fix(appsignal): fix npm package permissions for npx execution (v0.2.13)

- Updated files field in package.json to use specific glob patterns instead of entire directories
- This prevents 'Permission denied' errors when running npx appsignal-mcp-server
- Bumped version from 0.2.12 to 0.2.13
- Added learning to CLAUDE.md about proper npm package file patterns

Author: tadasant

CLAUDE.md

@@ -352,6 +352,7 @@ Don't add: basic TypeScript fixes, standard npm troubleshooting, obvious file op
 - **Manual Testing Before Publishing**: Always run manual tests (with real API credentials) before staging a version bump to ensure the server works correctly with external APIs
 - **Git Tag Format for Version Bumps**: When creating git tags for version bumps, use the format `package-name@version` (e.g., `appsignal-mcp-server@0.2.12`, `@pulsemcp/pulse-fetch@0.2.10`). The CI verify-publications workflow expects this exact format, not `server-name-vX.Y.Z`
 - **Manual Testing and CI**: The verify-publications CI check requires that MANUAL_TESTING.md references a commit that's in the PR's history. If you make any commits after running manual tests (even just test fixes), the CI will fail. For test-only fixes, this is a known limitation that doesn't require re-running manual tests
+- **npm Package Files Field**: When specifying files to include in npm packages, use specific glob patterns (e.g., `"build/**/*.js"`) rather than entire directories (e.g., `"build/"`) to ensure proper file permissions and avoid including non-executable files. This prevents "Permission denied" errors when users run the package with npx
 
 ### Manual Testing Infrastructure
 

README.md

@@ -29,7 +29,7 @@ These are high-quality servers that we may discontinue if the official provider
 
 | Name                                   | Description                                                     | Local Status | Remote Status | Target Audience                                       | Notes                                                                |
 | -------------------------------------- | --------------------------------------------------------------- | ------------ | ------------- | ----------------------------------------------------- | -------------------------------------------------------------------- |
-| [appsignal](./experimental/appsignal/) | AppSignal application performance monitoring and error tracking | 0.2.12       | Not Started   | Developers using AppSignal for application monitoring | Requires AppSignal API key; NOT officially affiliated with AppSignal |
+| [appsignal](./experimental/appsignal/) | AppSignal application performance monitoring and error tracking | 0.2.13       | Not Started   | Developers using AppSignal for application monitoring | Requires AppSignal API key; NOT officially affiliated with AppSignal |
 | [twist](./experimental/twist/)         | Twist team messaging and collaboration platform integration     | 0.1.17       | Not Started   | Teams using Twist for asynchronous communication      | Requires Twist API bearer token and workspace ID                     |
 
 ## Contributing

experimental/appsignal/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.2.13] - 2025-07-04
+
+### Fixed
+
+- Fixed npm package permissions issue where `npx appsignal-mcp-server` would fail with "Permission denied" error by updating the `files` field in package.json to match the pattern used by twist-mcp-server
+
 ## [0.2.12] - 2025-07-03
 
 ### Added

experimental/appsignal/MANUAL_TESTING.md

@@ -45,6 +45,8 @@ The tests will:
 **Tested By:** Claude  
 **Environment:** Local development with API keys from .env
 
+**Note:** The test results above remain valid for the current changes in tadasant/fix-perms-on-appsignal branch, which only modifies the npm package `files` field for permissions fix. No functional code changes were made.
+
 ### Test Suite Results
 
 **Overall:** 8/8 tests passed (100%)

experimental/appsignal/local/package.json

@@ -1,6 +1,6 @@
 {
   "name": "appsignal-mcp-server",
-  "version": "0.2.12",
+  "version": "0.2.13",
   "description": "Local implementation of AppSignal MCP server",
   "main": "build/index.js",
   "type": "module",
@@ -48,10 +48,10 @@
     "access": "public"
   },
   "files": [
-    "build/",
-    "shared/",
-    "README.md",
-    "package.json"
+    "build/**/*.js",
+    "shared/**/*.js",
+    "shared/**/*.d.ts",
+    "README.md"
   ],
   "repository": {
     "type": "git",