v17.0.25

17.0.25 (2026-09-20)

Bug Fixes

• agent-spawn: avoid loopback setup in Codex read mode (0045f2a)
• auth-store-rust: bound completed encryption key retention (9e898f3)
• mcp-protocol-rust: match ECMAScript binary64 number formatting (6bdba95)
• playwright: compose standard routes with guarded host policy (d0626f9)
• playwright: preserve checkpoint and multi-owner disposal errors (cff106e)
• playwright: restore blank profile tabs by default (076eb51)
• publish Cloudflare transport cleanup investigation coverage (df738da)
• safe-bash: tolerate detach rejection after private retirement (f80deb2)
• safe-fs: avoid opening canceled unstarted device readers (16bd404)
• safe-playwright-cloudflare: qualify profile restore commit barriers (dae55f2)
• safe-playwright-cloudflare: retire native browsers after host cancellation (114d0fb)
• tiny-mcp-client-rust: dispose failed test pair setups (8cc5abe)
• tiny-stdio-mcp-server-rust: decorate modern tool results (cfb6706)
• tiny-stdio-mcp-server-rust: match JavaScript numeric tool content (9423a0d)
• tiny-stdio-mcp-server-rust: preserve admitted registration names (beb86a8)
• tiny-stdio-mcp-server-rust: preserve UTF16 server identity (7233c26)
• toolcraft-schema-rust: preserve JavaScript number spelling in diagnostics (67f53a1)

Features

• auth-store-rust: implement independent native credential stores (bf7dd02)
• mcp-oauth-rust: enforce bounded HTTP response handling (a33c95a)
• mcp-oauth-rust: implement authorization state codecs (27f0d48)
• mcp-oauth-rust: implement dependency-free native PKCE (44b4438)
• mcp-oauth-rust: implement native loopback authorization policy (6b46947)
• mcp-oauth-rust: implement native session and client persistence (18486a9)
• mcp-oauth-rust: implement native token exchange and refresh (d841b13)
• mcp-protocol-rust: add bounded dependency-free JSON core (3a1b3c6)
• mcp-protocol-rust: add canonical binary and resource URI checks (4d2ef4c)
• mcp-protocol-rust: add tested self-contained napi bindings (a49ed3f)
• mcp-protocol-rust: bind JSON-RPC with SDK conformance checks (1beb5d3)
• mcp-protocol-rust: implement legacy and modern JSON-RPC envelopes (9ad2d4c)
• mcp-protocol-rust: preserve JavaScript UTF-16 JSON input (81a4486)
• mcp-protocol-rust: share ECMAScript UTF-16 trimming (a2b4527)
• mcp-protocol-rust: validate bounded MCP metadata (b5d21c5)
• safe-bash: ship bounded GNU fmt command and SDK (2d71995)
• tiny-mcp-client-rust: add bounded native SSE framing (5d6bfa3)
• tiny-mcp-client-rust: add independent SDK test transports (8118f10)
• tiny-mcp-client-rust: add native JSON-RPC message parsing (a69918d)
• tiny-mcp-client-rust: add standalone stdio transports (c503eaf)
• tiny-mcp-client-rust: implement native client lifecycle (c1d3efc)
• tiny-mcp-client-rust: implement native request lifecycle (ed06f9e)
• tiny-mcp-client-rust: implement notification subscriptions (959b6c5)
• tiny-mcp-client-rust: validate HTTP response correlation (bad25dd)
• tiny-mcp-client-rust: validate modern results and input retries (f65dd31)
• tiny-stdio-mcp-server-rust: add bounded remote media loading (7572a72)
• tiny-stdio-mcp-server-rust: add independent SDK transport adapter (a9a4e74)
• tiny-stdio-mcp-server-rust: add native session and tool engine (0543430)
• tiny-stdio-mcp-server-rust: add prompts resources and custom methods (5f19ad4)
• tiny-stdio-mcp-server-rust: add typed schema definitions and shorthand output contracts (4f5b2fa)
• tiny-stdio-mcp-server-rust: bound tool admission and timeouts (728ba5e)
• tiny-stdio-mcp-server-rust: complete public API contracts (fcbce11)
• tiny-stdio-mcp-server-rust: convert native values without JSON bridges (e934518)
• tiny-stdio-mcp-server-rust: deliver session notifications and resource updates (50ad8e3)
• tiny-stdio-mcp-server-rust: enforce invocation output contracts (9253222)
• tiny-stdio-mcp-server-rust: expose content conversion and support content classes (a900803)
• tiny-stdio-mcp-server-rust: implement binary and file content helpers (47b0839)
• tiny-stdio-mcp-server-rust: implement modern notification subscriptions (023e2bb)
• tiny-stdio-mcp-server-rust: implement native stdio framing and backpressure (b63e356)
• tiny-stdio-mcp-server-rust: implement RFC 6570 URI templates (a50857f)
• tiny-stdio-mcp-server-rust: normalize nullable tool contracts (bfbee37)
• tiny-stdio-mcp-server-rust: support input-required invocation retries (dad0a4f)
• tiny-stdio-mcp-server-rust: track admission and cancellation in Rust (867a659)
• tiny-stdio-mcp-server-rust: validate content and preserve tool failures (8555e96)
• tiny-stdio-mcp-server-rust: validate MCP parameter headers (0470d73)
• tiny-stdio-mcp-server-rust: validate normative protocol and retry schemas (0cc5c2c)
• tiny-stdio-mcp-server-rust: validate tool input schemas (2c7c84c)
• toolcraft-schema-rust: add native schema compilation and validation (e466b4d)
• toolcraft-schema-rust: normalize legacy nullable schemas (472a6c7)
• toolcraft-schema-rust: resolve schema resources and dynamic references (f242b70)
• toolcraft-schema-rust: support injected custom format validators (e160c2c)
• toolcraft-schema-rust: validate bounded Unicode patterns (6d62962)

Performance Improvements

• tiny-stdio-mcp-server-rust: defer object machinery for primitive returns (6b1d740)