@getmarrow/mcp 3.9.107 → 3.9.108

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. package/README.md +7 -1
  2. package/dist/codex-plugin-pins.js +12 -12
  3. package/dist/hook-contract.d.ts +2 -2
  4. package/dist/hook-contract.js +1 -1
  5. package/package.json +1 -1
  6. package/server.json +2 -2
package/README.md CHANGED
@@ -212,7 +212,13 @@ These behaviors shipped in 3.9.103 and still apply.
212
212
  - **Hidden commands are checked:** commands inside an unquoted here-document body, a `${x:-$(...)}` default or an arithmetic expansion are checked like any other command.
213
213
  - **`marrow-mcp keys create` reads every flag form:** `--name=`, `--type=` and `--expires=` (and `-n=`, `-t=`) are read like `--name value`; a flag that is present but blank, or a `--scopes` / `--agents` list with no entry, is a usage error (exit 2) and nothing is sent; leaving `--scopes` and `--agents` out sends neither.
214
214
 
215
- ## What's New in v3.9.107
215
+ ## What's New in v3.9.108
216
+
217
+ v3.9.108 adds Codex plugin pins on 3.9.107. The full entry is in CHANGELOG.md.
218
+
219
+ - **Codex plugins `marrow` and `marrow-advisory` 0.1.3 are recognised.** The SHA-256 digests of their six pinned files are now listed next to the 0.1.1 digests. A Codex with 0.1.3 installed and enabled, and those six files unchanged, is recognised as running the official Marrow server, the same as 0.1.1 is; any other change to them is checked like any other server. The digests of the 0.1.2 drafts, which were never released, are removed. Nothing changes for an installed 0.1.1.
220
+
221
+ These behaviors shipped in 3.9.107 and still apply.
216
222
 
217
223
  v3.9.107 is a security hotfix on 3.9.106. The full entries are in CHANGELOG.md.
218
224
 
