[ViewVC] Annotation of: cvs/cvsroot/AnyEvent-MCP/Changes

Revision history for AnyEvent::MCP

        - INCOMPATIBLE CHANGE: rules have changed, old rules will be erased.
        - log mcp-http requests with their method and a sanitized URL preview;
          identify mcp-http/$VERSION in User-Agent unless overridden by the caller.
          Allow custom context in the shared mcp_log_request formatter.
        - silently treat invalid saved permission-rule files as empty, prompting
          instead of aborting broker startup; subsequent saves replace the old file.
        - add mcp-http for arbitrary HTTP methods with URL-scoped approvals,
          caller-managed cookie jars, bounded bodies and text grep/regex/substitution.
          Disable redirects, retries and proxies; verify HTTPS certificates.
        - derive browser permission origins from reported URLs, not a new
          userscript field; keep older browser clients able to execute with
          origin-scoped permissions.
        - accept compatible browser-protocol minor versions; return empty
          operation discovery for 1.0 clients instead of disconnecting them.
          Direct rule saves no longer perform semantic validation.
        - replace special-case subject, origin and workdir permission scopes with
          named dimensions: metadata-driven prompts, generic match.NAME rule keys,
          and engine-enforced matcher choices. Reject old request and rule fields;
          no conversion or backward-compatible rule loading.
        - preserve selected origin scopes when external permission helpers
          forward persistent decisions through native MCP elicitation.
        - add origin-scoped MCP permission rules, selectable independently of
          code/tab scopes; mcp-webbrowser derives browser origins for
          JavaScript and tab operations, with exact, any-port and any-origin
          choices. Existing rules without origins continue to match all origins.
        - use POSIX::uname instead of nonportable hostname -f for the XPCSE
          browser nickname, consistent with HTTP URL wildcard host selection.
        - make form helper test run via explicit ./ path, avoid early HTTP
          timer races, and test filesystem discovery with optional tools absent.
        - report browser protocol rejections through bounded WebSocket close
          reasons; show abnormal disconnects in the userscript console and toast.
        - document browser wire-protocol minor-version compatibility: accept
          compatible older and newer clients without breaking base functionality.
        - remove the obsolete private stdio permission-result bridge from
          mcp-multibroker; use ordinary form elicitation.
        - add per-tab operation discovery and calls to mcp-webbrowser, with
          per-tab routing, ordinary MCP permissions and browser protocol 1.1;
          the userscript initially advertises no extra operations.
        - make the unsandboxed-warning test tolerate diagnostic output from
          non-GNU utility probes (FreeBSD and BusyBox).
        - add mcp-imap with one named password-authenticated account per instance,
          bounded UID search, MIME reads, explicit mailbox/message mutations,
          UIDPLUS-only targeted expunge, forked worker and MCP permissions.
        - propagate XPCSE save response ETags back to Vim session metadata;
          make stale upload HTTP status an editor error.
        - require GNU sed in worker tool discovery; report missing-Perl diagnostics in tests.
        - xpcse: forward Vim's :write! flag through mcp-vim to browser
          uploads, without changing upload behavior yet.
        - recommend rather than require WebSocket modules: only mcp-vim and
          mcp-webbrowser use them; mcp-vim loads them only for browser clients,
          and tests skip optional WebSocket coverage when unavailable.

0.65  Fri 23 Oct 2026 22:41:32 CEST
        - fix mcp-webbrowser userscript title indicator duplicating prefixes on empty titles.
        - use built scripts in make test PATH, avoiding source shebangs and
          accidentally installed helpers in rule management tests.
        - clarify browser execute code wrapper and reject function/symbol return
          values instead of silently converting them to null.
        - fix many bugs in the testsuite.

0.62  Thu 22 Oct 2026 13:32:52 CEST
        - INCOMPATIBLE API CHANGE: mcp_getoptions now returns a hash reference instead of
          a key/value list.
        - Simple accepts server_name/server_version independently of the local
          instance name, leaving server_info as an unmodified protocol override.
        - query multibroker children in parallel for tool and broker discovery,
          preserving tool order and returning partial results after 15 seconds
          instead of blocking on an unresponsive child.
        - accept a missing trailing slash on HTTP MCP endpoint URLs, working
          around Claude's MCP connector wrongly dropping it from the configured URL,
          thus corrupting it.
        - allow omitted ports in reverse extension URLs, defaulting to port 80.
        - fix MCP client/server version fields serialized as JSON numbers in 0.61.

0.61  Thu 22 Oct 2026 08:57:42 CEST
        - resolve bind hostnames via AnyEvent::Socket instead of Socket::getaddrinfo.
        - honor user-selected file permissions and preserve them across replacements.
        - fix permission test fixture grants.
        - fix activity log timestamp formatting on older perl versions.
        - correct multibroker test tool count (including meta-instructions).
        - fix perl 5.12 syntax errors in mcp-fs and mcp-vim.

