nkavian · Nov 1, 2026 · Nov 1, 2026
diff --git a/.changeset/accurate-command-input-schemas.md b/.changeset/accurate-command-input-schemas.md
diff --git a/.changeset/arch-linux-package.md b/.changeset/arch-linux-package.md
diff --git a/.changeset/clear-odp-validation-errors.md b/.changeset/clear-odp-validation-errors.md
diff --git a/.changeset/cli-core-coverage.md b/.changeset/cli-core-coverage.md
diff --git a/.changeset/codex-plugin-metadata.md b/.changeset/codex-plugin-metadata.md
diff --git a/.changeset/consistent-resource-urls.md b/.changeset/consistent-resource-urls.md
diff --git a/.changeset/inspect-error-details.md b/.changeset/inspect-error-details.md
diff --git a/.changeset/localhost-payment-inspection.md b/.changeset/localhost-payment-inspection.md
diff --git a/.changeset/non-systemd-vault-policy.md b/.changeset/non-systemd-vault-policy.md
diff --git a/.changeset/non-systemd-vault-service.md b/.changeset/non-systemd-vault-service.md
diff --git a/.changeset/openapi-request-alternatives.md b/.changeset/openapi-request-alternatives.md
diff --git a/.changeset/published-discovery-enrollment-sdks.md b/.changeset/published-discovery-enrollment-sdks.md
diff --git a/.changeset/quiet-agents-travel.md b/.changeset/quiet-agents-travel.md
diff --git a/.changeset/quiet-circles-filter.md b/.changeset/quiet-circles-filter.md
diff --git a/.changeset/repeat-explicit-aep-enrollment.md b/.changeset/repeat-explicit-aep-enrollment.md
diff --git a/.changeset/service-document-reading.md b/.changeset/service-document-reading.md
diff --git a/.changeset/tidy-linux-development.md b/.changeset/tidy-linux-development.md
diff --git a/.changeset/tidy-macos-startup.md b/.changeset/tidy-macos-startup.md
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "inflow",
-  "version": "0.14.2",
+  "version": "0.15.0",
   "description": "InFlow - agentic MPP / x402 payments from your machine.",
   "author": {
     "name": "Jarwin, Inc.",

diff --git a/package.json b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "inflow",
   "private": true,
-  "version": "0.14.2",
+  "version": "0.15.0",
   "type": "module",
   "description": "InFlow — agentic discovery, onboarding, and payments from your machine.",
   "repository": {

diff --git a/packages/cli/CHANGELOG.md b/packages/cli/CHANGELOG.md
@@ -1,5 +1,135 @@
 # @inflowpayai/inflow
 
