[ViewVC] Annotation of: cvs/cvsroot/AnyEvent-MCP/Changes

Revision history for AnyEvent::MCP

0.83  (unreleased)
        - add worker-local immutable UID SORT (SUBJECT DATE) snapshots for
          subject-grouped classification: sort_create returns the first 100
          UIDs, sort_page pages without re-sorting, sort_discard frees the
          snapshot; one snapshot per worker, invalidated on restart.
        - expose read-only UID THREAD ORDEREDSUBJECT through mcp-imap:
          group by base subject with optional SEARCH filter and UID range,
          retaining the complete nested server order without pagination.
        - keep mcp-imap connections alive with an idle NOOP (250 seconds by
          default, configurable via --keepalive, 0 disables); stop pinging
          on failure, and reconnect on the next tool call without retrying
          interrupted operations.
        - allow shell-friendly instance names (ASCII alphanumerics, underscore,
          hyphen, dot, @ and +), with separate strict managed-user names.
        - fold small state-file locking and atomic replacement helper into
          MCP.pm instead of a separate AnyEvent::MCP::File module.
        - make --ask a shared common option, with per-option exclusion;
          add --ask none to deny unresolved permissions and decline
          downstream elicitation without prompting.
        - document mcp-imap login keys individually in --help and manpage;
          support tls connect/starttls/none (including explicit unencrypted IMAP)
          and reset default ports on TLS mode changes.
        - report LOGINDISABLED with no supported SASL mechanism cleanly on
          IMAP password login, without obscure Authen::SASL warnings.
        - add mcp_permissions to Simple: default permission engine, explicit
          object or explicit undef; apply --ask and automatic rule overrides
          centrally without dropping application-supplied automatic rules.
        - give mcp-fs writable private /tmp and /var/tmp (mode 1777) even
          with world-read; only shared-tmp or world-write exposes host
          temporary directories. Make world-write formally imply shared-tmp
          for permission checks; document the private/host lifetime distinction.
        - add read-only mcp-imap previews for 25 UIDs, with bounded partial
          MIME decoding, HTML link preservation and grouped IMAP FETCH calls.
        - allow mcp-imap messages to fetch selected UIDs without SEARCH.
        - actually truncate bounded IMAP part/raw responses to max_bytes,
          not just flag them as truncated.
        - use a 15-second HTTP read-inactivity timeout by default, suspended
          while processing complete requests; respect explicit handle rtimeout.
        - load MIME::Base64 in the HTTP server itself for encoded modern
          Mcp-Name headers, without depending on the HTTP client loading it.
        - log ordinary HTTP 404 responses at trace rather than warn,
          including GET /; keep other HTTP rejection warnings.
        - return 404 to GET / even when / is the MCP POST endpoint; drop
          the unhelpful connection object address from HTTP rejection logs
          while retaining the remote address and sanitized URI.
        - reuse the latest saved per-dimension scope as the next permission
          rule editor's default where offered, otherwise keep the original
          conservative choice; native, YAD and terminal forms agree.
        - handle the common token-only HTTP endpoint in warning logs:
          redact known tokens without misclassifying unrelated paths.
        - include bounded, JSON-escaped request paths in rejected HTTP request
          warnings; omit queries and redact configured and attempted URL tokens.
        - show captured helper status, stderr and stdout when the permission
          UI test fails, and report remote file-patch results and file content
          when the mock remote filesystem test fails (CPAN Testers diagnostics).

0.82  Fri 06 Nov 2026 15:53:46 CET
        - add a first-permission-dialog walkthrough to Intro.pod, explaining
          one-time versus persistent grants, rule scopes and exec stdin risks;
          correct its description of logical workdir IDs.
        - add common repeatable -s/--set KEY=VALUE process-local overrides
          for trusted instance configuration, after program/instance defaults.
        - key remote mcp-fs host permissions by --host alone, independent of
          --rsh; add independent local/remote host scopes (this host by
          default, or all hosts), retaining old unscoped saved rules.
          Workdir scopes remain plain paths, independent of host.
        - omit single-choice permission scope selectors from native, YAD and
          terminal rule dialogs, automatically retaining the sole match in
          saved rules without broadening their applicability.
        - log rejected HTTP requests (status 400 and above) with method,
          status and peer information, without leaking URL tokens; demote
          ordinary connection/TLS errors to trace.
        - do not warn on routine GET / requests; keep the normal 404
          response without exposing a server-identification page.
        - preserve mcp-vim subprocess stderr when its JSONL initialization
          fails, instead of hiding the failure behind EOF and SIGPIPE.
        - bootstrap remote mcp-fs over a short Perl command, streaming the
          launcher source over stdin. Avoid rsh command length limits and
          preserve worker input across exec by using exact sysread.
        - format mcp-fs sandbox grants, tools, trusted configuration keys
          and permission action classes as individually searchable POD items.
