From cbe420a1bdbd3a4d08d8c48612e1511b87be9e64 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 21 Sep 2026 14:58:43 +0000 Subject: [PATCH] Version Packages --- .changeset/age-2253-mcp-reset-inflight.md | 5 ----- .changeset/keep-builder-save-intent.md | 5 ----- .changeset/mcp-auth-verify-connector.md | 5 ----- .changeset/schedule-turn-gateway-metadata.md | 5 ----- .changeset/session-rename-ui.md | 5 ----- .changeset/session-timestamps-timeline-safari.md | 5 ----- .changeset/ssrf-outbound-url-guard.md | 6 ------ .changeset/tenant-cp-url-mcp-oauth.md | 5 ----- .changeset/tfy-sandbox-upload-api.md | 5 ----- packages/trueforge-core/CHANGELOG.md | 8 ++++++++ packages/trueforge-core/package.json | 2 +- packages/trueforge-ui/CHANGELOG.md | 9 +++++++++ packages/trueforge-ui/package.json | 2 +- packages/trueforge/CHANGELOG.md | 12 ++++++++++++ packages/trueforge/package.json | 2 +- 15 files changed, 32 insertions(+), 49 deletions(-) delete mode 100644 .changeset/age-2253-mcp-reset-inflight.md delete mode 100644 .changeset/keep-builder-save-intent.md delete mode 100644 .changeset/mcp-auth-verify-connector.md delete mode 100644 .changeset/schedule-turn-gateway-metadata.md delete mode 100644 .changeset/session-rename-ui.md delete mode 100644 .changeset/session-timestamps-timeline-safari.md delete mode 100644 .changeset/ssrf-outbound-url-guard.md delete mode 100644 .changeset/tenant-cp-url-mcp-oauth.md delete mode 100644 .changeset/tfy-sandbox-upload-api.md diff --git a/.changeset/age-2253-mcp-reset-inflight.md b/.changeset/age-2253-mcp-reset-inflight.md deleted file mode 100644 index 2b04d7f68..000000000 --- a/.changeset/age-2253-mcp-reset-inflight.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@truefoundry/trueforge-core": patch ---- - -Keep a shared remote MCP transport open while sibling tool calls are in flight so a session-expired reset cannot fail them with a non-retried close error. diff --git a/.changeset/keep-builder-save-intent.md b/.changeset/keep-builder-save-intent.md deleted file mode 100644 index 314eede40..000000000 --- a/.changeset/keep-builder-save-intent.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'@truefoundry/trueforge-ui': patch ---- - -Keep newly saved builders editable until the user leaves the build-agent page, then start fresh when they return. diff --git a/.changeset/mcp-auth-verify-connector.md b/.changeset/mcp-auth-verify-connector.md deleted file mode 100644 index 49733eea9..000000000 --- a/.changeset/mcp-auth-verify-connector.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'@truefoundry/trueforge-ui': patch ---- - -Show successful MCP authentication in chat, automatically continue after every required server connects, and indicate while the turn is starting. Confirm OAuth against the chat MCP connector read (`getMcpConnector`) so non-admins are not blocked by settings-only catalog GETs, and ignore authorize callbacks after the prompt unmounts. diff --git a/.changeset/schedule-turn-gateway-metadata.md b/.changeset/schedule-turn-gateway-metadata.md deleted file mode 100644 index 74b83648f..000000000 --- a/.changeset/schedule-turn-gateway-metadata.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@truefoundry/trueforge": patch ---- - -Keep TrueFoundry gateway metadata out of the turns engine behind a required per-turn headers resolver, and keep stamping harness `tfg.*` metadata on schedule-run turns. diff --git a/.changeset/session-rename-ui.md b/.changeset/session-rename-ui.md deleted file mode 100644 index 921ac5967..000000000 --- a/.changeset/session-rename-ui.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@truefoundry/trueforge-ui": patch ---- - -Add chat-history rename for servers that implement `renameSession`, including TrueForge harness title updates. diff --git a/.changeset/session-timestamps-timeline-safari.md b/.changeset/session-timestamps-timeline-safari.md deleted file mode 100644 index dadab36a6..000000000 --- a/.changeset/session-timestamps-timeline-safari.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'@truefoundry/trueforge-ui': patch ---- - -Show absolute session activity timestamps on hover, label deferred MCP tools in the session timeline, and fix Safari collapsing contentSized modal bodies (flex-auto). diff --git a/.changeset/ssrf-outbound-url-guard.md b/.changeset/ssrf-outbound-url-guard.md deleted file mode 100644 index 43a87de81..000000000 --- a/.changeset/ssrf-outbound-url-guard.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -"@truefoundry/trueforge-core": patch -"@truefoundry/trueforge": patch ---- - -Block RFC1918, CGNAT, reserved, link-local, and loopback destinations on outbound MCP and model-provider HTTP, plus in-cluster hostnames, with optional host allow/block lists and NETWORK_POLICY_ENABLED (default on). diff --git a/.changeset/tenant-cp-url-mcp-oauth.md b/.changeset/tenant-cp-url-mcp-oauth.md deleted file mode 100644 index 24b735ea3..000000000 --- a/.changeset/tenant-cp-url-mcp-oauth.