v0.3.0
task-queue-mcp 0.3.0
Task-dismissal lifecycle + shared-secret HTTP control API + Baseline repo polish.
Added
- Lifecycle:
cancelledterminal status;set_task_status(operator transitions + auditedallow_override);cancel_task;quarantine_task/restore_task(recoverable isolation, no hard-delete). Four new MCP tools. - HTTP control API: FastMCP custom routes on port 8485 —
POST /tasks/{id}/{approve,cancel,status,quarantine,restore}, gated byX-Task-Queue-Secret(constant-time, fail-closed). The single validated mutation path for the CloudCLI plugin and Matrix bot (ends the three-writer divergence). workflow_modetask field (semi-auto|auto).
Changed
get_taskresolves quarantined tasks; Baseline polish (ruff, coverage gate, SHA-pinned CI, README).
Security
- Byte-operand secret compare → clean 401 on non-ASCII header (L-02); documented loopback trust model (L-01).
82 tests, 90.7% coverage. Security audit: PASS (0 Critical/High).
See CHANGELOG.md.