feat(mcp): 2.R inbound MCP client — ADR-0052/0053 + the @relavium/mcp package (Steps 1–2) - #56

Merged

cemililik merged 10 commits into

mainfrom

Jun 27, 2026

Commits on Jun 26, 2026

docs(decisions): ADR-0052 + ADR-0053 — inbound MCP client (2.R) shape & network egress security

cemililik
and
claude
committed
feat(mcp): @relavium/mcp package + dependency-free JSON-Schema→Zod compiler (2.R Step 1)

cemililik
and
claude
committed
fix(mcp): 2.R Step 1 Opus-review fixes — node-budget DoS, type:null enforcement, hardening

cemililik
and
claude
committed
fix(mcp): 2.R Step 1 Sonnet-review fixes — null-type intersection, non-finite literals, __proto__

cemililik
and
claude
committed
feat(mcp): 2.R Step 2 — SDK pin + stdio client/discovery + ToolDef shaping + McpClientManager

cemililik
and
claude
committed
fix(mcp): 2.R Step 2 Opus-review fixes — cross-server id collision, env comment, empty tool name

cemililik
and
claude
committed
fix(mcp): 2.R Step 2 Sonnet-review fixes — cause doc-contract + teardown/idempotency coverage

cemililik
and
claude
committed
docs(roadmap): record the MCP host-boundary cause-strip obligation in deferred-tasks (2.R)

cemililik
and
claude
committed

Commits on Jun 27, 2026