scriptoriumadmin/veritas-kanban
1
0
Fork 0
mirror of https://github.com/BradGroux/veritas-kanban.git synced 2026-08-28 02:44:59 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
veritas-kanban/docs/V5-RELEASE-NOTES.md
Brad Groux 4b84eccd1b
chore: prepare Veritas Kanban 5.2.2 (#827) 
Tracks #809
2026-07-12 18:26:31 -05:00

15 KiB
Raw Blame History

v5 Release Notes

These notes describe the Veritas Kanban v5 stable release line.

v5.2.2 Patch

v5.2.2 is the July 2026 reliability and interface-audit patch. It restores a launchable macOS build, closes the web and desktop Apple-design audit backlog, and hardens workflow and storage behavior without changing the supported v5 data model or requiring an operator migration.

Desktop and release reliability

  • Electron runtime APIs remain external in Vite/Rolldown output, preventing the Electron npm installer shim from replacing the native main and preload APIs.
  • Desktop builds now inspect emitted artifacts and fail before packaging if the installer shim or missing Electron runtime bindings reappear.
  • The patched native app was exercised through fresh setup, readiness and Keychain status, native menus, keyboard onboarding, window chrome, and local notification wiring before release.
  • Signed/notarized macOS DMG and ZIP assets, update metadata, blockmaps, and SHA-256 sidecars replace the broken v5.2.1 desktop artifact set.

Interface, accessibility, and motion

  • Keyboard users can move and reorder Kanban cards across populated and empty columns with announcements, rollback, and focus restoration.
  • Compact Settings, bottom navigation, Board Chat, and Scoring Profiles now use deliberate phone layouts with reachable, touch-sized actions at 320-430 px.
  • Scoring Profiles preserves selection across create and duplicate flows and protects unsaved edits when navigating away.
  • Overlays honor reduced-transparency and increased-contrast preferences, and stale task-card tooltips are dismissed before Task Detail opens.
  • Dashboard charts and sections no longer animate layout properties or rely on broad transition-all behavior; reduced-motion updates are immediate.

Workflow and storage correctness

  • Human-gate blocks, bounded cross-step reroutes, workflow HTTP errors, shared contracts, and canonical depends_on enforcement now follow the documented workflow state model.
  • File-backed mutations have stronger ordering, rollback, recovery, and lifecycle cleanup across concurrent operations.
  • Activity history gains append-only JSONL durability, deterministic same-millisecond ordering, and stable retention trimming.
  • Attachment directories are created lazily by the operations that need them, removing an asynchronous startup/teardown race.
  • Security artifact matching normalizes path case before classification.

Compatibility and upgrade notes

  • No v5 schema migration is required for v5.2.1 installations.
  • Server, web, CLI, MCP, shared, and desktop package versions move together to 5.2.2.
  • Linux and Windows desktop outputs remain unsigned preview artifacts; macOS Apple Silicon remains the supported signed desktop target.
  • Operators using the v5.2.1 macOS app should replace it with v5.2.2 rather than relying on the broken v5.2.1 application bundle to self-update.

v5.2.1 Patch

v5.2.1 records the completed v5.2 audit follow-up pass, publishes signed macOS release assets, and updates the supported Homebrew install channel.

  • Disabled communication adapters now block inbound human reply ingestion before creating Squad Chat messages or thread mappings.
  • Delegated workspace intake now leaves a recoverable pending delegation if persistence fails mid-handoff, and retries can reconcile the target task by delegation ID.
  • The static docs homepage no longer carries brittle launch-era star and exact test-count claims.
  • Queue monitor selection was audited and left unchanged because current sorting already puts runnable candidates ahead of blocked work before the cap.
  • Release CI was hardened by waiting for workflow-run metadata completion and file-backed ChatService directory initialization before temp workspaces are removed.

v5.2.0 Release

v5.2.0 closes the post-v5.1 backlog train and the follow-up audit issues found after that work landed. It keeps the v5 storage, desktop, security, and migration posture unchanged from v5.1.0.

