v1.1.8

Highlights

• Added configurable result caching with admission control, multiple store backends, namespace versioning, structured cache.* request logs, exact purge semantics, and approval-aware cache safety protections.
• Added content-aware policy enforcement with an asynchronous HITL approval queue, approval audit metadata and pagination, execution result replay, synchronous wait polling, and multiple lifecycle hardening fixes across the proxy and admin surfaces.
• Expanded MCP runtime capabilities with anonymous public access via /mcp/public, CustomStdio support for user-configured tools, Docker runner support, user environment overrides, improved startup diagnostics, and more reliable lazy server wakeup after transport closure.
• Expanded auth and OAuth coverage with OAuth introspection, new Google auth variants, Pipedrive support, Canva and Zendesk provider support, refresh-token strategies, PKCE/code-verifier fixes, and related auth configuration parsing fixes.
• Added repository release automation for peta-core maintainers, including temporary-worktree release preparation, English release-note context generation, and semver-aware non-interactive Docker publishing.

Fixes and Improvements

• Fixed restore handler shutdown ordering, variable shadowing, validation, and post-shutdown error handling to avoid silent data loss and incomplete recovery paths.
• Hardened policy and approval behavior by returning all policy statuses in admin lists, enforcing version uniqueness with optimistic retry, correcting retry ordering, adding regex/glob guardrails, and cleaning up orphaned approval execution state more reliably.
• Improved Docker and skills deployment behavior by auto-detecting host skills paths via the Docker socket, rewriting child-container skills mounts correctly, and reloading skills servers after skill upload or deletion.
• Improved server configuration and runtime consistency across anonymous access updates, stdio launch config transforms, detected server name syncing, stale server-context protection, stdioTemplate.cwd propagation, and MCP App resource reference alignment.
• Fixed app resource result rewriting during resource reads so proxied resource references remain consistent after namespacing.
• Tightened cache correctness by moving lookups earlier in handler flows, integrating singleflight tenant scoping, snapshotting namespace versions at lookup time, preserving purge reasons and promotion metrics, validating required scope identity before exact cache purge, and normalizing Uint8Array cache payload handling.
• Updated deployment and admin documentation for policies, approvals, CustomStdio endpoints, result-cache environment variables, REST API and Skills positioning, and other recent MCP runtime capabilities.

Operational Notes

• Docker images published from this workflow now support semver tags in addition to latest and dated tags.
• This release rolls up a broad set of previously unreleased platform changes. Operators should review policy, approval, cache, auth-provider, and CustomStdio-related configuration before upgrading.