Repository navigation
ic402 v2.17.1
Patch — @ic402/mcp installs from npm again. No library behaviour change.
Fixed
- Every
@ic402/mcpfrom 2.5.2 to 2.17.0 was uninstallable. Each one declared
"@ic402/client": "workspace:*"(pnpm's workspace protocol), sonpm install -g @ic402/mcp(as
docs/mcp-install.mdsays) failed withEUNSUPPORTEDPROTOCOL.release.ymlpublished with
npm publish <dir>, which does not rewriteworkspace:. It now packs both packages with pnpm,
which does, and publishes the mcp tarball. The newscripts/check-npm-pack.shfails if a packed
manifest still names aworkspace:version, then installs both tarballs together with npm. It
runs in CI (build-integrations) and again right before publishing. Reported by EngramX. openSession'ssigneris typed required, matching the runtime, which has thrown without one
since 2.17.0. TypeScript callers that omitted it now fail at compile time instead of at runtime.- Two compiler warnings in
Sessions.mofrom 2.17.0's small-order key check (aNat
subtraction the compiler could not prove safe) are gone. Library code builds warning-free again.
Changed
- The EngramX canary type-checks instead of running EngramX's test suite. Its full
mops test
got the runner killed on every run since 2026-08-14, whatever ic402 changed, so the gate was dark.
It now runsmoc --checkon every EngramX actor against ic402 HEAD, which catches the API and
type breaks the canary exists for.