v0.2.0

0.2.0 (2026-06-03)

Features

• auth foundation — password login, WS auth, reverse-proxy trust, state.json (v0.2) (b9f40eb)
• CLAUDE.md viewer/editor (v0.2, spec §5) (4bb7a6e)
• clone: async clone with live progress over WebSocket (backend, PR A) (#52) (082b804)
• cost / token tracking from session transcripts (v0.3) (842e6dc)
• docker: multi-arch GHCR image + trivy-image scan (#14) (113415d)
• doctor: warn when a source checkout is behind upstream (#34) (89117ca)
• ghost-environment reaper dashboard UI, opt-in (v0.3) (15d50e5)
• ghost-environment reaper, dry-run default (v0.3, spec §11) (5a5fadd)
• lint: add pydocstyle (D) docstring-coverage gate + backfill (#42) (f627039)
• packaging/ops CLIs — doctor/backup/restore/migrate/install-service + PyInstaller (v0.2) (b13f5e9)
• per-project cost badge on the dashboard (v0.3) (7d67f94)
• project create + clone (v0.2, spec §5 + §11 clone+trust chain) (599c57b)
• project discovery + dashboard scaffolding (v0.1 feature 1) (54591cc)
• real logout revocation via server-held session epoch (v0.3) (d0c37a5)
• recap prior conversation into a restarted bridge (opt-in) (#39) (1a723f5)
• resume stopped bridges + surface bridge startup errors (#36) (2f93996)
• resume: PTY true-resume mode (backend slice 1) (#58) (7673d68)
• runner: auto-enable remote control so bridges skip the y/n prompt (#29) (4698b7f)
• runner: graceful stop on Windows via CTRL_BREAK (#13) (6496f14)
• SessionRunner — spawn/stop bridges + agents --json cross-check (v0.1 features 2-4) (71a5965)
• spawn-mode + permission-mode pickers, footgun-gated (v0.2) (02c1da8)
• ui: connection-lost banner + inline action errors (no silent failures) (#56) (0989f3e)
• ui: insert new project cards reactively, no full-page reload (#55) (cbc8398)
• ui: live clone progress bar + visible errors (async clone, PR B) (#53) (a9c6e13)
• ui: rebuild dashboard + login on Tabler (dark/light theme) (#40) (52afe5b)
• ui: true-resume badge + recover keeper on pty rediscovery (#76) (9886ca8)
• ui: vendor Iconoir icons on dashboard actions + theme toggle (#57) (8640c8d)
• URL display + QR code for sessions (v0.1 feature 5) (d1323c4)
• WebSocket bridge log tail, redacted (v0.1 feature 6) (5151fea)

Bug Fixes

• 4 UI bugs found in live testing (ce99b3e)
• address multi-agent review findings (type/config hardening + tests) (39c6a43)
• auth: floor session-epoch bump against in-memory value (can't regress) (#25) (04a8549)
• close two deferred review items (clean backup error + insecure-cookie warning) (fd8bcd6)
• ops,auth,environments: atomic restore + IPv6 origin + bounded pagination (#30) (1a6074b)
• redact: mask bare UUIDs (organization_uuid, bridgeId) in the WS log stream (#51) (6c00397)
• renovate: match vendored versions.txt via glob, not path-anchored regex (#48) (8410704)
• renovate: stop ignoring src/clauster/static/vendor via default ignorePaths (#49) (87638ab)
• runner,provisioning: resolve exec paths + harden spawn/stop (audit) (#17) (9aaee4c)
• runner: keep a slow-but-alive bridge STARTING, not a false ERROR (#27) (c72fefe)
• runner: require env registration before reporting a bridge RUNNING (#28) (7c3fad9)
• runner: tolerate unparseable pointer procStart during rediscover (#23) (5a21f92)
• security: trust-gate CLAUDE.md, harden CSRF/throttle/secret/backup (audit) (#18) (2fc01a1)
• ui: relabel "Resume" → "Restart" (it doesn't restore conversation) (#38) (84cff35)
• usage: tolerate invalid UTF-8 bytes when parsing transcripts (#22) (565a333)

Build System & Dependencies

• sync uv.lock with pyproject (drop logfire tree, add ruff + pyright) (48abfcd)