{"project":{"slug":"capa","name":"Capa","url":"https://heyresearch.xyz/project/capa"},"lens":"held","items":[{"id":"ship:a38c9c03-595c-468a-bff8-e0d9e369e887","kind":"code","at":"2026-10-19T07:27:06.000Z","precision":"WEEK","title":"Code changes, week of 2026-10-19 – 2026-10-25","displayTitle":"Code changes, week starting 2026-10-19 (to 2026-10-20)","summary":"1 active day in infragate/capa.","recordedAt":"2026-10-20T02:55:29.048Z","eventType":"CODE_ACTIVITY","verification":"SOURCE_LINKED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","codeSubstance":{"verdict":"UNKNOWN","classifierVersion":"commit-substance-v4","countsAsBuilding":true,"commitsListed":1,"commitsRead":0,"changedCode":0,"documentationOrMaintenance":0,"substanceUnknown":0,"notRead":1,"files":{"source":0,"test":0,"docs":0,"readme":0,"dependency":0,"config":0,"ci":0,"generated":0,"asset":0,"whitespace":0,"rename":0,"data":0,"unknown":0},"weekFullyListed":true,"automatedCommits":0,"sampled":false,"basis":null,"summary":"HEY has not yet looked inside 1 commit from this week."},"source":"https://github.com/infragate/capa"},{"id":"ship:efceb18e-b2cc-4785-9933-e2dd2b16ae04","kind":"release","at":"2026-10-12T15:47:48.000Z","precision":"EXACT","title":"v2.3.0","summary":"## What's Changed * fix: use the OS keychain in compiled binaries for new installs by @Minitour in https://github.com/infragate/capa/pull/283 * feat(web): add Refresh all to registry settings by @Minitour in https://github.com/infragate/capa/pull/284 * feat(web): add and remove providers from the project page by @Minitour in https://github.com/infragate/capa/pull/285 * fix: record Claude skills, sub-agents and MCP calls in agent activity by @Minitour in https://github.com/infragate/capa/pull/288 * feat(antigravity): register MCP and install hooks by @Minitour in https://github.com/infragate/ca","recordedAt":"2026-10-20T02:55:28.602Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v2.3.0"},{"id":"ship:eb38337b-2e5e-43f1-bdb8-beb969bb3b9f","kind":"release","at":"2026-09-23T10:55:55.000Z","precision":"EXACT","title":"v2.2.4","summary":"## What's Changed * fix: report the release tag from capa --version by @Minitour in https://github.com/infragate/capa/pull/273 **Full Changelog**: https://github.com/infragate/capa/compare/v2.2.3...v2.2.4","recordedAt":"2026-10-20T02:55:28.644Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v2.2.4"},{"id":"ship:b474a072-6f92-44c8-a775-1bdd14669dac","kind":"release","at":"2026-09-22T11:48:36.000Z","precision":"EXACT","title":"v2.2.3","summary":"## What's Changed * fix(rules): deliver a folded rule once to providers that also read AGENTS.md by @Minitour in https://github.com/infragate/capa/pull/261 * chore(deps): bump mermaid from 11.17.2 to 12.0.0 in the production-deps group by @dependabot[bot] in https://github.com/infragate/capa/pull/262 * Add MIT license, point questions at issues by @Minitour in https://github.com/infragate/capa/pull/264 * fix(lockfile): keep discovered versions on pinned reinstall by @Minitour in https://github.com/infragate/capa/pull/267 * Release v2.2.3 by @Minitour in https://github.com/infragate/capa/pull/2","recordedAt":"2026-10-20T02:55:28.659Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v2.2.3"},{"id":"ship:b1b42994-a287-4155-bd0a-df9c2d66ffbe","kind":"release","at":"2026-09-17T22:32:56.000Z","precision":"EXACT","title":"v2.2.2","summary":"## What's Changed * fix(oauth): prefer PRM authorization servers over origin AS metadata by @Minitour in https://github.com/infragate/capa/pull/253 * fix(plugins): map agent tools and model frontmatter into capa subagents by @Minitour in https://github.com/infragate/capa/pull/254 * fix(oauth,plugins): keep configured client ids, escape generated frontmatter by @Minitour in https://github.com/infragate/capa/pull/256 * feat(subagents): point a misplaced tool ref at nativeTools by @Minitour in https://github.com/infragate/capa/pull/257 * ci: give Windows tests real timeout headroom by @Minitour