[ViewVC] Annotation of: cvs/AnyEvent-MCP/Changes

Revision history for AnyEvent::MCP

        - use the permission engine's literal matching convention for exact
          user identities and test positive permission-scope validation.
        - reject invalid browser WebSocket credentials via the documented
          handshake exception interface, producing one specific warning.
        - apply the same handshake rejection handling to Vim WebSocket
          connections, including peer and invalid-token/path warnings.
        - document user-management scopes and URL examples in command help.

        - INCOMPATIBLE CHANGE: due to the added user management, existing
          url tokens have been invalidated.
        - add scoped, revocable MCP users with HKDF-derived credentials,
          an implicit global default user, and atomic user management;
          list effective user URLs with --print-url[=USER], also accepting
          --print-urls, without binding the advertised listener port.
        - associate HTTP credentials with per-request users, bind user
          identity to persistent permissions and permission continuations,
          and delegate original users through trusted multibrokers.
        - select the effective connect_user (default: default) for reverse
          MCP, private Vim and browser connections, independently of normal
          authenticated HTTP tool calls.
        - treat empty directory paths as "." in mcp-fs list, find, grep and
          VCS cwd, without accepting empty filenames.
        - support opportunistic HTTP/HTTPS and reverse MCP connections on the
          same listener, TLS certificate/key CLI options, and dual URL discovery;
          support verified HTTPS for outgoing reverse connections.
        - treat idle HTTP disconnects as normal EOF while retaining errors
          for clients disconnecting during request headers or bodies.
        - identify failing MCP connections by client name, remote address
          and connection id, including modern per-request client metadata.
        - trace local multibroker prompt starts, outcomes and cancellations
          with elapsed time to diagnose disappearing permission dialogs.
        - use an 8 MiB default MCP message size across JSONL and HTTP
          clients and servers, allowing large base64 tool requests through
          mcp-multibroker; log server transport errors at warn level
          instead of silently closing connections.
        - load AnyEvent::Log at compile time so its format_time call is parsed
          as a function, fixing activity logging on Perl 5.10.

0.71  Fri 30 Oct 2026 18:01:51 CET
        - make multibroker-spawned children ask for permissions through MCP,
          independently of the multibroker's own permission prompt mode.
        - log VCS backend and a bounded, JSON-quoted preview of filenames for
          vcs-diff, vcs-status and vcs-log.
        - load only core modules in t/00_load.t; optional IMAP dependencies
          are tested separately when available.
        - let the fake bubblewrap test use the host temporary directory on
          systems without /tmp (notably Termux).
        - suppress Perl startup locale warnings in sandbox workers when
          the requested C.UTF-8 locale is unavailable.
        - canonicalize temporary test paths to match mcp-fs on systems with
          symlinked temp directories; diagnose failing filesystem assertions.
        - test SSE notification ordering at client delivery rather than
          server enqueue time, avoiding a network scheduling race.
        - diagnose failing multibroker HTTP integration tests with preflight
          responses, RPC results and bounded server startup diagnostics.

