v1.0.15-rc1

Changelog

• b51940ebe1fb7477b0b450ebb6c1758c8b4431cf HTTP MCP (#263)
• 30ebc06ef8128503a362e9df34983e7fa14bcd4f Phase one review adjustments (#264)
• d495796cd4b5383bf85e45f29d8499af59085aa7 additional phase-one reviews
• da583b6e4154953bd61d4973491b56924173a108 adds phase 2 bug discovery for mcp-tool-fixes
• 8582f692da352853fe8a8f1b78f04f00b379a086 chore(infra): add .dockerignore to shrink Docker build context (#357)
• 0588ccd3bce91c2bb0341b1dc365f74a22f43322 cleans up markdown files (#262)
• f872cfc9562e8ee2b0c43979a4958b0afd04a561 docs(agent-loop): leave Partial Agent-Friendly issues open after PR merge
• e0269d8b69780123e4be3b99b2f03dd125336d72 docs(mcp-tool-fixes): close phase 1 wave 1 (#377)
• 86387ed88686f3c2421974817d5472ed82930109 docs(mcp-tool-fixes): close phase 2 wave 1 (#389)
• 6b7c69bd6d4acc0a525027f522d79fd3555a3004 docs(phase-3): mark wave 4 tasks (3.7, 3.8) complete (#344)
• 14460e30d9c348de5e42468b6f907c30d6d1029a docs(phase-3): mark wave 5 task (3.9) complete (#347)
• cb9b133c54501ba3402f98ad46fcdcf2fde3380b docs(phase-3): mark wave 6 tasks (3.10, 3.11) complete (#352)
• 570881ff098d71b738505b65b290c26ee2136361 feat(mcp): per-path MCP server instances [#330] (#332)
• 1f96033b76903ead6e6df42f6b9e92c93bf113fd feat(workflows): convert workflows command group to in-process callables (#283) (#289)
• 06b724122c5e0750c2006e2394d3c687a45f256a feat: Build Credentials, ToolCallable, and dispatch table [#266] (#267)
• 94a41c79d975d8a10b96a287ecbc9786a9ba4050 feat: Build tag scaffolding + leaf package internal/httpserver/ skeleton [#317] (#319)
• 5009bff2f8fbbe604ebd30f6bcf982349299bebb feat: CI guard — customer build does not link internal/httpserver [#318] (#320)
• a23425bcfe619c1d021936ae06a14e9126591055 feat: Convert forms command group to in-process callables [#271] (#277)
• 2fe8fa382b33ae792fba6c46dd4ee338dfa27bca feat: Convert integrations command group to in-process callables [#284] (#288)
• 1ab2d24f153c7fc0ecd362c4dfbe3743cb1ef3e4 feat: Convert products, permissions, categories, audit to in-process callables [#285] (#290)
• 3b412b1b6b0e3f834d94da0417f7a089d1894d2f feat: Dockerfile + fly.toml + two-region launch config [#353] (#355)
• 30fc581d10c0152053560c773dd91306a9dde052 feat: Enforce read-only mode at tools/call; reject write tools with permission error [#313] (#314)
• df3983af4e0a7810fed218548d2f26b60cbc7b34 feat: Fix kuali_documents_list dispatch when product+dataset given [#365] (#374)
• f39fd5a0c46713b45b405963088d9de548d0073e feat: Fix kuali_summary — implement promised user/group/app/product counts [#382] (#387)
• 317df07fcbba8d2e29f6717bd56e1ecf9c1fedf8 feat: Fix kuali_summary — swap documentsConnection → totalDocumentCount [#359] (#367)
• 5124d1af9b2da6ff8889399ee4fb9ed91c025173 feat: Header parser + SSRF validation + JWT check [#324] (#326)
• 2ae44e05a5dbce9071044b2aba88dfb2b5c1c529 feat: Health endpoints + heartbeat + SIGTERM drain [#348] (#350)
• b3cd6b96f2467913c47f7079534aebf5fa8fc612 feat: Per-tool timeouts — default 30s, 5min override for long-runners (HTTP MCP Phase 3 #3.8) [#338] (#341)
• 089bbae9e5a3b87d59510a6ff74ca47f1655ae64 feat: Prometheus metrics + structured JSON logs (HTTP MCP Phase 3 #3.9) (#346)
• bba17d50f623dd27e73037717f44547e82887837 feat: convert apps command group to in-process callables [#269] (#270)
• 81bb7f34b3591c17b259b8089d094e943bef9486 feat: convert documents command group to in-process callables [#272] (#276)
• 96d041ef95d9c61ecc019cd0648240cf3d3d8fce feat: convert export, import, files, utility groups + kuali_run dispatcher [#286] (#292)
• 2bc530d20dddc58989f65439a936f6f4809df2ae feat: convert groups command group to in-process callables [#274] (#278)
• 13bb49c63fe8e26554101bc8194efbcb841ef974 feat: convert users command group to in-process callables [#273] (#275)
• 32fc34181697d91ce0f0bc64cada31573e1399c8 feat: fix kuali_workflows_list — secondaryWorkflows moved to dataset [#362] (#371)
• d1882ca543ef5f67dce10aa94190ac0d858193d7 feat: implement per-token rate limiter [#337] (#340)
