CHANGELOG.org

  1#+TITLE: Changelog
  2#+OPTIONS: toc:nil
  3
  4Notable changes per release. Dates are release dates; the repository's own
  5history has the detail.
  6
  7=SCHEMA_VERSION= is the wire contract between the daemon, the Swift collector
  8and every renderer, so it is called out wherever it moves. From 1.0 onward
  9=SignalName= discriminants are append-only: names may be added, never
 10renumbered or removed.
 11
 12* Unreleased
 13
 14* 1.2.0 — 2026-09-04
 15
 16** Added
 17- =menubar-pet=, the third face: a menu-bar pet with one life. It ages, neglect
 18  kills it over a week through visible stages, and death is permanent for that
 19  pet. A new one arrives when you come back, and the dead are kept in a
 20  cemetery that is never pruned.
 21- =pet-life=, the Rust crate behind it. Everything derives from timestamps
 22  rather than accumulating, so death happens at =last_activity + 7 days= and
 23  not when a program noticed — sleep, reboots, daemon restarts and the app not
 24  running change nothing. Birth requires activity, so a fortnight away leaves
 25  one grave rather than a chain of pets born, never fed and dead.
 26- =History::open_read_only= and =History::last_activity_ms=. Read-only because
 27  the ordinary open prunes, and a face polling every five seconds must not
 28  delete the daemon's history as a side effect of reading it.
 29
 30** Fixed
 31- The privacy ship-gate's forbidden-symbol scan missed =${BUFFER}=. The braced
 32  form is ordinary zsh and does not contain the substring =$BUFFER=, so the
 33  check enforcing the project's central claim was bypassable by two
 34  characters. =$RBUFFER= was absent entirely.
 35- That scan also asserted nothing about having scanned. If the directory walk
 36  returned empty the test passed having read no files, reporting success while
 37  checking nothing.
 38- The banned list widened by prefix where safe: =CGEvent=, =IOHID=, plus
 39  =addLocalMonitorForEvents=, =AXObserver= and =AXUIElement=. Bare =NSEvent=
 40  stays permitted — the keylogger-shaped API is the monitor, not the class, and
 41  a menu-bar face will need it to draw a UI.
 42
 43* 1.1.0 — 2026-09-04
 44
 45** Added
 46- =terminal-pet --oneline=: one line, then exit, for a shell prompt segment.
 47  About 2.7 ms per call including process start. With no daemon it prints
 48  nothing and exits non-zero, so a prompt segment hides itself rather than
 49  printing a diagnostic into the prompt.
 50- =signal_client::Frames::snapshot=, which reads the daemon's last-value cache
 51  and returns without waiting out a timeout.
 52
 53** Fixed
 54- The pet's mood ignored staleness, so a cached keystroke rate left it looking
 55  busy indefinitely. The terminal collector stops publishing once a session
 56  ages out of its active window, so the last rate sat in the cache with nothing
 57  to replace it. Mood now considers only current readings.
 58
 59* 1.0.0 — 2026-09-04
 60
 61The release that makes one claim: the daemon runs unattended, recovers from its
 62own failures, and says so when it cannot. Not feature completeness — two of the
 63five faces in the README exist, and the rest are explicitly post-1.0.
 64
 65=SCHEMA_VERSION= 4 → 5.
 66
 67** Added
 68- =SignalName::CollectorUp= (discriminant 11), the daemon's own health,
 69  published once per =Source= on state changes. A dead collector now reaches a
 70  face instead of a log file.
 71- =signald/src/supervisor.rs=: collector liveness in one place. The hardware
 72  child is respawned with backoff from 1 s doubling to a 60 s cap, reset after
 73  a run surviving 30 s, with no retry limit.
 74- =terminal-pet=, the second face: the shell, the machine, and collector
 75  health. Any collector down renders the pet sick, which outranks every other
 76  mood.
 77- =crates/signal-client=, one definition of the socket path and of frame
 78  iteration, shared by the daemon and both renderers.
