v3.0.0

🔒 Security release — GHSA-g679-3wq7-mh3m (Critical). This closes a wallet-drain (untrusted working-directory .env + an auth challenge signed without verification). The changelog entry below links the release-trigger commit; the actual code landed in the advisory merge 9f8b9f9. Full advisory: GHSA-g679-3wq7-mh3m

3.0.0 (2026-09-24)

⚠ BREAKING CHANGES

• auth: a .env in the working directory is no longer loaded — set BAGS_ENV_FILE to an absolute path, or put the variables in the MCP client config. bags_authenticate no longer accepts a privateKeyPath argument; use BAGS_KEYPAIR_PATH.

Bug Fixes

• auth: harden bags_authenticate and env loading against the r01 wallet drain (GHSA-g679-3wq7-mh3m) (1c84f89)

Documentation

• correct the gate mint and the claims an audit disproved (#18) (a01a3fa)