        - give the mock remote filesystem test its running Perl interpreter
          explicitly, rather than assuming it is in a fixed Unix PATH.
        - avoid locale-dependent TCP error strings in reverse-connection tests,
          and skip mcp-imap provider CLI tests when optional fork modules
          are unavailable while retaining standalone provider parser tests.

0.81  Thu 05 Nov 2026 04:51:59 CET
        - keep OAuth2 tests working without optional Mail::IMAPTalk,
          IO::Socket::SSL or Authen::SASL; skip only worker-specific checks.
        - support optional `mount-try.SUFFIX = ro:/path` or `rw:/path` in
          mcp-fs configuration. Pass these directly as bubblewrap
          --ro-bind-try/--bind-try for each invocation, without startup path
          checks, locally and remotely; required mount.* entries are unchanged.
        - support one remote host per mcp-fs instance with -h/--host and
          -e/--rsh; resolve remote workdirs and available tools in a single
          startup probe, then execute existing workers through a binary-framed
          remote Perl launcher without installing any MCP modules remotely.
        - use logical absolute pathnames (without resolving symlinks) as compact
          workdir IDs across hosts; qualify remote permission scopes independently.
          Named profiles remain shared between instances. Report cached remote
          VCS markers and remote umask.
        - reserve -h for application-specific options; --help remains common.
        - test remote workers, external GNU utilities, permission isolation,
          shell argument quoting and startup probing using a mock remote shell
          and bubblewrap, including unsandboxed/auto behavior. Verify matching
          workdir IDs for identical logical paths across local and remote
          instances.
        - make mock remote-agent tests independent of a local SSH_AUTH_SOCK
          inherited from the test runner (including CPAN Testers).
        - document --eager when starting mcp-webbrowser through multibroker;
          defer possible downstream preferences for --eager and --hidden.

0.8   Thu 05 Nov 2026 01:52:48 CET
        - INCOMPATIBLE CHANGE: due to the added user management, existing
          url tokens have been invalidated.
        - limit distribution permission normalization to its staging
          directory, and supply proper CPAN author and abstract metadata.
        - give shared command-line switches their own reference in
          Server::Simple; use individually indexed POD items for executable
          options and application-specific shared-option behavior.
        - refresh the introductory guide and mcp-imap/mcp-http manuals
          with first-use workflows, OAuth2 setup, mailbox/search examples
          and reverse-TLS troubleshooting; correct stale retry documentation.
        - extend mcp-imap SEARCH filters with recursive AND/OR/NOT, header,
          text/body, date, size and flag criteria; use explicitly quoted
          IMAP arguments and bounded filter complexity.
        - capture deliberately triggered connection errors in test assertions,
          avoiding noisy successful test runs.
        - expose IMAP LSUB to inspect subscribed mailboxes, alongside
          subscribe/unsubscribe; return the same format as LIST.
        - remove superseded IMAP OAuth provider and pagination prototypes
          and their obsolete reference tests.
        - defer outgoing mail submission research (mcp-smtp or mcp-imap)
          in TODO.md.
        - retry reverse connections only for TCP connection refusal and
          unexpected disconnects; report and stop on other TCP errors or
          TLS handshake/verification failures.
        - force scalar context when checking Mail::IMAPTalk results;
          list context truncated LIST responses and could corrupt SEARCH
          results. Test with context-sensitive IMAP mocks.
        - report HTTPS reverse-connection handshake failures rather than
          silently retrying; send credentials only after verified TLS succeeds.
        - omit pointless mailbox permission dimension for mcp-imap mailboxes.
        - clarify expected OAuth redirect error page and account selection.
        - implement mcp-imap OAuth2 authorization-code login with PKCE,
          human-pasted headless browser redirect, HTTPS token exchange,
          refresh-token persistence/rotation and IMAP SASL XOAUTH2.
          Keep interactive credentials outside MCP tools and argv.
        - omit unnecessary shell quotes in mcp-imap providers commands.
        - expand mcp-imap providers with Thunderbird ISPDB domain search,
          provider-hosted HTTPS autoconfig lookup and ISPDB fallback,
          password-based IMAP alternatives and provider setup instructions;
          continue printing optional OAuth configuration without saving it.
        - add per-downstream --hidden to mcp-multibroker, omitting a
          server's tools from normal discovery while retaining explicit
          list-tools, discover-brokers and call-tool access.
        - number the user management test consecutively as t/27_users.t.
        - tidy Perl import grouping, internal comments and source layout
          in the command-line tools and library modules.
        - stop imposing an IMAP account file mode check; access is governed
          by ordinary filesystem permissions.
        - use the permission engine's literal matching convention for exact
          user identities and test positive permission-scope validation.
        - reject invalid browser WebSocket credentials via the documented
          handshake exception interface, producing one specific warning.
