Skip to content

Releases

v0.9.0

v0.9.0 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 24 Aug 00:16
v0.9.0
65e0f78

Highlights

  • Jira issue creation, targeted native-wiki description edits, labels, and
    links now use preview → review → hash-confirmed apply. Proposals bind fresh
    qualified evidence and immutable identities, allow at most one write attempt,
    and reconcile through bounded readback without automatic replay.
  • Existing guarded comment and custom-field workflows now qualify stricter
    evidence, reject lossy JSON and invalid Unicode, and report closed outcomes
    without exposing backend responses. Comment output and custom-field text stay
    value-free; custom-field JSON intentionally carries the proposed review
    value.
  • The legacy Jira CSV executor is replaced by read-only jira issue plan preview and execution-only plan apply. Schema-v2 plans qualify every row
    behind one aggregate authorization/hash barrier and stop immediately if a
    write outcome becomes ambiguous.
  • New qualified read surfaces include jira issue create-metadata and JSON-only
    jira issue field batch, which returns an ordered matrix for up to 25 issues
    and eight fields while distinguishing absent, null, empty, populated, and
    clipped cells.
  • Shipped Jira skills and the offline capability catalog now route field batch,
    guarded create/link, and batch-plan work through their dedicated surfaces.
  • Evaluator process-output bounds now have deterministic stderr overflow and
    accurate io.Writer accounting.

Upgrade notes

  • Jira plan CSV schema v1 is no longer accepted or migrated. Use the exact
    header:

    schema_version,operation,source,target,type,field,value

    Run atl jira issue plan preview --csv plan.csv with the required allow
    inputs and review its aggregate proposal_hash. Repeat the same CSV and allow
    inputs for apply, adding
    --confirm APPLY --expected-proposal-hash '<reviewed hash>'.

  • Scripts that expected Jira create, edit, label, or link commands to mutate
    immediately must adopt preview and hash-confirmed apply. Generate fresh
    v0.9.0 proposals; older proposal hashes are not reusable.

  • Guarded links require exact kind:link authorization for both endpoints.
    Existing issue-only grants do not authorize those mutations.

  • Exact capability-catalog/task-filter bytes change intentionally: field batch
    becomes the primary jira/batch-analysis route, and plan capabilities move
    from jira/edit to jira/batch-edit.

  • No configuration, durable mirror, or MCP tool-schema migration is required.
    Existing read/list surfaces remain available, and no new MCP write tool is
    introduced.

Verification and supply chain

The release was qualified by the complete root build, test, race, lint, vet,
documentation, generated-plugin, privacy, and standalone evaluator contours,
plus hosted Linux, macOS, Windows, CodeQL, and vulnerability checks.

Assets are built from the tagged commit for Linux and macOS on amd64 and arm64.
Publication includes per-asset SHA-256 files, a signed update manifest, SLSA
provenance, the installer, and a generated Homebrew formula.

Full changelog: v0.8.0...v0.9.0

Assets 14
  • atl-darwin-amd64
    sha256:61a450fd5245a9bf0ee51e765920d323f05bdc052e7607d14117cd1d7a49770b
    18.3 MB 2026-08-24T00:16:38Z
  • atl-darwin-amd64.sha256
    sha256:495890b0d81c93eb815823cb654d6450e309a8aa311ab4bb14baf308d1df40da
    83 Bytes 2026-08-24T00:16:39Z
  • atl-darwin-arm64
    sha256:5e67b5db753c7b6504f57a0699df021b00ea389fcb1342dcd61ec94ac44e09ba
    16.6 MB 2026-08-24T00:16:39Z
  • atl-darwin-arm64.sha256
    sha256:8a78b58676de6ce351539780a203198eaff4e9a1aaaa6ddaa6267d46521284a5
    83 Bytes 2026-08-24T00:16:39Z
  • atl-linux-amd64
    sha256:7aa64063f9d693c58818eb06dafdaef9956b52a9e40649ef9307db7a45d8bb9a
    17.9 MB 2026-08-24T00:16:38Z
  • atl-linux-amd64.sha256
    sha256:17191c10d37fc0aac4cdf613f66e34bb0e5802da63ace2f9cd9ff24909e09266
    82 Bytes 2026-08-24T00:16:38Z
  • atl-linux-arm64
    sha256:012467aa81805d6543d7d287dc09f10d78f0b886e442ef8841b778f6116e9552
    16.2 MB 2026-08-24T00:16:38Z
  • atl-linux-arm64.sha256
    sha256:632f55a33e4a8ca71983b8eca5dce7bed26f2451d1103d4fac7b301ca6341e49
    82 Bytes 2026-08-24T00:16:38Z
  • atl.rb
    sha256:ecce608814bd74bf593b39185212d9c8f5e0cf0a15d7114ce0673139d480349b
    1.42 KB 2026-08-24T00:16:40Z
  • install.sh
    sha256:fe699d3b94ae7faaa3412328ba22dd4671acb64241bd644e632ac85418bba416
    4.19 KB 2026-08-24T00:16:40Z
  • Source code (zip)
    2026-08-23T23:16:48Z
  • Source code (tar.gz)
    2026-08-23T23:16:48Z

