{
  "0.5.2": {
    "date": "2026-06-11",
    "Fixed": [
      "Fixed MCP content scheduling so future post status and date metadata persist correctly.",
      "Fixed missing or roleless MCP users so they resolve to a safe read-only ability policy.",
      "Fixed MCP tool availability so OAuth scope blockers are reported before exposing tools unavailable to the connected client."
    ],
    "Improved": [
      "Added Cloudflare compatibility diagnostics for Bot Fight Mode and Flexible SSL/TLS connector issues.",
      "Updated GitHub Actions for the Node 24 runtime.",
      "Resolved an npm development dependency security alert."
    ],
    "Reliability": [
      "Added an OAuth connector smoke gate for dynamic client registration and authorization redirects.",
      "Bounded MCP PHPStan analysis into focused groups so release-readiness static analysis remains reliable."
    ]
  },
  "0.5.1": {
    "date": "2026-06-10",
    "Improved": [
      "Improved OAuth secret storage so sites without ACULECT_AI_COMPANION_ENCRYPTION_KEY automatically use a generated database-managed encryption key instead of blocking assistant authorization.",
      "Updated diagnostics to warn, not fail, when OAuth secrets are encrypted with the database-managed fallback key.",
      "Kept ACULECT_AI_COMPANION_ENCRYPTION_KEY as the strongest production option for storing the encryption key outside the database."
    ]
  },
  "0.5.0": {
    "date": "2026-06-10",
    "New": [
      "Refreshed the AI Companion admin experience with clearer navigation, connection guidance, diagnostics, activity, and changelog surfaces.",
      "Added AI Activity logging.",
      "Added role-specific MCP ability policy controls and per-user access pause controls.",
      "Added per-connection write permission controls for trusted assistants that should run write actions without confirmation blockers.",
      "Added Intelligence Layer.",
      "Added block and pattern knowledge so assistants can understand available WordPress blocks and patterns without relying on custom HTML blocks.",
      "Added settings import, export, and reset actions for safer configuration transfer and recovery.",
      "Added an authenticated MCP tool manifest export for diagnosing client-specific tool discovery differences.",
      "Added guided MCP content workflow tools for long-form post planning, draft creation, section-based post updates, and Rank Math SEO updates.",
      "Added reviewed learning suggestions so assistants can report improvement opportunities for admin review."
    ],
    "Improved": [
      "Reduced unnecessary admin payload work for tab-specific data.",
      "Removed statistics card rows from settings tabs so each screen stays focused on actions, filters, and operational state.",
      "Hardened OAuth storage maintenance so repeated dynamic client registration is bounded without blocking valid connector retries.",
      "Refined Connections and Abilities list views with tighter columns, assigned-abilities modals, access-level controls, and desktop-friendly DataViews layouts.",
      "Polished settings header spacing, tab navigation, Advanced layout, admin notices, loading states, and connector branding.",
      "Polished the connection access modal logo and form spacing.",
      "Updated workflow tool availability so workflows only appear when the required underlying global abilities, role policy, and OAuth scopes allow them."
    ],
    "Reliability": [
      "Added provider compatibility guards for Claude, ChatGPT, OpenAI, and Codex MCP tool descriptors and input schemas.",
      "Expanded cleanup coverage for full uninstall data removal.",
      "Expanded unit coverage for workflow tools, content intelligence indexing, activity logging, OAuth error handling, tool safety, and cleanup."
    ]
  },
  "0.4.0": {
    "date": "2026-05-26",
    "New": [
      "Added featured image, author, taxonomy, and supported SEO metadata controls to content workflows.",
      "Added taxonomy term image assignment for supported content groups.",
      "Expanded media workflows with media read, update, trash, attachment relationship, and safe physical filename rename actions.",
      "Added role-based MCP connection entry points for non-admin users.",
      "Added Codex connector setup guidance."
    ],
    "Improved": [
      "Expanded comment workflows with richer filters and bulk moderation.",
      "Added safe site health summaries and broader site management visibility.",
      "Added policy-controlled bridging for public WordPress Abilities registered by WordPress and other plugins.",
      "Improved MCP list payloads with compact defaults and sparse field controls for lower-volume responses.",
      "Modularized MCP tool definitions, schemas, scopes, read-only hints, and handlers to reduce drift as more tools are added."
