viewer: v0.2.0

0.2.0 (2026-07-27)

Features

• viewer: review, refine, approve, and apply workflow (M7-03) (#250) (aaab4c4)

Bug Fixes

• broker: report cross-viewer draft eviction to the victim (#257) (de353bc)
• security: clear the two remaining CodeQL alerts (#260) (ab5640c)
• server: unify the kitId gate on isSafeKitId across the tool layer (#277) (812838b)
• viewer: accept text-only MCP tool results (#251) (d7d9369)
• viewer: honour eviction notices on discarded refine replies (#257) (d14895a)
• viewer: pass real kit context (tokens/primitives) to conjure (#246) (7fe8626)
• viewer: prompt before a reload discards unsaved drafts (#256) (0dd0f88)
• viewer: split Browse workbench out of viewer.js to clear the store read cap (#253) (51b46b8)

server: v1.3.2

1.3.2 (2026-07-27)

Bug Fixes

• broker: report cross-viewer draft eviction to the victim (#257) (de353bc)
• cli: make local npm setup actionable (#232) (e677b78)
• conjure_screen: escape the provenance note at all three comment sinks (#288) (49cb0a9)
• delete_files: gate the plan kitId on the shared isSafeKitId rule (053a0db)
• server: align kit ids with the routing key and the safety gate across both stores (#282) (f8cf030)
• server: gate create_project kit bindings (#296) (#298) (e7c6109)
• server: gate kitId on containment, not create_kit shape (#276) (23c281e)
• server: re-check kit existence before write_files commits (#269) (210e050)
• server: surface transport failures in GitHostProjectStore instead of reporting them as absence (#287) (cfb837b)
• server: unify the kitId gate on isSafeKitId across the tool layer (#277) (812838b)
• server: validate kitId at plan time (#252) (1ddccb3)
• store: reject a .kit.json missing a required KitMeta field (d79a516)
• viewer: honour eviction notices on discarded refine replies (#257) (d14895a)
• viewer: split Browse workbench out of viewer.js to clear the store read cap (#253) (51b46b8)

viewer: v0.1.1

0.1.1 (2026-07-20)

Bug Fixes

• release: ship package verification guidance (#69) (#223) (762c0ab)

viewer: v0.1.0

0.1.0 (2026-07-20)

⚠ BREAKING CHANGES

• minimum supported Node.js is now 22.

Features

• M0 scaffold — bootable MCP server, toolchain, CI, governance (#1) (c72e237)
• release: npm publish pipeline for @ambitresearch/genie + @ambitresearch/genie-viewer (M5-06, DRO-278) (3c7ab2e)
• server: add chat-invocation preview workflow (#178) (268f740)
• server: preview tool — returns _meta.ui.resourceUri (M4-05) (#166) (6f4f353)
• server: register ui://genie/grid MCP-Apps resource (M4-06) (#168) (4e51c7b)
• viewer: @ambitresearch/genie-viewer package scaffold + genie-viewer CLI (DRO-263 / M4-01) (a82a05b)
• viewer: boot Vite dev server in genie-viewer CLI (M4-08) (#159) (95052ce)
• viewer: iframe grid renderer (M4-03) (#164) (f9b40de)
• viewer: per-card HMR via WebSocket and postMessage (M4-04) (6b9d3bc)
• viewer: Vite multi-page config — one entry per preview.html (DRO-264 / M4-02) (#158) (bc3893e)

Bug Fixes

• release: migrate packages to Ambit Research (#213) (de44af9)
• release: synchronize CLI package versions (#212) (d4952d2)
• server: render previews in Codex Desktop canvas (#180) (#181) (801a69c)
• viewer: serve viewer.js as a classic script, not type="module" (DRO-749) (#165) (7896663)

server: v1.3.1

1.3.1 (2026-07-20)

Bug Fixes

• release: ship package verification guidance (#69) (#223) (762c0ab)

server: v1.3.0

1.3.0 (2026-07-20)

Features

• harness: Cursor smoke test + OAuth block + 40-tool-cap finding (DRO-285) (#194) (7626189)
• release: npm publish pipeline for @ambitresearch/genie + @ambitresearch/genie-viewer (M5-06, DRO-278) (3c7ab2e)

Bug Fixes

• release: bootstrap viewer first release (#211) (ac0e2b5)
• release: migrate packages to Ambit Research (#213) (de44af9)
• release: synchronize CLI package versions (#212) (d4952d2)
• server: complete security re-audit and SSRF hardening (M6-03, DRO-291) (#189) (a4e73e7)

server: v1.2.0

1.2.0 (2026-07-14)

Features

• server: add chat-invocation preview workflow (#178) (268f740)
• server: OAuth 2.0 + Dynamic Client Registration (DRO-273/M5-01) (#187) (dfe632b)
• server: secure env and mounted-file secret handling (DRO-275) (#185) (c85ea1a)
• server: static Bearer token fallback (M5-02, DRO-274) (#184) (336deee)

