v0.1.82

What's Changed

• docs(391): fresh-eyes audit round 2 — 15 consolidated fixes by @hachej in #673
• fix(full-app): sync plugin descriptors to 0.1.81 by @hachej in #674
• #391 D1-003b1: add file-backed core config secrets by @hachej in #672
• feat(full-app): persist D1 binding env projections by @hachej in #675
• feat(full-app): harden D1 revision permissions by @hachej in #676
• #391 feat(full-app): materialize D1 binding secrets by @hachej in #677
• #391 feat(full-app): add D1 file runtime input provider by @hachej in #678
• #391 feat(full-app): wire D1 runtime inputs and host mount by @hachej in #679
• #391 test(full-app): prove D1 Docker UID and mount boundary by @hachej in #680
• docs(391): sync D1-003 completion and host-surface order by @hachej in #681
• docs(391): tighten D1 edge policy contract by @hachej in #682
• docs(391): fresh-eyes audit round 3 — final fixes + ledger by @hachej in #683
• feat(391): bound D1 edge trust before Compose effects by @hachej in #684
• feat(391): read mounted active D1 collection by @hachej in #685
• docs(391): split D1 ingress proof from host scope by @hachej in #686
• docs(391): bind D1 ingress stripping proof by @hachej in #687
• feat(391): prove canonical D1 ingress headers by @hachej in #690
• docs(391): advance D1 dispatch to host scope by @hachej in #691
• feat(391): derive trusted D1 host scope by @hachej in #692
• docs(391): split D1 landing from activation by @hachej in #693
• feat(391): render bounded D1 landing by @hachej in #694
• feat(391): activate D1 host collection by @hachej in #695
• #391 D1: advance authority work order by @hachej in #697
• #391 D1-004b1: fence workspace and signup authority by @hachej in #698
• #391 D1: make owner authority transaction-atomic by @hachej in #699
• #391 D1-004b2a: make managed member mutations atomic by @hachej in #700
• #391 D1-004b2b: guard managed owner account deletion atomically by @hachej in #701
• #391: split D1 selector and boot contracts by @hachej in #702
• #391 docs: correct D1 MCP limiter ordering by @hachej in #703
• #391 feat(core): fence public invite scope by @hachej in #704
• fix(agent): confine read-only skill-file reads to caller workspace (cross-workspace read) by @hachej in #688
• refactor(391): canonical resolvedDigest + unified digest/schema-issue plumbing by @hachej in #671
• #391 docs: bind D1 MCP read rate limit by @hachej in #706
• #391 feat(core): converge D1 browser workspace selectors by @hachej in #705
• feat(governance): user model-usage meters (consumed/remaining per model) by @hachej in #707

Full Changelog: v0.1.81...v0.1.82