agentrhq__authsome/CHANGELOG.md

Changelog

0.6.4 (2026-06-09)

Bug Fixes

• keep dashboard sidebar fixed in providers page (168c51f)

0.6.3 (2026-06-09)

Chores

• manually bump yanked version

0.6.2 (2026-06-09)

Features

• add bundled providers for 14 Google Workspace and API services (a389bf7)
• add bundled providers for 14 Google Workspace and API services (0a88fef)
• add bundled providers for Jira, Confluence, YouTube, Vertex AI, Todoist, Cloudflare, Outlook, Word, Calendar, and Zoom (2e7d2f6)
• add client_secret_handling support for basic auth and update OAuth flows accordingly (b3bceae)
• add Reddit OAuth2 bundled provider (2d66ac9)
• add required field support to InputField and update UI components to respect optionality (19a40fe)
• add required field support to InputField and update UI components to respect optionality (3b7b175)
• enable admin browser sessions for provider revocation and add error handling to UI button (73c5843)
• Fix failing tests (6fe1107)
• hide configuration UI for API key providers (39caabe)
• implement provider and connection detail endpoints with UI support for configuration management and status monitoring (11d2166)
• Improve UI (9f622ec)
• Improve UI (3a7a7b8)

Bug Fixes

• bundle static UI assets into wheel (74be6b9)
• bundle static UI assets into wheel (745f1a2)
• use artifacts instead of force-include for wheel UI assets (f345a18)

0.6.1 (2026-06-06)

Bug Fixes

• build action (5b5a55d)

0.6.0 (2026-06-06)

⚠ BREAKING CHANGES

• Cleaner architechture, multi server compatible identities and cleaner ui

feature

• Cleaner architechture, multi server compatible identities and cleaner ui (f661d8d)

Features

• add Dockerfile, docker-compose, and self-hosting guide (c7455c0)
• add Dockerfile, docker-compose, and self-hosting guide (6231674), closes #366
• Add logos and description for all bundled providers (33e13f9)
• add provider dashboard metadata (635285a)
• add static Next.js dashboard (7c46cd8)
• add static Next.js dashboard (e0a2cd9)
• Build dependencies (2705e8e)
• improve scan to cover all typical env file locations (364f3e5)
• improve scan to cover all typical env file locations (96fd514)
• replace Python dashboard fallback with built Next.js static UI (98a3351)
• Simplify identity portability (ad23d60)
• ui: redirect to connections view after successful provider login (19bdf05)
• ui: redirect to connections view after successful provider login (60931a0), closes #355
• Update docs (07dbb87)

Bug Fixes

• allow explicit authsome config home (7faf61f)
• cache identity registration per daemon (668f91a)
• Cleaner design (301d353)
• docs: remove all broken links to missing pages (cac5f9f)
• inherit ServerConfig from AuthsomeConfig for consistent home resolution (cf95c6c)
• install pnpm before setup-node to fix CI cache resolution (0dd5291)
• move dashboard auth flow to Next routes (52fe7dc)
• remove populate_by_name and redundant validation_alias from settings (9ee46a6)
• Remove type checking hacks (10f6e8a)
• resolve pre-commit failures (b96d593)
• ui: replace setState-in-effect with lazy useState initializers (ff592fd)

Documentation

• remove stale authsome skill commands (fc51d29)
• Update context on design philosophy behind authsome (5933be4)
• Update documentation (d76304a)
• Update documentation (30ec8d4)
• Update documentation to correctly reference current authsome state (54d7c3a)

0.5.0 (2026-05-29)

⚠ BREAKING CHANGES

• existing local installs have an unclaimed identity under local@authsome.internal and are rejected until the user registers a principal (email+password) and claims the identity.
• existing Fernet-encrypted vaults cannot be read back; migration requires re-importing credentials.
• mount dashboard at / instead of /ui

Features

• add admin audit dashboard (1bc5044)
• add Anthropic and Gemini bundled providers (1e47c48)
• add Anthropic and Gemini bundled providers (e788328)
• add browser SSO via Chrome cookie reading (browser-cookie3) (aeb4263)
• Add docs for design of principal roles and audit (de33f8a)
• add principal_role parameter to AuthService and dependency injection routes (7d43b56)
• browser SSO via Chrome cookie reading (browser-cookie3) (7607600)
• implement audit events and principal roles (9503710)
• implement audit events and principal roles (0ed077b)
• move daemon management commands from admin module to main CLI (397a8e8)
• move daemon management commands from admin module to main CLI (af356d5)
• replace flat master-key vault encryption with Argon2id KEK/DEK model (b76903d)
• respect AUTHSOME_DAEMON_URL in all daemon control paths (fa23037)
• respect AUTHSOME_DAEMON_URL in all daemon control paths (1ba904b)
• server store refactor (acb2013)

