authsome: v0.4.2

0.4.2 (2026-05-25)

Features

• add device flow verification fields to auth schemas and CLI JSON output (c24779c)
• auto-create env handle identities (72e1b35)
• env backed identity design (e1662b5)
• improve copy-to-clipboard functionality with browser fallback and UI feedback (02daa81)
• restructure CLI commands under provider and admin namespaces (7b4b31a)
• restructure CLI commands under provider and admin namespaces (a326e3f)
• simplify Client ID label and implement robust cross-browser copy-to-clipboard logic (d763f7f)

Bug Fixes

• expose actionable session details in login --json (87ae0b7)
• normalize cli error handling for json output (fb2754b)
• update daemon process command to include admin subcommand (7855c77)

authsome: v0.4.1

0.4.1 (2026-05-25)

Features

• enable provider configuration management for hosted admins with required credential inputs and scope persistence (e26d584)
• enable provider configuration management for hosted admins with… (30b2f8a)

Bug Fixes

• rename AUTHSOME_ADMIN_PRINCIPLES environment variable to fix typo (10f17f4)

authsome: v0.4.0

0.4.0 (2026-05-25)

⚠ BREAKING CHANGES

• Create version 0.4 which adds support for principal, identity, vault key loading precedence and many more fixes

Features

• ClaimStatus lifecycle, vault_id gating, ADR 0003 alignment (d8553ba)
• Cleanup server routes (225d7fd)
• disable analytics automatically when running under pytest and add verification tests (d1abc48)
• implement HostedAccountService for email/password authentication and JWT session management (c161ab9)
• implement master key rotation via rekey command and API endpoint (f78f872)
• implement opt-out telemetry support via environment variables and add associated documentation and tests (9d7c88f)
• implement opt-out telemetry support via environment variables and add associated tests (1c1554c)
• implement vault rekey functionality with encryption source validation and add corresponding API and unit tests. (e7f4187)
• login flow (e0ea86d)
• scope connections to vault, add claim flow and principal concept (d3f2006)

Bug Fixes

• correct import path and test fixture for ready endpoint (3951af8)
• deduplicate error class name in daemon responses and stop orphaned daemon (76e2320)
• improve whoami robustness by handling connection failures gracefully and isolating keyring tests (83709f4)

Documentation

• add dedicated Hermes Agent integration page, drop stale Hermes refs (b7297dd)
• add dedicated Hermes Agent integration page, drop stale Hermes refs (e12082f)
• add hosted UI auth and identity claim design spec (e552805)
• fix CONTEXT.md dependency graph and direction (17fff13)
• make auth/ a leaf module, move AuthService to server/ (d92611c)
• resolve merge conflicts in UBIQUITOUS_LANGUAGE.md (48229eb)
• rewrite CONTEXT.md with module boundaries, create TODOS.md (c7a1629)
• rewrite login and proxy sections in manual-testing guide (3719d13)
• update architecture language, retire Profile, add Principal/Vault/Claim terms (8dc663e)

Code Refactoring

• Create version 0.4 which adds support for principal, identity, vault key loading precedence and many more fixes (bb5a2a6)

authsome: v0.3.2

0.3.2 (2026-05-20)

Features

• Add posthog telemetry events (575a464)
• Add posthog telemetry events (8797a94)
• evals: /run-evals command + profile/run-dir flags (bdeae58)
• evals: add expected_interrupt and next_turn_instruction eval fields (c4b2a93)
• evals: capture real claude transcripts via stream-json subprocess (1b28f5a)
• evals: move new evals schema to evals/evals.json, restore skills copy (5bb73ba)
• evals: profile isolation + authsome state check per eval (73d3e70)
• proxy: configurable intercept scope and unmatched policy (987e312)
• update health check to validate connections based on active identity and add test coverage (9290169)
• update health check to validate connections based on active identity and add test coverage (3fa9f97)

Bug Fixes

• copy full skill folder in evals and fix login flow links in authsome skill (e8918a9)
• evals: use claude --system-prompt for judge, grade on rate limit (b790c63)
• evals: use hermes as LLM judge instead of claude -p (1157837)
• marketplace: point plugin homepage to authsome.ai (11ffd80)
• marketplace: point plugin homepage to authsome.ai (a767cbc)
• proxy: address PR review feedback on mode validation and route defaults (83ab469)

