v2.0.2

AppFlowy MCP 2.0.2 fixes OAuth session durability, DateTime rendering, ignored command inputs, field-deletion safety and large-response continuation.

• Refresh tokens rotate with durable replay detection and login-family revocation. Existing OAuth registrations survive; sign in again after upgrading and save each newly returned refresh token.
• DateTime writes preserve the attributes AppFlowy renders. Field deletion refuses local schema/view dependencies; Relation cleanup stays in AppFlowy.
• Large lists preserve complete records and usable cursors. Scoped exports return complete files or explicit chunk-fetch instructions. Follow next_offset; Markdown chunks use character offsets and revision hashes.
• API/session, document/collab and profile responsibilities are separated. Builds/runtime share one version source, with immutable artifact checks and modernized pinned CI actions.

Validation includes 216 offline tests, Linux/Windows clean installs, stdio/HTTP Docker checks, decoder candidates, 25 disposable live lifecycle checks and eight browser categories on Cloud 0.20.5/Web 0.20.11. See compatibility evidence for exact coverage and limits.

Current SaaS, real Google sign-in, AI answers, multi-user authorization and the historical decoder reproducer remain unvalidated. pycrdt remains pinned to 0.13.0; AI is opt-in. PyPI publication remains deferred.

Read the migration notes and changelog before upgrading.