Bug Fixes

• added support for cookie expiry date (5ea8aa9)
• Fix incorrect posthog key and remove unnecessary tests (77c7bb7)
• Fix incorrect posthog key and remove unnecessary tests (8f8d9b9)
• refresh DCR provider client on replace (9af604d)
• refresh DCR provider client on replace (595de28)
• remove extraneous admin command argument from daemon subprocess invocation (2c43de6)
• ruff check (6dbef78)

Reverts

• display input fields for dcr providers (6c108cb)

Documentation

• correct manual testing guide against the current CLI surface (0a7c379)
• update manual testing guide for the unified claim flow (70e5539)

Code Refactoring

• mount dashboard at / instead of /ui (f8cf936)
• unify local and hosted into a single deployment flow (63bd4c9)

0.4.2 (2026-05-25)

Features

• add device flow verification fields to auth schemas and CLI JSON output (c24779c)
• auto-create env handle identities (72e1b35)
• env backed identity design (e1662b5)
• improve copy-to-clipboard functionality with browser fallback and UI feedback (02daa81)
• restructure CLI commands under provider and admin namespaces (7b4b31a)
• restructure CLI commands under provider and admin namespaces (a326e3f)
• simplify Client ID label and implement robust cross-browser copy-to-clipboard logic (d763f7f)

Bug Fixes

• expose actionable session details in login --json (87ae0b7)
• normalize cli error handling for json output (fb2754b)
• update daemon process command to include admin subcommand (7855c77)

0.4.1 (2026-05-25)

Features

• enable provider configuration management for hosted admins with required credential inputs and scope persistence (e26d584)
• enable provider configuration management for hosted admins with… (30b2f8a)

Bug Fixes

• rename AUTHSOME_ADMIN_PRINCIPLES environment variable to fix typo (10f17f4)

0.4.0 (2026-05-25)

⚠ BREAKING CHANGES

• Create version 0.4 which adds support for principal, identity, vault key loading precedence and many more fixes

Features

• ClaimStatus lifecycle, vault_id gating, ADR 0003 alignment (d8553ba)
• Cleanup server routes (225d7fd)
• disable analytics automatically when running under pytest and add verification tests (d1abc48)
• implement HostedAccountService for email/password authentication and JWT session management (c161ab9)
• implement master key rotation via rekey command and API endpoint (f78f872)
• implement opt-out telemetry support via environment variables and add associated documentation and tests (9d7c88f)
• implement opt-out telemetry support via environment variables and add associated tests (1c1554c)
• implement vault rekey functionality with encryption source validation and add corresponding API and unit tests. (e7f4187)
• login flow (e0ea86d)
• scope connections to vault, add claim flow and principal concept (d3f2006)

Bug Fixes

• correct import path and test fixture for ready endpoint (3951af8)
• deduplicate error class name in daemon responses and stop orphaned daemon (76e2320)
• improve whoami robustness by handling connection failures gracefully and isolating keyring tests (83709f4)

Documentation

• add dedicated Hermes Agent integration page, drop stale Hermes refs (b7297dd)
• add dedicated Hermes Agent integration page, drop stale Hermes refs (e12082f)
• add hosted UI auth and identity claim design spec (e552805)
• fix CONTEXT.md dependency graph and direction (17fff13)
• make auth/ a leaf module, move AuthService to server/ (d92611c)
• resolve merge conflicts in UBIQUITOUS_LANGUAGE.md (48229eb)
• rewrite CONTEXT.md with module boundaries, create TODOS.md (c7a1629)
• rewrite login and proxy sections in manual-testing guide (3719d13)
• update architecture language, retire Profile, add Principal/Vault/Claim terms (8dc663e)

Code Refactoring

• Create version 0.4 which adds support for principal, identity, vault key loading precedence and many more fixes (bb5a2a6)

0.3.2 (2026-05-20)