• 012778660c581ccb0d8ad4c3d343825ade6d11b0 feat: kuali serve Cobra subcommand [#349] (#351)
• 9d50eed171eecbca0097e6e1c2784fa37e86b34e feat: shaped error filter — strip token, URLs, JWT, internal hostnames [#325] (#327)
• 9d2174229d29b2443767783129ca08ccda219426 feat: streamable HTTP transport adapter [#329] (#331)
• 556573effff049ee211beae7a5cf96fea6248210 fix(apps): paginate past non-app nodes so apps list returns full limit (#378)
• 8e3c1794b035ffbc65092f30eedf65cd4f03bf78 fix(health): nil-safe CheckAuth when NewGQLFunc is uninitialized (#393)
• c7e285dad5128584d4683e0354b70ba52090939d fix(infra): keep infra/ in Docker build context (#358)
• c52aa6750e52965e9673613c71789a895191e6cf fix(infra): remove unsupported [[regions]] block from fly.toml (#356)
• b45025adc29dbcfeeb5e21077e4ff8c7c8c55e83 fix(integrations): fix kuali_integrations_failures query + kuali_integrations_test mutation [#361] (#370)
• 361426f121e969b95d22284d4c670a574517dcbb fix(scripts): customer isolation script detects leaked imports and ListenAndServe [#321] (#322)
• 15cce7a0c9cc4e5d4f9b39b71e671e810ee80f2b fix(tests): clear USERPROFILE in remaining HOME-unset config tests (#392)
• 2dc754991a1ab1e9d47850e017be94121df86dec fix(tests): make Windows CI green (#391)
• af616953a42281f63328a03bc6adb57666456ad7 fix: Diagnose and fix kuali_files_download file_id is required error [#366] (#375)
• 4767e24829004cb536abc90c343a5e95c21b3199 fix: Fix forms-package GraphQL queries [#363] (#373)
• 49a87106bb0137e44abe955ff93763cbadd62ca6 fix: Fix kuali_apps_icons — drop server iconCatalog query, return in-process list [#360] (#369)
• 2b79d11adb52cca51ca2841ba9b19e3c2e475395 fix: Fix kuali_forms_options — filter result to requested field [#380] (#385)
• dec79d264a0dd7563b57e7505f18839ff7d69466 fix: Fix kuali_workflows_list — query secondaryWorkflows as JSON scalar [#379] (#384)
• d2d7b7d80cf6e569269c291f1644c21730c1c719 fix: Fix kuali_workflows_status — query runtime status from document.meta [#381] (#386)
• cff32e33b4fcba9633473069c1fb6ca5a501ad07 fix: Fix update install on Windows (running-exe lock + linux/mac-only error message) [#336] (#339)
• d4c41b4ca7e4067368d63d9fa962e99fd118becb fix: [AGENT] Fix REST export endpoint paths — prepend /app prefix (MCP Tool Fixes Phase 1 #1.6) [#364] (#372)
• 6931f4acd0f98ab6e0cb27cc8c7ab316367a9483 fix: [AGENT] Fix kuali_apps_list — use appsConnection.totalCount for pagination total [#383] (#388)
• 7f087831b29c1655c07b87a74784d82e097d6544 fix: claim.sh exit-trap logic — only delete lock if we acquired it
• 7c23ceb650e8936e4bdff1fdbd3b3a6f6e1964d6 fix: hard-coded +3 connection-tool count breaks when OmitConnectionTools=true [#333] (#334)
• 6548a1bce1bac80e87f4c821848365a4036f50b2 fix: stateless session manager for multi-instance MCP serve (#390)
• de4769c9a374eee17ce303bf478338b94f2d3095 general mcp refactors
• 6ccedf1e0c51994f7aa019ae623adb70f31059f1 phase-1 review: reconcile 1.3/1.4/1.7 deps, relocate TestNoExecImport, tighten line refs
• 08070d2c8f1f0db97570c2228cebfbc9128faee2 phase-1 review: reconcile spec text with landed CommandRunner/ToolDef API
• fafee5f65b08e5b68e90ecf52283f96f41ef3e16 phase-1 review: reconcile task 1.10 deps and 1.9 AC, fix line-number drift
• 8615796bbc83f46d85d982b837c6a48bba43d607 refactor: Add IsReadOnly/IsDestructive helpers; refactor NewServer filter [#310] (#311)
• 20bb361855a015fcdb7ca78249f842a33f902023 refactor: promote internal/config/profiles to own package + extract AuthTransport [#299] (#300)
• 5b49c239fd2751d84a3b3acb959230b84510f5de refactor: reclassify ambiguous tools and update annotations [#307] (#308)
• 9f79e759d354e5c5b33ee627c9bfe5e81b765b23 refactor: remove subprocess execution from MCP [#294] (#296)
• 291aa871fea42af43b0f23d67576815431bc01fb test(config): add failing tests for config path resolution [#368] (#376)
• 752e00bd4c716130b6f006ebe70fd26100dcaaa3 test(httpserver): add failing test for 429 rate limit response [#342] (#343)
• bbc8b872594321a4573e7e7c052588c1d9332090 test(mcp): add credential isolation guards [#295] (#297)
• 9ff1df1b21a5366359a48dabda60f7f999e6d4da v1.0.15-rc1 (#394)

