- Purge the pre-elstar codename, strip the shipped binary, guard both
- Fix all 10 findings from the workflow code review
- security: remove the legacy HMAC path and fix the release gate that could never fire
- security: stop dlopen'ing the AX bridge from a world-creatable path
- hot reload: extract the CLI surface into HotCommandCLI.swift
- agents: store embedded sources as base64, not [UInt8] literals — 15,092 lines to 71
- Merge refactor/hotcommand-decompose
- hot reload: extract SwiftUI source parsing and test it; share the FSEvents bridge
- hot reload: extract DerivedData discovery and the FSEvents watcher
- License: mix a build-time secret into the cache signature
- docs: generated codebase map (docs/MAP.md)
- License: inject the clock and validator; fix four ways a paying customer got locked out
- MCP: stop the server dying on out-of-range numbers; hot_reload defaults to --once
- validate-agent-sources: include AgentCommon.h, mirroring the real build
- gitignore: hookify local rule files
- scripts: ship.sh — one-command release, correctly ordered around source hardening
- scripts: status.sh (verified state + drift check) and a fuller release checklist
- marketing: launch video source, corrected against the v1.0.2 production binary
- sign-notarize: quote 'binary' in echo — backticks executed it as a command
- Hooks: one chained post-edit script replaces three parallel PostToolUse hooks
Install
brew install elstar-dev/elstar/elstar # or: brew upgrade elstar-dev/elstar/elstar
curl -fsSL https://elstar.dev/install.sh | bash