Features

• Add posthog telemetry events (575a464)
• Add posthog telemetry events (8797a94)
• evals: /run-evals command + profile/run-dir flags (bdeae58)
• evals: add expected_interrupt and next_turn_instruction eval fields (c4b2a93)
• evals: capture real claude transcripts via stream-json subprocess (1b28f5a)
• evals: move new evals schema to evals/evals.json, restore skills copy (5bb73ba)
• evals: profile isolation + authsome state check per eval (73d3e70)
• proxy: configurable intercept scope and unmatched policy (987e312)
• update health check to validate connections based on active identity and add test coverage (9290169)
• update health check to validate connections based on active identity and add test coverage (3fa9f97)

Bug Fixes

• copy full skill folder in evals and fix login flow links in authsome skill (e8918a9)
• evals: use claude --system-prompt for judge, grade on rate limit (b790c63)
• evals: use hermes as LLM judge instead of claude -p (1157837)
• marketplace: point plugin homepage to authsome.ai (11ffd80)
• marketplace: point plugin homepage to authsome.ai (a767cbc)
• proxy: address PR review feedback on mode validation and route defaults (83ab469)

Documentation

• add GitHub OAuth app setup walkthrough to quickstart (f45d9c9)
• add Roadmap, Contributing, and Links sections to README (07534a4)
• add Roadmap, Contributing, and Links sections; rewrite roadmap.mdx (03990b2)
• correct roadmap against changelog as source of truth (eec08e3)
• evals: add hermes smoke test to pre-session setup (bc4ef39)
• evals: add skip handling and per-eval max_turns config (68ae0ed)
• evals: merge setup.md into run-evals command, delete setup.md (072836f)
• evals: remove profile creation from run-evals command (33ab525)
• evals: update design spec and plan to reflect as-built state (2558f5c)
• mark policy layer and firewall rules as shipped, add multi-user to coming next (b1487e8)
• quickstart: add provider tabs and a runnable agent example (7c577ab)
• quickstart: GitHub OAuth setup walkthrough and provider tabs (63ffdec)
• reframe roadmap as end-user capabilities, not implementation work (0740764)
• rewrite profile storage model to match current architecture (457d1b2)
• rewrite profile storage model to match current architecture (773323a)
• rewrite roadmap.mdx, remove ROADMAP.md, link README to docs (a165d37)
• simplify hosted daemon mode description in roadmap (5458bf6)
• site: adopt skill-driven CLI conventions across the docs (8ba6967)
• site: adopt skill-driven CLI conventions across the docs (71b89fd)

0.3.1 (2026-05-17)

Bug Fixes

• cli: resolve three CLI bugs and improve audit log command (3b990e3)
• cli: resolve three CLI bugs, improve audit log, and sync docs (dd9cad3)

Documentation

• cli: sync reference and manual-testing guide with 0.3.0 implementation (bdf659f)

0.3.0 (2026-05-15)

⚠ BREAKING CHANGES

• unify Identity and Profile; remove profile management layer
• Existing implicit default-profile installs must run authsome init again; profile:default credentials are not migrated.

