v0.3.1

Merge pull request #665: release v0.3.1

chore(release): v0.3.1

v0.3.0

Sponsored by TestMu AI — thank you for keeping wigolo free for everyone.

What's Changed

• docs(readme): quiet-confident rewrite by @KnockOutEZ in #212
• docs(readme): lowercase star-history repo param so the chart renders by @KnockOutEZ in #213
• docs(readme): quickstart command pair + stable star-history link by @KnockOutEZ in #214
• fix(ci): star-chart falls back to repo star count when the Actions token cannot list stargazers by @KnockOutEZ in #215
• fix(cache): timezone-independent expiry — parse zone-less UTC timestamps as UTC (#208) by @josephkehan-prog in #209
• fix(fetch): preserve full-page cache for section requests by @w-up in #229
• feat: add JobPosting named schema to extract tool (#146) by @josephkehan-prog in #192
• fix(daemon): allow token-authenticated remote MCP clients by @Faiyajz in #219
• Harden ssrf fetch time resolve by @spartan8806 in #210
• feat: add crates.io search engine adapter (#145) by @josephkehan-prog in #191
• fix(cli): wire OpenCode MCP configuration by @HsiangNianian in #204
• docs: quote pip extras install examples by @nyxst4ck in #188
• feat(fetch): anti-bot solve ladder + background/windowless browser by @KnockOutEZ in #260
• feat: sponsors section with tracked sponsor links by @KnockOutEZ in #372
• docs: warm up the sponsor tone and trim the funding sidebar by @KnockOutEZ in #374
• docs: say how a company actually pays for a sponsorship by @KnockOutEZ in #384
• docs(readme): add Discord community link and badge by @KnockOutEZ in #627
• docs: add commercial licensing terms (LICENSING.md); AGPL-3.0 unchanged by @KnockOutEZ in #634
• docs(licensing): strip the AGPL explainer, keep the ask by @KnockOutEZ in #636
• feat(site): wigolo.app, logo wall, docs site, comparison pages, analytics and sponsor layout by @KnockOutEZ in #638
• chore: bump fastembed to ^3.0.0 by @generall in #644
• chore(site): link the public Umami dashboard as live traffic by @KnockOutEZ in #641
• feat(serve): print commercial licensing notice on non-loopback bind by @KnockOutEZ in #635
• fix(research): keep decimals intact when splitting citation claims by @vishnujayvel in #278
• fix(config): accept settingsPath keys in config --set by @vishnujayvel in #277
• fix(rest): map StageResult failures on the machine code, not the prose by @divya0795 in #264
• fix(crawl): re-anchor same-origin scope to the seed's post-redirect origin by @divya0795 in #265
• docs(docker): use the published -full image tag by @w-up in #280
• fix(tui): derive required setup fields from schema by @w-up in #279
• fix(agent): emit MCP progress for completed steps by @HsiangNianian in #250
• feat(mcp): annotate tools with MCP capability hints by @BeamNawapat in #251
• fix(search): preserve CJK relevance signals by @w-up in #232
• fix: add missing ARM64 tokenizer dependency for Docker by @wasim-builds in #253
• fix(deps): patch ajv/ws/protobufjs/vite for disclosed CVEs by @aeonframework in #216
• fix(search): address coderabbitai findings on PR #414 by @fuleinist in #521
• Land #402, #642, #235 with review fixes by @KnockOutEZ in #656
• feat(search): add academic search engines (#223) by @LuisBuenrostro in #235
• fix(ssrf): pin the socket to the validated IP (HTTP tier, #207 phase 1) by @spartan8806 in #402
• feat(rerank): add remote/self-hosted rerank provider by @anshulyadav1976 in #642
• fix: batch of small verified bugs (#630, #645, #649, #633, #651, #652, #632, extraction model) by @KnockOutEZ in #658
• fix!: Node 26 support (drop EOL Node 20), readable Node ABI mismatches, doctor error output by @KnockOutEZ in #657
• docs(github): one closing keyword per issue in the PR template by @KnockOutEZ in #659
• chore(release): v0.3.0 by @KnockOutEZ in #660

