v0.0.37

Install

brew install stacklok/tap/mecatl

Installs both mecated (the server) and mecatui (the terminal UI).

Changelog

Features

• d34f04e: feat(mcp): add direct MCP OAuth dynamic client registration (#1413) (@jhrozek)
• b80747b: feat(mecatui): expand local file mentions (#1528) (@JAORMX)
• 5828a72: feat(sdk): expose session lifecycle surface (#1542) (@samuv)
• fb05301: feat: distinguish synthetic prompts in session replay (#1504) (@eleftherias)

Fixes

• 218656b: fix(deps): re-tidy go.mod for GOWORK=off resolution (#1544) (@jhrozek)
• 6dc37df: fix(mecak8s): enforce lifecycle timing bounds (#1536) (@ChrisJBurns)
• 19221b8: fix(mecak8s): make HA disruption defaults scale-safe (#1561) (@ChrisJBurns)
• 1f44e78: fix(mecatui): disable workspace enrollment for debug sessions (#1556) (@jhrozek)
• 34d905f: fix(mecatui): recover failed effort handoffs (#1537) (@jhrozek)
• 92343ce: fix(mecatui): wire remote server info (#1554) (@jhrozek)
• 60567a0: fix: bound unified Agents overlay to viewport (#1488) (@jbeda)
• 147aa0d: fix: isolate test fixtures and avoid catalog hydration while sorting (#1552) (@JAORMX)
• 28d58ff: fix: keep debug privacy disclosure visible (#1553) (@jhrozek)
• 28eb283: fix: prevent premature compaction on cold gateway resume (#1546) (@JAORMX)

Other changes

• 8f58d4f: Release v0.0.37 (#1569) (@toolhive-release-app[bot])
• 6f1a09b: perf: avoid unnecessary credential scans and trim restart fixtures (#1570) (@JAORMX)

Verify

cosign verify-blob \
  --certificate-identity 'https://github.com/stacklok/mecatl/.github/workflows/release.yml@refs/tags/v0.0.37' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  --bundle checksums.txt.sigstore.json checksums.txt
sha256sum --check --ignore-missing checksums.txt
gh attestation verify mecatl_0.0.37_darwin_arm64.tar.gz --repo stacklok/mecatl