clbotdev · Oct 30, 2026 · Oct 30, 2026
diff --git a/.changeset/mcp-2026-07-28.md b/.changeset/mcp-2026-07-28.md
diff --git a/packages/billing/CHANGELOG.md b/packages/billing/CHANGELOG.md
@@ -1,5 +1,9 @@
 # @codelitdev/billing
 
+## 0.5.0
+
+No changes in this release.
+
 ## 0.4.2
 
 No changes in this release.

diff --git a/packages/billing/package.json b/packages/billing/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@codelitdev/billing",
-  "version": "0.4.2",
+  "version": "0.5.0",
   "description": "Provider-neutral billing engine for CodeLit products",
   "author": "CodeLit",
   "type": "module",

diff --git a/packages/design-system/CHANGELOG.md b/packages/design-system/CHANGELOG.md
@@ -1,5 +1,9 @@
 # @codelitdev/design-system
 
+## 0.5.0
+
+No changes in this release.
+
 ## 0.4.2
 
 No changes in this release.

diff --git a/packages/design-system/package.json b/packages/design-system/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@codelitdev/design-system",
-  "version": "0.4.2",
+  "version": "0.5.0",
   "description": "Shared CodeLit design tokens, Tailwind preset, and React primitives for CourseLit, MediaLit, SendLit, and FrontLit.",
   "license": "Apache-2.0",
   "author": "CodeLit",

diff --git a/packages/mcp-server-kit/CHANGELOG.md b/packages/mcp-server-kit/CHANGELOG.md
@@ -1,5 +1,25 @@
 # @codelitdev/mcp-server-kit
 
+## 0.5.0
+
+### Minor Changes
+
+- ffcabaa: Serve MCP 2026-07-28. The kit now runs on the official MCP TypeScript SDK 2 (`@modelcontextprotocol/server`) and is stateless: every request is authenticated, resolved to the product context, and handled by a fresh request-local server.
+
+  - Modern clients get the 2026-07-28 protocol: `server/discover`, per-request protocol envelopes, `Mcp-Method`/`Mcp-Name` header validation, `resultType`, and cache hints on `tools/list` and `server/discover` (five minutes, private by default; set `catalogCacheHint` to change it).
+  - 2025-era Streamable HTTP clients keep working through the SDK's stateless legacy mode. `initialize` no longer mints an `Mcp-Session-Id`; `GET` and `DELETE` answer `405`.
+  - Tool results carry `structuredContent` plus one `text` copy. The invalid `{ type: "json" }` content item is gone; strict clients such as ChatGPT rejected every result carrying it and retried, duplicating writes.
+  - Tool failures, including a destructive call without `confirm: true`, are tool results with `isError: true` and `structuredContent: { code, message, details }`, returned with HTTP 200. They were JSON-RPC errors with string codes, which JSON-RPC does not allow. Authentication and context failures before dispatch return the platform error body (`{ code, message }`) with its HTTP status.
+  - Tool input schemas are advertised as JSON Schema without `$schema`, so clients read them under MCP's default dialect. Annotations follow the spec (`readOnlyHint`, `destructiveHint`); the risk stays in the tool's `_meta.risk`.
+  - New options: `description`, `instructions`, `catalogCacheHint`.
+  - Removed exports: `createMcpSessionStore`, `McpSession`, `McpSessionStore`, `StreamableHTTPServerTransport`, `WebStandardStreamableHTTPServerTransport`, and the kit's `sessions` property.
+
+  `platform-conformance` reads MCP tool failures from `isError` tool results.
+
+### Patch Changes
+
+- @codelitdev/platform@0.5.0
+
 ## 0.4.2
 
