Skip to content

0.6.0

Latest

Choose a tag to compare

@jamesrosing jamesrosing released this 20 Sep 06:55
b0af37b

Connectors Directory readiness. No wire-format changes.

  • feat(annotations): every tool carries a title and MCP annotations (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) derived from its verb, pinned by tool-annotations.test.ts.
  • feat(redact): PHI and credentials are scrubbed from the SOAP debug log, and patient identifiers from the request are scrubbed out of thrown error messages (SOAP faults, FHIR errors, and tebra_get_patient argument errors). Tested against synthetic records so no identifier survives.
  • feat(fields): record-returning tools accept fields for minimum-necessary selection (dotted paths through arrays). tebra_get_all_patients defaults to a roster projection; tebra_get_patient omits insurance policy and group numbers unless named.
  • refactor(fhir): handlers take a FhirConfig resolved once at startup, and the OAuth token cache is keyed per client.
  • feat(mcpb): manifest.json (MCPB 0.2) with sensitive user_config for every credential, PRIVACY.md, npm run pack:mcpb, and a CI workflow that packs the bundle on version tags.
  • fix(fhir): startup no longer exits when the FHIR key path is unreadable, and unexpanded Claude Desktop ${user_config.*} placeholders count as unset (verified live 2026-09-19: both took the desktop extension down as "Server disconnected" with no visible cause).
  • docs: independence from Tebra and the BAA requirement stated in the README, package descriptions, and skill; server.json now marks TEBRA_SOAP_USER secret.