Skip to content

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 8d MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai-agents brand-governance brand-guidelines brand-identity brand-voice claude
+5 more
codex cursor design-tokens mcp model-context-protocol

Affected surfaces

rce_ssrf

Summary

AI summary

Fixed logo extraction performance and parser error fencing; added output_contract affordance on brand_context.

Changes in this release

Feature Low

Added `output_contract` affordance on brand_context for deterministic delivery rules.

Added `output_contract` affordance on brand_context for deterministic delivery rules.

Source: llm_adapter@2026-07-19

Confidence: high

Bugfix Medium

Bounded extractLogos on hostile pages reduces cost from 2.65s to ~180ms at 50k elements.

Bounded extractLogos on hostile pages reduces cost from 2.65s to ~180ms at 50k elements.

Source: llm_adapter@2026-07-19

Confidence: low

Bugfix Medium

Handler errors are now fenced at the tool boundary with structured envelope and truncation.

Handler errors are now fenced at the tool boundary with structured envelope and truncation.

Source: llm_adapter@2026-07-19

Confidence: low

Full changelog

Robustness release closing #45 (both 0.14 ingestion-fuzzing findings) plus the output_contract affordance. (No 0.15 was released; the 0.15 candidate list shipped here.)

Fixed

  • extractLogos bounded on hostile pages (#57): one context-scoped find() inside logo-cloud detection cost 2.65s alone on a 50k-element body. Bounded manual walk + candidate caps + per-parent cache: 7.3s → ~180ms at 50k elements, linear to 100k. Also fixes a pre-existing flaw: a client-logo section anywhere on the page rejected the real header logo.
  • Handler errors fenced at the tool boundary (#57): parser throws (e.g. YAML alias-bomb messages quoting hostile input) return the structured envelope with the message fenced + truncated — never raw SDK isError text.

Added

  • output_contract on brand_context (#58): deterministic per-task_type delivery rules served adjacent to the brand data. Measured in a 6-run A/B: no effect distinguishable from noise (40% vs 33% mean completion, n=3/arm) — ships as a structural affordance, receipts committed, eval/RESULTS.md has the table.

1,004 tests.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Brand-System/brandsystem-mcp

Get notified when new releases ship.

Sign up free

About Brand-System/brandsystem-mcp

Make your brand machine-readable. Extract brand identity (colors, fonts, logo, voice, visual rules) from any website via static CSS + rendered-page extraction, compile into DTCG tokens, brand runtime contracts, and interaction policies. 34 tools across 4 progressive sessions. Subscribable `brand://runtime` and `brand://policy` MCP resources. Content compliance scoring (0-100), pass/fail gate, and HTML/CSS preflight. Brandcode Studio connector for hosted brand sync.

All releases →

Beta — feedback welcome: [email protected]