@stratusagent/plugin-mcp 0.12.2 → 0.12.4

package/README.md

@@ -114,7 +114,7 @@ this package's code:
 | `command`, `args`, `cwd` | stdio | The subprocess to spawn. Exactly one of `command` / `url` per server. |
 | `env` | stdio | Variables set outright, name to value — where a server's API key goes. |
 | `passEnv` | stdio | Names forwarded from the daemon's environment. Defaults to `PATH`, `HOME`, `LANG`, `LC_ALL`, `TZ`. |
-| `url` | HTTP | The Streamable HTTP endpoint. |
+| `url` | HTTP | The Streamable HTTP endpoint. Redirects are followed only within the same origin (scheme, host and port), plus the upgrade from `http://host` to `https://host` with both on default ports, so `headers` are never sent to another host. Point `url` at the final endpoint if the server redirects elsewhere; a redirect that leaves the origin fails the connection with an error naming it. |
 | `headers` | HTTP | Headers sent with every request — where a bearer token goes. |
 | `connectTimeoutMs` | both | One budget for the connect handshake *and* the whole tool-discovery walk (default 15000), so a server can stall startup neither by being unreachable nor by paginating slowly. |
 | `callTimeoutMs` | both | Per-call budget (default 60000). |

package/dist/index.d.ts

@@ -10,7 +10,7 @@ import { type JsonObject, type Plugin, type TrustLevel } from '@stratusagent/cor
  * package.json, because nothing else fails when a release bumps the
  * manifest and leaves the literal behind.
  */
-export declare const PLUGIN_MCP_VERSION = "0.12.2";
+export declare const PLUGIN_MCP_VERSION = "0.12.4";
 export { BRIDGED_DESCRIPTION_MAX_LENGTH, BRIDGED_RESULT_MAX_LENGTH, BRIDGED_RESULT_MIN_LENGTH, BRIDGED_SCHEMA_MAX_LENGTH, BRIDGED_SCHEMA_MAX_DEPTH, BRIDGED_SEGMENT_MAX_LENGTH, boundedResultLimit, boundServerText, bridgedDescription, bridgedSchema, bridgedToolName, normalizeCallResult, sanitizeToolSegment, SERVER_NAME_PATTERN, } from './normalize.ts';
 export { sealedStdioEnv, pathGrant, resolveCommandPath };
 /** What one configured server looks like once its block has been read. */

package/dist/index.js

@@ -17,7 +17,7 @@ import { boundServerText, bridgedToolName, normalizeCallResult, sanitizeToolSegm
  * package.json, because nothing else fails when a release bumps the
  * manifest and leaves the literal behind.
  */
-export const PLUGIN_MCP_VERSION = '0.12.2';
+export const PLUGIN_MCP_VERSION = '0.12.4';
 export { BRIDGED_DESCRIPTION_MAX_LENGTH, BRIDGED_RESULT_MAX_LENGTH, BRIDGED_RESULT_MIN_LENGTH, BRIDGED_SCHEMA_MAX_LENGTH, BRIDGED_SCHEMA_MAX_DEPTH, BRIDGED_SEGMENT_MAX_LENGTH, boundedResultLimit, boundServerText, bridgedDescription, bridgedSchema, bridgedToolName, normalizeCallResult, sanitizeToolSegment, SERVER_NAME_PATTERN, } from "./normalize.js";
 export { sealedStdioEnv, pathGrant, resolveCommandPath };
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stratusagent/plugin-mcp",
-  "version": "0.12.2",
+  "version": "0.12.4",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -18,9 +18,9 @@
     "node": ">=22.13 <23 || >=23.4"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.30.0",
-    "@stratusagent/core": "0.12.2",
-    "@stratusagent/plugins": "0.12.2"
+    "@modelcontextprotocol/sdk": "^1.32.1",
+    "@stratusagent/core": "0.12.4",
+    "@stratusagent/plugins": "0.12.4"
   },
   "devDependencies": {
     "@types/node": "^24.6.0",