vinkius-labs/mcp-fusion

v3.1.15 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

Published 3mo MCP Developer Tools

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

mcp mcp-framework mcp-server model-context-protocol

Summary

AI summary

Fixed Group hierarchy cycle detection and routing precedence, added async guard for GovernanceObserver.

Full changelog

Fixed

GovernanceObserver.observe() runtime guard rejects async callbacks (use observeAsync())
FusionClient.terminalCall routing action field now wins over user args
Group.addChildGroup() cycle detection prevents infinite recursion
GroupItem.addParentGroup() marked internal — use Group.addChildTool() etc.
ExpositionCompiler emits console.warn when action schema overwrites common field
CryptoAttestation lazy getSubtle() replaces top-level wait (CJS compat)

32 new regression tests | 4573 total tests passing | 0 regressions

Breaking Changes

GroupItem.addParentGroup() marked internal — use Group.addChildTool() etc.

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track vinkius-labs/mcp-fusion

Get notified when new releases ship.

About vinkius-labs/mcp-fusion

A TypeScript framework for building production-ready MCP servers with automatic tool discovery, multi-transport support (stdio/SSE/HTTP), built-in validation, and zero-config setup.

All releases →

Related context

Related tools

Earlier breaking changes

v4.0.0 All packages now published under the `@mcpfusion` npm scope.
v4.0.0 GitHub repository renamed to vinkius-labs/mcpfusion; npm packages under @mcpfusion scope.
v4.0.0 All source code, documentation, CLI output, workflows, and npm packages now use the @mcpfusion scope.