v0.2.7

What's Changed

• fix: clear cargo audit rustls-webpki failure on main by @willsarg in #125

Full Changelog: v0.2.6...v0.2.7

v0.2.6

What's Changed

• Bootstrap release provider plugins by @willsarg in #121
• feat: unified kelvin binary — replace shell scripts with single compiled CLI by @JTP75 in #118
• docs: remove stale references to deleted scripts by @JTP75 in #122

Full Changelog: v0.2.5...v0.2.6

v0.2.5

What's Changed

• Guard release lockfile and bump version to 0.2.5 by @willsarg in #112

Full Changelog: v0.2.4...v0.2.5

v0.2.3

What's Changed

• Fix/kelvinclaw wiki by @JTP75 in #94
• wiki update by @JTP75 in #95
• Fix/plugin docs cleanup by @JTP75 in #97
• Dev by @JTP75 in #98
• docs: correct spelling by @vladdoster in #96
• Plugin dev by @JTP75 in #99
• ollama plugin, fixed failing actions, resolved bug with state directory by @JTP75 in #100

New Contributors

• @vladdoster made their first contribution in #96

Full Changelog: v0.2.2...v0.2.3

v0.2.2

What's Changed

• docs: fix stale ./kelvin bootstrap claims in README by @Copilot in #86
• fix(kpm): enforce exact index match for --version; never mutate entry or drop sha256 by @Copilot in #87
• fix(tui): prevent doubled keyboard input on Windows by @Copilot in #88
• Fix silent fallback to permissive trust policy when KELVIN_TRUST_POLICY_PATH is set but file is missing by @Copilot in #89
• update index url, release bundle fixes, and window+macos compat by @JTP75 in #92

Full Changelog: v0.2.1...v0.2.2

v0.2.1

What's Changed

• 0.2.0 release bundle prep by @JTP75 in #78
• add dedicated readme for release bundle by @JTP75 in #82
• bump cargo.toml to 0.2.1 by @JTP75 in #84
• added successful handle for --help by @JTP75 in #85

Full Changelog: v0.2.0...v0.2.1

v0.2.0

What's Changed in v0.2.0

Bug Fix

• PR #75: Fix KELVIN_CLI_VERSION: unbound variable crash in kelvin-release-launcher.sh — guards plugin manifest variables before use so the launcher works even when the manifest omits variable definitions

Security Fixes (from v0.1.9)

• #71: Reject empty/unparseable hostnames in http_call
• #70: Block security-sensitive HTTP headers from plugin injection
• #69: Cap fuel_budget at 100M to prevent unbounded WASM execution
• #68: Record env variable reads in the audit trail
• #67: Require EnvAccess capability for env_allow scopes
• #66: Wrap blocking HTTP in tokio::task::block_in_place

Features (from v0.1.9)

• WhatsApp Cloud API channel support
• Sequential port numbering (34617, 34618, 34619)
• Plugin index with all 5 official plugins
• kelvin medkit diagnostic command
• Plugin list/search subcommands
• OpenAI plugin + vendored model plugin tarballs

Fixes (from v0.1.9)

• #53: Doc link labels match actual paths
• #51: Docker TUI service uses init: true
• #49: Autocomplete popup scrolls to keep selection visible

Full Changelog

v0.1.9...v0.2.0

What's Changed

• fix: guard KELVIN_CLI_VERSION before use in release launcher (unbound variable crash) by @willsarg in #75
• chore: release v0.2.0 by @willsarg in #76

Full Changelog: v0.1.9...v0.2.0

v0.1.9

What's Changed in v0.1.9

Security Fixes (WASM Sandbox)

• #71: Reject empty/unparseable hostnames in http_call — returns 400 instead of falling through
• #70: Block security-sensitive HTTP headers (Host, Authorization, Cookie, etc.) from plugin injection
• #69: Cap fuel_budget at 100M to prevent unbounded WASM execution
• #68: Record env variable reads in the ClawCall audit trail (ClawCall::EnvAccess)
• #67: Require EnvAccess capability for env_allow scopes — fail-closed on missing capability
• #66: Wrap blocking HTTP in tokio::task::block_in_place to prevent runtime starvation

Features

• WhatsApp Cloud API channel support with webhook verification and HMAC-SHA256 validation
• Sequential port numbering: Gateway WS (34617), HTTP Ingress (34618), Plugin Registry (34619)
• Plugin index (index.json) with all 5 official plugins
• kelvin medkit diagnostic command
• Plugin list/search subcommands
• OpenAI plugin + vendored model plugin tarballs

Fixes

• #53: Doc link labels now match actual file paths under docs/plugins/
• #51: Docker TUI service uses init: true for proper signal handling
• #49: Autocomplete popup scrolls to keep selection visible

Full Changelog

v0.1.8...v0.1.9

What's Changed

• Add issue template by @JTP75 in #27
• Tools refactor (WIP) by @JTP75 in #32
• fix: enable memory controller legacy fallback for kelvin-host in release builds by @Copilot in #31
• refactor: rename GatewayScheduler to RuntimeScheduler by @Copilot in #30
• update anthropic plugin to use 30000ms timeout instead of 5000ms by @JTP75 in #37
• Tools refactor by @JTP75 in #33
• Onboarding rework by @JTP75 in #40
• docs: fix docker.md to match actual docker-compose.yml services and ports by @Copilot in #42
• docs: migrate docker.md CLI examples from docker-compose to docker compose v2 by @Copilot in #43
• Fix ghost scroll events on tools panel when hidden by @Copilot in #44
• Fix gateway startup failure: make model provider configurable with plugin init service by @Copilot in #46
• Require KELVIN_GATEWAY_TOKEN and restrict gateway ports to localhost by @Copilot in #45
• Tui integration by @JTP75 in #41
• resolved multiple line writing to file by @JTP75 in #47
• Feat tui commands by @JTP75 in #48
• Plugin dev by @JTP75 in #50
• Plugin doc updates by @JTP75 in #52
• dev into main for for 0.2 by @JTP75 in #54
• fix: update README doc links to match reorganized docs/ structure by @willsarg in #55
• style: apply cargo fmt --all by @willsarg in #56
• fix: resolve all clippy warnings by @willsarg in #57
• security: bump aws-lc-sys and rustls-webpki to fix 3 CVEs by @willsarg in #58
• ci: add CI workflow on push and pull request by @willsarg in #59
• docs: add CHANGELOG.md and SECURITY.md by @willsarg in #60
• docs: add CONTRIBUTING.md and CODE_OF_CONDUCT.md by @willsarg in #61
• fix: onboarding paths work from cold clone without API keys by @willsarg in #62
• fix: model provider selection, OpenAI tool schema, and vendored plugin tarballs by @willsarg in #63
• feat: plugin index, install script, and kelvin medkit by @willsarg in #64
• fix: sequential port numbering (34617, 34618, 34619) by @willsarg in #65
• fix: resolve all 9 open issues (#49, #51, #53, #66-71) by @willsarg in #72
• 0.2 cleanup by @JTP75 in #73
• chore: release v0.1.9 by @willsarg in #74

New Contributors

• @JTP75 made their first contribution in #27

Full Changelog: v0.1.8...v0.1.9

v0.1.8

What's Changed

• Fix v0.1.8 release metadata and lockfile by @willsarg in #26

Full Changelog: v0.1.7...v0.1.8

v0.1.6

What's Changed

• Use Blacksmith rust cache by @willsarg in #19

Full Changelog: v0.1.5...v0.1.6