v0.13.1

Highlights

• Restores lossless native Agent/Session visibility for structured AST results while retaining canonical structured content.
• Publishes exact schema fidelity for ast_explore and truthful JSON/TOON output contracts.
• Proves timeout, cancellation, reconnect, config-HMR removal, generation retirement, Host shutdown, and zero-residue ownership against the pinned DeepSeek Harness.
• Adds authenticated rendered Trajectory → Tools evidence for the exact 15 → 0 → 15 lifecycle, with secret-safe deterministic teardown.

Verification

• Release commit: 27b80a3da169b473a3b5c5dfea69ed52903ed4c7
• Main CI: https://github.com/yailPeralta/ast-mcp-server/actions/runs/33460585683
• Publish to next: https://github.com/yailPeralta/ast-mcp-server/actions/runs/33461292810
• Public-registry verification: https://github.com/yailPeralta/ast-mcp-server/actions/runs/33461385440
• Verified promotion: https://github.com/yailPeralta/ast-mcp-server/actions/runs/33461651288
• npm latest and next: 0.13.1
• npm integrity: sha512-jqgGoYs8fe7J+E25lZusLK4wV6sjM5n5qiWnfe1RJIxOFo1r5nbtcBr1a/fdSWTYf/37bUNkshQp86UrdBHOsA==

ast-mcp-server v0.13.0

ast-mcp-server v0.13.0

v0.13.0 adds the DeepSeek Harness Developer Preview adapter, with exact host and bridge identities and a fail-closed mutation boundary.

Highlights

• Ships cordis.patch.yml and the exact "dsh": {"bundle": {"patch": "./cordis.patch.yml"}} package contract.
• Supports Harness-mediated reads, dry-run rename preparation, and operation preview.
• Keeps ast_apply_operation denied unless AST_MCP_APPLY_GUARD=allow; unset, deny, and invalid values remain fail-closed.
• Adds a mandatory, non-skipping compatibility gate against the pinned Harness revision and MCP client.

Supported scope

• Requires Node.js >=22.13.0.
• The Developer Preview covers reads, prepare, and preview; the shipped configuration denies apply.
• Supported for trusted single-user local stdio use on documented Linux x64 boundaries. Other platforms and remote or multi-tenant operation remain unverified.

Verification

• Release commit
• Exact-SHA CI
• Security checks
• npm next publication
• Public-registry verification
• Stable latest promotion
• The promotion mutation succeeded; the workflow exhausted bounded readback before registry propagation. Independent npm and direct-registry reads confirmed latest and next at 0.13.0; promotion was not retried.
• Exact-SHA CI passed the mandatory Harness gate under Node.js 22.13.0 and Node.js 24.
• npm latest and next both resolve to 0.13.0 with gitHead bound to the release commit.

Install

npm install --global ast-mcp-server@0.13.0

v0.13.0 supersedes v0.12.0 as the supported stable release.

ast-mcp-server v0.12.0

ast-mcp-server v0.12.0

v0.12.0 adds opt-in bounded diagnostic aggregates and an immutable tool capability catalog whose MCP, batch, and agent projections derive from one source of truth. Existing public runtime payloads remain compatible.

Highlights

• Diagnostic pagination can include opt-in aggregates computed from the complete normalized snapshot, with explicit coverage metadata and bounded code/file dimensions.
• Added an immutable tool capability catalog with deterministic MCP, batch, and agent projections.
• Added independent inventory, integration, canary, package, and documentation oracles that detect drift without deriving expectations from the catalog itself.
• Preserved the established public canary gate payload while validating internal capability metadata separately.
• Added immutable upgrade coverage for managed skills shipped by published 0.11.0, 0.11.1, and 0.11.2 packages.

Supported scope

• Requires Node.js >=22.13.0.
• Supported for trusted single-user local stdio use on Linux x64 within the documented filesystem and process boundaries.
• macOS, Windows, other Linux environments, and remote, untrusted, or multi-tenant operation remain unverified or unsupported as documented.

Verification

• Release commit: 3991d0a74e672c6c4d3fbd1c8bbb1a60009515ec
• Exact-SHA CI
• Security checks
• npm next publication
• Public-registry verification
• Stable latest promotion
• The exact candidate tree passed all 16 governed release commands on both Node.js 22.13.0 and Node.js 24.16.0.
• npm latest and next both resolve to 0.12.0 with gitHead bound to the release commit.

Install

npm install --global ast-mcp-server@0.12.0

v0.12.0 supersedes v0.11.2 as the supported stable release.

ast-mcp-server v0.11.2

ast-mcp-server v0.11.2

v0.11.2 adds an opt-in supervised compiler-worker mode that can reclaim idle compiler memory while keeping the local stdio connection alive. It also hardens worker startup, makes CLI project-discovery fixtures deterministic, and repairs the isolated public-registry verification boundary.

