v0.42.0

0.42.0 (2026-07-21)

Features

• cli: add <stack> gen <VAR> generate-if-absent primitive (#465) (eb9ab62)
• close out layered-env epic (#179) — shared common.env + transparent secrets filter (#438) (965fac4)
• deploy: multi-arch/ARM image builds via buildx (rebuild --platform) (#464) (a2c4462)
• destroy: add pre_destroy/post_destroy teardown lifecycle hooks (#453) (20269b2)
• hooks: add hook helper stdlib (install_unit/timer/udev/default/bin, require_pkg) (#454) (7a00197)
• hooks: controller-side pre_deploy_local / post_deploy_local hooks (#450) (9b707ee)
• hooks: first-run --force/--status + marker contract docs (#451) (b19e5b3)
• provision: add host-scoped provision.d/ lifecycle (#455) (6b66154)
• releases: add deploy history / audit trail command (#463) (50dbe6f)
• secrets: allow *.enc.env under stacks/ for committed at-rest secrets (#460) (95a1a3d)
• timers: declarative stack-level systemd timers (#452) (2970f75)

Bug Fixes

• cli: make remote:init --host <h> reachable (#458) (afc6d1e)
• config/topology INI-parser divergence + scaffold safety guards (#466) (07700a8)
• connection: stop VPS_DEPLOY_DIR/VPS_SSH_KEY leaking across hosts in resolve_connection_from_host_alias (#457) (181b70a)
• deploy: close the deploy/blue-green/lock/stop lifecycle-safety cluster (#437) (d8f454d)
• drift/diff/doctor JSON correctness + output robustness roundup (#443) (b541f7f)
• mcp: support Content-Length framed stdio transport (#442) (8a5d953)
• provision: use build_scp_opts instead of tty ssh_opts for scp (#461) (31926b1)
• provision: write provision.d completion marker with sudo (#456) (9271484)
• rollback: stop saving/selecting/restoring empty (0-service) snapshots (#462) (437d784)
• standalone infra bugs — webhook (dash), monitor (compose v1), domain/ssl (branch + label parsing) (#441) (0b26360)
• webhook: make _all_stacks return 0 regardless of trailing non-dir entries (#440) (25f58f9)