Kindex 0.48.1 — repository scope and per-agent Kinbase permissions

Kindex Lite binds MCP tools to one repository graph. Kinbase reads are available by default; --allow-kinbase-submit opts a particular agent into submissions, and --no-kinbase disables Kinbase entirely.

This patch makes MCP Registry confirmation tolerate bounded transient failures while still requiring the exact official latest release. Older-tag backfills use the verifier from the workflow commit. Public server metadata now lists all 70 tools and is checked against the server.

Usage:

pip install "kindex[mcp,kinbase]==0.48.1"
kindex-lite --repo /path/to/repo

Repository scoping controls this MCP endpoint; shell, hooks, other servers, and native Kinbase configuration require separate host controls. Factory lanes use a frozen raw Kinbase seed and defer submissions until the verdict.

Documentation: https://kindex.tools/mcp-lite.md