Skip to content

v0.1.15

Choose a tag to compare

View all tags
@ApiliumDevTeam ApiliumDevTeam released this 12 Mar 22:23
· 188 commits to main since this release
v0.1.15
0ead86d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

MCP Server

  • Built-in MCP server with 9 tools (memory, budget, governance, cortex)
  • Streamable HTTP + legacy SSE + stdio transports
  • mayros serve CLI command
  • mayros mcp-setup for Claude Code/Desktop auto-configuration

Production Hardening

  • CORS default-deny when allowedOrigins is empty
  • SSE session cap (50) to prevent connection exhaustion
  • Content-Type validation on POST endpoints
  • Timing-safe bearer token comparison
  • Command injection prevention (host/port validation, execFileSync)
  • Graceful shutdown with cached promise pattern
  • skipSignalHandlers option for managed sidecar lifecycle
  • JSON parse resilience for non-JSON Cortex responses
  • Input validation (Array.isArray for tags, limit caps)
  • Word-boundary regex in governance policy matching
  • 20 hardening tests

Infrastructure

  • Bump Node Docker image to 2e45682
  • Require Cortex >= 0.4.3

Full Changelog: v0.1.14...v0.1.15

Assets 2
Loading