winrdp-mcp 0.1.2

Polish release on top of the 0.1.1 security hardening.

Fixed

• SMB fast-channel probe fails fast (8s). smbprotocol defaults to a 60s connection timeout, so a box with 445 open at the TCP layer but SMB filtered (common on cloud VDS) would hang the first upload for a minute before falling back to SFTP/base64. (Found during live e2e.)
• DXT extension actually builds now. Fixed two Windows PowerShell 5.1 bugs in dxt/build.ps1: pip's stderr advisory no longer aborts the vendoring step, and the archive is written with forward-slash entry paths (Compress-Archive emitted backslashes, violating the ZIP spec and breaking the extension loader). Verified: a 23 MB self-contained .dxt.

Added

• Regression test suite (tests/test_security_fixes.py) that locks in every 0.1.1 fix so it can't silently regress in CI: the chunk-write inline invariant + non-staging routing (upload-recursion guard), argument-injection validation, provisioning omitting the weakening WinRM settings, secrets kept out of the script body, log redaction of %s args, and scrypt KDF + legacy-ciphertext migration.

Changed

• Graceful shutdown: serve / agent close cached transports on exit, and open SSH tunnels are torn down via an atexit hook.

pipx upgrade winrdp-mcp

Full details: CHANGELOG.md.