svn-agent-mcp 1.1.3 → 1.2.0

package/CHANGELOG.md

@@ -1,9 +1,55 @@
-# Changelog
-
+# Changelog
+
 All notable changes to the SVN MCP are recorded here.
 
 ## [Unreleased]
 
+## [1.2.0] - 2026-07-22
+
+### Added
+
+- Added guarded `svn_delete` with dry-run-by-default behavior, explicit paths, root refusal,
+  recursive acknowledgement, `riskAck`, and post-delete status verification.
+- Added canonical `svn_resolve` while retaining `svn_resolved` as a deprecated compatibility alias.
+- Added `svn_snapshot`, bounded `svn_cat`, and paginated `svn_blame` for common audit workflows.
+- Added exact/range revision selectors to `svn_log` and `svn_diff`.
+- Added request-cancellation propagation from MCP calls to buffered and streaming SVN processes.
+
+### Changed
+
+- Working-copy-root commits now require `allowRoot:true`, and whitespace-only commit messages are
+  refused before SVN runs.
+- Agent install instructions now compare the installed version with `npm view` instead of pinning a
+  remembered latest version.
+- Builds and typechecks now run on native TypeScript 7 (`tsc` 7.0.2), while the Jest `ts-jest`
+  transform keeps the TypeScript 6 compiler through the `@typescript/typescript6` shim (`tsc6`)
+  until tooling gains TypeScript 7 API support.
+
+### Fixed
+
+- Compact revert receipts now identify the default dry-run behavior even when `dryRun` is omitted.
+- Blocked direct imports of files beneath sensitive `.ssh`, `.git`, and `.svn` directories by
+  preserving ancestor path segments during guard evaluation.
+- Refused conflicted, obstructed, external, and unknown working-copy states during precommit and
+  commit instead of reporting them as committable.
+- Distinguished colons inside date revisions from revision-range separators.
+- Kept the requested lower revision bound across paginated numeric `svn_log` ranges.
+- Contained NUL-byte process launch failures and unexpected tool exceptions in structured MCP
+  error envelopes.
+- Kept arbitrary `svn_propset` values out of displayed process commands by passing them through a
+  mode-0600 temporary `-F` file.
+- Bounded retained streamed stdout and diff excerpts independently of line and file-summary caps.
+
+### Security
+
+- Updated transitive dependencies and the MCP HTTP adapter override; `npm audit` reports no known
+  vulnerabilities at the moderate threshold.
+- Added regressions for sensitive import ancestors and end-to-end conflicted working-copy refusal.
+
+### Packaging
+
+- npm artifacts now include `docs/SPEC.md` and a generated `docs/MCP_API.json` tool contract.
+
 ## [1.1.3] - 2026-07-20
 
 ### Security
@@ -122,246 +168,246 @@ All notable changes to the SVN MCP are recorded here.
 - Redacted credential-like URL content in compact log/property values and projected repository URLs.
 
 ## [1.0.0] - 2026-07-08
-
-### Changed
-
-- Declared the first public open-source release.
-- Bumped the package and MCP server version to `1.0.0`.
-- Added the GitHub clone and `npm run prepare:local` setup flow so automation can install the MCP
-  from the repository and configure `current\dist\index.js`.
-
-### Packaging
-
-- Generated release payloads remain ignored; publish the source tree, root `bin/` runtime payload,
-  and third-party notices, then let each clone prepare its own local `current` runtime.
-
-## [0.1.15] - 2026-07-08
-
-### Added
-
-- Added read-only `svn_propget` for explicit working-copy paths.
-- Added guarded `svn_propset` for explicit working-copy paths, with readonly refusal,
-  never-commit target checks, bounded property names/values, and `riskAck` for high-risk
-  properties such as `svn:ignore`, `svn:global-ignores`, `svn:externals`, and `svn:auto-props`.
-
-### Changed
-
-- Documented generic SVN property operations so callers do not fall back to raw `svn propget` /
-  `svn propset` for routine property-only work.