v0.8.0 — qualified corpus capture, resilient complete pulls, and pre-release agent evaluation

v0.8.0 — qualified corpus capture, resilient complete pulls, and pre-release agent evaluation

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Aug 04:40
v0.8.0
fb351ff

Highlights

  • Strengthened complete Jira and Confluence pulls with qualification, resumable recovery, and opt-in bounded comments and attachment evidence.
  • Added bounded Confluence attachment discovery and space-tree reads, qualified Jira complete-project pulls, inverse reference search, and compact Jira issue-graph output.
  • Added qualified local corpus workflows for build, export, comparison, handoff, and cache management.
  • Introduced the standalone, source-built agent-eval coordinator as a pre-release capability, with deterministic provider-free reference execution and reporting.
  • Improved agent and MCP integration with runtime safety metadata, protocol compatibility handling, offline capability/effect discovery, and service-scoped health reporting.
  • Added explicit JSON-valued Jira fields while preserving legacy scalar string fields, normalized Jira create type resolution to immutable IDs with outcome diagnostics, and qualified Jira graph self-reference handling.
  • Hardened Confluence completeness handling and treats unambiguous schemeless backend hostnames as HTTPS.

Upgrade notes

  • No configuration migration is required. Explicit HTTP remains refused under the existing transport policy; a bare unambiguous hostname now defaults to HTTPS.
  • Complete-pull and search workflows may now report incomplete evidence instead of accepting an ambiguous result. Callers that need optional artifact retention should use the documented partial-artifact policy.
  • agent-eval is pre-release only: it does not yet claim stable external-consumer support or publication authority.
  • Modern MCP protocol support may require the documented client-side feature gate; legacy invocation remains supported.

Full Changelog: v0.7.1...v0.8.0

Loading

v0.7.1

v0.7.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Aug 20:04
v0.7.1
8c48ec0

What's Changed

Full Changelog: v0.7.0...v0.7.1

Contributors

isukharev
Loading

v0.6.0

v0.6.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Aug 06:14
v0.6.0
f889cfa
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Full Changelog: v0.5.1...v0.6.0

Contributors

isukharev
Loading

v0.5.1

v0.5.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Jul 22:22
v0.5.1
bdc0c91
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Full Changelog: v0.5.0...v0.5.1

Contributors

isukharev
Loading

v0.5.0

v0.5.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Jul 08:18
v0.5.0
efb84c7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Read more

Contributors

isukharev
Loading

v0.4.0

v0.4.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 Jul 08:17
v0.4.0
19b36e2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

atl v0.4.0

v0.4.0 turns atl into a substantially more complete agent-facing Jira and
Confluence workspace: compact evidence reads, normalized planning views,
review-bound write workflows, and an incremental Confluence mirror loop now
share the same explicit completeness and safety contracts.

