v0.3.0 — Beta Release

v0.3.0 — public app release candidate

This release turns the validated Nextcloud provider core into a production-deployment and OpenAI
review candidate while preserving the separation between bridge identity and Nextcloud credentials.

Highlights

• OAuth-protected stateless universal MCP application
• isolated multi-user identity, connection, profile, and encrypted credential stores
• Nextcloud Login Flow v2 without password collection
• DNS-rebinding-resistant HTTPS egress and network-isolated Docker composition
• rate limits, request limits, trusted hosts, security headers, health, migrations, and maintenance
• exact public-endpoint release preflight
• complete hosted tool contracts and reviewer cases
• Codex plugin package, original project artwork, and public landing-site source

Compatibility

The unchanged WebDAV/OCS provider core has passed live read, write, move, download, and cleanup
validation against Nextcloud 33.0.7, including the extended app/share/household flow. Native
Nextcloud Context Agent MCP was unavailable, so that run exercised the intended standards fallback.

Release boundary

This tag publishes source and reproducible artifacts. It does not activate a public hosted service,
claim OpenAI approval, or include production credentials. Real OAuth, domains, operator policies,
reviewer accounts, domain verification, and OpenAI review remain deliberate deployment actions.

See submission/FINAL_CHECKLIST.md for the exact handoff.

v0.2.0 — Developer Release

Nextcloud ChatGPT Bridge v0.2.0

v0.2.0 adds the first household workflow and safe Nextcloud app-access layer to the existing
multi-user MCP bridge.

Highlights

• Tenant-scoped household profiles tied to owned Nextcloud connections.
• Idempotent household invoice workspace setup below each connection's configured root.
• Bounded local review of PDF, UTF-8 text and XML invoices.
• Structured consistency checks and immutable redacted JSON reports keyed by file SHA-256.
• Root-bound recursive filename search and redacted read-only share inventory.
• User-visible Nextcloud app and search-provider discovery without administrator APIs.
• PostgreSQL migration v2 for non-secret household profile metadata.

Existing hosted v0.1 databases must apply only nextcloud-chatgpt-schema --version 2 before the
v0.2 service starts. Fresh databases apply the default ordered output containing migrations 1 and 2.

Safety boundary

The bridge does not approve, book, pay, transmit or automatically archive invoices. It never
returns raw extracted invoice text, complete IBANs, Nextcloud credentials, share tokens or public
share URLs. Image-only documents and scanned PDFs require an explicitly configured future OCR or
vision adapter and remain in manual review.

Validation

• 100 automated tests passed with 82% statement coverage; Ruff and dependency consistency passed.
• The resolved runtime dependencies passed pip-audit with no known vulnerabilities.
• Wheel and source archive passed twine check; a clean wheel installation verified version 0.2.0,
  all three command-line entry points and PostgreSQL migrations 1 and 2.
• The built wheel is installed into a clean environment and all command-line entry points plus
  both PostgreSQL migrations are verified.
• The final clean-installed wheel passed the live Nextcloud 33.0.7 acceptance run for OCS/WebDAV,
  write cleanup, app inventory, root-bound shares and the isolated synthetic household workflow.
• Native Context Agent MCP may be unavailable; WebDAV/OCS remains the supported fallback path.

Scope and limitations

This remains a developer/self-hosted release, not an internet-facing public multi-tenant service.
The public plugin still requires production hosting, infrastructure-enforced egress policy,
rate/abuse controls, privacy and legal endpoints, operational monitoring, reviewer credentials,
domain verification and end-to-end ChatGPT/Codex OAuth acceptance.

Planned v0.2.1 work adds optional OCR/vision and stronger electronic-invoice support. Planned
v0.3.0 work adds CalDAV/CardDAV and modular Nextcloud app providers while completing public
plugin submission readiness. See docs/ROADMAP.md.

v0.1.0 — Developer Release

Nextcloud ChatGPT Bridge v0.1.0

v0.1.0 is the first installable developer release of the MCP-first Nextcloud bridge.

Highlights

• Real Nextcloud 33.0.7 validation through the WebDAV/OCS fallback path.
• Bounded file listing, metadata, text/binary transfer, folder creation, move and delete tools.
• OAuth/OIDC-protected hosted MCP foundation with request-scoped bridge identities.
• Nextcloud Login Flow v2 connection lifecycle without collecting the user's main password.
• Tenant-scoped metadata plus encrypted PostgreSQL credential storage.
• Packaged PostgreSQL migration and automated, checksum-producing release build.

Validation

• 85 automated tests passed with 82% statement coverage.
• Ruff lint passed.
• The built wheel and source archive passed twine check; a clean wheel installation verified all
  three command-line entry points and the packaged PostgreSQL migration.
• The resolved release environment passed the dependency audit with no known vulnerabilities.
• A live write test against Nextcloud 33.0.7 passed OCS, WebDAV read, upload, download, move,
  metadata and cleanup checks.
• Native Context Agent MCP was not available on the validated instance; the designed fallback
  path passed.

Scope and limitations

This is a developer/self-hosted source release, not a production public ChatGPT service. Do not
expose the development HTTP transport directly to the internet. A public multi-tenant deployment
still requires infrastructure-enforced outbound network policy, rate limits, audit/privacy and
retention controls, production monitoring, managed key operations and end-to-end OAuth validation.

See SECURITY.md and docs/AUTH_ARCHITECTURE.md before deploying hosted mode.