Release 1.0.0rc1

[simonether]

Summary

• replace the 0.2.x endpoint wrapper with the production-grade account-bound MCP gateway
• add credentialless steady-state authentication and a separate secure TTY bootstrap
• add typed MCP envelopes, complete discovery, pinned upstream contracts, shared coordination, and safe prepare/commit/reconcile writes
• publish the feature-complete package as 1.0.0rc1 for opt-in PyPI validation
• fail closed when the GitHub prerelease flag disagrees with the source version and skip MCP Registry publication until stable 1.0.0

Security and compatibility

Credentials are excluded from normal MCP host configuration. Token storage, account binding, interprocess rate limiting, one-writer coordination, cancellation handling, redaction, idempotency, and ambiguous-write reconciliation are covered by adversarial tests. kwork==0.2.0, FastMCP 3.4.5, and MCP SDK 1.28.1 are pinned.

Validation

• Python 3.12.13: 431 passed, branch coverage 92.12%
• Python 3.13.13: 431 passed, branch coverage 92.12%
• Python 3.14.4: 431 passed, branch coverage 92.10%
• Ruff, format, strict mypy, actionlint, shellcheck, lock/diff checks: passed
• pip-audit: no known vulnerabilities
• history/worktree/artifact secret scans: no leaks
• pinned MCP Registry schema, wheel/sdist metadata, Twine, wheel contents, and isolated entrypoint smoke: passed
• independent exact-tree security/concurrency/API/MCP review: clean sign-off

No live Kwork authentication or write operation was performed.