v0.22.0

0.22.0 (2026-07-30)

Features

• desktop: built-in MCP stdio bridge for Claude Desktop (d92f60d)

Bug Fixes

• app: block SSRF to private addresses in webhooks and unfurling (efe14b6)
• app: cap decompression output to prevent zip-bomb DoS (248a3e5)
• app: connect Claude Desktop through a bundled MCP stdio bridge (8df7a12)
• app: enforce project access on entity-link routes (30a8d70)
• app: isolate uploaded HTML and SVG from the dashboard origin (6ed1919)
• app: keep trace-resource names intact, rejecting only traversal (8de5b54)
• app: name the Claude Desktop header variable AUTH_HEADER (c95598b)
• app: point E2E fixtures at reporter's new packages/ path (c7f16a8)
• app: point E2E specs at reporter's new packages/ path (38626f7)
• app: prevent zip-slip file write in trace-resource extraction (8ec217d)
• app: scope run-event stream and trace-check to accessible projects (5657cc9)
• auth: close the initial-setup race so only one admin is created (5717808)
• auth: equalize login timing and compare tokens in constant time (58e9931)
• auth: fail-closed secrets, auth rate limiting, and session revocation (030af22)
• auth: set explicit SameSite/HttpOnly/Secure on the session cookie (d7e4503)
• desktop: add a strict content-security-policy to the desktop webview (0677b88)
• desktop: never overwrite an existing file in desktop_save_download (35a1b0c)
• extension: recover recording start when permission prompt closes popup (11febe2)
• extension: start recording on the first permission grant (0b1ef91)
• notifications: redact channel credentials in the list endpoint (e041f95)
• notifications: scope subscriptions to accessible projects (b03dd34)
• notifications: scope the notification stream to accessible projects (9ad3d6d)
• reporter: warn when the dashboard URL is plaintext http to a remote host (eb2ec2c)
• resolve critical, high and medium security audit findings (41e75ba)