releases-cli

Releases CLI is the command-line client for releases.sh, a hosted registry that indexes release notes, changelogs and product announcements gathered from GitHub, RSS/Atom/JSON feeds and product changelog pages. This repository contains only the CLI; the API worker, MCP server, web frontend and ingest pipeline live in a separate backend repository. Searching and browsing work without an account or configuration, since the CLI talks to the hosted API. Signing in unlocks personal features: following organizations and products, a personalized release feed, and outbound webhooks. Login uses the OAuth 2.0 Device Authorization Grant, approving a short code in a signed-in browser; only a read-only API key is stored locally (in ~/.releases/credentials with 0600 permissions), never the browser session. Write and admin access is described as a separate closed beta. Installation options include Homebrew, npm (global install or npx), a shell installer, and signed precompiled binaries published with checksums for air-gapped or pinned installs. Shell completions are installed automatically by Homebrew and can be enabled elsewhere with a completion command. Core commands cover searching releases (optionally bounded by publish date with relative shorthand such as 90d or 4w), tailing the latest releases for a product, listing by category, fetching an org, product or source, viewing an AI-generated organization overview, registry statistics, the project's own changelog, and submitting a source URL or feedback. Identifiers are interchangeable: slugs, typed IDs, or org/slug coordinates all work, and IDs are stable across renames. Reader commands accept a JSON flag, with list commands emitting an items/pagination envelope and release readers offering a slim default shape or a full payload. Follow and feed commands manage a personal timeline of followed orgs and products. Webhook commands register signed release.created POSTs, either scoped to an organization (up to ten, with optional source, product and type filters) or to the current follow graph (one webhook). Signing keys are shown once on creation or rotation, and a verify command checks signatures locally. Webhooks can also be managed in a shared workspace, where only owners and admins may create, edit, rotate or delete them while any member can list, view and test. Contribution commands need no account: submitting a changelog URL, sending bug or idea feedback, and validating a releases.json v2 manifest against the published schema offline. Both submit and feedback support interactive prompts, stdin input, and dry-run JSON previews. For AI agents, the project points to a hosted MCP server reachable through mcp-remote, and the repository doubles as a Claude Code marketplace plugin providing hosted MCP tools, a lookup command and auto-trigger skills. A skills install command adds the skills to other agent tools as well. Environment variables allow overriding the API key and API base URL, and disabling anonymous telemetry. For TLS-intercepting proxies, the compiled binary honors the standard Node/OpenSSL CA certificate variables. Documented exit codes distinguish success, application errors, usage or provider errors, and cancellation. The project is MIT licensed.