Hisar docs 0.1.0

Changes:

• feat(agents): let computer-use agents sign in with Hisar (#120)
• Add the docs site and release it as the docs app (#116)
• Recommendation 42: select objects by ID first and refuse ambiguous names (#110)
• Recommendation 49: keep each source vault or collection apart through import review and storage (#109)
• Recommendation 48: label cached and partial exports instead of presenting them as complete (#108)
• Recommendation 53: keep healthy vaults and items usable when one record cannot be read (#107)
• Recommendation 43: print the Emergency Kit QR as plain text, not a custom-scheme link (#106)
• Recommendation 41: let macOS enforce Touch ID on the biometric wrapping key (#105)
• Recommendation 23: default a new passkey to Personal and make a shared destination an explicit choice (#104)
• Recommendation 21: sign passkey user verification only after a fresh native check (#103)
• fix(browser): require an unlocked Hisar to pair a browser (recommendation 36, F-36) (#93)
• Recommendation 22: move browser save decisions out of the page (#92)
• fix(server): encrypt the dashboard SMTP password at rest (recommendation 61, D-05) (#90)
• Recommendation 54: page every collection by bytes and refuse unbounded growth with a clear status (#102)
• Recommendation 55: bound pending sign-in and rate-limiter state without discarding live exchanges or rate debt (#101)
• Recommendation 10: refuse to start without matching server secrets, and document paired recovery (#89)
• Recommendation 30: stage new Secret Keys durably before sign-up and key replacement commit (#100)
• Recommendation 20: bind account deletion to the plan the user reviewed (#99)
• Recommendation 12: rotate and delete-move large vaults in bounded atomic stages, and mark rotation after removal (#98)
• fix(server): require explicit key generations once a vault was rotated (S-01, S-24) (#97)
• Recommendation 19: cancel a member sign-up link together with the invitation it came from (#96)
• fix(server): require a fresh single-use proof for admin invites (recommendation 15, F-03) (#91)
• Recommendation 4: require the owner's signed intent before delivering a vault key (#94)
• Recommendation 6: bind login and reauthentication to the server's origin (#86)
• Recommendation 9: require exact-commit tests and attest every release file (#87)
• Recommendation 63: state the security guarantees the code actually provides (#88)
• Security review: fixes that need no product decision (71 fixed, 36 partly fixed) (#85)
• docs: rewrite the README for the public repository (#112)
• Let coding agents use Hisar secrets without seeing them (omp, Tern, Claude Code, Codex) (#82)
• feat(android): add the Android app with the iPhone app's features (#79)
• feat: import passkeys through Credential Exchange on the iPhone (#80)
• ci(desktop): sign releases with Developer ID and notarize the app and the DMG (#76)
• ci(release): build, prerelease and publish after the skipped tests (#78)
• ci(release): run the tests only when a release asks for it (#77)
• Extension experience (#75)
• ci(release): one Release run per app, with automatic versions and an approved publish (#74)
• Linux support (#69)
• feat(admin): read and export the audit log (#60)
• feat(admin): manage accounts from the admin dashboard (A2) (#61)
• feat(desktop): package the Linux app as .deb and .rpm (#65)
• feat(raycast): add the Raycast extension and per-app launcher approvals (#62)
• feat(admin): manage sign-up invites from the dashboard (#59)
• fix(admin): A1 follow-ups (#56)
• feat(admin): set up a fresh server from /admin/setup (#55)
• feat(admin): show server health, usage and the instance checks on Overview (#54)
• feat(admin): edit instance settings from the dashboard (#53)
• Name the GitHub repository in one place, core/project, and move it to tosunlab/hisar (#58)
• serve the admin dashboard and sign admins in
• Import LastPass CSV exports as their own format, with typed notes (#49)
• SSH approvals: remember until Hisar locks, and the iPhone card keeps the default (#35)
• Fix/sign in after sign out (#48)
• Feature/item icons (#46)
• Organizations, teams and organization vaults (server, core, CLI) (#40)
• Feature/context menus (#42)
• Feature/databases (#41)
• Feature/servers (#39)
• Feature/software licenses (#38)
• Feature/addresses (#36)
• Organize items with tags (#31)
• Feature/api credentials (#33)
• Mark items as favorites (#30)
• Point releases, images and the update feed at tosunlab/hisarapp-core (#29)
• Feature/identities (#26)
• Feature/credit cards (#25)
• Feature/secure notes (#20)
• Refactor/go structure (#8)
• Rename, delete and leave vaults; data export and .env import (#2)
• Change master password, replace Secret Key and delete account (#1)
• Read desktop updates from GitHub Releases (#7)
• Move CI and releases from GitLab CI to GitHub Actions (#4)
• Invite page and minimum supported app version
• Copy and onboarding: developer-first descriptions, sign-in, strength meter, Touch ID offer, Help, clearer invites
• Approvals quick wins: remembered commit signing, system-idle auto-lock, iPhone remember choice, Git key setup
• Accepted shares tell both sides; privacy policy and Terms for the hosted service
• Themes: appearance and colour on Mac and iPhone, from one token file
• Place the compact approval card inside the active display (Wails reported pixels, not points)
• Vault sharing on iPhone: share, members, invitations banner
• Approval dialogs show the real app: name, icon, process chain and signature
• Share links: end-to-end encrypted links for anyone, with expiry and view limits
• Mac Settings with a sidebar and search
• hisar mcp: coding agents use secrets without seeing them
• Release tags per app, published by a manual job; custom builds never published
• Native iPhone redesign for iOS 26: Liquid Glass tabs and phone settings
• Approvals never get stuck: per-request deadlines, phone first, disconnects cancel
• Keep Hisar running: open at login, menu bar, CLI starts the app
• hisar run and hisar read with secret references
• Account recovery only through the Emergency Kit
• Show the Mac's waiting requests on the iPhone after opening the app
• Person-to-person sharing by email, without a user list
• Approve the Mac's requests from your iPhone
• SSH approval redesign: right app, purpose, unlock from the dialog, forwarded warnings
• Create vaults, share them and invite people on iPhone
• Let the auto-lock delay be chosen in Settings
• Bundle the hisar CLI with the desktop app and run it through the app
• Passkey PRF, signal API and client capabilities
• Automatic desktop updates through the Hisar server
• Passkeys on iPhone through AutoFill
• Move CI to GitLab and deploy behind nginx from our registry
• One-time codes in the browser extension, iPhone and import (#30)
• Passkeys in the browser extension, signed by the desktop app (#32)
• … and 27 earlier changes

The docs site image ghcr.io/tosunlab/hisar-docs:0.1.0 for linux/amd64 and linux/arm64: the static Docusaurus build served by nginx on port 8080, for docs.tryhisar.com.

Before deployment, download release-evidence.json and set commit to the full independently reviewed source commit SHA.
Verify the evidence and then its immutable image index digest with a recent GitHub CLI:

gh attestation verify release-evidence.json --repo tosunlab/hisar \
  --signer-workflow tosunlab/hisar/.github/workflows/release.yml \
  --signer-digest "$commit" --source-digest "$commit" --deny-self-hosted-runners
digest=$(jq -r .image.digest release-evidence.json)
gh attestation verify "oci://ghcr.io/tosunlab/hisar-docs@$digest" --repo tosunlab/hisar \
  --signer-workflow tosunlab/hisar/.github/workflows/release-docs.yml \
  --signer-digest "$commit" --source-digest "$commit" --deny-self-hosted-runners

Deploy ghcr.io/tosunlab/hisar-docs@$digest after verification, not a mutable tag.