vinkius-labs/mcp-fusion

v3.7.13 Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

Published 2mo MCP Developer Tools

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

mcp mcp-framework mcp-server model-context-protocol

Summary

AI summary

Fixed race condition in StateMachineGate.transition() causing undefined abort context and cache performance issue.

Full changelog

Fixed

StateMachineGate.transition() race with XState subscriber (Bug #1) — Added await Promise.resolve() after actor.send() to flush microtasks before reading _currentState.
SandboxEngine abort handler context undefined (Bug #2) — Introduced mutable ctxRef wrapper so onAbort always sees the latest context after createContext() resolves.
BuildPipeline ToolResponse shape heuristic false-positive (Bug #3) — Removed structural duck-type fallback; only TOOL_RESPONSE_BRAND symbol is trusted for identification.
recompile() cache fast-path O(n) loop (Bug #4) — Replaced for...of builder count loop with registry.size (Map.size, O(1)). Added readonly size to RegistryDelegate.

Test Suite

7 regression tests in StateMachineGate.transition-race.test.ts
5 regression tests in SandboxAbortContextRef.test.ts
13 regression tests in BuildPipeline.toolresponse-brand.test.ts

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track vinkius-labs/mcp-fusion

Get notified when new releases ship.

About vinkius-labs/mcp-fusion

A TypeScript framework for building production-ready MCP servers with automatic tool discovery, multi-transport support (stdio/SSE/HTTP), built-in validation, and zero-config setup.

All releases →

Related context

Related tools

Earlier breaking changes

v4.0.0 All packages now published under the `@mcpfusion` npm scope.
v4.0.0 GitHub repository renamed to vinkius-labs/mcpfusion; npm packages under @mcpfusion scope.
v4.0.0 All source code, documentation, CLI output, workflows, and npm packages now use the @mcpfusion scope.