Skip to content

clio-relay 1.4.0

Choose a tag to compare

View all tags
@JaimeCernuda JaimeCernuda released this 19 Jul 14:04
v1.4.0
6e9cd2e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Secure remote runtimes and MCP federation

clio-relay 1.4.0 hardens arbitrary cluster-side MCP federation as a production boundary. MCP sessions now follow the full initialize/list/call protocol, run in bounded owned process containment, receive only explicitly authorized credentials after containment, and expose bounded public results without leaking raw server responses or secrets. This release also updates the pinned production stack to clio-kit 2.5.19 and JARVIS-CD 1.4.1, including the JARVIS v3.5 user contract.

JARVIS live services now use authenticated jarvis.service-runtime.v2 bindings. Relay re-verifies execution, package, service, scheduler, dataset, revision, and authorization identities; keeps service bearers out of public records, URLs, environments, and logs; and injects them only on the private browser-proxy hop. Gateway attach, detach, reconnect, and teardown paths serialize lifecycle transitions, recover lost connector-start responses, preserve scheduler jobs by default, and report unresolved cleanup instead of claiming false closure.

Focused production validation covers the packaged MCP boundary, cross-platform containment, authenticated browser/runtime handoff, transition races, crash recovery, and explicit cleanup semantics. The full regression matrix and exact PyPI upload run asynchronously from this tag.

Assets 5
Loading