+## 0.15.0
+
+### Minor Changes
+
+- [#189](https://github.com/inflowpayai/inflow-cli/pull/189)
+  [`c654f0a`](https://github.com/inflowpayai/inflow-cli/commit/c654f0afc473f7ef62f1a9562d3d2704f672a042) Thanks
+  [@nkavian](https://github.com/nkavian)! - Add Arch Linux and Arch Linux ARM packages to the Linux installer, with
+  verified release checksums and vault-preserving installation, upgrade, and removal hooks.
+
+- [#181](https://github.com/inflowpayai/inflow-cli/pull/181)
+  [`6cc2e15`](https://github.com/inflowpayai/inflow-cli/commit/6cc2e15efff871dcc23b032b0d9ee9ebe93a20dd) Thanks
+  [@nkavian](https://github.com/nkavian)! - Add explicit administrator startup for the packaged Linux vault on systems
+  without systemd. Keep vault unlocking under the ordinary user's identity, enforce the service sandbox, and report
+  startup instructions when the service is absent. Fix a Linux broker handoff race that could lose the first request
+  after authentication during concurrent startup. Close active and authenticating vault connections during service
+  shutdown so connected clients do not block package upgrades or service recovery.
+
+- [#188](https://github.com/inflowpayai/inflow-cli/pull/188)
+  [`5e20f5c`](https://github.com/inflowpayai/inflow-cli/commit/5e20f5c04e2aec63adf4a850832599b2f61e4667) Thanks
+  [@nkavian](https://github.com/nkavian)! - Display Service documents in AEP inspection and add `aep document` for
+  anonymous reading of full text, Service-provided summaries, or web links. Agent output contains fenced, rendered text
+  with presentation instructions; reading does not acknowledge documents or enroll with a Service.
+
+  Display enrollment requirements as Required or Not Required while preserving the protocol values in structured output.
+
+  Describe document responses through --schema and MCP outputSchema, and include reading instructions in web-only
+  results.
+
+### Patch Changes
+
+- [#182](https://github.com/inflowpayai/inflow-cli/pull/182)
+  [`513cd72`](https://github.com/inflowpayai/inflow-cli/commit/513cd7239287749e20a0683936558d800832edb0) Thanks
+  [@nkavian](https://github.com/nkavian)! - Correct command input schemas so options with defaults are optional in
+  `--schema`, generated command documentation, and MCP discovery. Preserve output-schema requirements and argument
+  parsing.
+
+  Describe AEP, ODP, directory, OpenAPI, combined inspection, vault, logout, and subscription management responses in
+  command schemas and MCP discovery, with structured MCP results matching the existing text responses. Include existing
+  AEP timeout and polling limits in input metadata. Payment and streaming or array response schemas remain outside this
+  change.
+
+- [#182](https://github.com/inflowpayai/inflow-cli/pull/182)
+  [`15d824e`](https://github.com/inflowpayai/inflow-cli/commit/15d824e30b06e1eab0626a2fe1ff1df2fdcb0d37) Thanks
+  [@nkavian](https://github.com/nkavian)! - Explain known ODP action document validation failures, including invalid
+  OpenAPI documents and missing JSON Schema version declarations, without exposing arbitrary internal error messages.
+
+- [#175](https://github.com/inflowpayai/inflow-cli/pull/175)
+  [`43cb4b4`](https://github.com/inflowpayai/inflow-cli/commit/43cb4b4528e6f3325c3026b153538296d7a7b2fa) Thanks
+  [@nkavian](https://github.com/nkavian)! - Prevent repeated subscription cancellation requests during interactive
+  rendering.
+
+  Preserve approval denial, timeout, cancellation, and server-error responses when AEP fetch or payment authentication
+  requires signing approval.
+
+  Expand regression coverage for authentication, credential storage, discovery, and payment command flows.
+
+  Forward explicitly configured bearer access tokens to the MPP and x402 payment clients.
+
+  Release public-document stream readers even when cancellation fails after a stream error.
+
+  Keep platform request timeouts and cancellation active while reading response bodies.
+
+  Preserve existing platform identity lookup during AEP fetch and payment authentication without automatically
+  provisioning or enrolling an identity.
+
+  Clear the current passphrase buffer when the replacement-passphrase prompt is cancelled.
+
+- [#188](https://github.com/inflowpayai/inflow-cli/pull/188)
+  [`5e20f5c`](https://github.com/inflowpayai/inflow-cli/commit/5e20f5c04e2aec63adf4a850832599b2f61e4667) Thanks
+  [@nkavian](https://github.com/nkavian)! - Default scheme-less resource URLs to HTTPS across inspection, payment,