i","recordedAt":"2026-10-20T02:55:28.675Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v2.2.2"},{"id":"ship:81cce977-c931-482b-8de1-3ce87a84594d","kind":"release","at":"2026-09-16T23:41:01.000Z","precision":"EXACT","title":"v2.2.1","summary":"## What's Changed * fix(registries): embed bundled adapter sources in compiled binary (2.2.1) by @Minitour in https://github.com/infragate/capa/pull/250 **Full Changelog**: https://github.com/infragate/capa/compare/v2.2.0...v2.2.1","recordedAt":"2026-10-20T02:55:28.689Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v2.2.1"},{"id":"ship:66fc0d36-d0bb-46f4-9c8d-2715980d38a4","kind":"release","at":"2026-09-16T22:24:37.000Z","precision":"EXACT","title":"v2.2.0","summary":"## Highlights Finer control over which MCP tools agents see, a token-efficient `search` exposure mode (now the `capa init` default), and correct rule placement for providers that share `AGENTS.md`. ## Tool exposure - **Per-server exposure.** A server's `expose:` can be `all` (default), `except`, `exactly` or `none`. Adding `tools:` entries for a server switches it to a curated list. - **`search` mode.** `options.toolExposure: search` lists only `search` and `call_tool` up front, so agents find tools on demand instead of loading every schema. New projects from `capa init` use it by default. - *","recordedAt":"2026-10-20T02:55:28.704Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v2.2.0"},{"id":"ship:451da156-0f59-4d3e-bc5d-3e7000c58819","kind":"release","at":"2026-08-26T14:28:13.000Z","precision":"EXACT","title":"v2.1.2","summary":"## What's Changed * fix: serialize Cursor hook matcher as matcher, not pattern by @Minitour in https://github.com/infragate/capa/pull/203 * Fix serialization of Cursor hook matcher to use matcher field by @Minitour in https://github.com/infragate/capa/pull/204 **Full Changelog**: https://github.com/infragate/capa/compare/v2.1.1...v2.1.2","recordedAt":"2026-10-20T02:55:28.719Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v2.1.2"},{"id":"ship:cf93a3e4-1e73-4014-8b65-569f1a39c07b","kind":"release","at":"2026-08-26T08:00:07.000Z","precision":"EXACT","title":"v2.1.1","summary":"## What's Changed * chore(deps): bump github/codeql-action from 4.37.6 to 4.37.7 by @dependabot[bot] in https://github.com/infragate/capa/pull/194 * chore(deps): bump actions/attest-build-provenance from 3 to 4 by @dependabot[bot] in https://github.com/infragate/capa/pull/195 * fix(web-ui): remove unsupported MCP server display name form by @Minitour in https://github.com/infragate/capa/pull/198 * feat(web-ui): clickable capa skill chips and installed browse marks by @Minitour in https://github.com/infragate/capa/pull/199 * fix: restore OAuth endpoint aliases for MCP token refresh by @Minitour","recordedAt":"2026-10-20T02:55:28.730Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v2.1.1"},{"id":"ship:34c2ffc8-22a1-4251-af5c-128aa2f9fe60","kind":"release","at":"2026-08-21T12:12:06.000Z","precision":"EXACT","title":"v2.1.0","summary":"## Highlights Security-focused release: secrets encrypted at rest, safer installs/upgrades, hardened loopback API, and verifiable release artifacts. ## Security - **Secrets at rest** — variables, OAuth tokens, and git credentials are encrypted with AES-256-GCM; master key prefers the OS keyring with a permissioned file fallback - **On-demand secret sources** — MCP `env`/`headers` support `fromEnv`, `f romCommand`, and `fromFile` (user-authored config only; plugin manifests reject non-string secret objects) - **Install path guards** — refuse symlink escapes, path traversal, and Windows cross-dr","recordedAt":"2026-10-20T02:55:28.747Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v2.1.0"},{"id":"ship:9007a7e8-93a3-42bf-9b7c-580c21c0b78e","kind":"release","at":"2026-08-05T08:00:36.000Z","precision":"EXACT","title":"v2.0.3","summary":"## What's Changed * fix(cli): keep activity-ingest stdout JSON-only for Cursor gate hooks by @Minitour in https://github.com/infragate/capa/pull/171 * Release: v2.0.3 by @Minitour in https://github.com/infragate/capa/pull/172 **Full Changelog**: https://github.com/infragate/capa/compare/v2.0.2...v2.0.3","recordedAt":"2026-10-20T02:55:28.761Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v2.0.3"},{"id":"ship:f8682e17-6e9c-4d7d-a6df-2570e79c8210","kind":"release","at":"2026-08-04T17:36:13.000Z","precision":"EXACT","title":"v2.0.2","summary":"## What's Changed * Fix Cursor CLI activity trace grouping by @Minitour in https://github.com/infragate/capa/pull/169 * Release: v2.0.2 by @Minitour in https://github.com/infragate/capa/pull/170 **Full Changelog**: https://github.com/infragate/capa/compare/v2.0.1...v2.0.2 ## What's Changed * Fix Cursor CLI activity trace grouping by @Minitour in https://github.com/infragate/capa/pull/169 * Release: v2.0.2 by @Minitour in https://github.com/infragate/capa/pull/170 **Full Changelog**: https://github.com/infragate/capa/compare/v2.0.1...v2.0.2","recordedAt":"2026-10-20T02:55:28.774Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v2.0.2"},{"id":"ship:569c1cbe-fc83-48d3-979e-cb341b3bc5d8","kind":"release","at":"2026-08-04T09:06:44.000Z","precision":"EXACT","title":"v2.0.1","summary":"## What's Changed * fix: isolate plugin resolve failures by @Minitour in https://github.com/infragate/capa/pull/163 * fix: resolve Cursor marketplace monorepo plugins by @Minitour in https://github.com/infragate/capa/pull/164 * Fix plugin skill content loading before capa install by @Minitour in https://github.com/infragate/capa/pull/165 * Fix activity-ingest empty stdout blocking Cursor gate hooks by @Minitour in https://github.com/infragate/capa/pull/166 * Fix wrap server start, Windows Cursor activity ingest, and live indicator by @Minitour in https://github.com/infragate/capa/pull/167 * Re","recordedAt":"2026-10-20T02:55:28.787Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v2.0.1"},{"id":"ship:f651e622-d3c2-4d3d-8262-1137618d40a4","kind":"release","at":"2026-08-02T22:07:36.000Z","precision":"EXACT","title":"v2.0.0","summary":"## What's Changed * chore(deps): bump nanoid from 5.1.16 to 6.0.0 in the production-deps group by @dependabot[bot] in https://github.com/infragate/capa/pull/137 * feat(mcp): expose server icons, metadata, and ping support by @Minitour in https://github.com/infragate/capa/pull/138 * chore(deps): bump the production-deps group with 2 updates by @dependabot[bot] in https://github.com/infragate/capa/pull/139 * Enhance CLI wrap functionality and streamline install options by @Minitour in https://github.com/infragate/capa/pull/141 * feat(web-ui): interactive capabilities editor with live YAML sync b","recordedAt":"2026-10-20T02:55:28.798Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v2.0.0"},{"id":"ship:7a0ab65b-a229-4ef9-a135-03ac15e6ae2f","kind":"release","at":"2026-07-17T00:13:44.000Z","precision":"EXACT","title":"v1.9.18","summary":"## What's Changed * fix(cache): refresh stale mirror for unpinned skill references by @Minitour in https://github.com/infragate/capa/pull/133 * Add optional MCP tool formatter (closes #131) by @danielnachumdev in https://github.com/infragate/capa/pull/132 * Enhance MCP tool formatter by @Minitour in https://github.com/infragate/capa/pull/134 * feat(web-ui): make installed capabilities more informative by @Minitour in https://github.com/infragate/capa/pull/135 * Release: develop into main (v1.9.18) by @Minitour in https://github.com/infragate/capa/pull/136 ## New Contributors * @danielnachumdev","recordedAt":"2026-10-20T02:55:28.813Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v1.9.18"},{"id":"ship:57ecec26-460d-4558-bedc-e1ef9bf5c23b","kind":"release","at":"2026-06-30T07:22:02.000Z","precision":"EXACT","title":"v1.9.17","summary":"## What's Changed * fix: remote skill install on expired token + MCP unreachable empty response by @Minitour in https://github.com/infragate/capa/pull/128 * chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in https://github.com/infragate/capa/pull/122 * chore(deps-dev): bump @types/node from 25.9.4 to 26.0.0 in the development-deps group by @dependabot[bot] in https://github.com/infragate/capa/pull/124 * chore(deps): bump js-yaml from 4.2.0 to 5.0.0 in the production-deps group by @dependabot[bot] in https://github.com/infragate/capa/pull/123 * Update js-yaml