emdash

v@emdash-cms/[email protected] Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 5d Productivity & Wikis

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

astro cms emdash typescript

Affected surfaces

auth rbac

Summary

AI summary

Adds administrator‑enabled plugin MCP tools with per‑route permissions, token access, consent flow, structured schemas, auditing, cache control, and manifest validation.

Full changelog

Minor Changes

#2002 e52dea9 Thanks @jcheese1! - Adds explicitly declared, administrator-enabled plugin MCP tools with per-route permissions, plugin-scoped token access, install and update consent, structured output schemas, and invocation auditing.
#1985 3f8b778 Thanks @swissky! - Adds a cacheControl option for public plugin routes: successful GET responses carry the configured Cache-Control header, enabling CDN and browser caching for public plugin endpoints. Works for native, standard, and marketplace plugin formats. Private routes and errors keep the private, no-store default.
#2067 07c9f21 Thanks @ascorbic! - Adds plugin manifest schema validation (pluginManifestSchema, reconcileManifestAccess) and declared-access canonicalization helpers (canonicalizeDeclaredAccess, diffDeclaredAccess, escalation detection, and the CanonicalDeclaredAccess types) for validating plugin manifests and comparing the access a plugin declares.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track emdash

Get notified when new releases ship.

About emdash

All releases →

Related context

Related tools

Earlier breaking changes

v@emdash-cms/[email protected] Requires Cloudflare Workers sites to add Cron Trigger and update entry point for scheduled publishing.
[email protected] Schema migration adds `locale` and `translation_group` columns to `_emdash_bylines`.
[email protected] Byline hydration now strictly per-locale, suppressing cross‑locale fallback.
v@emdash-cms/[email protected] Changes `_emdash_content_bylines.byline_id` to store translation_group instead of row id, enforcing strict per-locale credit hydration.
v@emdash-cms/[email protected] Registry install handler fails closed on non-conforming aggregator release records.