v0.7.6

v0.7.6 — Custom Endpoints & MCP Headers

---

Features

• MCP custom header support — HTTP-transport MCP sources can now send custom headers on all requests (discovery and tool invocation). Header values are stored securely in the credential store via headerNames. Fixes #410. (e4af87b, 8bce725)
• --workspace-dir for validate-server — the --validate-server CLI flag now accepts --workspace-dir to test pre-committed sources against a specific workspace layout. (2d135a6)

Bug Fixes

• Custom endpoint not persisted — customEndpoint field was silently dropped when saving LLM connection config, so custom Anthropic-compatible endpoints reverted to the default API on restart. Fixes #413. (09b6255)
• Wrong model IDs for custom endpoints — custom endpoint defaults now use correct Anthropic model IDs instead of stale values. (8a3aa4f)
• OAuth refresh loop for browser-auth sources — sources that require browser-based authorization no longer trigger silent OAuth refresh attempts that would fail and loop. (42d6592)
• Hardcoded "Claude Max" in error — session expired error message no longer references "Claude Max" by name. (01517b3)

CI / Docs

• OSS build parity — added platform packaging scripts (build-dmg.sh, build-linux.sh, build-win.ps1) and macOS entitlements plist to the OSS sync allowlist, enabling community contributors to build production packages. Addresses #422.

---