v0.0.32

Changelog

• e30a653 Merge pull request #78 from cruxdigital-llc/feat/mcp-oauth-restore-remote-aws
• 3dec267 test(integration): prove cold-only via changed secret, not a file write
• 36c817b test(integration): overwrite on-disk blob as root in cold-only check (portable)
• d3b35f1 fix(awsprovider): AWS MCP OAuth restore existence probe read stdout, not err
• dc3f934 docs(spec): mark S4/S5 complete across all providers (Phase 2)
• 71f55ed feat(remote,aws): restore MCP OAuth blobs before container start (Phase 2 S5)
• 4e86c30 Merge pull request #77 from cruxdigital-llc/feat/mcp-oauth-persist-restore
• fb97aa1 test(integration): modify on-disk blob host-side in cold-only check
• 8bae858 fix(localprovider): restore MCP OAuth blob world-readable so the container can read it
• b309526 test(integration): verify MCP OAuth restore on container restart (Phase 2)
• 4c3f9eb fix: address PR #77 review — remote secret-dir warning + capture JSON guard
• 7c0769e docs(spec): record Phase 2 progress (S1/S4/S5-core + local) in tasks.md
• 5012a03 feat(localprovider): restore MCP OAuth blobs before container start (Phase 2 S5, local)
• 01744c3 feat(common): cold-only RestoreMCPOAuth decision logic (Phase 2 S5 core)
• 431b00b feat(common): capture MCP OAuth credential blobs to the secrets store (Phase 2 S4)
• a0a2083 feat(runtime): OAuthStateDir() + mcp-oauth secret-prefix plumbing (Phase 2 S1)
• f89bd70 Merge pull request #75 from cruxdigital-llc/chore/scrub-client-names
• 975f018 Merge pull request #74 from cruxdigital-llc/plan/fleet-mcp-oauth-provisioning
• fb360ca chore: scrub client/deployment/person names from committed docs, specs, tests
• 33d3507 feat(cli): remote-MCP OAuth detection + one-command re-auth (Phase 1)
• 03aec90 Merge pull request #73 from cruxdigital-llc/docs/agent-cost-heartbeat-standard
• 466f107 docs(standards): heartbeat-vs-cron cost guidance + agent runtime-config standard
• 4eeb63a Merge pull request #71 from cruxdigital-llc/docs/post-managed-host-doc-accuracy
• c05bbec docs: align docs with managed-host engine + fix stale claims
• 85ab23f Merge pull request #70 from cruxdigital-llc/docs/managed-host-hardening-c5b-acceptance
• 4fce759 docs(spec): #33 verify-feature — verification, personas, standards gate, retrospection
• 504a692 docs(spec): record #33 release + fleet rollout + C5b reboot acceptance
• 7724aa0 Merge pull request #69 from cruxdigital-llc/chore/bump-provider-0.1.9
• 25a186b chore(terraform): pin conga provider 0.1.8 -> 0.1.9 (managed-host engine + migration hardening)