v0.2.81

[0.2.81] — 2026-10-12

Security

• Private exports and released updater resources. Planning-kit exports
  validate destinations and Git protection before writing private context.
  Private files use atomic writes and owner-only POSIX modes. Upgrades install
  commands and companions from the published wheel, with isolated Python
  execution. The shell wrapper uses a released CLI by default; reviewed
  checkout mode remains available through --local, and --ref is retired.
• Provider errors and SDK diagnostics keep credentials and request content out
  of CLI/MCP error output. Hosted requests make one attempt with finite
  timeouts. MCP tools bound input, context and output sizes, including errors
  from malformed protocol messages. Builds use an explicit file inventory
  and reject symlinked inputs.

Added

• Authenticated usage-pool sync from the Mac into the saved web profile.
  Only normalized observations are uploaded using a rotating per-user session
  in Keychain. Settings saves preserve pool states, and both recommendation
  lanes apply them to scoring and funding annotations. Stale or missing
  observations preserve saved states; known subscription resets clear them.