v1.0.0

1.0.0 (2026-07-22)

Bug Fixes

• actual: handle split legs, income categories, and the update race (0202cd2)
• close a password leak and eight silent-failure paths (629f42c)
• fail closed on auth, bound every operation, pin the API (03f1173)
• rules: correct action ops, split handling, and id validation (785392c)

BREAKING CHANGES

• the server now refuses to start unless MCP_ACTUAL_TOKEN
  is set or SECURE_LOCAL_NET=true. Deployments that relied on an unset
  token meaning "no auth" must set one of the two before upgrading. This
  applies to read-only deployments too, since an unauthenticated read-only
  server still exposes the full budget.