chore(main): release 0.3.0

[github-actions]

🤖 I have created a release beep boop

0.3.0 (2026-08-01)

⚠ BREAKING CHANGES

• env: --search is now a real search <query...> [--scope <path>] command (from cli-engine 0.5.0), not a global flag that could attach to (and silently swallow the output of) any other command. Per-environment override env vars are now app-scoped (GDDY_AUTH_URL, GDDY_TOKEN_URL, GDDY_DOMAINS_API_URL, GDDY_ACCOUNT_URL) instead of environment-scoped (<ENV>_OAUTH_AUTH_URL, <ENV>_OAUTH_TOKEN_URL, <ENV>_DOMAINS_API_URL, <ENV>_ACCOUNT_URL); api_url is no longer env-var overridable at all. An environment defined only via <PREFIX>_API_URL, with no compiled-in or environments.toml entry, no longer resolves — every environment must now be a builtin (ote/prod) or a real environments.toml entry. A malformed (non-blank) override, from an env var or environments.toml, is now a hard error instead of silently falling back to the derived default (blank/ whitespace-only overrides still fall back, unchanged). An unknown or misconfigured --env is now a hard error everywhere, instead of silently falling back to prod's API URL.

Features

• add domain operation status to poll async domain operations (#86) (4ad277c)
• add gddy payments add command (f28deb2)
• add gddy payments add command (42e3be6)
• add more next-actions across commands (#83) (a62460b)
• add Personal Access Token (PAT) support (#80) (827d448)
• api-catalog: add drift guards for the embedded catalog (DEVX-549) (#98) (3605d8e)
• api: restore agent-safe describe/list/search output [DEVEX-702] (#169) (1f33ec6)
• application init: gate creation on onboarding (DEVX-545) (#139) (afa87e2)
• auth: add live OAuth scope registry via gddy auth scopes (DEVEX-886, DEVEX-891) (#116) (cb16cc9)
• default to prod, fix cross-platform config writes, support Windows installs (#54) (43ad0ad)
• DEV/TEST environments + OAuth scope step-up (DEVEX-719) (#57) (32cd77e)
• DNS record management + domain list, with output-field discovery (#65) (fa66cfa)
• dns: add --replace-conflicting-types flag, fix CNAME conflict errors (#102) (2c0e576)
• domain availability + suggest via spec-generated client (#59) (f56cd21)
• domain list: hide cancelled/non-visible domains by default (#94) (ad17cd3)
• domain purchase (v2 register) + domain get (#70) (96696ca)
• dry-run: let dry-run validate input and preview real effects (#141) (6651c6b)
• env: consolidate onto cli-engine's shared Environments, wire feature-flag stages (DEVEX-929) (#145) (a6f48fe)
• env: migrate gddy onto cli-engine's declarative EnvConfig (DEVEX-947) (#171) (44f7368)
• errors: map failures to stable codes and top-level fix [DEVEX-945] (#162) (576641c)
• flatten domain suggest term pricing and prefix next-actions with gddy (#90) (6f7a7a9)
• integrate Node.js Hosting public API with new CLI (#78) (8877abe)
• migrate domain & dns commands to the v3 Domains API (#76) (c39fbeb)
• paas: add GitHub operations for Node.js Hosting CLI command group (#135) (1de4b88)
• platform: namespace Developer Platform commands (DEVX-621) (#149) (faf89cc)
• publish gddy alpha binary on rust-port pushes; rename binary to gddy (#53) (9a37bde)
• release: release-please, self-update, no-sudo installs (#88) (e66f990)
• reorganize module categories and set feature-flag stages (#87) (7ddf2c4)
• webhook: Normalize webhook output and truncate larger results (#165) (af59d11)

