MCP 0.3.0-beta.3: workspace isolation

The local bridge requires explicit workspace/listener configuration, rejects redirects and verifies workspace identity. Chat forwarding is disabled pending a supported scoped authentication handoff. Advisory holds and receipts remain available. Source includes the receipt containment/action classification fixes already present in npm beta.2, and retired hosted endpoints are removed from server metadata.

Validation: 85 source tests and 29 packed regression tests passed. Registry artifact bytes match the inspected package. Existing installations need to update.

MCP 0.2.3: local workspace isolation

Stable MCP security update: local chat forwarding is disabled until a supported workspace-scoped authentication handoff is available. Explicit workspace/listener configuration and matching workspace identity are required for status probing; redirects are rejected. Advisory approval/receipt tools and existing stable protocols remain available.

Only package version and the standalone bridge changed from published 0.2.2. Source is preserved on a dedicated stable branch; its packed artifact is byte-identical to npm 0.2.3. The beta main branch remains separate.

Validation: 48 source and packed tests, plus 49 tests on the reconstructed public source snapshot. Package boundary and secret scans passed. Existing pinned/cached installations must update.