Developer changelog

Unreleased — first customer beta (source 0.2.0)

• Contact expected_updated_at and follow_up_date require seconds, uppercase T/Z, and colon-separated offsets: 2026-08-02T10:20:30Z or 2026-08-02T10:20:30+02:00. Fractional seconds remain valid; minute-only input is rejected.
• Preserve expected_updated_at from update-confirmation unchanged. Omit follow_up_date to leave it unchanged or use null to clear it. Validation failures return HTTP 400 with an error message.
• API and web deployments can precede CLI publication. Source CLI 0.2.0 remains unreleased; 0.2.0 setup examples require separate package publication and controlled customer rollout.
• Introduces @coldvio/cli with browser PKCE login, safe credential replacement, local storage, and revocation.
• Adds a local stdio MCP server with 17 customer-safe tools.
• Adds a dedicated, tenant-scoped /v1/agent API with read, write, generate, and approve scopes.
• Adds server-enforced, single-use operation intents for consequential tools and excludes direct send, publish, and generic execute operations.
• Adds Coldvio product guides, OpenAPI, MCP tool JSON, llms.txt, llms-full.txt, Markdown mirrors, use cases, articles, and security documentation.

Compatibility policy

Patch releases may improve descriptions and fix bugs without changing tool inputs. New optional fields and new tools may arrive in minor releases. Before 1.0, a minor release may change a command, schema, or authentication contract and must include a migration note here. From 1.0 onward, breaking changes require a major release and a migration note.