        - apply the same handshake rejection handling to Vim WebSocket
          connections, including peer and invalid-token/path warnings.
        - document user-management scopes and URL examples in command help.
        - add scoped, revocable MCP users with HKDF-derived credentials,
          an implicit global default user, and atomic user management;
          list effective user URLs with --print-url[=USER], also accepting
          --print-urls, without binding the advertised listener port.
        - associate HTTP credentials with per-request users, bind user
          identity to persistent permissions and permission continuations,
          and delegate original users through trusted multibrokers.
        - select the effective connect_user (default: default) for reverse
          MCP, private Vim and browser connections, independently of normal
          authenticated HTTP tool calls.
        - treat empty directory paths as "." in mcp-fs list, find, grep and
          VCS cwd, without accepting empty filenames.
        - support opportunistic HTTP/HTTPS and reverse MCP connections on the
          same listener, TLS certificate/key CLI options, and dual URL discovery;
          support verified HTTPS for outgoing reverse connections.
        - treat idle HTTP disconnects as normal EOF while retaining errors
          for clients disconnecting during request headers or bodies.
        - identify failing MCP connections by client name, remote address
          and connection id, including modern per-request client metadata.
        - trace local multibroker prompt starts, outcomes and cancellations
          with elapsed time to diagnose disappearing permission dialogs.
        - use an 8 MiB default MCP message size across JSONL and HTTP
          clients and servers, allowing large base64 tool requests through
          mcp-multibroker; log server transport errors at warn level
          instead of silently closing connections.
        - load AnyEvent::Log at compile time so its format_time call is parsed
          as a function, fixing activity logging on Perl 5.10.

0.71  Fri 30 Oct 2026 18:01:51 CET
        - make multibroker-spawned children ask for permissions through MCP,
          independently of the multibroker's own permission prompt mode.
        - log VCS backend and a bounded, JSON-quoted preview of filenames for
          vcs-diff, vcs-status and vcs-log.
        - load only core modules in t/00_load.t; optional IMAP dependencies
          are tested separately when available.
        - let the fake bubblewrap test use the host temporary directory on
          systems without /tmp (notably Termux).
        - suppress Perl startup locale warnings in sandbox workers when
          the requested C.UTF-8 locale is unavailable.
        - canonicalize temporary test paths to match mcp-fs on systems with
          symlinked temp directories; diagnose failing filesystem assertions.
        - test SSE notification ordering at client delivery rather than
          server enqueue time, avoiding a network scheduling race.
        - diagnose failing multibroker HTTP integration tests with preflight
          responses, RPC results and bounded server startup diagnostics.

0.7   Fri 30 Oct 2026 14:56:18 CET
        - WARNING: mcp-imap is unfinished and has not been tested against a real IMAP server.
        - INCOMPATIBLE CHANGE: rules have changed, old rules will be erased.
        - declare the same license terms as Perl itself in distribution metadata.
        - new mcp servers in this release: mcp-http
        - accept optional dimension default matcher for persistent-rule prompts;
        - clarify that mcp-fs exec has private /tmp by default; shared-tmp
          exposes host /tmp and is not needed for ordinary temporary files or IPC.
        - add mcp-fs vcs-log for Git, SVN, CVS and Mercurial, reusing bounded
          output and dedicated permission actions; SVN log receives network
          and SSH-agent grants alongside CVS operations.
          mcp-webbrowser prefers any JavaScript in the current tab, while the
          independent origin dimension remains scoped to the current origin.
        - log mcp-http requests with their method and a sanitized URL preview;
          identify mcp-http/$VERSION in User-Agent unless overridden by the caller.
          Allow generic key=value context in the shared mcp_log_request formatter.
        - silently treat invalid saved permission-rule files as empty, prompting
          instead of aborting broker startup; subsequent saves replace the old file.
        - add mcp-http for arbitrary HTTP methods with URL-scoped approvals,
          caller-managed cookie jars, bounded bodies and text grep/regex/substitution.
          Disable redirects, retries and proxies; verify HTTPS certificates.
        - derive browser permission origins from reported URLs, not a new
          userscript field; keep older browser clients able to execute with
          origin-scoped permissions.
        - accept compatible browser-protocol minor versions; return empty
          operation discovery for 1.0 clients instead of disconnecting them.
          Direct rule saves no longer perform semantic validation.
        - replace special-case subject, origin and workdir permission scopes with
          named dimensions: metadata-driven prompts, generic match.NAME rule keys,
          and engine-enforced matcher choices. Reject old request and rule fields;
          no conversion or backward-compatible rule loading.
        - preserve selected origin scopes when external permission helpers
          forward persistent decisions through native MCP elicitation.
        - add origin-scoped MCP permission rules, selectable independently of
          code/tab scopes; mcp-webbrowser derives browser origins for
          JavaScript and tab operations, with exact, any-port and any-origin
          choices. Existing rules without origins continue to match all origins.
