LoxBerry MCP Server 0.4.0-beta.4

• Add an optional fail-closed emergency-stop signal from a visible digital
  Loxone Virtual Status. It blocks MCP tool calls on 0 or an unknown signal
  state and publishes its retained MQTT status independently from health topics.

• Treat the service-enable switch as a saved boot setting: initialize it when
  the page loads and update it only after applying that setting, never from
  periodic service-status polling or separate Start/Stop/Restart actions. Disable
  those runtime actions while the saved service setting is off.

• Separate systemd runtime, MCP access and optional MQTT health configuration.
  MQTT health publishes retained Loxone-epoch heartbeat and systemd state topics

• MQTT health can optionally use a custom broker. Its password is stored in a
  separate encrypted credential store and is never displayed or logged.
  below the configurable mcpserver root without storing or displaying broker credentials.

• Harden Admin UI browser responses with no-store caching, CSP, frame, referrer
  and MIME protections across page, AJAX, download and redirect paths.

• Add Tool Explorer time-range shortcuts, in-tab reference selection, action-specific
  control fields, and collapsible advanced parameters.

• Generate a versioned HTML and JSON reference for the complete MCP tool
  contract during package builds, link it from Help and the Tool Explorer, and
  document tools/list as the authoritative installed tool surface.

• Restore date/time pickers for optional RFC-3339 tool parameters in the Tool Explorer.

• Update the bundled using-loxberry-mcp agent workflow to revision 24 with
  task-specific read paths, complete cache-operation authorization and
  uncertainty guidance, and fail-closed schema and parameter-source rules.

LoxBerry MCP Server 0.4.0-beta.3

• Enable the bounded read-only feature families for fresh installations, prefill
  the HTTPS origin from LoxBerry's configured host, and register admin logs with
  the LoxBerry LogManager. Upgrades preserve their configuration; write scopes remain off.

LoxBerry MCP Server 0.4.0-beta.2

• Enable bounded history/statistics and masked LoxBerry diagnostics for fresh
  installations. Saving the first complete configuration also enables the
  service; OAuth consent and local diagnostic approvals remain required.

LoxBerry MCP Server 0.4.0-beta.1

• Add loxone_get_room_snapshot for bounded current states in one exact visible
  room and loxone_get_weather for current or paginated forecast weather.

• Add compatible semantic state values and read-only description models for
  visible Irrigation and AlarmClock controls while preserving their raw values
  and advertising no actions.

• Update the bundled using-loxberry-mcp agent workflow to revision 18 for room
  snapshots, weather, and the new read-only controller interpretations.

• Add an explicit, fail-closed room_group reference to each visible room from
  loxone_list_rooms, and resolve visible room and control references in
  StatusMonitor and WindowMonitor descriptions.

• Preserve explicit WindowMonitor item mappings when LoxAPP3 represents them as
  a bounded object keyed by control identifier, so their referenced visible
  controls can be resolved without name inference.

• Begin the feature-frozen 0.4.0 beta channel. Future 0.4.0 changes are
  limited to beta blockers, fixes and necessary compatibility corrections.

LoxBerry MCP Server 0.4.0-alpha.15

• Fail closed when the Miniserver binary-state stream ends before its first
  state batch, instead of returning an apparently usable read session without
  current values.

• Wait briefly for the Miniserver's initial binary-state table when opening a
  read session, so current state reads no longer race the asynchronous stream.

• Suspend all pending remote Loxone token-revocation attempts for one hour after
  an authentication rejection or Miniserver source-IP lockout, preventing the
  revocation worker from creating a burst of further logins while retaining the
  tokens until remote confirmation is possible.

LoxBerry MCP Server 0.4.0-alpha.14

• Use the existing narrow non-interactive service-stop permission during the
  pre-upgrade hook, so a native Plugin Manager upgrade can stop the MCP service
  before migrating its persistent auth data; upgrades from older releases
  without that permission safely stop only the plugin's own service process.

LoxBerry MCP Server 0.4.0-alpha.13

• Stop the MCP service before an upgrade replaces its persistent auth data, so
  in-flight requests cannot fail against a temporarily unavailable store.
• Classify a Miniserver source-IP lockout received while sending a WebSocket
  command as a recoverable connection failure, including deferred token cleanup.
• Keep a failed Loxone binary-state stream fail-closed while recording only its
  sanitized exception class; the stream task is now consumed after that record
  so its error cannot be raised a second time during session cleanup.
• Restore Gen. 1 Loxone token authentication by using the firmware-supported
  JWT credential inside RSA/AES Command Encryption instead of the rejected
  token-hash variant; the independent Gen. 2 hash path remains unchanged.
• Stop Loxone token authentication attempts after three rejections of the
  authwithtoken step per OAuth session until a local administrator explicitly
  permits another bounded attempt. Miniserver source-IP lockouts are reported
  separately and never increment that counter.
• Enable LoxBerry Plugin Manager automatic update discovery for stable releases
  and explicitly opted-in prereleases.

LoxBerry MCP Server 0.4.0-alpha.12

• Prevent concurrent local LoxBerry read or operate binding changes from
  overwriting one another. The Admin UI keeps parallel session actions pending
  until it refreshes one consistent server state.
• Add a reproducible Windows development-environment setup and keep temporary
  test data inside the project data area.

LoxBerry MCP Server 0.4.0-alpha.11

• Add loxberry_list_service_events: a bounded, read-only MCP diagnostic feed
  exposing only allowlisted fields from server-authored records in the fixed
  plugin service log. Raw logs, arbitrary files, journal data, payloads and
  foreign services remain unavailable.
• Record sanitized error classes for unexpected LoxBerry diagnostic failures and
  retain the returned trace ID for correlation.
• Restore MCP Tool Explorer sign-in through approved HTTPS IP or hostname aliases:
  proxy the exact internal Explorer-session endpoint, bind it to the current
  validated Explorer origin, and retain its real error message for diagnosis.

LoxBerry MCP Server 0.4.0-alpha.10

• Load the administrative configuration before deferred status and session data,
  so the management page remains responsive without weakening its consistency.
• Retain encrypted Loxone tokens after local session revocation until the
  Miniserver confirms killtoken; unavailable Miniservers are retried by the
  service without delaying the administrative UI.
• Correct the final transport allowlist for documented Daytimer, room-controller,
  ventilation and HVAC temporary overrides; unsupported raw commands remain rejected.