Qwen DAP MCP 0.19.4

What's Changed

• ci: expand security regression tests, pin release dependencies and gate real MCP clients/macOS by @spk-c in #67
• test: raise native debugger and runtime analysis coverage above 50% by @spk-c in #69
• docs(seo): searchable MCP Registry metadata and verified native crash demo (v0.19.4) by @spk-c in #70
• fix(registry): respect official 100-character description limit by @spk-c in #72

Full Changelog: v0.19.3...v0.19.4

Qwen DAP MCP 0.19.3

What's Changed

• docs/ci: Claude Code, Codex and Gemini local MCP compatibility by @spk-c in #65
• chore(release): publish multi-client MCP integrations in v0.19.3 by @spk-c in #66

Full Changelog: v0.19.2...v0.19.3

Qwen DAP MCP 0.19.2

What's Changed

• build(deps): bump actions/checkout from 4 to 7 by @dependabot[bot] in #9
• build(deps-dev): bump typescript from 5.9.3 to 7.0.2 by @dependabot[bot] in #10
• build(deps): reconcile setup-node 7, CodeQL 4 and @types/node 26 by @spk-c in #59
• ci/security: release automation, credential redaction, fuzz tests and benchmarks by @spk-c in #60
• docs/seo: native-debugging discovery, tutorials and verified MCP Registry publishing by @spk-c in #61
• fix(release): validate official MCP Registry metadata before npm publish by @spk-c in #62
• fix(release): publish npm tarball as local file instead of git shorthand by @spk-c in #63
• fix(release): recover npm Sigstore duplicate transparency-log 409 by @spk-c in #64

New Contributors

• @dependabot[bot] made their first contribution in #9

Full Changelog: v0.19.1...v0.19.2

Qwen DAP MCP 0.19.1

Qwen DAP MCP 0.19.1 — npm package and README refresh

This is a documentation and distribution maintenance patch for spk-c/Qwen-dap-mcp, based on the maintained Apache-2.0 project originally by SLP-DEV1.

Changes

• Restored the verified npm package identity: @slp-dev1/qwen-dap-mcp.
• Rewrote the npm-facing README to document npm and GitHub installation, supported native DAP adapters, MCP client configuration, high-level tools, security profiles and complete documentation links.
• Replaced outdated claims that the npm package cannot contain this fork's improvements, while distinguishing published package versions from unreleased repository changes.
• Synchronized package version, lockfile and Qwen extension version; retained build and real debugger test gates.
• Configured npm publication through GitHub Actions OIDC Trusted Publishing without an npm token.

No changes to native debugger runtime features are claimed in this patch.

Install

qwen extensions install @slp-dev1/qwen-dap-mcp

Alternatively, install source from spk-c/Qwen-dap-mcp when you specifically need the newest repository state. For other stdio MCP clients, use npx -y @slp-dev1/qwen-dap-mcp. Node.js 20+ and a separately installed compatible native debugger are required.

Please check the npm package for the currently published version before assuming this release is live.

See the documentation, the changelog, and the security policy.

Qwen DAP MCP 0.19.0

Qwen DAP MCP 0.19.0 — Maintained fork release

This release of spk-c/Qwen-dap-mcp brings the originally compiled-only DAP-to-MCP bridge into a buildable, regression-tested fork.

Highlights

• Real debugger verification: GDB 15 local launch and remote gdbserver, LLDB-DAP 18 native launch and core dumps, CodeLLDB 1.12.3 on Windows with C++ breakpoints, crashes and authentic minidumps, plus GDB 18.1 core dump import.
• Improved DAP safety: malformed frames and response mismatches fail closed, stale adapter approvals are rejected, asynchronous event waits are cleaned up, and GDB version-specific launch/attach ordering is handled.
• Read-only postmortem inspection: inspect-only DAP policy, protected evidence import/export, bounded reads, and real crash-dump tests that reject continue/step operations.
• MCP integration: real stdio handshake, tool listing, multi-session routing and parallel-session tests.
• Maintainable distribution: editable JavaScript in src/, generated TypeScript declarations, reproducible npm ci, clean package smoke tests, restored documentation and security policy.
• Continuous verification: Windows/Linux Node 22/24, GDB/LLDB/CodeLLDB native E2E, Linux GDB remote and postmortem tests, Windows minidump tests, CodeQL and Dependabot.

Install

qwen extensions install spk-c/Qwen-dap-mcp

Start Qwen Code and use the debugger tools with a trusted local debugger adapter. By default QWEN_DAP_MCP_PROFILE=local-debug can launch/attach to local processes. For read-oriented postmortem inspection explicitly set QWEN_DAP_MCP_PROFILE=inspect; HOL Guard is opt-in.

Important scope and compatibility

• The npm package @slp-dev1/qwen-dap-mcp is upstream and does not contain this fork's fixes. This fork is not published to npm; the release archive contains the runtime and metadata but does not bundle npm dependencies; users should use the GitHub Qwen extension installation workflow.
• The imported repository did not contain the original TypeScript source files. This fork maintains JavaScript source and regenerates declarations from JavaScript.
• GDB versions 14–17 can debug live targets, but its native DAP coreFile attach requires GDB 18.1+. Use LLDB-DAP for older GDB installations.
• No benchmark claims or guarantees of universal debugger compatibility are made. Only authorized, controlled test targets are used in CI.

See CHANGELOG.md, SECURITY.md and the integration test documentation.