 79
 80** Fixed
 81- A panic in the git or terminal collector killed the producer thread while the
 82  socket kept serving a frozen cache, so faces went on rendering numbers that
 83  had stopped being true. A panic now costs one tick.
 84- The hardware collector was spawned once and never again. If the child died,
 85  the daemon stayed up, so launchd's =KeepAlive= never fired and hardware
 86  signals stopped for good.
 87- =run_git= used =.output()= with no timeout, so a held index lock or a
 88  vanished network mount hung the producer thread forever while health still
 89  read up.
 90- =keys_per_min= had no floor on its sample window: two prompts a millisecond
 91  apart extrapolated a handful of keys into a five-figure rate.
 92- The zsh hook capped the spool at 1 MiB. Nothing consumes it while the daemon
 93  is away, and the daemon read the whole file on recovery.
 94
 95** Changed
 96- The hub's last-value cache keys by name, source and tag. It keyed by name and
 97  tag, so two signals differing only by source overwrote each other.
 98- =Signal.ts= no longer claims to be monotonic-corrected. It cannot be: it is
 99  persisted, retention prunes on it, and =CommitsToday= means since local
100  midnight.
101
102* 0.6.1 — 2026-09-04
103
104** Fixed
105- =signald= had no =--help=, and any unrecognised argument became a repository
106  path — so =signald --help= started the daemon watching a directory named
107  =--help=. Both binaries now have =--help= and =--version=, and an unknown
108  option exits 2.
109
110* 0.6.0 — 2026-09-04
111
112** Added
113- An install path. =packaging/net.krz.signald.plist= runs the daemon at login;
114  a Homebrew formula in =krz/homebrew-tap= installs the binaries, the plist and
115  the zsh hook, with =brew services= support.
116- =~/.config/signald/repos=, read when no repository is given on the command
117  line. launchd starts an agent in =/=, so without it a service install
118  collected no git signals at all.
119- A README "Paths" table: the socket, history database and spool defaults in
120  one place.
121
122* 0.5.0 — 2026-09-04
123
124The contract freeze. =SCHEMA_VERSION= 3 → 4.
125
126** Changed
127- =SignalName= cut from 29 variants to the 11 with a producer, and its
128  discriminants renumbered from zero. The last release in which renumbering was
129  possible.
130- =Tag::bundle_id= and =Tag::ssh_host= removed: both were =todo!()= panics
131  whose only consumers were among the removed variants. =Tag::repo_path= is the
132  sole constructor, and =signald= confines a tag to the roots it was told to
133  watch.
134
135** Fixed
136- A frame the build could not decode ended the stream, so a renderer built
137  before a metric was appended died on the first one it met. Such frames are
138  now skipped; an error is reserved for a stream that cannot be framed at all.
139- Around 34 citations of a specification that was never committed, replaced by
140  the rules they referred to.
141
142* 0.4.0 — 2026-09-04
143
144One bus: every collector reaching every subscriber by the same path.
145
146** Added
147- Hardware ingest. =signald= spawns =macos-collector= and reads its frames, so
148  the five hardware signals reach the hub, the history store and every
149  subscriber like any other collector's.
150- A 0BSD =LICENSE=.
151
152** Changed
153- The terminal spool is consumed each tick rather than re-read in full forever,
154  and its records carry the shell's pid, so =keys_per_min= is each active
155  shell's rate summed rather than a mix of interleaved sessions.
156- History rows older than =--retention-days= (default 7) are pruned.
157- CI was added and then removed within this release. The forge's runner is
158  scoped to one repository, so builds queued here were never claimed;
159  =.githooks/pre-push= runs the whole suite instead and is the only gate.
160
161* 0.3.0 — 2026-08-10
162
163First tagged release: the signal daemon, the git, terminal and IOKit
164collectors, and the privacy-gated =f64=-only schema at =SCHEMA_VERSION= 3.
165
166The v0.1 and v0.2 milestones named in the README — the git collector and the
167garden, then the SQLite history store, live streaming and the terminal
168collector — were never tagged and are folded into this commit.