v0.1.6: ValidationError audit and mcp-ts-core ^0.10.1
ValidationError audit and mcp-ts-core ^0.10.1
Domain-validation failures across fema_search_disasters, fema_get_public_assistance,
fema_dataframe_query, fema_query_dataset, and the OData service layer now surface
ValidationError instead of InvalidParams. Framework adoption picks up the DataCanvas
SQL gate hardening.
Changed:
- fema_search_disasters, fema_get_public_assistance, fema_dataframe_query, fema_query_dataset — error contracts corrected to ValidationError for input/domain failures
- openfema-service — OData 400 responses raised via validationError() for consistency
Security:
- DataCanvas SQL gate (cyanheads/mcp-ts-core#210) — non-preparable statements (e.g. bare PRAGMA) now return the documented non_select_statement ValidationError instead of InternalError; pragma_* table functions denied.
Dependency bumps:
@cyanheads/mcp-ts-core^0.9.21 → ^0.10.1
59 tests pass; bun run devcheck clean.