# AutoVault Changelog

AutoVault is currently pre-1.0. The public source package is MIT licensed and the current source README identifies v0.2.0 as the release status, with unreleased work already documented for bundled skills, bootstrap flow, signing, and installer polish.

## Current source sync

- Local stdio MCP and remote Streamable HTTP MCP surfaces.
- OAuth and role-aware access checks for remote mode.
- add-local for third-party installers that already have a local skill bundle.
- AUTOVAULT_SKILL_INSTALL vendor routing modes.
- Bundled skills are installed from each skills/*/SKILL.md bundle.
- scripts/bootstrap-skills.mjs to seed bundled skills through the real validation path and refresh discovered host profiles.
- get_skill agent rendering and include_resources for transformed variants and packaged resources.
- check_updates for upstream drift and transform review state.

## v0.2.0

Initial focused TypeScript MCP server release with skill storage, source adapters, validation, resource reads, update checks, smoke tests, and documentation.

## Unreleased

Bundled skill bootstrap, expanded validation, signing sidecars, add-local installer flow, remote OAuth docs, and MIT license alignment.
