Homepage, domain pages, Deals, numbered catalogs and JSON browsing catalogs remain available during a D1 outage.
A guarded build captures publication state and funded availability once; browsing reads only immutable deployed assets and the server clock.
Purchase actions, signed purchase recovery and dynamic HTTP/MCP/SDK catalog operations retain fresh D1 authority and existing funding and revision fences.
Publication changes require a new browsing snapshot; the upload guard rejects a snapshot whose publication state changed during the build.
The earlier UCP candidate remains pending with its evidence and activation gates preserved. This fix neither activates UCP nor publishes new package or skill bytes.
Open Deals pages refresh their price-drop collection from the browsing snapshot, avoiding D1 reads at the one-minute refresh boundary.
Search honors D1 failure backoff and reconciles an unchanged browsing snapshot once. Deploy preflight verifies D1 credentials and read access before claiming the project.
Compatibility
API: API 1.3.0 adds default-off read-only UCP catalog POST operations. Existing HTTP GET, MCP and A2A contracts stay compatible. This browsing fix keeps this component version: dynamic operations retain fresh price and availability checks, and their schemas, methods, pins and skill bytes are unchanged. /domains.json retains its wire schema but serves the deployed browsing snapshot; /api/domain and /api/purchase-options verify current terms.
MCP: MCP 1.3.1 retains its four anonymous read-only tools and existing schemas. UCP shares their catalog authority without adding transactional tools. This browsing fix keeps this component version: dynamic operations retain fresh price and availability checks, and their schemas, methods, pins and skill bytes are unchanged.
SDK: SDK 0.3.0 adds typed UCP discovery/catalog reads and a local purchase-link helper. Existing methods remain compatible; both compatibility packages pin exactly 0.3.0. This browsing fix keeps this component version: dynamic operations retain fresh price and availability checks, and their schemas, methods, pins and skill bytes are unchanged. getCatalog() retains its response type and reads the deployed snapshot; getDomain() and getPurchaseOptions() verify current terms.
SKILL: Skill 1.3.0 adds UCP catalog and human checkout guidance while preserving MIT-0 and the existing HTTP/MCP/A2A fallback. This browsing fix keeps this component version: dynamic operations retain fresh price and availability checks, and their schemas, methods, pins and skill bytes are unchanged.
A2A: A2A 1.0.0 keeps the existing stateless JSON-RPC direct-Message profile and signed isolated acceptance evidence. No transport or admission behavior changes. This browsing fix keeps this component version: dynamic operations retain fresh price and availability checks, and their schemas, methods, pins and skill bytes are unchanged.
WEBSITE: Website 1.2.1 serves deployed price schedules and availability snapshots without request-time D1 reads. Purchase actions retain fresh D1 checks and fail closed. Activation, withdrawal and availability display changes require a guarded rebuild and deployment.
UCP: Application adapter 1.0.0 implements UCP protocol 2026-08-25 catalog search, lookup and permalink. No checkout, orders, identity or payment handlers. Production activation and real-platform acceptance remain pending. This browsing fix keeps this component version: dynamic operations retain fresh price and availability checks, and their schemas, methods, pins and skill bytes are unchanged.
UCP catalog search, lookup and buyer checkout handoff
· Upcoming
API
1.3.0
MCP
1.3.1
SDK
0.3.0
SKILL
1.3.0
A2A
1.0.0
WEBSITE
1.2.0
UCP
1.0.0
Read-only UCP search, batch lookup and product lookup share current catalog price and availability checks.
Single-domain shopping links hand buyers to Namegarage to review current terms and complete checkout.
Signed local reference-client acceptance uses synthetic storage and profiles, with all live downstream access refused.
Production gates remain off and the platform-profile allowlist remains empty. Genuine platform interoperability, deployment and distribution are unverified.
The earlier newsletter source release is explicitly superseded with its exact-version evidence retained. Its unverified skills.sh listing-preview gate carries into this release; neither version is marked complete.
Readiness fixes accept exact advertised platform profile paths, distinguish recoverable expired cursors, bound configuration, preserve peer backoff semantics and document both inactive and UCP 404 bodies. Activation and publication remain pending.