 ### Patch Changes

diff --git a/packages/mcp-server-kit/package.json b/packages/mcp-server-kit/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@codelitdev/mcp-server-kit",
-  "version": "0.4.2",
+  "version": "0.5.0",
   "description": "Stateless MCP 2026-07-28 endpoint, auth hooks, and error mapping for CodeLit products",
   "author": "CodeLit",
   "type": "module",
@@ -38,7 +38,7 @@
     "zod-to-json-schema": "^3.25.2"
   },
   "peerDependencies": {
-    "@codelitdev/platform": ">=0.4.2"
+    "@codelitdev/platform": ">=0.5.0"
   },
   "devDependencies": {
     "@codelitdev/platform": "workspace:*",

diff --git a/packages/oauth-server-kit/CHANGELOG.md b/packages/oauth-server-kit/CHANGELOG.md
@@ -1,5 +1,9 @@
 # @codelitdev/oauth-server-kit
 
+## 0.5.0
+
+No changes in this release.
+
 ## 0.4.2
 
 ### Patch Changes

diff --git a/packages/oauth-server-kit/package.json b/packages/oauth-server-kit/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@codelitdev/oauth-server-kit",
-  "version": "0.4.2",
+  "version": "0.5.0",
   "description": "Lean Better Auth OAuth authentication framework for web, mobile, REST, and MCP surfaces.",
   "author": "CodeLit",
   "license": "MIT",

diff --git a/packages/observability/CHANGELOG.md b/packages/observability/CHANGELOG.md
@@ -1,5 +1,9 @@
 # @codelitdev/observability
 
+## 0.5.0
+
+No changes in this release.
+
 ## 0.4.2
 
 ### Patch Changes

diff --git a/packages/observability/package.json b/packages/observability/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@codelitdev/observability",
-  "version": "0.4.2",
+  "version": "0.5.0",
   "description": "Provider-neutral logging and optional telemetry for CodeLit products",
   "author": "CodeLit",
   "type": "module",

diff --git a/packages/platform-cli/CHANGELOG.md b/packages/platform-cli/CHANGELOG.md
@@ -1,5 +1,9 @@
 # @codelitdev/platform-cli
 
+## 0.5.0
+
+No changes in this release.
+
 ## 0.4.2
 
 No changes in this release.

diff --git a/packages/platform-cli/package.json b/packages/platform-cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@codelitdev/platform-cli",
-  "version": "0.4.2",
+  "version": "0.5.0",
   "description": "Create, check, and sync CodeLit Platform products",
   "author": "CodeLit",
   "type": "module",

diff --git a/packages/platform-cli/src/preset.json b/packages/platform-cli/src/preset.json
@@ -5,42 +5,42 @@
   },
   "packages": {
     "@codelitdev/platform": {
-      "recommended": "0.4.2",
+      "recommended": "0.5.0",
       "supported": ">=0.1.0-alpha.0 <2",
       "minimumSecure": "0.1.0-alpha.0"
     },
     "@codelitdev/observability": {
-      "recommended": "0.4.2",
+      "recommended": "0.5.0",
       "supported": ">=0.1.0-alpha.0 <2",
       "minimumSecure": "0.1.0-alpha.0"
     },
     "@codelitdev/mcp-server-kit": {
-      "recommended": "0.4.2",
+      "recommended": "0.5.0",
       "supported": ">=0.1.0-alpha.0 <2",
       "minimumSecure": "0.1.0-alpha.0"
     },
     "@codelitdev/platform-conformance": {
-      "recommended": "0.4.2",
+      "recommended": "0.5.0",
       "supported": ">=0.1.0-alpha.0 <2",
       "minimumSecure": "0.1.0-alpha.0"
     },
     "@codelitdev/platform-cli": {
-      "recommended": "0.4.2",
+      "recommended": "0.5.0",
       "supported": ">=0.1.0-alpha.0 <2",
       "minimumSecure": "0.1.0-alpha.0"
     },
     "@codelitdev/billing": {
-      "recommended": "0.4.2",
+      "recommended": "0.5.0",
       "supported": ">=0.1.0-alpha.4 <1",
       "minimumSecure": "0.1.0-alpha.4"
     },
     "@codelitdev/oauth-server-kit": {
-      "recommended": "0.4.2",
+      "recommended": "0.5.0",
       "supported": ">=0.1.0-alpha.2 <1",
       "minimumSecure": "0.1.0-alpha.2"
     },
     "@codelitdev/design-system": {
-      "recommended": "0.4.2",
+      "recommended": "0.5.0",
       "supported": ">=0.1.0-alpha.7 <1",
       "minimumSecure": "0.1.0-alpha.7"
     }

diff --git a/packages/platform-conformance/CHANGELOG.md b/packages/platform-conformance/CHANGELOG.md
@@ -1,5 +1,22 @@
 # @codelitdev/platform-conformance
 
