This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryTelemetryBus.close() now correctly cleans up listeners by using named arrow functions.
Full changelog
Fixed
- startServer edge interceptor returns server: null typed as Server. Changed type to Server | null, removeds any cast.
- TokenEconomics overhead ratio reports 0 when ALL blocks are overhead. Now returns Infinity for 100% overhead.
- ToolContract.materializeBehavior fingerprint condition gate included schema keys. Changed to check static rules only.
- Static rules silently discarded when dynamic rules coexist. Composite fingerprint 'dynamic:' preserves static rule integrity.
- TelemetryBus.close() uses wrong function reference for emoveListener. Named arrow function references for correct cleanup.
Tests
27 regression tests added across 4 new test files. Full suite: 4390 tests passing, 0 regressions.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About vinkius-labs/mcp-fusion
A TypeScript framework for building production-ready MCP servers with automatic tool discovery, multi-transport support (stdio/SSE/HTTP), built-in validation, and zero-config setup.
Related context
Related tools
Beta — feedback welcome: [email protected]