0.11.0

Added

• 94fed78 Add exact TOML argv arrays and explicit false values for power actions while retaining shell-quoted legacy strings.

Changed

• 81c7b33 Read Caps Lock directly from the console and keep terminal I/O outside the shared UI lock for smoother rendering.
• 55e1de8 Resolve Wayland and X11 session paths independently and preserve sessions by stable identity across discovery.
• 3c3c317 Move configuration parsing and user/session discovery off the UI lock, serializing and coalescing rapid reloads.
• 17536ba Replace separate remember files with one versioned, transactional state cache and safe legacy migration.
• 0299ba2 Run power commands asynchronously with a visible waiting state, Escape cancellation, a 30-second timeout, and process-group cleanup.
• 2209ed5 Center prompts and their newest feedback as one responsive block on normal and constrained terminals.

Fixed

• c2fcde0 Keep user and session choices stable across unrelated reloads, close invalid menus, and apply deterministic fallbacks when choices disappear.
• bfc4565 Surface rejected or failed hot reloads without replacing PAM prompts or other authentication feedback.
• 56b02d1 Hide disabled power actions and omit suspend or hibernate when no supported runtime manager is available.
• 28225d3 Parse command-line arguments once so help, version, and config checking follow the same option semantics without requiring a TTY or greetd.
• a0a3c2e Supervise terminal and configuration watcher workers, preventing EOF, errors, or worker failure from causing busy loops or silent stalls.
• 648c4c4 Preserve configured environment variables when the default session command is wrapped.
• a9ace20 Reject blank or missing launch sources before authentication and cancel a live transaction if reload removes the final source.
• e780d57 Accept valid F-key swaps and cycles atomically while rejecting conflicting keybinding layers.
• da364eb Preserve lower theme layers and make TOML false explicitly clear inherited colors.
• 31c888c Resolve UID defaults once per configuration revision and reject invalid one-sided range overrides atomically.
• 1ac7aef Give startup, config checking, and hot reload consistent source-located diagnostics without making runtime configuration errors fatal.
• b720f0d Apply identical, symlinked, or hard-linked system and explicit configuration files only once per revision.
• c71fde6 Require a usable greetd connection before terminal or real power interaction while keeping mock and information-only modes socket-independent.

Security

• 17536ba Harden remembered state against symlinks, hard links, special files, unsafe ownership or modes, oversized data, corruption, and concurrent writers.
• a72377f Move and zeroize PAM responses, queued requests, and serialized IPC frames across success, cancellation, failure, and shutdown paths.
• 1ac7aef Warn when active configuration is not root-owned or is group/world-writable while preserving fail-open greeter startup.