| 1 |
root |
1.2 |
Revision history for AnyEvent::MCP |
| 2 |
|
|
|
| 3 |
root |
1.45 |
- tidy Perl import grouping, internal comments and source layout |
| 4 |
|
|
in the command-line tools and library modules. |
| 5 |
|
|
- stop imposing an IMAP account file mode check; access is governed |
| 6 |
|
|
by ordinary filesystem permissions. |
| 7 |
|
|
|
| 8 |
root |
1.44 |
- use the permission engine's literal matching convention for exact |
| 9 |
|
|
user identities and test positive permission-scope validation. |
| 10 |
|
|
- reject invalid browser WebSocket credentials via the documented |
| 11 |
|
|
handshake exception interface, producing one specific warning. |
| 12 |
|
|
- apply the same handshake rejection handling to Vim WebSocket |
| 13 |
|
|
connections, including peer and invalid-token/path warnings. |
| 14 |
|
|
- document user-management scopes and URL examples in command help. |
| 15 |
|
|
|
| 16 |
root |
1.43 |
- INCOMPATIBLE CHANGE: due to the added user management, existing |
| 17 |
|
|
url tokens have been invalidated. |
| 18 |
|
|
- add scoped, revocable MCP users with HKDF-derived credentials, |
| 19 |
|
|
an implicit global default user, and atomic user management; |
| 20 |
|
|
list effective user URLs with --print-url[=USER], also accepting |
| 21 |
|
|
--print-urls, without binding the advertised listener port. |
| 22 |
|
|
- associate HTTP credentials with per-request users, bind user |
| 23 |
|
|
identity to persistent permissions and permission continuations, |
| 24 |
|
|
and delegate original users through trusted multibrokers. |
| 25 |
|
|
- select the effective connect_user (default: default) for reverse |
| 26 |
|
|
MCP, private Vim and browser connections, independently of normal |
| 27 |
|
|
authenticated HTTP tool calls. |
| 28 |
root |
1.42 |
- treat empty directory paths as "." in mcp-fs list, find, grep and |
| 29 |
|
|
VCS cwd, without accepting empty filenames. |
| 30 |
root |
1.41 |
- support opportunistic HTTP/HTTPS and reverse MCP connections on the |
| 31 |
|
|
same listener, TLS certificate/key CLI options, and dual URL discovery; |
| 32 |
|
|
support verified HTTPS for outgoing reverse connections. |
| 33 |
root |
1.39 |
- treat idle HTTP disconnects as normal EOF while retaining errors |
| 34 |
|
|
for clients disconnecting during request headers or bodies. |
| 35 |
|
|
- identify failing MCP connections by client name, remote address |
| 36 |
|
|
and connection id, including modern per-request client metadata. |
| 37 |
root |
1.38 |
- trace local multibroker prompt starts, outcomes and cancellations |
| 38 |
|
|
with elapsed time to diagnose disappearing permission dialogs. |
| 39 |
|
|
- use an 8 MiB default MCP message size across JSONL and HTTP |
| 40 |
|
|
clients and servers, allowing large base64 tool requests through |
| 41 |
|
|
mcp-multibroker; log server transport errors at warn level |
| 42 |
|
|
instead of silently closing connections. |
| 43 |
root |
1.37 |
- load AnyEvent::Log at compile time so its format_time call is parsed |
| 44 |
|
|
as a function, fixing activity logging on Perl 5.10. |
| 45 |
|
|
|
| 46 |
root |
1.36 |
0.71 Fri 30 Oct 2026 18:01:51 CET |
| 47 |
root |
1.35 |
- make multibroker-spawned children ask for permissions through MCP, |
| 48 |
|
|
independently of the multibroker's own permission prompt mode. |
| 49 |
root |
1.36 |
- log VCS backend and a bounded, JSON-quoted preview of filenames for |
| 50 |
|
|
vcs-diff, vcs-status and vcs-log. |
| 51 |
|
|
- load only core modules in t/00_load.t; optional IMAP dependencies |
| 52 |
|
|
are tested separately when available. |
| 53 |
|
|
- let the fake bubblewrap test use the host temporary directory on |
| 54 |
|
|
systems without /tmp (notably Termux). |
| 55 |
|
|
- suppress Perl startup locale warnings in sandbox workers when |
| 56 |
|
|
the requested C.UTF-8 locale is unavailable. |
| 57 |
|
|
- canonicalize temporary test paths to match mcp-fs on systems with |
| 58 |
|
|
