Release v0.70.0

Highlights: profiles v3, per-client credentials and a reworked navigation,
with upgrade-safe quarantine and agents that know where their tools are.

- Profiles v3 (Spec 108): per-profile tool policy (max_tier, allow/deny
  rules, unannotated handling), client and token bindings, anonymous_profile,
  and an access explainer on Web UI, macOS app, CLI and the MCP `profiles`
  tool. Connect now writes a per-client `mcp_cli_` credential instead of the
  admin key.
- UX consistency (Spec 109): one needs-attention list, informed Review
  queue, Clients hub, catalog-first Add Server, grouped navigation and
  command palette, scope filters with deep links.
- Agents see what they can reach: initialize instructions and the
  retrieve_tools description name the caller's reachable servers and allowed
  operations, filtered by profile and agent-token scope
  (advertise_upstream_servers to opt out); `mcpproxy agent-instructions`
  prints a CLAUDE.md / AGENTS.md snippet. /mcp, /mcp/call and /mcp/code now
  send initialize instructions at all.
- Security: a server v0.69 held in quarantine stays held on upgrade (v0.69
  restarts could overwrite its recorded quarantine); implicit quarantine
  survives restarts and config writes; a stated quarantine value on add or
  import is persisted.
- Reliability: a stdio upstream whose process dies is detected and respawned
  instead of staying falsely healthy; a malformed import no longer bricks
  startup; /mcp/all keeps upstream additionalProperties/$defs.
- Client header forwarding (Spec 112), catalog popularity signal (Spec 110),
  versioned search index with automatic migration.

Upgrade note: vetted servers with no approved tools (zero-tool servers,
servers never connected since v0.21) are held for review once; approve them
or set "quarantined": false before upgrading. Downgrading to v0.69 with
require_mcp_auth off lets v0.69 accept rc-issued mcp_cli_ credentials as
unconfined.

QA: v0.70.0-rc.5 passed the release QA gate and an independent codex RC
test (42 pass, 0 fail; Gatekeeper verified separately).

v0.70.0-rc.5: dead stdio transport recovery (smart-mcp-proxy#1489), i…

…mport validation (smart-mcp-proxy#1490), /mcp/all schema fidelity (smart-mcp-proxy#1438), agent-instructions follow-ups (smart-mcp-proxy#1487)

v0.70.0-rc.4: RC-UPG-001 upgrade admission (smart-mcp-proxy#1485) wit…

…hout re-holding runtime adds (smart-mcp-proxy#1488); agent visibility of upstream servers (smart-mcp-proxy#1486)

v0.70.0-rc.3: fix RC-UPG-001 upgrade admission (smart-mcp-proxy#1485)…

…; agent visibility of upstream servers (smart-mcp-proxy#1486)

v0.70.0-rc.2: Profiles v3, navigation and review UX (Spec 109), secur…

…ity fixes; release-gate race timeout fix

v0.70.0-rc.1: Profiles v3 (scoped access, per-client credentials, pro…

…file-bound tokens), navigation and review UX (Spec 109), security fixes (quarantine restart bypass, doctor admin-key redaction)

Release v0.69.0

Highlights: security hardening from the architecture review. The admin
API key is no longer written to log files (SEC-01; rotate it if your logs
were shared), /metrics requires admin auth (SEC-07), REST/SSE CORS is
limited to loopback and trusted_hosts (SEC-04), constant-time key compare
(SEC-05), config.db is owner-only (SEC-03), and the tray self-update
verifies checksums and installs the tray binary. Plus Connect TOCTOU
fixes, ZCode as a Connect client, a hard shutdown deadline, and Activity
filter and scan-report fixes.

Release v0.68.0

Highlights: Spec 105 agent-scope-hardening epic complete (agent-token
and OAuth-user scope enforcement across retrieve_tools, direct-mode
publication, refusal shapes, and a differential regression suite),
Spec 107 server-edition SSO hardening (generic OIDC, IdP-group
allowlists, attributable audit log), configurable OAuth callback path.

v0.66.1: OAuth per-method upstreams, scope/detection gaps, log-sink f…

…d leak, Go 1.26