0.2.12 Alpha

0.2.12 Alpha updates the English documentation and contributor onboarding.

• Standardize product, architecture, tool, setup, troubleshooting, and release references in English while retaining the Chinese README.
• Add first-query guidance, a reproducible synthetic route demo, and feedback/contribution/Issue/PR templates.
• Clarify pagination, upstream reads, error attribution, and evidence limits; pin historical example links to an immutable release.

Runtime behavior, public tool Schemas, runtime dependencies, fixed endpoints, and security boundaries retain their existing scope. Local examples remain ignored and excluded from distributions. Synthetic replay does not establish live application or client compatibility.

Validation: all six complete release-gate stages passed without bypass flags, including 1224 tests, mypy, Ruff, contract checks, vulnerability audit, and independent wheel/sdist clean installation. Both SDK modes, eight-tool loopback HTTP checks, and seven packaged replays passed. No real Spring application was contacted.

Installation check:

uvx --default-index https://pypi.org/simple spring-runtime-mcp==0.2.12 --version

0.2.11 Alpha

0.2.11 Alpha 将 examples/ 作为维护者本地应用 fixture 和诊断结果目录。

该目录已加入根 .gitignore 并停止 Git 跟踪，现有维护者本地文件保留；源码发行包显式排除 examples/。现行文档已移除相应演示链接，并说明真实项目维护脚本需自行准备对应本地 fixture。

公开八工具契约、运行依赖和运行时行为保持现有范围。默认合成测试与发行门禁无需 examples/，不启动真实 Spring Boot 应用。

验证：1224 项测试、mypy、Ruff、契约、联网漏洞审计及六阶段完整门禁通过；wheel/sdist 均不含 examples/，分别通过净室安装、SDK 两模式、八工具回环 HTTP 与七个 replay。未连接真实 Spring Boot 实例。

安装检查：

uvx --default-index https://pypi.org/simple spring-runtime-mcp==0.2.11 --version

0.2.10 Alpha

0.2.10 Alpha 修复契约维护校验和合成性能基准，并补充故障排查与架构说明。

默认值校验保留根 Schema 的本地引用上下文，先执行离线引用预检，再验证默认值；新增 10 项回归。性能基准逐轮检查非空 Bean 及实际 1–4 跳依赖链，覆盖工具调用、快照和 16 KiB 内输出序列化，参考值仅作告警阈值。

鉴权排障、配置登记参数、工具选择器和超时层级已修正。公开八工具契约、运行依赖、固定端点及产品安全边界保持现有范围。

验证：1224 项测试、mypy、Ruff、契约和联网漏洞审计通过；wheel/sdist 各自净室安装并验证 SDK 两模式、八工具自建回环 HTTP 和七个 replay。未运行真实 Spring 项目，不扩大生产或兼容矩阵声明。

安装检查：

uvx --default-index https://pypi.org/simple spring-runtime-mcp==0.2.10 --version

0.2.9 Alpha

0.2.9 Alpha 补齐八工具的字段、公共信封和可直接调用的查询示例，并明确配置诊断默认关闭及值输出的授权条件。

本版包含文档一致性修复、已有 Bearer 接入说明、JDK 验证前提，以及 Nacos 复跑结果防覆盖和锁定环境入口。公开工具契约、运行依赖、固定端点与产品安全边界保持现有范围。

干净源码完整发行门禁六阶段通过：1204 项测试、类型/静态/契约检查、联网漏洞审计，以及 wheel/sdist 各自净室安装、SDK 两模式、八工具自建回环 HTTP 和七个 replay。17 个工具文档查询示例经实际参数校验。未新增真实 Spring 项目或完整版本矩阵验收。

安装检查：

uvx --default-index https://pypi.org/simple spring-runtime-mcp==0.2.9 --version

首次接入见 docs/first-query.md。保持 Alpha、本地回环与有限兼容范围。

v0.2.8 Alpha

Adds repository-side Java source facts generation, local build evidence, and reproducible fault acceptance.

• Parse only explicitly registered Java files with the JDK AST API. Generate partial Source catalog and drift inputs without executing project code.
• Compare source and local artifact digests across unbuilt edits and rebuilds while preserving unknown runtime identity.
• Exercise Flyway errors, constructor cycles, Bean/route/health drift, protocol failures, safety boundaries and recovery in disposable loopback targets.
• Preserve the existing eight-tool contract, fixed endpoint policy and Python runtime dependencies.