    ],
    "Reliability": [
      "Added dry-run previews and confirmation gates for higher-risk write actions.",
      "Expanded test and CI coverage for MCP tools, permissions, safety controls, media workflows, and release packaging."
    ]
  },
  "0.3.0": {
    "date": "2026-05-22",
    "New": [
      "Added an AI Activity tab for reviewing write actions requested by connected AI assistants.",
      "Added a Connections control to temporarily pause or resume AI access without disconnecting assistants.",
      "Added connection diagnostics that check endpoint, OAuth, and MCP readiness from the settings screen."
    ],
    "Improved": [
      "Refreshed the settings screen header with Aculect branding and clearer AI agent connection messaging.",
      "Added WordPress.org plugin icon, banner, branded screenshots, and a Playground preview blueprint for the plugin listing.",
      "Improved action permission controls so AI tools only expose and run enabled, authorized abilities."
    ],
    "Reliability": [
      "Added OAuth storage maintenance to clean up expired connection data.",
      "Hardened media uploads from public URLs with stricter sideload safeguards.",
      "Expanded connector flow, activity log, access control, media, OAuth, and diagnostics test coverage.",
      "Fixed the Active Connections screen so the active access notice does not appear when no assistants are connected."
    ]
  },
  "0.2.1": {
    "date": "2026-05-20",
    "Fixed": [
      "Fixed diagnostics logging when the logs table is missing but the saved diagnostics database version is current.",
      "Added automatic repair for the diagnostics logs table during plugin boot."
    ],
    "Improved": [
      "Added Cloudflare troubleshooting guidance for Bot Fight Mode and Flexible SSL/TLS connection issues.",
      "Clarified that Cloudflare Bot Fight Mode should remain disabled for the hostname used by the MCP connection URL because it can block setup and later tool calls."
    ],
    "Reliability": [
      "Added unit coverage for diagnostics log table repair."
    ]
  },
  "0.2.0": {
    "date": "2026-05-18",
    "New": [
      "Added opt-in diagnostic logging for AI assistant connection flows.",
      "Added an Advanced setting to enable diagnostics and a Logs tab that appears only when logging is enabled.",
      "Added newest-first log pagination, clear-log controls, 30-day retention, and automatic pruning."
    ],
    "Improved": [
      "Dynamic client registration, OAuth discovery, authorization, token exchange, and MCP authorization checks now emit sanitized lifecycle and error events when diagnostics are enabled.",
      "Diagnostic context now identifies ChatGPT, Claude, and other MCP clients without storing tokens, secrets, raw request bodies, raw query strings, cookies, authorization headers, nonces, passwords, or client secrets."
    ],
    "Reliability": [
      "Hardened OAuth consent and authorization request handling with allowlisted, context-aware sanitization.",
      "Added stricter validation for response type, resource, PKCE, scopes, redirect URI, and consent decisions.",
      "Added unit coverage for diagnostic logging, redaction, repository behavior, and OAuth authorization parameter handling."
    ]
  },
  "0.1.0": {
    "date": "2026-05-15",
    "New": [
      "Connect a supported AI assistant by copying one connection URL from WordPress.",
      "Approve each AI assistant in WordPress before it can access your site.",
      "See connected AI assistants and disconnect them whenever needed.",
      "Choose which abilities your AI assistant can use after it is connected."
    ],
    "Improved": [
      "Setup instructions now focus on the steps users need, not technical details.",
      "Copy buttons make connection details easier to use.",
      "The About page now explains Aculect AI Companion in plain language.",
      "WordPress notices now appear below the Aculect AI Companion header so the page is easier to read.",
      "AI assistant connections now work more reliably.",
      "Aculect AI Companion can now help with comments, media, site information, plugins, and themes."
    ],
    "Reliability": [
      "Added extra checks to catch problems before test releases are shared.",
      "Added connection checks to reduce setup issues.",
      "Prepared release downloads so they include only the files users need.",
      "Added clear privacy and external service notes for WordPress users."
    ]
  }
}
