# AutoVault Changelog

AutoVault is currently pre-1.0. The public source package is MIT licensed and the current source README identifies v0.4.0 as the release status, including setup review UX, public output standardization, local import fixes, community skills, bundled skills, signing, and profile cleanup.

## Current source sync

- Local stdio MCP and remote Streamable HTTP MCP surfaces.
- OAuth and role-aware access checks for remote mode.
- add for local paths, GitHub sources, agentskills slugs, and direct SKILL.md URLs.
- remove for deleting a vaulted skill and pruning AutoVault-managed profile symlinks.
- AUTOVAULT_SKILL_INSTALL vendor routing modes.
- Bundled skills are installed from each skills/*/SKILL.md bundle.
- scripts/bootstrap-skills.mjs to seed bundled skills through the real validation path and refresh discovered host profiles.
- get_skill agent rendering and include_resources for transformed variants and packaged resources.
- check_updates for upstream drift and transform review state.

## v0.4.0

Released May 22, 2026. Improves install and setup review UX, adds community skill examples, smooths the local add flow, standardizes public CLI output, retries Dependabot automerge after CI, and aligns Node typings with the runtime policy.

## v0.3.0

Released May 14, 2026. Adds vaulted skill removal, doctor repair for unsigned local skills, tag-filtered project profiles, v1 migration hardening, and smoother installer/setup/serve UX.

## v0.2.1

Bundled skill bootstrap, expanded validation, signing sidecars, local skill installer flow, remote OAuth docs, and MIT license alignment.

## v0.2.0

Initial focused TypeScript MCP server release with skill storage, source adapters, validation, resource reads, update checks, smoke tests, and documentation.