Bug Fixes

• server: render previews in Codex Desktop canvas (#180) (#181) (801a69c)

server: v1.1.0

1.1.0 (2026-07-10)

Features

• server: .genie/manifest.json writer — client-side compiler (M3-03) (#147) (088f761)
• server: .genie/sync.json verification anchor (DRO-262) (#144) (2163ca2)
• server: @genie first-line marker validator (DRO-257) (#142) (59d88da)
• server: 5-step atomic write orchestrator (DRO-261 / M3-05) (#148) (609b7d8)
• server: chokidar watcher for component tree (DRO-258) (#146) (fda2961)
• server: harden ui:// grid CSP and sandbox (M4-07) (6d21290)
• server: implement HtmlAdapter — vanilla-HTML framework adapter (DRO-617) (#162) (ea80afb)
• server: preview tool — returns _meta.ui.resourceUri (M4-05) (#166) (6f4f353)
• server: register ui://genie/grid MCP-Apps resource (M4-06) (#168) (4e51c7b)
• server: validate full-scan facet — marker + thin + variants (DRO-260 / M3-04) (#152) (a769c1f)
• viewer: per-card HMR via WebSocket and postMessage (M4-04) (6b9d3bc)

Bug Fixes

• server: address Copilot review findings on atomic sync orchestrator (#150) (91204ce)
• server: create_kit scaffolds viewer assets into new kit root (DRO-764) (#170) (cbdfe2d)
• server: hue-aware color veto for validate pHash variantsIdentical (DRO-717) (#157) (b56831f)
• server: validate full-scan honors marker viewport, not just meta.json (DRO-711) (#154) (d485ec1)

server: v1.0.0

1.0.0 (2026-07-04)

⚠ BREAKING CHANGES

• minimum supported Node.js is now 22.

Features

• deploy: reference LiteLLM model alias config (M2-05) (#118) (857ba6d)
• M0 scaffold — bootable MCP server, toolchain, CI, governance (#1) (c72e237)
• server: add bind_kit tool (M1-20) (#100) (321b40b)
• server: add conjure tool — LLM component generation (M2-03) (#125) (3d71205)
• server: add conjure_screen tool (M1-21) (#105) (6e447d3)
• server: add create_project tool (#84) (b2879c7)
• server: add delete_files tool (M1-09) (#107) (0594f8c)
• server: add get_kit tool (M1-03) (#95) (7d62c11)
• server: add get_project tool (M1-17) (#96) (1eeb3fa)
• server: add list_components tool (M1-15) (#97) (521e41e)
• server: add list_files tool (M1-04) (#88) (c2c0732), closes #9
• server: add list_kits tool (M1-02) (#92) (ce1455c)
• server: add list_projects tool (M1-16) (#86) (9b57b10)
• server: add LLM client wrapper (M2-01) (#115) (d053a4b)
• server: add plan tool (M1-07) (#104) (eaf1bd9)
• server: add refine tool — LLM component iteration (M2-04) (#127) (867000c)
• server: add retry/backoff for LLM endpoint calls (M2-06) (#126) (9de622e)
• server: add write_files tool (M1-08) (#106) (d82f770)
• server: centralise plan-vs-write guard in one middleware (M1-13, DRO-239) (a5fabda)
• server: centralise plan-vs-write guard in one middleware (M1-13) (#113) (a5fabda)
• server: define COMPONENT_SCHEMA for structured LLM output (M2-02) (#120) (1a1176f)
• server: implement Vue framework adapter (DRO-616) (#137) (e2d85fd)
• server: make list_components manifest-backed with ordering + pagination (M1-15) (#110) (eeca9f4)
• server: multi-framework adapter — React first, Vue/HTML stubbed (M2-08) (#131) (255b728), closes #32
• server: route write_files onto a KitStore write primitive (M1-14a-1b / DRO-565) (#121) (4435285)
• server: strict Ajv validation for structured LLM outputs (M2-07) (#124) (e924738)

Bug Fixes

• server: address remaining Copilot review findings on write_files (M1-08 follow-up) (#108) (306cd42)
• server: GitHost.deleteFile raises on directory target (parity with LocalFs) (DRO-568) (#117) (6a676fc)
• server: map GitHost kit collisions to KitAlreadyExistsError (DRO-234 AC8) (#90) (4659fc0)
• server: preserve binary component files across a refine round-trip (M2-04 follow-up) (e9e36b8)
• server: React preview bundle resolves React from host global, not require (DRO-624) (#134) (3f0269e)
• server: unify kitId guard + close empty-kitId cross-kit read; stream SRI hash (DRO-583) (#122) (fd0c8b1)
• server: wire withRetry into conjure/refine production call sites (M2-06 follow-up) (#133) (56148d9)