Companion 0.19.1

Install with npx @moxxy/companion@0.19.1.

This release was created only after CI passed and the exact version was available on npm. Assets include the npm package tarball, a repository SPDX SBOM generated at release time, and SHA-256 checksums.

What's Changed

Other changes

• fix(runners): keep GitHub credentials off plain-http runner endpoints by @WebEferen in #165
• release: bump versions with unreleased changes by @github-actions[bot] in #166

Full Changelog: v0.19.0...v0.19.1

Companion 0.19.0

Install with npx @moxxy/companion@0.19.0.

This release was created only after CI passed and the exact version was available on npm. Assets include the npm package tarball, a repository SPDX SBOM generated at release time, and SHA-256 checksums.

What's Changed

Other changes

• feat(desk): refine CLI launch and Terminal scope by @WebEferen in #163
• release: bump versions with unreleased changes by @github-actions[bot] in #164

Full Changelog: v0.18.0...v0.19.0

Companion 0.18.0

Install with npx @moxxy/companion@0.18.0.

This release was created only after CI passed and the exact version was available on npm. Assets include the npm package tarball, a repository SPDX SBOM generated at release time, and SHA-256 checksums.

What's Changed

Other changes

• Document Companion Desk in README by @WebEferen in #160
• Add workspace Terminal to Companion Desk by @WebEferen in #161
• release: bump versions with unreleased changes by @github-actions[bot] in #162

Full Changelog: v0.17.3...v0.18.0

Companion 0.17.3

Install with npx @moxxy/companion@0.17.3.

This release was created only after CI passed and the exact version was available on npm. Assets include the npm package tarball, a repository SPDX SBOM generated at release time, and SHA-256 checksums.

What's Changed

Other changes

• Build the agent-first Companion Desk by @WebEferen in #158
• release: bump versions with unreleased changes by @github-actions[bot] in #159

Full Changelog: v0.17.2...v0.17.3

Companion 0.17.2

Install with npx @moxxy/companion@0.17.2.

This release was created only after CI passed and the exact version was available on npm. Assets include the npm package tarball, a repository SPDX SBOM generated at release time, and SHA-256 checksums.

What's Changed

Other changes

• Add agent-first Companion Desk by @WebEferen in #156
• release: bump versions with unreleased changes by @github-actions[bot] in #157

Full Changelog: v0.17.1...v0.17.2

Companion 0.17.1

Install with npx @moxxy/companion@0.17.1.

This release was created only after CI passed and the exact version was available on npm. Assets include the npm package tarball, a repository SPDX SBOM generated at release time, and SHA-256 checksums.

What's Changed

Dependencies

• chore(deps-dev): bump tsx from 4.23.11 to 4.23.12 in the development-minor-and-patch group by @dependabot[bot] in #152
• chore(deps): bump the production-minor-and-patch group with 6 updates by @dependabot[bot] in #151
• chore(deps): bump the moxxy-toolchain group with 2 updates by @dependabot[bot] in #150
• chore(deps): bump the github-actions group with 4 updates by @dependabot[bot] in #153

Other changes

• fix: upgrade remediated Debian packages in images by @WebEferen in #154
• release: bump versions with unreleased changes by @github-actions[bot] in #155

Full Changelog: v0.17.0...v0.17.1

Companion 0.17.0

Install with npx @moxxy/companion@0.17.0.

This release was created only after CI passed and the exact version was available on npm. Assets include the npm package tarball, a repository SPDX SBOM generated at release time, and SHA-256 checksums.

What's Changed

Other changes

• feat(cli): rotate the secret encryption key by @WebEferen in #143
• feat: add configurable model router and stable overview loading by @WebEferen in #149
• feat(core): budget unauthenticated API requests per address by @WebEferen in #144
• fix(code): scope repository signals to who may see the repository by @WebEferen in #145
• feat(core): commit each audit entry to the one before it by @WebEferen in #146
• docs: align product readiness and first-run guidance by @WebEferen in #148
• release: bump versions with unreleased changes by @github-actions[bot] in #147

Full Changelog: v0.16.0...v0.17.0

Companion 0.16.0

Install with npx @moxxy/companion@0.16.0.

This release was created only after CI passed and the exact version was available on npm. Assets include the npm package tarball, a repository SPDX SBOM generated at release time, and SHA-256 checksums.

What's Changed

Other changes

• release: bump versions with unreleased changes by @github-actions[bot] in #125
• refactor: bus-driven workspace cleanup plus review follow-ups by @WebEferen in #126
• fix: GHES-aware CLI identity and moxxy-home scheduled backups by @WebEferen in #139
• fix: resilience long tail from the launch reviews by @WebEferen in #140
• Fix Coolify deployments with root-owned volumes by @WebEferen in #141
• fix: harden session and identity boundaries by @WebEferen in #142
• release: bump versions with unreleased changes by @github-actions[bot] in #128

Full Changelog: v0.15.0...v0.16.0

Companion 0.15.0

Install with npx @moxxy/companion@0.15.0.

This release was created only after CI passed and the exact version was available on npm. Assets include the npm package tarball, a repository SPDX SBOM generated at release time, and SHA-256 checksums.

What's Changed

Other changes

• docs: make every public doc tell the truth about the built system by @WebEferen in #111
• feat: real on-ramp for third-party module authors by @WebEferen in #113
• feat: UI polish pass and the runtime settings editor by @WebEferen in #117
• fix: workflow-module correctness sweep (code, automations, plan, refinement, playground) by @WebEferen in #118
• fix: platform-module correctness sweep (core, admin, oidc, jira, notify, integrations) by @WebEferen in #116
• perf: bounded retention, SQL-scoped paging and refetch-storm fixes by @WebEferen in #114
• feat: upgrade safety and image distribution by @WebEferen in #119
• feat: trust-proxy addressing, structured logs, metrics and readiness by @WebEferen in #121
• feat: email and Teams channels plus small security debts by @WebEferen in #120
• feat: totp mfa, sso-only mode and session administration by @WebEferen in #122
• feat: audit records answer who, from where, with what by @WebEferen in #123
• test: install-flow smoke, browser shell smoke and workspace access-control coverage by @WebEferen in #112
• docs: landing screenshot, regenerated og image, short-secret refusal by @WebEferen in #124
• release: bump versions with unreleased changes by @github-actions[bot] in #115

Full Changelog: v0.14.0...v0.15.0

Companion 0.14.0

Install with npx @moxxy/companion@0.14.0.

This release was created only after CI passed and the exact version was available on npm. Assets include the npm package tarball, a repository SPDX SBOM generated at release time, and SHA-256 checksums.

What's Changed

Other changes

• docs: fix quickstart and first-run instructions by @WebEferen in #102
• chore: add license and discovery metadata to framework packages by @WebEferen in #103
• chore: demote cursor-bugbot to an opt-in full-profile module by @WebEferen in #104
• fix: make the default slim build coherent without planner by @WebEferen in #107
• feat: carry the first-run trail through to the first agent run by @WebEferen in #109
• docs: unify product naming across public surfaces by @WebEferen in #105
• fix: close lane ownership, board worker scoping and workspace delete holes by @WebEferen in #110
• chore: scrub personal environment traces from fixtures and specs by @WebEferen in #106
• release: bump versions with unreleased changes by @github-actions[bot] in #108

Full Changelog: v0.13.1...v0.14.0