0.7   Fri 30 Oct 2026 14:56:18 CET
        - WARNING: mcp-imap is unfinished and has not been tested against a real IMAP server.
        - INCOMPATIBLE CHANGE: rules have changed, old rules will be erased.
        - declare the same license terms as Perl itself in distribution metadata.
        - new mcp servers in this release: mcp-http
        - accept optional dimension default matcher for persistent-rule prompts;
        - clarify that mcp-fs exec has private /tmp by default; shared-tmp
          exposes host /tmp and is not needed for ordinary temporary files or IPC.
        - add mcp-fs vcs-log for Git, SVN, CVS and Mercurial, reusing bounded
          output and dedicated permission actions; SVN log receives network
          and SSH-agent grants alongside CVS operations.
          mcp-webbrowser prefers any JavaScript in the current tab, while the
          independent origin dimension remains scoped to the current origin.
        - log mcp-http requests with their method and a sanitized URL preview;
          identify mcp-http/$VERSION in User-Agent unless overridden by the caller.
          Allow generic key=value context in the shared mcp_log_request formatter.
        - silently treat invalid saved permission-rule files as empty, prompting
          instead of aborting broker startup; subsequent saves replace the old file.
        - add mcp-http for arbitrary HTTP methods with URL-scoped approvals,
          caller-managed cookie jars, bounded bodies and text grep/regex/substitution.
          Disable redirects, retries and proxies; verify HTTPS certificates.
        - derive browser permission origins from reported URLs, not a new
          userscript field; keep older browser clients able to execute with
          origin-scoped permissions.
        - accept compatible browser-protocol minor versions; return empty
          operation discovery for 1.0 clients instead of disconnecting them.
          Direct rule saves no longer perform semantic validation.
        - replace special-case subject, origin and workdir permission scopes with
          named dimensions: metadata-driven prompts, generic match.NAME rule keys,
          and engine-enforced matcher choices. Reject old request and rule fields;
          no conversion or backward-compatible rule loading.
        - preserve selected origin scopes when external permission helpers
          forward persistent decisions through native MCP elicitation.
        - add origin-scoped MCP permission rules, selectable independently of
          code/tab scopes; mcp-webbrowser derives browser origins for
          JavaScript and tab operations, with exact, any-port and any-origin
          choices. Existing rules without origins continue to match all origins.
        - use POSIX::uname instead of nonportable hostname -f for the XPCSE
          browser nickname, consistent with HTTP URL wildcard host selection.
        - make form helper test run via explicit ./ path, avoid early HTTP
          timer races, and test filesystem discovery with optional tools absent.
        - report browser protocol rejections through bounded WebSocket close
          reasons; show abnormal disconnects in the userscript console and toast.
        - document browser wire-protocol minor-version compatibility: accept
          compatible older and newer clients without breaking base functionality.
        - remove the obsolete private stdio permission-result bridge from
          mcp-multibroker; use ordinary form elicitation.
        - add per-tab operation discovery and calls to mcp-webbrowser, with
          per-tab routing, ordinary MCP permissions and browser protocol 1.1;
          the userscript initially advertises no extra operations.
        - make the unsandboxed-warning test tolerate diagnostic output from
          non-GNU utility probes (FreeBSD and BusyBox).
        - add mcp-imap with one named password-authenticated account per instance,
          bounded UID search, MIME reads, explicit mailbox/message mutations,
          UIDPLUS-only targeted expunge, forked worker and MCP permissions.
        - propagate XPCSE save response ETags back to Vim session metadata;
          make stale upload HTTP status an editor error.
        - require GNU sed in worker tool discovery; report missing-Perl diagnostics in tests.
        - xpcse: forward Vim's :write! flag through mcp-vim to browser
          uploads, without changing upload behavior yet.
        - recommend rather than require WebSocket modules: only mcp-vim and
          mcp-webbrowser use them; mcp-vim loads them only for browser clients,
          and tests skip optional WebSocket coverage when unavailable.

0.65  Fri 23 Oct 2026 22:41:32 CEST
        - fix mcp-webbrowser userscript title indicator duplicating prefixes on empty titles.
        - use built scripts in make test PATH, avoiding source shebangs and
          accidentally installed helpers in rule management tests.
        - clarify browser execute code wrapper and reject function/symbol return
          values instead of silently converting them to null.
        - fix many bugs in the testsuite.

0.62  Thu 22 Oct 2026 13:32:52 CEST
        - INCOMPATIBLE API CHANGE: mcp_getoptions now returns a hash reference instead of
          a key/value list.
        - Simple accepts server_name/server_version independently of the local
          instance name, leaving server_info as an unmodified protocol override.
        - query multibroker children in parallel for tool and broker discovery,
          preserving tool order and returning partial results after 15 seconds
          instead of blocking on an unresponsive child.
        - accept a missing trailing slash on HTTP MCP endpoint URLs, working
          around Claude's MCP connector wrongly dropping it from the configured URL,
          thus corrupting it.
        - allow omitted ports in reverse extension URLs, defaulting to port 80.
        - fix MCP client/server version fields serialized as JSON numbers in 0.61.

0.61  Thu 22 Oct 2026 08:57:42 CEST
        - resolve bind hostnames via AnyEvent::Socket instead of Socket::getaddrinfo.
        - honor user-selected file permissions and preserve them across replacements.
        - fix permission test fixture grants.
        - fix activity log timestamp formatting on older perl versions.
        - correct multibroker test tool count (including meta-instructions).
        - fix perl 5.12 syntax errors in mcp-fs and mcp-vim.