to v5 and improv","recordedAt":"2026-10-20T02:55:28.828Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v1.9.17"},{"id":"ship:ca85b313-a2a3-4cab-989a-e7d95bf773e9","kind":"release","at":"2026-06-21T15:33:40.000Z","precision":"EXACT","title":"v1.9.16","summary":"## Security fix This release patches [GHSA-rhp4-jmr9-fmc5](https://github.com/infragate/capa/security/advisories/GHSA-rhp4-jmr9-fmc5) — a high-severity command injection in capa's command-tool executor. `CommandToolExecutor.runCommand()` previously built the shell command by string-replacing `{name}` placeholders with caller-supplied values and spawning the result with `shell: true`. Values were never escaped, so an agent steered by indirect prompt injection could insert shell metacharacters in a tool argument and run arbitrary commands as the capa process. The fix tokenizes the operator's tem","recordedAt":"2026-10-20T02:55:28.843Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v1.9.16"},{"id":"ship:0ff026db-067f-4793-af11-75294556a182","kind":"release","at":"2026-06-18T09:30:22.000Z","precision":"EXACT","title":"v1.9.15","summary":"## What's Changed * fix(install): stop folding sub-agent context into CLAUDE.md / copilot-instructions.md by @Minitour in https://github.com/infragate/capa/pull/121 **Full Changelog**: https://github.com/infragate/capa/compare/v1.9.14...v1.9.15 ## What's Changed * fix(install): stop folding sub-agent context into CLAUDE.md / copilot-instructions.md by @Minitour in https://github.com/infragate/capa/pull/121 **Full Changelog**: https://github.com/infragate/capa/compare/v1.9.14...v1.9.15","recordedAt":"2026-10-20T02:55:28.856Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v1.9.15"},{"id":"ship:742f1345-3901-4fa5-96aa-476e968100d0","kind":"release","at":"2026-06-17T07:25:30.000Z","precision":"EXACT","title":"v1.9.14","summary":"## What's Changed * feat(subagents): accept `@server.tool` / `server.tool` / bare id in subagent tools[] by @Minitour in https://github.com/infragate/capa/pull/120 **Full Changelog**: https://github.com/infragate/capa/compare/v1.9.13...v1.9.14 ## What's Changed * feat(subagents): accept @server.tool / server.tool / bare id in subagent tools[] by @Minitour in https://github.com/infragate/capa/pull/120 **Full Changelog**: https://github.com/infragate/capa/compare/v1.9.13...v1.9.14","recordedAt":"2026-10-20T02:55:28.868Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v1.9.14"},{"id":"ship:d067fa7d-241c-4b5e-99f9-657c2901543c","kind":"release","at":"2026-06-15T20:10:16.000Z","precision":"EXACT","title":"v1.9.13","summary":"## What's Changed * feat(subagents): expand skills/tools blocks with descriptions and capa sh form by @Minitour in https://github.com/infragate/capa/pull/118 * feat(install): warn on unknown subagent skill/tool references by @Minitour in https://github.com/infragate/capa/pull/119 **Full Changelog**: https://github.com/infragate/capa/compare/v1.9.12...v1.9.13 ## What's Changed * feat(subagents): expand skills/tools blocks with descriptions and capa sh form by @Minitour in https://github.com/infragate/capa/pull/118 * feat(install): warn on unknown subagent skill/tool references by @Minitour in h","recordedAt":"2026-10-20T02:55:28.879Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v1.9.13"},{"id":"ship:f80cd6a9-c3c2-4fdc-9124-f617cfca447c","kind":"release","at":"2026-06-13T22:45:50.000Z","precision":"EXACT","title":"v1.9.12","summary":"## What's Changed * feat(cli): registry search + capabilities-manager skill refresh by @Minitour in https://github.com/infragate/capa/pull/117 **Full Changelog**: https://github.com/infragate/capa/compare/v1.9.11...v1.9.12 ## What's Changed * feat(cli): registry search + capabilities-manager skill refresh by @Minitour in https://github.com/infragate/capa/pull/117 **Full Changelog**: https://github.com/infragate/capa/compare/v1.9.11...v1.9.12","recordedAt":"2026-10-20T02:55:28.894Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v1.9.12"},{"id":"ship:80a6c38d-242d-4313-ad61-559eed027d15","kind":"release","at":"2026-06-13T21:53:50.000Z","precision":"EXACT","title":"v1.9.11","summary":"## What's