SafeShape v4.0.0

SafeShape 4.0.0 adds direct OpenAPI comparison and removes Zod from production and development dependencies.

npm install safe-shape@4.0.0

import { compareOpenApi } from 'safe-shape';
const report = compareOpenApi(previousYaml, nextYaml);
console.log(report.decision, report.findings, report.issues);

• Compare OpenAPI 3.0/3.1 YAML, JSON strings or parsed documents: operations, request parameters/bodies, responses, headers and status selectors. SafeShape performs compatibility proofs; unsupported constructs produce manual-review diagnostics.
• MCP now uses a package-owned JSON-RPC/stdio runtime validated with SafeShape. Published packages, tests and quality fixtures install neither Zod nor the official MCP SDK.
• Breaking change: createSafeShapeMcpServer() returns SafeShapeMcpServer, not SDK Server. Use its connect/close API and the exported transport types. The MCP CLI/manifest and existing schema/snapshot APIs retain their formats.
• All ten packages share 4.0.0. Node >=20.10 and ESM are required.

OpenAPI guide · Migration from 3.x · Русская документация · Release verification

The release gate covers 356 workspace tests, typecheck, documentation, examples, benchmarks, installed consumers, quality fixtures, migration checks and dependency audits. Protocol smoke tests do not replace a real-agent walkthrough of the new MCP runtime.