Skip to content

v0.3.1: mcp-ts-core ^0.10.6, truncation disclosure, bundle hardening

Choose a tag to compare

View all tags
@cyanheads cyanheads released this 12 Jun 08:46
v0.3.1
This tag was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.
1f96e75
This commit was signed with the committer’s verified signature.
cyanheads Casey Hand
SSH Key Fingerprint: lkZCAfVCK5qsrcvEYCs0BnVRDCX7pKsdCZkw5yYKMuw
Verified
Learn about vigilant mode.

mcp-ts-core ^0.10.6, truncation disclosure, bundle hardening

Adopts the framework 0.10.6 line and ships truncation disclosure on two tools, a DataCanvas system-catalog lockout, explicit server identity, and an mcpb bundle agent-doc strip.

Added:

  • openfda_count_values truncation disclosure — truncated, shown, cap, truncationCeiling when the term list hits the limit.
  • openfda_get_drug_label truncation disclosure — truncated, shown, cap when more labels matched than the page returned.
  • scripts/clean-mcpb.ts — post-pack strip of dependency-shipped agent-docs nested under node_modules/; wired into the bundle script.
  • Dockerfile HEALTHCHECK (bun-native fetch on /healthz) and APP_VERSION OCI version label.

Changed:

  • createApp() sets name/title to openfda-mcp-server explicitly.
  • openfda_dataframe_query blocks DuckDB system catalogs (denySystemCatalogs: true).
  • lint-packaging.ts gains bundle-content and identity guards; check-framework-antipatterns.ts flags z.coerce.boolean() on env flags.
  • .mcpbignore patterns anchored to bundle root.
  • Skills synced to framework 0.10.6; techniques skill added.

Dependency bumps:

  • @cyanheads/mcp-ts-core ^0.9.21 → ^0.10.6
  • @types/node ^25.9.2 → ^25.9.3

314 tests pass; bun run devcheck clean.

Assets 3
Loading