v0.14.0

Highlights

• Cloud sync groundwork (#63). Trace can now sync tasks, session metadata, and doc blobs to a sync server: last-write-wins row sync, content-addressed doc blobs, and GitHub device-flow login. The feature is dormant unless a server URL is configured (trace config set server-url or TRACE_SERVER_URL) — unconfigured installs see no cloud UI and behave exactly as before.

Sync details

• Doc titles and descriptions travel in the sync manifest, so re-entry footers keep their labels across machines.
• Duplicate task slugs converge on pull instead of aborting the merge; slugs stay machine-local stable addresses.
• Task title renames now bump sync metadata so they propagate through the merge.
• Pulled tasks resolve local project identity, and sync state derives correctly even when identity was never recorded.
• The board shows a sync status badge only when a server is configured.

Fixes

• Device login opens the browser, honors the code lifetime, and floors the poll interval — no more indefinite hang on an expired code.
• The refresh-mode stop-hook nudge is now advisory rather than blocking (#71).

Chores

• Dependency refresh, Dependabot configuration, and TypeScript 7 compiler adoption.
• Environment-sensitive CLI tests are isolated for reliable runs.