Changed * feat(skills): add bootstrap skill for capifying existing projects by @Minitour in https://github.com/infragate/capa/pull/116 **Full Changelog**: https://github.com/infragate/capa/compare/v1.9.10...v1.9.11 ## What's Changed * feat(skills): add bootstrap skill for capifying existing projects by @Minitour in https://github.com/infragate/capa/pull/116 **Full Changelog**: https://github.com/infragate/capa/compare/v1.9.10...v1.9.11","recordedAt":"2026-10-20T02:55:28.907Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v1.9.11"},{"id":"ship:fce4f3a9-d478-4e9e-9099-461165adadfe","kind":"release","at":"2026-06-11T10:44:07.000Z","precision":"EXACT","title":"v1.9.10","summary":"## What's Changed * perf(install): parallelize tool validation and stream live progress by @Minitour in https://github.com/infragate/capa/pull/113 * Enhance tool validation with parallel processing and live progress by @Minitour in https://github.com/infragate/capa/pull/114 **Full Changelog**: https://github.com/infragate/capa/compare/v1.9.9...v1.9.10 ## What's Changed * perf(install): parallelize tool validation and stream live progress by @Minitour in https://github.com/infragate/capa/pull/113 * Enhance tool validation with parallel processing and live progress by @Minitour in https://github","recordedAt":"2026-10-20T02:55:28.918Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v1.9.10"},{"id":"ship:1f91b165-4151-4805-93c2-81e811d27b70","kind":"release","at":"2026-06-10T20:54:09.000Z","precision":"EXACT","title":"v1.9.9","summary":"## What's Changed * fix(shell): load MCP tool schemas lazily so `capa sh` never blocks on remote servers by @Minitour in https://github.com/infragate/capa/pull/106 * feat(rules): support installing rules from local files (closes #105) by @Minitour in https://github.com/infragate/capa/pull/107 * fix(hooks): reference local hook scripts by a portable relative path by @Minitour in https://github.com/infragate/capa/pull/109 * fix(git): non-interactive clones (no hang, #104) + blobless partial clone for speed (#91) by @Minitour in https://github.com/infragate/capa/pull/108 * Improve shell tool load","recordedAt":"2026-10-20T02:55:28.930Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v1.9.9"},{"id":"ship:35c4ac89-88f1-4761-9863-f420d82354e8","kind":"release","at":"2026-06-08T19:30:21.000Z","precision":"EXACT","title":"v1.9.8","summary":"## What's Changed * Fix LFS clones, Windows MCP visibility, and OpenCode config by @Minitour in https://github.com/infragate/capa/pull/103 **Full Changelog**: https://github.com/infragate/capa/compare/v1.9.7...v1.9.8 ## What's Changed * Fix LFS clones, Windows MCP windows, and OpenCode config by @Minitour in https://github.com/infragate/capa/pull/102 * Fix LFS clones, Windows MCP visibility, and OpenCode config by @Minitour in https://github.com/infragate/capa/pull/103 **Full Changelog**: https://github.com/infragate/capa/compare/v1.9.7...v1.9.8","recordedAt":"2026-10-20T02:55:28.942Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v1.9.8"},{"id":"ship:559c08d6-7dbf-4b65-b09d-fc4c5490bd6e","kind":"release","at":"2026-06-06T22:00:26.000Z","precision":"EXACT","title":"v1.9.7","summary":"## What's Changed * fix: preserve YAML comments/order in capa add (#93) and pointer cursor on buttons (#92) by @Minitour in https://github.com/infragate/capa/pull/96 * fix(plugins): command-based MCP servers from plugins expose no tools (#94) by @Minitour in https://github.com/infragate/capa/pull/97 * fix(install): Windows upgrade fails to replace running capa.exe (#19) by @Minitour in https://github.com/infragate/capa/pull/98 * Preserve YAML comments and order, fix button cursor on hover by @Minitour in https://github.com/infragate/capa/pull/99 **Full Changelog**: https://github.com/infragate","recordedAt":"2026-10-20T02:55:28.958Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v1.9.7"},{"id":"ship:5443b4ae-6727-4741-923d-7e5d2ee31f1f","kind":"release","at":"2026-06-01T17:22:00.000Z","precision":"EXACT","title":"v1.9.6","summary":"## What's Changed * Update develop