        - use POSIX::uname instead of nonportable hostname -f for the XPCSE
          browser nickname, consistent with HTTP URL wildcard host selection.
        - make form helper test run via explicit ./ path, avoid early HTTP
          timer races, and test filesystem discovery with optional tools absent.
        - report browser protocol rejections through bounded WebSocket close
          reasons; show abnormal disconnects in the userscript console and toast.
        - document browser wire-protocol minor-version compatibility: accept
          compatible older and newer clients without breaking base functionality.
        - remove the obsolete private stdio permission-result bridge from
          mcp-multibroker; use ordinary form elicitation.
        - add per-tab operation discovery and calls to mcp-webbrowser, with
          per-tab routing, ordinary MCP permissions and browser protocol 1.1;
          the userscript initially advertises no extra operations.
        - make the unsandboxed-warning test tolerate diagnostic output from
          non-GNU utility probes (FreeBSD and BusyBox).
        - add mcp-imap with one named password-authenticated account per instance,
          bounded UID search, MIME reads, explicit mailbox/message mutations,
          UIDPLUS-only targeted expunge, forked worker and MCP permissions.
        - propagate XPCSE save response ETags back to Vim session metadata;
          make stale upload HTTP status an editor error.
        - require GNU sed in worker tool discovery; report missing-Perl diagnostics in tests.
        - xpcse: forward Vim's :write! flag through mcp-vim to browser
          uploads, without changing upload behavior yet.
        - recommend rather than require WebSocket modules: only mcp-vim and
          mcp-webbrowser use them; mcp-vim loads them only for browser clients,
          and tests skip optional WebSocket coverage when unavailable.

0.65  Fri 23 Oct 2026 22:41:32 CEST
        - fix mcp-webbrowser userscript title indicator duplicating prefixes on empty titles.
        - use built scripts in make test PATH, avoiding source shebangs and
          accidentally installed helpers in rule management tests.
        - clarify browser execute code wrapper and reject function/symbol return
          values instead of silently converting them to null.
        - fix many bugs in the testsuite.

0.62  Thu 22 Oct 2026 13:32:52 CEST
        - INCOMPATIBLE API CHANGE: mcp_getoptions now returns a hash reference instead of
          a key/value list.
        - Simple accepts server_name/server_version independently of the local
          instance name, leaving server_info as an unmodified protocol override.
        - query multibroker children in parallel for tool and broker discovery,
          preserving tool order and returning partial results after 15 seconds
          instead of blocking on an unresponsive child.
        - accept a missing trailing slash on HTTP MCP endpoint URLs, working
          around Claude's MCP connector wrongly dropping it from the configured URL,
          thus corrupting it.
        - allow omitted ports in reverse extension URLs, defaulting to port 80.
        - fix MCP client/server version fields serialized as JSON numbers in 0.61.

0.61  Thu 22 Oct 2026 08:57:42 CEST
        - resolve bind hostnames via AnyEvent::Socket instead of Socket::getaddrinfo.
        - honor user-selected file permissions and preserve them across replacements.
        - fix permission test fixture grants.
        - fix activity log timestamp formatting on older perl versions.
        - correct multibroker test tool count (including meta-instructions).
        - fix perl 5.12 syntax errors in mcp-fs and mcp-vim.

0.6  Wed 21 Oct 2026 20:43:20 CEST
        - 34k LOC of pure llm madness. but seems to work. yay.

0.0  Sat 03 Oct 2026 07:29:39 CEST
        - original version, an AnyEvent::HTTP clone.
Revision:	1.75
Committed:	Sat Nov 7 16:15:34 2026 UTC (7 days, 23 hours ago) by root
Branch:	MAIN
Changes since 1.74:	+4 -0 lines
Log Message:	* empty log message *
#	User	Rev	Content
1	root	1.2	Revision history for AnyEvent::MCP
2
3	root	1.64	0.83 (unreleased)
4	root	1.75	- add worker-local immutable UID SORT (SUBJECT DATE) snapshots for
5			subject-grouped classification: sort_create returns the first 100
6			UIDs, sort_page pages without re-sorting, sort_discard frees the
7			snapshot; one snapshot per worker, invalidated on restart.
8	root	1.74	- expose read-only UID THREAD ORDEREDSUBJECT through mcp-imap:
9			group by base subject with optional SEARCH filter and UID range,
10			retaining the complete nested server order without pagination.
11	root	1.72	- keep mcp-imap connections alive with an idle NOOP (250 seconds by
12			default, configurable via --keepalive, 0 disables); stop pinging
13			on failure, and reconnect on the next tool call without retrying
14			interrupted operations.
15	root	1.69	- allow shell-friendly instance names (ASCII alphanumerics, underscore,
16			hyphen, dot, @ and +), with separate strict managed-user names.
