Under the hood
Useful2 Signal0
Malformed remote agent and MCP task metadata files are now skipped rather than trusted.
What's wrong with this entry?
Anonymous. No account, no email.
What
Sidecar .meta.json files are now parsed through a zod schema before their contents are used.
Details
listRemoteAgentMetadatarunssafeParseon each file and skips invalid ones, logging the parse error- both the sync and async MCP task listers do the same, so arbitrary JSON no longer flows into the list
Evidence
listMcpTaskMetadata: skipping , listRemoteAgentMetadata: skipping
Strings lifted out of the shipped bundle, so the claim above can be checked against them.