v0.0.15 — MCP V2: Prime-Time MCP Server

What's Changed

• refactor(approval): rename agent-invocation "surface" → "origin" (#3491) by @msywulak in #3518
• fix(mcp): plugin tools stamp origin=mcp for origin-scoped approval rules (#3507) by @msywulak in #3519
• feat(mcp): thread OAuth scopes into RequestContext + enforce mcp:write (#3504) by @msywulak in #3521
• feat(mcp): resolve hosted actor's effective org role via live DB lookup (#3505) by @msywulak in #3523
• feat(mcp): dispatch gate-order pipeline + origin=mcp approval flow (#3508) by @msywulak in #3524
• fix(mcp): send RFC 8707 resource in hosted-CLI token exchange by @msywulak in #3525
• refactor(api): extract shared profiling/semantic-gen service (#3506) by @msywulak in #3528
• fix(mcp): backport session hardening to standalone SSE transport (#3492) by @msywulak in #3527
• feat(mcp): structured logging for the standalone MCP process (#3494) by @msywulak in #3532
• docs(mcp): document ATLAS_MCP_* knobs + fix stale setup-guide spots (#3495) by @msywulak in #3533
• feat(mcp): MCP action-policy kill-switch — schema + gate-1 enforcement (#3509) by @msywulak in #3531
• feat(mcp): tool annotations + explicit capabilities object (#3497) by @msywulak in #3534
• feat(mcp): enforce mcp:write on mutating plugin-contributed MCP tools (#3520) by @msywulak in #3535
• feat(mcp): structured output for executeSQL + runMetric (#3498) by @msywulak in #3536
• feat(web): audit-UI MCP attribution column + rows path on useAdminFetch (#3496) by @msywulak in #3537
• feat(web): MCP action-policy customer-admin dashboard (#3510) by @msywulak in #3539
• feat(mcp): elicitation adapter — masked form-mode behind a thin seam (#3499) by @msywulak in #3538
• feat(mcp): progress notifications + cancellation on long ops (#3500) by @msywulak in #3541
• docs(adr-0016): record platform_admin-over-hosted-MCP decision (#3522) by @msywulak in #3540
• feat(mcp): cursor pagination on list operations (#3501) by @msywulak in #3542
• feat(mcp): resource subscriptions + lazy SEMANTIC_ROOT (#3502) by @msywulak in #3543
• feat(mcp): argument completions for entities + metrics (#3503) by @msywulak in #3544
• feat(mcp): datasource flagship tools — provision / profile / lifecycle (Tier 2) by @msywulak in #3545
• feat(mcp): persist profiled semantic layer + live-DB create→profile→query test by @msywulak in #3549
• fix(ci): signal-aware retry for Bun-segfault false-negatives on api-tests shards by @msywulak in #3548
• feat(mcp): capability-derived datasource provisioning + plugin-aware test-connect (#3547) by @msywulak in #3553
• fix(mcp): v0.0.15 Correctness & Security audit — all 21 findings by @msywulak in #3606
• refactor(mcp): v0.0.15 Architecture Hardening — gate composer, session store, dispatch seam (#3598) by @msywulak in #3607
• refactor(railway-sandbox): native sandbox.files upload, drop base64-over-exec (#3530) by @msywulak in #3618
• refactor(semantic): converge wizard /save metrics onto the DB persist path (#3550) by @msywulak in #3619

Full Changelog: v0.0.14...v0.0.15