-
-## [0.1.14] - 2026-07-07
-
-### Added
-
-- CLI failsafe mode (SPEC §15.7): if the MCP fails mechanically (server down, protocol-level
-  tool errors, broken bundled runtime), callers fall back to scoped raw `svn` CLI for the rest of
-  the session under the same policy rules. Guard refusals are explicitly not failsafe triggers
-  and must never be bypassed via CLI; read-only instances stay read-only.
-- `noteFromRun` now reports executable-launch failures (`ENOENT`/`EACCES`/`EPERM`) as
-  "MCP svn runtime unavailable" with the failsafe hint, and `svn_diagnose` includes the failsafe
-  suggestion when the bundled SVN toolchain is unavailable.
-- Failsafe rules documented in `docs/svnrules.md`.
-
-## [0.1.13] - 2026-07-07
-
-### Fixed
-
-- **Critical:** the server never started when launched through the documented `current`
-  junction path — Node resolves the ESM entry module through junctions, so the
-  launched-directly check failed and the process exited silently. The check now compares real
-  paths; both `current\dist\index.js` and `releases\v<version>\dist\index.js` launches work.
-- `svn_update` parsing no longer reports SVN informational trailers ("Updated to revision N.",
-  "At revision N.", "Updating '.':", "Restored ...") as phantom changed paths.
-- `eol_check` and `svn_precommit` return a structured `kind:"not-a-file"` result for directory
-  targets instead of rejecting with a raw filesystem error.
-- Streamed stdout/stderr (including the `svn_diff` hot path) now use the same latin1 fallback as
-  buffered output for non-UTF8 bytes.
-- Working-copy containment now verifies physical paths, so a junction or symlink under a working
-  copy cannot redirect tools to files outside it.
-- Repository-local policy globs are additionally capped on total wildcard count to bound regex
-  backtracking.
-- Removed the residual MCP-launch-directory fallback from the read-only working-copy probe.
-
-### Verification
-
-- Deep audit pass over the v0.1.12 baseline: all 27 accepted audit fixes re-verified in
-  source; typecheck, build, 52 Jest tests, and `npm audit` green. Live MCP smoke test over
-  stdio (initialize, tools/list, readonly banner) through both junction and real release paths.
-
-## [0.1.12] - 2026-07-07
-
-### Fixed
-
-- Fixed all accepted deep-audit items: credential redaction, non-interactive SVN execution,
-  stable locale, streaming timeout/stderr caps, latin1 fallback, parser correctness, ignored-path
-  precommit guards, secure message files, split recursive reverts, import/export guards, property
-  status/conflict parsing, update tree-conflict parsing, policy validation/caching, nullable
-  working-copy roots, and ambiguous no-context read-only calls.
-- `svn_import` now scans source trees for never-commit descendants before invoking SVN.
-- `svn_precommit` and `svn_commit` now treat ignored paths as uncommittable instead of reaching
-  later SVN failures.
-
-### Performance
-
-- Batched `eol_check` property lookup, parallelized independent `svn_diagnose` checks, reduced
-  repeated `svn_info` process spawns, and replaced synchronous EOL sniffing and recursive
-  directory scans in hot paths.
-
-### Documentation
-
-- Updated the spec for the v0.1.12 audit fixes.
-
-## [0.1.11] - 2026-07-07
-
-### Fixed
-
-- Repository-local never-commit `deny` rules now override broad repository-local `allow`
-  exceptions.
-- Envelope `stdout_summary` and `stderr_summary` now redact URL userinfo and sensitive query
-  parameters, not only displayed command strings.
-
-### Documentation
-
-- Updated docs for the v0.1.11 baseline and recorded the audit fixes.
-
-## [0.1.10] - 2026-07-07
-
-### Added
-
-- Added `svn_diagnose`, a read-only working-copy diagnostic tool for local status, remote status, HEAD info, and latest log reachability.
-- Added regression coverage for successful temp-repository diagnosis and structured non-working-copy diagnosis.
-
-### Changed
-
-- Expanded SVN error classification for common authentication, network/repository, working-copy lock, and SQLite working-copy database failures.
