vinkius-labs/mcp-fusion

What's new in 3.8.0

@vurb/swarm — Federated Handoff Protocol (new package)

A new first-class package implementing the Federated Handoff Protocol (FHP): multi-agent orchestration with zero-trust delegation, namespace isolation, and a bidirectional MCP tunnel (B2BUA).

• SwarmGateway — routes LLM sessions to specialist micro-servers and back, with zero context loss
• UpstreamMcpClient — outbound MCP tunnel with connect timeout, idle timeout, and AbortSignal cascade
• NamespaceRewriter — transparent tool prefix/unprefix per domain (listInvoices → finance.listInvoices)
• ReturnTripInjector — virtual gateway.return_to_triage escape tool + anti-IPI sanitiser
• Zero-trust HMAC-SHA256 delegation tokens with Claim-Check pattern for large state
• W3C Trace Context (traceparent) generated per handoff and propagated to upstream
• Dual transport: SSE or Streamable HTTP (auto-detected; edge-compatible)
• Session governance: configurable maxSessions cap, idle timeout, zombie prevention

@vurb/core — FHP security hardening

• EXPIRED_DELEGATION_TOKEN thrown on replay or expired Claim-Check state (previously: silent failure)
• HandoffStateStore atomic getAndDelete interface — one-shot guarantee under concurrency
• InMemoryHandoffStateStore included as default single-instance store

@vurb/cloudflare + @vurb/vercel

• test script added; existing tests now run in npm test --workspaces

Security

• One-shot Claim-Check enforcement (atomic read+delete; replay → EXPIRED_DELEGATION_TOKEN)
• Anti-IPI boundary on return summaries (<upstream_report trusted="false"> envelope)
• Session limit counts connecting + active to prevent bypass attacks

Full changelog: CHANGELOG.md