Features

• add --reload flag to daemon serve command and replace custom file watcher (8fea50e)
• add --reload flag to daemon serve command and replace custom file watcher with uvicorn native reload (2faa3c9)
• add audit logging for proxy request injection and resolution misses (6766c0e)
• add audit logging for proxy request injection and resolution misses, and include pytest-asyncio dependency. (0afaf87)
• add copy-to-clipboard functionality to OAuth Redirect URI and update UI layout and styling (0e1aa31)
• add did pop daemon authorization (7ad14f6)
• add DID PoP daemon authorization (dca2246)
• add RFC 7009 token revocation support to BaseFlow and integrate into Auth service (74b96a3)
• add RFC 7009 token revocation support to BaseFlow and integrate into Auth service (7af96fc)
• cli: add import-env for headless API key ingestion (bc318ff)
• cli: add import-env for headless API key ingestion (e080286)
• cli: add scan command for env provider detection (9f9b8d4)
• cli: add scan command for env provider detection and optional import (9dee261)
• display OAuth redirect URI in auth UI and improve CLI command documentation and validation (878461b)
• display OAuth redirect URI in auth UI and improve CLI command documentation and validation (a0d72aa)
• enhance system health checks with permission, integrity, and key rotation monitoring (dede72a)
• expand doctor checks (97afd37)
• expand doctor checks (03ad70f)
• expand health checks with integrity, permission, and rotation w… (0956ef1)
• expand health checks with integrity, permission, and rotation warnings and update CLI UI to support warn status (c885067)
• global client credentials (aa6aa56)
• global client credentials (747b48f)
• implement auto-restart for daemon when source files are modified during development (6fd7a6b)
• implement centralized audit logging and refactor duration formatting utility (f9b5b89)
• implement hosted UI session management and multitenant provider visibility policy (9ed0714)
• implement hosted UI session management and multitenant provider… (c482817)
• implement local client profile management and update error handling for session authentication (46a981a)
• introduce parse_store_key utility and integrate into service for robust key parsing (87b65e7)
• introduce parse_store_key utility and integrate into service for robust key parsing (78ac38c)
• make provider client credentials a global property of hosted deployment (be78393)
• move OAuth2 refresh token logic to BaseFlow and update service to use flow-specific handlers (9b0366d)
• move OAuth2 refresh token logic to BaseFlow and update service to use flow-specific handlers (77b07d0)
• require server-registered identities (019bdd1)
• server store cleanup (ec06181)
• stabilize and document specific CLI exit codes for error states (9f40cc6)
• standardize CLI exit codes and add comprehensive documentation for error states (8024433)
• standardize CLI JSON output format with versioning (c1c4fec)
• standardize CLI JSON output format with versioning and stable schema fields (933d106)

Bug Fixes

• client secret field made default (3929b86)
• client secret field made default (e3a4939)
• correct daemon health check logic to properly validate client status and readiness (e92bdad)
• docs: repoint canonical to authsome.ai and drop dead links (459259e)
• docs: repoint canonical to authsome.ai and drop dead links (c97c1af)
• docs: unwrap call-graph diagram from Frame component (bd28b9c)
• docs: unwrap call-graph diagram from Frame component (4d8e548)
• modify return type of _request function in cli client (d7ddb2e)
• prevent accidental termination of unrelated processes by validat (f6b2f30)
• prevent accidental termination of unrelated processes by validating daemon PID against local lock record during shutdown (c25fe9c)
• proxy: add mitmproxy CA to macOS keychain for Go tool TLS compatibility (145734a)
• proxy: add mitmproxy CA to macOS keychain for Go tool TLS compatibility (c9a9842), closes #234
• refactoring (cbf3a40)
• remove redundant flexbox properties from summary element styling (8fc0b32)
• save library version in client config (5f52807)
• update vault storage to use collection-scoped path in _save_provider_state (c9eba5b)
• warn when token refresh fails (627d579)

Reverts

• expand health checks with integrity, permission, and rotation w… (6090d69)

Documentation

• add API call constraints and troubleshooting guide to SKILL.md (8313a27)
• readme: add codecov badge and star history chart (373a4a8)
• readme: overhaul with logo, community, security, and integrations (3009e95)
• readme: overhaul with logo, community, security, and integrations (2135499)
• remove restrictive constraints on CLI tool usage from SKILL.md (98ee7ef)
• site: add CodeGroup, Expandable; remove now-unused proxy-injection snippet (02d97f0)
• site: add logo wordmark, Discord link, and navbar icons (38b3704)
• site: add logo wordmark, Discord link, and navbar icons (bccf288)
• site: audit fixes across all four tiers (89700e5)
• site: drop dead ProxyInjection import from provider pages (eb5f0a6)
• site: four-tab nav + CLI/proxy-first framing (f8fcab4)
• site: full audit pass — fix factual errors, dedupe, expand CLI/API surface (ee33a49)
• site: lead with CLI + proxy; demote library to embedding case (3f3cdd8)
• site: rebuild docs into tabbed structure with shared snippets and component upgrades (ced2422)
• site: split Guides and Reference into top-level tabs (fac06d6)
• skill: add proxy mental model to Usage section (7ca72a5)
• skill: bump to 0.1.5, soften CRITICAL RULE, clean up examples (70c95ff)
• skill: fix repo refs, sharpen description, move CRITICAL RULE to body (d52244c)
• skill: lead with usage, move install/login to reference sections (51fcf74)
• skill: radically simplify — usage first, minimal prose (6e9ab01)
• skill: recommend uv tool install over uvx alias (a4b3355), closes #251
• skill: recommend uv tool install, simplify usage, v0.1.5 (f264696)
• skill: remove registering a new provider section (3342b5b)
• skill: simplify Step 3 with concrete examples and always-run pattern (727dccc)
• Update README how-it-works diagram (26dcd74)