-- Documented the external SVN MCP comparison: borrow diagnostics and error taxonomy ideas, but keep this MCP's bundled runtime, zero end-user env config, explicit-path commits, readonly mode, no-shell execution, and guarded mutating surface.
-
-### Verification
-
-- Added targeted tests for the borrowed diagnostic/error-classification behavior.
-
-## [0.1.9] - 2026-07-07
-
-### Added
-
-- Added repo-local `.svn-mcp-policy.json` support for strict never-commit defaults with explicit per-repository allow/deny exceptions.
-- Added streaming diff parsing so `svn_diff` keeps complete per-file counts while capping only `diff_excerpt`.
-- Added URL userinfo and sensitive query-parameter redaction for displayed command strings.
-- Added `allowLarge` to `eol_fix_verified`; oversized files are refused unless the caller explicitly opts in.
-
-### Changed
-
-- Never-commit generated-folder guards are now segment-aware, blocking nested `bin`, `obj`, `dist`, `node_modules`, `coverage`, `.vs`, and `.cache` folders, including descendants of recursive directory adds.
-- `svn_precommit` now treats `svn_diff` failure as a trust-gate verdict: recoverable EOL failures become `EOL_FIX_NEEDED`, other diff failures become `DIFF_FAILED`.
-- `eol_fix_verified` now returns structured refusals for missing paths, non-files, binary files, and too-large files.
-
-### Verification
-
-- Added regression coverage for segment-aware guards, policy exceptions, recursive add refusals, redaction, streaming diff counts, precommit diff-failure verdicts, and structured EOL repair refusals.
-
-## [0.1.8] - 2026-07-07
-
-### Added
-
-- `svn_info` now returns parsed `svnversion` details: revision range, local modification flag, switched/partial flags, remote HEAD revision, and stale-base status.
-- `svn_status` now accepts `hideNoise:true` to filter common local runtime clutter such as `node_modules`, `dist`, `current`, `.cache`, and `coverage`.
-- `svn_status` now accepts `includeIgnored:true` for explicit ignored-path audits without making that the daily default.
-- Added `svn_self_check` to report package/runtime version, `current` release pointer, bundled payload counts, startup probe, and packaging-script health.
-- Added a Node `scripts/clean.mjs` and changed `npm run clean` to avoid PowerShell filesystem deletion.
-
-### Changed
-
-- `npm run release:prepare` now validates release payload counts before repointing `current`.
-- Updated docs to separate MCP-solvable SVN pain points from semantic workflow responsibilities.
-
-### Verification
-
-- Added regression coverage for mixed-revision metadata, status noise filtering, and self-check output.
-
-## [0.1.7] - 2026-07-07
-
-### Added
-
-- `svn_log` now resolves working-copy paths to repository URLs and queries HEAD when possible, avoiding mixed-revision root log gaps.
-- `svn_diff` now returns EOL diagnostics and `recovery_tool: "eol_fix_verified"` when SVN reports inconsistent line endings.
-- Added `npm run release:prepare`, a Node release packager that copies `dist/` and `bin/` into `releases/v<version>` and repoints `current` without PowerShell copy/junction commands.
-
-### Changed
-
-- Updated the spec and README for repository-URL log behavior, EOL diff recovery, and the release preparation command.
-
-### Verification
-
-- Added temp-repository regression tests for mixed-revision root log history and inconsistent-EOL diff recovery.
-
-## [0.1.6] - 2026-07-07
-
-### Changed
-
-- Expanded never-commit guards to block root generated/dependency/cache artifacts: `dist/**`, `node_modules/**`, `coverage/**`, `.cache/**`, and `*.tsbuildinfo`.
-- Tightened `/**` never-commit matching so directory globs do not block unrelated same-prefix files such as `binary.txt`.
-- Updated the spec and SVN rules so the executable guard matrix matches the documented generated-output policy.
-
-### Verification
-
-- Added a guard regression test that failed before the change and passed after the guard expansion.
