v2.0.3

Changed

• Store connection URIs in a single secure-storage vault item instead of one Keychain item per connection, reducing repeated macOS Keychain prompts during agent workflows.
• Added arcula connection migrate-vault to migrate existing per-connection secure-storage entries without reading .env.
• Keep approval signing state in an owner-only local data file so operation run does not trigger an extra Keychain prompt after human approval.

v2.0.2

Changed

• Disabled .env loading by default so stored secure connections are the default source of connection configuration.
• Added the global --env flag to explicitly load .env for legacy, CI, migration, and one-off workflows.
• Updated the Arcula agent skill and documentation to use the safer default connection behavior.

v2.0.1

Added

• Added the arcula-cli agent skill for safe Arcula usage from AI coding agents.

Changed

• Updated the README introduction and documented agent skill installation with npx skills.

v2.0.0

Added

• Added a secure connection manager backed by the OS credential store, with connection add/list/show/test/remove/import-env commands.
• Added environment metadata and per-connection safety policy support for kind, protected, source/target permissions, agent apply, human approval, destructive backup, and backup verification.
• Added agent-friendly output and execution controls: --format json, --agent, --no-env, --no-color, direct URI inputs, and URI kind overrides.
• Added saved sync plans via sync plan, including plan hashes, policy snapshots, warnings, approval requirements, and human-readable/JSON rendering.
• Added OS-backed approval records for protected plans via plan approve, with approval signatures bound to the exact plan hash.
• Added operation records via operation run/list/show, including status history, approval metadata, sync reports, and errors.
• Added operation revert support using the pre-sync target backup.

Changed

• Destructive syncs to production/protected targets now require a full backup and, when policy requires it, the plan/approval/operation flow.
• Direct target URI usage is treated as protected by default unless classified with --to-kind.
• info now includes stored connections in addition to .env environments.
• Linux secure storage now uses the kernel keyring backend to avoid a DBus development dependency in CI and headless builds.

Fixed

• Sync export/import failures now return errors instead of printing success.
• Required backup failures now abort the sync before destructive target changes.
• Failed imports attempt backup restoration but still return a failed operation.
• MongoDB command errors are sanitized before being stored or emitted.
• Docker integration tests now satisfy strict clippy checks.

Breaking

• The public Rust API changed: SyncParams gained fields, ConfigError gained ConnectionStore, and the deprecated commands::sync::execute helper was removed.

v1.0.6

Other

• Fix --nsInclude usage
• Remove deprecated --db flag from mongorestore