chapa-cli

fix(auth): remove shell injection risk in Windows browser launch; centralize error-chain (#103 #104)

perf(insights): cache DOM lookups to reduce redundant rescans (#102)

fix(telemetry): emit failure events for insights early-exit paths (#101)

perf(insights): cache DOM lookups to reduce redundant rescans (#102)

fix(auth): remove shell injection risk in Windows browser launch; centralize error-chain (#103 #104)

fix(telemetry): emit failure events for insights/login; add command context (#101)

fix(http): strict 2xx parsing, HTTPS enforcement, single serialization (#94 #95 #99)

fix(auth): HTTPS guard in login device flow (#91 #95 #96 #97 #98)

fix(emu): regression tests for PR aggregation pagination beyond 100 nodes (#92)

fix(infra): gate publish.yml on main branch provenance (#93)

fix(infra): gate publish.yml on main branch provenance

chore(deps-dev): Bump the dev-dependencies group with 2 updates

fix: senior-dev validation fixes (6 items) #87

fix(ci): remove explicit pnpm version from publish workflow

Release: v0.4.1

chore(deps-dev): Bump typescript from 6.0.2 to 6.0.3 in the dev-dependencies group across 1 directory

fix(background): detach telemetry and recalculate dispatch

fix(transport): harden browser launch and normalize errors

fix(telemetry): add command and stage context

refactor(insights): cache chart card parsing

[remediate] AR-L1 Error-chain normalization is duplicated across transport layers

[remediate] SE-L1 Windows browser launcher uses shell with unvalidated URL

[remediate] PE-M2 Insights parsing does repeated full-DOM rescans

[remediate] DO-M1 Observability is merge-centric and blind to insights/login failures

[pre-launch] PE-M1 Duplicate payload serialization on upload paths

[pre-launch] UX-M2 Command parsing is positional-only; flag-first usage collapses to generic error

[pre-launch] QA-M2 No regression test for explicit-default-server-override edge case

[pre-launch] AR-M2 Config corruption silently collapses to 'not logged in'

[pre-launch] SE-M1 Arbitrary --server host receives bearer token and stats

[pre-launch] BE-M1/QA-M1 Chapa write paths report success on malformed 2xx responses