Release v0.0.39

[toolhive-release-app]

Release v0.0.39

Version Bump

patch release

Files Updated

• VERSION
• deploy/helm/mecak8s/Chart.yaml (path: version)
• deploy/helm/mecak8s/Chart.yaml (path: appVersion)
• deploy/helm/mecak8s/values.yaml (path: image.tag)

Next Steps

1. Review this PR
2. Merge to main
3. Release automation will handle the rest

Checklist

• Version bump is correct
• All CI checks pass

---

Shipping in v0.0.39

Commits on main since v0.0.38:

• docs(process): route approved cleanup directly (docs(process): route approved cleanup directly #1720)
• slack-bot: relabel "Allow always" button to "Allow for session" (slack-bot: relabel "Allow always" button to "Allow for session" #1724)
• plan(sdk): harden malformed-success decode errors (plan(sdk): harden malformed-success decode errors #1698)
• chore(deps): bump the npm-minor-patch group in /sdk/typescript with 3 updates (chore(deps): bump the npm-minor-patch group in /sdk/typescript with 3 updates #1715)
• feat(sdk): add MCP authorization lifecycle (feat(sdk): add MCP authorization lifecycle #1692)
• slack-bot: DM manual permission approvals instead of auto-approving (slack-bot: DM manual permission approvals instead of auto-approving #1707)
• chore(deps): bump github.com/anthropics/anthropic-sdk-go from 1.72.0 to 1.73.0 in /provider/anthropic in the go-minor-patch group (chore(deps): bump github.com/anthropics/anthropic-sdk-go from 1.72.0 to 1.73.0 in /provider/anthropic in the go-minor-patch group #1713)
• chore(catalog): refresh models.dev curated subset (chore(catalog): refresh models.dev curated subset #1721)
• plan: TypeScript SDK MCP authorization lifecycle (plan: TypeScript SDK MCP authorization lifecycle #1687)
• feat(mecated): streamline direct MCP OAuth onboarding (feat(mecated): streamline direct MCP OAuth onboarding #1689)
• chore(ci): bump the actions-minor-patch group across 1 directory with 5 updates (chore(ci): bump the actions-minor-patch group across 1 directory with 5 updates #1705)
• Update README with conda-forge installation method (Update README with conda-forge installation method #1703)
• fix(site): restore mobile navigation drawer (fix(site): restore mobile navigation drawer #1704)
• fix(sdk): decode daemon HTTP timestamp and duration objects (fix(sdk): decode daemon HTTP timestamp and duration objects #1686)
• feat(sdk): expose MCP workspace enrollment (feat(sdk): expose MCP workspace enrollment #1690)
• plan: expose SDK MCP connector enrollment (plan: expose SDK MCP connector enrollment #1688)
• feat(provider): ask for the prompt cache through the protocol, not the vendor (ADR 0346) (feat(provider): ask for the prompt cache through the protocol, not the vendor (ADR 0346) #1573)
• ci: gate job families on go/sdk/site path relevance (ci: gate job families on go/sdk/site path relevance #1644)
• plan: SDK HTTP well-known-type JSON compatibility (plan: SDK HTTP well-known-type JSON compatibility #1684)
• feat: complete provider setup UX on unified configuration (feat: complete provider setup UX on unified configuration #1441)
• docs: plan provider setup follow-up on unified providers (docs: plan provider setup follow-up on unified providers #1440)
• feat(sdk): add run-ID-addressed controls (feat(sdk): add run-ID-addressed controls #1642)
• plan: run-ID-addressed SDK controls (plan: run-ID-addressed SDK controls #1635)
• docs(mecatequi): clarify headless and token limits (docs(mecatequi): clarify headless and token limits #1682)
• perf(osfs): reduce stateless Grep scanning allocations (perf(osfs): reduce stateless Grep scanning allocations #1625)
• test(mecatui): use a short perf admin socket path (test(mecatui): use a short perf admin socket path #1681)
• mecak8s: make operator flag help concise and actionable (mecak8s: make operator flag help concise and actionable #1669)
• mecatequi: simplify CI help and exit guidance (mecatequi: simplify CI help and exit guidance #1668)
• mecated: simplify command and flag help (mecated: simplify command and flag help #1667)
• fix(mecatui): clarify trust and memory copy (fix(mecatui): clarify trust and memory copy #1656)