package/dist/codex-plugin-pins.js CHANGED
@@ -34,23 +34,23 @@ exports.OFFICIAL_CODEX_PLUGIN_PINS = Object.freeze({
34
34
  'package.json': '7ebeb726b358874e1ecb69bc9bafcb4ec7d5b6ec1fb703af659eb5655680be55',
35
35
  'package-lock.json': '266f078eebff4d54fe78431cc84a8d50b7aae972ef15b81592f377823ea47101',
36
36
  }),
37
- // getmarrow/plugins: the Codex plugins pinned to @getmarrow/mcp 3.9.103. The 0.1.1 entries above
38
- // stay so that installs of the older release are still proven, not turned into new friction.
39
- 'marrow@0.1.2': Object.freeze({
40
- '.codex-plugin/plugin.json': 'd6319939f5548a1708badcf6d11d63221b63ea4b4a3791743e8d0744798e6fe7',
37
+ // getmarrow/plugins release/codex-0.1.3: the two Codex plugins pinned to @getmarrow/mcp 3.9.107.
38
+ // The 0.1.1 entries stay so older installs stay proven; the 0.1.2 drafts were never shipped.
39
+ 'marrow@0.1.3': Object.freeze({
40
+ '.codex-plugin/plugin.json': '6c772bfff5cdc4ce78072cda02de8639ed24e6c82347ee0273545dba329bc77e',
41
41
  '.mcp.json': '204c90071832e231d445cf648fbb19e3e157aaa290f1c303b230aeff1d522226',
42
42
  'scripts/marrow-launch.cjs': '8362944504f6c4a9f8f5dabb4676e419ee05bdad34ced873fab25454a445dbe4',
43
- 'scripts/mcp-manifest.json': '66841230e61f22f8d3f55563042c336d88afc15c7adaffdbc34f456abe529f42',
44
- 'package.json': '6312b147d5401084355d8319fb211319bffd7329c76ac7108c6fb47a44fdeb40',
45
- 'package-lock.json': 'f2101e3b18d8a46b0c50bcef9f62d51826fce12e8768e81db3e86c6ca54d3dcc',
43
+ 'scripts/mcp-manifest.json': '9580d83df88010a2575e08ce5c59121cb2b1363578baeb2a68bb6abf75de2240',
44
+ 'package.json': '992754b4809addb2f19de3bc81ef87caf77ae97b14f0a8da73669b21b8a7559d',
45
+ 'package-lock.json': '70a87cedeb0b099d32245327492e3a5ba4e73a7af24af68d2ce6053cfd51cb07',
46
46
  }),
47
- 'marrow-advisory@0.1.2': Object.freeze({
48
- '.codex-plugin/plugin.json': '611c2b52fc04e7d2decef54def41397ba6793b456caa1bc2f94d96e1e87d257c',
47
+ 'marrow-advisory@0.1.3': Object.freeze({
48
+ '.codex-plugin/plugin.json': '5464bc5d38a49bfbbe5794aeb2d7248d47695af912c52eb6037cc0f08a780942',
49
49
  '.mcp.json': '204c90071832e231d445cf648fbb19e3e157aaa290f1c303b230aeff1d522226',
50
50
  'scripts/marrow-launch.cjs': '8362944504f6c4a9f8f5dabb4676e419ee05bdad34ced873fab25454a445dbe4',
51
- 'scripts/mcp-manifest.json': '66841230e61f22f8d3f55563042c336d88afc15c7adaffdbc34f456abe529f42',
52
- 'package.json': '57acd62e39d2a78c49df15746bec5fd3ddce52926320fed852f7a3d8e0fc60f1',
53
- 'package-lock.json': '391392ed09701deae97db4edd7aaa92f884361ba47f5b7e6664ad5b4f87f34bb',
51
+ 'scripts/mcp-manifest.json': '9580d83df88010a2575e08ce5c59121cb2b1363578baeb2a68bb6abf75de2240',
52
+ 'package.json': '968531e5de020e9dd32b1108dd78ee6e05bd93dde9f431087fdd069f47d95175',
53
+ 'package-lock.json': '8c3baacb067c5c6d7a0f2cb64f3de97d8a19e7e746b12c8d8e6625b399415d7f',
54
54
  }),
55
55
  });
56
56
  /** The plugin folders in the getmarrow/plugins repository, by manifest name. */
package/dist/hook-contract.d.ts CHANGED
@@ -1,5 +1,5 @@
1
1
  import { resolveMarrowEnv, type ResolvedMarrowEnv } from './env';
2
- export declare const MCP_ADAPTER_VERSION = "3.9.107";
2
+ export declare const MCP_ADAPTER_VERSION = "3.9.108";
3
3
  export declare const NATIVE_HOOK_MATCHER: string;
4
4
  /**
5
5
  * Matchers older versions wrote, so a hook carrying one needs repair: the
@@ -10,7 +10,7 @@ export declare const NATIVE_HOOK_MATCHER: string;
10
10
  */
11
11
  export declare const LEGACY_NATIVE_HOOK_MATCHERS: readonly string[];
12
12
  export declare const GROK_NATIVE_HOOK_MATCHER = "run_terminal_command|search_replace|write|spawn_subagent|use_tool|workflow|image_gen|image_edit|image_to_video|reference_to_video";
13
- export declare const MCP_PACKAGE_SPEC = "@getmarrow/mcp@3.9.107";
13
+ export declare const MCP_PACKAGE_SPEC = "@getmarrow/mcp@3.9.108";
14
14
  export declare const CONTEXT_HOOK_COMMAND: string;
15
15
  export declare const PRE_ACTION_HOOK_COMMAND: string;
16
16
  export declare const ACTION_RESULT_HOOK_COMMAND: string;
package/dist/hook-contract.js CHANGED
@@ -29,7 +29,7 @@ const env_1 = require("./env");
29
29
  const normalized_action_1 = require("./normalized-action");
30
30
  const own_server_identity_1 = require("./own-server-identity");
31
31
  const own_tool_1 = require("./own-tool");
32
- exports.MCP_ADAPTER_VERSION = '3.9.107';
32
+ exports.MCP_ADAPTER_VERSION = '3.9.108';
33
33
  exports.NATIVE_HOOK_MATCHER = (0, own_tool_1.nativeHookMatcher)();
34
34
  /**
35
35
  * Matchers older versions wrote, so a hook carrying one needs repair: the
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@getmarrow/mcp",
3
- "version": "3.9.107",
3
+ "version": "3.9.108",
4
4
  "mcpName": "ai.getmarrow/marrow",
5
5
  "description": "Marrow AI MCP server: a named yes before your AI agent acts, and proof the next agent can reuse.",
6
6
  "bin": {
package/server.json CHANGED
@@ -24,12 +24,12 @@
24
24
  ]
25
25
  }
26
26
  ],
27
- "version": "3.9.107",
27
+ "version": "3.9.108",
28
28
  "packages": [
29
29
  {
30
30
  "registryType": "npm",
31
31
  "identifier": "@getmarrow/mcp",
32
- "version": "3.9.107",
32
+ "version": "3.9.108",
33
33
  "transport": {
34
34
  "type": "stdio"
35
35
  },