New Contributors

• @josephkehan-prog made their first contribution in #209
• @w-up made their first contribution in #229
• @Faiyajz made their first contribution in #219
• @spartan8806 made their first contribution in #210
• @HsiangNianian made their first contribution in #204
• @nyxst4ck made their first contribution in #188
• @generall made their first contribution in #644
• @vishnujayvel made their first contribution in #278
• @divya0795 made their first contribution in #264
• @BeamNawapat made their first contribution in #251
• @wasim-builds made their first contribution in #253
• @aeonframework made their first contribution in #216
• @fuleinist made their first contribution in #521
• @LuisBuenrostro made their first contribution in #235
• @anshulyadav1976 made their first contribution in #642

Full Changelog: v0.2.1...v0.3.0

binary-v0.2.1-sd507.1

What's Changed

• docs(readme): quiet-confident rewrite by @KnockOutEZ in #212
• docs(readme): lowercase star-history repo param so the chart renders by @KnockOutEZ in #213
• docs(readme): quickstart command pair + stable star-history link by @KnockOutEZ in #214
• fix(ci): star-chart falls back to repo star count when the Actions token cannot list stargazers by @KnockOutEZ in #215
• fix(cache): timezone-independent expiry — parse zone-less UTC timestamps as UTC (#208) by @josephkehan-prog in #209
• fix(fetch): preserve full-page cache for section requests by @w-up in #229
• feat: add JobPosting named schema to extract tool (#146) by @josephkehan-prog in #192
• fix(daemon): allow token-authenticated remote MCP clients by @Faiyajz in #219
• Harden ssrf fetch time resolve by @spartan8806 in #210
• feat: add crates.io search engine adapter (#145) by @josephkehan-prog in #191
• fix(cli): wire OpenCode MCP configuration by @HsiangNianian in #204
• docs: quote pip extras install examples by @nyxst4ck in #188
• feat(fetch): anti-bot solve ladder + background/windowless browser by @KnockOutEZ in #260
• [slice-P1a] refactor: inject a ToolProvider registry so core stops enumerating Studio by @KnockOutEZ in #270
• [slice-P1b] test: add contracts/studio-mcp conformance suite and de-flake the BotD release gate by @KnockOutEZ in #271
• [slice-P3a] fix(fetch): the cdp-direct rung was unreachable on a default install by @KnockOutEZ in #269
• [slice-P1c] refactor: stop naming Studio inside core by @KnockOutEZ in #273
• [slice-P2] feat(security): nonce the untrusted-content fence and close the unfenced seams by @KnockOutEZ in #281
• [slice-P3C] fix(fetch): a length heuristic was declaring short legitimate pages to be bot walls by @KnockOutEZ in #272
• [slice-r1] ci: quarantine guard for electron imports + ubuntu hang root cause by @KnockOutEZ in #282
• [slice-r2] fix: fence REST content by default; envelope becomes explicit opt-in by @KnockOutEZ in #284
• [slice-p4a] chore: remove ~106MB of install weight and fix the phantom sharp dependency by @KnockOutEZ in #283
• [slice-ssrf] fix(security): re-guard every redirect hop in the browser tier by @KnockOutEZ in #287
• [slice-p4c] fix: boundary-aware brief truncation and find_similar include_web by @KnockOutEZ in #286
• [slice-export] feat(cli): wigolo export — corpus to dated Markdown with a manifest by @KnockOutEZ in #285
• [slice-node22] chore!: raise the Node floor to >=22 and drop Node 20 from CI by @KnockOutEZ in #288
• [slice-p4d] fix: repair truncated markdown to a fixed point, and cover truncated tables by @KnockOutEZ in #289
• [slice-f17] test(skills): make the concurrent-writer test say which failure it saw by @KnockOutEZ in #290
• [slice-asar] fix(cache): load the vector extension correctly from inside an asar archive by @KnockOutEZ in #291
• fix(cache): surface the vector-index platform gap instead of degrading silently (X1 §5) by @KnockOutEZ in #292
• [slice-x1b] fix(studio): resolve the broker's Node runtime explicitly instead of guessing by @KnockOutEZ in #293