0.6  Wed 21 Oct 2026 20:43:20 CEST
        - 34k LOC of pure llm madness. but seems to work. yay.

0.0  Sat 03 Oct 2026 07:29:39 CEST
        - original version, an AnyEvent::HTTP clone.
Revision:	1.44
Committed:	Tue Nov 3 09:29:45 2026 UTC (8 days, 11 hours ago) by root
Branch:	MAIN
Changes since 1.43:	+8 -0 lines
Log Message:	* empty log message *
#	User	Rev	Content
1	root	1.2	Revision history for AnyEvent::MCP
2
3	root	1.44	- use the permission engine's literal matching convention for exact
4			user identities and test positive permission-scope validation.
5			- reject invalid browser WebSocket credentials via the documented
6			handshake exception interface, producing one specific warning.
7			- apply the same handshake rejection handling to Vim WebSocket
8			connections, including peer and invalid-token/path warnings.
9			- document user-management scopes and URL examples in command help.
10
11	root	1.43	- INCOMPATIBLE CHANGE: due to the added user management, existing
12			url tokens have been invalidated.
13			- add scoped, revocable MCP users with HKDF-derived credentials,
14			an implicit global default user, and atomic user management;
15			list effective user URLs with --print-url[=USER], also accepting
16			--print-urls, without binding the advertised listener port.
17			- associate HTTP credentials with per-request users, bind user
18			identity to persistent permissions and permission continuations,
19			and delegate original users through trusted multibrokers.
20			- select the effective connect_user (default: default) for reverse
21			MCP, private Vim and browser connections, independently of normal
22			authenticated HTTP tool calls.
23	root	1.42	- treat empty directory paths as "." in mcp-fs list, find, grep and
24			VCS cwd, without accepting empty filenames.
25	root	1.41	- support opportunistic HTTP/HTTPS and reverse MCP connections on the
26			same listener, TLS certificate/key CLI options, and dual URL discovery;
27			support verified HTTPS for outgoing reverse connections.
28	root	1.39	- treat idle HTTP disconnects as normal EOF while retaining errors
29			for clients disconnecting during request headers or bodies.
30			- identify failing MCP connections by client name, remote address
31			and connection id, including modern per-request client metadata.
32	root	1.38	- trace local multibroker prompt starts, outcomes and cancellations
33			with elapsed time to diagnose disappearing permission dialogs.
34			- use an 8 MiB default MCP message size across JSONL and HTTP
35			clients and servers, allowing large base64 tool requests through
36			mcp-multibroker; log server transport errors at warn level
37			instead of silently closing connections.
38	root	1.37	- load AnyEvent::Log at compile time so its format_time call is parsed
39			as a function, fixing activity logging on Perl 5.10.
40
41	root	1.36	0.71 Fri 30 Oct 2026 18:01:51 CET
42	root	1.35	- make multibroker-spawned children ask for permissions through MCP,
43			independently of the multibroker's own permission prompt mode.
44	root	1.36	- log VCS backend and a bounded, JSON-quoted preview of filenames for
45			vcs-diff, vcs-status and vcs-log.
46			- load only core modules in t/00_load.t; optional IMAP dependencies
47			are tested separately when available.
48			- let the fake bubblewrap test use the host temporary directory on
49			systems without /tmp (notably Termux).
50			- suppress Perl startup locale warnings in sandbox workers when
51			the requested C.UTF-8 locale is unavailable.
52			- canonicalize temporary test paths to match mcp-fs on systems with
53			symlinked temp directories; diagnose failing filesystem assertions.
54			- test SSE notification ordering at client delivery rather than
55			server enqueue time, avoiding a network scheduling race.
56			- diagnose failing multibroker HTTP integration tests with preflight
57			responses, RPC results and bounded server startup diagnostics.
58	root	1.35
59	root	1.34	0.7 Fri 30 Oct 2026 14:56:18 CET
60			- WARNING: mcp-imap is unfinished and has not been tested against a real IMAP server.
61			- INCOMPATIBLE CHANGE: rules have changed, old rules will be erased.
62			- declare the same license terms as Perl itself in distribution metadata.
63			- new mcp servers in this release: mcp-http
64			- accept optional dimension default matcher for persistent-rule prompts;
65	root	1.33	- clarify that mcp-fs exec has private /tmp by default; shared-tmp
66			exposes host /tmp and is not needed for ordinary temporary files or IPC.
67	root	1.32	- add mcp-fs vcs-log for Git, SVN, CVS and Mercurial, reusing bounded
68			output and dedicated permission actions; SVN log receives network
69			and SSH-agent grants alongside CVS operations.
70	root	1.31	mcp-webbrowser prefers any JavaScript in the current tab, while the
71			independent origin dimension remains scoped to the current origin.
72	root	1.30	- log mcp-http requests with their method and a sanitized URL preview;
73			identify mcp-http/$VERSION in User-Agent unless overridden by the caller.
74	root	1.31	Allow generic key=value context in the shared mcp_log_request formatter.
75	root	1.29	- silently treat invalid saved permission-rule files as empty, prompting
76			instead of aborting broker startup; subsequent saves replace the old file.
77	root	1.30	- add mcp-http for arbitrary HTTP methods with URL-scoped approvals,