-
-## [0.1.5] - 2026-07-07
-
-### Added
-
-- Plug-and-play global client registration: one MCP config can serve multiple SVN working copies.
-- Working-copy inference from absolute path inputs when `cwd` is omitted.
-- `--readonly` launch argument for read-only clients.
-- Regression coverage for absolute-path multi-working-copy use.
-
-### Changed
-
-- End-user configuration no longer requires environment variables or project-specific launch `cwd`.
-- `SVN_AGENT_*` variables are documented as development/test escape hatches only.
-- README, spec, and ADR docs now describe zero-env setup and multi-working-copy behavior.
-
-## [0.1.4] - 2026-07-07
-
-### Added
-
-- Versioned source-tree `bin/` folder containing the full SlikSVN `bin` payload and full dos2unix `bin` payload.
-- Release `bin/` payload beside `dist/`, including `svn`, `svnadmin`, `svnversion`, `dos2unix`, `unix2dos`, and required DLLs.
-- Bundled executable resolution for SVN and EOL tools, with dev/test overrides.
-
-### Changed
-
-- Runtime startup and EOL repair no longer depend on PATH for normal use.
-- Tests use bundled SVN binaries for temp-repository setup.
-
-## [0.1.3] - 2026-07-07
-
-### Added
-
-- Guarded `svn_move`, `svn_rename`, and `svn_copy` tools for working-copy paths.
-- Parent-directory creation for move/copy destinations.
-- Integration coverage for move, rename, copy, readonly refusal, and never-commit destination refusal.
-
-## [0.1.2] - 2026-07-07
-
-### Changed
-
-- EOL repair is fully MCP-owned through `unix2dos`/`dos2unix`.
-- `svn_diff` uses `svn diff --internal-diff -x --ignore-eol-style` by default.
-- PowerShell EOL hook guidance was removed from the workflow.
-
-## [0.1.1] - 2026-07-07
-
-### Fixed
-
-- `svn_add` now schedules needed parent directories for explicit nested file paths.
-- `svn_commit` includes scheduled-added parent directories needed for explicit nested file commits.
-
-## [0.1.0] - 2026-07-07
-
-### Added
-
-- Initial generic SVN MCP implementation.
-- Guarded SVN runner, structured envelopes, XML/text parsers, EOL helpers, and guard logic.
-- Read-only, composite, and mutating SVN tool families.
-- Versioned release layout under `releases/v<version>` with a `current` junction.
+
+### Changed
+
+- Declared the first public open-source release.
+- Bumped the package and MCP server version to `1.0.0`.
+- Added the GitHub clone and `npm run prepare:local` setup flow so automation can install the MCP
+  from the repository and configure `current\dist\index.js`.
+
+### Packaging
+
+- Generated release payloads remain ignored; publish the source tree, root `bin/` runtime payload,
+  and third-party notices, then let each clone prepare its own local `current` runtime.
+
+## [0.1.15] - 2026-07-08
+
+### Added
+
+- Added read-only `svn_propget` for explicit working-copy paths.
+- Added guarded `svn_propset` for explicit working-copy paths, with readonly refusal,
+  never-commit target checks, bounded property names/values, and `riskAck` for high-risk
+  properties such as `svn:ignore`, `svn:global-ignores`, `svn:externals`, and `svn:auto-props`.
+
+### Changed
+
+- Documented generic SVN property operations so callers do not fall back to raw `svn propget` /
+  `svn propset` for routine property-only work.
+
+## [0.1.14] - 2026-07-07
+
+### Added
+
+- CLI failsafe mode (SPEC §15.7): if the MCP fails mechanically (server down, protocol-level
+  tool errors, broken bundled runtime), callers fall back to scoped raw `svn` CLI for the rest of
+  the session under the same policy rules. Guard refusals are explicitly not failsafe triggers
+  and must never be bypassed via CLI; read-only instances stay read-only.
+- `noteFromRun` now reports executable-launch failures (`ENOENT`/`EACCES`/`EPERM`) as
+  "MCP svn runtime unavailable" with the failsafe hint, and `svn_diagnose` includes the failsafe
+  suggestion when the bundled SVN toolchain is unavailable.
