Skip to content

v0.1.4: Restricted-download contract completion and mcp-ts-core 0.12.3 adoption

Latest
Latest

Choose a tag to compare

View all tags
@cyanheads cyanheads released this 21 Aug 16:07
v0.1.4
This tag was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.
3cde68d
This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.

Restricted-download contract completion and mcp-ts-core 0.12.3 adoption

ia_get_text restricted-item downloads now consistently throw the declared download_forbidden contract: IA answers both 401 and 403 for restricted downloads, both remap, and the recovery hint reaches data.recovery.hint (#7, #12).

  • Framework @cyanheads/mcp-ts-core ^0.10.6 → ^0.12.3: MCP SDK v2 dual-era serving (protocol revision 2026-07-28 alongside the 2025 era), strict tool inputs, declared error envelope in the advertised output schema
  • Supply-chain guard (3-day release-age hold + Socket install scanner), TypeScript 7 toolchain, devcheck floating-specifier and plugin-manifest gates
  • Docker image on Bun 1.4.0 with a native-arch build stage for multi-arch builds
  • Community health files (SECURITY, CONTRIBUTING, CODE_OF_CONDUCT); smoke/integration/fuzz test suites plus test:coverage

63 tests pass.

CHANGELOG v0.1.4

Assets 3
Loading