All notable changes to this project are documented in this file.
The format is based on Keep a Changelog.
0.1.0 - 2026-06-18
__version__inapp.pyfor release tracking (0.1.0— first tagged release)- Startup guard refusing
--debugwith a non-loopback--host(including bracketed IPv6 loopback such as[::1]) - Deprecation policy for API and JSON field changes
- API field stability tables in
docs/api-reference.md(stable / experimental / deprecated) - Vitest coverage for router, page modules, and tool renderers (
static/js/) Content-Security-Policyheader on all Flask responses; theme-init IIFE externalized tostatic/js/theme-init.jsRoleLiteralnarrowing forMessageDict.rolewith unknown-role fallback- Mtime-invalidated LRU
session_cacheshared across session, stats, search, projects, and export APIs - CI benchmark regression gate with populated
benchmarks/baselines.json(fails on >20% mean regression)
- README notes that the server enforces the debug + host safety rule at startup
utils/jsonl_parser.__all__trimmed to public API symbols only (parse_session,quick_session_info)
export_countonGET /api/export/state— uselast_export_session_count(deprecated in PR #60; removed beforev0.1.0per deprecation policy bundled SPA path; SPA updated in same release cut)