  • Team roster manifests, capability routing, cross-workspace capability discovery, and delegated intake make work handoffs explicit before agents accept tasks.
  • Queue intake monitoring and the recurring scheduler unify GitHub issue watches, agent-run monitors, workflows, digests, and follow-up loops.
  • Squad Chat now has durable threads, unread state, mentions, search, and bidirectional human reply adapters for chat and notification channels.
  • Ceremony enforcement adds design-review and failure-retrospective gates for the workflows that should not proceed without recorded review evidence.
  • Reflection memory promotion turns agent corrections and lessons into a reviewable memory queue instead of losing useful run context in chat history.
  • External tracker schema introspection lets configurable work item mappings inspect tracker field shape before sync.
  • Release audit follow-ups removed the vulnerable frontmatter dependency path, upgraded DOMPurify, made CLI/MCP smoke checks skip cleanly without VK_API_KEY, and kept initial Mantine bundle size under the QA budget.

v5.1.0 Release

v5.1.0 completes the post-v5.0 agent governance and collaboration release train while preserving the v5 storage, desktop, security, and migration posture.

  • Docker source builds include the required server, web, shared, CLI, MCP, and desktop workspace inputs so self-host validation can build from a clean context.
  • Sandbox policy presets define reusable filesystem, network, environment, and credential boundaries for agent launches, with dry-run validation before run start.
  • Agent budget enforcement adds auditable token, cost, tool-call, runtime, retry, and fan-out guardrails across workspace, agent, workflow, workflow agent, and one-off run scopes.
  • Agent profile packages can be imported, validated, exported, enabled, edited, and used at launch so role/runtime/prompt/tool/sandbox/budget posture can travel as YAML or JSON.
  • Decision review sessions capture independent participant responses, critique rounds, final synthesis packets, work-product attachment, and decision audit links.
  • Shared live run sessions let workspace members create view, co-drive, or fork shares for active task runs. Viewers receive live output and events, editors send attributed messages and mobile-safe approvals, and forks create linked tasks without changing the parent run.

v5.0.1 Patch

v5.0.1 is a small MCP/runtime patch release. It keeps the v5 storage, desktop, security, and migration posture unchanged from v5.0.0.

  • MCP write tools now return concise confirmations instead of echoing the full task JSON and complete comment history on every mutation.
  • Read tools remain the full-detail paths: get_task, list_tasks, and list_comments.
  • The MCP documentation and response-contract tests cover the concise write behavior.
  • The Mantine task detail Progress tab test was stabilized under CI load while validating the patch.
  • The local macOS desktop packaging smoke check now follows the configured app bundle name.

Highlights

  • Native macOS desktop app with bundled local server lifecycle, app data paths, safe-storage backed secrets, menus, notifications, deep links, setup diagnostics, updater status, and signed/notarized release workflow.
  • SQLite-backed v5 storage with file-to-database migration, dry-run reports, migration journals, backup/export/import, rollback recovery, and dual-storage parity coverage.
  • Multi-user workspaces with roles, memberships, invitations, scoped API tokens, device sessions, actor attribution, optimistic concurrency, and RBAC coverage across REST, WebSocket, CLI, MCP, and workflow paths.
  • Remote/mobile access for trusted same-origin hosts, secure pairing, hardened realtime sync, responsive mobile surfaces, and PWA install support with static-shell-only offline behavior.
  • Cohesive v5 work surfaces: Work View, action queue, readiness gates, durable work products, completion packets, universal search, workflow authoring, policy decision traces, maintenance center, product modes, skill capability profiles, skill security scanning, and orchestrator/subagent pipelines.
  • Refreshed release documentation captures the current desktop shell, resizable Workbench bottom panel, Codex-default agent provider settings, task work view, Maintenance Center, and mobile/PWA shell using release-safe dummy content.

