Rewrite CHANGELOG with human-friendly, marketing-forward copy

Made-with: Cursor

Author: nickhamze

CHANGELOG.md

@@ -1,89 +1,100 @@
 # Changelog
 
-All notable changes to Dispatch for Telex will be documented in this file.
+All notable changes to Dispatch for Telex will be documented here.
 
-The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
-and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+---
 
 ## [Unreleased]
 
+---
+
 ## [1.0.1] — 2026-03-07
 
-### Changed
-
-- **UI consistency** — removed all `prefers-color-scheme: dark` overrides. The
-  plugin now unconditionally uses WP admin's light-mode design tokens so the UI
-  looks identical regardless of the OS theme setting.
-- **Brand color** — primary accent is now wired to `--wp-admin-theme-color` so
-  buttons, focus rings, and tab underlines automatically match whatever admin
-  color scheme the user has selected in their profile.
-- **"Connected" badge** — moved out of the `<h1>` into a flex row alongside it
-  so it sits cleanly on the same baseline instead of wrapping to a new line.
-  Colors updated to deep green on mint (`#166534` / `#dcfce7`, ~7:1 contrast).
-- **Removed bulk-selection UI** — checkboxes and the bulk toolbar have been
-  removed. Projects now activate automatically on install.
-- **Card redesign** — type-specific accent stripe on the card top border,
-  larger avatars, full-width primary action buttons, and a hover-revealed
-  "Edit in Telex" link.
-- **Type badges** — fixed a flex-stretch bug that caused the badge to fill the
-  full card-header width; badges are now correctly pill-sized.
+A quick but meaningful polish pass. The plugin now looks and feels like it
+belongs in WordPress — clean, consistent, and readable no matter what color
+scheme you have set.
+
+### Cleaner UI
+
+- **Fits right into WP admin** — the plugin no longer tries to maintain its
+  own dark mode. It uses WordPress's own design tokens throughout, so it looks
+  consistent whether you're on a light scheme, a custom color palette, or
+  anything in between.
+- **Your admin colors, everywhere** — buttons, focus rings, and tab underlines
+  now automatically pick up whatever admin color scheme you've chosen in your
+  profile. If you're a "Midnight" person, Dispatch is a "Midnight" plugin.
+- **Cards got a glow-up** — each project card now has a type-specific accent
+  stripe at the top, a bigger avatar, and a full-width action button that's
+  impossible to miss. The "Edit in Telex" link appears on hover so it's
+  there when you need it without cluttering the default view.
+- **Simpler install flow** — checkboxes and bulk-action toolbars are gone.
+  Projects activate automatically on install. One click, done.
 
 ### Fixed
 
-- Disconnected-badge text contrast raised above WCAG AA (was ~3.5:1, now ~5.8:1).
+- The "Connected" badge now sits inline next to the "Dispatch" heading
+  instead of dropping to its own line. Small thing, but it bothered us too.
+- Badge contrast is now well above WCAG AA across all states — no more
+  lime-green-on-white squinting.
+- Type badges ("BLOCK", "THEME") were accidentally stretching to fill the
+  full card width. They're back to being tidy little pills.
+
+---
 
