v4.33.1

4.33.1 (2026-10-06)

Bug Fixes

• cli: classify no-auth HTTP 403 as refusal or API error (#4922) (14aab33)
• cli: close generator gaps from 4.32.5 reprints (#4837) (d0075e6)
• cli: do not auto-send OpenAPI optional parameter defaults (#4884) (f0acc67)
• cli: exclude live search indexes from sync and read-only POSTs from import (#4920) (7f64f0c)
• cli: harden concurrent store writer test under load (#4901) (639a8b1)
• cli: honor per-operation security for split-token APIs (#4896) (63226c7)
• cli: keep authored example and happy_args ids (#4919) (d7d3132)
• cli: keep declared JSON types for anyOf nullable body scalars (#4881) (ae34afd)
• cli: make DeriveFlagCorrections idempotent across batch replay (#4880) (9acddff)
• cli: omit non-canonical live transcripts and credential-bearing sniff samples (#4918) (4c72a0d)
• cli: put dry_run at top level on promoted mutation JSON (#4883) (234c04e)
• cli: sanitize cobratree alternation MCP property names (#4924) (4d76b23)
• cli: send explicit false/0 on non-paginated GET and reject boolean stray positionals (#4882) (46e012d)
• skills: enforce min-binary-version before the version-check TTL (#4894) (10cf698)