Configure the authorized isolated TEST limiter and signed fixture facade with separate native counter namespaces. Production limiting and activation remain disabled; existing WAF rate rules stay unchanged and hosted acceptance requires separate evidence.
Prepare a separate UCP-only admission database and checked worst-case per-client charge bound. Existing HTTP/MCP/A2A budgets remain unchanged; production UCP provisioning and activation stay disabled.
Compatibility
API: API 1.3.0 adds default-off read-only UCP catalog POST operations. Existing HTTP GET, MCP and A2A contracts stay compatible.
MCP: MCP 1.3.1 retains its four anonymous read-only tools and existing schemas. UCP shares their catalog authority without adding transactional tools.
SDK: SDK 0.3.0 adds typed UCP discovery/catalog reads and a local purchase-link helper. Existing methods remain compatible; both compatibility packages pin exactly 0.3.0.
SKILL: Skill 1.3.0 adds UCP catalog and human checkout guidance while preserving MIT-0 and the existing HTTP/MCP/A2A fallback.
A2A: A2A 1.0.0 keeps the existing stateless JSON-RPC direct-Message profile and signed isolated acceptance evidence. No transport or admission behavior changes.
WEBSITE: Website 1.2.0 adds a default-off single-domain purchase-link resolver. The buyer still chooses and completes the existing checkout.
UCP: Application adapter 1.0.0 implements UCP protocol 2026-08-25 catalog search, lookup and permalink. No checkout, orders, identity or payment handlers. Production activation and real-platform acceptance remain pending.
Confirmed blog subscriptions and daily email delivery
· Superseded
API
1.2.1
MCP
1.3.1
SDK
0.2.0
SKILL
1.2.0
A2A
1.0.0
WEBSITE
1.1.1
Connect the optional Google newsletter intervention to server-verified capture and offer a matching first-party signup page.
Show inline email-format errors and optional typo corrections on blog signup; reject unreachable mail domains before verification while allowing DNS failures through.
Show the email signup link in the initial blog article HTML; check subscription availability on the signup page.
Require email confirmation before enrollment, deliver one digest per day for newly published blog posts, and honor permanent blog-only unsubscribe.
Use domain-restricted Resend delivery with durable send claims, signed receipts, bounded free-plan capacity, operational alerts and isolated marked rehearsals.
Privacy v21 explains email and consent storage, untracked Resend delivery, private Google exports and pending/stopped-address retention.
Keep catalog API, MCP, SDK, skills and A2A contracts and immutable package versions unchanged; carry forward the pending skills.sh listing-preview acceptance.
Compatibility
API: API 1.2.1 retains the corrected application/json OpenAPI discovery links, anonymous catalog GET contracts and read-only A2A adapter. Newsletter signup and signed email actions are separate website flows, not catalog capabilities.
MCP: MCP 1.3.1 retains the same four tools, inputs, outputs and anonymous read-only boundary.
SDK: SDK 0.2.0 and both exact compatibility aliases remain unchanged. Source coordination metadata tracks this release; immutable npm archives and the v0.2.0 tag retain their original catalog-parity metadata and are not republished.
SKILL: Skill 1.2.0 retains the same reviewed A2A/MCP/HTTP instructions, exact SHA-256 and MIT-0 license. Only source coordination metadata changes; published tags and installs remain immutable.
A2A: A2A 1.0.0 keeps the existing stateless JSON-RPC direct-Message profile and signed isolated acceptance evidence. No transport or admission behavior changes.
WEBSITE: Website 1.1.1 captures consented Google or first-party blog signup requests, requires intentional email confirmation, delivers untracked daily digests through Resend and provides permanent blog-only unsubscribe. Reader prompts remain separately opted in; podcasts remain excluded.
Consistent OpenAPI catalog media types
· Superseded
API
1.2.1
MCP
1.3.1
SDK
0.2.0
SKILL
1.2.0
A2A
1.0.0
WEBSITE
1.1.0
Make all five RFC 9727 catalog links to /openapi.json advertise application/json, matching the served document.
Share one Python media-type value and verify generated middleware GET, HEAD and 304 responses with MCP discovery enabled and disabled.
Keep MCP, SDK, skill and A2A versions unchanged; carry the staged Website 1.1.0 newsletter candidate from sibling source records, advancing the service record from Website 1.0.0.