0.6  Wed 21 Oct 2026 20:43:20 CEST
        - 34k LOC of pure llm madness. but seems to work. yay.

0.0  Sat 03 Oct 2026 07:29:39 CEST
        - original version, an AnyEvent::HTTP clone.
Revision:	1.30
Committed:	Wed Oct 28 22:28:23 2026 UTC (2 weeks, 1 day ago) by root
Branch:	MAIN
Changes since 1.29:	+13 -2 lines
Log Message:	* empty log message *
#	User	Rev	Content
1	root	1.2	Revision history for AnyEvent::MCP
2
3	root	1.30	- INCOMPATIBLE CHANGE: rules have changed, old rules will be erased.
4			- log mcp-http requests with their method and a sanitized URL preview;
5			identify mcp-http/$VERSION in User-Agent unless overridden by the caller.
6			Allow custom context in the shared mcp_log_request formatter.
7	root	1.29	- silently treat invalid saved permission-rule files as empty, prompting
8			instead of aborting broker startup; subsequent saves replace the old file.
9	root	1.30	- add mcp-http for arbitrary HTTP methods with URL-scoped approvals,
10			caller-managed cookie jars, bounded bodies and text grep/regex/substitution.
11			Disable redirects, retries and proxies; verify HTTPS certificates.
12			- derive browser permission origins from reported URLs, not a new
13			userscript field; keep older browser clients able to execute with
14			origin-scoped permissions.
15			- accept compatible browser-protocol minor versions; return empty
16			operation discovery for 1.0 clients instead of disconnecting them.
17	root	1.29	Direct rule saves no longer perform semantic validation.
18	root	1.28	- replace special-case subject, origin and workdir permission scopes with
19			named dimensions: metadata-driven prompts, generic match.NAME rule keys,
20			and engine-enforced matcher choices. Reject old request and rule fields;
21			no conversion or backward-compatible rule loading.
22	root	1.27	- preserve selected origin scopes when external permission helpers
23			forward persistent decisions through native MCP elicitation.
24	root	1.26	- add origin-scoped MCP permission rules, selectable independently of
25	root	1.30	code/tab scopes; mcp-webbrowser derives browser origins for
26	root	1.26	JavaScript and tab operations, with exact, any-port and any-origin
27			choices. Existing rules without origins continue to match all origins.
28	root	1.25	- use POSIX::uname instead of nonportable hostname -f for the XPCSE
29			browser nickname, consistent with HTTP URL wildcard host selection.
30			- make form helper test run via explicit ./ path, avoid early HTTP
31			timer races, and test filesystem discovery with optional tools absent.
32	root	1.23	- report browser protocol rejections through bounded WebSocket close
33			reasons; show abnormal disconnects in the userscript console and toast.
34			- document browser wire-protocol minor-version compatibility: accept
35			compatible older and newer clients without breaking base functionality.
36			- remove the obsolete private stdio permission-result bridge from
37			mcp-multibroker; use ordinary form elicitation.
38	root	1.22	- add per-tab operation discovery and calls to mcp-webbrowser, with
39			per-tab routing, ordinary MCP permissions and browser protocol 1.1;
40			the userscript initially advertises no extra operations.
41			- make the unsandboxed-warning test tolerate diagnostic output from
42			non-GNU utility probes (FreeBSD and BusyBox).
43			- add mcp-imap with one named password-authenticated account per instance,
44			bounded UID search, MIME reads, explicit mailbox/message mutations,
45			UIDPLUS-only targeted expunge, forked worker and MCP permissions.
46	root	1.21	- propagate XPCSE save response ETags back to Vim session metadata;
47			make stale upload HTTP status an editor error.
48			- require GNU sed in worker tool discovery; report missing-Perl diagnostics in tests.
49	root	1.18	- xpcse: forward Vim's :write! flag through mcp-vim to browser
50			uploads, without changing upload behavior yet.
51	root	1.19	- recommend rather than require WebSocket modules: only mcp-vim and
52			mcp-webbrowser use them; mcp-vim loads them only for browser clients,
53			and tests skip optional WebSocket coverage when unavailable.
54	root	1.18
55	root	1.17	0.65 Fri 23 Oct 2026 22:41:32 CEST
56	root	1.14	- fix mcp-webbrowser userscript title indicator duplicating prefixes on empty titles.
57	root	1.17	- use built scripts in make test PATH, avoiding source shebangs and
58			accidentally installed helpers in rule management tests.
59	root	1.15	- clarify browser execute code wrapper and reject function/symbol return
60			values instead of silently converting them to null.
61	root	1.17	- fix many bugs in the testsuite.
62	root	1.13
63	root	1.12	0.62 Thu 22 Oct 2026 13:32:52 CEST
64	root	1.16	- INCOMPATIBLE API CHANGE: mcp_getoptions now returns a hash reference instead of
65			a key/value list.
66	root	1.11	- Simple accepts server_name/server_version independently of the local
67			instance name, leaving server_info as an unmodified protocol override.
68			- query multibroker children in parallel for tool and broker discovery,
69			preserving tool order and returning partial results after 15 seconds
70			instead of blocking on an unresponsive child.
71	root	1.8	- accept a missing trailing slash on HTTP MCP endpoint URLs, working
72	root	1.10	around Claude's MCP connector wrongly dropping it from the configured URL,
73	root	1.18	thus corrupting it.
74	root	1.7	- allow omitted ports in reverse extension URLs, defaulting to port 80.
75	root	1.9	- fix MCP client/server version fields serialized as JSON numbers in 0.61.
76	root	1.7
77	root	1.6	0.61 Thu 22 Oct 2026 08:57:42 CEST
78	root	1.5	- resolve bind hostnames via AnyEvent::Socket instead of Socket::getaddrinfo.
79	root	1.4	- honor user-selected file permissions and preserve them across replacements.
80			- fix permission test fixture grants.
81			- fix activity log timestamp formatting on older perl versions.
82			- correct multibroker test tool count (including meta-instructions).
83			- fix perl 5.12 syntax errors in mcp-fs and mcp-vim.
84
85	root	1.3	0.6 Wed 21 Oct 2026 20:43:20 CEST
86	root	1.2	- 34k LOC of pure llm madness. but seems to work. yay.
87	root	1.1
88			0.0 Sat 03 Oct 2026 07:29:39 CEST
89			- original version, an AnyEvent::HTTP clone.