# Documentation and API Changelog

Customer-visible product documentation, external API, and Harness MCP changes
are recorded here. Newest entries appear first.

## 2026-08-20 - Documentation contracts

### Added

- Separate generated hosted Build and Workspace MCP references with available
  input/output schemas, authorization, tool annotations, and recovery guidance.
- Public Markdown and public-only machine-bundle documentation endpoints with
  documentation contract and deployed-build metadata.
- Validation and rendering support for an exact, pinned local Build MCP package
  manifest, kept separate from hosted MCP contracts.
- CI documentation contract checks and a privacy-bounded zero-result search
  health report.
- Immediate exact-version Build MCP release synchronization, with a daily
  registry recovery check and a review-only pull request boundary.
- Text-free public-document feedback for helpful, not-helpful, and outdated
  signals, with validated document/heading ids and bounded anonymous traffic.
- Dedicated Scheduled Work, Assistant Knowledge, Tenant Administration, and
  Workforce and Storyboard operator guides.
- Revision-aware documentation feedback operations and privacy-bounded search
  selection outcomes, without raw queries or reader identifiers.
- A weekly privacy-bounded documentation health workflow with retained evidence
  and a durable review queue for recurring or overdue signals.
- An isolated Admin database health check that alarms on failed or missing
  managed-secret rotation recovery without copying credentials or restarting
  services.
- A branch-bound Bedrock invoke-only GitHub OIDC role for the Build MCP live
  client canary, removing the need for a static provider API key.

### Changed

- Public documentation summaries now use canonical public URLs instead of
  exposing repository source paths.
- Documentation ownership, monthly health review, and post-deployment release
  verification are explicit requirements.
- Documentation owners now review outdated feedback within two business days
  and route confirmed or recurring issues to the documentation backlog.

## 2026-08-19 - MCP 0.5.0

### Added

- Build MCP adds a local-only artifact inspection tool that validates package
  boundaries and reports the bundle identity without authenticating or
  creating a remote draft. Deploy can require that inspected identity and
  fails locally if source changed before upload.
- Workspace MCP adds tenant-bound workspace discovery and cursor pagination
  for conversation search.

### Changed

- Content-identical Build packages now produce the same archive hash across
  retries instead of embedding the packaging time.
- The local Build MCP now rejects credential-bearing or insecure non-loopback
  API URLs and rejects manifests too large for the remote create envelope
  before authentication or upload.
- Artifact, deployment-operation, and workspace placement ids are now
  UUID-validated before database access, and local Build errors redact absolute
  workspace paths.
- Build workspace placement is filtered to the active tenant, and Build and
  Workspace report server version `0.5.0`.

## 2026-08-19 - MCP 0.4.0

### Added

- Build MCP `0.4.0` adds deterministic retry identity, durable deployment
  operation progress, workspace and draft discovery, trusted smoke reruns,
  state-bound cleanup plans, and a dedicated artifact-delete OAuth scope.
- The local package adds a minimal artifact scaffold, resumable progress waits,
  structured recovery errors, and an automated live-client certification run.
- Build MCP trusted artifact validation with bounded smoke and rendered-page
  evidence that does not require an external browser session.
- Explicitly confirmed cleanup for private, unpromoted drafts created by the
  same MCP connection.
- Stdio Build connection verification and phase-level deployment progress.

### Changed

- Local artifact apps may live anywhere under the configured workspace; the
  stdio package now maps them to stable trusted source roots without changing
  existing workspace-root or `artifact-apps/...` identities.
- Build and Workspace report server version `0.4.0`.

## 2026-08-18

### Added

- Read-only Workspace MCP conversation search and recent-message tools with an
  explicit `chat:read` scope and tenant plus conversation-visibility checks.
- Per-product OAuth authorization, granted-scope, and last-successful-call
  status in Developer Access.
- Single-use, product-bound end-to-end connection verification from Developer
  Access through `platform_connection_check`.
- Owner-scoped OAuth authorization listing and revocation with exact per-grant
  activity state.
- Cursor-paginated conversation reads, workspace names, per-message truncation
  flags, and bounded visible-transcript search.

### Changed

- Every hosted MCP tool now declares its Build or Workspace ownership directly;
  product catalogs no longer infer Workspace membership as a complement.
- MCP activity telemetry records product, tool, auth kind, and outcome without
  recording tool arguments.
- Build and Workspace report server version `0.2.0`; `/mcp/harness` now sends
  deprecation and successor-link headers without scheduling a removal date.

## 2026-07-16

### Added

- Public customer documentation at `https://topline.build/docs`.
- Product, secure-browser, MCP, and external API guides.
- Generated Harness MCP tool and external endpoint references.
- Machine-readable OpenAPI 3.1 specification at `/docs/openapi.json`.
- OAuth `docs:read` scope with MCP documentation search and read tools.
- API lifecycle and compatibility policy.

### Changed

- Documentation search now indexes full curated document content and returns
  ranked excerpts.
- Customer documentation is separated from internal runbooks and contribution
  material.