+- Failsafe rules documented in `docs/svnrules.md`.
+
+## [0.1.13] - 2026-07-07
+
+### Fixed
+
+- **Critical:** the server never started when launched through the documented `current`
+  junction path — Node resolves the ESM entry module through junctions, so the
+  launched-directly check failed and the process exited silently. The check now compares real
+  paths; both `current\dist\index.js` and `releases\v<version>\dist\index.js` launches work.
+- `svn_update` parsing no longer reports SVN informational trailers ("Updated to revision N.",
+  "At revision N.", "Updating '.':", "Restored ...") as phantom changed paths.
+- `eol_check` and `svn_precommit` return a structured `kind:"not-a-file"` result for directory
+  targets instead of rejecting with a raw filesystem error.
+- Streamed stdout/stderr (including the `svn_diff` hot path) now use the same latin1 fallback as
+  buffered output for non-UTF8 bytes.
+- Working-copy containment now verifies physical paths, so a junction or symlink under a working
+  copy cannot redirect tools to files outside it.
+- Repository-local policy globs are additionally capped on total wildcard count to bound regex
+  backtracking.
+- Removed the residual MCP-launch-directory fallback from the read-only working-copy probe.
+
+### Verification
+
+- Deep audit pass over the v0.1.12 baseline: all 27 accepted audit fixes re-verified in
+  source; typecheck, build, 52 Jest tests, and `npm audit` green. Live MCP smoke test over
+  stdio (initialize, tools/list, readonly banner) through both junction and real release paths.
+
+## [0.1.12] - 2026-07-07
+
+### Fixed
+
+- Fixed all accepted deep-audit items: credential redaction, non-interactive SVN execution,
+  stable locale, streaming timeout/stderr caps, latin1 fallback, parser correctness, ignored-path
+  precommit guards, secure message files, split recursive reverts, import/export guards, property
+  status/conflict parsing, update tree-conflict parsing, policy validation/caching, nullable
+  working-copy roots, and ambiguous no-context read-only calls.
+- `svn_import` now scans source trees for never-commit descendants before invoking SVN.
+- `svn_precommit` and `svn_commit` now treat ignored paths as uncommittable instead of reaching
+  later SVN failures.
+
+### Performance
+
+- Batched `eol_check` property lookup, parallelized independent `svn_diagnose` checks, reduced
+  repeated `svn_info` process spawns, and replaced synchronous EOL sniffing and recursive
+  directory scans in hot paths.
+
+### Documentation
+
+- Updated the spec for the v0.1.12 audit fixes.
+
+## [0.1.11] - 2026-07-07
+
+### Fixed
+
+- Repository-local never-commit `deny` rules now override broad repository-local `allow`
+  exceptions.
+- Envelope `stdout_summary` and `stderr_summary` now redact URL userinfo and sensitive query
+  parameters, not only displayed command strings.
+
+### Documentation
+
+- Updated docs for the v0.1.11 baseline and recorded the audit fixes.
+
+## [0.1.10] - 2026-07-07
+
+### Added
+
+- Added `svn_diagnose`, a read-only working-copy diagnostic tool for local status, remote status, HEAD info, and latest log reachability.
+- Added regression coverage for successful temp-repository diagnosis and structured non-working-copy diagnosis.
+
+### Changed
+
+- Expanded SVN error classification for common authentication, network/repository, working-copy lock, and SQLite working-copy database failures.
+- Documented the external SVN MCP comparison: borrow diagnostics and error taxonomy ideas, but keep this MCP's bundled runtime, zero end-user env config, explicit-path commits, readonly mode, no-shell execution, and guarded mutating surface.
+
+### Verification
+
+- Added targeted tests for the borrowed diagnostic/error-classification behavior.
+
+## [0.1.9] - 2026-07-07
+
+### Added
+
+- Added repo-local `.svn-mcp-policy.json` support for strict never-commit defaults with explicit per-repository allow/deny exceptions.
