Releases: xiaogezi/taskcenter
Releases · xiaogezi/taskcenter
Release list
TaskCenter v0.1.5
Reliability hardening
- Automatically recovers the default local control service once when a Hook request finds it offline.
- Keeps arbitrary writes fail-closed and exposes only exact project-root /bin/bash start/status break-glass commands.
- Starts the managed service in a detached process group so it survives the launching shell session.
Validation: 110 tests passed, lint and diff checks passed, npm audit reports 0 vulnerabilities.
TaskCenter v0.1.4
Dependency security
- Removes the vulnerable
image-sizedevelopment dependency by pinningvinextto the last compatible release before it was introduced. - Overrides Drizzle Kit's deprecated loader chain to use patched
esbuild0.25 or newer. - Restores a clean full
npm auditwhile keeping production dependencies unchanged.
Verification
- Full and production-only npm audit: 0 vulnerabilities.
- 109 unit tests passed.
- Integration: 3 passed, 1 fixture-only skip.
- Lint, build, Drizzle generation, dependency tree, package inspection, and extracted-package privacy scan passed.
TaskCenter v0.1.3
Fixes
- Reject single
&before the Hook read-only fast path. - Block remaining stdin/interactive interpreter forms, including
env --, script-plus-interactive flags, and-stdin markers. - Allow terminating interpreter queries such as
--versionand--help. - Treat non-JSON or non-object Context MCP success responses as protocol failures so compensation remains eligible.
Verification
- 109 unit tests passed.
- Integration: 3 passed, 1 fixture-only skip.
- Lint, build, whitespace check, production dependency audit, package inspection, and extracted-package privacy scan passed.
TaskCenter v0.1.2
Review hardening release.
- Removes git grep from the Hook read-only allowlist.
- Uses canonical Codex Bash payload coverage and blocks known stdin-driven shell/REPL launch forms.
- Recovers from 543cf19 Context observation idempotency conflicts using the exact historical payload.
- Keeps Context tests off the runtime map.
- Reports v0.1.2 consistently across package, README, MCP, and Context clients.
- Handles zero, missing, and disconnected CI base commits by checking the complete final tree.
See CHANGELOG.md for details.
TaskCenter v0.1.1
TaskCenter's first supported public release. v0.1.0 was withdrawn.
Highlights:
- Preserves ReqRadar-compatible Context idempotency payloads during upgrades.
- Hardens Hook lifecycle checks against write-capable sed and interactive PTY/REPL continuation.
- Separates deterministic tests from live dashboard integration checks.
- Completes the ReqRadar migration guide and publishes neutral fixtures.
- Uses the official npm registry and hardened GitHub Actions diff validation.
See CHANGELOG.md for migration steps.