v0.1.4

What's Changed

• fix(security): approval for sh -c strings; global request timeout by @alliecatowo in #43
• chore(release): 0.1.4 by @alliecatowo in #44

Full Changelog: v0.1.3...v0.1.4

v0.1.3

What's Changed

• fix(agent): block in-repo symlink escapes in fs/cwd path jail by @alliecatowo in #37
• ci: SHA-pin actions, split release publish, attest provenance, limit auto-merge by @alliecatowo in #38
• refactor(server): remove stub /docs endpoints, add non-loopback router test by @alliecatowo in #39
• fix(types): shell allow-list must match every segment of a shell-string command by @alliecatowo in #40
• fix(server): cap pending approvals and presence entries by @alliecatowo in #41
• chore(release): 0.1.3 by @alliecatowo in #42

Full Changelog: v0.1.2...v0.1.3

v0.1.2

What's Changed

• feat(site): project website and live web demo by @alliecatowo in #22
• ci(release): drop redundant version line from the rendered formula by @alliecatowo in #24
• fix(site): zola 0.22 highlighting config by @alliecatowo in #23
• feat(site): terminal-theme redesign (Dracula / Catppuccin Latte) by @alliecatowo in #25
• fix(server): DNS-rebinding guard, cargo-audit CI, install docs, recording trim by @alliecatowo in #26
• docs(site): install copy reflects four-target releases by @alliecatowo in #27
• fix(server): authenticate loopback API and bind identity to the credential by @alliecatowo in #28
• fix(scheduler): gate CommandSucceeds through shell authority and clean env by @alliecatowo in #29
• fix: strip terminal escapes from notifications and CLI ticket text by @alliecatowo in #32
• feat(trust): workspace trust gate for hooks.toml, acp.toml, oversight.toml by @alliecatowo in #30
• fix(server): wiki XSS - escape HTML, CSP, refuse symlinks by @alliecatowo in #31
• fix(install): fail closed on missing checksum, fix tmp cleanup by @alliecatowo in #33
• fix(serve): --token-file, non-loopback warning, guard /app by @alliecatowo in #34
• fix: private Ctrl+G scratch file; hide artifact disk paths by @alliecatowo in #35
• chore(release): 0.1.2 by @alliecatowo in #36

Full Changelog: v0.1.1...v0.1.2

What's Changed

• feat(site): project website and live web demo by @alliecatowo in #22
• ci(release): drop redundant version line from the rendered formula by @alliecatowo in #24
• fix(site): zola 0.22 highlighting config by @alliecatowo in #23
• feat(site): terminal-theme redesign (Dracula / Catppuccin Latte) by @alliecatowo in #25
• fix(server): DNS-rebinding guard, cargo-audit CI, install docs, recording trim by @alliecatowo in #26
• docs(site): install copy reflects four-target releases by @alliecatowo in #27
• fix(server): authenticate loopback API and bind identity to the credential by @alliecatowo in #28
• fix(scheduler): gate CommandSucceeds through shell authority and clean env by @alliecatowo in #29
• fix: strip terminal escapes from notifications and CLI ticket text by @alliecatowo in #32
• feat(trust): workspace trust gate for hooks.toml, acp.toml, oversight.toml by @alliecatowo in #30
• fix(server): wiki XSS - escape HTML, CSP, refuse symlinks by @alliecatowo in #31
• fix(install): fail closed on missing checksum, fix tmp cleanup by @alliecatowo in #33
• fix(serve): --token-file, non-loopback warning, guard /app by @alliecatowo in #34
• fix: private Ctrl+G scratch file; hide artifact disk paths by @alliecatowo in #35
• chore(release): 0.1.2 by @alliecatowo in #36