Validation: 1,195 tests and 48 opt-in MCP acceptance calls passed locally. The tag release passed Python 3.11–3.14, the full audited gate and separate wheel/sdist clean-room checks. PyPI artifact SHA-256 values match the tag workflow artifacts. AST extraction covers a documented subset. Real-project acceptance covers the demo and Spring Boot Admin; migration failure uses disposable H2. A local jar hash does not establish a running JVM build identity.

Install the runtime: uvx --default-index https://pypi.org/simple spring-runtime-mcp==0.2.8 --version.

Java maintenance scripts are available from the source repository/sdist and require a full JDK. See docs/source-facts-generation.md and docs/build-evidence.md.

0.2.7 Alpha — Documentation and packaging

This release simplifies the project documentation and keeps current implementation guidance separate from human historical records. AGENTS.md is 29 lines; the English and Chinese READMEs explain the eight diagnostic functions and link to dedicated setup guides. Wheel and sdist explicitly exclude .human/.

Diagnostic logic, public tool schemas, runtime dependencies, read-only access, authentication/TLS, sanitization and response budgets are unchanged.

Validation includes the complete audited release gate, 1172 offline tests, Python 3.11–3.14 CI, and independent wheel/sdist installed-package checks covering both SDK modes, eight tools over self-hosted loopback fixtures and seven replay scenarios. No real Spring Boot instance is contacted for this release. The complete framework/platform/client compatibility matrix remains unverified.

uvx --default-index https://pypi.org/simple spring-runtime-mcp==0.2.7 --version

Public PyPI installation was independently verified without cache or lock constraints on Linux / Python 3.12.3 / MCP SDK 2.3.0, including both SDK modes, eight self-hosted loopback tool routes and seven replay scenarios. The initial dependency-download timeout was retained as a failed attempt; a fresh isolated pip installation from the same index passed. MCP Registry publication and exact-version readback also passed.

Asset	SHA256
spring_runtime_mcp-0.2.7-py3-none-any.whl	472bf92de8beb58876ab2b16a089079738f577d9bce95c8beae4ac933883ed42
spring_runtime_mcp-0.2.7.tar.gz	9621b5d4cbb2f3022de6be21d2250fc2b242dd10c82197152dc6d5a967c8db1a

0.2.6 Alpha — Named-bean evidence chains

0.2.6 Alpha recognizes the observed single-name ConditionalOnBean missing message only when the selector and suffix name agree. This enables the existing evidence-only factory/property blocking chain. Twenty-nine new synthetic regressions cover exact naming, outcome conflicts, search scopes and incomplete evidence.

Public schemas, error codes, runtime dependencies, graph algorithms, read-only networking, TLS, sanitization and budgets are unchanged. CGLIB correlation remains unchanged. Multiple/composite requirements and unrecognized grammar continue to return partial/unknown.

P4 live source evidence is limited to Boot 3.5.16 / Java 21 MVC/JWT on an isolated current TDD snapshot. Direct property failure and the correlated named-bean chain are distinguishable; missing catalogs, source/context mismatch or unreadable conditions do not yield invented paths. This is not a complete version/client matrix.

Strict local/candidate/formal gates passed (1172 local tests / 45.46s; Python 3.11–3.14 remotely), including independent wheel/sdist installs, both SDK modes, eight owned loopback HTTP routes and seven replay scenarios.

Source: 60a4bea4434413fd140ef9bddf7d5bf4133d7b68.

SHA-256:

• spring_runtime_mcp-0.2.6-py3-none-any.whl: efaa0dc6f559e2e2ef722bbb39a248c882245c1b700ea9b7b4927df644ba50a3
• spring_runtime_mcp-0.2.6.tar.gz: d3b63a0e26f175297d80f10058bfb742e314e22ad8657cbd64f33a5f7d699c20

Public PyPI installation passed in a fresh Linux / Python 3.12.15 environment without uv cache, lock constraints, local artifacts or index overrides (SDK 2.3.0). Both SDK modes, owned loopback routes, seven replays, exact named-bean grammar/mismatch guard, the named-alias factory/property chain and missing-catalog control passed. Public hashes match all verified batches.

0.2.5 Alpha — WebFlux function handlers

0.2.5 Alpha preserves structured WebFlux function handler classes in the existing controllerClass field and fixes class-filter misses for RouterFunction mappings. It also merges the M8ven publisher verification badge branch.

