@neocompose/cli 0.26.4 → 0.27.0

package/CHANGELOG.md

@@ -1,5 +1,58 @@
 # Changelog
 
+## [0.27.0] - 2026-08-10
+
+### Added
+
+- `neo logout [--api <url>]`: targeted local credential deletion for exactly
+  one API origin — the namespaced OS-keychain entry and the credentials-file
+  row — plus best-effort server session revocation. Other origins, other
+  namespaces, and the rest of the config home are never touched.
+- `NEO_COMPOSE_CONFIG_HOME`: an absolute directory that replaces
+  `$XDG_CONFIG_HOME/neo-compose` for Neo credential state only, so isolated
+  environments (P53 agent rigs) keep their own credential store without
+  changing the ambient XDG configuration of unrelated tools.
+- `NEO_COMPOSE_CREDENTIAL_NAMESPACE`: scopes the OS-keychain account
+  (`<namespace>::<api origin>`) so isolated environments sharing one OS user
+  cannot read or delete each other's tokens.
+
+### Fixed
+
+- The credential-store docstring described a two-level precedence with the
+  OS keychain "layering in later"; the keychain layer has existed for some
+  time. The docstring now matches the real precedence (env var, then
+  keychain, then credentials file) and documents that the metadata row is
+  written even when the keychain holds the token.
+
+## [0.26.5] - 2026-08-10
+
+### Changed
+
+- Make Class construction incremental: journal newly-created Session rows and
+  constructor ownership edges, validate only ownership that changed, and avoid
+  rebuilding evaluator indexes for builder-proven fresh graphs.
+- Cache immutable constructor descriptors, generic environments, resolved
+  members, initializer validation, and scalar materialization plans across a
+  shared project runtime. Constructor publication now keeps inherited storage
+  declarations sparse and skips graph passes when no assignment could orphan
+  a default value.
+- Reduce per-row allocation overhead with one invocation timestamp and direct
+  scalar factories. The animation-shaped regression fixture (259 constructors,
+  1,166 Session rows) measured as low as 7.94ms warm median and 11.91ms cold
+  median across the final clean benchmark waves.
+
+### Fixed
+
+- Preserve an existing localized-text identity when editing a localizable class
+  member default. Canonical source now renders the main-locale prose instead of
+  its storage ID, while edits retain translations, comments, and review state;
+  legacy inline defaults remain supported.
+- Group authored member value seeds under their `.neo` source in `neo status`
+  and `neo diff`, include them in JSON output, and no longer report a seed-only
+  diff as clean.
+- Accept an empty main-locale string in an authored value seed. Empty required
+  string defaults can now materialize without a misleading schema-commit 400.
+
 ## [0.26.4] - 2026-08-10
 
 ### Fixed

package/README.md

@@ -419,6 +419,7 @@ authorization boundary.
 | `--version`                                           | Print the installed CLI package version.                                  |
 | `login`                                               | Authenticate the selected profile.                                        |
 | `whoami`                                              | Inspect the selected profile.                                             |
+| `logout [--api <url>]`                                | Delete the stored credential for one API origin and revoke its session.   |
 | `init --project <id> [--version <id>]`                | Create a format-4 working copy and perform its first reset pull.          |
 | `doctor`                                              | Validate format/compiler/editor/source/file contracts; no .NET discovery. |
 | `pull [--force\|--reset] [--regenerate-source-names]` | Merge remote changes or regenerate canonical source, names, and binaries. |