v0.1.0-rc.2

Changelog

• f02ce33 docs: document the new limits and protected folders, record owner decisions
• a5ff973 docs: point the README install section at the v0.1.0-rc.1 release (#5)
• d355698 docs: replace the README ASCII diagram with an overview image (#6)
• 9b8f93b feat(server): configurable session cap, higher limits, log every 429
• f8e5e30 fix(vault): always protect Syncthing's .stversions and .stfolder
• 359e791 test(server): do not print the log buffer when the refusal log leaks a secret

Verify before installing: see docs/install.md, "Verifying a download". checksums.txt is signed
keylessly by this repository's release workflow (checksums.txt.sigstore.json), and the image
ghcr.io/josejimenez-m/cortex-mcp is signed by digest.

v0.1.0-rc.1

Changelog

• fff4244 build(image): build from the release binaries on distroless debian13
• 39c696b build(release): GoReleaser config and a snapshot release check in CI
• 7613ef1 build(release): pin BuildKit and the SBOM scanner by digest
• be40e06 build(release): ship third-party licence notices
• 2d8860e build: distroless runtime Dockerfile
• cae52e4 build: pin the Go toolchain to 1.26.8 (#2)
• 2eadc31 chore: CI gofmt and go mod tidy checks, #nosec reasons in tests
• 50b23b1 ci(release): publish signed releases from v* tags
• 381506b ci: pin actions by commit SHA, add Dependabot
• 0db5278 ci: run release tests read-only; harden the CI jobs
• b83012f docs(spec): OAuth 2.1 design on zitadel/oidc and go-webauthn
• 398c67e docs(spec): record the provenance attestation buildx attaches on push
• c281eb1 docs(vault): move folding rule under package rules
• c109b1c docs: OAuth setup, client connection and deployment; record plan 2 decisions in the spec
• 657eafb docs: README matches CONTRIBUTING on outside contributions
• 10fcded docs: README, example config, spec synced with plan 1
• 0071390 docs: add internal/fsperm to the architecture map
• 11136b5 docs: add logo and social card, rewrite README for the public release (#4)
• fe07c24 docs: add the PolyForm Noncommercial licence, CLA, and security policy
• 68dfb4e docs: add v1 design spec and architecture diagram
• 6490b2b docs: agent guides (AGENTS.md) with routing table and invariants
• d2eb949 docs: client connection and security guides
• 7d18546 docs: install and configuration guides
• 9228c3f docs: licence decided (PolyForm Noncommercial 1.0.0)
• ae5d0d2 docs: note what a go-sdk bump must re-check
• d406e2c docs: plan 1 (core server) implementation plan
• 3e5a768 docs: plan 2 (OAuth 2.1) implementation plan
• c8b7003 docs: plan 3 (release, licence, docs) implementation plan
• 6fe707d docs: point the README at the guides; record plan 3 in the spec
• 891b98e docs: record the plan 2 final fixes; plan 2 done
• 3dacdb5 docs: release process, verification, and upgrade guide
• 091fc82 docs: run as the vault owner; revoke semantics; tmpfs; CLA status
• 1d60e14 docs: security model, loopback listen, disk floor, planned OAuth parts
• 91d1313 docs: session cap per token and session binding to the token row
• 231e92f docs: state the remaining OAuth limits with the round 2 numbers
• a9e9c96 feat(cli): serve, token create/list/revoke, version
• 5d7fe2b feat(cli): setup, unlock-totp, reset-auth and clients commands; serve mounts OAuth
• 0f36b3e feat(config): oauth block with redirect allowlist, allow bearer_tokens false with OAuth
• 6cd52b1 feat(config): strict YAML config with defaults and validation
• b2e2346 feat(config): trusted_proxies for per-source rate limits behind a proxy
• 949bb38 feat(logs): rotated write log that cannot be forged by paths
• 926e457 feat(oauth): ReplaceOwner and UnlockTOTP for setup -force and unlock-totp
• fed8730 feat(oauth): authorization server wiring with S256, resource, iss and browser binding
• 54de800 feat(oauth): client ID metadata documents with an SSRF-safe fetcher and cache