Nine new offline regressions cover handler metadata and startup evidence boundaries. Public tool schemas, runtime dependencies, target and endpoint controls, read-only HTTP, TLS, sanitization and budgets are unchanged. Complex predicates and incomplete startup timelines continue to report partial evidence.

P3 live source acceptance is limited to Boot 3.5.16 / Java 21 MVC/JWT startup and a separate authenticated WebFlux mappings fixture. It is not a full compatibility matrix or Gateway proxy-route certification. Startup GET remains non-consuming and requires native collection configured before application run.

Release artifacts pass the strict local and remote gates, including isolated wheel/sdist installs, both SDK modes, eight owned loopback HTTP routes and seven replay scenarios. Exact artifact hashes and batch evidence are recorded separately after the gate completes.

SHA-256:

• spring_runtime_mcp-0.2.5-py3-none-any.whl: 2de53868d8d9e461124d2c90b43429567aa3f14611db5d5f27b4d17246c2bc29
• spring_runtime_mcp-0.2.5.tar.gz: 638eb26d0075cf76c93b741871a85106fabfebb909e05c08ddfc40a50d0c0497

Independent public PyPI installation passed on Linux / Python 3.12.15 / mcp 2.3.0. The uncached, unconstrained named install verified both SDK modes, owned loopback HTTP fixtures, seven packaged replays, inherited credential guidance and synthetic function-class/filter regression. Public package hashes match the local, candidate CI and formal artifacts.

Source: f3f99310967b50dbee847ef82228f87ac8beba27.

v0.2.4 Alpha

This patch provides a continuous public-package path from installation to the first authorized query. Developer replay is kept separate, optional source catalogs follow basic queries, and troubleshooting distinguishes registration, protocol, authorization and useful evidence.

Missing/empty Bearer-variable errors now use fixed safe text, pointing to the parent environment and forwarding (Codex env_vars), without echoing the supplied variable name or value. Exit code 2 and stderr-only startup diagnostics remain. Editable metadata recovery explicitly reinstalls the project package.

Tool schemas, error-code meanings, dependencies, algorithms, authentication, read-only networking, TLS, sanitization and output budgets are unchanged. Client/OS compatibility remains limited to the verified samples; other client templates are reference-only.

Validation: 1134 tests, Python 3.11–3.14, mypy, Ruff, contracts, audit, isolated wheel/sdist installation, two SDK modes, eight owned loopback routes and seven replay scenarios. Separate P2 source/public-package evidence covers Linux/Codex 0.164.0, authorized MVC mappings and recovery from invalid arguments.

uvx --default-index https://pypi.org/simple spring-runtime-mcp==0.2.4 --version

Source: 4e9e571

SHA256:

• spring_runtime_mcp-0.2.4-py3-none-any.whl: 526628eeefac8c3767cf28d6c735c0c77d0b427de0d015fba6842907f5a23927
• spring_runtime_mcp-0.2.4.tar.gz: 4b87a6f55346240af8739151c1bbf33bc07f9bb3bbdfaa22c7971d780f711226

v0.2.3 Alpha

Source catalogs now accept legitimate Spring Context IDs such as shop-product and application:management, preserving exact identity matching, 1–256 character bounds and C0/DEL rejection. Java type and factory identifiers remain strictly validated.

The new source catalog guide documents producer/condition correlation and partial-evidence limits. Tool schemas, dependencies, networking, authentication, sanitization and the 16 KiB output budget are unchanged. CGLIB producer correlation and named ConditionalOnBean transitive explanations remain incomplete.

Validation: 1134 offline tests, Python 3.11–3.14 CI, mypy, Ruff, contracts and audit; wheel/sdist isolated installation, both SDK modes, eight self-created loopback routes and seven replay scenarios. Separate authorized Boot 3.5.16 / Java 21 / MVC / JWT samples verified factory correlation, property-negative evidence and unknown with unavailable conditions. This is a limited sample.

Install:

uvx --default-index https://pypi.org/simple spring-runtime-mcp==0.2.3 --version

Source: 3f752dc

SHA256:

• spring_runtime_mcp-0.2.3-py3-none-any.whl: af80539a4beb436cb271a21acec2a75b79f24136bf831e10b8519a3b9e21cb58
• spring_runtime_mcp-0.2.3.tar.gz: 78b7c63d9a598f747ca72d3d31a423e56fea4d67d946efad406fab62e4427c48