symlinked temp directories; diagnose failing filesystem assertions. |
| 59 |
|
|
- test SSE notification ordering at client delivery rather than |
| 60 |
|
|
server enqueue time, avoiding a network scheduling race. |
| 61 |
|
|
- diagnose failing multibroker HTTP integration tests with preflight |
| 62 |
|
|
responses, RPC results and bounded server startup diagnostics. |
| 63 |
root |
1.35 |
|
| 64 |
root |
1.34 |
0.7 Fri 30 Oct 2026 14:56:18 CET |
| 65 |
|
|
- WARNING: mcp-imap is unfinished and has not been tested against a real IMAP server. |
| 66 |
|
|
- INCOMPATIBLE CHANGE: rules have changed, old rules will be erased. |
| 67 |
|
|
- declare the same license terms as Perl itself in distribution metadata. |
| 68 |
|
|
- new mcp servers in this release: mcp-http |
| 69 |
|
|
- accept optional dimension default matcher for persistent-rule prompts; |
| 70 |
root |
1.33 |
- clarify that mcp-fs exec has private /tmp by default; shared-tmp |
| 71 |
|
|
exposes host /tmp and is not needed for ordinary temporary files or IPC. |
| 72 |
root |
1.32 |
- add mcp-fs vcs-log for Git, SVN, CVS and Mercurial, reusing bounded |
| 73 |
|
|
output and dedicated permission actions; SVN log receives network |
| 74 |
|
|
and SSH-agent grants alongside CVS operations. |
| 75 |
root |
1.31 |
mcp-webbrowser prefers any JavaScript in the current tab, while the |
| 76 |
|
|
independent origin dimension remains scoped to the current origin. |
| 77 |
root |
1.30 |
- log mcp-http requests with their method and a sanitized URL preview; |
| 78 |
|
|
identify mcp-http/$VERSION in User-Agent unless overridden by the caller. |
| 79 |
root |
1.31 |
Allow generic key=value context in the shared mcp_log_request formatter. |
| 80 |
root |
1.29 |
- silently treat invalid saved permission-rule files as empty, prompting |
| 81 |
|
|
instead of aborting broker startup; subsequent saves replace the old file. |
| 82 |
root |
1.30 |
- add mcp-http for arbitrary HTTP methods with URL-scoped approvals, |
| 83 |
|
|
caller-managed cookie jars, bounded bodies and text grep/regex/substitution. |
| 84 |
|
|
Disable redirects, retries and proxies; verify HTTPS certificates. |
| 85 |
|
|
- derive browser permission origins from reported URLs, not a new |
| 86 |
|
|
userscript field; keep older browser clients able to execute with |
| 87 |
|
|
origin-scoped permissions. |
| 88 |
|
|
- accept compatible browser-protocol minor versions; return empty |
| 89 |
|
|
operation discovery for 1.0 clients instead of disconnecting them. |
| 90 |
root |
1.29 |
Direct rule saves no longer perform semantic validation. |
| 91 |
root |
1.28 |
- replace special-case subject, origin and workdir permission scopes with |
| 92 |
|
|
named dimensions: metadata-driven prompts, generic match.NAME rule keys, |
| 93 |
|
|
and engine-enforced matcher choices. Reject old request and rule fields; |
| 94 |
|
|
no conversion or backward-compatible rule loading. |
| 95 |
root |
1.27 |
- preserve selected origin scopes when external permission helpers |
| 96 |
|
|
forward persistent decisions through native MCP elicitation. |
| 97 |
root |
1.26 |
- add origin-scoped MCP permission rules, selectable independently of |
| 98 |
root |
1.30 |
code/tab scopes; mcp-webbrowser derives browser origins for |
| 99 |
root |
1.26 |
JavaScript and tab operations, with exact, any-port and any-origin |
| 100 |
|
|
choices. Existing rules without origins continue to match all origins. |
| 101 |
root |
1.25 |
- use POSIX::uname instead of nonportable hostname -f for the XPCSE |
| 102 |
|
|
browser nickname, consistent with HTTP URL wildcard host selection. |
| 103 |
|
|
- make form helper test run via explicit ./ path, avoid early HTTP |
| 104 |
|
|
timer races, and test filesystem discovery with optional tools absent. |
| 105 |
root |
1.23 |
- report browser protocol rejections through bounded WebSocket close |
| 106 |
|
|
reasons; show abnormal disconnects in the userscript console and toast. |
| 107 |
|
|
- document browser wire-protocol minor-version compatibility: accept |
