Skip to content

CHANGELOG.md

Latest commit

 

History

History
79 lines (64 loc) · 3.97 KB

CHANGELOG.md

File metadata and controls

79 lines (64 loc) · 3.97 KB

Changelog

All notable, human-curated changes to Catenary are recorded here. The format is based on Keep a Changelog, and the project follows Semantic Versioning.

Per-release binaries and auto-generated commit notes are published on the GitHub releases page; this file records the curated highlights and, for major releases, the migration guidance.

[2.0.0] - 2026-06-08

2.0.0 stabilizes Catenary as a multi-surface intelligence router: a single per-host daemon manages a shared pool of language servers and exposes them through four decoupled surfaces — MCP (queries), hooks (enforcement), the CLI (editing lifecycle and search), and the TUI (observability).

Every breaking change in this release is to user configuration. If you maintain a ~/.config/catenary/config.toml or a project .catenary.toml, read the Migration guide (published) before upgrading.

Breaking changes (configuration)

  • Output redirection is denied by default. allow_file_redirects now defaults to false: redirections to a file (>, >>, &>, 2>file) are denied unless the flag is set. A redirected write bypasses the tracked Edit/Write path, so the diagnostics batch could be incomplete. fd-dups (2>&1, >&2) and device sinks (/dev/null, /dev/stdout, /dev/stderr) stay allowed regardless.
  • awk and sed removed from the recommended command pipeline. Both can exec arbitrary code and write files in-band (sed -i, awk system() / print > file), bypassing the tracked edit path; they are now denied at every pipeline position. Route sweeping edits through the new catenary sed.
  • Project .catenary.toml [commands] enforcement keys are ignored. Only build is honored at project scope. client_enforcement_only, allow_file_redirects, allow, pipeline, deny, deny_flags, and guidance resolve at user scope only (the filter resolves daemon-globally for every connected session). Move any project-level allowlist to user config; Catenary warns when it sees one of these keys in a project file.

Added

  • catenary sed — a tracked mass-edit surface for multi-file substitutions, with a diff-style preview. Substitutions flow through the tracked edit path so the diagnostics batch stays complete (the replacement for pipeline sed).
  • [tools].diagnostics_per_page (default 50) — single-shot preview budget for catenary diagnostics. Overflow is written to a per-session report file under the runtime dir, referenced by a trailing … N more — full report at <path> line.
  • [tools].diagnostics_severity (default "error") — minimum severity that marks a catenary diagnostics run "dirty" (exit code 1). With the default, the exit code means "does it compile" — warnings still print but exit 0.
  • [notifications].threshold (default "warn") — documents and exposes the minimum severity promoted to user-facing notifications (one of "debug", "info", "warn", "error").

Changed

  • The command filter is allowlist-based: only explicitly permitted commands run; everything else is denied with a dump of the allowed configuration. Read and stdout-only tools (cat, head, diff, …) live in allow; the redirect gate, not command blocking, guards redirected writes.

Migration

See the Migration guide for per-change before/after examples and exact remediation steps. In short:

  • Re-enable redirection with allow_file_redirects = true (user config) if you rely on it, or route writes through the edit tool.
  • Drop awk/sed from your pipeline; use catenary sed for sweeps.
  • Move any project [commands] enforcement keys into ~/.config/catenary/config.toml.

Regenerate the recommended template at any time with catenary config.