Breaking Changes And Migration Warnings

  • v5 promotes SQLite as the primary GA storage backend. Run the migration dry run and preserve the pre-migration backup before accepting the SQLite database.
  • Rolling back the app binary after a SQLite migration is only safe when the older app supports the current schema. Otherwise restore the pre-migration file-backed backup.
  • Remote/server mode must not rely on localhost bypass. Enable auth, use HTTPS or a trusted VPN/tunnel, and validate /api, /ws, manifest, service worker, and static assets from the same origin.
  • PWA/mobile offline support caches only the static shell. It does not cache API data, WebSocket events, tokens, task contents, comments, work products, or mutation responses.
  • Owner/admin credentials are not for routine agents. Use scoped agent or service tokens and revoke lost devices or tokens from Settings.

Fresh Install

  1. Install the signed Mac desktop app:

    brew tap BradGroux/tap
brew install --cask veritas-kanban

    Manual install is also supported from the stable GitHub release ZIP.

  2. Launch Veritas Kanban and choose Board Only unless you already need agent or remote setup.

  3. Save the recovery key.

  4. Verify Settings -> Maintenance health, storage, backup, and debug-bundle previews.

Upgrade

  1. Back up the existing v4 file-backed project or desktop data directory.
  2. Run migration dry-run.
  3. Resolve warnings or record accepted risks.
  4. Run migration and preserve the journal/report.
  5. Verify board, task detail, search, workflows, chat, settings, work products, Maintenance Center, and audit history.
  6. Run backup/export and restore verification before deleting old artifacts.

Release Artifacts

The v5.2.2 stable desktop release publishes signed/notarized macOS ZIP and DMG assets plus latest-mac.yml, blockmaps, and SHA-256 sidecars under the v5.2.2 GitHub release. Use the release-attached .sha256 files as the checksum source of truth.

The v5.2.1 desktop assets remain available for provenance, but the application bundle is not a supported rollback target because its emitted Electron main process contains the installer shim fixed in v5.2.2.

The v5.2.0 desktop assets remain available under the v5.2.0 GitHub release.

The v5.0.0 stable desktop release artifacts are retained here as the v5 baseline used by the updater evidence packet:

Artifact SHA-256
Veritas-Kanban-5.0.0-mac-arm64.dmg f3d0c3a70b66c27c27db527b2cdeb8ac86f174630c951a429eeb59b4080bf0ae
Veritas-Kanban-5.0.0-mac-arm64.zip bfd1e57fc99b4468f9fd97418c2aa57b51a1e3087966539c60a75c848c595cb1
Veritas-Kanban-5.0.0-mac-arm64.dmg.blockmap 0d10746c0703e1ac1409b9a370ed2bd8195dc25fc8f9e1384f909140f5e00a0e
Veritas-Kanban-5.0.0-mac-arm64.zip.blockmap 2eb8b8a93cca84f1579736ce06bf5107edd688c9d941ce83ba3876982ec52d09
latest-mac.yml 535cd6da5e95dff8dcf869fa2b236a2b1ddcc4dff118f325b41265cb96f14db1

Checksum sidecars are published as Veritas-Kanban-5.0.0-mac-arm64.dmg.sha256 and Veritas-Kanban-5.0.0-mac-arm64.zip.sha256.

The GitHub release also includes the source archive and links to the upgrade, desktop install, remote/mobile, admin, compatibility, and GA checklist docs.

Documentation

Post-GA Follow-Up

  • Linux and Windows unsigned desktop artifacts remain preview-only, non-GA validation outputs documented in Desktop Release.
  • Native mobile apps with offline execution are scoped in ADR 0003.
  • Cloud sync and hosted SaaS are scoped as optional post-GA work in ADR 0004.
  • Deeper desktop agent workbench features are scoped in Post-GA Desktop Agent Workbench Spec.