Full Changelog: v0.1.1...v0.1.2

What's Changed

• feat(site): project website and live web demo by @alliecatowo in #22
• ci(release): drop redundant version line from the rendered formula by @alliecatowo in #24
• fix(site): zola 0.22 highlighting config by @alliecatowo in #23
• feat(site): terminal-theme redesign (Dracula / Catppuccin Latte) by @alliecatowo in #25
• fix(server): DNS-rebinding guard, cargo-audit CI, install docs, recording trim by @alliecatowo in #26
• docs(site): install copy reflects four-target releases by @alliecatowo in #27
• fix(server): authenticate loopback API and bind identity to the credential by @alliecatowo in #28
• fix(scheduler): gate CommandSucceeds through shell authority and clean env by @alliecatowo in #29
• fix: strip terminal escapes from notifications and CLI ticket text by @alliecatowo in #32
• feat(trust): workspace trust gate for hooks.toml, acp.toml, oversight.toml by @alliecatowo in #30
• fix(server): wiki XSS - escape HTML, CSP, refuse symlinks by @alliecatowo in #31
• fix(install): fail closed on missing checksum, fix tmp cleanup by @alliecatowo in #33
• fix(serve): --token-file, non-loopback warning, guard /app by @alliecatowo in #34
• fix: private Ctrl+G scratch file; hide artifact disk paths by @alliecatowo in #35
• chore(release): 0.1.2 by @alliecatowo in #36

Full Changelog: v0.1.1...v0.1.2

What's Changed

• feat(site): project website and live web demo by @alliecatowo in #22
• ci(release): drop redundant version line from the rendered formula by @alliecatowo in #24
• fix(site): zola 0.22 highlighting config by @alliecatowo in #23
• feat(site): terminal-theme redesign (Dracula / Catppuccin Latte) by @alliecatowo in #25
• fix(server): DNS-rebinding guard, cargo-audit CI, install docs, recording trim by @alliecatowo in #26
• docs(site): install copy reflects four-target releases by @alliecatowo in #27
• fix(server): authenticate loopback API and bind identity to the credential by @alliecatowo in #28
• fix(scheduler): gate CommandSucceeds through shell authority and clean env by @alliecatowo in #29
• fix: strip terminal escapes from notifications and CLI ticket text by @alliecatowo in #32
• feat(trust): workspace trust gate for hooks.toml, acp.toml, oversight.toml by @alliecatowo in #30
• fix(server): wiki XSS - escape HTML, CSP, refuse symlinks by @alliecatowo in #31
• fix(install): fail closed on missing checksum, fix tmp cleanup by @alliecatowo in #33
• fix(serve): --token-file, non-loopback warning, guard /app by @alliecatowo in #34
• fix: private Ctrl+G scratch file; hide artifact disk paths by @alliecatowo in #35
• chore(release): 0.1.2 by @alliecatowo in #36

Full Changelog: v0.1.1...v0.1.2

v0.1.1

What's Changed

• docs: drop private-repo wording, add license files, fix stale Linux status by @alliecatowo in #1
• docs: drop remaining private-repo wording and fix v0.1.0 binary path by @alliecatowo in #2
• chore: repo cleanup (junk files, ignores, README accuracy) by @alliecatowo in #4
• chore(deps): bump actions/checkout from 4 to 7 by @dependabot[bot] in #8
• chore(deps): bump actions/setup-node from 4 to 7 by @dependabot[bot] in #6
• build(deps-dev): bump vitest from 2.1.9 to 4.1.11 in /clients/web by @dependabot[bot] in #3
• build(deps-dev): bump esbuild from 0.24.2 to 0.28.1 in /clients/vscode by @dependabot[bot] in #9
• chore(deps): bump pnpm/action-setup from 4 to 6 by @dependabot[bot] in #5
• ci: configure Dependabot grouping and auto-merge by @alliecatowo in #10
• chore(deps): bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in #7
• chore(deps-dev): bump @types/vscode from 1.137.0 to 1.138.0 in /clients/vscode in the minor-and-patch group across 1 directory by @dependabot[bot] in #12
• chore(deps): bump dependabot/fetch-metadata from 2 to 3 by @dependabot[bot] in #11
• chore(deps-dev): bump typescript from 5.9.3 to 7.0.2 in /clients/ts by @dependabot[bot] in #13
• chore(deps-dev): bump @testing-library/jest-dom from 6.10.0 to 7.0.1 in /clients/web by @dependabot[bot] in #16
• chore(deps-dev): bump vitest from 4.1.11 to 5.0.2 in /clients/web by @dependabot[bot] in #18
• docs: add Zola docs site on GitHub Pages by @alliecatowo in #19
• chore(deps): bump npm and cargo dependencies to latest majors by @alliecatowo in #20
• ci(release): Linux arm64 + macOS x64 builds and Homebrew formula job; 0.1.1 by @alliecatowo in #21

