fj/CHANGELOG.md

Changelog

All notable changes will be recorded here. The format follows Keep a Changelog. Versions follow Semantic Versioning.

[Unreleased]

Added (distribution + open-source ready)

• LICENSE (MIT) at the repo root. Cargo.toml had always declared MIT; the file was just missing.
• .forgejo/workflows/release.yml: on v* tags, builds for darwin-aarch64, darwin-x86_64, linux-x86_64; uploads tarballs, SHA256SUMS, and a pre-rendered fj.rb to the Forgejo release.
• Homebrew formula template at dist/homebrew/fj.rb.tmpl and scripts/render-homebrew-formula.sh to fill SHA256s post-release. Publishes into the existing rasterandstate/homebrew-tap.
• .forgejo/issue_template/{bug,feature,api-gap}.md and .forgejo/pull_request_template.md to keep triage cheap.
• scripts/record-demo.sh + scripts/_demo-session.sh to record an asciinema demo; README has a placeholder embed for the v0.1.0 cast.
• docs/compatibility.md: tested Forgejo versions, caveats for older Gitea, and Forgejo-only endpoints.
• One-shot version probe during fj auth login that warns when the server reports a pre-7.x version (with tests for the parser).

Added (agent-focused Forgejo gaps)

• fj issue edit-comment / delete-comment. Lets an agent (or you) fix or remove a wrong comment after the fact.
• fj search code "..." (and -R owner/name to scope to one repo). Powered by Forgejo's /repos/search/code endpoint.
• fj pr request-review N user1 user2,user3 and fj pr unrequest-review N user1. Distinct from pr review, which submits your own review.
• fj repo watch / unwatch / star / unstar / starred.
• fj milestone {list,view,create,edit,close,reopen,delete,assign}. Includes fj milestone assign N --milestone ID|none to attach an issue or PR to a milestone.

Added (UX + stability)

• --json-fields field1,field2 global flag. gh-style projection on top of any --json output, with dotted-path support (--json-fields owner.login,id).
• 429 / Retry-After honored in the retry loop with a 30 s cap. Wiremock test added.
• did you mean suggestions on typo'd subcommands via clap's suggestions feature.
• fj auth token and fj auth status --show-token now refuse to write to a TTY (use --force to override). Avoids accidental shoulder- surfing or capture in shell history.
• tokio::signal::ctrl_c() race in cli::run so the pager guard drops cleanly on SIGINT.
• 10 wiremock-backed HTTP client integration tests covering retry behavior (5xx, 429), header forwarding, pagination, and panic-free error paths.
• Client::for_base_url test constructor pointing at an arbitrary URL.
• .forgejo/workflows/ci.yml runs the same gate as the pre-push hook on every push and PR.

Added (docs)

• SECURITY.md covering threat model, known sharp edges, and reporting.
• docs/gh-to-fj.md — complete command-by-command mapping.
• docs/faq.md — common questions about tokens, hosts, debug, scripting, plugins.

Changed

• Trimmed dependencies (no more indicatif, futures-util, is-terminal, textwrap, tempfile in prod). Dropped reqwest features we don't use (stream, brotli). Release profile uses lto = "fat" and panic = "abort".
• HTTP retry loop builds the request once and clones via reqwest::Request::try_clone per attempt.
• Binary size: 5.94 MB → 4.15 MB stripped (-30%).

Fixed

• Shell injection in fj auth setup-git. The hostname now must match a strict DNS pattern before being interpolated into the credential-helper string, and we call git config directly with separate args instead of going through sh -c.
• Pager won't compile on Windows. The libc-based dup2 redirect now lives behind #[cfg(unix)]; non-Unix gets a no-op stub that returns None from maybe_start.
• Removed the unsafe std::env::set_var("FJ_NO_PAGER") from dispatch. --no-pager is now threaded into pager::maybe_start(force_disabled).
• Replaced the panicking .expect("token contains invalid header chars") in auth_headers with a typed error.

0.1.0 — 2026-05-13

Initial release. Multi-host Forgejo CLI with feature parity to gh across the surface Forgejo exposes. Commands:

• auth: login, status, logout, list, switch, token, refresh, setup-git
• repo: list, view, clone, create, fork, sync, edit, rename, archive, unarchive, delete, branches, topics, mirror, mirror-sync
• issue: list, view, create, edit, close, reopen, comment, develop
• pr: list, view, create, edit, diff, commits, files, checks, ready, review, status, checkout, merge, close, reopen
• release: list, view, create, edit, delete, upload, download
• label, run, secret, variable, search, browse, status, org, ssh-key, gpg-key, alias, config, protect, hook, extension, gist, api, completion, man

Other highlights:

• Repo auto-detection from upstream / origin git remote.
• --web flag on all list/view subcommands.
• $EDITOR integration for body inputs.
• fj api with -H, -X, -f, -F, --paginate, --include, --silent, --jq (dot-paths, [N]/[-N], pipes).
• --debug / FJ_DEBUG request logging.
• Tokens in the OS keychain.
• Pager via dup2 redirect to $FJ_PAGER / $PAGER / less -FRX.
• Pre-push hook running fmt, clippy -D warnings, tests, and release build before any push. Live API smoke gated on FJ_E2E=1.