17			- fold small state-file locking and atomic replacement helper into
18			MCP.pm instead of a separate AnyEvent::MCP::File module.
19			- make --ask a shared common option, with per-option exclusion;
20			add --ask none to deny unresolved permissions and decline
21			downstream elicitation without prompting.
22	root	1.71	- document mcp-imap login keys individually in --help and manpage;
23			support tls connect/starttls/none (including explicit unencrypted IMAP)
24			and reset default ports on TLS mode changes.
25			- report LOGINDISABLED with no supported SASL mechanism cleanly on
26			IMAP password login, without obscure Authen::SASL warnings.
27	root	1.70	- add mcp_permissions to Simple: default permission engine, explicit
28			object or explicit undef; apply --ask and automatic rule overrides
29			centrally without dropping application-supplied automatic rules.
30	root	1.68	- give mcp-fs writable private /tmp and /var/tmp (mode 1777) even
31			with world-read; only shared-tmp or world-write exposes host
32			temporary directories. Make world-write formally imply shared-tmp
33			for permission checks; document the private/host lifetime distinction.
34			- add read-only mcp-imap previews for 25 UIDs, with bounded partial
35			MIME decoding, HTML link preservation and grouped IMAP FETCH calls.
36			- allow mcp-imap messages to fetch selected UIDs without SEARCH.
37			- actually truncate bounded IMAP part/raw responses to max_bytes,
38			not just flag them as truncated.
39	root	1.67	- use a 15-second HTTP read-inactivity timeout by default, suspended
40			while processing complete requests; respect explicit handle rtimeout.
41			- load MIME::Base64 in the HTTP server itself for encoded modern
42			Mcp-Name headers, without depending on the HTTP client loading it.
43	root	1.66	- log ordinary HTTP 404 responses at trace rather than warn,
44			including GET /; keep other HTTP rejection warnings.
45	root	1.73	- return 404 to GET / even when / is the MCP POST endpoint; drop
46			the unhelpful connection object address from HTTP rejection logs
47			while retaining the remote address and sanitized URI.
48	root	1.65	- reuse the latest saved per-dimension scope as the next permission
49			rule editor's default where offered, otherwise keep the original
50			conservative choice; native, YAD and terminal forms agree.
51			- handle the common token-only HTTP endpoint in warning logs:
52			redact known tokens without misclassifying unrelated paths.
53			- include bounded, JSON-escaped request paths in rejected HTTP request
54			warnings; omit queries and redact configured and attempted URL tokens.
55	root	1.64	- show captured helper status, stderr and stdout when the permission
56			UI test fails, and report remote file-patch results and file content
57			when the mock remote filesystem test fails (CPAN Testers diagnostics).
58
59	root	1.63	0.82 Fri 06 Nov 2026 15:53:46 CET
60			- add a first-permission-dialog walkthrough to Intro.pod, explaining
61			one-time versus persistent grants, rule scopes and exec stdin risks;
62			correct its description of logical workdir IDs.
63	root	1.62	- add common repeatable -s/--set KEY=VALUE process-local overrides
64			for trusted instance configuration, after program/instance defaults.
65			- key remote mcp-fs host permissions by --host alone, independent of
66			--rsh; add independent local/remote host scopes (this host by
67			default, or all hosts), retaining old unscoped saved rules.
68			Workdir scopes remain plain paths, independent of host.
69			- omit single-choice permission scope selectors from native, YAD and
70			terminal rule dialogs, automatically retaining the sole match in
71			saved rules without broadening their applicability.
72	root	1.60	- log rejected HTTP requests (status 400 and above) with method,
73			status and peer information, without leaking URL tokens; demote
74	root	1.61	ordinary connection/TLS errors to trace.
75	root	1.62	- do not warn on routine GET / requests; keep the normal 404
76			response without exposing a server-identification page.
77			- preserve mcp-vim subprocess stderr when its JSONL initialization
78			fails, instead of hiding the failure behind EOF and SIGPIPE.
79	root	1.57	- bootstrap remote mcp-fs over a short Perl command, streaming the
80			launcher source over stdin. Avoid rsh command length limits and
81			preserve worker input across exec by using exact sysread.
82	root	1.58	- format mcp-fs sandbox grants, tools, trusted configuration keys
83			and permission action classes as individually searchable POD items.
84	root	1.62	- give the mock remote filesystem test its running Perl interpreter
85			explicitly, rather than assuming it is in a fixed Unix PATH.
86			- avoid locale-dependent TCP error strings in reverse-connection tests,
87			and skip mcp-imap provider CLI tests when optional fork modules
88			are unavailable while retaining standalone provider parser tests.