Important upgrade notice

This release starts a new built-in update-signing trust chain. Clients running
v0.3.0 or earlier cannot authenticate this one release through atl's own
self-updater. Upgrade once through one of these independently verified paths:

brew update && brew upgrade isukharev/tap/atl

# or install the published binary after reviewing the installer
curl -fsSL https://github.com/isukharev/atl/releases/latest/download/install.sh | sh

Manual downloads and checksums are also attached below. After v0.4.0 is
installed, normal signed automatic updates resume for subsequent releases.
Homebrew is not affected by the signing-key reset: its formula pins release
assets by SHA-256.

Existing mirrors remain safe, but their derived Markdown format has advanced to
Confluence v4 and Jira v3. Before applying edits from older pristine .md
views, run atl conf render / atl jira render, or pull into a fresh mirror.
Incremental Confluence pull migrates an old view only after proving it pristine;
edited or unknown future views continue to fail closed.

Highlights

Evidence-first Jira analysis

  • jira epic digest assembles status/DoD fields, field history, child status
    distribution, comments, blockers, references, staleness and bounded linked
    Confluence sections into one deterministic result.
  • jira issue fields returns compact non-empty named fields by default and
    offers value-free --metadata-only discovery for low-token/private workflows.
  • jira issue history and jira issue refs now qualify pagination,
    truncation and source completeness instead of silently treating partial data
    as complete.
  • Exact Confluence URLs and short links can be resolved safely; page outlines
    and bounded sections avoid downloading long pages into agent context.
  • Date-only history and quarter analysis use the observed Jira user's IANA
    timezone, while exact timestamps remain exact. atl environment inspect
    reports the time semantics used by each backend without exposing identity or
    backend URLs.

One planning contract across Jira

  • Search, epic children, boards, backlogs, sprints and Structure snapshots now
    share named views, ordered columns, normalized rows, explicit pagination and
    safe Markdown tables.
  • Board snapshots expose workflow columns and ranked issues. Structure views add
    hierarchy, folder navigation, subtree selection and compact issue joins, with
    incomplete permissions kept visible.
  • Named list views live in config: use the built-in default/full views or
    define focused projections for a team or recurring agent workflow.
  • Jira-query macros embedded in Confluence can reuse the same issue-table
    renderer and preserve an identity-bound offline snapshot.

A complete Confluence mirror workflow

The main loop is now:

export ATL_READ_ONLY=1
atl conf pull --incremental --cql 'space = DOCS and type = page' \
  --since '2026-01-01T00:00:00Z' --into mirror
atl conf diff --into mirror
atl conf plan create --into mirror --out change-plan.json
atl conf plan preview change-plan.json

After human review, remove the process-wide read-only guard only for the apply
step and provide the exact proposal hash and confirmation required by the
command.

  • Incremental pull uses absolute UTC watermarks, a bounded safety overlap and
    local filtering; it advances state only after a complete local commit.
  • conf diff compares native CSF semantically and offline, separating
    meaningful block changes from byte-only differences.
  • conf plan create/preview/apply provides deterministic, review-bound,
    version-gated multi-page updates with reconciliation and non-replayable
    unknown outcomes.
  • Transient page views, typed page fields, guarded title/move/label operations,
    native blog-post creation, and reliable mirror relocation fill out common
    day-to-day page workflows.

Safer automation and writeback

  • ATL_READ_ONLY=1 (or global --read-only) protects an entire shell process:
    mutating commands are rejected before credentials, stdin or network access.
  • Machine-readable errors now include stable kind and remediation fields.
  • Jira field files, plans, worklogs, watchers and Confluence titles, moves,
    labels and plans use proposal hashes, fresh-state gates and reconciliation;
    ambiguous writes are never automatically replayed.
  • HTTP authentication is origin-scoped, HTTPS downgrade and userinfo URLs are
    rejected, sensitive query values are redacted, and unsafe write retries were
    removed.
  • Mirror I/O is root-contained across path segments, shared state updates are
    serialized, pagination anomalies fail closed, and spreadsheet formulas are
    neutralized in CSV output by default.

