@mcp-native/core 0.9.1 → 0.9.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 MCP Native contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -12,11 +12,9 @@
 
 </div>
 
-> **Pre-1.0 release candidate:** the `0.9.x` API is part of the frozen proposed `1.0.0` contract.
-> The stable compatibility guarantee begins at `1.0.0`, after the remaining independent review and
-> release gates.
-
-`@mcp-native/core` is the protocol- and renderer-independent foundation of MCP Native. It defines the small MCP client boundary consumed by the runtime and routes declared actions without depending on A2UI, React Native, WebViews, or a specific MCP SDK transport.
+`@mcp-native/core` is the protocol- and renderer-independent foundation of MCP Native. Use it to
+connect an MCP client to the runtime, validate JSON data, and route declared actions through an
+application policy. It does not depend on A2UI, React Native, WebViews, or a particular MCP SDK.
 
 ## Install
 
@@ -143,9 +141,9 @@ Wrap the policy with `createExpiringGrantActionPolicy()` when the host offers re
 
 `actionPolicy` protects `McpNativeRuntime.dispatch()`. Set `trustedToolPolicy` to protect direct `callTool()` operations with the same or another explicit policy; omission preserves the lower-level trusted seam. MCP Apps requires its own `authorizeToolCall` callback and A2UI v1 delivery requires `createA2uiV1ActionDeliveryHandler`, because those packages own different protocol boundaries.
 
-## Pre-1.0 MCP result migration
+## Legacy MCP result migration
 
-The initial `0.0.x` proof of concept returned one `McpResource` directly from `readResource`. The official SDK returns a content collection, so implementations now return `McpReadResourceResult`:
+The initial `0.0.x` API returned one `McpResource` directly from `readResource`. The official SDK returns a content collection, so implementations now return `McpReadResourceResult`:
 
 ```ts
 // Before

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcp-native/core",
-  "version": "0.9.1",
+  "version": "0.9.3",
   "description": "Protocol-independent runtime primitives for MCP Native.",
   "keywords": [
     "mcp",
@@ -20,6 +20,7 @@
   },
   "files": [
     "dist",
+    "LICENSE",
     "README.md"
   ],
   "type": "module",
@@ -29,7 +30,8 @@
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
     }
   },
   "publishConfig": {