This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Affected surfaces
Summary
AI summaryFixed Docker build failure by allowing npm scripts to run, adding missing env-var declarations in server.json, and updating README.
Full changelog
[1.3.1] — 2026-04-24
Post-1.3.0 audit fixes. No engine behavior change; three real gaps found and closed.
Fixed
- Dockerfile build broken for Day-2 features. Removed
--ignore-scriptsfrom bothnpm ciinvocations sobetter-sqlite3'sprebuild-installstep runs and the native.nodebinary actually lands in the image. Without this, memory + pack features would crash at container startup.packs/is now also copied into the runtime stage. server.jsonwas missing the 1.3.0 env-var declarations. AddedEMBED_API_URL,EMBED_API_KEY,EMBED_MODEL,EMBED_DIMENSION, plus the canonicalCLARIFYPROMPT_HOMEthat should have been declared in 1.2.0. MCP Registry now prompts for the right variables on install.- README env-var reference table didn't list
EMBED_*. They were documented in.env.exampleandCHANGELOGbut not the main table. Fixed.
Notes
- No behavior changes in the optimize / memory / reflection / pack paths — purely packaging + metadata.
- Users already on 1.3.0 via
npxwon't experience any functional difference; users running in Docker containers will — 1.3.0's Dockerfile was broken, 1.3.1's works. glama.jsonand GitHub Issues reviewed — nothing to update.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About LumabyteCo/clarifyprompt-mcp
MCP server for AI prompt optimization — transforms vague prompts into platform-optimized prompts for 58+ AI platforms across 7 categories (image, video, voice, music, code, chat, document).
Related context
Beta — feedback welcome: [email protected]