v0.14.0

What's Changed

• feat: add GoatCounter analytics by @pablopunk in #76
• fix: make Stripe subscription updates order-aware (#88) by @pablopunk in #89
• refactor: split built-in extension factories into separate files (PAB-18) by @pablopunk in #90
• [PAB-23] Add Redis-based checkout lock to prevent duplicate Stripe subscription sessions by @pablopunk in #96
• PAB-13: Establish a fast, actionable verification and lint baseline by @pablopunk in #93
• [PAB-22] Add focused unit tests for cost math, model/provider resolution, getBalances, limits by @pablopunk in #95
• feat(PAB-21): Idempotency-Key on chat completions + request_dedup table by @pablopunk in #97
• feat: add Zod request validation on all mutating API routes (PAB-20) by @pablopunk in #94
• PAB-34: fix stale idempotency-key reclaim race by @pablopunk in #98
• PAB-33: Replace auto-dismissing token display with persistent copy-and-close panel by @pablopunk in #99
• [PAB-24] Add selectable backend environments by @pablopunk in #102
• PAB-36: support auth on Vercel previews by @pablopunk in #100
• PAB-16: Public surface — desktop connection UX + web presence, docs, legal by @pablopunk in #92
• PAB-38: improve word and app result ranking by @pablopunk in #103
• PAB-14: Add Submit as PR action for generated extensions by @pablopunk in #91
• PAB-26: surface backend environment in account debug UI by @pablopunk in #105
• PAB-25: scope Nevermind auth by backend origin by @pablopunk in #106
• PAB-40: refine verification protocol by @pablopunk in #108
• PAB-41: add deterministic Electron smoke lane by @pablopunk in #109
• test(backend): add real Postgres integration lane (PAB-41) by @pablopunk in #110
• PAB-32: document desktop Sentry decision by @pablopunk in #112
• PAB-31: add direct Axiom log ingestion by @pablopunk in #113
• PAB-27: add dormant waitlist and invite primitives by @pablopunk in #107
• PAB-44: clarify operational work guidance by @pablopunk in #114
• Fix split provider usage stream frames by @pablopunk in #116
• Expose display-safe public pricing metadata by @pablopunk in #117
• Fix extension persistence races by @pablopunk in #118
• PAB-42: harden backend switching and launch smokes by @pablopunk in #119
• [ImgBot] Optimize images by @imgbot[bot] in #120
• PAB-49: Add System Settings items to root search by @pablopunk in #125
• PAB-48: avoid unused frontmost-app polling by @pablopunk in #124
• PAB-48: enforce non-blocking Electron runtime paths by @pablopunk in #126
• PAB-45: cover production auth and proxy billing by @pablopunk in #122
• PAB-43: canonicalize API origins and host policy by @pablopunk in #123
• PAB-46: refine operational agent guidance by @pablopunk in #127
• PAB-52: add safe macOS app uninstall flow by @pablopunk in #128
• PAB-52: support wrapped app bundle metadata by @pablopunk in #129
• PAB-55: adopt list-first extension UI by @pablopunk in #130
• PAB-54: improve palette feedback workflow by @pablopunk in #131
• PAB-60: fix pnpm first-run build approvals by @pablopunk in #133
• PAB-60: fix pnpm 11 nested backend install by @pablopunk in #135
• PAB-60: repair Electron before development startup by @pablopunk in #136
• PAB-61: cover Linux Electron CI behavior by @pablopunk in #134
• PAB-60: force Electron binary installation by @pablopunk in #137
• PAB-60: validate Windows first-run startup by @pablopunk in #138
• PAB-53: declare trusted extension capabilities by @pablopunk in #132
• PAB-11: harden auth state transitions by @pablopunk in #140
• PAB-59: clarify completion-state guidance by @pablopunk in #139
• PAB-10: patch vulnerable runtime dependencies by @pablopunk in #141
• PAB-9: close extension persistence gaps by @pablopunk in #142
• PAB-8: materialize independent extension forks by @pablopunk in #143
• PAB-63: allow palette reporter to comment on PRs by @pablopunk in #144
• PAB-7: establish Windows release readiness checks by @pablopunk in #145
• PAB-64: publish unsigned Windows tag artifacts by @pablopunk in #146

New Contributors

• @imgbot[bot] made their first contribution in #120

Full Changelog: v0.13.2...v0.14.0

v0.13.2

What's Changed

• Harden extension actions and app icon rendering by @pablopunk in #75

Full Changelog: v0.13.1...v0.13.2

v0.13.1

What's Changed

• fix: replace file-icon with Electron's app.getFileIcon to fix ENOTDIR hangs by @pablopunk in #74

Full Changelog: v0.13.0...v0.13.1

v0.13.0

What's Changed

• Fix rename to match what users see in root search by @pablopunk in #61
• Fix AI chat ranking by @pablopunk in #52
• fix: respect view.selectedItemId after lazy-loaded items hydrate (#55) by @pablopunk in #65
• docs: document ctx.launch availability contract for the AI builder by @pablopunk in #68
• Promote ctx.data.staleWhileRevalidate as the primary cache-first pattern in builder prompt by @pablopunk in #70
• fix: isolate extension validator to prevent broken-state cascades (#56) by @pablopunk in #69
• fix: guard ctx.data against undefined in nested action handlers (#54) by @pablopunk in #72
• docs: teach builder host resolves ~ in files.changed trigger roots by @pablopunk in #67
• fix: findMedia batch query no longer fails when a root is missing by @pablopunk in #66
• Warn before credit exhaustion interrupts builder sessions (#60) by @pablopunk in #71

Full Changelog: v0.12.8...v0.13.0

v0.12.8

What's Changed

• [ai] fix: add postinstall script to install backend dependencies by @pablopunk in #47
• feat: force quit running apps from the command palette by @pablopunk in #50
• feat: make root search more fuzzy, clipboard search more exact by @pablopunk in #49
• fix: Linux login when system keyring is unavailable by @pablopunk in #51
• Cmd+K: rename extension from the palette by @pablopunk in #53

Full Changelog: v0.12.7...v0.12.8

v0.12.7

What's Changed

• Consolidate fuzzy-scoring into shared core + remove wasted structuredClone (fixes #33) by @pablopunk in #38
• feat: multi-upstream routing and provider failover by @pablopunk in #39
• Tooling foundation: pin deps + biome baseline + CI wiring (#32) by @pablopunk in #41
• fix: Safari doesn't appear in app root search on macOS Sequoia by @pablopunk in #43
• ci: replace doc-enforced rules with automated CI guard scripts by @pablopunk in #40
• feat: extract clipboard domain from main.ts + fix image write race by @pablopunk in #45
• backend security hardening: fail-closed configs, proxy, billing, XSS, CSRF by @pablopunk in #44
• feat: ctx.data.staleWhileRevalidate() — host-owned stale-while-revalidate for extension views by @pablopunk in #46

Full Changelog: v0.12.6...v0.12.7

v0.12.6

What's Changed

• self improving the extensions api by @pablopunk in #37

Full Changelog: v0.12.5...v0.12.6

v0.12.5

Full Changelog: v0.12.4...v0.12.5

v0.12.4

Full Changelog: v0.12.3...v0.12.4

v0.12.3

Full Changelog: v0.12.2...v0.12.3