v0.19.0

Changelog

• dc07eda: A children link check with no min needs one link (@alternayte)
• 3ad3c20: A spec doc of a GitHub source reads its repo's .speccy.yaml (@alternayte)
• 23c8808: An ended waiver comes back with the text it was approved for (@alternayte)
• 4f12832: An ended waiver leaves the sidecar (@alternayte)
• d3ee74d: Apply a reply command once: skip the threads a run already resolved (@alternayte)
• e2cf8cd: Ask for a verification waiver from the run, and show the breach rate (@alternayte)
• 5904ef1: Call the TUI's bottom line the message line, not the status line (@alternayte)
• 63d24e1: Count section rubric checks in the run cost estimate (@alternayte)
• b41b63b: Docs: Mark it standalone, Withdraw, and Answer on the Traceability page (@alternayte)
• 7e91807: Drop the gap answer branch for a request that is approved at once (@alternayte)
• 3dfaede: Fix stale comments on import bundles, link rule paths, and hosted profiles (@alternayte)
• ea84481: Give a github: link that is not implemented-by a true reason (@alternayte)
• 9ce99df: Hand it to a builder opens a dialog to download or copy the build packet (@alternayte)
• 3b0982f: Keep preview edits in the code editor, and fit the control row on a phone (@alternayte)
• 5581ed5: Keep the master key page's sentences short (@alternayte)
• 8b687c7: Leave the sidecar out of the build packet (@alternayte)
• abd680c: Mark a doc standalone and withdraw an acknowledgement from the API (@alternayte)
• 0c34d52: Mark it standalone, Withdraw, Answer, and reference links in the web app (@alternayte)
• 812ab83: Merge pull request #84 from alternayte/polish-bugs (@alternayte)
• 9bd0cfa: Merge pull request #85 from alternayte/missing-controls (@alternayte)
• 3d67ba5: Merge the Action, CLI and handoff fixes (@alternayte)
• 73788e2: Merge the acknowledgement controls, and name an acknowledgement in the next action (@alternayte)
• 203489b: Merge the handoff dialog and the stale-upstream line (@alternayte)
• d357c32: Merge the review, store and profile fixes (@alternayte)
• d6b2a45: Merge the text fixes (@alternayte)
• a1af470: Merge the verification waiver, breach rate, save shortcut and admin-only Accept (@alternayte)
• dd3838e: Name --adopt, --verify and the speccy report flags in the usage, and regenerate the CLI reference (@alternayte)
• 24dfef3: Name a size that is not valid in the size note (@alternayte)
• 4718c76: Name the blocking threads when a handoff is refused, and the flag and field that take it anyway (@alternayte)
• 9b72178: Name the verification run work in the reviewer and judge role help (@alternayte)
• e1f63cb: Pin the binary with the Action, name the uncommitted decision truly, and tidy messages (@alternayte)
• fc1fb8b: Pin the workflow that speccy init --github writes at the binary's release, or main for a dev build (@alternayte)
• 9679588: Point the .speccy.yaml that speccy init writes at the docs site, not SDD.md (@alternayte)
• 7a551a4: Refuse to start on a database that a newer Speccy migrated (@alternayte)
• e4ab142: Remove the verdict's dead LinkedStale input (@alternayte)
• 8ad9033: Resolve a source URL on a branch whose name has a slash against the repo's branches (@alternayte)
• 2044696: Revert "An ended waiver leaves the sidecar" (@alternayte)
• b6805fb: Save with Cmd+S in every view, and hide Accept from a member (@alternayte)
• 1aaf1cf: Say spec doc, not main doc, in the MCP tool descriptions (@alternayte)
• 4d0fa1d: Say what the workflow's comment does: it says how to turn on the model stages (@alternayte)
• 2bc1a69: Say where to enter a secret sealed with another key, and let an MCP connection take a new one (@alternayte)
• ef4d71b: Say why the decisions are not committed: a fork, or the commit's own error (@alternayte)
• 873c9fa: Show a .speccy.yaml that does not load under its own heading on the bundles page (@alternayte)
• e88ffc1: Spec: missing controls (@alternayte)
• 550c13f: The build packet downloads as a .zip, and a stale verdict names the upstream spec doc (@alternayte)
• 953ecc4: speccy init --github adds to an existing .speccy.yaml instead of overwriting it (@alternayte)

v0.18.1

Security: the Action cache held the key to the model API key

Before v0.18.1, the GitHub Action cached a state folder that held the store, with the model API key sealed in it, and the key file that unseals it. A pull request from a fork can restore that cache and run its own workflow steps, so it could read the API key.

v0.18.1 keeps the key file out of the cache, and moves to a new cache prefix. If your repo ran the Action with a model key on an older version: delete the old caches (gh cache delete --all), and rotate the API key.

This release also adds the docs site at https://speccy-docs.pages.dev, with links to it from the app.

