This release fixes issues for SREs watching stability and regressions.
Published 3mo
MCP Developer Tools
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
mcp
mcp-framework
mcp-server
model-context-protocol
Summary
AI summaryFixed late‑registered tool observability propagation and async function rejection in SandboxGuard.
Full changelog
Bug Fixes (Medium #12-#16)
Fixed
- Bug #12 —
ToolRegistry.register()now propagates debug/tracing/telemetry to late-registered builders via_propagateObservability() - Bug #13 —
FluentSchemaHelpers.default()auto-marks field as optional so Zod validation passes when LLM omits the field - Bug #14 — PostProcessor regex updated from
[SYSTEM_RULES]to<domain_rules>XML format matching ResponseBuilder output - Bug #15 — TelemetryBus uses
process.once()+ signal re-emit for clean shutdown instead of blockingprocess.on() - Bug #16 — SandboxGuard rejects async functions with descriptive error (async produces
'{}'viaJSON.stringify(promise))
Tests
- 22 new regression tests in 1 test file
- 3 existing SandboxGuard tests updated (async now correctly rejected)
- 1 DebugObserver test corrected (late-registered tools now receive events)
- All 3385 tests pass with 0 regressions
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About vinkius-labs/mcp-fusion
A TypeScript framework for building production-ready MCP servers with automatic tool discovery, multi-transport support (stdio/SSE/HTTP), built-in validation, and zero-config setup.
Related context
Related tools
Beta — feedback welcome: [email protected]