+- Added streaming diff parsing so `svn_diff` keeps complete per-file counts while capping only `diff_excerpt`.
+- Added URL userinfo and sensitive query-parameter redaction for displayed command strings.
+- Added `allowLarge` to `eol_fix_verified`; oversized files are refused unless the caller explicitly opts in.
+
+### Changed
+
+- Never-commit generated-folder guards are now segment-aware, blocking nested `bin`, `obj`, `dist`, `node_modules`, `coverage`, `.vs`, and `.cache` folders, including descendants of recursive directory adds.
+- `svn_precommit` now treats `svn_diff` failure as a trust-gate verdict: recoverable EOL failures become `EOL_FIX_NEEDED`, other diff failures become `DIFF_FAILED`.
+- `eol_fix_verified` now returns structured refusals for missing paths, non-files, binary files, and too-large files.
+
+### Verification
+
+- Added regression coverage for segment-aware guards, policy exceptions, recursive add refusals, redaction, streaming diff counts, precommit diff-failure verdicts, and structured EOL repair refusals.
+
+## [0.1.8] - 2026-07-07
+
+### Added
+
+- `svn_info` now returns parsed `svnversion` details: revision range, local modification flag, switched/partial flags, remote HEAD revision, and stale-base status.
+- `svn_status` now accepts `hideNoise:true` to filter common local runtime clutter such as `node_modules`, `dist`, `current`, `.cache`, and `coverage`.
+- `svn_status` now accepts `includeIgnored:true` for explicit ignored-path audits without making that the daily default.
+- Added `svn_self_check` to report package/runtime version, `current` release pointer, bundled payload counts, startup probe, and packaging-script health.
+- Added a Node `scripts/clean.mjs` and changed `npm run clean` to avoid PowerShell filesystem deletion.
+
+### Changed
+
+- `npm run release:prepare` now validates release payload counts before repointing `current`.
+- Updated docs to separate MCP-solvable SVN pain points from semantic workflow responsibilities.
+
+### Verification
+
+- Added regression coverage for mixed-revision metadata, status noise filtering, and self-check output.
+
+## [0.1.7] - 2026-07-07
+
+### Added
+
+- `svn_log` now resolves working-copy paths to repository URLs and queries HEAD when possible, avoiding mixed-revision root log gaps.
+- `svn_diff` now returns EOL diagnostics and `recovery_tool: "eol_fix_verified"` when SVN reports inconsistent line endings.
+- Added `npm run release:prepare`, a Node release packager that copies `dist/` and `bin/` into `releases/v<version>` and repoints `current` without PowerShell copy/junction commands.
+
+### Changed
+
+- Updated the spec and README for repository-URL log behavior, EOL diff recovery, and the release preparation command.
+
+### Verification
+
+- Added temp-repository regression tests for mixed-revision root log history and inconsistent-EOL diff recovery.
+
+## [0.1.6] - 2026-07-07
+
+### Changed
+
+- Expanded never-commit guards to block root generated/dependency/cache artifacts: `dist/**`, `node_modules/**`, `coverage/**`, `.cache/**`, and `*.tsbuildinfo`.
+- Tightened `/**` never-commit matching so directory globs do not block unrelated same-prefix files such as `binary.txt`.
+- Updated the spec and SVN rules so the executable guard matrix matches the documented generated-output policy.
+
+### Verification
+
+- Added a guard regression test that failed before the change and passed after the guard expansion.
+
+## [0.1.5] - 2026-07-07
+
+### Added
+
+- Plug-and-play global client registration: one MCP config can serve multiple SVN working copies.
+- Working-copy inference from absolute path inputs when `cwd` is omitted.
+- `--readonly` launch argument for read-only clients.
+- Regression coverage for absolute-path multi-working-copy use.
+
+### Changed
+
+- End-user configuration no longer requires environment variables or project-specific launch `cwd`.
+- `SVN_AGENT_*` variables are documented as development/test escape hatches only.
+- README, spec, and ADR docs now describe zero-env setup and multi-working-copy behavior.
