Changelog

A misspelled Principal field or error-code name is now a compile error, and every package declares sideEffects, so bundlers drop what an app does not use — the durable core went from 61.5 to 57.4 KiB gzip. Type changes only; nothing changes at runtime.

End users are isolated by default, at one point, for free, and every package asks who the caller is the same way (identify). Many entries are breaking — read the upgrade list at the top of the entry first.

McpServer.listTools is now async and takes the caller, and Studio no longer starts on a non-loopback host when its only credentials are the development ones.

Validation tightened in three places — the runId record separator, JWT nbf and the tool test form — and StudioAgentRunner gained a fourth parameter.

A guard's warning overstated what it did. The message changed; the behaviour did not.

Two ways a delete could take somebody else's data, most of all with ids that contain a colon. A ^0.3.0 range does not pick this up on its own — upgrade deliberately.

A thread id could rename its own keyspace, and one sweep then deleted every thread. Two words that used to be accepted are now refused.

One change to a persisted key schema — read Changed before upgrading.

The first release on npm.