89	root	1.57
90	root	1.56	0.81 Thu 05 Nov 2026 04:51:59 CET
91	root	1.55	- keep OAuth2 tests working without optional Mail::IMAPTalk,
92			IO::Socket::SSL or Authen::SASL; skip only worker-specific checks.
93			- support optional `mount-try.SUFFIX = ro:/path` or `rw:/path` in
94			mcp-fs configuration. Pass these directly as bubblewrap
95			--ro-bind-try/--bind-try for each invocation, without startup path
96			checks, locally and remotely; required mount.* entries are unchanged.
97			- support one remote host per mcp-fs instance with -h/--host and
98			-e/--rsh; resolve remote workdirs and available tools in a single
99			startup probe, then execute existing workers through a binary-framed
100			remote Perl launcher without installing any MCP modules remotely.
101	root	1.56	- use logical absolute pathnames (without resolving symlinks) as compact
102			workdir IDs across hosts; qualify remote permission scopes independently.
103			Named profiles remain shared between instances. Report cached remote
104			VCS markers and remote umask.
105	root	1.55	- reserve -h for application-specific options; --help remains common.
106			- test remote workers, external GNU utilities, permission isolation,
107			shell argument quoting and startup probing using a mock remote shell
108			and bubblewrap, including unsandboxed/auto behavior. Verify matching
109	root	1.56	workdir IDs for identical logical paths across local and remote
110	root	1.55	instances.
111			- make mock remote-agent tests independent of a local SSH_AUTH_SOCK
112			inherited from the test runner (including CPAN Testers).
113			- document --eager when starting mcp-webbrowser through multibroker;
114			defer possible downstream preferences for --eager and --hidden.
115
116	root	1.53	0.8 Thu 05 Nov 2026 01:52:48 CET
117	root	1.49	- INCOMPATIBLE CHANGE: due to the added user management, existing
118			url tokens have been invalidated.
119	root	1.54	- limit distribution permission normalization to its staging
120			directory, and supply proper CPAN author and abstract metadata.
121	root	1.52	- give shared command-line switches their own reference in
122			Server::Simple; use individually indexed POD items for executable
123			options and application-specific shared-option behavior.
124	root	1.51	- refresh the introductory guide and mcp-imap/mcp-http manuals
125			with first-use workflows, OAuth2 setup, mailbox/search examples
126			and reverse-TLS troubleshooting; correct stale retry documentation.
127	root	1.50	- extend mcp-imap SEARCH filters with recursive AND/OR/NOT, header,
128			text/body, date, size and flag criteria; use explicitly quoted
129			IMAP arguments and bounded filter complexity.
130			- capture deliberately triggered connection errors in test assertions,
131			avoiding noisy successful test runs.
132	root	1.49	- expose IMAP LSUB to inspect subscribed mailboxes, alongside
133			subscribe/unsubscribe; return the same format as LIST.
134			- remove superseded IMAP OAuth provider and pagination prototypes
135			and their obsolete reference tests.
136	root	1.51	- defer outgoing mail submission research (mcp-smtp or mcp-imap)
137			in TODO.md.
138	root	1.48	- retry reverse connections only for TCP connection refusal and
139			unexpected disconnects; report and stop on other TCP errors or
140			TLS handshake/verification failures.
141			- force scalar context when checking Mail::IMAPTalk results;
142			list context truncated LIST responses and could corrupt SEARCH
143			results. Test with context-sensitive IMAP mocks.
144			- report HTTPS reverse-connection handshake failures rather than
145			silently retrying; send credentials only after verified TLS succeeds.
146			- omit pointless mailbox permission dimension for mcp-imap mailboxes.
147			- clarify expected OAuth redirect error page and account selection.
148			- implement mcp-imap OAuth2 authorization-code login with PKCE,
149			human-pasted headless browser redirect, HTTPS token exchange,
150			refresh-token persistence/rotation and IMAP SASL XOAUTH2.
151			Keep interactive credentials outside MCP tools and argv.
152			- omit unnecessary shell quotes in mcp-imap providers commands.
153			- expand mcp-imap providers with Thunderbird ISPDB domain search,
154			provider-hosted HTTPS autoconfig lookup and ISPDB fallback,
155			password-based IMAP alternatives and provider setup instructions;
156			continue printing optional OAuth configuration without saving it.
157	root	1.47	- add per-downstream --hidden to mcp-multibroker, omitting a
158			server's tools from normal discovery while retaining explicit
159			list-tools, discover-brokers and call-tool access.
160	root	1.46	- number the user management test consecutively as t/27_users.t.
161	root	1.45	- tidy Perl import grouping, internal comments and source layout
162			in the command-line tools and library modules.
163			- stop imposing an IMAP account file mode check; access is governed
164			by ordinary filesystem permissions.
165	root	1.44	- use the permission engine's literal matching convention for exact
166			user identities and test positive permission-scope validation.
167			- reject invalid browser WebSocket credentials via the documented
168			handshake exception interface, producing one specific warning.
