Conversation
|
🧪 Testing To try out this version of the SDK: Expires at: Wed, 06 May 2026 21:33:21 GMT |
775bc6c to
c2666f0
Compare
c2666f0 to
69d64c2
Compare
Note that we still want to run tests, as these depend on the metadata.
69d64c2 to
bf360a8
Compare
bf360a8 to
8ff5f6d
Compare
8ff5f6d to
6bf1321
Compare
6bf1321 to
52960cb
Compare
52960cb to
034dbe4
Compare
034dbe4 to
f7ffd88
Compare
f7ffd88 to
aaf0dd3
Compare
aaf0dd3 to
25b4f5a
Compare
25b4f5a to
9c0059b
Compare
9c0059b to
a9bdb3e
Compare
a9bdb3e to
e048719
Compare
e048719 to
df66e2e
Compare
df66e2e to
8e53a5e
Compare
8e53a5e to
bbf887f
Compare
| }; | ||
| try { | ||
| let run_ = async (client: any) => {}; | ||
| eval(`${code}\nrun_ = run;`); |
There was a problem hiding this comment.
Console spread loses non-enumerable methods in worker
Medium Severity
globalThis.console methods (warn, info, debug, trace, dir, time, etc.) are non-enumerable own properties in Node.js/Deno. The spread { ...originalConsole } only copies enumerable properties, resulting in an object with only the explicitly defined log and error methods. Any code (including SDK internals) calling console.warn() or other missing methods will throw a TypeError. The previous eval-based approach used a local console variable, so globalThis.console was untouched and SDK code could still use all methods.
bbf887f to
e7f43f6
Compare
e7f43f6 to
9d52e98
Compare
9d52e98 to
1723068
Compare
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
There are 2 total unresolved issues (including 1 from previous review).
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 1723068. Configure here.
| ...(docsTools !== undefined && { includeDocsTools: docsTools }), | ||
| codeExecutionMode: defaultOptions.codeExecutionMode, | ||
| docsSearchMode: defaultOptions.docsSearchMode, | ||
| docsDir: defaultOptions.docsDir, |
There was a problem hiding this comment.
Missing customInstructionsPath in parseQueryOptions return value
Low Severity
The parseQueryOptions function passes through the newly added docsSearchMode and docsDir from defaultOptions, but omits the also-newly-added customInstructionsPath. This means if parseQueryOptions is ever called, the customInstructionsPath setting will be silently dropped from the returned McpOptions object, causing the MCP server to fall back to API-fetched instructions instead of using the custom file.
Reviewed by Cursor Bugbot for commit 1723068. Configure here.
1723068 to
7f0dba4
Compare


Automated Release PR
1.22.0 (2026-04-06)
Full Changelog: v1.21.0...v1.22.0
Features
Bug Fixes
oidcdir (b2836ba)Chores
This pull request is managed by Stainless's GitHub App.
The semver version number is based on included commit messages. Alternatively, you can manually set the version number in the title of this pull request.
For a better experience, it is recommended to use either rebase-merge or squash-merge when merging this pull request.
🔗 Stainless website
📚 Read the docs
🙋 Reach out for help or questions
Note
Medium Risk
Adds a new
PATCH /v1/namespaces/{namespace}/metadatasurface (pinning config/status) and significantly updates MCP server behavior (local docs indexing, session/client info propagation, and code execution mechanism), which could affect runtime behavior in deployed MCP setups.Overview
Bumps the SDK and MCP server to
1.22.0and updates generated docs/changelog to match.Adds
client.namespaces.updateMetadata(PATCH /v1/namespaces/{namespace}/metadata) plus new pinning-related types (PinningConfig,NamespaceMetadataPatch) and extendsNamespaceMetadatato include pinning status; also tweaks schema typing (e.g.,globsupport) and refactorscopy_from_namespaceto a sharedCopyFromNamespaceParamstype.Enhances the MCP server with local docs search (new
LocalDocsSearchindex + CLI flags--docs-search-mode/--docs-dir), custom instructions from a file (--custom-instructions-path), and session/client metadata propagation (request/responsemcp-session-id, forwarded headers to remote docs search, and logging). The code tool worker also replacesevalwith dynamic module import for executing user code and ensures console overrides are restored.CI/workflow tweaks skip lint/build on metadata-only pushes and harden npm publish path handling; MCP Docker build is adjusted to avoid SDK symlink interference, and
.gitignoregainsoidcand.stdy.log.Reviewed by Cursor Bugbot for commit db5e27d. Bugbot is set up for automated code reviews on this repo. Configure here.