+
+## [0.1.4] - 2026-07-07
+
+### Added
+
+- Versioned source-tree `bin/` folder containing the full SlikSVN `bin` payload and full dos2unix `bin` payload.
+- Release `bin/` payload beside `dist/`, including `svn`, `svnadmin`, `svnversion`, `dos2unix`, `unix2dos`, and required DLLs.
+- Bundled executable resolution for SVN and EOL tools, with dev/test overrides.
+
+### Changed
+
+- Runtime startup and EOL repair no longer depend on PATH for normal use.
+- Tests use bundled SVN binaries for temp-repository setup.
+
+## [0.1.3] - 2026-07-07
+
+### Added
+
+- Guarded `svn_move`, `svn_rename`, and `svn_copy` tools for working-copy paths.
+- Parent-directory creation for move/copy destinations.
+- Integration coverage for move, rename, copy, readonly refusal, and never-commit destination refusal.
+
+## [0.1.2] - 2026-07-07
+
+### Changed
+
+- EOL repair is fully MCP-owned through `unix2dos`/`dos2unix`.
+- `svn_diff` uses `svn diff --internal-diff -x --ignore-eol-style` by default.
+- PowerShell EOL hook guidance was removed from the workflow.
+
+## [0.1.1] - 2026-07-07
+
+### Fixed
+
+- `svn_add` now schedules needed parent directories for explicit nested file paths.
+- `svn_commit` includes scheduled-added parent directories needed for explicit nested file commits.
+
+## [0.1.0] - 2026-07-07
+
+### Added
+
+- Initial generic SVN MCP implementation.
+- Guarded SVN runner, structured envelopes, XML/text parsers, EOL helpers, and guard logic.
+- Read-only, composite, and mutating SVN tool families.
+- Versioned release layout under `releases/v<version>` with a `current` junction.

package/README.md

@@ -2,7 +2,7 @@
 
 Strict SVN Model Context Protocol server for agent-safe status, diff, EOL diagnosis, precommit checks, and guarded SVN mutations.
 
-The implementation contract lives in `docs/SPEC.md`. The current source release is `1.1.3`; each source clone can prepare a local runtime under `releases/v1.1.3`, while npm installations run directly from package-root `dist/`.
+The implementation contract lives in `docs/SPEC.md`. The current source release is `1.2.0`; each source clone can prepare a local runtime under `releases/v1.2.0`, while npm installations run directly from package-root `dist/`.
 
 Requirements: Node.js 24.18.0 or newer within the Node 24 LTS line, npm 11.16.0 or newer, Git, and access to the public npm registry. Windows uses the
 bundled VisualSVN Apache Subversion command-line package and dos2unix payload. On macOS and Linux, `svn`, `svnversion`, `svnadmin`,
@@ -29,7 +29,8 @@ Resolve the executable with the platform command lookup: where.exe svn-agent-mcp
 On macOS/Linux, verify that svn, svnversion, svnadmin, dos2unix, and unix2dos are available on PATH. If any are missing, install Subversion and dos2unix with the host package manager.
 Ensure the MCP client entry is named "svn" and uses command "svn-agent-mcp", never a source checkout, junction, current pointer, or dist path. Do not add --readonly.
 Preserve existing SVN_AGENT_* environment overrides without printing sensitive values, then restart the MCP client.
-After restarting, run svn_self_check and report the installed version, executable path, runtime layout, and MCP health. The expected latest release is 1.1.3; report the installed version instead of relying on a remembered version.
+Query the registry version with: npm view svn-agent-mcp version
+After restarting, run svn_self_check and compare its installed version with the registry version. Report the installed version, executable path, runtime layout, and MCP health instead of relying on a remembered version.
