Skip to content
SHPBL

The house · Release notes

Release notes

What changed, when, and which tools it touched. The server answering https://shpbl.com/mcp right now reports 1.17.0 — ask subscription_status and it will tell you itself.

1.17.0

25 August 2026

We pointed the server at itself — and shipped what it found

  • New free tool, selfcheck_mcp: the server audited against its own six verification axes, live, with one pass / fail / unavailable line per check — tool surface against the priced tier table, version agreement, subscription register, catalog, discovery vault, repository write authority, billing. An unavailable check is never reported as a pass.
  • Authority, fixed: a repository connection now records GitHub's own repository_selection field. An installation with an empty repository list used to be read as "all repositories", which made a failed sync indistinguishable from an account-wide grant — two opposite answers, one of which hands out write access.
  • The gate now resolves exactly one acting identity, in a stated order: the key passed on the call, then the key in the request header, then the key your signed-in account is bound to. Previously the database picked, so a caller holding two keys could be gated either way on different calls, and the throttle could brake one key while the meter charged another.
  • A subscriber who passes their key as a tool argument to list_repos is now paced on their own budget instead of the shared anonymous one.
  • The read-credential resolver returns the credential it reports. It used to say "server" and hand back nothing, so a configured token went unused.
  • The gauntlet's closing step refuses without a ledger instead of re-running the opening comparison under a closing label.
  • Subscription renewal dates are read from both places Stripe now publishes them, so a renewal date is never silently null.
  • Key generation is rejection-sampled: every character in a new key is now equally likely.
  • Environment files are out of the tree, with a documented .env.example in their place.
  • New guards in the test suite pin the two authority rules that were previously only comments: bearer trust stays confined to the sign-in door, and write authority widens only on an explicit grant.

1.16.0

25 August 2026

Nothing charged for a refused call, and both doors documented honestly

  • A Governor-only tool called with a Practitioner key is now refused before the meter runs, so a refused call never spends an allowance — exactly as subscription_status has always promised.
  • Each key is metered against its own monthly ceiling instead of the highest one on sale, and a quota message now names the real number.
  • The keyless tools that reach GitHub — evaluate_repo and list_repos — are paced too, which protects the shared survey budget every subscriber depends on.
  • When the component ledger cannot be reached, a run says so instead of reporting "no prior art in the library".
  • list_repos no longer calls a repository writable when the installation did not grant it.
  • Fixed a gauntlet instruction that named a tool which does not exist, and an invalid branch name from an unusual run id.
  • The README, server.json, and the distribution roadmap now describe the sign-in door and the key-only door as they actually are.

1.15.0

24 August 2026

Ledger integrity, one owner per name, published server manifest

  • Published server.json so MCP clients and the official registry can read the server's identity, endpoint, and transport without a human in the loop.
  • Every writing tool now declares its behaviour explicitly (read-only, destructive, open-world), which is what directory review reads.
  • The run budget is enforced before any model call, so a spent budget refuses the run instead of overspending it.
  • Removed duplicate definitions of the component classes and the verification axes: one owner per name across the codebase.
  • Fixed a file-risk pattern that mis-flagged token-handling modules.
  • Added privacy, terms, and these release notes as first-class pages.

1.14.0

21 August 2026

Twelve tools, and a name search engines can read

  • Folded twenty-two tools into twelve, each titled and annotated: library_index, library_document, and library_search replace eleven reference tools.
  • Renamed the product to SHPBL: Repository Audit & Repair everywhere.
  • repo_access folded into list_repos, so repository discovery is one call.

1.13.0

18 August 2026

Ranked search, a free protocol tool, and brief mode

  • Multi-term ranked search with fallbacks, so a near-miss query still returns the right document.
  • method_protocol is free: an agent can read the whole method before it spends a call.
  • brief: true on the heavy tools, to spend a fraction of the context for the same decision.

1.12.0

15 August 2026

run_gauntlet — the whole method in one call

  • One conductor tool sequences evaluation, harvest, library comparison, and the repair order.
  • Governor Edition 1.1.0 baseline: the retired Ascension layers are gone from every total.

1.11.0

12 August 2026

Prior art, citations, and submitted capabilities

  • A harvest is matched against the library and cites what it matched, so a finding can be traced.
  • submit_capability sends a harvested capability for human curation.

Connect the server from agent access. The terms and privacy statement govern its use.