v0.25.1

What's Changed

• fix: freeze activity snapshots on factory_capacity by @nocoo in #121

Full Changelog: v0.25.0...v0.25.1

v0.25.0

Full Changelog: v0.24.5...v0.25.0

v0.24.5

What's Changed

• fix: api data correctness (v0.15.13) by @nocoo in #84
• fix: refresh reliability and ci regressions (v0.15.14) by @nocoo in #85
• fix: align api contracts and speed up sources (0.15.15) by @nocoo in #86
• feat: multi-time schedules, daily contributions, pr state (0.16.0) by @nocoo in #87
• fix: dedupe aggregate dependency summaries (0.16.1) by @nocoo in #88
• feat: content-only source versions (0.17.0) by @nocoo in #89
• fix: report read cap, factory freshness, limited deps (0.17.1) by @nocoo in #90
• v0.17.2: truthful security coverage and source latency by @nocoo in #91
• v0.17.3: trim giraffe-api skill to current api by @nocoo in #96
• v0.18.0: star control plane and schedule reliability by @nocoo in #98
• chore(deps): bump @nocoo/basalt to 3.2.1 by @nocoo in #97
• chore: repin base-ci and Node 22.23.4 security docs by @nocoo in #99
• v0.19.0: current-run activity and repository discovery by @nocoo in #100
• fix: publish activity and correct v0.19.1 regressions by @nocoo in #101
• feat: agent control plane (v0.20.0) by @nocoo in #102
• fix: activity evidence for retained repo versions (0.20.1) by @nocoo in #103
• feat: v0.21.0 api contract (partial totals, private headers) by @nocoo in #104
• fix: v0.21.1 factory retention, eta, docs by @nocoo in #105
• perf: v0.22.0 batched factory execution by @nocoo in #106
• fix: v0.22.1 retained flags, freshness, docs by @nocoo in #107
• feat: v0.23.0 factory recovery and repo pool by @nocoo in #108
• fix: v0.23.1 terminal eta, unicode and deps by @nocoo in #110
• chore(deps): minor/patch dependency updates (v0.23.2) by @nocoo in #111
• feat: v0.24.0 landed commits, activity speed, eta by @nocoo in #112
• fix: v0.24.1 factory window labels match published observation by @nocoo in #113
• fix: v0.24.2 retain published factory day history outside quick window by @nocoo in #114
• fix: activity factory_capacity keeps run running (v0.24.3) by @nocoo in #115
• fix: refuse hollow activity publication (v0.24.4) by @nocoo in #118
• fix(db): retract hollow activity head (v0.24.5) by @nocoo in #119

Full Changelog: v0.15.12...v0.24.5

v0.15.12

Changed

• Upgrade @nocoo/basalt from 3.1.0 to 3.2.0 across both workspaces and verify the updated page-heading typography in browser tests.
• Upgrade lucide-react from 1.58.0 to 1.59.0, react-router from 8.4.0 to 8.5.0, and oxc-parser from 0.154.0 to 0.155.0 (#72, #79, #78).
• Upgrade wrangler from 4.151.1 to 4.151.2 and @cloudflare/workers-types from 5.20261016.1 to 5.20261019.1, including the matching Wrangler runtime dependencies (#71, #80).

Fixed

• Remove the redundant application-owned table row border so Basalt renders one separator between adjacent rows, with browser regression coverage.

v0.15.0

Added

• Persistent local dependency-repair cron with timezone-aware schedules, missed-run coalescing, durable candidate cursors and restart recovery
• Dedicated Sol issue workers and one independent Astra reviewer with exact-code signoff and at most 20 repair/review rounds
• Isolated task-owned Git workspaces, baseline check/hook enforcement, Git metadata integrity seals, durable commit-intent recovery and no-force dedicated-branch publication
• Live repair workbench with cron/heartbeat status, review progress, safe diagnostics, exact commit proofs, bounded events and pause-only web controls

Safety and Scope

• Repairs initially support explicitly profiled root npm/Bun manifests and dependency-upgrade issues only; all other work is deferred or blocked
• Installs, checks and hooks require a trusted isolated runner; no unsandboxed fallback, automatic merge, default-branch push or release
• Actual target-repository repair execution is not established by fixture tests: a working trusted Docker image/cache and per-repository grants are required
• Model calls, review rounds, diff size, output and web payloads are bounded; telemetry failures do not disable watchdogs or misclassify completed local work

v0.14.0

Added

• Local packages/agent CLI with private user-level model configuration and browser-consent PKCE login through @nocoo/base-cli
• One Pi Durable Harness, one Astra planner, one shared Jev decision client, and persistent Sol specialists for repository/global Issues, PRs, CI and CD
• Authenticated read/write report, job and heartbeat publication with stable IDs, revision conflicts, restart recovery and bounded remote history
• Basalt analysis workbench with four domains, repository/portfolio scope, evidence versions and age, Jev distributions, runner presence and queued requests
• Browser API access to Agent resources under existing Access and same-origin checks

