Skip to content

CHANGELOG.md

Latest commit

 

History

History
98 lines (66 loc) · 3.58 KB

CHANGELOG.md

File metadata and controls

98 lines (66 loc) · 3.58 KB
Raw

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[0.3.0] - 2026-03-07

Breaking

  • --no-vault flag removed from pacer auth init — encrypted vault is now mandatory
  • pacer auth login now prompts for vault passphrase (creates vault if none exists)
  • Plaintext credential storage (config.env) is no longer offered as an option

Fixed

  • Regex fallback parser (parse_docket_regex) captured </h3> closing tag as part of case number — changed \S+ to [\w:\-\.]+ character class

Added

  • Full Encrypted Vault section in README covering AES-256-GCM architecture, vault file structure, operations table, and Scrypt tuning environment variables
  • Vault documentation added to SECURITY.md

Changed

  • README: vault.json shown in archive directory tree
  • README: all credential storage references updated to reflect vault-only model
  • SECURITY.md: removed plaintext opt-out language

[0.2.1] - 2026-03-07

Fixed

  • Removed redundant force-include in pyproject.toml that caused a duplicate court-lookup.json entry in the wheel, rejected by PyPI on upload

Changed

  • README: pacer auth init is now the documented first step (replaces auth login)
  • README: command aliases table corrected and expanded (cases, parties, find)
  • README: added pacer auth init, pacer auth code, and pacer parse text command docs
  • README: encrypted vault documented in Configuration section
  • CONTRIBUTING: fixed source path (src/pacer-cli/ → src/pacer_cli/) and release process

[0.2.0] - 2026-03-07

Changed

  • Package renamed from indepacer to pacer-cli for clarity
  • Config directory changed from ~/.config/indepacer/ to ~/.config/pacer-cli/

Added

  • Auth init wizard (pacer auth init) - Interactive setup with MFA validation, encrypted vault, and credential testing
  • TOTP code generator (pacer auth code) - Generate codes for manual PACER login or MFA removal
  • Encrypted credential vault - AES-256-GCM encryption with Scrypt KDF for secure credential storage
  • Inline TOTP implementation - Replaced pyotp dependency with stdlib-only RFC 6238 implementation
  • Security module - TLS hardening, rate limiting, audit logging
  • QA environment support - --qa flag for testing against PACER QA servers

Changed

  • pacer auth login now redirects to init wizard if no credentials exist
  • Vault passphrase prompted automatically when vault exists
  • Encrypted storage enabled by default in setup wizard (made mandatory in 0.3.0)
  • Scrypt parameters lowered (2^14) for broader compatibility, configurable via env vars

Fixed

  • QA TOTP fallback to production secret when QA secret not set
  • get_config_from_vault no longer leaks credentials to environment variables
  • time_step <= 0 validation in TOTP generation
  • Empty vault passphrase rejection (minimum 8 characters)
  • Cross-platform atomic file writes with os.replace()
  • Deprecated datetime.utcnow() calls replaced with timezone-aware versions
  • Test isolation with _env_file=None

Security

  • Removed leaked TOTP secrets from documentation
  • Added *secret*.txt, *key*.txt to gitignore
  • KDF parameters now stored in vault for future migration compatibility

[0.1.0] - 2024-12-01

Added

  • Initial release
  • PCL case and party search
  • Docket and document downloads
  • Local archive with hierarchical structure
  • Context-aware commands
  • Rich CLI with aliases