bump: preserve 0.9.0 release history for publication

.agents/plugins/marketplace.json

@@ -0,0 +1,19 @@
+{
+  "name": "dataiku",
+  "owner": {
+    "name": "Dataiku"
+  },
+  "description": "Connect your agent to Dataiku: inspect projects, datasets, recipes, ML, and agents with typed MCP tools, and drive Dataiku Cobuild to build project-level assets.",
+  "plugins": [
+    {
+      "name": "dataiku-headless",
+      "source": "./",
+      "description": "Connect your agent to Dataiku: inspect projects, datasets, recipes, ML, and agents with typed MCP tools, and drive Dataiku Cobuild to build project-level assets.",
+      "category": "developer-tools",
+      "policy": {
+        "installation": "AVAILABLE",
+        "authentication": "ON_INSTALL"
+      }
+    }
+  ]
+}

.claude-plugin/marketplace.json

@@ -6,10 +6,13 @@
   "description": "Connect your agent to Dataiku: inspect projects, datasets, recipes, ML, and agents with typed MCP tools, and drive Dataiku Cobuild to build project-level assets.",
   "plugins": [
     {
-      "name": "dataiku-headless",
+      "name": "headless",
       "source": "./",
       "description": "Connect your agent to Dataiku: inspect projects, datasets, recipes, ML, and agents with typed MCP tools, and drive Dataiku Cobuild to build project-level assets.",
       "category": "developer-tools"
     }
-  ]
+  ],
+  "renames": {
+    "dataiku-headless": "headless"
+  }
 }

.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
-  "name": "dataiku-headless",
+  "name": "headless",
   "displayName": "Dataiku Headless",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Connect your agent to Dataiku: inspect projects, datasets, recipes, ML, and agents with typed MCP tools, and drive Dataiku Cobuild to build project-level assets.",
   "author": {
     "name": "Dataiku",

.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "dataiku-headless",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Connect your agent to Dataiku: inspect projects, datasets, recipes, ML, and agents with typed MCP tools, and drive Dataiku Cobuild to build project-level assets.",
   "author": {
     "name": "Dataiku",
@@ -11,7 +11,7 @@
   "license": "Apache-2.0",
   "keywords": ["dataiku", "cobuild"],
   "skills": "./skills/",
-  "mcpServers": "./.mcp.json",
+  "mcpServers": "./.codex-plugin/mcp.json",
   "interface": {
     "displayName": "Dataiku Headless",
     "shortDescription": "Build AI and data apps",

.cortex-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "dataiku-headless",
   "displayName": "Dataiku Headless",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Connect your agent to Dataiku: inspect projects, datasets, recipes, ML, and agents with typed MCP tools, and drive Dataiku Cobuild to build project-level assets.",
   "author": {
     "name": "Dataiku",

.cursor-plugin/marketplace.json

@@ -0,0 +1,17 @@
+{
+  "name": "dataiku",
+  "owner": {
+    "name": "Dataiku"
+  },
+  "plugins": [
+    {
+      "name": "dataiku-headless",
+      "source": "./",
+      "description": "Connect your agent to Dataiku: inspect projects, datasets, recipes, ML, and agents with typed MCP tools, and drive Dataiku Cobuild to build project-level assets.",
+      "category": "developer-tools"
+    }
+  ],
+  "metadata": {
+    "description": "Connect your agent to Dataiku: inspect projects, datasets, recipes, ML, and agents with typed MCP tools, and drive Dataiku Cobuild to build project-level assets."
+  }
+}

.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "dataiku-headless",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Connect your agent to Dataiku: inspect projects, datasets, recipes, ML, and agents with typed MCP tools, and drive Dataiku Cobuild to build project-level assets.",
   "author": {
     "name": "Dataiku"

.github/plugin/marketplace.json

@@ -0,0 +1,17 @@
+{
+  "name": "dataiku",
+  "owner": {
+    "name": "Dataiku"
+  },
+  "plugins": [
+    {
+      "name": "dataiku-headless",
+      "source": "./",
+      "description": "Connect your agent to Dataiku: inspect projects, datasets, recipes, ML, and agents with typed MCP tools, and drive Dataiku Cobuild to build project-level assets.",
+      "category": "developer-tools"
+    }
+  ],
+  "metadata": {
+    "description": "Connect your agent to Dataiku: inspect projects, datasets, recipes, ML, and agents with typed MCP tools, and drive Dataiku Cobuild to build project-level assets."
+  }
+}