New Contributors

• @dependabot[bot] made their first contribution in #8

Full Changelog: v0.1.0...v0.1.1

What's Changed

• docs: drop private-repo wording, add license files, fix stale Linux status by @alliecatowo in #1
• docs: drop remaining private-repo wording and fix v0.1.0 binary path by @alliecatowo in #2
• chore: repo cleanup (junk files, ignores, README accuracy) by @alliecatowo in #4
• chore(deps): bump actions/checkout from 4 to 7 by @dependabot[bot] in #8
• chore(deps): bump actions/setup-node from 4 to 7 by @dependabot[bot] in #6
• build(deps-dev): bump vitest from 2.1.9 to 4.1.11 in /clients/web by @dependabot[bot] in #3
• build(deps-dev): bump esbuild from 0.24.2 to 0.28.1 in /clients/vscode by @dependabot[bot] in #9
• chore(deps): bump pnpm/action-setup from 4 to 6 by @dependabot[bot] in #5
• ci: configure Dependabot grouping and auto-merge by @alliecatowo in #10
• chore(deps): bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in #7
• chore(deps-dev): bump @types/vscode from 1.137.0 to 1.138.0 in /clients/vscode in the minor-and-patch group across 1 directory by @dependabot[bot] in #12
• chore(deps): bump dependabot/fetch-metadata from 2 to 3 by @dependabot[bot] in #11
• chore(deps-dev): bump typescript from 5.9.3 to 7.0.2 in /clients/ts by @dependabot[bot] in #13
• chore(deps-dev): bump @testing-library/jest-dom from 6.10.0 to 7.0.1 in /clients/web by @dependabot[bot] in #16
• chore(deps-dev): bump vitest from 4.1.11 to 5.0.2 in /clients/web by @dependabot[bot] in #18
• docs: add Zola docs site on GitHub Pages by @alliecatowo in #19
• chore(deps): bump npm and cargo dependencies to latest majors by @alliecatowo in #20
• ci(release): Linux arm64 + macOS x64 builds and Homebrew formula job; 0.1.1 by @alliecatowo in #21

New Contributors

• @dependabot[bot] made their first contribution in #8

Full Changelog: v0.1.0...v0.1.1

What's Changed

• docs: drop private-repo wording, add license files, fix stale Linux status by @alliecatowo in #1
• docs: drop remaining private-repo wording and fix v0.1.0 binary path by @alliecatowo in #2
• chore: repo cleanup (junk files, ignores, README accuracy) by @alliecatowo in #4
• chore(deps): bump actions/checkout from 4 to 7 by @dependabot[bot] in #8
• chore(deps): bump actions/setup-node from 4 to 7 by @dependabot[bot] in #6
• build(deps-dev): bump vitest from 2.1.9 to 4.1.11 in /clients/web by @dependabot[bot] in #3
• build(deps-dev): bump esbuild from 0.24.2 to 0.28.1 in /clients/vscode by @dependabot[bot] in #9
• chore(deps): bump pnpm/action-setup from 4 to 6 by @dependabot[bot] in #5
• ci: configure Dependabot grouping and auto-merge by @alliecatowo in #10
• chore(deps): bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in #7
• chore(deps-dev): bump @types/vscode from 1.137.0 to 1.138.0 in /clients/vscode in the minor-and-patch group across 1 directory by @dependabot[bot] in #12
• chore(deps): bump dependabot/fetch-metadata from 2 to 3 by @dependabot[bot] in #11
• chore(deps-dev): bump typescript from 5.9.3 to 7.0.2 in /clients/ts by @dependabot[bot] in #13
• chore(deps-dev): bump @testing-library/jest-dom from 6.10.0 to 7.0.1 in /clients/web by @dependabot[bot] in #16
• chore(deps-dev): bump vitest from 4.1.11 to 5.0.2 in /clients/web by @dependabot[bot] in #18
• docs: add Zola docs site on GitHub Pages by @alliecatowo in #19
• chore(deps): bump npm and cargo dependencies to latest majors by @alliecatowo in #20
• ci(release): Linux arm64 + macOS x64 builds and Homebrew formula job; 0.1.1 by @alliecatowo in #21

New Contributors

• @dependabot[bot] made their first contribution in #8

Full Changelog: v0.1.0...v0.1.1

v0.1.0

Full Changelog: https://github.com/alliecatowo/ticket-master/commits/v0.1.0