v0.42.0

0.42.0 - 2026-08-14

Added

• Added a checksummed, validated archive fallback for SSH-backed cp from POSIX operator hosts to native Linux or macOS leases (not WSL2) when local rsync is missing or older than 3.4.3, including stock macOS OpenRsync. Thanks @coygeek.

Fixed

• Coordinator lease metadata can no longer switch an explicit or configured provider selection or authorize a different local adapter.
• Provider-native checkpoint identifiers no longer reroute through coincidentally matching Static or External lease identities.
• Required explicit provider intent before lifecycle commands initialize a backend, while preserving claim and recorded-run routing and keeping bare doctor provider-neutral. Thanks @coygeek.
• Prevented Azure orphan-sweep release failures from writing secret-bearing diagnostics to Worker console logs while retaining redacted details in sweep records.
• Rejected native Jujutsu workspaces before Git-manifest sync can fall through to an outer checkout, while preserving colocated Git workspaces and --no-sync. Thanks @atimmer.
• Redacted compound environment assignments, cookie and security-token headers, and camel-case API-token fields from client-visible coordinator diagnostics while preserving surrounding operational context. Thanks @dwin-gharibi.