v1.0.36

[v1.0.36]

• Return standard MCP CallToolResult envelopes for tools/call, including
  text content and structured payloads, so strict clients such as Codex can
  execute HASP tools without Unexpected response type failures.
• Extend MCP tests and the release gate to require the tool-call envelope before
  a release can ship.

v1.0.35

[v1.0.35]

• Add the Agent Cookie comparison page to the public competition matrix.
• Classify cookies, browser storage, and browser session state as high-risk
  manifest material.
• Allow value-free browser_session requirement declarations while rejecting
  manifest target delivery until HASP has an explicit high-risk capability path.
• Reject raw cookie, localStorage, IndexedDB, and browser-session value fields
  in repo manifests.

v1.0.34

[v1.0.34]

• Prevent managed Claude Code and Codex CLI MCP wrappers from being pinned to
  stale HASP_AGENT_HASP binaries, and make the release gate fail when
  generated MCP configs or wrapper ordering could shadow the managed binary.
• Make hasp_run release-gate coverage execute through a managed wrapper with
  a deliberately stale inherited HASP_SESSION_TOKEN, proving MCP session
  recovery before a tag ships.
• Teach hasp doctor and the MCP release gate to detect already-running stale
  agent MCP bridge processes, report exact PIDs, and tell operators to restart
  the affected agent session instead of retrying a dead MCP connection.

v1.0.33

[v1.0.33]

• Recover MCP tool calls from stale inherited HASP_SESSION_TOKEN values,
  including sessions that no longer exist or point at a different project.
• Keep explicit MCP session_token values fail-closed while returning a clear
  diagnostic that tells agents to omit stale explicit tokens and let HASP open a
  fresh local MCP session.
• Restore release-blocking 100% Go statement coverage after the MCP hardening
  work and refresh the public export mirror.
• Raise Go modules to 1.26.4 to clear current Go stdlib OSV advisories before
  release.

v1.0.32

[v1.0.32]

• Ship credential sets in value-free manifests, including schema validation for
  google_oauth_client, set-role target delivery through from_set and
  role, project command output, MCP target metadata, brokered execution, and
  regression coverage.

v1.0.31

[v1.0.31]

• Document the scoped credential-set model for coupled credentials such as
  Google OAuth client IDs and client secrets, including the interim value-free
  manifest pattern to use before credential sets ship.
• Restore and verify the source 100% coverage gate after the manifest-target
  hardening work by adding focused coverage and removing unreachable branches.

v1.0.30

[v1.0.30]

• Add value-free repo manifest target authoring and review commands through
  hasp project target ... and the hasp template ... alias, so agents can
  request brokered workflows without storing raw secret values in the repo.
• Require local target review before hasp run --target,
  hasp inject --target, hasp write-env --target, MCP target execution, or
  hasp app connect --target can authorize refs or seed runtime profiles.
• Improve project binding diagnostics so hasp doctor, manifest-backed
  secret flows, and hasp secret add --expose distinguish unbound repos from
  bindings that point at missing vault items.

v1.0.29

[v1.0.29]

• Add hasp audit recover so operators can archive a degraded audit log,
  emit a recovery report, and start a fresh tamper-evident chain without
  rewriting historical entries.
• Document the degraded audit-log recovery workflow in the quickstart and
  generated CLI reference.

v1.0.28

[v1.0.28]

• Distinguish missing named references from existing vault items that are not
  exposed to the current project, with specific CLI and MCP recovery metadata.
• Keep default MCP secret tooling safe-by-default while documenting the explicit
  operator path for exposing existing vault items to a repo.
• Add release-blocking web dependency audit coverage and patch the vulnerable
  ws transitives in the private docs toolchain.
• Rotate download Worker release pins through secrets by default, avoiding
  route-aware Worker deploys unless explicitly requested.

v1.0.27

[v1.0.27]

• Accept trailing known flags across the remaining hasp secret subcommands,
  including hasp secret add NAME --from-stdin --expose=never --json.
• Track the next surgical release-hardening work for vulnerable web-toolchain
  transitives, package-manager audit gates, and Node deprecation warnings.