Highlights

• Added an explicit per-connection supervised compiler-worker mode that can recycle an idle compiler child while the stdio parent remains connected. in_process remains the default and full rollback; TTL 0 disables recycling while retaining the relay.
• Added scoped Linux x64 evidence on exact Node.js 22.13.0 and Node.js 24.16.0 for PSS reclamation, stable compiler fingerprints, SQLite reuse, bounded diagnostics, and parent-death cleanup without orphan workers.
• Fixed compiler-worker startup so initialization replay waits for child readiness instead of racing the first forwarded request.
• Made CLI project-discovery fixture setup deterministic by creating the external project directory before dependent configuration writes.
• Repaired the isolated public-registry runner's runtime dependency closure and added an execution-based regression for omitted local imports.

Supported scope

• Requires Node.js >=22.13.0.
• Supported for trusted single-user local stdio use on Linux x64 within the documented filesystem and process boundaries.
• The supervised worker remains explicit opt-in; this release does not introduce a shared daemon or worker pool.
• macOS, Windows, other Linux environments, and remote, untrusted, or multi-tenant operation remain unverified or unsupported as documented.

Verification

• Release commit: f7b429670093bd9f43195979e395ccf418eb4ba2
• Exact-SHA CI
• Security checks
• npm next publication
• Public-registry verification
• Stable latest promotion
• The exact candidate tree passed all 16 governed release commands on both Node.js 22.13.0 and Node.js 24.16.0.
• npm latest and next both resolve to 0.11.2 with integrity and SLSA provenance bound to the release commit.

Install

npm install --global ast-mcp-server@0.11.2

v0.11.2 supersedes v0.10.0 as the supported stable release. The immutable 0.11.0 and 0.11.1 packages were never promoted to latest.

ast-mcp-server v0.10.0

ast-mcp-server v0.10.0

v0.10.0 adds compiler-authoritative affected-test discovery and a more useful, bounded ast_explore response for agent workflows. It also keeps compiler reads fresh when optional SQLite persistence is unavailable and closes tight byte-budget edge cases without sacrificing MCP/batch parity.

Highlights

• Added read-only ast_find_test_candidates across MCP and ast-tool run, with fail-closed incomplete evidence, deterministic pagination, and JSON/TOON parity.
• Added deterministic ast_explore clusters, categorized omission metadata, and opt-in compiler-authoritative call spines.
• Added atomic call-spine byte admission: valid tight-budget requests now omit the whole optional aggregate with explicit metadata instead of returning an internal error.
• Preserved compiler-backed search and read freshness during stable SQLite capability fallback while keeping persistence health visible.
• Kept MCP and batch behavior aligned through the same registered handlers and deterministic benchmark evidence.

Verification

• Release commit: 7f97830d82d086e1a7ceafb84a8bc795be57039a
• Exact-SHA CI
• Security checks
• npm next publication
• Public-registry verification
• Stable latest promotion
• npm latest and next both resolve to 0.10.0 with provenance bound to the release commit.

Install

npm install --global ast-mcp-server@0.10.0

v0.10.0 supersedes v0.9.2 as the supported stable release.

ast-mcp-server v0.9.2

ast-mcp-server v0.9.2

v0.9.2 makes secure SQLite symbol-index persistence the default on the supported Linux runtime, while preserving an immediate memory-only rollback. It also strengthens cache management, runtime security, and the public release-verification contract.

Highlights

• SQLite persistence is now requested by default when AST_SYMBOL_INDEX_PERSISTENCE is unset or enabled.
• Set AST_SYMBOL_INDEX_PERSISTENCE=disabled for immediate memory-only rollback.
• Added bounded ast-tool cache inspect and confirmation-gated ast-tool cache clear --yes commands.
• Package-created cache directories use 0700; SQLite database, WAL, SHM, and quarantine files use 0600 with fail-closed filesystem checks.
• Raised the supported Node.js floor to >=22.13.0; CI validates Node.js 22.13.0 and Node.js 24.
• Public consumer verification now uses an owner-private canary root and one canonical 20-gate contract shared by the producer and validator.

Verification

• Release commit: 289e280109c2cbd07e353d3c35cc372545b684b4
• Exact-SHA CI
• Security checks
• Public-registry verification
• Green latest-promotion reconciliation
• npm latest and next both resolve to 0.9.2 with provenance bound to the release commit.

