Commit graph

  • 75e3116b10
    chore: 2.0.0-rc.1 (#1835) Cliff Hall 2026-07-28 00:31:35 -04:00
  • 145002925f
    ci: derive the npm dist-tag from the version instead of defaulting to latest (#1834) Cliff Hall 2026-07-28 00:15:58 -04:00
  • 844567585d
    chore(deps): upgrade @hono/node-server to 2.0.12 (#1832) Cliff Hall 2026-07-27 23:52:42 -04:00
  • 809b9fdf5c
    ci: set a least-privilege default GITHUB_TOKEN scope (#1831) Cliff Hall 2026-07-27 23:52:34 -04:00
  • 25106dcce4
    Merge pull request #1830 from modelcontextprotocol/chore/v2-golive Cliff Hall 2026-07-27 23:25:08 -04:00
  • ec5d8e139e chore: replace main's tree with v2 cliffhall 2026-07-27 23:10:36 -04:00
  • 47f92841bc
    fix: v1 dist-tag must be v1-latest — npm rejects v1 (#1829) Cliff Hall 2026-07-27 21:52:57 -04:00
  • 4f3e7fa167
    chore: pin v1 publishes to the v1 dist-tag (#1828) Cliff Hall 2026-07-27 21:47:46 -04:00
  • 9d74acf526
    chore: v1 deprecation notices in all four packages, bump to 1.0.1 (#1827) 1.0.1 Cliff Hall 2026-07-27 21:29:02 -04:00
  • 4d30d1cd1e
    docs: restore the missing docs/ targets and split the catalog-seeding wording (#1811) (#1812) Cliff Hall 2026-07-27 20:37:14 -04:00
  • 3188ee3a20 add v1/main to branches in main.yml cliffhall 2026-07-27 20:32:01 -04:00
  • de9d8a5024
    fix: wait for the TUI to exit before removing its temp dir (#1801) (#1814) Cliff Hall 2026-07-27 20:25:27 -04:00
  • cb454990eb
    docs: refresh V2 board Status option IDs in AGENTS.md (#1823) (#1825) Cliff Hall 2026-07-27 20:10:01 -04:00
  • b3be65b0b4
    docs: add CONTRIBUTORS.md issues-only policy (closes #1517) (#1604) Cliff Hall 2026-07-27 19:04:17 -04:00
  • 7784553674
    fix(auth): explicit re-authorize when the OAuth callback state was lost (#1808) (#1810) Cliff Hall 2026-07-27 18:08:31 -04:00
  • 01df9d81bb
    fix(core): start OAuth on a modern/auto-era connect (#1805) (#1809) Cliff Hall 2026-07-27 15:06:01 -04:00
  • d9e4f444a2
    test(cli,tui): typecheck the __tests__ dirs (#1791) (#1799) Cliff Hall 2026-07-27 12:05:35 -04:00
  • c2af547cc8
    fix(core): register peer-request handlers before connect (#1797) (#1798) Cliff Hall 2026-07-27 11:32:23 -04:00
  • cea22d86b8
    feat(web): enforce localhost-only binding; expand loopback origin allow-list (#1796) Cliff Hall 2026-07-26 22:15:10 -04:00
  • 33e88eac9f
    CLI: catalog listing, auth flags, and OAuth browser UX (#1782) Bob Dickinson 2026-07-26 13:55:25 -07:00
  • a7b2fdb2ef
    test(web): settle real-timer Transitions so the coverage gate can't leak 'window is not defined' (#1786) (#1793) Cliff Hall 2026-07-26 15:49:33 -04:00
  • 4defa32ac6
    chore: close a batch of quality-gate & tidy gaps (#1785 #1787 #1789 #1790 #1767) (#1792) Cliff Hall 2026-07-26 10:43:11 -04:00
  • 166ed38e7f
    chore(web): format-gate the ungated first-party TS/JS (server/, vite.config.ts, scripts/) (#1788) Cliff Hall 2026-07-25 23:15:45 -04:00
  • a82a70f4f5
    refactor(web): sharpen the src/lib vs src/utils rule and move misfiled modules (#1784) Cliff Hall 2026-07-25 22:24:30 -04:00
  • d009fcca09
    Fixed tab naming to correspond to the web client. (#1780) Bob Dickinson 2026-07-25 17:11:52 -07:00
  • 07d6316fba
    build(web): fail vite build on a browser-externalized Node built-in (#1769) (#1777) Cliff Hall 2026-07-25 19:45:11 -04:00