169			- apply the same handshake rejection handling to Vim WebSocket
170			connections, including peer and invalid-token/path warnings.
171			- document user-management scopes and URL examples in command help.
172	root	1.43	- add scoped, revocable MCP users with HKDF-derived credentials,
173			an implicit global default user, and atomic user management;
174			list effective user URLs with --print-url[=USER], also accepting
175			--print-urls, without binding the advertised listener port.
176			- associate HTTP credentials with per-request users, bind user
177			identity to persistent permissions and permission continuations,
178			and delegate original users through trusted multibrokers.
179			- select the effective connect_user (default: default) for reverse
180			MCP, private Vim and browser connections, independently of normal
181			authenticated HTTP tool calls.
182	root	1.42	- treat empty directory paths as "." in mcp-fs list, find, grep and
183			VCS cwd, without accepting empty filenames.
184	root	1.41	- support opportunistic HTTP/HTTPS and reverse MCP connections on the
185			same listener, TLS certificate/key CLI options, and dual URL discovery;
186			support verified HTTPS for outgoing reverse connections.
187	root	1.39	- treat idle HTTP disconnects as normal EOF while retaining errors
188			for clients disconnecting during request headers or bodies.
189			- identify failing MCP connections by client name, remote address
190			and connection id, including modern per-request client metadata.
191	root	1.38	- trace local multibroker prompt starts, outcomes and cancellations
192			with elapsed time to diagnose disappearing permission dialogs.
193			- use an 8 MiB default MCP message size across JSONL and HTTP
194			clients and servers, allowing large base64 tool requests through
195			mcp-multibroker; log server transport errors at warn level
196			instead of silently closing connections.
197	root	1.37	- load AnyEvent::Log at compile time so its format_time call is parsed
198			as a function, fixing activity logging on Perl 5.10.
199
200	root	1.36	0.71 Fri 30 Oct 2026 18:01:51 CET
201	root	1.35	- make multibroker-spawned children ask for permissions through MCP,
202			independently of the multibroker's own permission prompt mode.
203	root	1.36	- log VCS backend and a bounded, JSON-quoted preview of filenames for
204			vcs-diff, vcs-status and vcs-log.
205			- load only core modules in t/00_load.t; optional IMAP dependencies
206			are tested separately when available.
207			- let the fake bubblewrap test use the host temporary directory on
208			systems without /tmp (notably Termux).
209			- suppress Perl startup locale warnings in sandbox workers when
210			the requested C.UTF-8 locale is unavailable.
211			- canonicalize temporary test paths to match mcp-fs on systems with
212			symlinked temp directories; diagnose failing filesystem assertions.
213			- test SSE notification ordering at client delivery rather than
214			server enqueue time, avoiding a network scheduling race.
215			- diagnose failing multibroker HTTP integration tests with preflight
216			responses, RPC results and bounded server startup diagnostics.
217	root	1.35
218	root	1.34	0.7 Fri 30 Oct 2026 14:56:18 CET
219			- WARNING: mcp-imap is unfinished and has not been tested against a real IMAP server.
220			- INCOMPATIBLE CHANGE: rules have changed, old rules will be erased.
221			- declare the same license terms as Perl itself in distribution metadata.
222			- new mcp servers in this release: mcp-http
223			- accept optional dimension default matcher for persistent-rule prompts;
224	root	1.33	- clarify that mcp-fs exec has private /tmp by default; shared-tmp
225			exposes host /tmp and is not needed for ordinary temporary files or IPC.
226	root	1.32	- add mcp-fs vcs-log for Git, SVN, CVS and Mercurial, reusing bounded
227			output and dedicated permission actions; SVN log receives network
228			and SSH-agent grants alongside CVS operations.
229	root	1.31	mcp-webbrowser prefers any JavaScript in the current tab, while the
230			independent origin dimension remains scoped to the current origin.
231	root	1.30	- log mcp-http requests with their method and a sanitized URL preview;
232			identify mcp-http/$VERSION in User-Agent unless overridden by the caller.
233	root	1.31	Allow generic key=value context in the shared mcp_log_request formatter.
234	root	1.29	- silently treat invalid saved permission-rule files as empty, prompting
235			instead of aborting broker startup; subsequent saves replace the old file.
236	root	1.30	- add mcp-http for arbitrary HTTP methods with URL-scoped approvals,
237			caller-managed cookie jars, bounded bodies and text grep/regex/substitution.
238			Disable redirects, retries and proxies; verify HTTPS certificates.
239			- derive browser permission origins from reported URLs, not a new
240			userscript field; keep older browser clients able to execute with
241			origin-scoped permissions.
242			- accept compatible browser-protocol minor versions; return empty
243			operation discovery for 1.0 clients instead of disconnecting them.
244	root	1.29	Direct rule saves no longer perform semantic validation.
