# Changelog

All notable changes to the `proboctl` CLI will be documented in this file.

## Unreleased

## [0.8.0] - 2026-06-24

### Changed

- Enriched common third-party catalog entries with DPA, ToS, SLA, status/security/trust pages, subprocessor lists, and certifications from production data

## [0.7.1] - 2026-06-23

### Fixed

- Bump `golang.org/x/image` to v0.43.0, remediating CVE-2026-33813 (denial of service via malformed WEBP parsing) and CVE-2026-46602 (missing tile-size limit in `x/image/tiff`)

## [0.7.0] - 2026-06-19

### Changed

- `common-tracker-pattern mark-first-party` now also blanks the stale description on the catalog row and its uncategorised org tracker patterns, so a terminal first-party row no longer keeps a description naming a cleared vendor
- Unlinking a vendor now has full parity with first-party cleanup: it clears the stale description on both the catalog row and its uncategorised org tracker patterns and remaps those patterns to drop the stale vendor and re-resolve (re-arming catalog enrichment)

## [0.6.0] - 2026-06-18

### Added

- `proboctl common-tracker-pattern upsert` — create or update a catalog pattern by its natural key (tracker type, pattern, max age), applying each field only when its flag is passed and honoring the FIRST_PARTY and description-preservation invariants; `--enrich` re-arms the row for the async enrichment worker
- `proboctl common-tracker-pattern mark-first-party` and an `--attribution` filter on `common-tracker-pattern list` to audit and remediate wrongly attributed rows

### Changed

- `common-tracker-pattern` upsert now normalizes the attribution verdict when a vendor is linked or unlinked without `--attribution`: UNDETERMINED is promoted to THIRD_PARTY on link and THIRD_PARTY is downgraded to UNDETERMINED on unlink

## [0.5.0] - 2026-06-18

### Added

- `--enrich` flag on `common-third-party upsert` triggers enrichment immediately after upsert
- Enrichment provenance (state, attempts, last-run status, error, per-field confidence) now visible in `common-third-party` and `common-tracker-pattern` list and show views; enrichment tracking unified with outcome-based status

## [0.4.0] - 2026-06-12

### Added

- `proboctl common-third-party reenrich` — re-arm the async enrichment worker for selected catalog rows (verbatim via `--id`/`--slug`, or across the catalog via `--category`/`--keyword`/`--state`/`--status`), gated by `--dry-run` and `--yes`
- `proboctl common-third-party stats` — summarize the catalog by enrichment state and last run status
- `--state`/`--status` filters and `STATE`/`STATUS` columns on `common-third-party list`; enrichment state, attempts, last run status, error, per-field provenance, and discovered domains on `common-third-party show`

## [0.3.1] - 2026-06-11

### Changed

- References updated to probo.com

## [0.3.0] - 2026-06-10

### Added

- `proboctl common-third-party upsert` — create or update a vendor in the global catalog (partial-merge, slug-keyed)
- `proboctl common-tracker-pattern link`/`unlink` — repoint or detach a catalog pattern's third party (link re-arms enrichment and remaps uncategorised org trackers)
- `proboctl common-tracker-pattern set-description` — write a description, mark the row enriched, and backfill linked org patterns
- `proboctl cookie-banner reset-trackers --keyword <substring>` — scope both glob decomposition and mapping reset to patterns whose pattern or display name contains the substring

### Changed

- `proboctl common-tracker-pattern reenrich` no longer requires a selection anchor; filter flags (e.g. `--without-description`) now select across the whole catalog when no anchor is supplied

## [0.2.0] - 2026-06-09

### Added

- `proboctl common-tracker-pattern` commands (`list`, `show`, `stats`, `reenrich`) for inspecting and re-running enrichment on the global common-tracker-pattern catalog; selection anchors via `--id`, `--linked-banner`, `--linked-org`, or `--common-third-party`, narrowed by `--tracker-type`/`--keyword`/`--state`/`--without-description`
- `proboctl common-third-party` commands (`list`, `show`) for inspecting the global common-third-party catalog
- `proboctl cookie-banner reset-trackers <banner-gid>` to rebuild a banner's uncategorised, non-excluded tracker patterns from `detected_trackers` and re-arm the analysis and mapping workers (`--mapping-only` skips the rebuild)
- Cursor-pagination flags on list commands (`--first`/`--after`, `--last`/`--before`), mirroring the GraphQL connection arguments, with cursors emitted in the output

### Changed

- `--first`/`--last` default to 50 when omitted; reject `--first` combined with `--before` (previously silently flipped to backward pagination)

## [0.1.0] - 2026-05-20

### Added

- Initial release of `proboctl`, a Cobra-based CLI for Probo instance management that connects directly to PostgreSQL
- `proboctl seed common-third-parties` — import the bundled third-party catalog (formerly the standalone `common-third-parties-import` command); `data.json` is embedded in the binary
- `proboctl seed common-tracker-patterns` — import bundled tracker patterns (formerly the standalone `common-tracker-patterns-import` command)