v0.267.0

0.267.0 (2026-08-03)

Features

• add a GitHub Pages docs site with a demo for every command (#49) (eae7b78)
• cli: complete enumerated flag values and model IDs (#110) (ceab261)
• cli: trace resolved config and API exchanges under --debug (#93) (c64da16)
• default stores get to the active store and clarify two flag names (#111) (d617212)
• playground: label nav tabs with their digit keys (#87) (b6dfe0c)
• playground: server-side /read tuple filter, shared with the CLI (#82) (c1a309a)
• profiles: manage gateway headers from the CLI (#109) (ab3d131)
• query,stores: add --jq, --header, stores list --name and batch-check context (#96) (540cfd1)
• query,tuples: add --consistency to read commands (#72) (1a0e156)
• query: add list-relations (#73) (5c54673)
• release: ship completions and man pages, document release verification (#92) (54603ed)
• tuples: CSV/YAML/JSONL bulk formats, continue-on-error writes, --failed-file, parallelism (#71) (9080355)
• tuples: stream read output, add --output-file and changelog cursors (#94) (9119ec7)
• version: report the embedded OpenFGA server version (#55) (dac7afd)

Bug fixes

• api: apply --jq to ofga api responses (#104) (3d89988)
• assertions: reject unknown fields in assertion files (#101) (feb7402)
• ci: isolate keyring state so the test recipe is safe to run locally (#79) (b67c7d1)
• cli: correct misleading version label and close sanitization gaps (#90) (261f590)
• client: retry 5xx only on idempotent requests (#61) (e50b751)
• client: validate the store ID only when a command needs one (#105) (cbc3e77)
• clierr: classify usage errors structurally instead of by substring (#63) (1042129)
• cli: handle SIGTERM gracefully and report partial commits on cancel (#62) (6e0e3f2)
• cli: honor grouped and negated debug shorthands (#108) (2af17f8)
• cli: redact gateway credentials in debug traces (#103) (174254d)
• cli: report invalid flag values as usage errors (#106) (b1e03c8)
• cli: write output files atomically (#99) (f4457f2)
• config: warn on every command when the config file is corrupt (#59) (fdf3743)
• playground: cancel superseded requests instead of letting them run out (#68) (cb9e304)
• playground: changes pane shows latest activity and refreshes after writes (#60) (bdcfbae)
• playground: correct mouse hit-testing for lists and wrapped tabs (#102) (b7f29cf)
• playground: hoist enterQueryEdit out of its value-receiver returns (#89) (1026c95)
• playground: input robustness — focus preservation, modal wheel gating, defined eval order (#65) (3e3e6ea)
• playground: redraw after the terminal clears the screen behind us (#84) (935a342)
• playground: stop printing ? on every nav tab without a Nerd Font (#86) (8a5fd17)
• profiles: OAuth field auto-switch and env-aware active marker (#64) (4e25493)
• query: batch-check works past 50 checks and surfaces per-item errors (#57) (b900087)
• stores: create --use honors profile overrides and reports save failures (#58) (8579611)
• test: isolate config in the tests #62 and #69 reintroduced (#77) (7cc3126)
• test: repair main — staticcheck-on-tests and macOS config isolation (#76) (86bb63e)
• tuples: advance the changelog cursor on exact page boundaries (#100) (32dc572)
• tuples: reject bulk-only flags on single-tuple writes (#107) (38d698a)
• tuples: support ABAC conditions and reject unknown bulk-file fields (#56) (9ee3126)

Tests

• playground: stop waiting on a 12s toast timer (#95) (0888a4c)
• tuple,assertions: cover the bulk write path and the assertion runner (#69) (2e9452b)

Documentation

• correct the --jq store example and document test exit codes (#112) (8871e19)
• restructure README into docs/guide and add a command GIF gallery (#46) (0b51e29)

