons. Fixed GitHub icon paths.
  • Replace invalid Apps Script icon with valid PNG - Downloaded correct icon from Google CDN URL.
  • Correct GitHub icon paths in landing page - Fixed relative paths for GitHub Pages deployment.

📚 Documentation

  • Restructure documentation and simplify README - Complete documentation overhaul reducing README by 61% (408→159 lines). Created dedicated docs for setup, usage, limitations, and troubleshooting.
  • Rewrite README and landing page with Starfysh branding - Updated marketing copy to align with Starfysh brand voice. Replaced superlatives with clean, professional language.
  • Update Claude-Mem context with recent refactoring work - Update context tracking to reflect query builder refactoring and pagination improvements.
  • Add Claude context files and update gitignore - Add Claude-Mem context tracking files for src/ and tests/ directories.

🔧 Other Changes

  • Add pagination messages and query builder helper - Extract query building logic to src/queryBuilders.ts with pagination info messages for 7 list operations. Add query injection protection via escapeQueryValue.
  • Replace GitHub PNG icons with cleaner SVG - Use inline SVG for sharper rendering at all sizes with better text alignment.
  • Improve UX, accessibility, and add copy buttons - Increase contrast ratio for WCAG AA compliance, add keyboard focus indicators, copy buttons to code blocks, and prefers-reduced-motion support.
  • Implement Developer Terminal aesthetic - Complete landing page redesign with dark mode terminal aesthetic including animated scanlines, glowing orange effects, and terminal-style feature cards.