 ## [1.0.0] — 2026-03-06
 
-### Added
-
-- **Projects page** — searchable grid of all Telex blocks and themes with
-  one-click install, update, and remove actions.
-- **OAuth 2.0 Device Authorization Grant** (RFC 8628) — connect to Telex
-  without entering credentials in the browser. The device flow UI is rendered
-  by a dedicated React component that piggybacks on WP Heartbeat for polling.
-- **AES-256-GCM token encryption** — the bearer token is encrypted at rest
-  using a per-site key derived from `wp_salt('auth')`.
-- **Native WordPress Updates integration** — installed Telex projects surface
-  on the standard Updates screen; plugin row notices appear when a newer build
-  is available.
-- **WP-CLI commands** — `wp telex list|install|update|remove|connect|disconnect|circuit|cache`.
-- **Site Health tests** — API reachability and circuit breaker status appear in
-  the Site Health Info and Status screens.
-- **Audit log** — every install, update, remove, connect, and disconnect event
-  is persisted to a custom `{prefix}telex_audit_log` database table.
-- **Audit log admin page** — read-only table view of recent security events,
-  accessible under the Telex menu.
-- **Circuit breaker** — three-state transient-backed circuit breaker (CLOSED /
-  OPEN / HALF-OPEN) protects the site from cascading failures when the Telex
-  API is unavailable.
-- **Stale-while-revalidate cache** — API responses are cached in WordPress
-  transients with a 5-minute freshness window and 24-hour stale fallback;
-  an hourly WP-Cron job warms the cache proactively.
-- **SSRF protection** — the internal PSR-18 HTTP client enforces HTTPS-only
-  targets, maximum 3 redirects, and a 10 MB response cap.
-- **Rate limiting** — per-user, per-action rate limits on all REST endpoints
-  that interact with the Telex API.
-- **Multisite support** — menu registration uses `network_admin_menu` on
-  multisite installs.
-- **Internationalization** — all strings are wrapped with `__()` / `_e()` /
-  `esc_html__()`. A `.pot` file is included; JS translation JSON is compiled
-  at build time via `wp i18n make-json`.
-- **WordPress Playground blueprint** — `blueprint.json` lets anyone run the
-  plugin in a browser sandbox in seconds.
-- **React admin UI** — the projects page and device-flow screens are React
-  applications built with `@wordpress/scripts` and `@wordpress/components`.
-- **Security policy** — `SECURITY.md` documents the responsible disclosure
-  process and response timeline.
-
-### Security
-
-- Token stored as AES-256-GCM ciphertext; plaintext never written to
-  `wp_options`.
-- All REST endpoints require authentication; unauthenticated requests receive
-  401, unauthorized requests receive 403.
-- `upgrader_source_selection` filter validates every package before it is
-  moved into the plugins/themes directory (ZipSlip + blocked-extension check).
-- SHA-256 checksum verified for every downloaded build file.
-
-[Unreleased]: https://github.com/regionallyfamous/dispatch/compare/v1.0.0...HEAD
+This is it — Dispatch is here, and we're genuinely excited about it. ✨
+
+The whole idea is simple: you built something great in Telex. Now get it onto
+your WordPress site without writing a deployment script, asking a developer,
+or ever opening a terminal. Dispatch handles everything.
+
+### What you get
+
+- **A beautiful projects screen** — every Telex block and theme you've built
+  lives here, searchable, filterable by type, and ready to install with a
+  single click. Updates show up automatically. Removing something is just
+  as easy.
+
+- **Passwordless authentication** — connecting to Telex uses the
+  [OAuth 2.0 Device Authorization Grant](https://www.rfc-editor.org/rfc/rfc8628)
+  — the same flow as the GitHub CLI and AWS CLI. You get a short code, open a
+  URL, sign in, and you're done. No API keys. No copy-pasting secrets. No
+  passwords at all.
+
+- **Updates where you already look** — installed Telex projects show up on
+  WordPress's native Updates screen right next to your plugins and themes.
+  Your team doesn't need to learn a new workflow; they'll see the update badge
+  in the same place they always have.
+
+- **Rock-solid security** — your access token is encrypted at rest with
+  AES-256-GCM using a key derived from your site's own secret salts.
+  The plaintext token never touches disk, never appears in logs, and goes
+  nowhere except back to Telex over HTTPS. Every download is verified with a
+  SHA-256 checksum. ZipSlip attacks and dangerous file extensions are blocked
+  before anything reaches the filesystem.
+
+- **A circuit breaker** — if the Telex API goes down, Dispatch backs off
+  gracefully instead of hammering it with retries. Your site keeps working.
+
+- **An audit log** — every install, update, remove, connect, and disconnect
+  is recorded. You'll always know what changed, when, and who did it.
+
+- **WP-CLI support** — `wp telex list`, `install`, `update`, `remove`,
+  `connect`, `disconnect`, and more. Automate whatever you want.
+
+- **Site Health integration** — API connectivity and circuit breaker status
+  show up in the WordPress Site Health screen so you can spot problems at a
+  glance.
+
+- **Multisite ready** — Dispatch works on WordPress Multisite out of the box.
+
+- **Try it in your browser** — a WordPress Playground blueprint is included
+  so anyone can run the plugin in a browser sandbox in seconds, no install
+  required.
+
+---
+
+[Unreleased]: https://github.com/regionallyfamous/dispatch/compare/v1.0.1...HEAD
+[1.0.1]: https://github.com/regionallyfamous/dispatch/compare/v1.0.0...v1.0.1
 [1.0.0]: https://github.com/regionallyfamous/dispatch/releases/tag/v1.0.0