Changelog

• 8516686 chore(main): release 0.267.0 (#48)
• 99e649c chore(deps): lock file maintenance (#113)
• 22cc5be chore(deps): update dependency astro to v7.1.6 (#97)
• 141273d chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.1 (#98)
• 8871e19 docs: correct the --jq store example and document test exit codes (#112)
• d617212 feat: default stores get to the active store and clarify two flag names (#111)
• ceab261 feat(cli): complete enumerated flag values and model IDs (#110)
• ab3d131 feat(profiles): manage gateway headers from the CLI (#109)
• 2af17f8 fix(cli): honor grouped and negated debug shorthands (#108)
• 38d698a fix(tuples): reject bulk-only flags on single-tuple writes (#107)
• b1e03c8 fix(cli): report invalid flag values as usage errors (#106)
• cbc3e77 fix(client): validate the store ID only when a command needs one (#105)
• 3d89988 fix(api): apply --jq to ofga api responses (#104)
• 174254d fix(cli): redact gateway credentials in debug traces (#103)
• b7f29cf fix(playground): correct mouse hit-testing for lists and wrapped tabs (#102)
• feb7402 fix(assertions): reject unknown fields in assertion files (#101)
• 32dc572 fix(tuples): advance the changelog cursor on exact page boundaries (#100)
• f4457f2 fix(cli): write output files atomically (#99)
• 4cd800a chore(deps): update dependency astro to v7.1.5 (#91)
• 540cfd1 feat(query,stores): add --jq, --header, stores list --name and batch-check context (#96)
• 0888a4c test(playground): stop waiting on a 12s toast timer (#95)
• 9119ec7 feat(tuples): stream read output, add --output-file and changelog cursors (#94)
• c64da16 feat(cli): trace resolved config and API exchanges under --debug (#93)
• 54603ed feat(release): ship completions and man pages, document release verification (#92)
• 261f590 fix(cli): correct misleading version label and close sanitization gaps (#90)
• 6503980 chore(deps): update dependency @astrojs/starlight to v0.41.5 (#88)
• 1026c95 fix(playground): hoist enterQueryEdit out of its value-receiver returns (#89)
• 8a5fd17 fix(playground): stop printing ? on every nav tab without a Nerd Font (#86)
• 11c7bc4 chore(deps): update dependency astro to v7.1.4 (#85)
• b6dfe0c feat(playground): label nav tabs with their digit keys (#87)
• 66e6ef0 chore(deps): update github/codeql-action action to v4.37.4 (#83)
• 935a342 fix(playground): redraw after the terminal clears the screen behind us (#84)
• c1a309a feat(playground): server-side /read tuple filter, shared with the CLI (#82)
• 38d5d35 chore(deps): update docker/login-action action to v4.6.0 (#80)
• 8aab2eb chore(deps): update module google.golang.org/grpc to v1.83.0 (#81)
• b67c7d1 fix(ci): isolate keyring state so the test recipe is safe to run locally (#79)
• d1b6f38 chore(deps): update dependency goreleaser/goreleaser to v2.17.1 (#66)
• 7aae30c chore(deps): update docker/login-action action to v4.5.2 (#75)
• a5e19f0 chore(deps): lock file maintenance (#67)
• 46c7965 chore(deps): update dependency anchore/syft to v1.50.0 (#78)
• 1a0e156 feat(query,tuples): add --consistency to read commands (#72)
• e50b751 fix(client): retry 5xx only on idempotent requests (#61)
• b900087 fix(query): batch-check works past 50 checks and surfaces per-item errors (#57)
• fdf3743 fix(config): warn on every command when the config file is corrupt (#59)
• 9080355 feat(tuples): CSV/YAML/JSONL bulk formats, continue-on-error writes, --failed-file, parallelism (#71)
• 7cc3126 fix(test): isolate config in the tests #62 and #69 reintroduced (#77)
• 2e9452b test(tuple,assertions): cover the bulk write path and the assertion runner (#69)
• 6e0e3f2 fix(cli): handle SIGTERM gracefully and report partial commits on cancel (#62)
• 9ee3126 fix(tuples): support ABAC conditions and reject unknown bulk-file fields (#56)
• cb9e304 fix(playground): cancel superseded requests instead of letting them run out (#68)
• 86bb63e fix(test): repair main — staticcheck-on-tests and macOS config isolation (#76)
• bdcfbae fix(playground): changes pane shows latest activity and refreshes after writes (#60)
• 3e3e6ea fix(playground): input robustness — focus preservation, modal wheel gating, defined eval order (#65)
• 4e25493 fix(profiles): OAuth field auto-switch and env-aware active marker (#64)
• 1042129 fix(clierr): classify usage errors structurally instead of by substring (#63)
• 8579611 fix(stores): create --use honors profile overrides and reports save failures (#58)
• 37f6fcb ci(lint): enable errcheck, gosec and staticcheck-on-tests, and schedule govulncheck (#70)
• 0a84601 ci: test on macOS, and make config isolation work there (#74)
• 5c54673 feat(query): add list-relations (#73)
• dac7afd feat(version): report the embedded OpenFGA server version (#55)
• 00ae83d chore(deps): update docker/login-action action to v4.5.1 (#54)
• 3657135 chore(deps): update github.com/openfga/api/proto digest to 6981fff (#53)
• 5560b97 chore(deps): update github-actions (#52)
• e9b0792 chore(deps): update dependency sharp to ^0.35.0 (#50)
• e324b83 chore(deps): update github-actions (major) (#51)
• eae7b78 feat: add a GitHub Pages docs site with a demo for every command (#49)
• 0b51e29 docs: restructure README into docs/guide and add a command GIF gallery (#46)
• 819ff1b chore(deps): update github/codeql-action action to v4.37.3 (#47)
• 8dc5f52 chore(deps): update dependency anchore/syft to v1.49.0 (#45)
• fe934f0 chore(deps): update github/codeql-action action to v4.37.2 (#44)