v0.10.0

0.10.0 (2026-07-06)

⚠ BREAKING CHANGES

• sdk: switch to apikey values; update sdk e2e tests and examples (#168)

Features

• expand env references in agent target headers (#169) (605a9b5)
• stream run lifecycle events as ndjson via a run-listener (#159) (ccc99dc)
• support listing mcp suites from the sdk (#144) (6b68b42)
• support server-owned session IDs with body/header config (#167) (121edfd)

Bug Fixes

• broken gitleaks ci for fork (#158) (e0be561)
• bump zod to ^4.0.0 to satisfy claude-agent-sdk peer dependency (#148) (bcd970e)
• conditional reasoning instruction and stricter section() parsing (15b598f)
• declare mcp dep, add createRequire banner, fix atlas-data resolution for bundled runners (#134) (b8ff91f)
• harden mcp baseline scanner against false negatives and crashes (#155) (cd36f85)
• make agent judge reason before stating its verdict (3b551c6)
• make agent judge reason before stating its verdict (60dacc8)
• make hunt work from a published install (#157) (ac468ea)
• rename 'Risk Score' to 'Safety Score' in extension popup (#133) (4c955a0)
• revert gitleaks trigger from pull_request_target to pull_request (#161) (ea7315e)
• run gitleaks binary in ci to unblock fork pull requests (#162) (be307b2)
• use simple tag format for release-please (9e7a8e6)
• validate mcp tool inputs with zod and return actionable errors (#143) (ad749bc)

Refactors

• sdk: switch to apikey values; update sdk e2e tests and examples (#168) (ed40cea)