ast-mcp-server v0.13.0

ast-mcp-server v0.13.0

v0.13.0 adds the DeepSeek Harness Developer Preview adapter, with exact host and bridge identities and a fail-closed mutation boundary.

Highlights

• Ships cordis.patch.yml and the exact "dsh": {"bundle": {"patch": "./cordis.patch.yml"}} package contract.
• Supports Harness-mediated reads, dry-run rename preparation, and operation preview.
• Keeps ast_apply_operation denied unless AST_MCP_APPLY_GUARD=allow; unset, deny, and invalid values remain fail-closed.
• Adds a mandatory, non-skipping compatibility gate against the pinned Harness revision and MCP client.

Supported scope

• Requires Node.js >=22.13.0.
• The Developer Preview covers reads, prepare, and preview; the shipped configuration denies apply.
• Supported for trusted single-user local stdio use on documented Linux x64 boundaries. Other platforms and remote or multi-tenant operation remain unverified.

Verification

• Release commit
• Exact-SHA CI
• Security checks
• npm next publication
• Public-registry verification
• Stable latest promotion
• The promotion mutation succeeded; the workflow exhausted bounded readback before registry propagation. Independent npm and direct-registry reads confirmed latest and next at 0.13.0; promotion was not retried.
• Exact-SHA CI passed the mandatory Harness gate under Node.js 22.13.0 and Node.js 24.
• npm latest and next both resolve to 0.13.0 with gitHead bound to the release commit.

Install

npm install --global ast-mcp-server@0.13.0

v0.13.0 supersedes v0.12.0 as the supported stable release.