Skip to content

v0.19.0

Choose a tag to compare

@StephanSchmidt StephanSchmidt released this 27 May 18:49
· 1412 commits to main since this release

Changelog

  • 38a4146 Ack rejected Telegram updates and surface them via logs and counter [SC-77]
  • af4b0d2 Add path sanitizer hook and bound response bodies in apiclient [SC-76]
  • 99cdb58 Add star history chart to README
  • 51b9320 Bound LeafCache and collapse concurrent generators [SC-76]
  • 9c830b0 Bound concurrency, read deadlines, and dial timeouts on server paths [SC-76]
  • ec48643 Bound queues and validate inputs in external clients [SC-76]
  • 6fdbfab Bump codecov/codecov-action from 5.5.4 to 6.0.0
  • 21d9d22 Bump github.com/charmbracelet/bubbles
  • 70b398d Bump github.com/rs/zerolog from 1.34.0 to 1.35.0
  • 33b1fcb Bump modernc.org/sqlite from 1.47.0 to 1.48.1
  • eb2b963 Cap Telegram dispatch prompt length at 2000 bytes [SC-77]
  • 7eb66d7 Chat-aware Telegram allowlist with group-chat default-deny [SC-77]
  • 2246707 Clean up logic edge cases across providers [SC-76]
  • 157e732 Detect bug tickets across trackers and route them to human-bug-plan
  • 7129fd0 Disable redirect following by default in apiclient [SC-76]
  • 381899b Graceful shutdown and consistency fixes for long-lived handlers [SC-76]
  • 4b7923b Harden error paths around I/O and atomic writes [SC-76]
  • 483f7c0 Improve CLI arg parsing for global flags [SC-76]
  • a486a02 Improve index sync prune safety and kind-filtered search [SC-76]
  • c1df1e4 Introduce tracker-agnostic review handoff via PM-ticket comments
  • a142c8b Log marshal/write failures and keep destructive wrapper independent [SC-76]
  • a6c86dc Log only parameter names for OAuth callback [SC-76]
  • 151c0b9 Merge pull request #11 from StephanSchmidt/dependabot/github_actions/codecov/codecov-action-6.0.0
  • 2fff17f Merge pull request #13 from StephanSchmidt/dependabot/go_modules/modernc.org/sqlite-1.48.1
  • 6beb90e Merge pull request #8 from StephanSchmidt/dependabot/go_modules/github.com/charmbracelet/bubbles-1.0.0
  • cf41248 Merge pull request #9 from StephanSchmidt/dependabot/go_modules/github.com/rs/zerolog-1.35.0
  • 3219845 Migrate Claude session dirs in place without touching binaries [SC-76]
  • 1551d52 Nil-check listener returns and drop dead assignment [SC-76]
  • faddfe1 Propagate LoadOrCreateToken errors and bounds-check prefix [SC-76]
  • d3a432f Propagate vault config parse errors [SC-76]
  • ab85965 Reclaim pending confirmations on lifecycle errors [SC-76]
  • 4f0ef85 Refactor daemon env handling to per-request context [SC-76]
  • 2b56ce7 Refuse to proceed with split CA material [SC-76]
  • 952b12e Render markdown tables faithfully when source has no header [SC-76]
  • 3b2042f Revert "[HUM-92] Add passive version-update notice to human CLI"
  • 3503455 Revert "[HUM-92] Fix staticcheck SA5011 false positives in pre-existing tests"
  • e1b6d3e Revert "[HUM-92] Suppress pre-existing gosec false positives with nosec annotations"
  • 182ef88 Simplify HookEventStore subscriber lifecycle [SC-76]
  • 036e91f #25 Apply gofmt/goimports cleanup
  • 6033ade #25 Fix two failing tests
  • fb4dc1f #25 Suppress pre-existing gosec G204 false positive in browser/open_darwin.go
  • 4266094 #25 Upgrade Go 1.26.2→1.26.3 and golang.org/x/sys v0.43→v0.44
  • a5d78fa Surface read and iteration errors instead of swallowing them [SC-76]