  • 28016ea0c8
    fix(web): degrade the connected header to the catalog name for an empty reported serverInfo name (#1774) (#1775) Cliff Hall 2026-07-25 14:41:42 -04:00
  • 820d38c438
    fix(web): render the connected header when a modern server omits serverInfo (#1773) Cliff Hall 2026-07-25 11:40:31 -04:00
  • da37692485
    refactor(web): sweep AGENTS.md TypeScript + Mantine rule violations (#1771) Cliff Hall 2026-07-25 11:38:49 -04:00
  • 8aba3122c5
    refactor(web): consolidate the three GET /api/config hooks into one (#1770) v2-alpha-15 Cliff Hall 2026-07-24 22:12:19 -04:00
  • 742e82515a
    ci: add headless-browser boot smoke for the web client (#1615) (#1768) v2-alpha-14 Cliff Hall 2026-07-24 19:11:46 -04:00
  • 373f346e5f
    chore: close quality-gate coverage gaps (#1689) (#1766) v2-alpha-13 Cliff Hall 2026-07-24 17:20:12 -04:00
  • d76c4d5379
    Merge pull request #1764 from modelcontextprotocol/v2/fix-1699-flaky-viewheader-animation Cliff Hall 2026-07-24 16:17:45 -04:00
  • 93cd0041a0
    test: cover EMA interactive leg 1 end-to-end (#1693) (#1765) Cliff Hall 2026-07-24 13:11:51 -04:00
  • 444701c59b test: de-flake ViewHeader connect/disconnect animation assertion (#1699) cliffhall 2026-07-24 12:27:24 -04:00
  • 40aaf47705
    test: deterministic remote-server teardown to kill #1667 afterEach hang (#1763) Cliff Hall 2026-07-24 12:20:54 -04:00
  • 2439ef9c3c
    web: disable Mantine transitions in tests to kill post-teardown timer flake (#1760) (#1761) v2-alpha-12 Cliff Hall 2026-07-24 10:58:23 -04:00
  • 0679b9c5ec
    web: de-flake fetchTracking redaction test — exclude volatile id from leak checks (#1757) (#1759) Cliff Hall 2026-07-24 10:06:38 -04:00
  • 99ef731746
    Refactor / justify codebase-wide 'as unknown as' casts (#1690) (#1756) Cliff Hall 2026-07-24 09:34:32 -04:00
  • e788bcbaca
    web: pin Connection Info modal header while body scrolls (#1754) (#1755) Cliff Hall 2026-07-23 22:08:04 -04:00
  • 092165476e
    web: pin Server/Client Settings modal header while body scrolls (#1753) Cliff Hall 2026-07-23 19:57:03 -04:00
  • c2b866110d
    tui: detect array-of-enum on items.enum alone (#1752) Cliff Hall 2026-07-23 19:12:45 -04:00
  • 8c41dcd383
    web+tui: honor enumNames in enum forms (#1750) Cliff Hall 2026-07-23 18:21:53 -04:00
  • 402d7b204d
    Server Settings: disambiguate EMA OAuth credential fields (#1692) (#1749) Cliff Hall 2026-07-23 16:51:24 -04:00
  • c51d6aabd2
    Extensions UI: own Advertised Extensions section + 'Client Advertised Extensions' heading (#1748) Cliff Hall 2026-07-23 12:10:13 -04:00
  • e2c75da5ce
    Extensions: Connection Info both eras + io.modelcontextprotocol/ui advertisement (Phase 3 of #1633) (#1744) Cliff Hall 2026-07-23 10:11:36 -04:00
  • fe295396af
    Extensions: advertised-extensions toggle in Server Settings (Phase 2 of #1633) (#1743) Cliff Hall 2026-07-22 16:23:43 -04:00
  • 2f80958d3f
    Extensions: first-class advertised-extensions map (Phase 1 of #1633) (#1742) Cliff Hall 2026-07-22 15:25:45 -04:00
  • e70a11360c
    Tools: x-mcp-header annotation tooling + -32602 unknown-tool rendering (#1632) (#1735) Cliff Hall 2026-07-22 11:42:54 -04:00
  • 2259b1a3e1
    Tasks: io.modelcontextprotocol/tasks extension on modern servers (era fork) (#1731) v2-alpha-11 Cliff Hall 2026-07-21 19:17:04 -04:00