Agent onboarding and documentation

  • Private local profiles can retain consent-gated workflow and render
    preferences without observing user history automatically.
  • Jira and Confluence skills now teach an evidence-first workflow, compact
    discovery, inherited read-only guards and guarded apply cycles.
  • Context7 follows the release-only stable branch and exposes versioned
    documentation for this tag.
  • Release binaries report their exact commit and clean/dirty build provenance;
    signed checksums and GitHub build attestations remain the trust boundary.

Notable beta contract changes

  • List commands use --columns and the shared IssueList projection instead of
    the former duplicated --fields/TSV surfaces.
  • Structure export now emits the normalized snapshot contract. Use
    jira structure pull-issues when raw Jira snapshots or an issue limit are
    required.
  • Explicit -o text now returns exit 2 when a command has no documented text
    projection instead of silently falling back to JSON.
  • Formula-safe CSV is now the default; use --raw-csv only for a trusted
    machine consumer that requires untouched leading =, +, - or @.
  • Derived Jira and Confluence Markdown views are versioned and validated. They
    are staging views, not the native write substrate; native .wiki/.csf
    remains the recovery and synchronization boundary.

Verification

The release is built for Linux and macOS on amd64/arm64. CI runs unit, race,
lint, vet, vulnerability, CodeQL, plugin synchronization and Context7 corpus
checks. The release workflow signs the update manifest, publishes SHA-256 files
and SLSA build attestations, then updates the Homebrew tap and release-bound
Context7 documentation.

Full details: CHANGELOG.md
All merged changes: v0.3.0...v0.4.0

Loading

v0.3.0

v0.3.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Jul 22:58
v0.3.0
fcf178e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

  • fix: Data Center-compatible endpoints for conf page history & jira field-options by @isukharev in #11
  • feat: richer, better-tested CSF→Markdown rendering by @isukharev in #12
  • feat: Cloud-CLI parity — agent-friendly output, Jira & Confluence commands, hygiene by @isukharev in #13
  • docs: keep the shipped plugin (skills) in sync with the CLI by @isukharev in #14
  • chore: add GitHub issue-first agent workflow and Codex devcontainer by @isukharev in #22
  • feat: improve Jira analytical snapshots by @isukharev in #24
  • fix: preserve Confluence table semantics by @isukharev in #31
  • docs: add setup and mirror hints by @isukharev in #32
  • feat: add jira structure read-only commands by @isukharev in #33
  • feat: add jira compact exports by @isukharev in #34
  • feat: add jira planning quality report by @isukharev in #35
  • docs: design guarded jira writeback by @isukharev in #36
  • fix: tolerate structure owner variants by @isukharev in #38
  • test: add CLI live smoke target by @isukharev in #40
  • feat: extract Confluence tables by @isukharev in #42
  • feat: add Structure issue export by @isukharev in #49
  • feat: add Jira refs and epic tree by @isukharev in #50
  • feat: add Jira link suggestions by @isukharev in #51
  • feat: add guarded Jira plan apply by @isukharev in #52
  • feat: add Jira compatibility filters by @isukharev in #53
  • feat: add sanitized mirror manifests by @isukharev in #54
  • test: remove synthetic email addresses by @isukharev in #55
  • fix: exit 2 and no panic on unresolvable conf push target by @isukharev in #57
  • docs: fix stale comment syntax and complete exit-code tables by @isukharev in #61
  • fix: match existing issue links by canonical type name for idempotent plan apply by @isukharev in #59
  • fix: reject oversized stdin bodies instead of silently truncating by @isukharev in #70
  • fix: surface the 2000-page space cap in conf pull --space and space tree by @isukharev in #72
  • fix: paginate jira comment list and conf page history; reject corrupt cursors by @isukharev in #74
  • docs: skill reference drift — exit code 8, loud CQL cap by @isukharev in #82
  • feat: jira issue assign — first-class assign/unassign by @isukharev in #83
  • docs: teach agents the body syntax — wiki-markup + CSF authoring references by @isukharev in #84
  • docs: dev-loop recipe — driving a ticket from a coding agent by @isukharev in #85
  • docs: token-hygiene guidance for Jira reads by @isukharev in #87
  • docs: editing-existing-CSF tips — kill the exact-match flail by @isukharev in #90
  • feat: conf edit — whitespace/invisible-tolerant replacement for CSF by @isukharev in #92
  • feat: conf validate — advisory invisible-chars warnings by @isukharev in #94
  • docs: situational technique selection for CSF editing by @isukharev in #96
  • feat: csf element byte offsets + block-segmented markdown render by @isukharev in #102
  • feat: markdown-to-CSF converter for the supported block subset by @isukharev in #103
  • feat: conf apply — block-level three-way merge from .md into .csf by @isukharev in #104
  • docs: md-first editing loop + apply fixes (closes the md edit surface initiative) by @isukharev in #105
  • feat: merge styled-table edits row/cell-wise in conf apply by @isukharev in #107
  • docs: document the headless-agent benchmarking methodology by @isukharev in #110
  • feat(skills): consent-based friction reports by @isukharev in #111
  • build(deps): bump the minor-and-patch group with 2 updates by @dependabot[bot] in #15
  • build(deps): bump actions/setup-go from 5.5.0 to 6.5.0 by @dependabot[bot] in #16
  • feat: add conf page create --from-md by @isukharev in #113
  • feat: add jira --from-md via fail-closed md-to-wiki converter by @isukharev in #115
  • fix: report jira 409 as generic conflict, not version conflict by @isukharev in #116
  • fix: reject stray positional args on flag-only commands (exit 2) by @isukharev in #117
  • docs: pipe short markdown bodies via stdin in the jira skill by @isukharev in #120
  • fix: refuse body-from-stdin on an interactive terminal instead of hanging by @isukharev in #118
  • feat: add jira issue edit for one-command targeted description edits by @isukharev in #122
  • fix: divert colliding page slugs to id-suffixed dirs instead of overwriting by @isukharev in #123
  • fix: make mirror sidecar atomic, loud on corruption, and single-load per pull by @isukharev in #124
  • fix: replace stale md read-view with a stub when a body fails to parse by @isukharev in #125
  • fix: drop redundant per-issue refetch in jira pull and surface snapshot write errors by @isukharev in #126
  • fix: stream attachment downloads to disk with inactivity-bound transfers by @isukharev in #127
  • test: pin insecure-URL ErrUsage exit code through the wire constructors by @isukharev in #128
  • feat: ship workflow recipe skills in the plugin by @isukharev in #130
  • feat: add Codex plugin packaging by @isukharev in #132
  • feat: lock plugin versions to CLI releases + version-skew guard by @isukharev in #135
  • docs: expand AGENTS.md with mirrored project invariants by @isukharev in #136
  • chore: prepare v0.3.0 release by @isukharev in #137

