v0.5.35

• Support Home Assistant response services through the operator service adapter by requesting return_response for todo.get_items.
• Verify and expose exact to-do item details without bypassing the gateway approval, allowlist, idempotency and audit flow.
• Add regression coverage for response-service transport parameters and shopping-list service targets.

v0.5.34

• Pin Stable and Edge runtime images to python:3.12-slim-bookworm to avoid floating base-image vulnerability drift.
• Rebuild release images with the corrected Debian base before the Trivy gate.

v0.5.32

• Align the production frontend with Home Assistant visual tokens, typography, surfaces, tabs and semantic button geometry across the application and shared UI primitives.
• Add the embedded Edge-only Storybook catalog with reusable production primitives, responsive stories and visual/UX contracts.
• Harden the embedded catalog security boundary with same-origin framing and narrowly scoped Storybook CSP while retaining strict headers for normal routes.
• Add explicit operator service and automation controls with global policy ceilings, per-client grants, approval gates, idempotency and audit-safe execution.
• Publish Stable and Edge from main, with Stable on host port 18099 and Edge on host port 18100.

v0.5.31

• Align the frontend shell with the documented Home Assistant visual line: remove decorative dot-field/gradient/glassmorphism effects, use solid surfaces, moderate card elevation, medium-radius controls, and semantic spacing tokens.
• Change responsive client and audit presentations to switch at the content breakpoint of 900px instead of 1600px.
• Refresh deterministic visual baselines and UX contracts for light/dark, reduced motion, responsive geometry, and static-shell behavior.

v0.5.30

• Prevent client mutations from waiting for the full gateway bootstrap before updating the UI.
• Isolate busy states for clients, policy, discovery, and development operations.
• Add lightweight client refresh and regression coverage for slow bootstrap endpoints and stale mutation ordering.

v0.5.29

• Keep revoked client tokens permanently unauthorized through the explicit revoke lifecycle.
• Add permanent client deletion after revocation, with a destructive confirmation and DELETE /api/clients/{client_id}.
• Add backend, SQLite, frontend, i18n, and Playwright coverage for revoke-versus-delete behavior.

v0.5.28

• Update stale bootstrap regression expectations to assert the localized Ready status instead of the internal ready code.

v0.5.27

• Translate the initial storage readiness status through the shared status catalog, showing Listo instead of the internal ready code in Spanish.
• Add Playwright coverage for the localized initial storage status.

v0.5.26

• Fix gateway bootstrap validation for successful health checks whose diagnostic code is correctly returned as null.
• Add runtime coverage for the live health-check response shape so valid Home Assistant readiness data is accepted by the frontend.

v0.5.25

• Harden frontend HTTP contracts by validating operator policy save responses and normalizing malformed JSON responses as stable gateway errors.
• Propagate abort signals through the frontend controller and port boundaries for client mutations, preventing obsolete requests and bootstraps from overwriting current state.
• Add deterministic runtime and Playwright coverage for autosave recovery, physical mutation cancellation and late stale responses.
• Document the frontend concurrency and contract-testing boundaries.