78			caller-managed cookie jars, bounded bodies and text grep/regex/substitution.
79			Disable redirects, retries and proxies; verify HTTPS certificates.
80			- derive browser permission origins from reported URLs, not a new
81			userscript field; keep older browser clients able to execute with
82			origin-scoped permissions.
83			- accept compatible browser-protocol minor versions; return empty
84			operation discovery for 1.0 clients instead of disconnecting them.
85	root	1.29	Direct rule saves no longer perform semantic validation.
86	root	1.28	- replace special-case subject, origin and workdir permission scopes with
87			named dimensions: metadata-driven prompts, generic match.NAME rule keys,
88			and engine-enforced matcher choices. Reject old request and rule fields;
89			no conversion or backward-compatible rule loading.
90	root	1.27	- preserve selected origin scopes when external permission helpers
91			forward persistent decisions through native MCP elicitation.
92	root	1.26	- add origin-scoped MCP permission rules, selectable independently of
93	root	1.30	code/tab scopes; mcp-webbrowser derives browser origins for
94	root	1.26	JavaScript and tab operations, with exact, any-port and any-origin
95			choices. Existing rules without origins continue to match all origins.
96	root	1.25	- use POSIX::uname instead of nonportable hostname -f for the XPCSE
97			browser nickname, consistent with HTTP URL wildcard host selection.
98			- make form helper test run via explicit ./ path, avoid early HTTP
99			timer races, and test filesystem discovery with optional tools absent.
100	root	1.23	- report browser protocol rejections through bounded WebSocket close
101			reasons; show abnormal disconnects in the userscript console and toast.
102			- document browser wire-protocol minor-version compatibility: accept
103			compatible older and newer clients without breaking base functionality.
104			- remove the obsolete private stdio permission-result bridge from
105			mcp-multibroker; use ordinary form elicitation.
106	root	1.22	- add per-tab operation discovery and calls to mcp-webbrowser, with
107			per-tab routing, ordinary MCP permissions and browser protocol 1.1;
108			the userscript initially advertises no extra operations.
109			- make the unsandboxed-warning test tolerate diagnostic output from
110			non-GNU utility probes (FreeBSD and BusyBox).
111			- add mcp-imap with one named password-authenticated account per instance,
112			bounded UID search, MIME reads, explicit mailbox/message mutations,
113			UIDPLUS-only targeted expunge, forked worker and MCP permissions.
114	root	1.21	- propagate XPCSE save response ETags back to Vim session metadata;
115			make stale upload HTTP status an editor error.
116			- require GNU sed in worker tool discovery; report missing-Perl diagnostics in tests.
117	root	1.18	- xpcse: forward Vim's :write! flag through mcp-vim to browser
118			uploads, without changing upload behavior yet.
119	root	1.19	- recommend rather than require WebSocket modules: only mcp-vim and
120			mcp-webbrowser use them; mcp-vim loads them only for browser clients,
121			and tests skip optional WebSocket coverage when unavailable.
122	root	1.18
123	root	1.17	0.65 Fri 23 Oct 2026 22:41:32 CEST
124	root	1.14	- fix mcp-webbrowser userscript title indicator duplicating prefixes on empty titles.
125	root	1.17	- use built scripts in make test PATH, avoiding source shebangs and
126			accidentally installed helpers in rule management tests.
127	root	1.15	- clarify browser execute code wrapper and reject function/symbol return
128			values instead of silently converting them to null.
129	root	1.17	- fix many bugs in the testsuite.
130	root	1.13
131	root	1.12	0.62 Thu 22 Oct 2026 13:32:52 CEST
132	root	1.16	- INCOMPATIBLE API CHANGE: mcp_getoptions now returns a hash reference instead of
133			a key/value list.
134	root	1.11	- Simple accepts server_name/server_version independently of the local
135			instance name, leaving server_info as an unmodified protocol override.
136			- query multibroker children in parallel for tool and broker discovery,
137			preserving tool order and returning partial results after 15 seconds
138			instead of blocking on an unresponsive child.
139	root	1.8	- accept a missing trailing slash on HTTP MCP endpoint URLs, working
140	root	1.10	around Claude's MCP connector wrongly dropping it from the configured URL,
141	root	1.18	thus corrupting it.
142	root	1.7	- allow omitted ports in reverse extension URLs, defaulting to port 80.
143	root	1.9	- fix MCP client/server version fields serialized as JSON numbers in 0.61.
144	root	1.7
145	root	1.6	0.61 Thu 22 Oct 2026 08:57:42 CEST
146	root	1.5	- resolve bind hostnames via AnyEvent::Socket instead of Socket::getaddrinfo.
147	root	1.4	- honor user-selected file permissions and preserve them across replacements.
148			- fix permission test fixture grants.
149			- fix activity log timestamp formatting on older perl versions.
150			- correct multibroker test tool count (including meta-instructions).
151			- fix perl 5.12 syntax errors in mcp-fs and mcp-vim.
152
153	root	1.3	0.6 Wed 21 Oct 2026 20:43:20 CEST
154	root	1.2	- 34k LOC of pure llm madness. but seems to work. yay.
155	root	1.1
156			0.0 Sat 03 Oct 2026 07:29:39 CEST
157			- original version, an AnyEvent::HTTP clone.