npx @buildinternet/releases get releases-cliUnified feedback, submit, and keys command network calls onto the shared apiFetch transport, adding an opt-in skipDefaultAuth flag so keys' session-token Authorization header isn't overwritten by a configured admin/API key. Error messages, idempotency, and command output are unchanged.
Effectful write requests (feedback submit, webhook create/rotate-secret/test, API-key mint) now send an Idempotency-Key header, so retries after network failures replay the original response instead of double-submitting. Reusing a key with a different payload returns a clear idempotency_conflict message instead of a raw 409.
getApiUrl() no longer memoizes the API base URL process-wide, fixing a test isolation bug that caused 22 failing tests under bun test. The releases stats command now reads the server's real values instead of returning zeroed-out fields, and source backfill --dry-run reports how much history is not yet stored.
Search results now include an AI-scored importance field (1–5) in JSON output, with the TTY table marking high-importance hits. Added a TLS certificate verification hint and custom-CA documentation for proxy environments.
Removed the deprecated get_source_changelog MCP tool, replaced by get_catalog_entry with changelog params. Search now supports --category and --collection filters, and the release importance score is surfaced in tail/latest output.
Local stdio MCP bridge's get_catalog_entry tool now accepts changelog parameters to inline a source entry's CHANGELOG in the same call, matching the hosted server. The standalone get_source_changelog tool is deprecated. Also added releases admin release refetch command and consolidated agent skills by moving operator skills to the backend monorepo.
Fixed overview stale warning to use content write time (updatedAt) instead of original generation time, so amended overviews no longer appear months-old when recently rewritten.
New releases json export <org> command generates a releases.json v2 domain manifest from a tracked org by reconstructing it from the registry via the backend GET /v1/orgs/:slug/manifest endpoint. Output prints to stdout (pipeable into releases json validate -) or writes to a file with -o/--output. Bumps @buildinternet/releases-api-types to ^0.41.0 to support product-level tags in manifests.
The releases json validate <domain> command now validates live against the registry's listing endpoint and returns the materialization plan (identity, products, release locators with classification). Exit code 0 for valid, 1 for invalid or check failed. Added --url flag to releases admin release update to set or clear a release's canonical URL, and new stub-tier org verbs: create-stub, create-stub-from-domain, and promote with --dry-run support.
Added releases json validate <path> to validate a releases.json v2 owner manifest against the published schema before publishing, with support for file paths, stdin, and machine-readable JSON output. Upgraded to @buildinternet/releases-api-types 0.37.0 and migrated the repo-root releases.json to v2 manifest format.
Removed the releases admin overview batch command whose API route was retired. Added releases admin org update --overview-cadence to pin an org's automated overview-regen cadence (1–90 days) or clear back to the velocity-tiered automatic default; releases admin org get now shows the override when set.
API error messages are now decoded through the published decodeApiError function from api-types instead of a hand-rolled reader, standardizing wire-shape handling across the SDK. Behavior is unchanged for nested, legacy flat, and malformed payloads.
Fixed a bug where non-2xx API responses surfaced generic status text instead of the server's actual error message. The CLI now reads from the standardized nested error envelope with fallback to the legacy flat body format.
Added --auto-generate-content / --no-auto-generate-content to releases admin org update, replacing the raw API call previously needed to toggle AI overviews and per-release summaries. Also surfaces current value in releases admin org get and shows an opted_out action in releases admin overview plan for orgs the batch skips.
The releases webhook add and edit commands now support --format slack to deliver releases as formatted Slack messages via a Slack incoming webhook URL.
All dry-run --json outputs now carry a uniform dryRun: true marker, and --fields projections mask --json output down to a dot-notation field list for token savings. --page-all streams list readers as NDJSON, and --input accepts raw JSON payloads for source mutations. Plus structured --json errors and a fix for streaming output hanging when piping to head.
New user-facing releases webhook commands let users manage webhooks directly via CLI, including list, add, show, edit, remove, test, rotate-secret, and deliveries. Patch adds --product, --type, and --clear-* filter flags to webhook add and edit commands for per-event filtering.
Bulk release delete and suppress are now available via releases admin release with multiple IDs or file input. Trace IDs are constrained to safe path segments, credential file ACLs are restricted on Windows, and transport errors include endpoint context. A one-line account nudge appears on the bare landing screen when no credential is configured.
Fixed releases admin source fetch to no longer silently drop a source identifier when combined with --org, matching the behavior of releases latest. Releases import now dedups org accounts on the exact (platform, handle) pair instead of platform alone. Added releases admin source show to inspect a single source's config.
The release reader ergonomics for get, latest/tail, and list commands have been improved. The README has been trimmed to a leaner npm landing page.
