Changelog

4.0.0-beta.5 (2026-10-08)

core: models defining canAct are now enforced on REST, gRPC and MCP operations; refused calls return 403. Query pages can be shorter than their LIMIT. OwnerModel ignores a client supplied _user. ResourceAcl.canAct signature changed to (context, action) and entries need a principal.

core: enforce model permissions on every transport, deny by default (#810) (24c1182)
packaging: point every package's repository at its monorepo folder (#812) (3717b73)

mcp: map model Get/Query operations to MCP resources (2ddd34b)
mcp: McpService with a Streamable HTTP endpoint and per-user MCP sessions (d9f30b7)
mcp: run operations as the caller and convert results to MCP tool results (363c82f)
mcp: scaffold @webda/mcp with schema inlining and the tool registry (55a33e5)
mcp: serve MCP tools over stdio with webda mcp --user (e0896ff)
mcp: serve tools and resources through the MCP SDK server (6830dc0)
sample-blog-system: expose the blog over MCP and document @webda/mcp (cff8244)

compiler metadata, CLI commands, cron/async hooks and long-running command lifecycle (#785) (0515715)
mcp: evict the least recently used MCP session at maxSessions instead of 503 (b0573c7)
mcp: guard the HTTP endpoint against DNS rebinding, cap MCP sessions, test 401 (5684bff)
mcp: honor pre-aborted signals and truncate output on a UTF-8 boundary (78eb3e8)
mcp: keep optional wrapped inputs optional and tolerate malformed refs (345e735)
mcp: keep stdout for protocol frames while webda mcp runs (70574e4)
mcp: mask resources/list errors and await progress notifications (1d80a8e)
mcp: parse the request host from the Host/X-Forwarded-Host header (f399e76)
mcp: stop declaring tool outputSchema, share UTF-8-safe truncation, type-check errors (0af2ba1)
mcp: validate cursor token type, escape only backslash and quote in queryFor, skip Query ops with mcp:false (31690c2)
unit test models relations (2d160f1)