v0.6.0

Added

• (cli) coexist polish — install --remote-control flag + preserve BUN_OPTIONS (#183)

Other

• (config) [breaking] mark config structs #[non_exhaustive] (stop SemVer churn) (#185)

v0.5.1

Fixed

• (cli) document Remote-Control coexistence + normalize its doctor output (#177)

v0.5.0

Added

• (cli) opt-in Remote-Control coexistence mode (#159)
• (cli) [breaking] full-off/on engage-disengage + pause/resume prune toggle (#159, #160) (#168)
• (cli) advisory validation of API-provider inputs in the wizard (#148) (#158)

Fixed

• (reprune) defer the stale-summary clear to commit_checkpoint (#164) (#169)
• (reprune) correct byte-forced re-checkpoint telemetry + serialize-before-commit (#144) (#162)
• (cli) finish the bounded-runtime audit — guard ad-hoc runtimes + bound doctor DNS (#152, #153) (#163)

Other

• (deps) update dependencies across cargo, npm (site + collector), and actions (#170)
• (changelog) restore the release-plz-generated 0.4.0 entry (#166)

v0.4.0

Changed

• BREAKING: SummarizerProviderConfig and StaleInputCapConfig are now #[non_exhaustive]. Earlier releases had silently added public fields to these structs — a SemVer break at an unchanged 0.3.16 (caught by a new cargo-semver-checks CI gate). Bumping to 0.4.0 makes the public-API change explicit; #[non_exhaustive] lets future config fields be added without another breaking release.

Added

• (cli) research-led UX overhaul of wizard/doctor/status/install (#118) (#146)
• (anomaly) detect + report invalid-prune rollbacks (#138) (#142)
• (cli) make trimwire off a true bypass, not a dead socket (#114) (#140)
• (anomaly) make trims legible to the agent + detect/report trimwire anomalies (#135)
• (stale_input_cap) age-gate authoring content with a recoverable marker (#122) (#130)
• (summarizer) resolve provider API key from api_key_file (fixes #111) (#115)

Fixed

• (cli) bound the collector upload + share the runtime-teardown fix (#150) (#154)
• (cli) bound the summarizer-setup ollama probe with a timeout (#145) (#149)
• (bloat_cap) give Read its own recent window to close the 4–16 KB Read gap (#121) (#137)
• (pruning) safety hardening — keep_recent .max(1) clamp, snapshot glob, NotebookEdit exempt (#129)
• (stale_reads) age-gate supersession elision so live reads aren't trimmed (#113) (#120)
• (deps) bump anyhow 1.0.102 → 1.0.103 (RUSTSEC-2026-0190) (#117)

Other

• (bloat_cap) enable the stub_age ladder at 16 in the default profile (#126) (#139)
• (bloat_cap) age-gate Task/Agent subagent results instead of permanent exemption (#124) (#136)
• (stale_input_cap) shape-reduce old successful Task/Agent inputs (#125) (#134)

v0.3.16

Other

• (update) pin gateway port in 2 doctor tests + cover rollback guidance (#96)
• (update) cover extract, redirect/HTTPS-downgrade, doctor advisory + harden FakeGitHub (#95)
• run the test suite on macOS/Windows + fix the exposed cross-platform failures (#94)
• (release) verify all 5 signed release assets + small updater/doc cleanups (#92)

v0.3.15

Fixed

• (cli) polish 6 minor findings from the acceptance sweep (#91)

Other

• remove obsolete update spike (#89)

v0.3.14

Fixed

• (upgrade) self-heal legacy "(deleted)" install receipt (#88)
• (upgrade) refresh receipt from applied binary path (#86)

v0.3.13

Added

• (update) signed self-update — verify (4b) + apply (4c, draft) (#85)
• (update) read-only update check + /healthz version (PR4 phase 4a) (#83)

v0.3.12

Added

• (install) record an install receipt for a future updater (#81)
• (build) embed the target triple as TRIMWIRE_TARGET (#79)

Other

• (release) attest build provenance for release archives (#82)

v0.3.11

Added

• (cli) add reserved update stub pointing to the real update path (#78)

Fixed

• (cli) list run + hook in the --help group legend (#76)