v0.4.0
0.4.0 - the packaging release: external config home (TOOLFUNNEL_HOME/--config-dir - npm updates can never eat your tools), tf_pack (package your live setup as a portable home or a publishable npm package), configurable identity + ports (toolfunnel.json), requires runtime preflight, register hot-reload (the one unwatched config), first-class tool inputSchemas, UI loopback hard-pin + CSRF guard, OIDC discovery origin-pin, clean -32700 on all over-cap paths - and the 60-second zero-code demo (see the README). Suite 26/26.
Commits:
- Adversarial-review fixes + the demo GIF lands in the README
- Demo-as-code: the 60-second zero-code MCP story (task #39)
- KNOWN_BUGS board: mark items 6-9 DONE with their commits - the full 0.4.0 board is code-complete
- Packaging docs + README: the full ship-your-own-MCP story; fix a launch-week README artifact
- tf_pack + requires preflight: package the live setup, declare its runtimes
- External CONFIG HOME (TOOLFUNNEL_HOME / --config-dir): config survives the package
- Configurable identity + port defaults (toolfunnel.json) - the wrapped-MCP handshake
- Register hot-reload + first-class tool schemas: close the two 0.4.0 verify items
- 0.4.0 security batch: loopback-pin the config UI + fix the four 7/3 review findings
- One-command release automation: scripts/release.js