• test(budget): pin the statistic and the horizon, then gate on the numbers that survive it by @KnockOutEZ in #294
• S10-b: the tier resolver, doctor/status reporting, and the gates the runner data supports by @KnockOutEZ in #295
• feat(fetch): tier-occupancy counters — D-S10-4's instrument, on the router path by @KnockOutEZ in #296
• feat(warmup): tier-conditional acquisition (S10-d) by @KnockOutEZ in #297
• S10-e: browser deps off the core default path, and G-DIET tightens by @KnockOutEZ in #298
• feat(deps): drop the five platform runtimes onnxruntime-node ships to everyone by @KnockOutEZ in #299
• fix(budget): re-derive G-ACQUIRE over its real measurement window, 800 -> 880 by @KnockOutEZ in #300
• perf(install): drop 86 MiB of browser WASM from the production tree by @KnockOutEZ in #301
• [slice-1/3] fix: locateOrtRoots resolves non-hoisted onnxruntime copies by @KnockOutEZ in #304
• [slice-2/3] fix: engine pool self-throttle, breaker recovery, degraded surfacing by @KnockOutEZ in #305
• [slice-4/6] chore: prune wreq-js to the host native binary by @KnockOutEZ in #307
• [slice-3/3] fix: bound cache tool output with a default byte budget by @KnockOutEZ in #306
• [slice-5/6] fix: bound the onnxruntime resolver walk to our own install tree by @KnockOutEZ in #308
• [slice-6/8] fix: surface when the ML reranker did not run by @KnockOutEZ in #309
• [hygiene H3+H5] ci: guard PRs targeting main and bump checkout/setup-node by @KnockOutEZ in #312
• [spike] chore: first wall-clock and memory profile of wigolo by @KnockOutEZ in #310
• [C1 F7] fix(extraction): collect anchors inside table cells by @KnockOutEZ in #314
• [C1 F3] fix(search): report filter-induced zero results as the filter's doing by @KnockOutEZ in #315
• [C1 F6] fix(fetch): pass markdown and JSON responses through by content-type by @KnockOutEZ in #316
• [hygiene H4] docs(instructions): move param documentation to the input schema by @KnockOutEZ in #313
• [fix] test: stop the suite writing to the real user data dir by @KnockOutEZ in #318
• [C1 F8] feat(fetch): label partial content shells with content_completeness by @KnockOutEZ in #319
• [chore] chore(ratchet): lock tests/ type-check debt at 399 by @KnockOutEZ in #321
• [C1 F5] fix(search): detect common-word brand collisions, not distinctive names by @KnockOutEZ in #320
• docs(cli): the abort is decided by the exit path, not by teardown order by @KnockOutEZ in #325
• fix(search): treat a 2xx anti-bot interstitial as an engine failure by @KnockOutEZ in #323
• [C1] feat(instructions): surface domain_filter + content_completeness, correct the brand-collision rule by @KnockOutEZ in #322
• test: bind mock doubles to the interfaces they stand in for (debt 399 -> 378) by @KnockOutEZ in #327
• feat(fetch): make the installed-browser companion rung reachable (S10-f2) by @KnockOutEZ in #326
• docs: describe all four clauses of the no-display browser-tier ceiling by @KnockOutEZ in #324
• fix(extract): stop the content extractor making undeclared third-party requests by @KnockOutEZ in #331
• feat(diff): resolve old.content_hash instead of advertising it inertly by @KnockOutEZ in #334
• test: fence the suite against live-network dependence by @KnockOutEZ in #330
• test(fence): envelope-wide containment guard for page-derived bytes by @KnockOutEZ in #332
• fix(security): stop shipping table row keys as unfenced page prose by @KnockOutEZ in #335
• docs: correct egress claim in README privacy wording by @KnockOutEZ in #329
• fix(fetch): bound the screenshot response path by @KnockOutEZ in #333
• test: reclaim the throwaway HOME trees the harness leaks every run by @KnockOutEZ in #336
• fix(fetch): judge a bot wall by what it has to read, and stop calling a rate-limit a block by @KnockOutEZ in #338
• fix: evict vectors on cache clear, suppress shell captures in find_similar, and revive the REST stage-failure status map by @KnockOutEZ in #339
• fix(fetch): delete the router overload that promised callers a clean result by @KnockOutEZ in https://github.com/Kn...