.github/plugin/plugin.json

@@ -0,0 +1,33 @@
+{
+  "name": "dataiku-headless",
+  "version": "0.9.0",
+  "description": "Connect your agent to Dataiku: inspect projects, datasets, recipes, ML, and agents with typed MCP tools, and drive Dataiku Cobuild to build project-level assets.",
+  "author": {
+    "name": "Dataiku",
+    "url": "https://www.dataiku.com/"
+  },
+  "homepage": "https://github.com/dataiku/dataiku-headless",
+  "repository": "https://github.com/dataiku/dataiku-headless",
+  "license": "Apache-2.0",
+  "keywords": [
+    "dataiku",
+    "cobuild"
+  ],
+  "mcpServers": {
+    "dataiku": {
+      "type": "stdio",
+      "command": "uv",
+      "args": [
+        "run",
+        "--quiet",
+        "--locked",
+        "--script",
+        "${PLUGIN_ROOT}/runtime/run_mcp.py",
+        "--transport",
+        "stdio"
+      ],
+      "cwd": "${PLUGIN_ROOT}"
+    }
+  },
+  "skills": "./skills/"
+}

AGENTS.md

@@ -25,7 +25,7 @@ Use this file when changing this repository. It is not an operating guide for us
 - Tool registration imports: `dataiku_mcp/__init__.py`.
 - Project dependencies, Python support, version, and CLI entry points: `pyproject.toml`.
 - Standalone server dependency pins and Python floor: the PEP 723 block in `runtime/run_mcp.py`.
-- Plugin launch configuration: `.mcp.json`, `.claude-plugin/plugin.json`, and `.codex-plugin/plugin.json`.
+- Plugin launch configuration: `.codex-plugin/mcp.json`, `.claude-plugin/plugin.json`, `.codex-plugin/plugin.json`, and `.github/plugin/plugin.json` with its sibling marketplace manifest. Keep client-specific MCP configurations scoped to their manifests to avoid discovery conflicts.
 - User-facing installation and architecture overview: `README.md`.
 - Release behavior: `RELEASE.md` and `.github/workflows/bump.yml`.
 - CI behavior: `.github/workflows/ci.yml`, `.github/workflows/pr-title.yml`, and `.github/workflows/cla.yml`.

CHANGELOG.md

@@ -1,3 +1,18 @@
+## v0.9.0 (2026-11-05)
+
+### Feat
+
+- **setup**: manage saved instance connections (#199)
+- **plugins**: install from Git and manage plugin code environments (#193)
+- **tools**: enforce instance-type policies (#179)
+- **plugins**: support GitHub Copilot CLI (#198)
+
+### Fix
+
+- **tls**: trust operating system certificate authorities (#204)
+- **datasets**: recompute metrics before reading them (#205)
+- **plugins**: shorten Claude Code plugin and tool names for Bedrock; reinstall with `/plugin install headless@dataiku` (#201, #207)
+
 ## v0.8.0 (2026-10-08)
 
 ### Feat

CODING_STANDARDS_AND_STRUCTURE.md

@@ -92,6 +92,8 @@ export DKU_API_KEY="your-api-key"
 
