v0.8.0

Changelog

• 2d346de chore(release): v0.8.0 (#98)
• 8a1c0b8 harden: CSRF origin check, CSP, and assorted local hardening (#96)
• c210319 feat(tools): enforce destructive classification so a tool can't ship unflagged (#97)
• 178a896 feat(secrets): redact secret-shaped values from container logs (UI + MCP) (#94)
• 1992269 feat(networks): create / inspect / connect / disconnect (UI + MCP) (#93)
• ecc8ba5 feat(grant): default the destructive window to 15m, not 6h (#91)
• e47c286 fix(ui): clarify prune dangling targets untagged layers, not unused images (#90)
• 372966a feat(cli): surface a stale DOCKER_HOST right after an update (#89)
• 481b785 feat(doctor): show version currency (latest release available) (#88)
• e724986 feat(ui): responsive polish for phones to ultrawide (#87)
• 80a53fe feat(a11y): focus management across overlays + live regions + reduced-motion (#86)
• 083d18b fix(a11y): clear the compiler-flagged accessibility warnings (#85)
• fb3b22c feat(mcp): official registry server.json + image ownership label + README configs (#84)
• 57ad08e docs(mcp): Colima socket-path caveat for the Docker image (#83)
• c5b0044 feat(docker): multi-arch GHCR image running 'oriel mcp' (#82)

v0.7.0

Changelog

• 936387d release: v0.7.0 — responsive mobile UI; drop the Classic edition (#81)
• b329773 feat(studio): responsive shell + scrollable tables (mobile-ready) (#80)
• 5fef781 refactor(web): drop the Classic edition (Studio-only) (#79)
• f392e51 docs: two more stale 'no authentication' claims (reverse-proxy + funnel) (#78)
• 6c0233b docs: fix stale post-0.6.0 claims (MCP HTTP, llms.txt positioning + auth, footprint stats) (#77)
• 76eeadd docs: self-host stays loopback-only, reached via private overlays (#76)
• 69373a9 docs(roadmap): single-admin self-hosting, not multi-user RBAC (#75)
• 4c414ae feat(demo): real footprint stats, checkmark+note cells, no-lock-in framing, cross-platform palette (#74)
• e5c477c docs(security): reflect the optional auth token; restore the curl-pipe-sh caution (#73)
• bc2dc8c feat(demo): honest comparison, prominent button, smooth modal, new-tab demo links (#72)
• 8f916df style: remove em-dashes repo-wide, rewrite affected prose as plain sentences (#71)
• 2cca537 feat(demo): link the live demo + comparison from the README, deep-link via #compare (#70)
• 1909348 docs(readme): humanize the prose (drop em-dash overload) (#69)

v0.6.0

Changelog

• 7fb99f7 release: v0.6.0 — MCP scoping/HTTP/resources/prompts, Colima control, optional auth; drop NL resolver (#68)
• 6d3b70a feat(demo): exhaustive comparison overlay (demo app only) (#67)
• 800ab73 docs(mcp): lock in why ServeHTTP passes nil SDK options (#66)
• 30c1dab fix(mcp): live token re-read for MCP-over-HTTP (revocation without restart) (#65)
• f38a58d fix(security): close MCP-HTTP proxy token bypass + harden the token gate (#64)
• 3b6771a docs(readme): lead with a concrete AI-driving demo (#63)
• 9ed8a3e docs(readme): add Go Report Card badge (#62)
• dc0f385 style: gofmt the three files that drifted (#61)
• 4523133 refactor: remove the deprecated natural-language resolver (#60)
• 88dca05 fix(server): close the forged-loopback-Host bypass behind a reverse proxy (#59)
• ad5bb23 docs(readme): reposition hero (AI-native, engine-agnostic) + trim (#58)
• 13119b7 feat(mcp): MCP over Streamable HTTP with bearer-token auth (oriel mcp --http) (#57)
• be77ff5 feat(auth): optional bearer-token gate for non-loopback /api (#56)
• 2d9455f feat(mcp): resources (container logs/inspect) + diagnostic prompts (#55)
• 055d663 feat(mcp): colima lifecycle tools — start/stop/restart (stop/restart grant-gated) (#54)
• 324e65e feat(mcp): read-only & scoped MCP access (--read-only, --allow/--deny-tools) (#53)
• 4b04383 feat(env): colima docker-env helper (oriel env + docker.env tool + doctor check) (#51)
• 1a05630 perf(mcp): lean stacks.list projection, ~25x smaller payload (#50)
• 737c5e4 docs(mcp): newcomer setup section + --for duration formats (#49)
• 573aadb docs(mcp): drop stale references to the dropped in-app assistant (#48)

v0.5.1

Changelog

• fab6435 release: v0.5.1 — compose stacks from ⌘K + MCP, rename on any stack (#47)
• bb100d6 feat(stacks): stack.alias MCP tool + shared settings package (#46)
• 5b9f6dc feat(stacks): aliases everywhere via shared AliasEditor controller (#45)
• 8179465 feat(stacks): stack.start/stop/restart/down for MCP + palette (#42)
• 6eaa2a7 fix(demo): align scan mock with Discovered shape, fixing Stacks duplicate-key crash (#41)

v0.5.0

Changelog

• 661bae4 release: v0.5.0 — palette across all resources, ⌘K navigation, NL resolver deprecated (#40)
• bee9020 feat(palette): navigation seam in platform SDK; deprecate NL resolver (#39)
• ecaa57f feat(palette): type-to-reveal + actions for images, volumes, networks (#38)

v0.4.2

Changelog

• d1e24d7 release: v0.4.2 — second review-driven hardening pass (#37)
• 1e72118 fix(ui): shared modal Escape stack so one Escape closes only the top overlay (#36)
• 8346139 fix(ui): unstick pull spinner, sequence pathfield loads, reset stale scan, clear pull debounce, drop dead handler (#35)
• c4c9fe6 fix(backend): recorder shutdown race, non-blocking update check, exec line cap, service unit scope, plist XML, dead field (#34)
• e076eaf fix(config): atomic settings read-modify-write via updateSettings; unique temp file (#33)
• 4c40318 fix(prune): surface step failures instead of reporting success (#32)
• bc1a3d9 fix(secrets): mask credential URLs, command/label secrets, and floor the agent inspect path (#31)
• a5b3b89 fix(ui): restore refreshStatus import so Classic Dashboard Retry works (#30)

v0.4.1

Changelog

• 614a4e6 release: v0.4.1 — reliability + safety hardening, editions refactor (#29)
• 6e71ccb docs: cut repeated content across README, MCP, editions guide (#28)
• 1c62a54 refactor(editions): shared DashboardStats controller for telemetry (#27)
• 266fd6f refactor(editions): shared discovery/remote-host/grant Settings forms (#26)
• b17bb48 refactor(editions): shared ProviderSettings controller for Settings AI block (#25)
• 81939b2 refactor(editions): share log-line time formatter (fmt.logTime) (#24)
• 01c4ef9 refactor(editions): shared ImageActions controller for tag/used-by/remove (#23)
• 1c48c5d refactor(editions): Classic uses shared stackOp/lifecycle; fmtRemaining moved to platform (#22)
• 1954e48 fix(net): cap external response bodies (JSON + binary download) to prevent OOM/disk-fill (#21)
• b66eeb1 docs: trim internal planning sections from MCP doc; fix stale masking example (#20)
• a296215 fix(ui): Enter on focused Cancel cancels, clear op auto-dismiss timer, key tag lists (#19)
• de23517 fix(ui): cancel pending confirm, surface SSE drops, idempotent live stream, reset inspect on container change, stable log keys, guard theme import, demo callback cleanup, correct bulk-start states (#18)
• a05198b refactor(cli/cleanup): synchronous bind + clean shutdown, subcommand help/exit codes, slices.SortFunc, single envReveal normalizer, shared ok-result, sorted hosts, doctor exit code (#17)
• 01a2fe3 fix(correctness): atomic self-update swap, reap finished jobs, copy recorder snapshot, explicit colima profile, surface fs-open error, drop dead docker field (#16)
• af77051 fix(safety): clamp grant window, broaden secret masking, atomic grant write, honest registry docs, validate entity refs (#15)
• b48005b docs: copyedit README, docs, and changelog
• 0555d52 docs: update documentation + explicit differentiation (#14)
• a119e0d docs: tighten README + ROADMAP copy
• 9e79fec docs: product-voice roadmap/MCP copy
• c76f881 docs: lead with the GUI+MCP 'two front doors' positioning; roadmap additions (#12)

v0.4.0

Changelog

• 74abd68 release: v0.4.0 — MCP server, read tools, destructive grant (#11)
• ba05f7d docs: research note on a small model to drive Oriel's tools (#10)
• d7d4641 feat(ui): Settings automation-access panel to open/lock the destructive grant (#9)
• d810b4c feat(mcp): ship oriel mcp stdio server with destructive tools gated by grant (#8)
• cd679f1 feat(grant): time-boxed destructive-action window gated in Registry.Execute (#7)
• c382e24 fix(ui): update pill opens the confirm-update modal directly (#6)
• fc3be2c feat(tools): add read-only query tools to the registry (#5)
• cf6a8e7 ci(deps): bump pinned Actions to latest (goreleaser v7, pages v5/v6) + group dependabot updates
• adc0e50 feat(secrets): mask container env values in inspect; reveal policy + Settings
• 76bc155 docs: MCP-server-first roadmap + MCP server design doc

v0.3.3

Changelog

• dd05047 chore: changelog + version 0.3.3 + rebuilt (demo-free) dist
• fa540d3 ci(security): pin third-party GitHub Actions to commit SHAs
• 4049f97 fix(demo): real-time graph that renders + smooth CPU + reachable empty-logs state
• 135ed5d fix(logs): connecting spinner + accurate empty state (Studio)
• 7e3ed68 fix(build): keep the demo mock + seed out of the production binary