Skip to content

vinkius-labs/mcp-fusion

v3.1.8 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 3mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

mcp mcp-framework mcp-server model-context-protocol

Summary

AI summary

Fixed late‑registered tool observability propagation and async function rejection in SandboxGuard.

Full changelog

Bug Fixes (Medium #12-#16)

Fixed

  • Bug #12ToolRegistry.register() now propagates debug/tracing/telemetry to late-registered builders via _propagateObservability()
  • Bug #13FluentSchemaHelpers.default() auto-marks field as optional so Zod validation passes when LLM omits the field
  • Bug #14 — PostProcessor regex updated from [SYSTEM_RULES] to <domain_rules> XML format matching ResponseBuilder output
  • Bug #15 — TelemetryBus uses process.once() + signal re-emit for clean shutdown instead of blocking process.on()
  • Bug #16 — SandboxGuard rejects async functions with descriptive error (async produces '{}' via JSON.stringify(promise))

Tests

  • 22 new regression tests in 1 test file
  • 3 existing SandboxGuard tests updated (async now correctly rejected)
  • 1 DebugObserver test corrected (late-registered tools now receive events)
  • All 3385 tests pass with 0 regressions

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track vinkius-labs/mcp-fusion

Get notified when new releases ship.

Sign up free

About vinkius-labs/mcp-fusion

A TypeScript framework for building production-ready MCP servers with automatic tool discovery, multi-transport support (stdio/SSE/HTTP), built-in validation, and zero-config setup.

All releases →

Related context

Earlier breaking changes

  • v4.0.0 All packages now published under the `@mcpfusion` npm scope.
  • v4.0.0 GitHub repository renamed to vinkius-labs/mcpfusion; npm packages under @mcpfusion scope.
  • v4.0.0 All source code, documentation, CLI output, workflows, and npm packages now use the @mcpfusion scope.

Beta — feedback welcome: [email protected]