Castellyn v0.5.3
A hardening pass: backend stability, tighter security defaults, accessibility, faster startup, and power-user keyboard control — no behaviour changes to the workflows themselves.
Added
- Power-user keyboard control —
Ctrl + 1 … 9jumps straight to a tab,Esccancels the running operation, and the command palette gained direct action verbs (Check all for updates, Refresh forks, Backup now, Open the run log). - Pausable toasts — hovering or focusing the notification stack pauses its auto-dismiss timers; error/warn toasts announce as
alert, others asstatus.
Changed
- Tighter security defaults — CSP
object-src 'none'/base-uri 'self'/frame-ancestors 'none'; detached windows run under a least-privilege capability;open_urlonly openshttp/https; provider ids are validated. - Faster, leaner startup —
HubConfigparsed once and cached; elevation check warmed off the UI path; the xterm/Sessions bundle is now lazy-loaded.
Fixed
- Self-healing run-lock (RAII guard — an early-return/panic can no longer leave the app permanently "busy").
- PTY sessions cleaned up on exit instead of being orphaned.
- Honest cancel — reports a real failure if the kill fails; treats "process already gone" as success.
- Non-blocking terminal input —
session_writeno longer holds the session map lock across the write. - Safer destructive confirms — dialogs focus Cancel by default; Enter no longer fires a dangerous/text-gated action; batch dialogs list what is affected.
- No
.bakfor secret files —settings.json/opencode.jsonare never copied in plaintext.
Accessibility
- Notification region,
aria-currenton the active nav item,<html lang>synced to the locale, focus moved into dropdowns on open, modalinitialFocus.
Docs
- README Download section + PowerShell 7 (
pwsh) prerequisite (en/ru/zh).
Windows x64 binaries (standalone .exe, NSIS setup, MSI) are attached below once the build finishes.