# Changelog

## Score

- CAI 71 → 37 (-33.3)
- Rubric changed (rubric-2026.08.18 → rubric-2026.08.15) — scores are not directly comparable.

## Lenses

- Code Health 81 → 65 (-16.2)
- Architecture 97 → 69 (-27.7)
- Maturity 64 → 57 (-7.6)
- Readiness 79 → 24 (-55.6)
- Security 67 → 38 (-28.4)

## Resolved (114)

- AgentFsm::handle (cognitive 58) (crates/atuin-ai/src/fsm/mod.rs)
- AgentFsm::handle (cyclomatic 61) (crates/atuin-ai/src/fsm/mod.rs)
- AiApp::execute_tool (cognitive 23) (crates/atuin-ai/src/tui/app.rs)
- AiApp::execute_tool (cyclomatic 20) (crates/atuin-ai/src/tui/app.rs)
- AiApp::handle_fsm (cognitive 33) (crates/atuin-ai/src/tui/app.rs)
- AiApp::handle_fsm (cyclomatic 29) (crates/atuin-ai/src/tui/app.rs)
- AiApp::keymap (cognitive 16) (crates/atuin-ai/src/tui/app.rs)
- AiApp::update (cognitive 19) (crates/atuin-ai/src/tui/app.rs)
- AiApp::update (cyclomatic 29) (crates/atuin-ai/src/tui/app.rs)
- Atom::new_inner (cognitive 53) (crates/atuin-nucleo/matcher/src/pattern.rs)
- Atom::new_inner (cyclomatic 23) (crates/atuin-nucleo/matcher/src/pattern.rs)
- Change coupling: api.rs ↔ models.rs (crates/atuin-domain/src/api.rs)
- Change coupling: api_client.rs ↔ models.rs (crates/atuin-client/src/api_client.rs)
- Change coupling: bash.rs ↔ zsh.rs (crates/atuin-client/src/import/bash.rs)
- Change coupling: client.rs ↔ server.rs (crates/atuin-daemon/src/client.rs)
- Change coupling: inline.rs ↔ mod.rs (crates/atuin-ai/src/commands/inline.rs)
- Change coupling: lib.rs ↔ wrappers.rs (crates/atuin-server-database/src/lib.rs)
- Change coupling: state.rs ↔ mod.rs (crates/atuin-ai/src/tui/state.rs)
- Change coupling: stream.rs ↔ mod.rs (crates/atuin-ai/src/stream.rs)
- Change coupling: stream.rs ↔ state.rs (crates/atuin-ai/src/stream.rs)
- …and 94 more

## New (32)

- Dimension evaluation failed
- High IaC: KSV-0118 (k8s/atuin.yaml)
- Low IaC: KSV-0004 (k8s/atuin.yaml)
- Low IaC: KSV-0020 (k8s/atuin.yaml)
- Low IaC: KSV-0021 (k8s/atuin.yaml)
- Low IaC: KSV-0030 (k8s/atuin.yaml)
- Low IaC: KSV-0106 (k8s/atuin.yaml)
- No artifact signing
- No automated tests
- No tests found
- Rotate the exposed credentials — git history can't be un-committed
- Secret: github-app-token (crates/atuin-client/src/secrets.rs)
- Secret: github-fine-grained-pat (atuin-client/src/secrets.rs)
- Secret: github-fine-grained-pat (crates/atuin-client/src/secrets.rs)
- Secret: github-oauth (crates/atuin-client/src/secrets.rs)
- Secret: github-pat (atuin-client/src/secrets.rs)
- Secret: github-pat (crates/atuin-client/src/secrets.rs)
- Secret: github-refresh-token (crates/atuin-client/src/secrets.rs)
- Secret: gitlab-pat (crates/atuin-client/src/secrets.rs)
- Secret: npm-access-token (crates/atuin-client/src/secrets.rs)
- …and 12 more

## Changes since last survey

- 20 commits — 16 feature/other, 4 fixes

## By area

- (root) — 10 commits
- crates/atuin — 6 commits
- docs/docs — 2 commits
- crates/atuin-client — 1 commit
- crates/atuin-lab-share — 1 commit

## Notable commits

- fix: fix(docs): don't say `enter_accept` defaults to true in example config.toml (#3865)
- fix: fix(nix): add an RPATH for OpenSSL so the built binary runs (#3852)
- fix: fix(search): prepare daemon search index in shell init scripts (#3864)
- fix: fix(zsh): don't clobber RPS1 when wrapping the prompt for OSC 133 (#3861)
- change: chore(release): prepare for release 18.19.0 (#3847)
- change: chore(release): prepare for release 18.20.0-beta.1
- change: chore(release): prepare for release 18.20.0-beta.2
- change: chore: add profiling to the app (#3853)
- change: chore: hide --active sharing (#3846)
- change: docs: clarify key binding snippets belong in shell startup file (#3837)
- change: docs: mention RustRover in IDE integration guidance (#3834)
- change: feat(lab): experimental `atuin lab share`
- change: feat: add agent hooks for opencode (#3844)
- change: refactor(deps): bump itertools from 0.14.0 to 0.15.0 (#3838)
- change: refactor(deps): bump pulldown-cmark from 0.13.3 to 0.13.4 (#3840)
- change: refactor(deps): bump strum_macros from 0.27.2 to 0.28.0 (#3841)
- change: refactor(deps): bump thiserror from 2.0.18 to 2.0.19 (#3839)
- change: refactor(deps): bump tonic-types from 0.14.5 to 0.14.6 (#3842)
- change: refactor(encryption): Move encryption into atuin-common. (#3863)
- change: refactor(encryption): introduce PasetoV4Key newtype for the encryption key (#3860)