+  fetch, and catalog commands. Report mismatched Service Document enrollment acknowledgements explicitly.
+
+- [#188](https://github.com/inflowpayai/inflow-cli/pull/188)
+  [`5e20f5c`](https://github.com/inflowpayai/inflow-cli/commit/5e20f5c04e2aec63adf4a850832599b2f61e4667) Thanks
+  [@nkavian](https://github.com/nkavian)! - Show the specific AEP inspection failure instead of a generic message, and
+  identify the discovery URL when AEP is not advertised.
+
+- [#173](https://github.com/inflowpayai/inflow-cli/pull/173)
+  [`203bbbb`](https://github.com/inflowpayai/inflow-cli/commit/203bbbb6f555b02cdf0e28b402fe0354a7ed2ea4) Thanks
+  [@nkavian](https://github.com/nkavian)! - Allow local HTTP development endpoints to be inspected and paid without
+  requesting TAP signatures.
+
+- [#180](https://github.com/inflowpayai/inflow-cli/pull/180)
+  [`59614e0`](https://github.com/inflowpayai/inflow-cli/commit/59614e0f044b23a7bc2acf94108188acf4dc3434) Thanks
+  [@nkavian](https://github.com/nkavian)! - Default vault sleep locking to off on Linux without systemd. Keep the
+  eight-hour idle timeout and preserve saved policies. Sleep locking remains enabled by default on systemd Linux, macOS,
+  and Windows.
+
+- [#182](https://github.com/inflowpayai/inflow-cli/pull/182)
+  [`15d824e`](https://github.com/inflowpayai/inflow-cli/commit/15d824e30b06e1eab0626a2fe1ff1df2fdcb0d37) Thanks
+  [@nkavian](https://github.com/nkavian)! - Support allOf, anyOf, and oneOf during OpenAPI request preparation within
+  the supported validation subset, with bounded evaluation and explicit errors for unsupported alternative constraints.
+
+- [#188](https://github.com/inflowpayai/inflow-cli/pull/188)
+  [`5e20f5c`](https://github.com/inflowpayai/inflow-cli/commit/5e20f5c04e2aec63adf4a850832599b2f61e4667) Thanks
+  [@nkavian](https://github.com/nkavian)! - Update the AEP and ODP SDKs to their published releases.
+
+- [#170](https://github.com/inflowpayai/inflow-cli/pull/170)
+  [`f5690d8`](https://github.com/inflowpayai/inflow-cli/commit/f5690d80a49c2b36d0532299dbbae1ec81ce4c15) Thanks
+  [@nkavian](https://github.com/nkavian)! - Upgrade the AEP Agent SDK to 0.6.0 for protected-resource credential
+  selection, redirect isolation, and pending-approval handling fixes.
+
+- [#177](https://github.com/inflowpayai/inflow-cli/pull/177)
+  [`207932e`](https://github.com/inflowpayai/inflow-cli/commit/207932e6a7386c83d121e9895a7a07f46608ff9f) Thanks
+  [@nkavian](https://github.com/nkavian)! - Exclude unsupported Circle Gateway offers from x402 inspection and payment
+  selection, retain ordinary payment options, and explain when the seller only offers unsupported payments.
+
+  Update the InFlow x402 buyer SDK to 0.11.2.
+
+- [#188](https://github.com/inflowpayai/inflow-cli/pull/188)
+  [`5e20f5c`](https://github.com/inflowpayai/inflow-cli/commit/5e20f5c04e2aec63adf4a850832599b2f61e4667) Thanks
+  [@nkavian](https://github.com/nkavian)! - Send explicitly repeated AEP enrollments through approval to the Service
+  instead of returning its existing status. Preserve the existing Agent identity and let the Service decide how to apply
+  the approved claims. Request human approval for required Service documents and submit only the document identifiers
+  returned by InFlow after approval. Display document links while waiting for approval and expose acknowledged
+  identifiers in the enrollment response schema. Report unmet Service requirements with document IDs and explicit Enroll
+  guidance, without automatically enrolling or retrying Grant.
+
+- [#179](https://github.com/inflowpayai/inflow-cli/pull/179)
+  [`a818766`](https://github.com/inflowpayai/inflow-cli/commit/a81876633725b4c272b9e48877a213d050cbc354) Thanks
+  [@nkavian](https://github.com/nkavian)! - Allow Linux and Windows repository builds to use per-user development vaults
+  without installed system services. Select development behavior explicitly at build time and require packaged peer
+  verification independently of executable location.
+
+- [#178](https://github.com/inflowpayai/inflow-cli/pull/178)
+  [`bd51c8f`](https://github.com/inflowpayai/inflow-cli/commit/bd51c8f9110257da68962e759d4cbf4c00ba8c90) Thanks
+  [@nkavian](https://github.com/nkavian)! - Fix Intel macOS startup under Rosetta, align macOS packaging with the 13.5
+  minimum, and include the stapled notarization ticket in release archives. Verify startup and native deployment targets
+  from the distributed archive.
+
 ## 0.14.2
 
