v0.7.0

Upgrading

• Restart dsh web after updating. Existing profiles load without a migration.

Added

• Edit directive text in Settings. Changed wording becomes your rule, preserves its scope and enabled state, and clears the old trial evidence.
• Search directives by text or workspace and filter by active, trial, queued, retired, or disabled status.
• Copy a directive or the exact guidance preview, with success and failure feedback.

Fixed

• Mask credential-shaped text in manually added and edited directives before storing or injecting it.
• Reject opaque origins and malformed JSON media types on browser routes, and keep dot-only session IDs inside report storage.
• Require patched Zod 4.6.7 and override vulnerable development copies.
• Support DSH 0.2 hosts and update development peers to 0.2.2-rc.1, React to 19.3.1, and the pinned setup-node action to 7.1.0.
• Let the live smoke script use a web session cookie and check removed directives and empty usage ledgers correctly.
• The log audit ignores Dependabot's /home/dependabot checkout, the same way it ignores /home/runner.

Added

• A weekly log-audit workflow and pnpm check:ci-logs scan the repository's
  own CI logs for credentials, personal paths and addresses. (#61)

Full diff: v0.6.1...v0.7.0