install.ps1 on main validates the extracted Windows archive against this allowlist:
codebase-memory-mcp.exe, cbm-integrations.json, LICENSE, install.ps1, THIRD_PARTY_NOTICES.md
Running the installer against the current latest release (v0.9.0) fails:
error: unsafe or incomplete release archive: archive must contain exactly one cbm-integrations.json
Checked release assets via GitHub API (/repos/DeusData/codebase-memory-mcp/releases/latest) — top-level assets are per-platform archives + checksums/bundles/sbom.json, no standalone cbm-integrations.json. Extracting codebase-memory-mcp-windows-amd64.zip locally confirms the file is absent inside the archive too.
Looks like install.ps1 on main drifted ahead of what v0.9.0 actually ships. Repro:
curl -fsSL https://raw.githubusercontent.com/DeusData/codebase-memory-mcp/main/install.ps1 -o install.ps1
powershell -ExecutionPolicy Bypass -File .\install.ps1
Windows, arch amd64.
install.ps1onmainvalidates the extracted Windows archive against this allowlist:Running the installer against the current latest release (v0.9.0) fails:
Checked release assets via GitHub API (
/repos/DeusData/codebase-memory-mcp/releases/latest) — top-level assets are per-platform archives + checksums/bundles/sbom.json, no standalonecbm-integrations.json. Extractingcodebase-memory-mcp-windows-amd64.ziplocally confirms the file is absent inside the archive too.Looks like
install.ps1onmaindrifted ahead of what v0.9.0 actually ships. Repro:Windows, arch amd64.