refactor(ci): point Forgejo URLs at torrentclaw org (post-transfer)

Repos were transferred from the deivid user to a dedicated torrentclaw
organisation; the workflows reference the org path.

.forgejo/workflows/ci.yml

@@ -12,33 +12,33 @@ permissions:
 jobs:
   lint-commits:
     name: Lint commits
-    runs-on: ubuntu-latest
+    runs-on: docker
+    container:
+      image: docker.io/library/node:22
     if: github.event_name == 'pull_request'
     steps:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "22"
-
       - name: Install dependencies
         run: npm ci
 
       - name: Validate conventional commits
-        run: npx commitlint --from ${{ github.event.pull_request.base.sha }} --to ${{ github.event.pull_request.head.sha }} --verbose
+        run: |
+          npx commitlint \
+            --from ${{ github.event.pull_request.base.sha }} \
+            --to ${{ github.event.pull_request.head.sha }} \
+            --verbose
 
   build-and-test:
     name: Build & test
-    runs-on: ubuntu-latest
+    runs-on: docker
+    container:
+      image: docker.io/library/node:22
     steps:
       - uses: actions/checkout@v4
 
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "22"
-
       - name: Install dependencies
         run: npm ci
 

.forgejo/workflows/release.yml

@@ -0,0 +1,68 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    runs-on: docker
+    container:
+      image: docker.io/library/node:22
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build
+        run: npm run build
+
+      - name: Test
+        run: npm test
+
+      - name: Publish to npm
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: |
+          # Set authToken explicitly — actions/setup-node was the only consumer
+          # of registry-url + NODE_AUTH_TOKEN, and we dropped it for Forgejo
+          # compat. The literal npmjs registry stays the same.
+          cat > ~/.npmrc <<EOF
+          registry=https://registry.npmjs.org/
+          //registry.npmjs.org/:_authToken=${NODE_AUTH_TOKEN}
+          EOF
+          npm publish
+          rm -f ~/.npmrc
+
+      - name: Create Forgejo release with auto-generated notes
+        env:
+          FORGEJO_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          FORGEJO_API: http://forgejo:3000/api/v1
+          REPO: torrentclaw/torrentclaw-mcp
+          TAG: ${{ github.ref_name }}
+        run: |
+          set -euo pipefail
+          apt-get update && apt-get install -y --no-install-recommends jq curl
+
+          # Compose release body from commits since the previous tag.
+          prev=$(git describe --tags --abbrev=0 "${TAG}^" 2>/dev/null || echo "")
+          if [ -n "$prev" ]; then
+            notes=$(git log --pretty=format:'- %s' "${prev}..${TAG}")
+          else
+            notes=$(git log --pretty=format:'- %s' "${TAG}")
+          fi
+          body=$(jq -n --arg t "$TAG" --arg n "$notes" \
+            '{tag_name:$t, name:$t, body:$n, draft:false, prerelease:false}')
+          curl -sSf -X POST "$FORGEJO_API/repos/$REPO/releases" \
+            -H "Authorization: token $FORGEJO_TOKEN" \
+            -H "Content-Type: application/json" \
+            -d "$body" >/dev/null || \
+            echo "Release may already exist for $TAG"

.github/workflows/release.yml

@@ -1,41 +0,0 @@
-name: Release
-
-on:
-  push:
-    tags:
-      - "v*"
-
-permissions:
-  contents: write
-
-jobs:
-  release:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "22"
-          registry-url: "https://registry.npmjs.org"
-
-      - name: Install dependencies
-        run: npm ci
-
-      - name: Build
-        run: npm run build
-
-      - name: Test
-        run: npm test
-
-      - name: Publish to npm
-        run: npm publish
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-
-      - name: GitHub Release
-        uses: softprops/action-gh-release@v2
-        with:
-          generate_release_notes: true

CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable changes to this project will be documented in this file. See [commit-and-tag-version](https://github.com/absolute-version/commit-and-tag-version) for commit guidelines.
 
+## [0.2.2](https://github.com/torrentclaw/torrentclaw-mcp/compare/v0.2.1...v0.2.2) (2026-02-16)
+
+### Features
+
+- add glama.json and smithery.yaml for directory listings ([06865a2](https://github.com/torrentclaw/torrentclaw-mcp/commit/06865a2abda420567af7fb3d5046b29ea7de6060))
+
+### Bug Fixes
+
+- update qs to 6.15.0 to resolve CVE denial of service vulnerability ([657910a](https://github.com/torrentclaw/torrentclaw-mcp/commit/657910ad357f14f651d1af1afec0c0cda64513f5))
+
+## [0.2.1](https://github.com/torrentclaw/torrentclaw-mcp/compare/v0.2.0...v0.2.1) (2026-02-12)
+
 ## [0.2.0](https://github.com/torrentclaw/torrentclaw-mcp/compare/v0.1.0...v0.2.0) (2026-02-12)
 
 ### Features

LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 buryni
+Copyright (c) 2026 Deivid Soto
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

glama.json

@@ -0,0 +1,4 @@
+{
+  "$schema": "https://glama.ai/mcp/schemas/server.json",
+  "maintainers": ["torrentclaw", "eividsoto"]
+}

package-lock.json

@@ -1,12 +1,12 @@
 {
-  "name": "torrentclaw-mcp",
-  "version": "0.2.0",
+  "name": "@torrentclaw/mcp",
+  "version": "0.2.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
-      "name": "torrentclaw-mcp",
-      "version": "0.2.0",
+      "name": "@torrentclaw/mcp",
+      "version": "0.2.2",
       "license": "MIT",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.12.0",
@@ -5003,9 +5003,9 @@
       }
     },
     "node_modules/qs": {
-      "version": "6.14.1",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.1.tgz",
-      "integrity": "sha512-4EK3+xJl8Ts67nLYNwqw/dsFVnCf+qR7RgXSK9jEEm9unao3njwMDdmsdvoKBKHzxd7tCYz5e5M+SnMjdtXGQQ==",
+      "version": "6.15.0",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.0.tgz",
+      "integrity": "sha512-mAZTtNCeetKMH+pSjrb76NAM8V9a05I9aBZOHztWy/UqcJdQYNsf59vrRKWnojAT9Y+GbIvoTBC++CPHqpDBhQ==",
       "license": "BSD-3-Clause",
       "dependencies": {
         "side-channel": "^1.1.0"

package.json

@@ -1,10 +1,10 @@
 {
-  "name": "torrentclaw-mcp",
-  "version": "0.2.0",
+  "name": "@torrentclaw/mcp",
+  "version": "0.2.2",
   "description": "MCP server for TorrentClaw — search and discover movies and TV shows with torrent downloads, magnet links, streaming availability, and cast/crew metadata",
   "type": "module",
   "bin": {
-    "torrentclaw-mcp": "./build/index.js"
+    "torrentclaw-mcp": "build/index.js"
   },
   "main": "./build/index.js",
   "files": [
@@ -48,7 +48,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/torrentclaw/torrentclaw-mcp"
+    "url": "git+https://github.com/torrentclaw/torrentclaw-mcp.git"
   },
   "homepage": "https://github.com/torrentclaw/torrentclaw-mcp#readme",
   "bugs": {

smithery.yaml

@@ -0,0 +1 @@
+runtime: "typescript"