+## 0.5.0
+
+### Patch Changes
+
+- ffcabaa: Serve MCP 2026-07-28. The kit now runs on the official MCP TypeScript SDK 2 (`@modelcontextprotocol/server`) and is stateless: every request is authenticated, resolved to the product context, and handled by a fresh request-local server.
+
+  - Modern clients get the 2026-07-28 protocol: `server/discover`, per-request protocol envelopes, `Mcp-Method`/`Mcp-Name` header validation, `resultType`, and cache hints on `tools/list` and `server/discover` (five minutes, private by default; set `catalogCacheHint` to change it).
+  - 2025-era Streamable HTTP clients keep working through the SDK's stateless legacy mode. `initialize` no longer mints an `Mcp-Session-Id`; `GET` and `DELETE` answer `405`.
+  - Tool results carry `structuredContent` plus one `text` copy. The invalid `{ type: "json" }` content item is gone; strict clients such as ChatGPT rejected every result carrying it and retried, duplicating writes.
+  - Tool failures, including a destructive call without `confirm: true`, are tool results with `isError: true` and `structuredContent: { code, message, details }`, returned with HTTP 200. They were JSON-RPC errors with string codes, which JSON-RPC does not allow. Authentication and context failures before dispatch return the platform error body (`{ code, message }`) with its HTTP status.
+  - Tool input schemas are advertised as JSON Schema without `$schema`, so clients read them under MCP's default dialect. Annotations follow the spec (`readOnlyHint`, `destructiveHint`); the risk stays in the tool's `_meta.risk`.
+  - New options: `description`, `instructions`, `catalogCacheHint`.
+  - Removed exports: `createMcpSessionStore`, `McpSession`, `McpSessionStore`, `StreamableHTTPServerTransport`, `WebStandardStreamableHTTPServerTransport`, and the kit's `sessions` property.
+
+  `platform-conformance` reads MCP tool failures from `isError` tool results.
+- @codelitdev/platform@0.5.0
+
 ## 0.4.2
 
 ### Patch Changes

diff --git a/packages/platform-conformance/package.json b/packages/platform-conformance/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@codelitdev/platform-conformance",
-  "version": "0.4.2",
+  "version": "0.5.0",
   "description": "Shared HTTP conformance suites for CodeLit Platform products",
   "author": "CodeLit",
   "type": "module",
@@ -37,7 +37,7 @@
     "tag": "latest"
   },
   "peerDependencies": {
-    "@codelitdev/platform": ">=0.4.2"
+    "@codelitdev/platform": ">=0.5.0"
   },
   "devDependencies": {
     "@codelitdev/platform": "workspace:*",

diff --git a/packages/platform/CHANGELOG.md b/packages/platform/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @codelitdev/platform
 
+## 0.5.0
+
+### Patch Changes
+
+- @codelitdev/billing@0.5.0
+
 ## 0.4.2
 
 ### Patch Changes

diff --git a/packages/platform/package.json b/packages/platform/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@codelitdev/platform",
-  "version": "0.4.2",
+  "version": "0.5.0",
   "description": "Composition kernel for CodeLit Platform products",
   "author": "CodeLit",
   "type": "module",
@@ -56,7 +56,7 @@
     "typescript": "^5.9.3"
   },
   "peerDependencies": {
-    "@codelitdev/billing": ">=0.4.2",
+    "@codelitdev/billing": ">=0.5.0",
     "drizzle-orm": "^0.45.2"
   },
   "peerDependenciesMeta": {