Release v0.2.0 · coollabsio/orbit

Breaking Changes

Changed API token scopes from read / write to tasks:read, tasks:write, docs:read, docs:write and chat:read. API tokens, OAuth and MCP now use the same scopes. Existing tokens were migrated automatically. (#42)
Moved the Discord events endpoint from /api/v1/integrations/discord/events to /api/public/v1/integrations/discord/events. Discord integrations must use the new URL. (#42)

Added a public REST API at /api/public/v1 for API tokens, so scripts, integrations and AI agents can read and write tasks, comments and docs (docs as Markdown). (#42)
Added the MCP create_doc and update_doc tools for connections with docs:write. (#42)
Made service-account tokens continue to work after their creator leaves the workspace, and attributed their writes to the service account. (#42)
Added task imports from Asana, Linear and Trello, with statuses, labels, assignees, subtasks, comments and files. (#61, closes #38)
Added incoming chat webhooks: external tools post to a channel as a bot, with Slack-compatible payloads, Block Kit messages and interactive buttons. (#62)
Added an "All projects, including future ones" option for API tokens and MCP grants.
Let AI agents create, move and detach sub-issues through MCP.
Added the search_messages MCP tool to search visible chat conversations.
Added per-resource access (no access, read or write) and a select-all projects option to the OAuth consent page.
Added an Import page in Settings.
Added a source URL field to the new task dialog.
Returned people to the page they requested after sign-in.
Rendered emoji shortcodes such as :rocket: as emoji in Markdown.
Made the Admin users page search-only and added user and trial counts.
Attached static Linux binaries (.tar.xz) and checksums to each GitHub release.

Simplified the API token access picker: projects moved under the Tasks row, and new tokens default to read-only tasks access.
Showed the pixel "O" loader only one time for the whole first load.
Opened links to this Orbit instance inside the app.
Changed sort=priority in the API to list urgent tasks first by default.
Removed borders from empty-state containers.

Fixed MCP OAuth discovery from ChatGPT: an unusable proxied X-Request-Id was replaced instead of the request being rejected. (closes #52)
Fixed the storage mover, which could delete files when two buckets overlapped.
Let people with no workspace delete their account.
Returned 401 or 403 before body validation when the API token or its scope was not correct.
Made tall OAuth consent pages scroll, so the consent buttons stayed reachable.
Kept command palette search results steady while typing.
Validated the invite form before the invitation email was sent.
Allowed the empty <style> that doc placeholders use in the CSP.

feat(api)!: add public REST API for API tokens with unified scopes by @andrasbacsai in #42
feat(tasks): import projects from Asana, Linear and Trello by @andrasbacsai in #61
feat(chat): add incoming webhooks with Block Kit and interactive buttons by @andrasbacsai in #62

Full Changelog: v0.1.0...v0.2.0