[aterga]

Summary

The version bump that comes before cutting a release candidate, following "Releasing" in CONTRIBUTING. All three crates (imcp2, imcp2-core, imcp2-local) share one version, and deploy-candidate.yml refuses an rc-* tag whose version doesn't match every Cargo.toml.

This is a patch bump, not a minor one: nothing since v0.6.0 changes the crates' Rust public API. That covers #227 too, because the types it changes live in imcp2-core's private calls module, so code embedding the crate still compiles unchanged.

#227 merged after this branch was cut and before the bump merged, so it's in 0.6.1 (and in rc-0.6.1-1). It does change what get_canister_candid returns to MCP clients, and it refuses something 0.6.0 allowed:

• Large interfaces need methods: called without methods, an interface over 5 KB is now refused, with a list of every method the service declares. In 0.6.0 the full interface came back.
• New structured output: structuredContent no longer carries candid. The interface text is only in the reply's text content. The structured content now describes that text with methods, bytes and best_effort.
• New argument: methods: ["<name>", …] returns only those methods, with every type definition they use and the interface's own comments.

#217 bumped the minor version for this kind of change, but we're keeping 0.6.1 on purpose, since embedders' code doesn't break. Anyone who reads structuredContent.candid should switch to the text content.

The release includes:

• get_canister_candid: read a commented sub-service for the methods the API doc names #227: get_canister_candid can read just the methods you name, and refuses a large interface without them (see above)
• Retry mcp_get_delegation when a lagging replica answers NoSuchDelegation; document the 5-minute delegation cap #220: retry mcp_get_delegation when a replica that's behind answers NoSuchDelegation
• Bound what one /oauth/authorize request stores in its pending connect #221: a limit on what one /oauth/authorize request stores in its pending connect
• Describe open_app as acting in ICP apps so deferred-loading agents find it #226: new wording for the open_app, canister_query and canister_update_call descriptions and for the server instructions
• Fix the clippy warnings stable 1.97 reports on main #224: fixes for the clippy warnings that stable 1.97 reports
• Housekeeping after the directory approval #218, Record the OpenAI submission's outcome and the OAuth disruption #219, Say deploying happens with the icp CLI or a proxy deployment service #223, Privacy draft: per-app authorization lifetime is five minutes, not one hour #225: docs only

Related issues

Follows #217, the 0.6.0 bump. Next steps after merge, per the release procedure: run git tag rc-0.6.1-1 <this commit on main> to deploy staging, then git tag v0.6.1 rc-0.6.1-1^{} to promote.

Changes

• Cargo.toml: version, and the workspace pin imcp2-core = { path = …, version = … }, set to 0.6.1
• crates/imcp2-core/Cargo.toml, crates/imcp2-local/Cargo.toml: version set to 0.6.1
• Cargo.lock: refreshed with cargo update -w; only the three workspace entries change

Same shape as the 0.6.0 bump (#217).

Testing

The local checks below ran on this branch, which was cut before #227 merged. CI on the merge commit 278cc19 (the commit rc-0.6.1-1 points at), which has both #227 and the bump, passed.

• cargo metadata --locked resolves for the whole workspace, so the lockfile is consistent under --locked
• cargo check --locked --workspace --all-targets: finishes with no warnings
• cargo test --locked -p imcp2-core --lib: 206 passed, 0 failed
• cargo fmt --all -- --check: clean
• cargo test --locked --all-targets for the whole workspace and cargo clippy weren't run locally; CI's jobs cover them
• npm test --prefix monitoring/mcp-status: dashboard unchanged

Checklist

• I have read the Contributing guidelines.
• Docs (README / comments) updated for any user-visible change. (None needed: this is only a version bump. As with 0.6.0, the submission logs in docs/ still say 0.6.0 and are best updated once the candidate and release tags are cut.)
• No secrets, credentials, or internal-only information are included.

🤖 Generated with Claude Code

[Copilot]

🟢 Approval recommended

No active review issues are recorded for the release-metadata update.

No open issues 🎉

What changed in this PR

Prepares the workspace for the 0.6.1 release candidate by updating all three crates together, following the same version-bump pattern as 0.6.0. This PR changes release metadata only.

Changes:

• Bumps imcp2, imcp2-core, and imcp2-local to 0.6.1.
• Updates the workspace’s imcp2-core dependency requirement to 0.6.1.
• Synchronizes the three workspace entries in Cargo.lock without changing external dependencies.

File	Description
crates/​imcp2-local/​Cargo.toml	Bumps the local server crate to 0.6.1.
crates/​imcp2-core/​Cargo.toml	Bumps the shared core crate to 0.6.1.
Cargo.toml	Bumps the root crate and shared core dependency requirement to 0.6.1.
Cargo.lock	Records 0.6.1 for all three workspace packages.

_{Review effort: Balanced}