# Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog,
and this project adheres to Semantic Versioning.

## [Unreleased]

## [v1.0.2] - 2026-03-10

### Added
- Added MCP tool `create_mcp_token` to mint OAuth access tokens from username/email and password.
- Added optional `access_token` argument support for `composer_update` and `composer_update_all`.
- Added `bin/mcp-http-bridge.php` for stdio-to-HTTP MCP bridging.
- Added ready-to-use configuration templates for Claude Desktop and VS Code MCP clients.
- Added `mcp/setup` (`mcp/config/setup`) page to generate host-aware client configuration snippets.

### Changed
- Updated composer tooling authentication to support OAuth bearer token validation when no Yii session is present.
- Updated MCP documentation with token creation and authenticated composer update examples.

### Security
- Masked sensitive request/response values (`password`, `access_token`, `refresh_token`, `client_secret`) in MCP logs.

## [v1.0.1] - 2026-03-10

### Added
- Added initial composer package manifest with PSR-4 autoloading for the src structure.
- Added package metadata, dependency declarations, and branch alias version mapping.
- Added lightweight Yii2 module bootstrap class and composer bootstrap registration.
- Added MCP tool `composer_update` to trigger package-specific composer updates through `ngauge-packagemanager`.
- Added MCP tool `composer_update_all` and `dry_run` support for composer update tooling.