  • d99588b Tighten PendingConfirm approver validation [SC-76]
  • 70293ec Tighten input handling in RunDeleteIssue prompt [SC-76]
  • 239a53f Tighten input validation for URL and shell boundaries [SC-76]
  • 448d080 Tighten lock scope and shutdown ordering across daemon paths [SC-76]
  • 838e4f5 Tighten validation and error handling across providers [SC-76]
  • 5d0dddd Update confirm-op tests for stricter approver check [SC-76]
  • ab02b7c Validate OAuth callback request and prevent duplicate sends [SC-76]
  • 9a07813 Warn at startup when Telegram instance has empty allowlist [SC-77]
  • fc71beb [HUM-59] add NetworkEventEmitter interface and proxy emit sites
  • 2c42c16 [HUM-59] add NetworkEventStore and network-events daemon route
  • dd76e82 [HUM-59] fetch network events on monitor snapshot ticks
  • f7db09a [HUM-59] render bottom-anchored ambient network activity panel
  • 3c0c66a [HUM-59] wire NetworkEventStore into daemon and OAuth relay
  • b670285 [HUM-60] commits reference both PM and engineering tickets
  • de91946 [HUM-61] scope human-reviewer diff to ticket's commits
  • 2bfbd61 [HUM-63] Fix nilaway and gocyclo lint failures in make check
  • 8aeb9c1 [HUM-64] Upgrade Go module dependencies
  • 2b5e525 [HUM-65] Upgrade Go to 1.26.2 to fix stdlib security vulnerabilities
  • 3e85ce8 [HUM-66] Auto-select trackers by role in ideate and plan skills
  • d285583 [HUM-68] Add native devcontainer management with feature installation
  • c1bd3b1 [HUM-70] Add TUI agent spawn via tmux split
  • fd8127f [HUM-70] Auto-cleanup devcontainer agents on session exit
  • a5b1fa7 [HUM-70] Clean up devcontainer and agent code
  • 860acdd [HUM-70] Container-only agents with image caching
  • a880ecd [HUM-70] Fix TUI agent spawn: configdir from .humanconfig, daemon on 0.0.0.0
  • 1b84c29 [HUM-70] Run Claude as vscode user in devcontainers
  • 3441da2 [HUM-70] TUI agent spawn uses dangerously-skip-permissions
  • 8a77fd7 [HUM-70] Target agent pane to project's tmux window
  • 45c9518 [HUM-71] Add prerequisite checks to human init
  • 70f29da [HUM-71] Remove agent worktree management
  • 2af32d4 [HUM-71] Remove githelper package and ClickUp link command
  • a2fb56a [HUM-72] Fix container instances not showing in TUI project tabs
  • 8ff6187 [HUM-73] Add sparkline, per-tool percentages, and error rate to stats panel
  • a0ab512 [HUM-74] Add 271 tests to raise coverage from 74% to 80%
  • 11b8e68 [HUM-74] Enforce 80% coverage threshold in Makefile and CI
  • 21a995a [HUM-74] Fix lint errors: staticcheck, errcheck, nilaway, gocyclo
  • 7e9a874 [HUM-74] Ignore all *.out coverage artifacts in .gitignore
  • 94ada67 [HUM-75] Add project config step to init wizard
  • 2c0d52a [HUM-77] Fix Shortcut issues list returning empty without --project
  • b7153cf [HUM-78] Fix GitLab issues list without --project only returning user-created issues
  • e205f63 [HUM-79] Add test coverage for platform, browser, and ClickUp error paths
  • 1efb9dc [HUM-80] Fix TUI not showing container agent activity
  • f29fe87 [HUM-81] Background agent stop on exit for instant feedback
  • 8b58014 [HUM-81] Fix devcontainer not stopping when Claude exits
  • 36130b9 [HUM-81] Remove inline agent stop, rely on daemon cleanup
  • 1b81aba [HUM-82] Isolate container .claude and install LSP servers in devcontainers
  • 064ec1c [HUM-83] Add logo package and fix gitignore pattern
  • bf1aad6 [HUM-83] Improve human init wizard UX