Install

npm install --global ast-mcp-server@0.9.2

v0.9.2 supersedes the unpromoted, next-only v0.9.0 and v0.9.1 recovery attempts.

ast-mcp-server v0.8.1

Highlights

• Added managed structural-editing guidance installation for Claude, OpenCode, Codex, Gemini, GitHub Copilot, and Hermes Agent, with per-client routing and stale-copy cleanup.
• Hardened managed setup publication against destination replacement, symlink substitution, same-inode mutation, and rollback races using descriptor-bound validation and fail-closed Linux primitives.
• Added terminal operation states for committed, possibly committed, rolled-back, and rollback-failed writes so retries and partial completion remain explicit.
• Strengthened the exact-tree release matrix with isolated Corepack environments and robust Linux process-group teardown evidence.
• Fixed public-registry verification so its managed-setup consumer smoke prepares the pinned GNU coreutils 9.7 mv prerequisite before execution.

Platform support

• Linux x64
• Node.js 22.5.0 and the current Node.js 24 line
• Managed setup-file mutation requires procfs plus the documented GNU coreutils mv and ln capabilities.

Verification

The immutable release candidate passed the complete 15-command matrix under Node.js 22.5.0 and Node.js 24.16.0 before publication. npm registry identity, integrity, provenance, public consumer behavior, dist-tags, annotated Git tag, and hosted release are verified as separate release transitions.

ast-mcp-server v0.7.2

Added

• Compiler-backed, freshness-aware impact traversal with bounded direct and transitive relationships and fail-closed test-candidate evidence.
• Opt-in SQLite symbol-index canary with corruption and write-failure fallback, restart reuse, explicit recovery, and bounded project-status observability. Memory-only indexing remains the default.
• Bounded per-project scheduling, cancellation and deadline semantics, idempotent graceful shutdown, and a closed public-error envelope with correlation IDs.
• Exact-SHA release workflows for npm next publication, public-registry verification, and separately authorized latest promotion.

Changed

• Symbol search and impact discovery remain compiler-authoritative while applying deterministic limits before globally materializing expensive relationships.
• The verified support target is Linux x64 with GNU coreutils mv supporting --update=none-fail, under Node.js 22.5.0 and the current Node.js 24 line. Other platforms and architectures remain unverified.
• The package ships its support and security policies alongside the README, changelog, binaries, and bundled structural-editing skill.

Fixed

• Public-registry verification uses physical fake Claude Code and Hermes executables so executable canonicalization preserves each agent identity.
• Promotion preflight validates raw npm metadata once, preserves the normalized schema boundary, and revalidates package identity, source SHA, registry integrity, next, and latest before and after promotion.

Security

• Release preparation, GitHub authorization, OIDC publication, npm-token promotion, and public verification use separated least-authority phases with lifecycle scripts disabled.
• Package publication binds the public tarball, packed gitHead, npm signatures, and SLSA provenance to the authorized source SHA.
• Public MCP and stderr errors are bounded and sanitized against source, path, stack, environment, and credential disclosure.

Verification

• CI passed on Node.js 22.5.0 and Node.js 24 for the exact tagged commit.
• Public-registry consumer verification passed all 16 gates.
• npm signature audit reported 0 invalid and 0 missing signatures.
• Published package readback verified ast-mcp-server@0.7.2 with both latest and next pointing to 0.7.2.
• Source commit: d27f8f80cf81bf81b1d1e5e76db7b8875344d91e.

ast-mcp-server v0.6.0

Added

• Read-only ast_get_file with bounded exact source lines, SHA-256 byte hashes, compiler snapshot state, and symbols_only output.
• Read-only ast_explore with query/file/symbol routing, progressive source and compiler-reference evidence, freshness/completeness metadata, unresolved selectors, and serialized byte budgets.
• Deterministic context workflow benchmark comparing full-file, primitive, and composed exploration workflows.

Verification

• 21 test suites / 163 tests passed.
• CI passed on Node.js 20.19 and 22.
• MCP surface verified at 14 tools.
• Published package readback verified at ast-mcp-server@0.6.0 with latest pointing to 0.6.0.

v0.5.1

Added

• Bounded JSON-safe project status contracts and the read-only ast_get_project_status tool.
• Session freshness metadata with separate source, config, and canonical fingerprints.
• Serialized operation-queue accounting without changing reviewed mutation semantics.

Changed

• Source synchronization verifies stability across refresh, snapshot, refresh, and verification before reporting fresh state.
• Phase 1 keeps the symbol index disabled while exposing explicit stale/degraded recovery state.

Security

• Status projections redact identities, absolute paths, credentials, and multi-token Authorization values.
• Noncanonical external fingerprints become opaque SHA-256 digests before projection.

Verification

• 152/152 tests passed.
• Typecheck, lint, build, format check, MCP/CLI/package smokes, audit, and pack checks passed.
• Result-shaping benchmark passed with 68.79795396419436% aggregate TOON token reduction.