v1.3.2

Maintenance release on the 1.x line (legacy-1 dist-tag — does not move npm latest, which stays on 2.x).

Fix

• Forbidden actions in multi-tool turns — verifyTrace/verify_trace now emit a forbidden_action violation when ANY tool in a multi-tool turn is forbidden. A turn that calls several tools is recorded as one action named with the tool list joined by ", " (e.g. "Bash, force_push"); previously the forbidden check required every tool in the turn to be forbidden, so pairing a forbidden tool with a benign one went unflagged. New any-component matchers back forbidden_actions in both SDKs (TS actionAnyComponentInList, Python action_matches_any_in_list). The bounded_actions rule (every tool must be bounded) and the public action_matches_list are unchanged. Backport of the fix on main (#161) to the 1.3.x maintenance line (#163).

Consumers

Resolves for anything pinned ^1.3.0 — notably the mnemom-platform observer. Published to npm under legacy-1 and to PyPI as 1.3.2.