245	root	1.28	- replace special-case subject, origin and workdir permission scopes with
246			named dimensions: metadata-driven prompts, generic match.NAME rule keys,
247			and engine-enforced matcher choices. Reject old request and rule fields;
248			no conversion or backward-compatible rule loading.
249	root	1.27	- preserve selected origin scopes when external permission helpers
250			forward persistent decisions through native MCP elicitation.
251	root	1.26	- add origin-scoped MCP permission rules, selectable independently of
252	root	1.30	code/tab scopes; mcp-webbrowser derives browser origins for
253	root	1.26	JavaScript and tab operations, with exact, any-port and any-origin
254			choices. Existing rules without origins continue to match all origins.
255	root	1.25	- use POSIX::uname instead of nonportable hostname -f for the XPCSE
256			browser nickname, consistent with HTTP URL wildcard host selection.
257			- make form helper test run via explicit ./ path, avoid early HTTP
258			timer races, and test filesystem discovery with optional tools absent.
259	root	1.23	- report browser protocol rejections through bounded WebSocket close
260			reasons; show abnormal disconnects in the userscript console and toast.
261			- document browser wire-protocol minor-version compatibility: accept
262			compatible older and newer clients without breaking base functionality.
263			- remove the obsolete private stdio permission-result bridge from
264			mcp-multibroker; use ordinary form elicitation.
265	root	1.22	- add per-tab operation discovery and calls to mcp-webbrowser, with
266			per-tab routing, ordinary MCP permissions and browser protocol 1.1;
267			the userscript initially advertises no extra operations.
268			- make the unsandboxed-warning test tolerate diagnostic output from
269			non-GNU utility probes (FreeBSD and BusyBox).
270			- add mcp-imap with one named password-authenticated account per instance,
271			bounded UID search, MIME reads, explicit mailbox/message mutations,
272			UIDPLUS-only targeted expunge, forked worker and MCP permissions.
273	root	1.21	- propagate XPCSE save response ETags back to Vim session metadata;
274			make stale upload HTTP status an editor error.
275			- require GNU sed in worker tool discovery; report missing-Perl diagnostics in tests.
276	root	1.18	- xpcse: forward Vim's :write! flag through mcp-vim to browser
277			uploads, without changing upload behavior yet.
278	root	1.19	- recommend rather than require WebSocket modules: only mcp-vim and
279			mcp-webbrowser use them; mcp-vim loads them only for browser clients,
280			and tests skip optional WebSocket coverage when unavailable.
281	root	1.18
282	root	1.17	0.65 Fri 23 Oct 2026 22:41:32 CEST
283	root	1.14	- fix mcp-webbrowser userscript title indicator duplicating prefixes on empty titles.
284	root	1.17	- use built scripts in make test PATH, avoiding source shebangs and
285			accidentally installed helpers in rule management tests.
286	root	1.15	- clarify browser execute code wrapper and reject function/symbol return
287			values instead of silently converting them to null.
288	root	1.17	- fix many bugs in the testsuite.
289	root	1.13
290	root	1.12	0.62 Thu 22 Oct 2026 13:32:52 CEST
291	root	1.16	- INCOMPATIBLE API CHANGE: mcp_getoptions now returns a hash reference instead of
292			a key/value list.
293	root	1.11	- Simple accepts server_name/server_version independently of the local
294			instance name, leaving server_info as an unmodified protocol override.
295			- query multibroker children in parallel for tool and broker discovery,
296			preserving tool order and returning partial results after 15 seconds
297			instead of blocking on an unresponsive child.
298	root	1.8	- accept a missing trailing slash on HTTP MCP endpoint URLs, working
299	root	1.10	around Claude's MCP connector wrongly dropping it from the configured URL,
300	root	1.18	thus corrupting it.
301	root	1.7	- allow omitted ports in reverse extension URLs, defaulting to port 80.
302	root	1.9	- fix MCP client/server version fields serialized as JSON numbers in 0.61.
303	root	1.7
304	root	1.6	0.61 Thu 22 Oct 2026 08:57:42 CEST
305	root	1.5	- resolve bind hostnames via AnyEvent::Socket instead of Socket::getaddrinfo.
306	root	1.4	- honor user-selected file permissions and preserve them across replacements.
307			- fix permission test fixture grants.
308			- fix activity log timestamp formatting on older perl versions.
309			- correct multibroker test tool count (including meta-instructions).
310			- fix perl 5.12 syntax errors in mcp-fs and mcp-vim.
311
312	root	1.3	0.6 Wed 21 Oct 2026 20:43:20 CEST
313	root	1.2	- 34k LOC of pure llm madness. but seems to work. yay.
314	root	1.1
315			0.0 Sat 03 Oct 2026 07:29:39 CEST
316			- original version, an AnyEvent::HTTP clone.