| 108 |
|
|
compatible older and newer clients without breaking base functionality. |
| 109 |
|
|
- remove the obsolete private stdio permission-result bridge from |
| 110 |
|
|
mcp-multibroker; use ordinary form elicitation. |
| 111 |
root |
1.22 |
- add per-tab operation discovery and calls to mcp-webbrowser, with |
| 112 |
|
|
per-tab routing, ordinary MCP permissions and browser protocol 1.1; |
| 113 |
|
|
the userscript initially advertises no extra operations. |
| 114 |
|
|
- make the unsandboxed-warning test tolerate diagnostic output from |
| 115 |
|
|
non-GNU utility probes (FreeBSD and BusyBox). |
| 116 |
|
|
- add mcp-imap with one named password-authenticated account per instance, |
| 117 |
|
|
bounded UID search, MIME reads, explicit mailbox/message mutations, |
| 118 |
|
|
UIDPLUS-only targeted expunge, forked worker and MCP permissions. |
| 119 |
root |
1.21 |
- propagate XPCSE save response ETags back to Vim session metadata; |
| 120 |
|
|
make stale upload HTTP status an editor error. |
| 121 |
|
|
- require GNU sed in worker tool discovery; report missing-Perl diagnostics in tests. |
| 122 |
root |
1.18 |
- xpcse: forward Vim's :write! flag through mcp-vim to browser |
| 123 |
|
|
uploads, without changing upload behavior yet. |
| 124 |
root |
1.19 |
- recommend rather than require WebSocket modules: only mcp-vim and |
| 125 |
|
|
mcp-webbrowser use them; mcp-vim loads them only for browser clients, |
| 126 |
|
|
and tests skip optional WebSocket coverage when unavailable. |
| 127 |
root |
1.18 |
|
| 128 |
root |
1.17 |
0.65 Fri 23 Oct 2026 22:41:32 CEST |
| 129 |
root |
1.14 |
- fix mcp-webbrowser userscript title indicator duplicating prefixes on empty titles. |
| 130 |
root |
1.17 |
- use built scripts in make test PATH, avoiding source shebangs and |
| 131 |
|
|
accidentally installed helpers in rule management tests. |
| 132 |
root |
1.15 |
- clarify browser execute code wrapper and reject function/symbol return |
| 133 |
|
|
values instead of silently converting them to null. |
| 134 |
root |
1.17 |
- fix many bugs in the testsuite. |
| 135 |
root |
1.13 |
|
| 136 |
root |
1.12 |
0.62 Thu 22 Oct 2026 13:32:52 CEST |
| 137 |
root |
1.16 |
- INCOMPATIBLE API CHANGE: mcp_getoptions now returns a hash reference instead of |
| 138 |
|
|
a key/value list. |
| 139 |
root |
1.11 |
- Simple accepts server_name/server_version independently of the local |
| 140 |
|
|
instance name, leaving server_info as an unmodified protocol override. |
| 141 |
|
|
- query multibroker children in parallel for tool and broker discovery, |
| 142 |
|
|
preserving tool order and returning partial results after 15 seconds |
| 143 |
|
|
instead of blocking on an unresponsive child. |
| 144 |
root |
1.8 |
- accept a missing trailing slash on HTTP MCP endpoint URLs, working |
| 145 |
root |
1.10 |
around Claude's MCP connector wrongly dropping it from the configured URL, |
| 146 |
root |
1.18 |
thus corrupting it. |
| 147 |
root |
1.7 |
- allow omitted ports in reverse extension URLs, defaulting to port 80. |
| 148 |
root |
1.9 |
- fix MCP client/server version fields serialized as JSON numbers in 0.61. |
| 149 |
root |
1.7 |
|
| 150 |
root |
1.6 |
0.61 Thu 22 Oct 2026 08:57:42 CEST |
| 151 |
root |
1.5 |
- resolve bind hostnames via AnyEvent::Socket instead of Socket::getaddrinfo. |
| 152 |
root |
1.4 |
- honor user-selected file permissions and preserve them across replacements. |
| 153 |
|
|
- fix permission test fixture grants. |
| 154 |
|
|
- fix activity log timestamp formatting on older perl versions. |
| 155 |
|
|
- correct multibroker test tool count (including meta-instructions). |
| 156 |
|
|
- fix perl 5.12 syntax errors in mcp-fs and mcp-vim. |
| 157 |
|
|
|
| 158 |
root |
1.3 |
0.6 Wed 21 Oct 2026 20:43:20 CEST |
| 159 |
root |
1.2 |
- 34k LOC of pure llm madness. but seems to work. yay. |
| 160 |
root |
1.1 |
|
| 161 |
|
|
0.0 Sat 03 Oct 2026 07:29:39 CEST |
| 162 |
|
|
- original version, an AnyEvent::HTTP clone. |
