v0.3.0

Two months of work since v0.2.0. Highlights:

Renamed to @getcordon

• cordon-cli → @getcordon/cli, cordon-sdk → @getcordon/policy
• Old npm names deprecated with migration pointers
• CLI bin name stays cordon — no command changes for users

Sequence-aware policies

• Per-agent policies + call-graph constraints (62 unit tests, 7/7 block-test integration)
• read_data → write_file blocked at policy layer
• New agentId + callGraph fields in config

Activation flow shipped

• Inline OAuth prompt during cordon init (closes the install→register gap)
• 'auto' audit output resolves to hosted/stdout based on ~/.cordon/auth.json
• Branded OAuth callback pages + dashboard link on success
• Windows OAuth & escape fix
• Dashboard polish: workspace delete, sortable audit columns, copy-key, sparkline

Distribution + trust

• Live on Official MCP Registry as io.github.marras0914/cordon@0.3.0
• Smithery MCPB bundle: smithery.ai/servers/getcordon/cordon
• GitHub OAuth app under getcordon org with ◈ logo, minimal scopes
• Privacy + Terms pages, support@ + partners@ contacts, HSTS + CSP

Hosted dashboard

• HTTPS + HSTS on app.getcordon.com
• Free for everyone (no plan gates)
• 30-day audit retention, CSV/JSON export