 ```
 
 ## Agent Setup From GitHub
@@ -145,6 +146,8 @@ mixed-revision checks, and commit verification run unchanged.
 | `npm run check:runtime` | Verify the supported Node 24 LTS and minimum npm version |
 | `npm run typecheck` | Check TypeScript without emitting build output |
 | `npm run build` | Compile `src/` into `dist/` |
+| `npm run generate:api-contract` | Generate `docs/MCP_API.json` from the registered MCP tools |
+| `npm run check:api-contract` | Fail when the generated MCP API contract is stale |
 | `npm test` | Run the Jest test suite |
 | `npm run test:package` | Pack, install, and self-check the real npm artifact in isolation |
 | `npm run benchmark:responses` | Compare compact MCP, full MCP, and equivalent raw SVN output sizes |
@@ -156,6 +159,8 @@ mixed-revision checks, and commit verification run unchanged.
 
 Use `svn_self_check` to verify the MCP package, runtime layout, resolved native or bundled tools, and release scripts. Use `svn_diagnose` on a working-copy path when SVN itself is acting strange; it checks local status, remote status, HEAD info, latest log reachability, and returns actionable notes for authentication, network, lock, and working-copy database failures.
 
+Use `svn_snapshot` for a one-call status and revision summary. `svn_log` and `svn_diff` accept exact or ranged revision selectors, while bounded `svn_cat` and `svn_blame` calls support historical file inspection without raw SVN output. Mutations include dry-run-first `svn_delete` and canonical `svn_resolve`; the older `svn_resolved` name remains as a deprecated compatibility alias.
+
 For SVN property work, use `svn_propget` and guarded `svn_propset` instead of raw `svn propget`/`svn propset`. `svn_propset_eol_style` remains the safer shortcut for `svn:eol-style` normalization.
 
 ## Changelog
@@ -174,7 +179,7 @@ Release history is maintained in `CHANGELOG.md`.
 | `bin/` | Versioned Windows SVN and EOL converter runtime binaries |
 | `third_party_licenses/` | License and notice texts shipped with the bundled runtime |
 | `THIRD_PARTY_NOTICES.md` | Notices for bundled binary payloads |
-| `docs/` | Spec, local rules, and decisions |
+| `docs/` | Spec, generated MCP API contract, local rules, and decisions |
 | `releases/` | Generated versioned runtime release payloads, ignored by Git |
 
 ## Usage Model

package/SECURITY.md

@@ -1,23 +1,23 @@
-# Security Policy
-
-## Supported Versions
-
-Security fixes target the latest released version on the default branch. Older releases may receive
-fixes when the issue is severe and the patch is low risk.
-
-## Reporting A Vulnerability
-
-Please report suspected vulnerabilities through GitHub private vulnerability reporting or a private
-security advisory for this repository. If private reporting is not enabled, open a minimal public
-issue asking for a security contact without including exploit details.
-
-Useful reports include:
-
-- Affected version or commit
-- Impact and attacker capabilities
-- Reproduction steps or proof of concept
-- Whether the issue affects read-only, mutating, or release-packaging behavior
-
+# Security Policy
+
+## Supported Versions
+
+Security fixes target the latest released version on the default branch. Older releases may receive
+fixes when the issue is severe and the patch is low risk.
+
+## Reporting A Vulnerability
+
+Please report suspected vulnerabilities through GitHub private vulnerability reporting or a private
+security advisory for this repository. If private reporting is not enabled, open a minimal public
+issue asking for a security contact without including exploit details.
+
+Useful reports include:
+
+- Affected version or commit
+- Impact and attacker capabilities
+- Reproduction steps or proof of concept
+- Whether the issue affects read-only, mutating, or release-packaging behavior
+
 Please do not publish exploit details until a fix or mitigation is available.
 
 ## Security Boundaries
@@ -34,6 +34,8 @@ Please do not publish exploit details until a fix or mitigation is available.
   than silently discarded.
 - Response redaction covers credential-bearing URLs and common secret query parameters, but it is
   not a substitute for keeping credentials out of versioned file content and commit messages.
+- Commit/import messages and generic property values are passed through mode-0600 temporary files
+  outside the working copy and removed in `finally`, rather than embedded in displayed commands.
 - SVN and conversion processes inherit the host environment so native credential caches, proxy
   settings, home directories, and configured SSH transports continue to work. Treat MCP process
   environment variables as trusted operator configuration and do not place secrets in debug logs.