From 3fae3758c7e068ecd680e555c19f78ed28e11c40 Mon Sep 17 00:00:00 2001
From: Claudio <257189482+claudio-pi@users.noreply.github.com>
Date: Tue, 10 Feb 2026 19:11:22 -0600
Subject: [PATCH 1/2] Bump version to 1.3.0

---
 CHANGELOG.md | 33 +++++++++++++++++++++++++++++++++
 VERSION      |  2 +-
 2 files changed, 34 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index fcb48c1..7d5837c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,38 @@
 # Changelog
 
+## [1.3.0] - 2026-02-10
+
+### Added
+
+- Alexa voice integration via `/alexa` endpoint with session buffering and localized responses (#52)
+- Health check system monitoring: disk usage alerts, automatic log rotation, and backup freshness checks (#47)
+- System prompt injection via `--append-system-prompt` at runtime instead of copying to `~/.claudio/` (#50)
+
+### Changed
+
+- Typing indicator uses `record_voice` action for voice messages and refreshes every 4s (was 15s) (#57)
+- Typing indicator loop no longer caps at 15 minutes — runs while parent process lives (#57)
+- Preserve unmanaged env vars (e.g. `HASS_TOKEN`, `ALEXA_SKILL_ID`) across `claudio_save_env` calls (#53)
+- Export `CLAUDIO_DB_FILE`, `CLAUDIO_PATH`, and `MEMORY_ENABLED` for subprocess access (#49)
+- Telegram message sending retries without `reply_to_message_id` when reply fails (#52)
+
+### Removed
+
+- Orphan process detection from health check — no longer needed with native Claude Task tools and `KillMode=mixed` (#55)
+
+### Fixed
+
+- Silent backup failures: detect unmounted drives before rsync and in health check freshness monitoring (#54)
+- Webhook handler timeout (600s) restored — accidentally removed, causing potential indefinite thread blocking (#52)
+- Typing indicator curl calls now have `--connect-timeout 5 --max-time 10` to prevent hung background processes (#57)
+- Token usage not persisted to SQLite because `CLAUDIO_DB_FILE` was not exported (#49)
+- `ELEVENLABS_MODEL` and `MAX_HISTORY_LINES` not persisted across restarts (#46)
+
+### Security
+
+- Alexa request authentication: X.509 certificate chain validation, SHA-256 signature verification, 150s timestamp replay window, skill ID check (#52)
+- Alexa endpoint fails closed when `cryptography` library is unavailable (#52)
+
 ## [1.2.2] - 2026-02-08
 
 ### Fixed
diff --git a/VERSION b/VERSION
index 23aa839..f0bb29e 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-1.2.2
+1.3.0

From 26cc2db7da84e2f3529f0da787fd45a023050f25 Mon Sep 17 00:00:00 2001
From: Claudio <257189482+claudio-pi@users.noreply.github.com>
Date: Tue, 10 Feb 2026 19:21:12 -0600
Subject: [PATCH 2/2] Move system prompt injection to Changed section

Per Gemini review: --append-system-prompt changes an existing mechanism
(how the system prompt is handled) rather than adding a new feature.
---
 CHANGELOG.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7d5837c..fe80cd2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,10 +6,10 @@
 
 - Alexa voice integration via `/alexa` endpoint with session buffering and localized responses (#52)
 - Health check system monitoring: disk usage alerts, automatic log rotation, and backup freshness checks (#47)
-- System prompt injection via `--append-system-prompt` at runtime instead of copying to `~/.claudio/` (#50)
 
 ### Changed
 
+- System prompt injection via `--append-system-prompt` at runtime instead of copying to `~/.claudio/` (#50)
 - Typing indicator uses `record_voice` action for voice messages and refreshes every 4s (was 15s) (#57)
 - Typing indicator loop no longer caps at 15 minutes — runs while parent process lives (#57)
 - Preserve unmanaged env vars (e.g. `HASS_TOKEN`, `ALEXA_SKILL_ID`) across `claudio_save_env` calls (#53)