v2.3.2

2.3.2 (2026-08-03)

Bug Fixes

• prs: PR Queue crashed on closed PRs + showed merged/closed (#23) (64d68ae), closes #26

v2.3.1

2.3.1 (2026-08-02)

Bug Fixes

• ci: call Nitpick via gh-workflows, not the private flow repo (dd73cdf)

v2.3.0

2.3.0 (2026-07-23)

Features

• cli: devtrack pr-sync + widen PR githubId to BigInt (28b8154)

v2.2.1

2.2.1 (2026-07-20)

Bug Fixes

• timeline: server-side filtering + exclude tool_use by default (ef4b5b7)

v2.2.0

2.2.0 (2026-07-20)

Features

• cli: devtrack hooks install --global for box-wide git tracking (43bd5a5)
• events: record turn_end for the Stop hook; wire real session_end (99a5bb1)

v2.1.0

2.1.0 (2026-07-13)

Bug Fixes

• cli: mask secret values in config list output (d2b4d36), closes #19
• cli: normalize SSH git remotes to https in identity resolution (0300d71)
• cli: normalize SSH repo_url from manifests at read time (ecf236d)

Features

• cli: include access cred keys in config list output (f155c56)
• cli: resolve Cloudflare Access creds from ~/.devtrack/config.yaml (1d042e9)
• cli: summarize tool_use event titles for dashboard display (942bfb7)
• web: add SSE stream probe endpoint for live updates (d5a0256)

v2.0.1

2.0.1 (2026-07-12)

Bug Fixes

• plugin: address code review findings on bump script and manifest (55197d4)
• plugin: marketplace.json in the real marketplace schema (8eafb56)

v2.0.0

2.0.0 (2026-07-11)

• feat!: make the event path read-only; add devtrack init for manifest provisioning (ab0e2c9), closes #16

Bug Fixes

• cli: corrupt devtrack.yaml no longer silently drops events (e703402)
• cli: escape branch names in hook metadata and write valid Claude hook shape (afa264b), closes #13 #14 #14
• git hooks emit valid event types and upgrade in place (bb9def4)
• handle P2002 on project auto-create in events find-or-create (e6687c1)
• harden redact value matcher against leak/corruption cases (7eff596)
• honor explicit --project-yaml in sendEvent (a5927f2)
• mirror headerRe's quote/bracket key tolerance onto assignRe (44ef41c)
• recognize ::= as a header separator, exclude :: scope resolution (e3ac41e)
• redact quoted values in Go-style KEY := VALUE assignments (3520790)
• test: allow 3 minutes for the Go CLI build hook on cold CI runners (49051fe)
• test: pass a Request to the openapi.json GET in the parity test (2d46b67)
• tolerate whitespace before the bracket in assignRe (5b9c4f9)

Features

• add tool_use, checkout, merge EventType values end-to-end (0601d82)
• client project-identity resolution chain (devtrack.yaml, git remote, folder name) (d06281c)
• client-side secret redaction for outgoing event text (fbac16f)
• events API finds-or-creates the project from supplied identity (2d011f1)
• record tool_use events from the PostToolUse hook, not phantom commits (6aa2ff4)
• silent devtrack.yaml bootstrap on first event send (c90c752)
• single enforcement point for outgoing events (sendEvent) (8f008bb)

BREAKING CHANGES

• devtrack event no longer creates devtrack.yaml;
  run devtrack init to pin a repo's identity. The DEVTRACK_NO_BOOTSTRAP
  environment variable is removed.

v1.3.0

1.3.0 (2026-07-08)

Features

• auth: Cloudflare Access native auth (browser JWT + CLI service token) (d5b4277)

v1.2.1

1.2.1 (2026-07-08)

Bug Fixes

• csp: allow 'unsafe-inline' scripts in production until nonce plumbing lands (84d4540)