v0.17.0

What's Changed

Features

• feat(http): observe and validate Mcp-Param headers by @jstar0 in #183
• feat(export): redact captured sessions on read by @shixi-li in #189

Bug Fixes

• fix(store): only demand routing headers where 2026-07-28 requires them by @kerlenton in #188
• fix(store): treat subscriptions/listen as streaming, not pending by @syf2211 in #181
• fix(cli): reject --label values that escape the state dir by @AnayGarodia in #187
• fix(store): stop x-mcp-header checks stalling the proxy and warning on legal schemas by @kerlenton in #191
• fix(store): stop redaction faking an Mcp-Name or protocol-version mismatch by @kerlenton in #192
• fix(store): parse ttlMs/cacheScope and flag cache misuse by @syf2211 in #190

Maintenance

• chore(release): retire the tap, mcpsnoop is in homebrew-core by @kerlenton in #184

Full Changelog: v0.16.0...v0.17.0