• plan: ask for the prompt cache through the protocol, not the vendor (ADR 0346) (plan: ask for the prompt cache through the protocol, not the vendor (ADR 0346) #1572)
• fix(providers): honor live custom model input modalities (fix(providers): honor live custom model input modalities #1659)
• fix(engine): record advertised tool schema bytes (fix(engine): record advertised tool schema bytes #1677)
• fix(mecatui): simplify in-TUI help (fix(mecatui): simplify in-TUI help #1664)
• fix(mecatui): clarify session handoffs (fix(mecatui): clarify session handoffs #1657)
• fix(mecatui): clarify TUI dialog copy (fix(mecatui): clarify TUI dialog copy #1655)
• fix(mecatui): simplify mode-specific CLI help (fix(mecatui): simplify mode-specific CLI help #1654)
• test(app): resolve env(1) absolutely so the scrub probe survives a pinned PATH (test(app): resolve env(1) absolutely so the scrub probe survives a pinned PATH #1633)
• fix(mcp): separate OAuth login and handshake deadlines (fix(mcp): separate OAuth login and handshake deadlines #1624)
• fix(app): give custom-provider context-window failures an actionable message (fix(app): give custom-provider context-window failures an actionable message #1646)
• fix(cliconfig): explain stale provider credential IDs (fix(cliconfig): explain stale provider credential IDs #1665)
• docs: clarify external harness runtime support (docs: clarify external harness runtime support #1671)
• fix(docs): update SDK callback authority trace (fix(docs): update SDK callback authority trace #1672)
• fix(perf): compact long-horizon trend history (fix(perf): compact long-horizon trend history #1640)
• fix(opencode): send required session header (fix(opencode): send required session header #1652)
• docs(website): replace homepage glyphs with Lucide icons (docs(website): replace homepage glyphs with Lucide icons #1645)
• fix(mecatui): give a clear error for an invalid custom provider name (fix(mecatui): give a clear error for an invalid custom provider name #1628)
• refactor(engine): drop the deprecated Subagent max_tokens argument (refactor(engine): drop the deprecated Subagent max_tokens argument #1634)
• docs(website): refine homepage redesign (docs(website): refine homepage redesign #1632)
• fix(mecatui): clarify provider onboarding (fix(mecatui): clarify provider onboarding #1636)
• fix(mcp): authorize client-registered MCP tools in session capability set (fix(mcp): authorize client-registered MCP tools in session capability set #1627)
• plan: direct MCP onboarding (Plan / Interface: direct MCP onboarding #1626)
• perf(productmetrics): export metrics every 30m instead of 60s (perf(productmetrics): export metrics every 30m instead of 60s #1610)
• fix(mecatui): handle model selection in worktrees better (fix(mecatui): handle model selection in worktrees better #1567)
• fix(mecatui): make the newline chord reachable and the hint honest on every terminal (fix(mecatui): make the newline chord reachable and the hint honest on every terminal #1550)
• plan: mecatui-owned configurable terminal titles (plan: mecatui-owned configurable terminal titles #1616)
• feat: configure command runners (feat: configure command runners #1605)
• perf: reuse overlay rendering work and stabilize test fixtures (perf: reuse overlay rendering work and stabilize test fixtures #1576)
• fix(acceptance): resolve stale ac-trace proofs (fix(acceptance): resolve stale ac-trace proofs #1600)
• build: simplify Helm unittest setup (build: simplify Helm unittest setup #1599)
• test(mecak8s): expand Helm unit coverage (test(mecak8s): expand Helm unit coverage #1578)
• ci: gate macOS runners on draft + path relevance (ci: gate macOS runners on draft + path relevance #1594)
• fix(acceptance): update ac-trace for proposed plans (fix(acceptance): update ac-trace for proposed plans #1591)
• plan: bounded mecatui scroll and cursor controls (plan: bounded mecatui scroll and cursor controls #1593)
• docs: plan operator command runners (docs: plan operator command runners #1587)
• ci(website): remove AWS site deployment (ci(website): remove AWS site deployment #1580)
• Release TypeScript SDK v0.2.0 (Release TypeScript SDK v0.2.0 #1586)
• feat(sdk): expose server discovery (feat(sdk): expose server discovery #1559)