chore(release): prepare v0.1.1

[mohanagy]

Summary

• Prepare @lubab/miftah v0.1.1 and keep MCP handshake identities aligned with the package version.
• Finalize the dated changelog entry for hotfixes [Security] Reject unknown profile policy references and fail closed #1 through [MCP] Stop silently selecting the first upstream for resources and prompts #5.
• Add a release-artifact contract covering version alignment, every hotfix category, and the experimental package status.

Validation

• npm run lint
• npm run typecheck
• npm test
• npm run build
• node dist/cli/main.js schema
• npm run check:pack

Release gate

This PR prepares the release but does not publish or deprecate a package. Before the reviewed development -> main release PR is merged, configure npm trusted publishing for mohanagy/miftah, .github/workflows/publish.yml, and the npm environment. After the tagged GitHub release publishes from CI with provenance, deprecate npm 0.1.0 in favor of >=0.1.1.

Relates to #6.

Summary by CodeRabbit

• New Features

  • Added updated release metadata and repository publishing guidance.
  • Added/updated CI and template configurations for verified publishing.

• Bug Fixes

  • Improved fail-closed behavior for policy lookup and stricter config rejection.
  • Enforced secret and audit redaction behavior more consistently.
  • Corrected GitHub Docker preset credential injection and improved tag pinning.
  • Improved fail-closed handling for zero/multi-upstream bundle scenarios.

• Chores

  • Bumped application and server version to 0.1.1.
  • Added release artifact/version validation tests.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 5a839ae6-2f97-42fb-8055-5648d1e1a981

📥 Commits

Reviewing files that changed from the base of the PR and between c20e331 and 2af3b4a.

📒 Files selected for processing (1)

• tests/release-version.test.ts

---

📝 Walkthrough

Walkthrough

The release updates package and MCP version metadata to 0.1.1, documents the release additions and fixes, and adds tests validating version consistency and required release documentation.

Changes

Release alignment

Layer / File(s)	Summary
Release metadata and documentation package.json, src/mcp/server/miftah-server.ts, src/upstream/upstream-process-manager.ts, CHANGELOG.md	Package and MCP handshake versions are updated to 0.1.1, and the changelog records the release additions and fixes.
Release artifact validation tests/release-version.test.ts	Tests validate version consistency, dated changelog parsing, required fix references and content, and the README release-status marker.

Estimated code review effort: 2 (Simple) | ~10 minutes

Poem

I’m a rabbit with a release tag bright,
Hopping through versions overnight.
0.1.1 now sings,
Changelog sprinkles fix-shaped things,
And tests keep every carrot right.

---

Caution

Pre-merge checks failed

Please resolve all errors before merging. Addressing warnings is optional.

• Ignore

❌ Failed checks (2 errors)

Check name	Status	Explanation	Resolution
Linked Issues check	❌ Error	The PR does not implement the policy-validation or fail-closed runtime changes required by issue #1; it only updates release/version artifacts.	Add config validation and PolicyEngine fail-closed handling for unknown named policies, plus the required direct and MCP integration tests.
Out of Scope Changes check	❌ Error	Most changes are release-prep artifacts and tests, which are unrelated to the linked security fix scope.	Split release preparation into a separate PR or include the issue #1 policy-validation fixes so the diff matches the linked objective.

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title is concise and clearly matches the release-prep version bump in the changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release/issue-6-v0.1.1

---

_{Comment @coderabbitai help to get the list of available commands.}

[mohanagy]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@CHANGELOG.md`:
- Line 12: Complete the npm release gate by verifying the trusted-publishing and
OIDC workflow configuration, confirming the tagged v0.1.1 release publishes with
provenance, and deprecating npm version 0.1.0 with a message directing users to
>=0.1.1 after publication.

In `@tests/release-version.test.ts`:
- Around line 10-19: Update releaseNotes to match the complete release heading
at the start of a line, requiring the version followed by a YYYY-MM-DD date
instead of only the “## [version] - ” prefix. Use the validated heading when
locating the entry, while preserving the existing error and section extraction
behavior.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 5e3e5455-38ac-4284-99f6-19f8fb8e0c37

📥 Commits

Reviewing files that changed from the base of the PR and between de49bff and c20e331.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (5)

• CHANGELOG.md
• package.json
• src/mcp/server/miftah-server.ts
• src/upstream/upstream-process-manager.ts
• tests/release-version.test.ts

[mohanagy]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.