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@truefoundry/trueforge": patch ---- - -Resolve TrueFoundry MCP OAuth redirect origin from a cached tenant control-plane URL lookup instead of request context. diff --git a/.changeset/tfy-sandbox-upload-api.md b/.changeset/tfy-sandbox-upload-api.md deleted file mode 100644 index be742d5d3..000000000 --- a/.changeset/tfy-sandbox-upload-api.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@truefoundry/trueforge-core": patch ---- - -Upload TFY sandbox files via POST /files/upload so large files are not stuffed onto exec argv. diff --git a/packages/trueforge-core/CHANGELOG.md b/packages/trueforge-core/CHANGELOG.md index 074de4930..a9ce77757 100644 --- a/packages/trueforge-core/CHANGELOG.md +++ b/packages/trueforge-core/CHANGELOG.md @@ -1,5 +1,13 @@ # @truefoundry/trueforge-core +## 0.2.1 + +### Patch Changes + +- f905d9f: Keep a shared remote MCP transport open while sibling tool calls are in flight so a session-expired reset cannot fail them with a non-retried close error. +- 6a97f6a: Block RFC1918, CGNAT, reserved, link-local, and loopback destinations on outbound MCP and model-provider HTTP, plus in-cluster hostnames, with optional host allow/block lists and NETWORK_POLICY_ENABLED (default on). +- e5e651c: Upload TFY sandbox files via POST /files/upload so large files are not stuffed onto exec argv. + ## 0.2.0 ### Minor Changes diff --git a/packages/trueforge-core/package.json b/packages/trueforge-core/package.json index b7c5a54c2..ffaad10c0 100644 --- a/packages/trueforge-core/package.json +++ b/packages/trueforge-core/package.json @@ -1,6 +1,6 @@ { "name": "@truefoundry/trueforge-core", - "version": "0.2.0", + "version": "0.2.1", "description": "TrueForge Agent Harness library.", "author": "TrueFoundry", "license": "MIT", diff --git a/packages/trueforge-ui/CHANGELOG.md b/packages/trueforge-ui/CHANGELOG.md index fdf2daa4d..cc4741668 100644 --- a/packages/trueforge-ui/CHANGELOG.md +++ b/packages/trueforge-ui/CHANGELOG.md @@ -1,5 +1,14 @@ # Changelog +## 0.3.1 + +### Patch Changes + +- 56b3a59: Keep newly saved builders editable until the user leaves the build-agent page, then start fresh when they return. +- a122ba1: Show successful MCP authentication in chat, automatically continue after every required server connects, and indicate while the turn is starting. Confirm OAuth against the chat MCP connector read (`getMcpConnector`) so non-admins are not blocked by settings-only catalog GETs, and ignore authorize callbacks after the prompt unmounts. +- acad1a1: Add chat-history rename for servers that implement `renameSession`, including TrueForge harness title updates. +- a08c75a: Show absolute session activity timestamps on hover, label deferred MCP tools in the session timeline, and fix Safari collapsing contentSized modal bodies (flex-auto). + ## 0.3.0 ### Minor Changes diff --git a/packages/trueforge-ui/package.json b/packages/trueforge-ui/package.json index 34c8ea69b..222e5ddeb 100644 --- a/packages/trueforge-ui/package.json +++ b/packages/trueforge-ui/package.json @@ -1,6 +1,6 @@ { "name": "@truefoundry/trueforge-ui", - "version": "0.3.0", + "version": "0.3.1", "description": "TrueForge Agent Chat UI (atoms + containers) built on assistant-ui, with owned theming, presets, and swappable slots.", "author": "TrueFoundry", "license": "MIT", diff --git a/packages/trueforge/CHANGELOG.md b/packages/trueforge/CHANGELOG.md index 341f68153..4e05be096 100644 --- a/packages/trueforge/CHANGELOG.md +++ b/packages/trueforge/CHANGELOG.md @@ -1,5 +1,17 @@ # @truefoundry/trueforge +## 0.2.1 + +### Patch Changes + +- 13c7c4f: Keep TrueFoundry gateway metadata out of the turns engine behind a required per-turn headers resolver, and keep stamping harness `tfg.*` metadata on schedule-run turns. +- 6a97f6a: Block RFC1918, CGNAT, reserved, link-local, and loopback destinations on outbound MCP and model-provider HTTP, plus in-cluster hostnames, with optional host allow/block lists and NETWORK_POLICY_ENABLED (default on). +- 6b9b981: Resolve TrueFoundry MCP OAuth redirect origin from a cached tenant control-plane URL lookup instead of request context. +- Updated dependencies [f905d9f] +- Updated dependencies [6a97f6a] +- Updated dependencies [e5e651c] + - @truefoundry/trueforge-core@0.2.1 + ## 0.2.0 ### Minor Changes diff --git a/packages/trueforge/package.json b/packages/trueforge/package.json index 9b59e6020..23bc5dafd 100644 --- a/packages/trueforge/package.json +++ b/packages/trueforge/package.json @@ -1,6 +1,6 @@ { "name": "@truefoundry/trueforge", - "version": "0.2.0", + "version": "0.2.1", "description": "TrueForge Agent Harness: server, HTTP API, and chat UI (npx @truefoundry/trueforge)", "author": "TrueFoundry", "license": "MIT",