Changelog

• e26ae91: Docs site at speccy-docs.pages.dev, generated reference, and links from the app (@alternayte)
• 6def022: Keep the key that opens the store's secrets out of the Action cache (@alternayte)
• 29916ea: Make the editor's search panel readable in the dark theme (@alternayte)
• 08ac2d6: Merge pull request #82 from alternayte/docs-site (@alternayte)
• 64739d1: Merge pull request #83 from alternayte/action-cache-secrets (@alternayte)

v0.18.0

Changelog

• 7eecf1e: Fix docs-shots and the gauntlet for spec docs, and untrack the buildtool binary (@alternayte)
• b9c346a: Merge pull request #80 from alternayte/fix-docs-shots (@alternayte)
• 1fa2d04: Merge pull request #81 from alternayte/unlink-and-table-edit (@alternayte)
• 5a24252: Remove a link from the trace page, and edit a table in place (@alternayte)

v0.17.0

Changelog

• 8683ca4: Merge pull request #79 from alternayte/traceability-end-to-end (@alternayte)
• 2366d16: Traceability from end to end (@alternayte)

v0.16.1

Changelog

• 4d5a21c: Merge pull request #78 from alternayte/squash-migrations (@alternayte)
• ec24cc2: One baseline migration from 0.15.0, and a clear error for an older state (@alternayte)

v0.16.0

Changelog

• 97bb96b: A folder of spec docs: adopt, rail, fixes and wrapped frontmatter (@alternayte)
• 61903f3: Merge pull request #77 from alternayte/folder-of-spec-docs-fixes (@alternayte)

v0.15.0

Changelog

• ec38db7: A bundle holds one or more spec docs: API and UI (@alternayte)
• 8636169: A bundle holds one or more spec docs: sources and import (@alternayte)
• 91c0f35: A bundle holds one or more spec docs: store and scan (@alternayte)
• 07bc44a: Docs for 0.14.0 (@alternayte)
• 321c9b6: Local mode lists, syncs and shows GitHub sources (@alternayte)
• 4a1d47e: Merge pull request #65 from alternayte/docs-0.14.0 (@alternayte)
• 83ba3ef: Merge pull request #70 from alternayte/bundle-holds-spec-docs (@alternayte)
• feb1d7c: Merge pull request #72 from alternayte/local-github-sources (@alternayte)

v0.14.0

Changelog

• cdf7705: AI findings survive an edit to other sections (@alternayte)
• a60625f: Merge pull request #61 from alternayte/readme-0.13.0 (@alternayte)
• 3c6df56: Merge pull request #62 from alternayte/one-bundle-per-spec-doc (@alternayte)
• c9b2a3c: Merge pull request #63 from alternayte/issue-fixes (@alternayte)
• dd40cee: Merge pull request #64 from alternayte/findings-survive-an-edit (@alternayte)
• 4b4e360: One bundle per spec doc (@alternayte)
• 695e419: Point the README at 0.13.0 (@alternayte)
• 6ef58f0: The AI answer reads the thread's anchor, and an inbox click marks one item read (@alternayte)

v0.13.0

Changelog

• f0449cf: Merge pull request #50 from alternayte/verify-from-a-link (@alternayte)
• 147d122: Verify a build from a pasted link, and find code without trace IDs (@alternayte)

v0.12.0

Changelog

• e655bfb: A README for people who want to use Speccy (@alternayte)
• e7ff575: A bundle carries the files its doc references (@alternayte)
• a69ea78: Delete a bundle, and keep profiles (@alternayte)
• aaf8d4e: Explain a profile, a template, and a doc's size (@alternayte)
• f75f46b: Flash the section in the code view too (@alternayte)
• 24ab598: Give the doc and the editors the screen (@alternayte)
• 7a3afe3: Merge pull request #40 from alternayte/readme-version (@alternayte)
• 83733f9: Merge pull request #41 from alternayte/readme-install (@alternayte)
• 46081c2: Merge pull request #42 from alternayte/cursor-trust (@alternayte)
• 73dd2b0: Merge pull request #43 from alternayte/source-overlap (@alternayte)
• edcb45e: Merge pull request #44 from alternayte/code-view-flash (@alternayte)
• dc71922: Merge pull request #45 from alternayte/layout-widths (@alternayte)
• e3fffc8: Merge pull request #46 from alternayte/bundle-profile-crud (@alternayte)
• 064ae32: Merge pull request #47 from alternayte/profile-onboarding (@alternayte)
• 5b4fe5f: Merge pull request #48 from alternayte/carried-files (@alternayte)
• 52f50d1: Merge pull request #49 from alternayte/readme-consumer (@alternayte)
• 2ce4a46: Point the README at 0.11.0 (@alternayte)
• 23bc5a2: Read cursor-agent's token counts, and leave the terminal (@alternayte)
• f95e643: Say when another source already holds a doc (@alternayte)
• 4b260b5: Say which bundles hold a profile, and carry the rollback note (@alternayte)
• b44b8db: Tell people how to install Speccy (@alternayte)
• c53ea60: Trust the workspace of an agent CLI call (@alternayte)