v4.30.0

4.30.0 (2026-08-01)

Features

• platform: enforce fleet output semantics (#3687) (0e72412)
• platform: generate multitenancy runtime core (#3682) (ae1f46b)

Bug Fixes

• cli: anchor scorer target paths and research discovery (#3872) (4256474)
• cli: annotate generated MCP safety metadata (#3885) (45633b0)
• cli: bound decompressed size in crowd-sniff tarball extraction (#3787) (20dabea)
• cli: classify vendor 401s as credential skips in live dogfood (#3831) (01782e5)
• cli: complete novel data-source declarations (#3719) (a9b35ee)
• cli: correct inaccurate generated help text (#3811) (727f8bf)
• cli: correct live dogfood evidence and fixture verdicts (#3878) (2c9328c)
• cli: disambiguate colliding dependent resources (#3770) (4efaabb)
• cli: emit JSON dry-run envelope from learn-loop commands (#3832) (84f5a52)
• cli: emit runnable command examples (#3722) (dbe6a62)
• cli: emit sync since-filter in UTC (Z), not a local offset (#3672) (fae90f6)
• cli: generate complete Basic credential tests (#3724) (9a539cb)
• cli: hide credential suffixes in generated redaction (#3875) (c1b6bdb)
• cli: honor non-JSON request and response media types (#3754) (ac2ed6d)
• cli: isolate explicit config credentials (#3771) (e3bcfb2)
• cli: isolate generated tests from real home paths (#3874) (b0ed85d)
• cli: JSON-string body params send the decoded value, not the raw flag string (#3812) (c4d2fc0)
• cli: make generated synonym registration race-safe (#3752) (4dfbcab)
• cli: narrow Cloudflare HTML challenge detection (#3717) (1b0611a)
• cli: normalize response envelopes before pagination (#3862) (aaa2cca)
• cli: preserve CLI and MCP command reachability (#3731) (1669d17)
• cli: preserve declared request parameters (#3867) (ea20450)
• cli: preserve deep hierarchy sync identity (#3729) (973d760)
• cli: preserve dry-run read provenance and cache boundaries (#3769) (775feb8)
• cli: preserve empty-result output formats (#3863) (8909c21)
• cli: preserve generated workflow boundaries (#3877) (5d542c4)
• cli: preserve lock promote artifacts (#3887) (b09c786)
• cli: preserve novel command reachability (#3886) (cf5b57a)
• cli: preserve pagination response declarations (#3890) (0371213)
• cli: prevent derived command surface collisions (#3757) (ecddccf)
• cli: prevent docs-scraper endpoint-name collisions from dropping routes (#3789) (6192b39)
• cli: recognize MongoDB _id as a stable store identifier (#3895) (473ecd5)
• cli: reject HTTPS-to-HTTP redirects when fetching crowd-sniff tarballs (#3788) (f324f79)
• cli: reject unusable auth declarations (#3728) (471a3c3)
• cli: sandbox generated tests and verify the sandbox holds (#3692) (6ac616f), closes #3690
• cli: sanitize MCP property keys and emit deepObject query params (#3825) (4790085)
• cli: scaffold Google service-account JWT bearer auth (#3865) (ff27ab1)
• cli: stop doctor from reporting an unverifiable credential probe as ok (#3716) (be3a0df)
• cli: tolerate npm download response shapes (#3883) (deb13ad)
• cli: validate generated unit tests (#3748) (9cb9fe6)
• generator: owner-only DACL on emitted testenv sandbox for Windows (#3855) (67eb007)
• generator: propagate export flush and sync SaveSyncState errors (#3857) (a749125)
• generator: reject malformed cookie imports (#3707) (7cd1cf6)
• generator: stat real default DB path in teach isolation test (#3856) (0be6b79), closes #3853
• output-review: skip when no samples pass (#3805) (de9464e)
• skills: remove positional params from preflight blocks (#3871) (1224726)