v1.90.0

1.90.0 (2026-08-25)

🚀 Features

• analytics: report database integrity to PostHog, joinable to OO (2246e78)
• observability: ship the signed-in tester's raw email to OO and Sentry (alpha only) (d4e2ba1)
• onboarding: let a user ask for an unsupported PM tool (1b301bf)
• tray: register the macOS login item via SMAppService (bd75b21)
• tray: trigger on the OS's own wake events, deleting the hardcoded hour (93877d0)

🐛 Bug Fixes

• autostart,pm: stop two paths that silently leave a user with nothing (a16f854), closes #846 #843 #839
• autostart: stop reading escaped paths as drift, and never boot out ourselves (94c65f1)
• clerk: default every required key on the sign_in/sign_up scratch objects (b7b9b81)
• clerk: repair a present-but-null field, not just an absent one (7676b16)
• clerk: stop sign-out on relaunch - null sign_in.status broke the session cache (a27d2ce), closes #726
• clerk: trace the backfill's silent rewrites of cached auth state (f07e5f9), closes #846 #848
• daemon: catch the other cause-dropping spelling, and the failed board add (edb7fbb), closes #846
• daemon: check the single-instance guard before setup_db, not after (75c45ef)
• db,tray: a busy checkpoint is not a clean one, and DbPool must survive a setup panic (aa81f6a), closes #846 #858
• db: checkpoint the WAL on daemon shutdown and detect corruption from the tray's own reads (41a5e4e)
• install: stop the daemon BEFORE staging its binary on macOS (4509894)
• jira: scope the active fetch to work items, sub-tasks included (aae3c93)
• jira: survive a site that does not have every issue type the query names (0512c81)
• llm: give an interactive call its own deadline below the tray's kill-timeout (44f3376)
• onboarding: auto-advance past the gated PM-tool step on decline (65c371a)
• pm-sync: give a resumed-after-a-gap provider the same retry grace a new one gets (ec23675)
• pm: add GitHub-created tasks to the project board so they sync back (035d0a2), closes #843
• repair: only a verdict about the FILE may set a user's database aside (6e82ed1)
• review: tour responsiveness, scan coverage, doc pairing, blockquote (900b34c)
• settings: make the registry-lock test exercise update_settings (d319c94), closes #889
• settings: make update_settings hold the registry lock too (af415d4), closes #887 #887 #888
• settings: route the last two writers through the shared lock (8a79974), closes #846 #882 #882 #880
• settings: validate the merged document and serialise every write (7d00f3d)
• telemetry: keep the numeric rescue away from user-scoped identifiers (0a088c2)
• telemetry: make the numeric rescue fail closed and bound the alpha email (1678b23), closes #846
• telemetry: stop dropping the diagnostics that WARN sites exist to carry (63af201)
• the non-blocking review findings from #846 (b50736c), closes #839
• tray,ui: serialise the reload cycle and bound every tutorial settings read (b0b8839)
• tray: clip the popover's window to its own corner radius (88172a9)
• tray: close and reopen the meridian.db pool around a daemon restart (188f33f), closes #856
• tray: compile login_item on every target, not just macOS (7af2626)
• tray: don't kill the running tray while migrating or disabling autostart (7768582)
• tray: drop the popover's native window shadow (3f4fe03)
• tray: fall back to a fresh start when an auto-repair itself fails (ecd7085), closes #851
• tray: guarantee one instance, and make the morning trigger live at install (9164258)
• tray: keep the legacy Windows Run value until a replacement registers (7ea14cb), closes #828 #828 #828
• tray: make the new-day relaunch land when the user starts, not at 09:00 (6b0d0d6)
• tray: repair autostart on every launch, and relaunch each morning (bb72592)
• tray: retry the set-aside rename through Windows' transient file-lock window (9a6bc02)
• tray: stop autostart from undoing a deliberate Quit (f22b5dd)
• tray: unbreak the Windows build, and stop a missing registration being silent (82ba2d1), closes #837
• tutorial,docs: undo a tour hang I introduced, and a false security claim (1b2abc0), closes #846 #847 #848 #848 #848
• tutorial: stop a failed settings read ending the worklog-time beat (7864084), closes #846 #852
• tutorial: stop waiting on a click for the worklog-time dialog (acaab6a), closes #849 #849
• ui: dedupe the worklog-ready-time dialog when a tour skip races it (26d87b3)
• ui: persist the daily-plan suggestion pre-fill so it's actually saved (8c21776)
• ui: require an explicit time choice before the worklog dialog can save (66347ac)

♻️ Refactoring

• jira: split the oversized module along two real seams (931d79a)

✅ Tests

• tutorial: drive the worklog-answered failure path for real (52c1c9a), closes #846

📝 Documentation

• add a hard rule on production-safety caution for real users (1ad4a70), closes #851
• require auth and a rate limit on anything we expose publicly (f661d73)

🔧 Chores

• infra: delete the HuggingFace caching proxy (5e995dd)
• release: add the 1.90.0 What's New entry and set the update floor (ac964fa)
• release: note the two Clerk follow-ups and the plan-save fix in 1.90.0 (0f16850), closes #865 #868 #869 #874