  • 9140789869 fix: prevent DNS-rebinding TOCTOU in safeProxyFetch by pinning resolved IPs manjunathbhaskar 2026-07-21 11:59:46 +02:00
  • 320daf2f67
    Resources: subscriptions/listen model on modern servers (era fork) (#1630) (#1730) Cliff Hall 2026-07-20 19:33:40 -04:00
  • a71e6d2012
    Auth hardening CI gaps + SDK consolidation: EMA leg 2 / scopes (#1527) (#1725) v2-alpha-10 Bob Dickinson 2026-07-19 19:36:21 -07:00
  • ec185f1053
    Logging: per-request log level on modern servers (era fork) (#1629) (#1724) v2-alpha-9 Cliff Hall 2026-07-19 17:08:22 -04:00
  • b3b04c6939
    Thread cacheMode through managed list refresh via SDK cache-aware verbs (#1721) (#1723) v2-alpha-8 Cliff Hall 2026-07-19 01:06:31 -04:00
  • d552564966
    Network: modern Mcp-* headers, new error codes, cancellation-as-abort (#1628) (#1722) v2-alpha-7 Cliff Hall 2026-07-18 17:32:05 -04:00
  • 9b2c188d11
    MRTR: drive input_required manually to keep pending-request UX (#1704) (#1719) v2-alpha-6 Cliff Hall 2026-07-17 23:15:19 -04:00
  • ac3c1a122a
    Bump to version 1.0.0 (#1720) 1.0.0 Cliff Hall 2026-07-17 22:54:09 -04:00
  • d40c1c94e7
    fix(server): guard the /fetch proxy against SSRF to link-local/metadata (#53) (#1717) Cliff Hall 2026-07-17 20:43:19 -04:00
  • c146313bb3
    chore(deps): finalize security overrides and regenerate lockfile (#1718) Cliff Hall 2026-07-17 20:41:25 -04:00
  • ebd0550fec
    chore(deps): override @babel/core to ^7.29.6 (CVE fix) (#1712) Cliff Hall 2026-07-17 20:18:00 -04:00
  • 3ad1b8ad5e
    chore(deps): override form-data to ^4.0.6 (CVE fix) (#1710) Cliff Hall 2026-07-17 20:08:23 -04:00
  • 47dc2df106
    chore(deps): override hono to ^4.12.25 (CVE fixes) (#1708) Cliff Hall 2026-07-17 20:02:46 -04:00
  • 73d9b181fe
    History: MRTR conversation grouping + modern message vocabulary (#1705) v2-alpha-5 Cliff Hall 2026-07-17 20:02:11 -04:00
  • 3119422932
    chore(deps): bump shell-quote to ^1.8.4 (CVE fix) (#1711) Cliff Hall 2026-07-17 20:00:21 -04:00
  • b2025cd47b
    chore(deps): bump vite to ^7.3.5 (CVE fixes) (#1709) Cliff Hall 2026-07-17 19:59:15 -04:00
  • ab447dd480
    chore(deps): bump vitest to ^4.1.0 (CVE fix) (#1707) Cliff Hall 2026-07-17 19:59:11 -04:00
  • fd2def684f
    chore: pin prettier to 3.9.5 and run format check after install (#1716) Cliff Hall 2026-07-17 16:23:23 -04:00
  • e06c0a45f7
    Add modern-era (2026-07-28) test-server preset (#1700) (#1703) Cliff Hall 2026-07-17 11:12:40 -04:00
  • e026051b47
    Era-aware connection model & capability gating (#1626) (#1697) v2-alpha-4 Cliff Hall 2026-07-16 23:39:29 -04:00
  • 7fecebed5e
    OAuth: re-key store to (server, issuer) + SEP-837/2350/2352 auth UX (#1694) v2-alpha-3 Cliff Hall 2026-07-16 16:52:53 -04:00
  • 111d50b325 Address @claude review: issuer-stamp source gating + clear/activeIssuer + phase over-match v2-alpha-2 cliffhall 2026-07-16 15:48:31 -04:00
  • 5feebf25c2 OAuth: re-key store to (server, issuer) + SEP-837/2350/2352 auth UX (#1625) cliffhall 2026-07-16 13:53:13 -04:00
  • f915889fc4
    Merge pull request #1688 from modelcontextprotocol/v2/sdk-v2-migration-1624 Cliff Hall 2026-07-16 09:49:24 -04:00
  • f4fb4b50c9 Forward RFC 9207 iss to the v2 SDK (fixes OAuth + EMA leg 1) cliffhall 2026-07-15 20:16:43 -04:00