 ## Tool Metadata
 
+- Every registered tool declares `meta.allowed_instance_types` using the shared presets in `dataiku_mcp/instance_policy.py`. Middleware enforces this declaration against the request-pinned instance before DSS token exchange or dispatch; missing or malformed declarations fail closed. Keep the complete catalog visible and extend the exact policy contract in `tests/test_instance_policy.py` when adding or changing a tool.
+
 - Give each tool a short human title and a one-line description of what it is for and when to reach for it.
 - The tool catalog is re-sent to the model on every turn of every session, used or not. Keep workflow detail and safety rules in the relevant `skills/**/references/` guide, which loads on demand, and describe only parameters whose correct use a name and type cannot convey.
 - Set `readOnlyHint`, `destructiveHint`, and `openWorldHint` explicitly, classified from the handler's actual code paths rather than its name. Omit `idempotentHint` where it cannot apply. A tool whose effect depends on a runtime argument is catalogued at its maximum possible effect.
@@ -103,12 +105,14 @@ export DKU_API_KEY="your-api-key"
 ## Cobuild Write-Routing Convention
 - This server intentionally does not expose direct create/update/delete tools for in-project flow and analytic assets (recipes, ML analyses, dashboards, insights, agents, agent tools, scenarios, webapps, wiki articles, data quality rules, knowledge banks, semantic models, evaluation stores). Project-level building goes through `dataiku_mcp/tools/cobuild.py`'s Cobuild conversation tools instead. `set_container_exec_config` is the narrow, placement-only exception; all other changes stay with Cobuild.
 - Do not add a new direct write tool for an in-project asset type beyond the fixed exceptions below. If a gap in Cobuild's coverage is found, note it in the relevant SKILL.md rather than adding an MCP write tool around it.
-- A new direct write tool is only justified when the operation is cross-project, instance-level, or must happen before a project/Cobuild conversation exists. The fixed bootstrap exceptions are `create_project`, `create_upload_dataset`, `create_managed_folder`, `upload_file_to_managed_folder`, `write_project_library_file`, and `set_project_variables`; all but `create_project` write into a project, and each creates a container or carries local content rather than building logic. The other fixed exceptions are deterministic execution of existing assets (`build_datasets`, `run_recipe`, `run_scenario`, and `abort_job`, which stops an existing job) and deterministic container execution placement for an existing object (`set_container_exec_config`).
+- A new direct write tool is only justified when the operation is cross-project, instance-level, or must happen before a project/Cobuild conversation exists. The fixed bootstrap exceptions are `create_project`, `create_upload_dataset`, `create_managed_folder`, `upload_file_to_managed_folder`, `write_project_library_file`, and `set_project_variables`; all but `create_project` write into a project, and each creates a container or carries local content rather than building logic. The other fixed exceptions are deterministic execution of existing assets (`build_datasets`, `run_recipe`, `run_scenario`, `abort_job`, which stops an existing job, and `get_dataset_metrics`, which recomputes a dataset's existing metric probes so a read does not return stale stored values) and deterministic container execution placement for an existing object (`set_container_exec_config`).
 
 ## Fixed Tool Surface
 
 - `runtime/run_mcp.py` is the single launcher. It requires `--transport stdio` for the local plugin or `--transport http` for the authenticated Streamable HTTP deployment. Keep the transports explicitly selected and preserve the same registered tool catalog.
 - Register one directly visible tool catalog. Do not add an MCP search mode.
+- Classify explicit tools with `PROJECT_READ_POLICY`, `PROJECT_EXECUTION_POLICY`, `ADMIN_POLICY` or `PROJECT_EDIT_POLICY`; use `INSTANCE_MANAGEMENT_POLICY` for connection controls. Execution includes status/polling, administration includes instance inspection and project folders, and project edits include project Cobuild. Only connection management is exempt from requiring a selected profile.
+- `SUPPORTED_DSS_INSTANCE_TYPES` defines the currently supported backend types independently of all valid `InstanceType` values. Agent Management, Govern and Deployer remain configurable profiles with instance controls only until their product support lands.
 - The registered set is the contract; `tests/test_tool_surface.py` pins the exact catalog. Any tool add/remove/rename updates that pinned set in the same change.
 
 ## Guardrails

CONTRIBUTORS.md

@@ -0,0 +1,24 @@
+# Contributors
+
+Thank you to everyone who has contributed to Dataiku Headless!
+
+## Maintainers
+
+- **Patrick Phrayme (Masi-Phelps)** ([@pmasiphelps](https://github.com/pmasiphelps))
+- **Ned Martorell** ([@nmartorell](https://github.com/nmartorell))
+- **Youssef Jouini** ([@yjouini](https://github.com/yjouini))
+- **Christiaan Burrett** ([@crmapj](https://github.com/crmapj))
+
+## Contributors
+
+- **Hannes Hapke** ([@hanneshapke](https://github.com/hanneshapke))
+- **Pierre Portal** ([@pportal2](https://github.com/pportal2))
+- **Jed Dougherty** ([@JedIV](https://github.com/JedIV))
+- **Michael Jeckmans** ([@mjeckmans](https://github.com/mjeckmans))
+- **Ludwig Ehlert** ([@ludwigehlert-gif](https://github.com/ludwigehlert-gif))
+- **Li-Heng Fu** ([@lhfudataiku](https://github.com/lhfudataiku))
+- **Arnaud Pichery** ([@apichery](https://github.com/apichery))
+
+---
+
+Want to contribute? See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines.