Releases CLI

Search results now include an AI-scored importance field (1–5) in JSON output, with the TTY table marking high-importance hits. Added a TLS certificate verification hint and custom-CA documentation for proxy environments.

Removed the deprecated get_source_changelog MCP tool, replaced by get_catalog_entry with changelog params. Search now supports --category and --collection filters, and the release importance score is surfaced in tail/latest output.

Local stdio MCP bridge's get_catalog_entry tool now accepts changelog parameters to inline a source entry's CHANGELOG in the same call, matching the hosted server. The standalone get_source_changelog tool is deprecated. Also added releases admin release refetch command and consolidated agent skills by moving operator skills to the backend monorepo.

Fixed overview stale warning to use content write time (updatedAt) instead of original generation time, so amended overviews no longer appear months-old when recently rewritten.

New releases json export <org> command generates a releases.json v2 domain manifest from a tracked org by reconstructing it from the registry via the backend GET /v1/orgs/:slug/manifest endpoint. Output prints to stdout (pipeable into releases json validate -) or writes to a file with -o/--output. Bumps @buildinternet/releases-api-types to ^0.41.0 to support product-level tags in manifests.

The releases json validate <domain> command now validates live against the registry's listing endpoint and returns the materialization plan (identity, products, release locators with classification). Exit code 0 for valid, 1 for invalid or check failed. Added --url flag to releases admin release update to set or clear a release's canonical URL, and new stub-tier org verbs: create-stub, create-stub-from-domain, and promote with --dry-run support.

Added releases json validate <path> to validate a releases.json v2 owner manifest against the published schema before publishing, with support for file paths, stdin, and machine-readable JSON output. Upgraded to @buildinternet/releases-api-types 0.37.0 and migrated the repo-root releases.json to v2 manifest format.

Removed the releases admin overview batch command whose API route was retired. Added releases admin org update --overview-cadence to pin an org's automated overview-regen cadence (1–90 days) or clear back to the velocity-tiered automatic default; releases admin org get now shows the override when set.

API error messages are now decoded through the published decodeApiError function from api-types instead of a hand-rolled reader, standardizing wire-shape handling across the SDK. Behavior is unchanged for nested, legacy flat, and malformed payloads.

Fixed a bug where non-2xx API responses surfaced generic status text instead of the server's actual error message. The CLI now reads from the standardized nested error envelope with fallback to the legacy flat body format.

Added --auto-generate-content / --no-auto-generate-content to releases admin org update, replacing the raw API call previously needed to toggle AI overviews and per-release summaries. Also surfaces current value in releases admin org get and shows an opted_out action in releases admin overview plan for orgs the batch skips.

The releases webhook add and edit commands now support --format slack to deliver releases as formatted Slack messages via a Slack incoming webhook URL.

All dry-run --json outputs now carry a uniform dryRun: true marker, and --fields projections mask --json output down to a dot-notation field list for token savings. --page-all streams list readers as NDJSON, and --input accepts raw JSON payloads for source mutations. Plus structured --json errors and a fix for streaming output hanging when piping to head.

New user-facing releases webhook commands let users manage webhooks directly via CLI, including list, add, show, edit, remove, test, rotate-secret, and deliveries. Patch adds --product, --type, and --clear-* filter flags to webhook add and edit commands for per-event filtering.

Bulk release delete and suppress are now available via releases admin release with multiple IDs or file input. Trace IDs are constrained to safe path segments, credential file ACLs are restricted on Windows, and transport errors include endpoint context. A one-line account nudge appears on the bare landing screen when no credential is configured.

Fixed releases admin source fetch to no longer silently drop a source identifier when combined with --org, matching the behavior of releases latest. Releases import now dedups org accounts on the exact (platform, handle) pair instead of platform alone. Added releases admin source show to inspect a single source's config.

The release reader ergonomics for get, latest/tail, and list commands have been improved. The README has been trimmed to a leaner npm landing page.

New commands allow users to follow organizations and products to personalize their release feed timeline. Also added releases source fetch --dry-run to probe a single source without writing to D1 or dispatching the managed agent.

Adds releases admin webhook commands for managing outbound webhook subscriptions, wrapping the /v1/webhooks API routes. Renames local stdio MCP server tools to mirror hosted server names: search_releases to search, and list_sources + list_products to list_catalog.

The CLI now includes verbs to register and manage OAuth clients, including create, list, get, disable, enable, rotate-secret, and delete operations. New verbs also allow for setting, getting, and listing user roles, with options for managing read, curator, and admin privileges.