Bug Fixes

• address PR review — account_url in environments module, URL on browser failure (e5966ed)
• adopt cli-engine 0.2.0 fail-closed auth; mark local commands no_auth (#56) (1cc8d98)
• api-call: apply headers, error on non-2xx, GraphQL errors, output shape (DEVX-546) (#97) (29529c6)
• api-catalog: distinguish $defs keys for same-file property refs [DEVEX-965] (#168) (80d3abe)
• api-catalog: resolve discriminator.mapping refs to #/$defs pointers (DEVX-548) (#96) (0b9d565)
• api-catalog: resync drift, normalize domains base URL, sort + env-aware routing (#167) (339db2d)
• api-explorer: remove broken --query flag, add domains catalog source (DEVEX-898) (#124) (c07994a)
• application deploy: activate release and promote app to ACTIVE (DEVEX-704) (#103) (87457ef)
• application deploy: guarantee a terminal result/error NDJSON event (DEVX-544) (#114) (1d0fb2d)
• application init: align with TS config seeding and validation (#126) (DEVEX-707) (1cfcda2)
• application update: restore --status ACTIVE | INACTIVE (#132) [DEVEX-709] (565e0d7)
• application validate: restore remote application state checks (#134) [DEVEX-708] (b84ddb0)
• auth: validate requested OAuth scopes against the CLI's registry (DEVEX-894) (#108) (6abd2ee)
• config: restore godaddy.toml schema validation [DEVEX-714] (#166) (4cfa3e4)
• dns: stop dns set from wiping zones via the v3 replace-record PUT (#143) (90c2408)
• domain suggest: validate --limit against the v3 API's 50-suggestion cap (DEVEX-883) (#117) (c409719)
• domain-purchase data formatting + comprehensive CLI help (#75) (5d15d6d)
• domain: comma-join repeatable TLD flags before sending as query params (DEVEX-882) (#106) (ada4a93)
• domain: show renewal price consistently across available/quote/suggest (GDDEVPLAT-133) (#125) (71e4eea)
• domain: validate domain and nameserver hostname shape before the API call (#127) (9348495)
• extensions: restore UI extension targets on add + deploy (DEVX-541) (#107) (247f712)
• Mapped response to { eventType, description } per event, added 50-item truncation with temp file fallback, and returned { events, total, shown, truncated, full_output } matching the original TS behavior (af59d11)
• onboarding: send CLI User-Agent header (#157) (467c7f7)
• pat: stop over-specifying PAT shape in error and docs (DEVEX-889) (#131) (92144a3)
• payment-methods: rename gddy payments to gddy payment-methods (DEVEX-900) (#119) (67512bc)
• payments add always returns URL, treats browser failure as non-fatal (#72) (07cba90)
• release: include actions, subscriptions, UI extensions in release (DEVX-540) (#100) (afd8d9b)
• request offline_access scope for refresh tokens, centralize hosting scopes (#85) (b6d49c7)
• route all HTTP clients through --debug transport logger (#81) (d0c94a3)
• stop truncating agreement URLs in domain agreements human output (#82) (6cf9112)
• surface failure detail on domain purchase, unify cli-engine version (#84) (d3a9cd1)
• use non-API GitHub redirect for update checks, add --force to update apply (#91) (60cc92d)

Miscellaneous

• bump cli-engine to 0.3.4 for non-interactive scope step-up (#73) (206c2b3)
• cicd: Add audit step and regenerate lock file (#158) (4ed50e8)
• main: release 0.1.15 (#160) (7fc16d5)
• main: release 0.1.16 (#163) (484bd39)
• main: release 0.2.0 (#170) (e2dd40a)
• rust-port: release 0.1.1 (#89) (b5cbbc0)
• rust-port: release 0.1.10 (#128) (a2fc6d8)
• rust-port: release 0.1.11 (#130) (5468cf8)
• rust-port: release 0.1.12 (#133) (f21c11c)
• rust-port: release 0.1.13 (#138) (b025d55)
• rust-port: release 0.1.14 (#146) (4bb0206)
• rust-port: release 0.1.2 (#92) (e81a9e4)
• rust-port: release 0.1.3 (#95) (a3da71b)
• rust-port: release 0.1.4 (#105) (6653a5c)
• rust-port: release 0.1.5 (#112) (f817fe0)
• rust-port: release 0.1.6 (#120) (0bcf9ee)
• rust-port: release 0.1.7 (#121) (759415e)
• rust-port: release 0.1.8 (#122) (01919c7)
• rust-port: release 0.1.9 (#123) (2c2c2cc)

Code Refactoring

• improve agent UX for Node.js Hosting CLI commands (#153) (ff56ec6)

Tests

• api: cover commerce scope step-up inputs (#150) (403dc71)

---

This PR was generated with Release Please. See documentation.

[jpage-godaddy]

Closing — this PR's changelog is polluted by a stale pre-branch-swap v0.2.0 git tag (points to a Feb 2026 commit from the old TS CLI) that release-please is diffing from instead of the real 0.2.0 release commit (e2dd40a). Cleaning up the leftover legacy tags in a follow-up so release-please can regenerate a clean PR from the correct base.