by @Minitour in https://github.com/infragate/capa/pull/88 * chore(deps): bump commander from 14.0.3 to 15.0.0 in the production-deps group by @dependabot[bot] in https://github.com/infragate/capa/pull/87 * chore(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in https://github.com/infragate/capa/pull/86 * Updated brand by @Minitour in https://github.com/infragate/capa/pull/89 * Update dependencies and refresh branding assets by @Minitour in https://github.com/infragate/capa/pull/90 **Full Changelog**: https://github.com/infragate/capa/compare","recordedAt":"2026-10-20T02:55:28.974Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v1.9.6"},{"id":"ship:4ed06b92-23c6-4b91-bacb-46838578dfcc","kind":"release","at":"2026-05-30T02:03:48.000Z","precision":"EXACT","title":"v1.9.5","summary":"## What's Changed * fix(mcp-handler): don't gate tools/call on toolExposure: none by @Minitour in https://github.com/infragate/capa/pull/84 **Full Changelog**: https://github.com/infragate/capa/compare/v1.9.4...v1.9.5","recordedAt":"2026-10-20T02:55:28.991Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v1.9.5"},{"id":"ship:d3a164e2-ec2c-4611-b1ab-8ae07da5c8e9","kind":"release","at":"2026-05-30T01:30:35.000Z","precision":"EXACT","title":"v1.9.4","summary":"## What's Changed * fix(install): suppress 'not exposed to MCP' warning under toolExposure: none by @Minitour in https://github.com/infragate/capa/pull/82 * fix(server): stop SessionManager cleanup timer on dispose (fixes Windows CI) by @Minitour in https://github.com/infragate/capa/pull/83 **Full Changelog**: https://github.com/infragate/capa/compare/v1.9.3...v1.9.4","recordedAt":"2026-10-20T02:55:29.003Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v1.9.4"},{"id":"ship:059034b4-1266-40a7-bebb-23130fb691fe","kind":"release","at":"2026-05-29T23:58:21.000Z","precision":"EXACT","title":"v1.9.3","summary":"## What's Changed * fix(agents): only write provider-declared instructions files and clean them fully by @Minitour in https://github.com/infragate/capa/pull/79 * feat(tool-exposure): slim setup_tools, schema-on-error in call_tool, add 'none' mode by @Minitour in https://github.com/infragate/capa/pull/80 * Release v1.9.3: AGENTS.md provider gating + tool-exposure improvements by @Minitour in https://github.com/infragate/capa/pull/81 **Full Changelog**: https://github.com/infragate/capa/compare/v1.9.2...v1.9.3","recordedAt":"2026-10-20T02:55:29.019Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v1.9.3"},{"id":"ship:6d3eee1f-7acc-43ba-9dd7-f985b67d12bd","kind":"release","at":"2026-05-29T07:59:06.000Z","precision":"EXACT","title":"v1.9.2","summary":"## Highlights ### Declarative lifecycle hooks (#70, #72) Capa can now install and manage provider **lifecycle hooks** straight from `capabilities.yaml`. Hooks are declared once against a canonical event model and translated to each provider's native shape. - Unified `hooks:` schema with a 16-event canonical model mapped per provider. - Hook bodies sourced from `inline`, `remote` URL, `github` / `gitlab` repos, or `local` files. `local` command scripts are referenced in place (no copy); remote/repo sources are pinned by SHA-256 in `capabilities.lock`. - Capa only manages the hooks it creates (t","recordedAt":"2026-10-20T02:55:29.035Z","eventType":"GITHUB_RELEASE","verification":"PUBLICLY_VERIFIED","countsAsBuilding":false,"contextReason":"source:repo_not_corroborated","contextWords":"Recorded, not counted: it was read from a source HEY holds only as context, and that source says why under Sources.","source":"https://github.com/infragate/capa/releases/tag/v1.9.2"}],"totals":{"ships":31,"contractSource":0,"locks":0,"resumed":0,"marketIntegrity":0,"verification":0},"total":31,"truncated":false,"nextCursor":null,"disclaimer":"Public, source-backed activity HEY recorded. Still Building means verified activity through a tracked market drawdown — it is not a prediction, not a ranking by price, and not investment advice. Few projects meet Still Building or Under the Radar at any time; both are strict by design, and list responses carry the counts."}