• 1bd7458 feat(oauth): client registry and RFC 7591 registration endpoint
• 75eda07 feat(oauth): grants with refresh rotation, reuse detection and revocation
• c5d2acb feat(oauth): login and consent page with TOTP or recovery code, CSRF, browser binding, per-source rate limits
• 2211885 feat(oauth): owner setup with TOTP, recovery codes, enrollment tokens, reset
• fba63db feat(oauth): passkey enrollment and passkey login with go-webauthn
• 5e10af3 feat(oauth): redirect allowlist matcher and client name sanitizer
• b627620 feat(oauth): zitadel storage for keys, clients, authorization requests and codes
• 71ce7d8 feat(server): MCP over HTTP with Bearer auth, rate limit, instructions
• c83b55f feat(server): accept OAuth access tokens on /mcp with the resource_metadata challenge
• 7da7732 feat(server): cap live MCP sessions per token at 16
• f9e2e67 feat(tokens): hashed Bearer token store on SQLite
• 5b0007b feat(tools): the 12 MCP tools over the vault
• 6129681 feat(vault): append to and replace Markdown sections
• 4132133 feat(vault): atomic writes, create_note and append
• 76ebc43 feat(vault): list, search, tags, recent, backlinks
• 15db610 feat(vault): merge frontmatter fields preserving order and comments
• dceddd6 feat(vault): move notes and delete into .trash
• 01dd55d feat(vault): path validation, per-note locks, CI
• 4b0cd09 feat(vault): read notes with version hash and frontmatter
• 2f0dee1 fix(authdb): race-safe migration, indexes, rollback test
• 24989c2 fix(authdb): take the write lock at BEGIN so the CLI can write while serve runs
• 923c71c fix(cli): bearer names are ids, setup -force drops pending approvals
• 319a73f fix(cli): clearer drain timeout, second signal exits
• e2755f6 fix(config): escape format characters in test table
• 2102f0d fix(config): full-path read errors, deny rules aligned with the vault
• bc2b368 fix(logs): never drop an entry on rotation errors, inclusive since
• 7397c4d fix(oauth): IPv6 sources per /48, app CIMD budget falls back to general
• 0aafd2e fix(oauth): atomic sign counter, clearer passkey errors, binding tests
• 4a2d69a fix(oauth): bound /authorize, CIMD and passkey abuse from few sources
• 6ca2300 fix(oauth): canonical parameters before the library decodes them
• 28006a9 fix(oauth): connected CIMD clients survive refetch failures, stricter IPv6
• e744501 fix(oauth): exact scheme, numeric hosts, stricter client names
• 9ccb32f fix(oauth): invalid_client for gone clients, CIMD redirect filtering, sweeps, log hygiene
• 368e422 fix(oauth): log reuse revocations, invalid_grant on guard failures
• 8958036 fix(oauth): real browser-binding test, allowlist first, single code per request
• d049dc6 fix(oauth): refetch budget only for granted CIMD clients
• ff07de8 fix(oauth): registration cannot be starved by junk or squatting clients
• 061669e fix(oauth): source-fair pending caps, /authorize as a CPU breaker, ceremony eviction
• 96fc7c5 fix(release): annotations valid for single-platform snapshot builds
• 2a76aaf fix(server): close idle sessions, robust localhost detection
• 7ee3d00 fix(server,cli): end streams on shutdown, inject logger, loopback default listen
• 56b3da1 fix(server,tokens): bind MCP sessions to the token row, not its name
• b6352b7 fix(tokens,logs): refuse shared state dirs, clearer open errors
• eb8a000 fix(tokens,logs): shared-dir check is unix-only
• 2a74dca fix(tools): conservative destructive hints, move attribution in recent
• d96c4ba fix(vault): cap paths and frontmatter, read-only instructions file, disk floor
• 1199db7 fix(vault): cap resulting note size, BOM-safe headings
• ab687cb fix(vault): harden path validation and make CI green
• e1ba845 fix(vault): move never reports failure after committing
• 603d687 fix(vault): never follow symlinks, bounded snipp...