Changed

• Read GitHub facts from the existing Giraffe collector instead of duplicating collection in the Agent
• Separate current source time, report-generation time and model judgments; stale or incomplete evidence remains unknown
• Bound each model run to eight responses and retain current workflow outcomes ahead of historical failure samples
• Include the Node Agent workspace in root typecheck, lint, build and coverage gates

Removed

• Cloud AI model settings, provider execution, assessment endpoints and old report consumers; no compatibility fallback remains
• Unused cloud AI dependencies; legacy D1 tables remain intact and frozen collection skips only retired AI stages

Verification Boundary

• Automated acceptance uses isolated SQLite/Worker/GitHub fixtures; the real model pipeline was exercised visibly using synthetic evidence
• Production browser consent and authenticated Agent publication require the owner to complete giraffe login; model success alone does not establish that production acceptance

v0.13.0

Added

• Account-bound, scoped and expiring machine API tokens with hash-only storage, web management and immediate revocation
• Explicit browser consent and one-time S256 PKCE authorization for local CLI consumers
• Read-only /api/v1 saved GitHub observations with source versions, timestamps, coverage and publication references
• Revisioned CRUD for Agent records, reports and jobs, plus explicit local settings and durable refresh management

Changed

• Move the Worker and React/Basalt application into apps/web in a Bun monorepo; reserve packages/agent without implementing the Agent
• Keep root version, migrations, operational commands and existing production D1/queue bindings authoritative
• Retain existing cloud AI until the separately developed local replacement is verified

Operations

• Add token, authorization-code and Agent resource tables through additive migrations; existing observations and immutable publications remain untouched
• Limit machine ingress to giraffe.hexly.ai/api/v1/* with Worker bearer checks; dashboard and authorization management remain Access protected

v0.12.3

Changed

• Consolidate page, chart and AI source timestamps in one top-right data freshness control
• Show the most recent update as a relative age; expand to inspect precise local source times, older data and missing coverage
• Group collection times from the same finished refresh by its end without modifying stored provenance or statistics windows
• Clear registered sources on navigation and repository-scope changes; retain business event dates and execution diagnostics

Operations

• Add an authenticated read-only refresh-time metadata endpoint with bounded account-scoped history
• No database migration, new binding or refresh scheduling change is required

v0.12.2

Fixed

• Place repository scope, compact search/sort controls and page actions beside business-page titles instead of above them
• Share the subtitle line with primary-data timestamps, wrapping long ranges naturally on narrow screens
• Keep repository scope beside the title on mobile and wrap search/sort controls only when space is limited
• Move secondary Insights source timestamps into an accessible on-demand popover

Operations

• Preserve filtering, data freshness semantics and saved snapshots; no database migration or new Cloudflare binding is required
• Verify compact headers across all eight business pages, desktop/mobile widths, dark themes and mixed timestamp ranges

v0.12.1

Fixed

• Remove the 256 MB account storage quota from refresh creation, execution and AI assessment; storage measurements no longer block collection
• Preserve notification write-through results when background polling resumes after marking a thread read
• Keep bounded reference-safe retention running even if scheduling or queue dispatch fails
• Preserve per-record, per-resource, request and repository-count limits, lease fencing and prior-good-data protection

Changed

• Remove obsolete write-delta accounting and quota-limit UI/API fields while retaining storage telemetry
• Resolve dependency update issues #2–#21: update React and types to 19.3.0, React Router to 8.4.0, Vite to 8.3.1, Vitest/coverage to 5.0.3, Playwright to 1.63.0 and Wrangler to 4.145.0
• Update Biome, Workers types, Bun types, the React Vite plugin, Happy DOM, Oxc, Hono and Lucide to the reported target versions
• Remove redundant Sharp and Undici overrides; resolved Undici 7.29.1 remains fixed for the reported advisories
• Raise the documented Node.js minimum to 22.22 for the upgraded router

Operations

• No database migration, history deletion, retention-window change or new Cloudflare binding is required
• Automatic cleanup continues to protect current references, recent publications and the latest 20 runs