v1.0.14

Changelog

• dc884d60b9bff1e4f1dae6f764483f2c600010ee feat(grafana): revamp CLI usage dashboard for clarity and accuracy (#257)
• a0b111e53af89d727cf80502acf415757367e8f2 feat: Add --display-name and --username flags to users create [#258] (#259)
• 461d1f3aa2a1e0283b4884a934c04b809a7e2e38 v1.0.14 (#260)

v1.0.13

Changelog

• dc2760aa5547858c36325b735bd4ef20a8660dc2 fix(test): TestFindAsset uses .exe suffix on Windows (#256)
• 4d2f42102cb834f2436b179b355cf718357ed14a fix: update install picks .exe asset on Windows (#254)
• 69e10eda1e683394cf45408ade9c6b10762b2677 v1.0.13 (#255)

v1.0.12

Changelog

• 2cf7ee694093364d8798f6e9dc65935c2c22b20a v1.0.12 (#253)

v1.0.12-rc1

Changelog

• 1cc05446097eb1f2c07f92d6b3f8fa1195f8d219 chore(release-skill): use release PR + tag workflow to respect branch protection (#251)
• ce6c03e0b038bce55037b6a469966a105562c86e feat: three read-only demo follow-ups [#242] (#250)
• e3f69378e6dd0ca784f5371bfa69e85e7d0d2b98 fix: detect Microsoft Store Claude Desktop on Windows [#248] (#249)
• 961b8bea331ad1d3d9eaa0277562e7bfa3c9dfd9 v1.0.12-rc1 (#252)

v1.0.11

Changelog

• 3feadb32d2d8a64eae8da70fae655c24f493b427 fix(mcp): gate executable-bit check on non-Windows to prevent false-positive [#246] (#247)
• 8664a7b01a478d3199dee4b47831fb9421dcd344 v1.0.11

v1.0.10

Changelog

• 0d30489b8bf9df7c35d27dee3e1a71724569e491 fix: drop invalid parentId from ResolveTargetFromDocument inference query [#237] (#239)
• 7109b3860861f268fba312d186b4e16122c315cd refactor(demo): capability-driven kuali demo flow [#238] (#240)
• 506e636115e03874039fca9003b9a806f67fb78c v1.0.10

v1.0.9

Changelog

• 31577c642299e3a100abc5ebe09122ea0fdbd67d fix(documents): make ResolveTargetFromDocument non-fatal on forbidden errors [#235] (#236)
• a89b1e04aab8963423efbd0284bd0cafdc2d2cf3 v1.0.9

v1.0.8

Changelog

• 7959a53d4d8b2865f9fe9488ccbe81927bceefac fix(apps): append .svg suffix to iconName at GraphQL mutation boundary [#232] (#233)
• 4aae94797eb20758caa8048fb77cb09c34f3677d v1.0.8

v1.0.7

Changelog

• 34bcf8677194afaba71d088c78674863e3cbb089 fix(apps): normalize icon names to canonical lowercase before GraphQL mutation [#230] (#231)
• e8ecbc44604279174d8903ab97dc9343b3dcedf4 v1.0.7