  • dbb8c40245 Address review: justify/refine SDK-gap casts (as unknown as) cliffhall 2026-07-15 14:47:10 -04:00
  • 39362dd5ff Merge remote-tracking branch 'origin/v2/main' into v2/sdk-v2-migration-1624 cliffhall 2026-07-15 14:15:50 -04:00
  • 8f70b60725
    web: Group tool-result resource_links in a scrollable "Resource Links" box with Protocol colors (#1686) Cliff Hall 2026-07-15 14:07:27 -04:00
  • 8a7a38f800 Fix MCP App load regression: translate ext-apps v1 setNotificationHandler API to v2 cliffhall 2026-07-15 12:44:20 -04:00
  • f9f79fff54 Address @claude review: format core/, typed output-validation error, document progress heuristic cliffhall 2026-07-15 11:08:54 -04:00
  • 19a6df7ad3 SDK v2 migration (behavior-neutral, versionNegotiation: 'legacy') (#1624) cliffhall 2026-07-15 10:44:24 -04:00
  • 8d33e76f97
    web: server-screen, footer, monitoring-sidebar, and responsive-header polish (#1683) v2-alpha-1 Cliff Hall 2026-07-14 08:55:39 -04:00
  • 590359abc5
    web: Add Tasks to the monitoring sidebar (#1681) Cliff Hall 2026-07-13 19:11:06 -04:00
  • 3d75ef5f8e
    web: Accessibility — accessible palette + WCAG AA contrast, labels, names, roles (#1679) Cliff Hall 2026-07-13 18:20:55 -04:00
  • e2a97c1b8a
    web+cli+docs: Wave 4 — deep-link auto-connect + programmatic MCP App review (rollup of #1576–#1578, #1665, #1666) (#1676) Cliff Hall 2026-07-12 00:31:35 -04:00
  • 7411fc886e web: address rollup review #1 — deep-link reconnect on restored activeServerId cliffhall 2026-07-11 23:41:10 -04:00
  • c6980f83ba Merge branch 'v2/1578-docs' into v2/1579-wave4-rollup cliffhall 2026-07-11 23:28:04 -04:00
  • f2d4b6936c Merge branch 'v2/1665-refresh-token' into v2/1579-wave4-rollup cliffhall 2026-07-11 23:27:58 -04:00
  • 43980fd68c Merge branch 'v2/1666-print-handoff' into v2/1579-wave4-rollup cliffhall 2026-07-11 23:26:39 -04:00
  • 864c6e7c7a Merge branch 'v2/1577-deeplink-openapp' into v2/1579-wave4-rollup cliffhall 2026-07-11 23:26:39 -04:00
  • e6278aea0f docs: address #1674 review — fix broken link + list rendering cliffhall 2026-07-11 23:25:20 -04:00
  • b8cd4fd431 web: address #1671 review nit — simplify redundant autoOpen guard cliffhall 2026-07-11 23:24:20 -04:00
  • ac49000738 cli: address #1672 review nits — correct doc ref + hoist normalizeServerUrl cliffhall 2026-07-11 23:23:19 -04:00
  • 59f3bd92a4 cli: address #1673 review — refresh fallback, 0600 write, distinct code cliffhall 2026-07-11 23:21:59 -04:00
  • 0beb6e65af web: address #1670 review — observable deep-link failures + correct stale-config connect cliffhall 2026-07-11 23:19:13 -04:00
  • a30a576017 docs: MCP App review recipe + root README pointer (#1578) cliffhall 2026-07-11 23:14:51 -04:00
  • cdf124106e cli: stored-auth injection honors refresh_token, not just access_token (#1665) cliffhall 2026-07-11 23:11:52 -04:00
  • 93f3fb64f2 cli: reconcile --print-handoff deep-link with #1576 canonical format (#1666) cliffhall 2026-07-11 23:02:45 -04:00
  • cbb2afe80c web: deep-link openApp/appArgs/autoOpen — pre-select & pre-fill an app from the URL (#1577) cliffhall 2026-07-11 22:58:34 -04:00
  • 0e93b13426 web: deep-link auto-connect + machine-readable connection status (#1576) cliffhall 2026-07-11 22:48:28 -04:00