v2.32.0

2.32.0 (2026-10-17)

Bug Fixes

• auth: session taint gates MCP tools in the hook path (fw#344) (f598360)
• exposure: P1.1 hardening, no background re-check answers a session review (fw#318) (de0989a)
• exposure: review findings before release (fw#318) (8d3a302), closes Hi#effort
• exposure: second review findings (fw#318) (1e712bb)
• exposure: third review findings (fw#318) (8afc1e0)
• exposure: trim git url slashes without a backtracking regex (CodeQL js/polynomial-redos) (d2907d3)

Features

• exposure: act on what the session read, not on whether the text looked hostile (fw#318 phase 1) (ba25c64)
• exposure: annotations add caution, and "allow + trust this address" (fw#318 P2, P5) (b56277a)
• exposure: shell commands as sources and sinks of the exposure gate (fw#318 P3) (e5a53b8)
• exposure: writes after reading outside content (fw#318 P4) (11f4957)