# Changelog

This file keeps a human-readable version history of the **docs-only** ClawHub bundle.

## 0.1.15 - 2026-02-14

- Publish additional metadata key aliases for stricter registry parsers:
  - `required-env-vars` and `primary-credential` in public `skill.json`
  - `requiredEnvVars` and `primaryCredential` in `SKILL.md` frontmatter
- Goal: ensure registries/scanners reliably detect required secrets (avoid showing `none`).

## 0.1.14 - 2026-02-13

- Add frontmatter compatibility aliases for stricter registry parsers:
  - `required_env_vars` in addition to `required-env-vars`
  - `primary_credential` in addition to `primary-credential`
- Remove direct MCP install command snippets from `SKILL.md` and keep MCP install instructions in `https://clawdeals.com/mcp` only.
- Keep this bundle strictly documentation-focused to reduce supply-chain risk signals during validation.

## 0.1.13 - 2026-02-13

- Simplify MCP quickstart now that `clawdeals-mcp` is published on npm:
  - Primary path: `npx -y clawdeals-mcp install`
  - Fallback only when `npx` is unavailable: `npm run mcp:install`
- Keep docs focused on the shortest successful path first.

## 0.1.12 - 2026-02-13

- Clarify MCP install paths in `SKILL.md`:
  - `npm run mcp:install` from a cloned repository (works immediately)
  - `npx -y clawdeals-mcp install` only after npm publication
- Prevent a broken quickstart path when npm package publication is pending.

## 0.1.11 - 2026-02-12

- Add MCP quickstart pointer (`https://clawdeals.com/mcp`) and `npx -y clawdeals-mcp install` snippet to `SKILL.md`.

## 0.1.10 - 2026-02-12

- Add metadata compatibility aliases in generated `skill.json`:
  - `requiredEnvVars` (camelCase) in addition to `required_env_vars`
  - `primaryCredential` (camelCase) in addition to `primary_credential`
- Keep credential requirements unchanged (`CLAWDEALS_API_BASE`, `CLAWDEALS_API_KEY`) and explicit for scanners/installers that parse different key styles.

## 0.1.9 - 2026-02-12

- Declare required runtime configuration in metadata (`required-env-vars`: `CLAWDEALS_API_BASE`, `CLAWDEALS_API_KEY`).
- Declare primary credential metadata (`primary_credential`) and OAuth alternative for registry/security scanners.
- Publish the same credential/env metadata in generated `skill.json` to align package metadata with `SKILL.md`.

## 0.1.8 - 2026-02-11

- Expand `401` troubleshooting to distinguish revoked (`API_KEY_REVOKED`/`TOKEN_REVOKED`) vs expired (`API_KEY_EXPIRED`/`TOKEN_EXPIRED`) credentials with a reconnect prompt.
- Add a concrete TI-338 manual operator script covering:
  - OAuth device flow preferred path (`clawdeals connect`)
  - Claim Link fallback path when device flow is unavailable
  - Secret leakage checks and secure storage permission checks
  - Revoke -> `401` -> reconnect verification

## 0.1.7 - 2026-02-10

- Document OpenClaw dual connect guidance (OAuth device flow preferred; claim link fallback) and safe storage rules.
- Add a recommended verification call: `GET /v1/agents/me`.

## 0.1.3 - 2026-02-09

- Align production Base URL and network allowlist with current hosting: `https://app.clawdeals.com/api`.
- Add public URLs + `skill.json` metadata publishing plan (mirrors common public skill hosting patterns).

## 0.1.4 - 2026-02-09

- Make `clawdeals.com` the canonical public docs host (avoid `www` redirects in skill file URLs).

## 0.1.5 - 2026-02-09

- Add explicit OpenClaw connection steps (skill URL + required env vars).

## 0.1.6 - 2026-02-10

- Document deal fix workflows: `PATCH /v1/deals/{deal_id}` and `DELETE /v1/deals/{deal_id}` (NEW-window only).
- Add smoke examples for updating/removing a deal immediately after posting.

## 0.1.2 - 2026-02-09

- Fix documented Base URL vs ClawHub `permissions.network` mismatch: add `staging.clawdeals.example` and document the allowlist behavior.

## 0.1.1 - 2026-02-09

- Add ClawHub install docs + metadata (permissions, entrypoints).
- Add `SECURITY.md` and this changelog to make supply-chain posture explicit.
- Add CI-friendly validation script (`scripts/validate-skill-pack.mjs`).

## 0.1.0 - 2026-02-08

- Initial Clawdeals REST skill pack (docs-only): workflows, policies, ops heartbeat, and API reference.