v1.16.21 v1.16.22
guilinhu/proactive_hearing_assistantSep 27, 2026 → Sep 28, 20261 day between releases
What's New
Hardens web server and enforces mandatory worktree approvals
Breaking Changes
- Web server requires [web] allowed_hosts config for reverse proxies
- Approvals recorded in 1.16.21 are re-validated due to new hook requirements
New Features
- New trust-hooks command for approving worktree scripts
- Legacy [worktree] run_repo_scripts = "always" option for backward compatibility
- Enhanced input edge hardening for CLI JSON errors and tmux argument builder
Improvements
- Web server host validation restricted to localhost and allowed hosts
- Improved cookie security with HttpOnly and SameSite=Strict flags
- Vitest updated to version 4.1.11
Bug Fixes
- Fixed SSH authentication polling failure handling with a 2-minute timeout
Upgrade Notes
Add reverse proxy host names to [web] allowed_hosts before upgrading to avoid 421 errors. Existing worktree approvals will be re-validated on their next run.
The Two Releases
v1.16.21
Sep 27, 2026· 24 days ago
This release improves model discovery by querying the installed CLI directly for available models and removes the deprecated `creds-refresh` command. It also restores web push notification functionality and fixes SSH authentication polling behavior.
Full release notesv1.16.22
Sep 28, 2026· 24 days ago
This release hardens the web server by restricting host access to prevent 421 errors when accessed via reverse proxies. It introduces mandatory approval workflows for repository worktree hooks and improves input edge security.
Full release notes