Code Refactoring

• unify Identity and Profile; remove profile management layer (d6958c8)

0.2.4 (2026-05-08)

Features

• add dashboard UI (9296d68)
• add python-multipart dependency, update CLI table styling, and refine provider error messaging (5d6f393)
• add python-multipart dependency, update CLI table styling, and refine provider error messaging. (e2a9d3d)
• add support for custom server base URLs (2fde0fd)
• add support for customizable home directory and exit after printing JSON output (cc2d830)
• add support for customizable home directory and exit after printing JSON output (705a358)
• add support for hosted daemon deployments via AUTHSOME_SERVER_BASE_URL and AUTHSOME_DAEMON_URL configuration. (0af4b01)
• added an interractive dashboard (3867a96)
• added support for notion dcr (cd960f3)
• added support for notion dcr (11ea590)
• allow header_prefix to be null in API key provider (bbfc8f8)
• allow header_prefix to be null in API key provider (74771c4)
• client server architecture (WIP - do not merge) (bf548e1)
• green themed UI (a826498)
• implement custom error handling and propagation between daemon server and CLI client (f536edb)
• introduce working implementation of client server architecture with session management. Refactor profile/provider store to reside behind app store interface and implement local version of store. (a285172)
• restructure client-server daemon architecture (4bd09e0)
• ui: add interactive dashboard actions (097f62a)

Bug Fixes

• add non-interactive register confirmation flag (57745be)
• add non-interactive register confirmation flag (45c3a4b)
• added support for linear oauth (680c0d9)
• added support for linear oauth (10213c8)
• clear existing log handlers and log verbose status in setup_logging (b84747e)
• clear existing log handlers and log verbose status in setup_logging (75e7c0d)
• cli: distinct exit code for cancelled credential entry (f21047d)
• cli: distinct exit code for cancelled credential entry (09fd6bc)
• merged with develop (a5711a7)
• resolve circular import in server dependencies (006ce3f)
• ruff check fixed (65e6b6a)
• tests fix (f7bec29)
• update import path for DARK_THEME_CSS to reflect module reorganization (d97d7bf)
• updated overview tab (36c2741)
• validate provider existence before retrieving connection metadata (17580d4)
• validate provider existence before retrieving connection metadata (285f379)

Documentation

• Add design decisions for hosted version (1551eff)
• add engineering principles and AI agent guidelines (efaeced)
• expand manual testing guide to cover full CLI surface (bbe42f2)
• update CLI commands in documentation to use uvx for execution (ab8268f)
• update CLI commands in documentation to use uvx for execution (cc1030f)
• update issue reporting guidelines to require automated GitHub CLI submission (e388891)
• update issue reporting guidelines to require automated GitHub CLI submission (1f3374d)
• use GitHub user-attachments URL for demo video (a74f16f)

0.2.3 (2026-05-01)

Documentation

• add demo video to README (36a9e18)
• add demo video to README (83ed25a)

0.2.2 (2026-04-29)

Features

• add audit logging (e130f30)
• add JSON output support to audit log command (5ca2cd7)
• expand whoami context (2dead00)
• implement structured audit logging for CLI actions and proxy events (e33b2d5)
• migrate --no-audit option from root command to common CLI options decorator (93f4913)
• render list output as table (9ac6750)
• show connections in inspect (3c25b10)
• show expiry in list output (55aa376)
• support regex proxy host urls (a57a7de)

Bug Fixes

• added support for regex check for API keys (1da9d36)
• added support for regex check for API keys (2d8022e)
• count active providers once (8faf814)
• export all connections when provider omitted (2b5ec34)
• export all connections when provider omitted (622992f)
• harden auth proxy routing (3c3a7ad)
• harden auth proxy routing (0fd02c6)
• keep proxy routing on default connections (946576a)
• make login idempotent (cb327fa)
• prefer specific proxy route prefixes (679fa77)
• preserve connected state on refresh fallback (7c8ff9f)
• respect requested login context (2902059)
• update audit log event type and add comprehensive unit tests for AuditLogger (96b6999)
• update openai export test fixture (05bd00d)
• warn when refresh falls back to cached token (7b1af48)

0.2.1 (2026-04-28)

Bug Fixes

• set connection host_url directly from resolved definition (149b347)

0.2.0 (2026-04-28)

⚠ BREAKING CHANGES

• Complete internal restructuring. All public Python API has moved; CLI commands and flags are unchanged.

