cashclaw 1.2.1 → 1.3.0

package/.idea/cashclaw.iml

@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<module type="JAVA_MODULE" version="4">
+  <component name="NewModuleRootManager" inherit-compiler-output="true">
+    <exclude-output />
+    <content url="file://$MODULE_DIR$" />
+    <orderEntry type="inheritedJdk" />
+    <orderEntry type="sourceFolder" forTests="false" />
+  </component>
+</module>

package/.idea/misc.xml

@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="ProjectRootManager" version="2" languageLevel="JDK_24" default="true" project-jdk-name="openjdk-24" project-jdk-type="JavaSDK">
+    <output url="file://$PROJECT_DIR$/out" />
+  </component>
+</project>

package/.idea/modules.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="ProjectModuleManager">
+    <modules>
+      <module fileurl="file://$PROJECT_DIR$/.idea/cashclaw.iml" filepath="$PROJECT_DIR$/.idea/cashclaw.iml" />
+    </modules>
+  </component>
+</project>

package/.idea/vcs.xml

@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="VcsDirectoryMappings">
+    <mapping directory="" vcs="Git" />
+    <mapping directory="$PROJECT_DIR$" vcs="Git" />
+  </component>
+</project>

package/CHANGELOG.md

@@ -1,23 +1,51 @@
 # Changelog
 
+All notable changes to CashClaw will be documented in this file.
+
+## [1.3.0] - 2026-03-19
+
+### Added
+- Live HYRVE AI marketplace integration (api.hyrveai.com)
+- API key authentication (X-API-Key header) for agent-platform communication
+- New bridge functions: `deliverJob()`, `getAgentProfile()`, `listOrders()`
+- Config fields: `hyrve.api_key`, `hyrve.agent_id`, `hyrve.dashboard_url`, `hyrve.enabled`
+- Error response parsing for real API error bodies (JSON and plain text)
+- Bridge config validation helper (`checkBridgeConfig`)
+
+### Changed
+- `hyrve-bridge.js` now connects to live production API at api.hyrveai.com/v1
+- Improved error handling with real API response parsing (`parseErrorResponse`)
+- All bridge functions include X-API-Key header when configured
+- Updated README with live marketplace links (app.hyrveai.com, api.hyrveai.com)
+- Updated README with HYRVE AI Integration section documenting all bridge functions
+
+### Fixed
+- Bridge connection timeout handling with better error messages
+- Config migration for existing installations (new hyrve fields merge with defaults)
+
+## [1.2.1] - 2026-03-16
+
+### Fixed
+- Minor bug fixes and stability improvements
+
 ## [1.2.0] - 2026-03-15
 
 ### Added
-- **5 New Skills** — Email Outreach ($9-$29), Competitor Analyzer ($19-$49), Landing Page ($15-$39), Data Scraper ($9-$25), Reputation Manager ($19-$49). CashClaw now ships with 12 revenue-generating skills.
+- **5 New Skills** -- Email Outreach ($9-$29), Competitor Analyzer ($19-$49), Landing Page ($15-$39), Data Scraper ($9-$25), Reputation Manager ($19-$49). CashClaw now ships with 12 revenue-generating skills.
 - 10 new mission templates for the new skills (basic + pro tiers each).
 - Environment variable support: `CASHCLAW_STRIPE_SECRET_KEY` as alternative to config file.
 - Corrupted mission file warnings (previously silently skipped).
 - Shared version helper (`src/utils/version.js`) for consistent version display.
 
 ### Fixed
-- **Cancel status log bug** — Mission cancel audit trail now correctly shows the previous status instead of always logging "was: cancelled".
-- **Short ID collision** — Multiple missions sharing the same ID prefix now show an ambiguous match warning instead of silently picking the first match.
-- **Hardcoded versions** — All hardcoded version strings throughout the codebase now dynamically read from `package.json`.
+- **Cancel status log bug** -- Mission cancel audit trail now correctly shows the previous status instead of always logging "was: cancelled".
+- **Short ID collision** -- Multiple missions sharing the same ID prefix now show an ambiguous match warning instead of silently picking the first match.
+- **Hardcoded versions** -- All hardcoded version strings throughout the codebase now dynamically read from `package.json`.
 
 ### Security
-- **CORS restriction** — Dashboard API now restricts CORS to localhost origins. Agents and curl still work (no Origin header = no restriction).
-- **Config API protection** — `POST /api/config` now blocks modification of sensitive keys (`stripe.secret_key`, `stripe.webhook_secret`).
-- **Prototype pollution guard** — Config key traversal (both CLI and API) now rejects `__proto__`, `constructor`, and `prototype` keys.
+- **CORS restriction** -- Dashboard API now restricts CORS to localhost origins. Agents and curl still work (no Origin header = no restriction).
+- **Config API protection** -- `POST /api/config` now blocks modification of sensitive keys (`stripe.secret_key`, `stripe.webhook_secret`).
+- **Prototype pollution guard** -- Config key traversal (both CLI and API) now rejects `__proto__`, `constructor`, and `prototype` keys.
 
 ### Changed
 - Default config now includes 10 service types (up from 5).
@@ -26,16 +54,13 @@
 - HYRVEai User-Agent header now reads version from package.json.
 - Test suite expanded with version, security, and new skill tests.
 
-### Why This Release
-CashClaw agents need more ways to earn. Five new skills expand the service catalog from 7 to 12 while security hardening protects the dashboard API — all without breaking autonomous agent operation. Every security change preserves agent bot compatibility.
-
 ## [1.1.0] - 2026-03-14
 
 ### Added
-- **Mission Audit Trail** — Every mission step is now logged with timestamps. What was requested, what was delivered, and the full output trail. No invoice goes out without proof.
-- `cashclaw missions trail <id>` — View the formatted audit trail for any mission in the terminal.
-- `cashclaw missions export <id>` — Export mission proof as a markdown file for client disputes or record-keeping.
-- `GET /api/missions/:id/trail` — Dashboard API endpoint returning the audit trail as JSON.
+- **Mission Audit Trail** -- Every mission step is now logged with timestamps. What was requested, what was delivered, and the full output trail. No invoice goes out without proof.
+- `cashclaw missions trail <id>` -- View the formatted audit trail for any mission in the terminal.
+- `cashclaw missions export <id>` -- Export mission proof as a markdown file for client disputes or record-keeping.
+- `GET /api/missions/:id/trail` -- Dashboard API endpoint returning the audit trail as JSON.
 
 ### Changed
 - Mission objects now include an `audit_trail` array tracking all state changes.
@@ -43,9 +68,6 @@ CashClaw agents need more ways to earn. Five new skills expand the service catal
 - Dashboard health endpoint now reports version `1.1.0`.
 - Updated package description to mention audit trails.
 
-### Why This Release
-Community feedback was clear: *"Without proof of actual work done, the invoice becomes negotiation."* Mission Audit Trail solves this. Every step is timestamped. Every deliverable is tracked. Dispute resolution and a work proof dashboard are on the roadmap.
-
 ## [1.0.2] - 2026-03-10
 
 ### Fixed