v1.0.7

Added

• Add mcp: support in bundle.yaml; declare MCP servers inside a bundle using the same format as config.yaml; tagless entries are active whenever the bundle is selected, tagged entries are further filtered by active scope tags (#329)
• llmenv init now generates a README.md orientation file in the config directory on first run; the write is skipped if a README.md already exists (#325)

Fixed

• Fix bundle mcp: entries accepting names with characters outside [a-zA-Z0-9_-]; invalid names are now rejected with a clear error (#329)
• Fix missing collision detection between config.mcp and bundle mcp: entries; a name declared in both sources now errors at startup instead of silently producing duplicate servers (#329)
• Fix mcp-ls omitting bundle-declared MCP servers; bundle MCPs are now listed with a (bundle) annotation and correct active/orphan status (#329)
• Fix bundle mcp: entries accepting the reserved name icm; the guard now matches the one already present for top-level config.mcp (#329)
• Fix llmenv init emitting a config.yaml template with a nested transport: block for MCP servers; the correct flat schema (type/command/args at the top level) is now emitted (#325)
• Fix llmenv init silently replacing non-UTF-8 path bytes with ?; non-UTF-8 paths now fail with a clear error (#325)

Binary Checksums

7a67b9289ef58870caa4583f49bf5efada849256f4095eb1f9dedecc9b66a7a3  llmenv-linux-x86_64
740fafa74f8fb7901dadc5f1e5049666cbf0c8e00731e3d6b926b336585d7518  llmenv-macos-aarch64
85c84241fc79a87488458f2ab4a3e3a792441b2360787c9af63827170124ac03  llmenv-macos-x86_64

Verify integrity:

sha256sum -c checksums.txt

Supply Chain Security

SLSA v1.0 provenance attestations included. Verify:

slsa-verifier verify-artifact --artifact-path=<binary> --provenance=<provenance.intoto.jsonl> --source-uri=github.com/phaedrus1992/llmenv