v1.0.0

What's Changed

• ci: provision WP core + SQLite so PHPUnit runs for real (#42) by @ifahimreza in #49
• Untangle main: legible 401s (#36), MCP inputSchema normalization, admin dedupe + Guidance polish by @ifahimreza in #47
• Security: SSRF fail-closed (#38) + pin the execute() permission contract (#39) by @ifahimreza in #48
• docs: stop hard-coding the ability count (#41) by @ifahimreza in #50
• ui: group Permissions tools by category + filter box (#43) by @ifahimreza in #51
• ui: connect-wizard presets for Gemini CLI, VS Code, Windsurf (#46) by @ifahimreza in #52
• ui: connection-health tile on Home (#45) by @ifahimreza in #53
• ui: promote Memory to its own top-level tab (#44) by @ifahimreza in #54
• feat: unified get-design-system + shared design-numbers guidance (#5) by @ifahimreza in #55
• feat: bootstrap-design-system — gated starter system (#5) by @ifahimreza in #56
• feat: section recipes (list/get-section-recipe) (#6) by @ifahimreza in #57
• chore: release 1.0.0 — production-ready by @ifahimreza in #58
• Agent-guidance fixes: skill bodies uncorrupted, verify honesty, composition rule, native builders by @ifahimreza in #76
• chore: adopt github workflow agent rules (#78) by @ifahimreza in #79
• fix: serve stateless MCP clients so ChatGPT can discover tools (#80) by @ifahimreza in #81
• fix: clear the WordPress.org rejection (#82) by @ifahimreza in #87
• chore: merge site-editor branch and cut 1.0.0-rc3 by @ifahimreza in #88
• fix(guardrails): hold a wrapped destructive confirm to the args it previewed (#89) by @ifahimreza in #90
• feat(tools): offer only the tools this credential can actually call (#91) by @ifahimreza in #92
• fix(context): point at the tool that replaced five, and stop stuttering (#93) by @ifahimreza in #94
• feat(playbook): ship the playbooks on every site that can use them (#95) by @ifahimreza in #96
• fix(mcp): answer the handshake the way strict clients require (#97) by @ifahimreza in #98
• Phase 1: correctness — log failed confirmed-destructive calls, warn on wrapper collisions by @ifahimreza in #66
• Phase 2: security hardening — token user-binding, credential marker, log caps, domain enforcement (supersedes #67) by @ifahimreza in #99
• Phase 3: DRY — shared integration engine, accessor resolver, gate registry by @ifahimreza in #68
• Phase 4: builder taxonomy registry, tree profile contract, unified walkers by @ifahimreza in #69
• fix: stop serving an MCP endpoint we never declared, and say what is offered (#86) by @ifahimreza in #100
• chore: record the vendored adapter's one deviation as a script by @ifahimreza in #101
• feat(context): one document, one heading level, whoever is contributing by @ifahimreza in #102
• docs: STATUS — the four pillars, Mark's handshake bug, and the PR backlog cleared by @ifahimreza in #103
• fix: group a self-enrolled integration's tools under Integrations, not Other (#59) by @ifahimreza in #104
• chore(ui): install @plugpress/ui from npm instead of a GitHub tag by @ifahimreza in #105
• chore: build 1.0.0-rc4 for testing by @ifahimreza in #106
• fix: an OAuth connection can no longer be pinned to read forever (#107) by @ifahimreza in #108
• chore: build 1.0.0-rc5 for testing by @ifahimreza in #109
• fix: ship the ChatGPT tool-discovery shim in every build (#111) by @ifahimreza in #112
• fix: record MCP health on the transport every zip actually ships (#115) by @ifahimreza in #116
• fix: keep the vendored adapter out of the self-hosted channel (#113) by @ifahimreza in #117
• chore: build 1.0.0-rc6 for testing by @ifahimreza in #118
• docs(status): rc6, and the two defects in the diagnostic we were about to use by @ifahimreza in #119
• fix: make the client-traffic trace answer the question it exists for (#120) by @ifahimreza in #122
• fix: probe Bearer too, so a half-stripped host stops reading healthy (#121) by @ifahimreza in #123
• chore: build 1.0.0-rc7 for testing by @ifahimreza in #124
• docs(status): rc7 live, and the diagnosis I had to retract by @ifahimreza in #125
• fix: OAuth bearer resolver fatal before init (#127) by @ifahimreza in #128
• chore: build 1.0.0-rc8 for testing by @ifahimreza in #129
• chore(oauth): annotate core rest_url filter for Plugin Check by @ifahimreza in #130
• docs(status): rc8 built on Mark's correct diagnosis of the pre-init fatal by @ifahimreza in #131
• fix: get-instructions description matches its tier-gated payload (#132) by @ifahimreza in #133
• chore: tested up to 7.1 by @ifahimreza in #134
• chore: drop the application-passwords readme tag by @ifahimreza in #135
• chore: add chatgpt readme tag by @ifahimreza in #136
• fix: display the native Pro SEO integrations on the Integrations screen (#143) by @ifahimreza in #144
• fix: name the WooCommerce integration row (#146) by @ifahimreza in #147
• fix: authorize every read against its target object (#148) by @ifahimreza in #149
• chore: drop the unreachable duplicates in denial_reason() (#151) by @ifahimreza in #152
• feat(admin): Saddle Violet, a flat rail, and a Dashboard that leads with a sentence (#153) by @ifahimreza in #154
• fix(mcp): answer a notification 202 on whichever transport served it (#155) by @ifahimreza in #156
• feat(admin): move the brand accent to #DA5CC7 (#157) by @ifahimreza in #158
• fix(log): authorize the change history against its objects (#150) by @ifahimreza in #160
• docs(wporg): answer round 2 where a re-scan reads it (#161) by @ifahimreza in #162
• docs: session log for the wp.org round-2 close-out by @ifahimreza in #163
• test: switch to a classic fixture theme instead of assuming one (#145) by @ifahimreza in #164
• fix(oauth): advertise offline_access without letting it touch the tier clamp (#159) by @ifahimreza in #165
• docs: roadmap reset and a current ChatGPT section (#166) by @ifahimreza in #167
• ci(release): one tag deploys the .org build to WordPress.org SVN (#176) by @ifahimreza in #177

Full Changelog: v0.10.0...v1.0.0