v3.0.4

The server now runs with unrestricted local file access by default, subject to operating-system permissions. Use --config with a saved workspace list or --root to restrict access. Overlapping workspaces preserve access allowed by a containing workspace.

This release requires an MCP 2026-07-28 client that reads structuredContent tool results. Go source builds require Go 1.27.2 or later.

Standalone binaries are available directly for Linux, macOS, and Windows on amd64 and arm64. SHA256SUMS covers the binaries and LICENSE, which includes third-party notices. On Linux and macOS, make the downloaded binary executable with chmod +x.

Compare v2.0.2...v3.0.4

Commits since v2.0.2:

• d448791 build(go)!: move to v3 and require Go 1.27.1
• 2b1c0f7 fix(core): add bounded JSON sizing and typed error causes
• 8f86c91 fix(query)!: enforce the forward JSONPath profile
• cc50547 refactor(stream): share bounded parsing and preserve record errors
• b6dfc0c fix(engine): bound captures and encoded results
• 3da52be fix(source): coordinate leases and cursor cleanup
• 4c76363 feat(mcp)!: require current metadata and bounded stdio frames
• ee8ab26 feat(npm): add native server distribution
• 83da6f9 docs: document installation and query limits
• 1e140a7 ci: test and publish native npm packages
• 8ba7eec chore: remove obsolete JSON fixtures
• 88e4425 chore: update package name
• d1f4867 chore: bump version to 3.0.1
• 6fab5b4 fix(service): reclaim expired cursor sources before admission
• 9c9472a ci(release): test package and refresh publish toolchain
• 143354b docs: explain version 3 client migration
• 5c1c799 chore(release): bump version to 3.0.2
• 7d96922 chore(release): bump version to 3.0.3
• 8344d34 chore(ci): create release
• 1125870 doc: update README
• 7a110ad fix(build): upgrade Go to 1.27.2 for security fixes
• a18cc80 feat(workspaces): add global access and workspace restrictions
• e2ff550 docs: document installation and workspace access
• b981fab ci(release): publish standalone binaries with checksums
• c3a8c3f chore(release): prepare version 3.0.4
• e212bd7 fix(ci): update Go linter to v2.14.0

Publication verification:

• Source commit: e212bd7.
• Release workflow: all quality checks and six native npm/standalone smoke jobs passed.
• npm package: mcp-json-reader@3.0.4. Registry signature and provenance attestation verified; provenance identifies the tag, workflow run, and source commit above.
• npm integrity: sha512-S4v3IdJZ0P0tOJf0V0ZLhlxO2UQKLEBTPN5Afm3VuenKc4Dw+6p+VJd93U2BR9LKejYrsn8X1wCiX6tD1QVLzg==.
• All release checksums verified. The six release binaries match the npm package binaries byte for byte.
• Installed npm command and downloaded macOS arm64 binary reported version 3.0.4 and passed MCP discovery, argument validation, pagination, numeric precision, close, and shutdown smoke checks.

v2.0.2

Changes

Commits since v2.0.1:

8bf6a40 fix(ci): add setup action, add release note