v0.1.2: MCP SDK v2 adoption and supply-chain hardening
MCP SDK v2 adoption and supply-chain hardening
- Framework 0.12.3 / MCP SDK v2: protocol revision 2026-07-28 served beside 2025-era clients, strict tool inputs, error-envelope output schemas
- Missing-symbol errors return ValidationError instead of InvalidParams on get-earnings and get-news
- Request-path fixes via upstream: fetch timeouts classify as Timeout, Retry-After honored, stalled response bodies abort
- HTTP mode: no OAuth discovery when auth is off; dropped SSE streams replay on reconnect
- Bun 1.4.0 images (native-arch build stage, --omit=peer), supply-chain install guard, TypeScript ^7.0.2
- deps: @cyanheads/mcp-ts-core ^0.10.6 → ^0.12.3, typescript ^6.0.3 → ^7.0.2, @types/node 25.9.3 → 26.2.0 (+ biome/vitest/tsc-alias refresh)