Documentation

• add GitHub OAuth app setup walkthrough to quickstart (f45d9c9)
• add Roadmap, Contributing, and Links sections to README (07534a4)
• add Roadmap, Contributing, and Links sections; rewrite roadmap.mdx (03990b2)
• correct roadmap against changelog as source of truth (eec08e3)
• evals: add hermes smoke test to pre-session setup (bc4ef39)
• evals: add skip handling and per-eval max_turns config (68ae0ed)
• evals: merge setup.md into run-evals command, delete setup.md (072836f)
• evals: remove profile creation from run-evals command (33ab525)
• evals: update design spec and plan to reflect as-built state (2558f5c)
• mark policy layer and firewall rules as shipped, add multi-user to coming next (b1487e8)
• quickstart: add provider tabs and a runnable agent example (7c577ab)
• quickstart: GitHub OAuth setup walkthrough and provider tabs (63ffdec)
• reframe roadmap as end-user capabilities, not implementation work (0740764)
• rewrite profile storage model to match current architecture (457d1b2)
• rewrite profile storage model to match current architecture (773323a)
• rewrite roadmap.mdx, remove ROADMAP.md, link README to docs (a165d37)
• simplify hosted daemon mode description in roadmap (5458bf6)
• site: adopt skill-driven CLI conventions across the docs (8ba6967)
• site: adopt skill-driven CLI conventions across the docs (71b89fd)

authsome: v0.3.1

0.3.1 (2026-05-17)

Bug Fixes

• cli: resolve three CLI bugs and improve audit log command (3b990e3)
• cli: resolve three CLI bugs, improve audit log, and sync docs (dd9cad3)

Documentation

• cli: sync reference and manual-testing guide with 0.3.0 implementation (bdf659f)

authsome: v0.3.0

0.3.0 (2026-05-15)

⚠ BREAKING CHANGES

• unify Identity and Profile; remove profile management layer
• Existing implicit default-profile installs must run authsome init again; profile:default credentials are not migrated.

Features

• add --reload flag to daemon serve command and replace custom file watcher (8fea50e)
• add --reload flag to daemon serve command and replace custom file watcher with uvicorn native reload (2faa3c9)
• add audit logging for proxy request injection and resolution misses (6766c0e)
• add audit logging for proxy request injection and resolution misses, and include pytest-asyncio dependency. (0afaf87)
• add copy-to-clipboard functionality to OAuth Redirect URI and update UI layout and styling (0e1aa31)
• add did pop daemon authorization (7ad14f6)
• add DID PoP daemon authorization (dca2246)
• add RFC 7009 token revocation support to BaseFlow and integrate into Auth service (74b96a3)
• add RFC 7009 token revocation support to BaseFlow and integrate into Auth service (7af96fc)
• cli: add import-env for headless API key ingestion (bc318ff)
• cli: add import-env for headless API key ingestion (e080286)
• cli: add scan command for env provider detection (9f9b8d4)
• cli: add scan command for env provider detection and optional import (9dee261)
• display OAuth redirect URI in auth UI and improve CLI command documentation and validation (878461b)
• display OAuth redirect URI in auth UI and improve CLI command documentation and validation (a0d72aa)
• enhance system health checks with permission, integrity, and key rotation monitoring (dede72a)
• expand doctor checks (97afd37)
• expand doctor checks (03ad70f)
• expand health checks with integrity, permission, and rotation w… (0956ef1)
• expand health checks with integrity, permission, and rotation warnings and update CLI UI to support warn status (c885067)
• global client credentials (aa6aa56)
• global client credentials (747b48f)
• implement auto-restart for daemon when source files are modified during development (6fd7a6b)
• implement centralized audit logging and refactor duration formatting utility (f9b5b89)
• implement hosted UI session management and multitenant provider visibility policy (9ed0714)
• implement hosted UI session management and multitenant provider… (c482817)
• implement local client profile management and update error handling for session authentication (46a981a)
• introduce parse_store_key utility and integrate into service for robust key parsing (87b65e7)
• introduce parse_store_key utility and integrate into service for robust key parsing (78ac38c)
• make provider client credentials a global property of hosted deployment (be78393)
• move OAuth2 refresh token logic to BaseFlow and update service to use flow-specific handlers (9b0366d)
• move OAuth2 refresh token logic to BaseFlow and update service to use flow-specific handlers (77b07d0)
• require server-registered identities (019bdd1)
• server store cleanup (ec06181)
• stabilize and document specific CLI exit codes for error states (9f40cc6)
• standardize CLI exit codes and add comprehensive documentation for error states (8024433)
• standardize CLI JSON output format with versioning (c1c4fec)
• standardize CLI JSON output format with versioning and stable schema fields (933d106)

Bug Fixes

• client secret field made default (3929b86)
• client secret field made default (e3a4939)
• correct daemon health check logic to properly validate client status and readiness (e92bdad)
• docs: repoint canonical to authsome.ai and drop dead links (459259e)
• docs: repoint canonical to authsome.ai and drop dead links (c97c1af)
• docs: unwrap call-graph diagram from Frame component (bd28b9c)
• docs: unwrap call-graph diagram from Frame component (4d8e548)
• modify return type of _request function in cli client (d7ddb2e)
• prevent accidental termination of unrelated processes by validat (f6b2f30)
• prevent accidental termination of unrelated processes by validating daemon PID against local lock record during shutdown (c25fe9c)
• proxy: add mitmproxy CA to macOS keychain for Go tool TLS compatibility (145734a)
• proxy: add mitmproxy CA to macOS keychain for Go tool TLS compatibility (c9a9842), closes #234
• refactoring (cbf3a40)
• remove redundant flexbox properties from summary element styling (8fc0b32)
• save library version in client config (5f52807)
• update vault storage to use collection-scoped path in _save_provider_state (c9eba5b)
• warn when token refresh fails (627d579)

