Changelog

What we've shipped in CommitMind, tagged by phase. Dates match the git tag.

v0.5.0-phase5b — 2026-04-24

Invites + team features

Invite members by email with a role (admin or member)
Accept invite flow that preserves the OAuth redirect so new users land back on the invite
Members list + remove-member endpoints with org-scoped permissions
Hourly expiry janitor that sweeps stale pending invites

GitHub App + server-side history backfill

First-class GitHub App install: the server pulls commit history server-side instead of relying on the CLI
Per-org installation record + signed webhook handler
Backfill worker that streams past commits through the same ingest pipeline as live captures
Migration path from PAT-only orgs to App-installed orgs

Symbol-level staleness via tree-sitter

Parse commits with tree-sitter to map observations/decisions to specific symbols (functions, types, exports)
Mark a decision stale when the symbol it anchors moves or disappears
Postgres LISTEN/NOTIFY wake for the embed worker — drops job latency from poll interval to sub-second
Staleness flags surface in search_memory so Claude doesn't quote dead advice

Decisions + hybrid search + history backfill (CLI)

decisions table with proposed / accepted / rejected / superseded lifecycle
Hybrid retrieval: full-text search fused with pgvector cosine similarity across observations and decisions
HNSW + tsvector indexes with drift-checked migrations
commitmind backfill — walk git history oldest-first and ingest each past commit

Capture pipeline

Capture pipeline end-to-end: commit → post-commit hook → CLI → API → DB → timeline
Two-table GitHub-Apps-style auth model (agent_tokens + user_tokens), SHA-256 hashed at rest
RFC 8628 device authorization grant for CLI login
Bearer middleware with a typed Principal and an LRU auth cache
Session lifecycle, 30s heartbeat, disk-backed buffer with flock for the MCP server
gitleaks-equivalent redaction on every observation and commit message before persist
Timeline endpoint (cursor-paginated union of commits + observations + decisions)

Backend foundation + dashboard shell

Monorepo scaffolding (pnpm + Go workspaces)
Go API on Neon Postgres + pgvector with auth, orgs, and projects
GitHub OAuth, session cookies, CORS, and RequireOrgMember guards — cross-org isolation is enforced with byte-parity 404 responses
Dashboard (Vite + React + TS + Tailwind v4 + shadcn/ui) through org and project detail views
CommitMind design system wired: tokens, brand-gradient rules, Geist + JetBrains Mono
CI workflow covering Go, dashboard, sqlc drift, and migrations apply-cleanly