@thalovant/mcp-server 0.1.18 → 0.1.19

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.1.19
+
+- Require Node SDK 0.3.5 or newer so runtime tools receive secure MQTT URL enforcement and bounded MQTT setup and HTTP failure cleanup.
+- Keep package, registry, and container source metadata on version 0.1.19. Runtime tool names, inputs, and identity serialization remain compatible.
+
 ## 0.1.18
 
 - Serialize runtime tool calls sharing a hub client identity so concurrent calls cannot replace each other's Noise sessions or HTTP message queues. Different identities remain independent.

package/README.md

@@ -399,7 +399,9 @@ Runtime calls sharing the same hub client identity run sequentially within one
 MCP process. Use a distinct client identity for each independently running MCP
 server so the hub can keep their sessions separate.
 
-Version 0.1.18 uses `@thalovant/sdk` 0.3.4 or newer. Runtime tools support
+Version 0.1.19 uses `@thalovant/sdk` 0.3.5 or newer. This release enforces
+secure effective MQTT URLs and carries a single connection deadline through
+MQTT setup and HTTP failure cleanup. Runtime tools support
 HiveMind v3 Noise over WSS, HTTPS and MQTT over TLS. `thalovant_healthcheck`
 reports readiness only after authentication; a reachable hub or broker alone
 does not establish a runtime session.

package/dist/index.js

@@ -654,6 +654,11 @@ async function createRuntimeClient(options) {
 // The hub HTTP/MQTT queues and Noise sessions are keyed by client identity.
 // A second tool call must finish after the first closes that identity's session.
 const runtimeLeases = new Map();
+/**
+ * Hold an identity lease through both the tool action and client cleanup.
+ * This keeps HTTP/MQTT admissions from replacing another call's Noise session;
+ * a failed action still closes its client before the next lease starts.
+ */
 async function withRuntimeClient(options, run) {
     const client = await createRuntimeClient(options);
     const key = createHash("sha256").update(JSON.stringify([

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thalovant/mcp-server",
-  "version": "0.1.18",
+  "version": "0.1.19",
   "description": "Stdio and Streamable HTTP MCP server for Thalovant control-plane and hub runtime APIs.",
   "license": "MIT",
   "type": "module",
@@ -64,7 +64,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
-    "@thalovant/sdk": "^0.3.4",
+    "@thalovant/sdk": "^0.3.5",
     "jose": "^6.2.8",
     "zod": "^3.25.76"
   },

package/server.json

@@ -7,19 +7,19 @@
     "url": "https://github.com/thalovant/thalovant-mcp",
     "source": "github"
   },
-  "version": "0.1.18",
+  "version": "0.1.19",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@thalovant/mcp-server",
-      "version": "0.1.18",
+      "version": "0.1.19",
       "transport": {
         "type": "stdio"
       }
     },
     {
       "registryType": "oci",
-      "identifier": "ghcr.io/thalovant/thalovant-mcp:0.1.18",
+      "identifier": "ghcr.io/thalovant/thalovant-mcp:0.1.19",
       "transport": {
         "type": "streamable-http",
         "url": "http://127.0.0.1:3000/mcp"