Reverts

• expand health checks with integrity, permission, and rotation w… (6090d69)

Documentation

• add API call constraints and troubleshooting guide to SKILL.md (8313a27)
• readme: add codecov badge and star history chart ([373a4a8](373a4a80e...

authsome: v0.2.4

0.2.4 (2026-05-08)

Features

• add dashboard UI (9296d68)
• add python-multipart dependency, update CLI table styling, and refine provider error messaging (5d6f393)
• add python-multipart dependency, update CLI table styling, and refine provider error messaging. (e2a9d3d)
• add support for custom server base URLs (2fde0fd)
• add support for customizable home directory and exit after printing JSON output (cc2d830)
• add support for customizable home directory and exit after printing JSON output (705a358)
• add support for hosted daemon deployments via AUTHSOME_SERVER_BASE_URL and AUTHSOME_DAEMON_URL configuration. (0af4b01)
• added an interractive dashboard (3867a96)
• added support for notion dcr (cd960f3)
• added support for notion dcr (11ea590)
• allow header_prefix to be null in API key provider (bbfc8f8)
• allow header_prefix to be null in API key provider (74771c4)
• client server architecture (WIP - do not merge) (bf548e1)
• green themed UI (a826498)
• implement custom error handling and propagation between daemon server and CLI client (f536edb)
• introduce working implementation of client server architecture with session management. Refactor profile/provider store to reside behind app store interface and implement local version of store. (a285172)
• restructure client-server daemon architecture (4bd09e0)
• ui: add interactive dashboard actions (097f62a)

Bug Fixes

• add non-interactive register confirmation flag (57745be)
• add non-interactive register confirmation flag (45c3a4b)
• added support for linear oauth (680c0d9)
• added support for linear oauth (10213c8)
• clear existing log handlers and log verbose status in setup_logging (b84747e)
• clear existing log handlers and log verbose status in setup_logging (75e7c0d)
• cli: distinct exit code for cancelled credential entry (f21047d)
• cli: distinct exit code for cancelled credential entry (09fd6bc)
• merged with develop (a5711a7)
• resolve circular import in server dependencies (006ce3f)
• ruff check fixed (65e6b6a)
• tests fix (f7bec29)
• update import path for DARK_THEME_CSS to reflect module reorganization (d97d7bf)
• updated overview tab (36c2741)
• validate provider existence before retrieving connection metadata (17580d4)
• validate provider existence before retrieving connection metadata (285f379)

Documentation

• Add design decisions for hosted version (1551eff)
• add engineering principles and AI agent guidelines (efaeced)
• expand manual testing guide to cover full CLI surface (bbe42f2)
• update CLI commands in documentation to use uvx for execution (ab8268f)
• update CLI commands in documentation to use uvx for execution (cc1030f)
• update issue reporting guidelines to require automated GitHub CLI submission (e388891)
• update issue reporting guidelines to require automated GitHub CLI submission (1f3374d)
• use GitHub user-attachments URL for demo video (a74f16f)

authsome: v0.2.3

0.2.3 (2026-05-01)

Documentation

• add demo video to README (36a9e18)
• add demo video to README (83ed25a)

authsome: v0.2.2

0.2.2 (2026-04-29)

Features

• add audit logging (e130f30)
• add JSON output support to audit log command (5ca2cd7)
• expand whoami context (2dead00)
• implement structured audit logging for CLI actions and proxy events (e33b2d5)
• migrate --no-audit option from root command to common CLI options decorator (93f4913)
• render list output as table (9ac6750)
• show connections in inspect (3c25b10)
• show expiry in list output (55aa376)
• support regex proxy host urls (a57a7de)

Bug Fixes

• added support for regex check for API keys (1da9d36)
• added support for regex check for API keys (2d8022e)
• count active providers once (8faf814)
• export all connections when provider omitted (2b5ec34)
• export all connections when provider omitted (622992f)
• harden auth proxy routing (3c3a7ad)
• harden auth proxy routing (0fd02c6)
• keep proxy routing on default connections (946576a)
• make login idempotent (cb327fa)
• prefer specific proxy route prefixes (679fa77)
• preserve connected state on refresh fallback (7c8ff9f)
• respect requested login context (2902059)
• update audit log event type and add comprehensive unit tests for AuditLogger (96b6999)
• update openai export test fixture (05bd00d)
• warn when refresh falls back to cached token (7b1af48)

authsome: v0.2.1

0.2.1 (2026-04-28)

Bug Fixes

• set connection host_url directly from resolved definition (149b347)
• set connection host_url directly from resolved definition (b8f499a)