v0.1.4

• The README, which is also the npm page, now leads with gated steps and portability, and covers mechanical steps, approvals and the newer CLI options (--watch, --test, --record-cases, --auth, --verify).
• CI scans the whole history for secrets on every push and pull request.

v0.1.3

• A declined approval now reads "the approval was declined" instead of claiming a person declined it. Some clients decline every approval without showing the form, and Stepgate cannot tell the difference.
• docs/connect.md has an Approvals section naming which clients show the form: Claude Code in a terminal does; the VS Code extension, the desktop app, claude -p and the Agent SDK decline without asking.

v0.1.2

The first release from the public repository, so npm adds provenance to this version.

• The MCP Registry publish now waits until npm serves the new version.
• An npm badge in the README, and release notes in CONTRIBUTING that match what the workflow does.
• The --watch tests allow for late file events.

The code is otherwise the same as v0.1.1.

v0.1.1

A release with no code changes, to check that publishing now runs entirely in GitHub Actions: npm through trusted publishing, GitHub Packages, and the MCP Registry.

Same code as v0.1.0.

v0.1.0

First release of Stepgate, the MCP server that runs stepfiles: it shows the client's agent one step at a time, makes every API call itself, and moves on only when the step's gates pass.

Run a catalog stepfile with npx -y stepgate <name>, or list the catalog with npx -y stepgate --list.

In this release

• Stepfile format "1" (draft):
  • agent steps and mechanical steps (do, each, accept);
  • derived fields;
  • let;
  • JSONLogic gates with Stepgate's operators (results, object, join, subset and others), which explain their own failures;
  • approve gates, answered by a person through MCP elicitation;
  • effect: read for read-only POSTs.
• A catalog of 18 stepfiles. Every write happens only after a person approves it, and every entry ships a cases file.
• --test replays cases offline, --record-cases records them from a real run, --watch reloads edited files, and --auth authorizes an oauth2 credential with an MCP server's authorization server.
• Authoring tools for an agent: stepgate_guide, stepgate_examples, stepgate_outline, stepgate_inspect_api, stepgate_validate and stepgate_try.
• A hash-chained ledger per run, checked with stepgate --verify.