  • c6de3bd [HUM-84] Add async agent stop via daemon for non-blocking cleanup
  • d82a2ad [HUM-84] Add periodic zombie sweep for orphaned agent containers
  • 498ad18 [HUM-84] Persist .claude.json across devcontainer rebuilds
  • 69ea79f [HUM-84] Remove agent from list immediately on async stop
  • 96a2472 [HUM-84] Run async agent stop after Claude exits in tmux pane
  • 38b8f33 [HUM-84] Set remoteUser vscode in generated devcontainer config
  • c6ab000 [HUM-85] Auto-install LSPs for selected stacks in human init
  • ff1099f [HUM-85] Fix non-deterministic group ordering in Shortcut listAllGroupStories
  • 0be6e59 [HUM-85] Fix unnecessary fmt.Sprintf lint warning in LSP setup
  • f87fdf1 [HUM-85] Reuse daemon vault resolver for per-request commands
  • 5bb9ca6 [HUM-86] Fix agent spawn discovery delay and stale task display
  • e37f3db [HUM-86] Speed up TUI startup with progressive loading
  • a80f031 [HUM-87] Add LSP servers to devcontainer and update gitignore
  • 5c6a81d [HUM-87] Add LSP servers to devcontainer and update gitignore
  • 02116fe [HUM-88] Event-driven TUI updates with daemon subscription
  • da264d7 [HUM-89] Equalise tmux pane widths when spawning agents with 'a'
  • b343aaa [HUM-90] Introduce typed tracker.Category enum for status semantics
  • 8107171 [HUM-92] Add internal/update package for version-check cache
  • c57842d [HUM-92] Add passive version-update notice to human CLI
  • 1ea698e [HUM-92] Expose daemon binary version in DaemonInfo for skew detection
  • e3f4223 [HUM-92] Fix staticcheck SA5011 false positives in pre-existing tests
  • f36afd2 [HUM-92] Raise internal/update package coverage above 80%
  • 2813b0f [HUM-92] Suppress pre-existing gosec false positives with nosec annotations
  • 3813e04 [HUM-92] Wire passive update notice and daemon/client skew warning into main
  • 87bed63 [HUM-96] Fix chrome socket tests failing on macOS due to 104-char Unix socket path limit
  • e155fed [HUM-99] Concurrency and shutdown hardening in daemon, proxy, and bridge
  • a9edef6 [HUM-99] Harden input handling, encoding, and resource cleanup
  • 5b6b3a1 [HUM-99] Reliability improvements in tracker resolution and parsing
  • 2aaba34 [HUM-99] Robustness fixes for devcontainer reuse, Notion sync, and relays
  • 476e48c [HUM-99] Strengthen agent process launch and daemon request handling
  • d8440da [SC-63] [HUM-62] Add agent command scaffolding for background Claude Code orchestration
  • 54fb7af [SC-78] add SNI parser negative + fuzz tests
  • e74523b [SC-78] add daemon hardening tests
  • ba4d97b [SC-78] add empty-opts EditIssue audit detail test
  • e353c36 [SC-78] add input sanitization tests
  • 7b13727 [SC-78] add race-detector tests for daemon shared state
  • 03c0a2b [SC-78] add tracker resolution edge case tests
  • 581dccc [SC-78] prune low-value tests and merge repetitive ones
  • 12cd32f [SC-79] [HUM-59] add View-level test guarding bottom-anchored layout
  • 71a9331 [SC-81] [HUM-67] Fix TUI confirmation by adding ClientPID to RunRemoteCapture
  • 23f097a [SC-81] [HUM-69] Persist tool call statistics in SQLite with TUI trend dashboard
  • ffbe178 [SC-85] [HUM-76] Spawn new container-based agent on ticket dispatch
  • f21d009 [SC-88] Update Go module dependencies
  • 279f656 [SC-89] Point Homebrew formula homepage at gethuman-sh org
  • 6cfc745 [SC-89] Rebrand from StephanSchmidt personal account to gethuman-sh org