v0.2.1

What's Changed

• fix(watch): hash full-body content, not view-truncated markdown by @KnockOutEZ in #186
• feat: honest research/agent degradation + free-key guidance in tool descriptions by @KnockOutEZ in #187
• docs: public-face overhaul — lean README, public docs/, examples/, docs on site by @KnockOutEZ in #185
• fix: fresh-install reliability across platforms + clean-machine CI gate by @KnockOutEZ in #196
• docs(troubleshooting): cover setup/download failure modes across platforms by @KnockOutEZ in #200
• Update Buy Me a Coffee username in FUNDING.yml by @KnockOutEZ in #202
• ci: keep external-API and arm64-embeddings out of required-check failures by @KnockOutEZ in #201
• fix(fetch): unify SPA settle into one bounded shared path + content_completeness signal by @KnockOutEZ in #189
• chore(release): v0.2.1 by @KnockOutEZ in #203

Full Changelog: v0.2.0...v0.2.1

v0.2.0

What's Changed

• fix(mcpb): non-empty Smithery release payload by @KnockOutEZ in #169
• ci: auto-publish to MCP Registry + Smithery on release by @KnockOutEZ in #170
• docs: use ## Tools heading for directory auto-extraction by @KnockOutEZ in #171
• chore: add mcp.json manifest for directory auto-detection by @KnockOutEZ in #173
• chore: add 400x400 logo asset by @KnockOutEZ in #174
• docs: add Available on section by @KnockOutEZ in #175
• security: harden URL guards, plugin install, exec surface by @dandycrypto in #172
• fix(searxng): pip self-upgrade on Windows, gate native bootstrap, accept podman by @YoshiTabletopGamer in #162
• fix(deps): sync package-lock with hono override to unbreak npm ci by @KnockOutEZ in #176
• feat: zero-config onboarding + distribution + shell (P0–P6) — v0.2.0 by @KnockOutEZ in #179

New Contributors

• @dandycrypto made their first contribution in #172
• @YoshiTabletopGamer made their first contribution in #162

Full Changelog: v0.1.43-beta.2...v0.2.0

v0.1.43-beta.2

What's Changed

• chore(release): v0.1.43-beta.2 by @KnockOutEZ in #168

Full Changelog: v0.1.43-beta.1...v0.1.43-beta.2

v0.1.43-beta.1

What's Changed

• chore: Docker image + Smithery config + container publish workflow by @KnockOutEZ in #163
• chore: publish docker image on manual dispatch by @KnockOutEZ in #164
• docs: correct Docker Hub namespace by @KnockOutEZ in #165
• chore: MCP Registry + Glama + Smithery distribution metadata by @KnockOutEZ in #166
• chore(release): v0.1.43-beta.1 by @KnockOutEZ in #167

Full Changelog: v0.1.43-beta.0...v0.1.43-beta.1

v0.1.43-beta.0

What's Changed

• fix(cli): register Claude Code MCP at user scope, not project scope by @KnockOutEZ in #159
• chore(release): v0.1.43-beta.0 by @KnockOutEZ in #160

Full Changelog: v0.1.42-beta.0...v0.1.43-beta.0

v0.1.42-beta.0

What's Changed

• docs(site): any MCP agent works, not just the listed coding agents by @KnockOutEZ in #153
• docs: manual MCP setup for any agent (hand-wire, no built-in installer) by @KnockOutEZ in #154
• docs: add minimal search-engine plugin example (#147) by @gitcommit90 in #150
• fix(cli): make the antigravity agent actually work (marketed but flag-rejected) by @KnockOutEZ in #155
• docs: 'let an AI set it up' section for LLM-guided setup by @KnockOutEZ in #157
• chore(release): v0.1.42-beta.0 by @KnockOutEZ in #158

New Contributors

• @gitcommit90 made their first contribution in #150

Full Changelog: v0.1.41-beta.1...v0.1.42-beta.0

v0.1.41-beta.1

What's Changed

• chore(release): v0.1.41-beta.0 — optional --agents in non-interactive init by @KnockOutEZ in #151
• chore(release): v0.1.41-beta.1 — fix init e2e + showcase both agent & LLM paths by @KnockOutEZ in #152

Full Changelog: v0.1.40-beta.2...v0.1.41-beta.1