Skip to content

v0.8.0

Choose a tag to compare

View all tags
@pat-lewczuk pat-lewczuk released this 19 Jul 00:03
· 594 commits to main since this release
0.8.0
dc8fe55
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Cezar 0.8.0

Released 2026-07-19 · npm: @open-mercato/cezar · alias: cezar-cli

npx cezar-cli@latest           # cockpit at http://localhost:4321
npm install -g cezar-cli       # or install the command globally

The first big release since 0.1.5 — the npm package moved to the @open-mercato
org and now ships an installable build from CI on every green run, alongside a
large batch of cockpit, workflow, GitHub, security, and server-install work.

⚠️ Breaking changes & migration

  • npm package moved to the @open-mercato org. The implementation package is
    now @open-mercato/cezar (was @pat-lewczuk/cezar); the cezar-cli alias is
    unchanged, so npx cezar-cli / npm i -g cezar-cli keep working. If you
    depended on the old scoped name directly, switch to @open-mercato/cezar. (#501)
  • Task auto-naming changes run identifiers. Runs now get short LLM-generated
    titles with live refresh instead of the previous naming; anything that parsed the
    old task-name format needs updating. (#479)
  • Several behaviors are now opt-in / off by default. Review these if you relied
    on the old defaults:
    • Approval gate is opt-in. (#439)
    • Global follow-up inbox is off unless CEZ_FOLLOWUPS is set. (#476)
    • Periodic autosave commits are off unless CEZ_AUTOSAVE is set. (#478)
    • The new optional review gate ships default-off (env + Settings toggle,
      skipped in autonomous runs). (#494)

✨ Highlights

  • npm preview publishing. Every green CI run publishes an installable snapshot:
    PRs under pr-<N>, develop under @develop. Stable latest stays owner-driven
    and manual via the Release workflow. Publishes carry provenance attestation. (#482, #503, #506)
  • Install as a command. install-as-command plus the org move make
    npx cezar-cli / global install the standard entry points. (#501)
  • Worktree retention & management — isolated per-run worktrees with lifecycle
    controls, so parallel runs no longer collide. (#486)
  • Richer GitHub tab — comment counts and full comment threads rendered with
    markdown and images, per-PR CI check status in the PR list, and the tab remembers
    your last selection. (#505, #454, #452)
  • Host multiple cockpits per server, keyed by domain, for shared boxes. (#513)

🚀 Features

  • Task auto-naming — short LLM titles, PR/issue refs, live refresh. (#479)
  • Optional review gate — default-off env + Settings toggle + autonomous skip. (#494)
  • "Monitoring" run activity — stops false Needs attention while the agent is still working. (#497)
  • In-band CEZ:PR / CEZ:ISSUE / CEZ:TITLE task-reference markers. (#507)
  • Workflow auto-chain creator + usage-sorted skill palette. (#465)
  • Follow-up skill picker parity — frequency sort, remembered pick, drafts, ⌘/Ctrl+Enter. (#461)
  • Reusable prompt templates for GitHub hand-over and Inbox. (#463)
  • Follow-up generation toggle on tasks. (#444)
  • Expose pasted screenshots to the agent as real files on disk. (#458)
  • Preview images in the diff pane and open them in the OS default app. (#459)
  • open-in — per-target icons, WSL support, wider JetBrains coverage. (#469)
  • Show the session's coding agent and model next to token usage. (#450)
  • Per-PR CI check status in the GitHub PR list, with the CI badge linking to the run. (#454, #446)
  • Promote open-mercato/skills via a CLI banner + dismiss-once in-app banner. (#451)

🐛 Fixes

  • Reopen a silently-dead per-run SSE stream via a liveness watchdog. (#436)
  • Serialize repository-root runs so they don't clobber each other. (#441)
  • Guard chained skill steps against a premature CEZ:DONE. (#460)
  • Include skill context in task titles. (#442)
  • Render the plan across all three backends. (#443)
  • Adopt the actually-created PR URL rather than one referenced earlier. (#496)
  • Keep worktree diffs visible on the Changes tab. (#492)
  • Rank skill search by match quality. (#487)
  • Acknowledge non-actionable follow-ups in the inbox. (#440)
  • open-in — clearer resume labeling + legacy-runner fix for the CLI handoff menu. (#455)
  • Keyboard-safe popover menus and scroll-to-top on mobile navigation. (#504)
  • Don't crash on headless hosts when the browser opener is missing. (#509)
  • Poll health so the top-bar branch chip catches an external checkout. (#447)
  • Stop truncating the task name mid-word in the delete-confirm button. (#445)
  • Stamp the repo name into bookmarklet labels. (#449)
  • Residual polish from earlier issues. (#462)

🔒 Security

  • Least-privilege agent env + redact secrets from NDJSON output. (#456)
  • Defense-in-depth hardening bundle. (#457)
  • Harden team-skill git fetch against injection & unpinned refs. (#453)
  • Tighten server request-validation bounds. (#464)

📚 Docs

  • Document the agent protocol and record it as a protected surface. (#491)
  • Correct misleading "default-deny" tool-access claims. (#448)
  • Specs for permission modes, the review gate, comment threads, and npm preview publishing. (#477, #493, #500, #503)

🙌 Contributors

Thanks to everyone who shipped this release:

🌟 First-time contributors

Paired throughout with Claude Code (Opus 4.8 / 4.6 · Fable 5).

Full history: everything merged into main between v0.1.5 and this release.

Assets 2
Loading