 ### Patch Changes

diff --git a/packages/cli/package.json b/packages/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@inflowpayai/inflow",
-  "version": "0.14.2",
+  "version": "0.15.0",
   "type": "module",
   "license": "MIT",
   "description": "InFlow - agentic discovery, onboarding, and payments from your machine.",

diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @inflowpayai/inflow-core
 
+## 0.7.1
+
+### Patch Changes
+
+- [#170](https://github.com/inflowpayai/inflow-cli/pull/170)
+  [`f5690d8`](https://github.com/inflowpayai/inflow-cli/commit/f5690d80a49c2b36d0532299dbbae1ec81ce4c15) Thanks
+  [@nkavian](https://github.com/nkavian)! - Upgrade the AEP Agent SDK to 0.6.0 for protected-resource credential
+  selection, redirect isolation, and pending-approval handling fixes.
+
 ## 0.7.0
 
 ### Minor Changes

diff --git a/packages/core/package.json b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@inflowpayai/inflow-core",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "private": true,
   "type": "module",
   "license": "MIT",

diff --git a/plugins/inflow/.claude-plugin/plugin.json b/plugins/inflow/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "inflow",
-  "version": "0.14.2",
+  "version": "0.15.0",
   "description": "Authenticate with InFlow, inspect balances and deposit addresses, and perform agent-native payments via x402 and MPP.",
   "author": {
     "name": "Jarwin, Inc."

diff --git a/plugins/inflow/.codex-plugin/plugin.json b/plugins/inflow/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "inflow",
-  "version": "0.14.2",
+  "version": "0.15.0",
   "description": "InFlow - agentic MPP / x402 payments from your machine.",
   "author": {
     "name": "Jarwin, Inc.",

diff --git a/plugins/inflow/.cursor-plugin/plugin.json b/plugins/inflow/.cursor-plugin/plugin.json
@@ -1,7 +1,7 @@
 {
   "name": "inflow",
   "displayName": "InFlow",
-  "version": "0.14.2",
+  "version": "0.15.0",
   "description": "Authenticate with InFlow, inspect balances and deposit addresses, and perform agent-native payments via x402 and MPP.",
   "author": {
     "name": "Jarwin, Inc."

diff --git a/skills/agentic-discovery/SKILL.md b/skills/agentic-discovery/SKILL.md
@@ -1,5 +1,5 @@
 ---
-version: 0.14.2
+version: 0.15.0
 name: agentic-discovery
 description: Discover Services through InFlow using ODP or public OpenAPI documents. Use to search the directory, browse Collections and Offerings, inspect, prepare or call OpenAPI operations, or resolve Actions before enrollment or payment.
 allowed-tools: ['Bash(inflow:*)', 'Bash(brew:*)', 'Bash(curl:*)']

diff --git a/skills/agentic-enrollment/SKILL.md b/skills/agentic-enrollment/SKILL.md
@@ -1,5 +1,5 @@
 ---
-version: 0.14.2
+version: 0.15.0
 name: agentic-enrollment
 description: Inspect, enroll with, authenticate to, and manage credentials for Agent Enrollment Protocol Services through InFlow. Use when an agent needs to discover an AEP Service, access an AEP-protected resource, check enrollment, request or revoke Service credentials, or continue an InFlow approval.
 allowed-tools: ['Bash(inflow:*)', 'Bash(brew:*)', 'Bash(curl:*)']

diff --git a/skills/agentic-payments/SKILL.md b/skills/agentic-payments/SKILL.md
@@ -1,5 +1,5 @@
 ---
-version: 0.14.2
+version: 0.15.0
 name: agentic-payments
 description: Authenticate with InFlow and pay HTTP 402-protected resources via MPP (the `Payment` auth scheme) or x402. Use when the user invokes the `inflow` CLI or asks to log in / connect to InFlow.
 allowed-tools: ['Bash(inflow:*)', 'Bash(brew:*)', 'Bash(curl:*)']