Skip to content

Castellyn v0.5.3

Choose a tag to compare

@danscMax danscMax released this 26 Jun 08:19

A hardening pass: backend stability, tighter security defaults, accessibility, faster startup, and power-user keyboard control — no behaviour changes to the workflows themselves.

Added

  • Power-user keyboard controlCtrl + 1 … 9 jumps straight to a tab, Esc cancels the running operation, and the command palette gained direct action verbs (Check all for updates, Refresh forks, Backup now, Open the run log).
  • Pausable toasts — hovering or focusing the notification stack pauses its auto-dismiss timers; error/warn toasts announce as alert, others as status.

Changed

  • Tighter security defaults — CSP object-src 'none' / base-uri 'self' / frame-ancestors 'none'; detached windows run under a least-privilege capability; open_url only opens http/https; provider ids are validated.
  • Faster, leaner startupHubConfig parsed once and cached; elevation check warmed off the UI path; the xterm/Sessions bundle is now lazy-loaded.

Fixed

  • Self-healing run-lock (RAII guard — an early-return/panic can no longer leave the app permanently "busy").
  • PTY sessions cleaned up on exit instead of being orphaned.
  • Honest cancel — reports a real failure if the kill fails; treats "process already gone" as success.
  • Non-blocking terminal inputsession_write no longer holds the session map lock across the write.
  • Safer destructive confirms — dialogs focus Cancel by default; Enter no longer fires a dangerous/text-gated action; batch dialogs list what is affected.
  • No .bak for secret filessettings.json / opencode.json are never copied in plaintext.

Accessibility

  • Notification region, aria-current on the active nav item, <html lang> synced to the locale, focus moved into dropdowns on open, modal initialFocus.

Docs

  • README Download section + PowerShell 7 (pwsh) prerequisite (en/ru/zh).

Windows x64 binaries (standalone .exe, NSIS setup, MSI) are attached below once the build finishes.