v0.5.0

Changelog

• b0c7710 ci(release): detect an untracked file too, and drop a stray blank line
• 20167be ci(release): fail the release when the version stamp is wrong
• 54283d3 docs(changelog): cut the 0.5.0 section
• ff9c4f7 feat: warn when a command's tenant comes from C1I_URL or ~/.c1i.yaml
• e511add fix(client): NewForTesting was missing WithNonRetryable(isTokenError)
• f471e6d fix(cmd): thread --debug/--max-retries into auth login/token and the gateway
• b13307e fix(login): route the device flow through internal/transport
• f8ea225 fix(mcp): rename the shadowing --url to --server-url so the global --url selects the tenant
• a5a68ce fix(mcpgateway): report the real build version in the MCP handshake, not "dev"
• b966690 fix(mcpgateway): route JSON-RPC calls through internal/transport
• c17ff3a fix(test): catch a shadow declared as a subcommand's own persistent flag
• ea48119 fix(test): stop TestGatewayErrorExitCodes paying real 429 backoff
• 21e7af2 fix(tokensource): mint through internal/transport
• c398d08 fix: add nilIfEmpty helper for row-fidelity fixes
• 51f0329 fix: apps list emits user_count as a number and deleted_at as null
• 74cc676 fix: automation executions list emits completed_at as null when pending
• ae431a5 fix: automations list emits last_executed_at as null when never run
• ae1587b fix: classify every non-auth/not-found/rate-limited 4xx as usage (exit 2)
• c2a5055 fix: close four gaps in the vulnerability gate
• c4cb921 fix: completion with an unknown shell exits 2, not 0
• b1834e1 fix: connectors list surfaces deletedAt
• e866da8 fix: correct the 408/499 carve-out to the table that serves /api/v1/*
• 1cb1a1b fix: drive --limit off rows written, not rows scanned
• d98289d fix: entitlements list emits grant_count as a number and deleted_at as null
• dbe8762 fix: exempt 408 from the usage-error 4xx range
• 4c99c0a fix: functions list emits published_commit_id and deleted_at as null
• a4957d4 fix: functions usage no longer collapses page-size under --limit
• 847d465 fix: give functions usage a --page-token to disable auto-pagination
• 0086c42 fix: grants list emits deprovision_at as null and surfaces nested deletedAt
• c51182a fix: harden --out-dir permissions on a pre-existing directory too
• a9159f3 fix: harden --out-dir to 0700 and strip setuid/setgid/sticky
• 6bfc363 fix: mcp connections list emits authorized_as_name as null
• 83a9d15 fix: mcp connections list emits connected_at/authorized_as_email as null
• bb48bff fix: mcp servers search omits tool_count instead of a misleading 0
• aec1049 fix: mcp tools list surfaces deletedAt
• 5cc0cdd fix: mcp toolsets list surfaces deletedAt
• 92f4337 fix: missing --url with no source at all now exits 2, not 1
• ea385d0 fix: narrow the tenant-source warning to ~/.c1i.yaml only
• e836e36 fix: patch 14 reachable stdlib vulnerabilities, and gate on them
• 07eb729 fix: skip empty --fields projections instead of printing {}
• d5536b4 fix: stop citing platform routing tables for the 408/499 comment
• 50ba59c fix: stop doubling the v prefix in the docs-agents header
• 11c17c8 fix: stop shrinking page size toward --limit during a sparse --fields scan
• 0a4a6fc fix: validate mcp bindings by-tools flags before building a client
• 6e9788f fix: wrap api.go's three invalid-JSON-body errors in usageError
• 256eb5a fix: wrap remaining bad-flags/args guards in usageError (exit 2)
• 4dba427 refactor(client): rebuild the REST client on internal/transport
• 1c0515d refactor(transport): extract retry/backoff/timeout/UA/debug/guards below client
• 4ee0ec2 refactor: extend the client-construction seam to auto-paginating list commands
• a52726b security: fix two triage errors from independent review
• 116ca8f security: triage gosec findings
• aa8f47e test(mcpgateway): pin all three branches of the unreadable-body classification
• 8765b99 test(mcpgateway): pin unreadable-2xx-body classifies as TransportError
• 0b417a6 test(transport): pin the timeout wiring; document why Version stays a var