v2.16.1
v2.16.1 — 2026-05-28
Fixed
- Reliability: Await async calls and replace explicit
anytypes in profile/transcript handlers - Reliability: Add null checks and error handling to transcript/timeline loaders
- Security: Escape all interpolated values in
innerHTMLtemplates to prevent XSS - Reliability: Log errors in catch blocks instead of silent swallowing
- Config: Remove startup migration and import-time side effects from
config.ts - Security: Harden web API and storage initialization
Changed
- Code quality: Replace explicit
anytypes with proper TypeScript interfaces across index.ts, API handlers, and response types - Refactor: Extract duplicated
getAllShardsandextractScopeFromContainerTagintoshard-manager.ts - Refactor: Simplify codebase — DRY extractions, dead code removal, NOSONAR cleanup
- CI: Resolve audit failure and SonarCloud quality gate; exclude
shared.tsfrom coverage threshold - Docs: Add npm downloads and DeepWiki badges, Bun/Node.js runtime badges, clarify Windows support
Full Changelog: v2.16...v2.16.1