v2.0.0

2.0.0 (2026-05-10)

⚠ BREAKING CHANGES

• v2.0.0 — MQTT bridge + HomeKit bridge (#537)

✨ Features

• add Always On toggle to side settings UI (#307) (b9e046d), closes #305
• biometrics: export tarball + nightly rsync push (sp-20, sp-21) (#532) (91dbaac), closes Post-#499
• biometrics: SQL-bucketed movement chart with separated thresholds (#506) (d89981a)
• homekit: embed hap-nodejs bridge in next-server (#514) (f4d45c8), closes 507/#508
• homekit: Thermostat (single setpoint) + per-side power switch (#527) (4de928c)
• install: relocate node_modules to /persistent off rootfs (#512) (1b4e0a8), closes #510
• mqtt: backend bridge, schema, tRPC router, ADR 0019 (#508) (87872f9)
• settings: MQTT settings tab + Tabs primitive (#507) (e921301)
• status: per-mount storage breakdown, drop duplicate disk row (#504) (ba07fab)
• ticket batch — install symlink, ci title gate, disk widget, export api, cover-buttons scripts, tmpfs RAW migration (#499) (cd385d0), closes #17 #14 #10 #16 #20 #19 #22 #23 #24 #15 #496 #497 #498 #491 #19 #17 #14 #10 #16 #20 #19 #20
• v2.0.0 — MQTT bridge + HomeKit bridge (#537) (28e1d7f), closes #525

🐛 Bug fixes

• build: strip turbopack-hashed external ids from chunks (#513) (17f761e), closes #512
• DB hardening — busy_timeout, schema, retention (#323) (#480) (a494bee), closes #320 #320
• export+archive-push: drop sqlite3/rsync shellouts; use bundled libs/binaries (#534) (7893e56), closes Post-#532 #532 #1 #2
• hardware transport timeouts + retry backoff (#321) (#477) (15bf8db)
• hardware: preserve fresh mutations against stale DAC polls (#496) (a6ac335)
• homekit: serialize per-side hardware writes + cache target across power cycles (#528) (e57c232), closes #527
• install script integrity + systemd hardening (#319) (#482) (dc45e2d)
• install: reclaim regenerable caches; clean WORK_DIR on sp-update CI fallback (#510) (05c5fb1)
• install: three regressions exposed by tonight's homekit deploy (#515) (863e63d), closes #514 #512 #512
• piezo+build: symmetric pump-coupling phantom vitals + propagate build failures (#501) (7da43d0), closes #498 #228 #230
• piezo: suppress phantom presence from asymmetric pump-coupling (#498) (4369a1f), closes #228 #230 #228 #230
• Python sidecar crash resilience + data integrity (#325) (#483) (680d818), closes #230
• scheduler timezone correctness + reliability (#320) (#481) (d96e936)
• schedule: restore AI-powered custom curve (#503) (8f3b6b9), closes #303
• scheduler: serialize per-side jobs + add liveness heartbeat (#495) (df211d4)
• sleep algorithm — phase overlap, HR filter, REM (#327) (#478) (089c1f7)
• sleep-detector: validate RAW frame ts before persisting as wall-clock (#497) (eae2ae7)
• sp-update: keep new sp-* tools on rollback (#526) (b7e3631), closes pre-#494 pre-#494 post-#494 pre-#494 #494
• sp-update: reset WORK_DIR before source-tarball fallback (#509) (6a8c059)
• streaming buffer bounds + WebSocket cleanup (#324) (#479) (325d883)

📝 Documentation

• add iOS codecov badge to README (#530) (9bd9125)
• mqtt: README opt-in section + ADR 0019 implementation notes (#511) (3682203)
• readme: add HomeKit bridge section (#529) (38ca92e)
• readme: drop misleading 'firmware replacement' wording (#539) (cb389c9)
• readme: refresh badge row (#536) (92840c7)

🧪 Tests

• db: cover retention bucket boundaries (#523) (8d07e39)
• hardware: cover deviceStateSync + iptablesCheck (#521) (bac4e3b)
• scheduler: cover jobManager + run-once (#518) (1cda4c9)
• server: cover schedules router (#520) (c54e658)
• services: cover autoOffWatcher edge cases (#522) (d7a9af5)
• services: cover temperatureKeepalive (#524) (2ae2a15)
• streaming: cover bonjourAnnounce + broadcastMutationStatus (#525) (18d0987)
• streaming: cover mqttBridge (#517) (26c7b94)
• streaming: cover piezoStream branches (#519) (08e0b06)

💚 CI

• codecov: switch bundle analysis to OIDC (#538) (fdce534)
• codecov: switch to OIDC auth (#535) (828665b)
• trigger CI on push to dev so Codecov badge updates (#533) (bc4a93d)
• upload coverage to Codecov (#516) (722bd89)

🔧 Chores

• ci: wire Codecov bundle analysis and test analytics (#531) (88fd96e)
• deps: Update @base-ui/react all non-major dependencies (#502) (827a4e1)
• deps: Update actions/cache actions/cache action to v5 (#474) (6b37588)
• deps: Update actions/checkout actions/checkout action to v6 (#411) (7b8669d)
• deps: Update actions/download-artifact GitHub Artifact Actions (major) (#415) (ff24fac)
• deps: Update actions/setup-node actions/setup-node action to v6 (#412) (0952a88)
• deps: Update pnpm/action-setup pnpm/action-setup action to v6 (#430) (97ba5c8)
• renovate: batch non-major updates into one weekly grouped PR (ce9c874), closes #473 #471