v1.9.2

Changelog

• 15d932c docs(npm): add README for the @mmmnt/flmnt package
• b83180d fix(auth): re-discover the broker on login so a moved DNS sticks
• 4bb2b54 fix(setup): precompact hook stops fabricating path-derived stream ids

v1.9.1

Changelog

• aa2b189 fix(release): publish npm on node 24's bundled npm, drop the sigstore-breaking global upgrade

v1.9.0

Changelog

• 3eeda64 feat(auth): store tokens in the real macOS Keychain via /usr/bin/security
• c883250 feat(logout): revoke the refresh token by default via the discovered revocation endpoint
• 4126b2e fix(discovery): reject cleartext non-loopback endpoints in the OAuth discovery doc
• b4ebe02 fix(http): route auth + API calls through a shared 10s-timeout client
• 780c197 fix(login): report the real token storage backend instead of always claiming the OS keychain
• b3556ce fix(npm): verify the downloaded binary against the release checksums
• 2d6ff7c fix(proxy): bind the local proxy to loopback and add a read-header timeout
• 98ff748 fix(sync): run the default cwd auth script only inside a configured flmnt project

v1.8.0

Changelog

• 0b465ab chore(fmt): gofmt internal/setup/setup.go
• b5b5e9b refactor(brief): route keyframe/entries reads through authenticated router GraphQL
• bab86fa refactor(derive): import derived candidates through authenticated router GraphQL (memoryImport)
• 5eb32a0 refactor(gate): route keyframe recency check through authenticated router GraphQL (drop direct core-url)
• 26658b2 refactor(record): route metric/plan/supersession writes through authenticated router GraphQL
• 98e688f refactor(sync): move export/import through authenticated router GraphQL (memoryExport/memoryImport)

v1.7.0

Changelog

• 9761415 feat(setup): direct OAuth entry by default; --proxy for the local-proxy entry
• f483168 fix(setup): preserve all .mcp.json servers verbatim; rename proxy entry to flmnt-proxy

v1.6.0

Changelog

• f18f2a4 feat(setup): install the full automation kit (hook map + slash commands + perms)
• 337e414 feat: record-metric/plan/supersession/attestation write subcommands
• f72668b fix(record): robust base-URL (drop /mcp + query) and workspace-from-query fallback
• dde44b9 test(record): cover --hook CI classifier; refresh setup summary

v1.5.4

Changelog

• ba6996c fix(broker): keychain updates

v1.5.3

Changelog

• 089198d feat(broker): device authentication flow updates

v1.5.2

Changelog

• 35f62bd fix(derive,brief): send X-Workspace-Id and normalize the /mcp base for staging

v1.5.1

Changelog

• f6421b4 fix(derive): filter slash-command/meta noise + stop derived recaps shadowing real keyframes