Skip to content

v0.7.11 — npm publish + Railway template deploy fix

Choose a tag to compare

View all tags
@yuens1002 yuens1002 released this 01 Jul 17:38
v0.7.11
e26b950
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  • fix(workflow): move npm publish to its own workflow, untangled from the GHCR job's paths filter so it always runs on version-tag pushes; skip on tag deletion; verify the tag matches package.json's version before publishing
  • fix(deploy): point README's Railway deploy badge at a real Railway Template link; the prior railway.app/new?image=... URL isn't a supported Railway deploy mechanism and just opened the generic new-project picker
  • fix(workflow): switch railway redeploy from webhook to railway cli
  • feat(workflow): add npm publish job; publishes to npm on version tag push
  • fix(workflow): remove railway redeploy step; railway auto-deploys from GitHub source
  • feat(p6): add npm run setup, ghcr publish workflow, railway one-click deploy badge

Changed

  • src/lib/auth.ts: requireAuth() now returns { ok: false } when BOOKIE_API_KEY is unset rather than { ok: true }, so OAuth JWT callers are correctly validated instead of being silently passed through.
  • src/transports/http.ts: HTTP transport now refuses to start unless at least BOOKIE_API_KEY or JWT_SECRET is configured — prevents accidentally deploying an unauthenticated financial endpoint.
  • src/transports/http.ts: /authorize now returns 500 server_error when OAUTH_CLIENT_SECRET is unset — prevents any visitor from completing the OAuth flow on an unconfigured server.
  • Renamed npm package from bookie to bookie-mcp; set "private": false to enable npm publishing; updated bin key to bookie-mcp.

Fixed

  • import_transactions: CC/card (liability) accounts now produce correct double-entry postings.
  • Receipt file upload "Region is missing" error fixed for Railway Bucket.

Full Changelog: v0.7.0...v0.7.11

Assets 2
Loading