GitPulse v0.0.9

Changed

• Consolidate all outstanding worktrees and align the embedded SQLite dependency
  with MANVI and DevMap. Add explicit DevMap navigation to both agent guides,
  with regression coverage that preserves the workflow across regeneration.

• Synchronize the canonical devmap query, HTML projection, extractor and store
  modules. HTML assets are owned by the upstream query crate; GitPulse no
  longer rewrites the HTML implementation while vendoring it.

• Document the Rust-library, Go-module and NDJSON integration boundaries in
  docs/MODULE_INTEGRATION.md, including configurable executable paths and
  independent host/protocol/database compatibility checks.

Fixed

• Pin release builds to one verified commit and require successful CI and coverage
  for that commit. Refuse published or mismatched releases, resume matching drafts
  by ID, verify uploaded asset digests, and confirm changelog notes after writing.
• Accept GNU checksum records with escaped filenames and normalize Windows index
  transaction paths for Git. Preserve hostile filename tests on supported systems.
• Resolve regular-file conflicts on Windows with pinned directories, exact staged
  bytes and retained recovery content on replacement or staging failure. Preserve
  executable Git modes in the index; Windows reparse points require external resolution.
• Bound Unix terminal input delivery and lock waits, cancel pending input on close,
  and report partial delivery without retrying accepted bytes. Closing a Linux PTY
  no longer leaves a full input-queue write blocked after its child exits. Wake
  output readers on readiness so interactive and bulk output avoid polling delays.
• Avoid redundant JSON parsing during diagnostic breadcrumbs while retaining the
  existing credential redaction and stress-test budgets. Reuse fixed credential
  matchers instead of rebuilding them for every navigation field.
• Release watcher sessions when their backend event stream closes so watching
  again starts a live backend. An old backend cannot remove a replacement session.
• Rebuild the desktop, MCP and daemon from the current DevMap 0.1.1 integration.
  Embedded readers preserve distinct symbol identities and withhold source
  snippets when the indexed content hash no longer matches the current file.
  The external builder checks lexical binding scope, source freshness and
  bounded input reads. See DevCouncil's September 8 reliability audit for
  adversarial regression and stress-test evidence.
• Prepare complete vendor updates before replacing the current tree, refuse
  concurrent updates and symlinked sources, and retain rollback state on
  installation failure. Drift checks now detect upstream deletions and resolved
  Cargo manifest changes using the same snapshot builder as updates.
• Bound unsolicited MANVI sidecar output between requests and terminate an
  overflowing child. The per-request byte budget now has an idle-queue bound
  enforced by the same stdout pump in production and live-process tests.
• Git subprocess reads retain captured output when descendants hold pipes open.
  Unix pumps input and output without reader threads; Windows cancels blocked
  I/O and retains resource permits until workers exit. Queueing and lock retries
  share the command deadline, and the Windows tree-kill helper has a deadline.
• Optional tool installation shares the bounded runner, including cancellation
  and progress. Machine-output consumers refuse incomplete output, failed version
  commands cannot pass verification, and schema integers cannot wrap. Digest
  output uses the existing hexadecimal validator.
• Blame handles new, staged, ignored and unborn-repository text files without
  fabricating committed attribution. Oversized or incomplete blame is reported
  as unavailable instead of returning an unmarked prefix.