Features

• add --verbose and --log-file options to CLI with loguru sinks (0058f09)
• add base URL templating support for providers (ee172db)
• add host_url support to auth connections and update proxy server to match based on resolved connection hosts (73c5f72)
• add support for dynamic URL templating using {base_url} in provider definitions and CLI (156ecf0)
• added support for docs in providers (#85) (f112275)
• inject combined system and mitmproxy CA bundle into subprocess … (#90) (b5d042b)
• silence authsome library logger by default (loguru best practice) (2fe4c88)
• v0.2.0 — Vault + AuthLayer architecture, InputProvider, FlowResult (bfd75ee)

Bug Fixes

• added support for posthiz device flow (#81) (9b9a485)
• allow SQLite connection across threads for proxy auth injection (536d78b), closes #76
• device flow (#89) (b596ee1)
• resolve ty type check errors in dcr_pkce and vault (dc471d2)

Documentation

• Add documentation for current design and future direction (7cc0e2c)
• clarify authsome architecture direction (e4eef7a)
• Remove superpower (f53f86c)

0.1.12 (2026-04-24)

Features

• merge develop to main (#74) (b88d476)

Bug Fixes

• add host_url to bundled providers and update docs for current API (4c756a0)

0.1.11 (2026-04-24)

Features

• add configuration files for a few more OAuth2 providers (#47) (d587881)
• add proxy runner, RC publishing, and OAuth scope support (#53) (456d9bd)

Documentation

• overhaul authsome skill and consolidate reference docs (#46) (4b7dad4)
• update authsome skill description with detailed capabilities, usage guidelines, and security policies (#39) (6c0bf89)

0.1.10 (2026-04-22)

Features

• added redirect url in popup broswer Ui (#36) (b292017)
• added support for ashby (#42) (b37724e)
• replace reset flow with force flag and reorganize provider lifecycle commands into logout, revoke, and remove (#32) (66b0583)

Documentation

• refresh readme (#30) (12cbfae)

0.1.9 (2026-04-21)

Features

• add --version / -v flag to CLI (#22) (688aefb)
• Add github templates and CONTRIBUTING.md (#20) (98e0136)
• introduce secure browser-based bridge for sensitive input collection and remove CLI credential flags (#28) (8302b10)
• provider for klaviyo added (#25) (32038af)

Bug Fixes

• redirect url explicitly mentioned in register provider (#27) (78b6eeb)
• use model_dump(mode="json") to serialize datetime fields in CLI (#23) (551239a)

Documentation

• add portable authsome spec v1 (#26) (307aa2c)

0.1.8 (2026-04-21)

Features

• add client record type to function docstring (1be12a9)

Bug Fixes

• Fix the store key bug (72433e7)

0.1.7 (2026-04-21)

Features

• implement common_options decorator to support global CLI flags across all commands (72d08ed)

0.1.6 (2026-04-21)

Bug Fixes

• update incorrect imports and fix README (5ca9da0)

0.1.5 (2026-04-21)

Features

• add 29 new API provider configurations to bundled_providers (#9) (f9d8af4)
• enable CLI support for providing client credentials and API keys during login; and persist aforementioned credentials in profile store (#10) (7c960db)

Documentation

• rewrite README with agent-first positioning and badges (94e090b)

0.1.4 (2026-04-20)

Bug Fixes

• update command execution to use double-quoted strings and process in shell (157edad)

0.1.3 (2026-04-20)

Documentation

• add CLI reference and provider registration guides and update main skill documentation (#5) (3d9d3b3)

0.1.2 (2026-04-17)

Features

• Improve cli and test public pkce oauth flow (27c8d50)
• Show separate custom and bundled providers; highlight connections spearately; tested pkce public oauth flow (0924521)

0.1.1 (2026-04-17)

Features

• add Google and Okta providers and reformat GitHub provider scopes (cc02780)
• add Linear provider and standardize PKCE callback port to 7999 while updating GitHub flow to standard PKCE (15b1069)
• implement CLI with full command set (5724f3c)
• implement initial version of core auth framework (3c980b4)