v0.7.0

What's Changed

• Make mcp.callTool throw McpToolError on tool errors by @r33drichards in #109
• Revert "Make mcp.callTool throw McpToolError on tool errors" by @r33drichards in #110
• Revert "Revert "Make mcp.callTool() throw McpToolError on error resul… by @r33drichards in #111

Full Changelog: v0.6.0...v0.7.0

v0.6.0

What's Changed

• Remove --secure-sessions, simplify to --jwks-url + header-based sessions by @r33drichards in #106
• feat(ci): add aarch64-linux binary to release workflow by @r33drichards in #108

Full Changelog: v0.5.2...v0.5.3

v0.5.2

What's Changed

• Add MCP tool calling tutorial comparing server vs programmatic approaches by @r33drichards in #100
• Add token usage case study: MCP tool calling approaches by @r33drichards in #102

Full Changelog: v0.5.1...v0.5.2

v0.5.1

What's Changed

• Add semantic versioning support to Docker publish workflow by @r33drichards in #99

Full Changelog: v0.5.0...v0.5.1

v0.5.0

What's Changed

• Add local Rego policy evaluation and policy chain composition by @r33drichards in #81
• Refactor execute_stateless/execute_stateful to use ExecutionConfig builder by @r33drichards in #84
• Add OPA/Rego-gated filesystem access by @r33drichards in #85
• Add policy-gated filesystem access with Rego policy evaluation by @r33drichards in #87
• Add comprehensive fuzzing targets for filesystem, fetch, and module operations by @r33drichards in #90
• Support top-level await in JavaScript execution by @r33drichards in #89
• Neutralize dangerous deno_core ops (op_panic, print) by @r33drichards in #92
• Add MCP client support for programmatic tool calling from JS by @r33drichards in #93
• Fix sandbox_ops tests for module-only execution by @r33drichards in #94
• Add OPA policy support for MCP tool calls by @r33drichards in #95
• Fix critical op_print neutralization bypass via prototype chain by @r33drichards in #97

Full Changelog: v0.4.0...v0.5.0

v0.4.0

What's Changed

• Add GitHub API token injection tutorial by @r33drichards in #64
• Remove snapshot directory by @r33drichards in #65
• Add comprehensive end-to-end tests for console.log capture and async execution by @r33drichards in #67
• Implement async execution tracking with console output streaming by @r33drichards in #66
• Document async execution model and console output features by @r33drichards in #68
• Add Docker image for Open Policy Agent server by @r33drichards in #69
• Run OPA container with non-root opa user by @r33drichards in #71
• Refactor execution model to use console output instead of return values by @r33drichards in #72
• Remove module result capture mechanism from ES module execution by @r33drichards in #74
• Add ES module import support with esm.sh integration by @r33drichards in #75
• Add ES module import support with npm:/jsr:/URL resolution by @r33drichards in #70
• Simplify StatelessMcpService to synchronous shell mode by @r33drichards in #76
• Remove DEFAULT_HEAP_MEMORY_MAX_MB constant and inline heap limit by @r33drichards in #77
• Add external module import policy enforcement via OPA by @r33drichards in #78

Full Changelog: v0.3.0...v0.4.0

v0.3.0

What's Changed

• Add heap tagging system with concurrent-safe merge operations by @r33drichards in #52
• Migrate from raw V8 to deno_core for JavaScript execution by @r33drichards in #53
• Fix CI builds by prefetching rusty_v8 static library by @r33drichards in #54
• Add OPA-gated fetch() to JavaScript runtime by @r33drichards in #55
• Document OPA-gated fetch() in README by @r33drichards in #56
• Convert fetch() to async using deno_core ops by @r33drichards in #60
• Configure Rust tests to run sequentially by @r33drichards in #59
• Add Docker Compose for OPA and example fetch policy by @r33drichards in #57
• Claude/add mcp js docker 6 pw wp by @r33drichards in #61
• Add header injection rules for fetch requests by @r33drichards in #58
• Add fetch header injection feature with CLI and JSON config support by @r33drichards in #62
• Use ENTRYPOINT + CMD pattern in Dockerfile by @r33drichards in #63

Full Changelog: v0.2.2...v0.3.0

v0.2.2

What's Changed

• Fix fuzz_wasm_compile OOM by adding WASM resource limits by @r33drichards in #50

Full Changelog: v0.2.1...v0.2.2

v0.2.1

What's Changed

• Add SQLite WASM support with manual instantiation for modules with imports by @r33drichards in #47

Full Changelog: v0.2.0...v0.2.1

v0.2.0

What's Changed

• Refactor V8 execution with async timeout, concurrency control, and improved docs by @r33drichards in #39
• Add extreme OOM handling and stateless mode support by @r33drichards in #40
• Add WebAssembly support with comprehensive test suite by @r33drichards in #41

Full Changelog: v0.1.2...v0.2.0