Skip to content

syncrona 0.9.0

Latest
Latest

Choose a tag to compare

View all tags
@IvanBBaev IvanBBaev released this 03 Jul 21:30

First public release of syncrona — the next-generation Sincronia CLI monorepo. The syncrona core CLI, the @syncrona/mcp-server runtime, their shared libraries (@syncrona/sn-transport, @syncrona/credential-store, @syncrona/jira, @syncrona/types) and the first-party build plugins are versioned in lockstep at 0.9.0 and published to npm with build provenance.

Highlights

  • ServiceNow authentication methods — Basic, OAuth 2.0 (password / client-credentials / JWT-bearer), inbound REST API key, and optional mutual TLS, selectable via a login method picker or --auth-method.
  • Shared encrypted credential store — at-rest key resolved from SYNCRONA_STORE_KEY or, by default, a random 256-bit key held in the OS keychain (@napi-rs/keyring; opt out with SYNCRONA_USE_KEYCHAIN=0), with a legacy machine-derived fallback so existing credential files keep decrypting.
  • Jira issue context (@syncrona/jira) — jira, jira-login, jira-logout CLI commands and a jira_get_issue MCP tool for read-only issue context (Cloud and Server / Data Center).
  • Custom CA bundle support in the shared transport (SYNCRONA_CA_BUNDLE, NODE_EXTRA_CA_CERTS) for corporate TLS-inspection / private-CA setups.

Security

  • Relicensed from MIT to GPL-3.0-or-later (SPDX headers across the tree).
  • Production dependencies updated to clear all npm audit findings (13 vulnerabilities, 7 high — including five axios advisories; axios 1.5.1 → 1.17.0, webpack bumped). npm audit --omit=dev now reports 0 vulnerabilities.

See CHANGELOG.md for the full list of Added / Fixed / Changed entries.