@sigrun/ext-mcp 0.2.1 → 0.2.2

package/CHANGELOG.md

@@ -6,6 +6,15 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
+### Changed
+- Forward-compatible with pi-durable 1.4.0 (explicit `checkpointWhen`;
+  widened peer range). No behaviour change.
+- Block-validator tests now compile against core's real generated
+  `@sigrun/sigrun/blocks` declarations instead of a local ambient shim.
+  A content-hash build stamp rejects missing or stale sibling output with
+  an explicit core rebuild instruction; the sibling CI path builds core
+  before the validator-form test.
+
 ### Security
 - **stdio MCP servers receive an allowlisted environment instead of sigrun's
   process environment.** `SIGRUN_API_TOKEN` and provider keys were inherited

package/dist/config.js

@@ -144,6 +144,13 @@ export function parseMcpConfig(text, source) {
         if (name.startsWith("u_")) {
             throw new Error(`mcp config ${source}: server "${name}" uses the reserved "u_" prefix`);
         }
+        // The tool namespace is `<server>/<tool>` and settings keys use dots
+        // for paths, so a server named `acme.tools` or `acme/tools` would
+        // produce ambiguous or conflicting keys. Reject at the source, before
+        // any settings section can be generated from the bad name.
+        if (name.includes(".") || name.includes("/")) {
+            throw new Error(`mcp config ${source}: server "${name}" contains forbidden characters ("." or "/") — dots conflict with settings key paths and slashes conflict with the <server>/<tool> namespace`);
+        }
         if (!isRecord(entry)) {
             throw new Error(`mcp config ${source}: server "${name}" must be an object`);
         }

package/dist/extension.js

@@ -17,6 +17,7 @@ const SessionOwnerDoc = defineDoc({
     history: "latest",
     fork: "current",
     initial: () => ({}),
+    checkpointWhen: () => false,
 });
 function denied(message) {
     return {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sigrun/ext-mcp",
-	"version": "0.2.1",
+	"version": "0.2.2",
 	"description": "MCP extension for sigrun (pi-durable): registers MCP server tools as <server>/<toolname> tools",
 	"type": "module",
 	"engines": {
@@ -28,9 +28,9 @@
 		"prepublishOnly": "npm run build"
 	},
 	"peerDependencies": {
-		"@earendil-works/chord": "1.3.0",
-		"@earendil-works/pi-ai": "1.3.0",
-		"@earendil-works/pi-durable": "1.3.0",
+		"@earendil-works/chord": "1.3.0 || 1.4.0",
+		"@earendil-works/pi-ai": "1.3.0 || 1.4.0",
+		"@earendil-works/pi-durable": "1.3.0 || 1.4.0",
 		"typebox": "1.3.27"
 	},
 	"devDependencies": {