@strixgov/mcp-proxy 0.1.7 → 0.1.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -5,10 +5,29 @@ All notable changes to `@strixgov/mcp-proxy` are documented here.
5
5
  The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
6
6
  and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
7
7
 
8
- ## [0.1.7]
8
+ ## [0.1.8]
9
+
10
+ Republish of 0.1.7 with correct dependency specifiers — code is
11
+ byte-identical. `0.1.7` was published with `npm publish`, which ships the
12
+ monorepo's raw `workspace:^…` specifiers in the tarball's package.json;
13
+ consumer installs (`npx -y @strixgov/mcp-proxy`) fail with
14
+ `EUNSUPPORTEDPROTOCOL`. `pnpm publish` rewrites them to real semver at
15
+ pack time (how 0.1.5/0.1.6 shipped correctly). 0.1.7 is deprecated on
16
+ the registry.
17
+
18
+ ### Fixed
19
+ - Published dependency specifiers (`@strixgov/mcp-adapter`,
20
+ `@strixgov/tool-gateway`, `@strixgov/capabilities-mcp-common`) resolve
21
+ again for consumers.
22
+
23
+ ### Added
24
+ - `prepublishOnly` guard: publishing this package with npm now aborts
25
+ with instructions to use pnpm, so this defect class cannot ship again.
26
+
27
+ ## [0.1.7] — published 2026-07-06, DEPRECATED (broken consumer installs)
9
28
 
10
29
  Adds the webhook approval channel. No change to the receipt format or the
11
- signing flow.
30
+ signing flow. **Do not install this version** — see 0.1.8 above.
12
31
 
13
32
  (Version note: this feature was originally staged under 0.1.6, but
14
33
  `0.1.6` had already been published to npm on 2026-06-09 as the
File without changes
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@strixgov/mcp-proxy",
3
- "version": "0.1.7",
3
+ "version": "0.1.8",
4
4
  "description": "Strix MCP Proxy — the distribution wedge for governed agent tool execution. Point your MCP client at the proxy instead of the underlying server; every callTool is intercepted, evaluated against policy, and emits a signed Ed25519 receipt. Designed so Mode 3 (capability-enforced) is the v0.2.0 upgrade path, not a rewrite.",
5
5
  "license": "Elastic-2.0",
6
6
  "type": "module",
@@ -14,14 +14,11 @@
14
14
  "bin": {
15
15
  "strix-mcp-proxy": "bin/strix-mcp-proxy.mjs"
16
16
  },
17
- "scripts": {
18
- "test": "node --test test/*.test.mjs"
19
- },
20
17
  "dependencies": {
21
18
  "@modelcontextprotocol/sdk": "^1.0.0",
22
- "@strixgov/capabilities-mcp-common": "workspace:^0.1.0",
23
- "@strixgov/mcp-adapter": "workspace:^0.1.0",
24
- "@strixgov/tool-gateway": "workspace:^0.4.1"
19
+ "@strixgov/capabilities-mcp-common": "^0.1.0",
20
+ "@strixgov/mcp-adapter": "^0.1.0",
21
+ "@strixgov/tool-gateway": "^0.4.1"
25
22
  },
26
23
  "keywords": [
27
24
  "strix",
@@ -55,5 +52,8 @@
55
52
  },
56
53
  "engines": {
57
54
  "node": ">=18.0.0"
55
+ },
56
+ "scripts": {
57
+ "test": "node --test test/*.test.mjs"
58
58
  }
59
- }
59
+ }