Full Changelog: v0.2.0...v0.3.0

Contributors

isukharev and dependabot
Loading

v0.2.0

v0.2.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 22 Jun 21:03
v0.2.0
b8ba356

What's Changed

  • Security & robustness hardening from full code review by @isukharev in #6
  • feat: add Claude Code plugin (marketplace + atl/setup/confluence/jira skills) by @isukharev in #7
  • test: harden the test suite (fuzzing, contracts, security boundaries, CI coverage) by @isukharev in #8
  • feat: interactive 'atl auth login' setup wizard by @isukharev in #9
  • feat: smoother onboarding & scripting DX (exit-7 config, JSON errors, mirror-root, CQL-cap, Homebrew, docs) by @isukharev in #10

New Contributors

Full Changelog: v0.1.0...v0.2.0

Contributors

isukharev
Loading

v0.1.0

v0.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Jun 18:52
v0.1.0
61c18dc

What's Changed

  • Bump golangci/golangci-lint-action from 8.0.0 to 9.2.1 by @dependabot[bot] in #1
  • Bump github/codeql-action from 3.29.4 to 4.36.2 by @dependabot[bot] in #2
  • Bump actions/attest-build-provenance from 2.4.0 to 4.1.0 by @dependabot[bot] in #3
  • Bump actions/checkout from 4.2.2 to 7.0.0 by @dependabot[bot] in #4

New Contributors

Full Changelog: https://github.com/isukharev/atl/commits/v0.1.0

Contributors

dependabot
Loading