airlok 0.7.0 → 0.8.0

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable changes to airlok. The format follows Keep a Changelog; versions follow SemVer.
 
+## [0.8.0] - 2026-09-12
+
+### Changed
+
+- A server from the project's own `.mcp.json` no longer starts until this checkout has been asked about it. On first sight of one, or of a definition that changed since the last answer, airlok lists the servers and the commands they would run and asks once; the answer is recorded per repository in `.airlok/`, which is gitignored. Until then the server is pending and nothing is started. This is a behaviour change: a project file that used to start servers on the first turn now waits for an answer. Servers from the user file, the local file, or a `[[mcp]]` block are unaffected.
+- `airlok mcp list` shows a pending server and what it would run, and listing never approves anything. `airlok mcp call` refuses a server this repository has not approved.
+
+### Added
+
+- `airlok mcp reset-project-choices` forgets the answer, so the next run asks again.
+- `airlok mcp add-json <name> '<json>'` writes a server from an entry pasted as JSON, which is how one is usually shared.
+
 ## [0.7.0] - 2026-09-12
 
 ### Changed

package/README.md

@@ -142,6 +142,8 @@ Three files are read, each winning over the one above it. A server named in more
 | project | `./.mcp.json` | the project's servers, meant to be committed |
 | local | `./.airlok/mcp.json` | your own overrides, gitignored |
 
+A `.mcp.json` arrives with a clone, so a project-scoped server starts only once this checkout has been asked about it. On first sight of one, or of a definition that changed since the last answer, airlok lists the servers and the commands they would run and asks once. The answer is recorded in `.airlok/`, per repository and gitignored. Until then the server shows as pending in `airlok mcp list` and nothing is started, and listing never counts as approving. `airlok mcp reset-project-choices` forgets the answer so the next run asks again. Servers from your own user file, your local file, or a `[[mcp]]` block are not gated: you wrote those.
+
 `${VAR}` and `${VAR:-default}` expand from the environment in `command`, `args`, `env`, `url`, and `headers`. A variable that is unset or empty with no default is an error naming it, rather than an empty string that fails later in a way nobody can read. For a secret, prefer `env_cmd` and `header_cmd`, which take the value from a command's stdout: nothing is written in the file, and nothing has to sit in your environment where every other process can read it.
 
 Managing them:
@@ -150,6 +152,8 @@ Managing them:
 |---|---|
 | `airlok mcp list` | every server, its scope, whether it answers, and its tools |
 | `airlok mcp add <name> --scope user -- npx -y server-filesystem .` | write a stdio server; `--url` with `--transport http` for an http one |
+| `airlok mcp add-json <name> '<json>'` | write a server from an entry pasted as JSON |
+| `airlok mcp reset-project-choices` | forget whether this repository's own `.mcp.json` servers may start |
 | `airlok mcp get <name>` | the resolved entry and which file it came from |
 | `airlok mcp remove <name> [--scope ...]` | take it out again |
 | `airlok mcp import <path>` | merge another tool's `mcpServers` file into a scope |

package/npm-shrinkwrap.json

@@ -19,7 +19,7 @@
       "hasInstallScript": true,
       "license": "MIT OR Apache-2.0",
       "name": "airlok",
-      "version": "0.7.0"
+      "version": "0.8.0"
     },
     "node_modules/detect-libc": {
       "engines": {
@@ -48,5 +48,5 @@
     }
   },
   "requires": true,
-  "version": "0.7.0"
+  "version": "0.8.0"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "artifactDownloadUrls": [
-    "https://github.com/airlok-dev/airlok/releases/download/v0.7.0"
+    "https://github.com/airlok-dev/airlok/releases/download/v0.8.0"
   ],
   "bin": {
     "airlok": "run-airlok.js"
@@ -60,7 +60,7 @@
       "zipExt": ".tar.xz"
     }
   },
-  "version": "0.7.0",
+  "version": "0.8.0",
   "volta": {
     "node": "18.14.1",
     "npm": "9.5.0"