Preserve the staged Website 1.1.0 newsletter candidate and inherited skills.sh listing-preview gap without marking the combined release complete or activating reader flows.
Compatibility
API: API 1.2.1 corrects the RFC 9727 service-desc media type for every link to /openapi.json to application/json, matching its existing response Content-Type. Anonymous operations, URLs and response schemas remain compatible.
MCP: MCP 1.3.1 keeps its four tool contracts, transport and server-card document unchanged. This correction affects OpenAPI discovery links only.
SDK: SDK 0.2.0 and its exact compatibility-package pins stay unchanged and immutable. The client does not consume the API catalog media-type hint; methods, types and response handling remain compatible. Source release.json records this API patch without republishing package versions.
SKILL: Skill 1.2.0 and its MIT-0 canonical artifact retain identical bytes and existing installation commands. Public capabilities and privacy guidance are unchanged. Source release.json records this API patch; inherited directory acceptance remains explicit.
A2A: A2A 1.0.0 retains its independent stateless JSON-RPC 1.0 direct-Message profile and read-only selection behavior.
WEBSITE: Website 1.1.0 remains the staged newsletter component for consented signup, intentional email confirmation, untracked daily digests and permanent blog-only unsubscribe. Public bridge activation and verification remain pending. Reader prompts stay separately opted in and podcasts excluded. This API discovery correction activates no reader or email flow.
Google preferred-source popup and free reader signup
· Superseded
API
1.2.0
MCP
1.3.1
SDK
0.2.0
SKILL
1.2.0
A2A
1.0.0
WEBSITE
1.0.0
Invoke Google's official preferred-source client from the existing blog toolbar, keeping a safe fallback and loading nothing on idle visits.
Activate the separate free newsletter signup in Publisher Center with required consent and no required name field.
Keep API, MCP, SDK, skill and A2A contracts and immutable package versions unchanged; coordinate their source release records under this new ID.
Carry forward the pending A2A/catalog candidate and its unresolved skills.sh listing-preview acceptance without marking it complete.
Privacy v20 explains the click-triggered Google client and service measurement; retained audio navigation mounts the same local handler.
Compatibility
API: API 1.2.0 keeps the existing anonymous catalog GET contracts and read-only A2A adapter; this release changes only the website reader experience.
MCP: MCP 1.3.1 retains the same four tools, inputs, outputs and anonymous read-only boundary.
SDK: SDK 0.2.0 and both exact compatibility aliases remain unchanged. Source coordination metadata tracks this release; immutable npm archives and the v0.2.0 tag retain their original catalog-parity metadata and are not republished.
SKILL: Skill 1.2.0 retains exactly the reviewed A2A/MCP/HTTP instructions and SHA-256. Update source coordination metadata only; preserve immutable tags, installs and MIT-0.
A2A: A2A 1.0.0 keeps the existing stateless JSON-RPC direct-Message profile and its signed isolated acceptance evidence. No transport or admission behavior changes.
WEBSITE: Website 1.0.0 is the first separately tracked reader-experience component: native Google preferred-source popup on explicit blog follow clicks, plus the separately activated free newsletter CTA. Podcasts stay excluded.
Read-only A2A domain selection and catalog parity
· Superseded
API
1.2.0
MCP
1.3.1
SDK
0.2.0
SKILL
1.2.0
A2A
1.0.0
HTTP counterparts for all four public MCP tools, including published descriptions and potential uses.
Typed SDK methods and one matching catalog skill artifact.
A separate developer changelog and required release coordination.
Read-only anonymous A2A domain-selection concierge with strict typed constraints and no task persistence.
Supersedes the pending catalog-parity candidate, including all outstanding publication acceptance.
Preserve anonymous standard Python client access to the public read-only RPC origins without changing WAF or admission limits.
Compatibility
API: Adds the anonymous A2A adapter; existing catalog GET operations and schemas stay compatible.
MCP: MCP 1.3.1 and its four existing tools keep their current contracts.
SDK: SDK 0.2.0 and both exact aliases remain compatible and immutable. A2A is an independent transport; no SDK method changes. Source coordination metadata tracks this release while existing npm/tag bytes remain those published for catalog parity.
