CHANGELOG.md

Changelog

3.0.1 (2026-08-10)

Bug Fixes

• release: stop gating npm discovery on redundant npx round-trip (b710e0f)
• release: stop gating npm discovery on redundant npx round-trip (95c3c84)

3.0.0 (2026-08-09)

⚠ BREAKING CHANGES

• mcp: corpus.search_code_batch is now corpus.search_code, corpus.list_pull_requests is now corpus.search_pull_requests, github.sync_ci_failures is now github.sync_pull_request_ci, and prescriptive composite workflow tools are no longer advertised.

Features

• add explainable offline Contribution Radar (#7) (ebc561c)
• add thread research briefs (#8) (82bafec)
• analysis: add versioned similarity and bounded ranking (4769339)
• app,github,cli: add structured logging, circuit breaker, and trace IDs (bb3cbfc)
• buflimit: extract bounded output buffer and adopt in git runners (ee3d848)
• ci,dx: add golangci-lint, pre-commit hooks, CI hardening, and agent readiness improvements (0e70dd9)
• ci: add release-please, gotestsum, integration tests, and harden repo (21e0f34)
• commitplan: add hunk-aware semantic commit planning (8635b00)
• commitplan: expose read-only semantic planning (56f01ef)
• commitplan: inventory and verify workspace changes (d45ed47)
• concern: add a repo-local seed concern ledger (12400cc)
• concern: add local concern ledger (689f689)
• concern: expose local concern workflows (bdfb5e4)
• contribution: add evidence-backed draft handoff (c3ce58c)
• contribution: preserve proof-aware draft artifacts (3cfed98)
• core: add scalable contribution research primitives (073d66e)
• corpus,app: avoid materializing threads for repository counts (3050001)
• corpus,cli,app: bounded list results and similarity windows (2b5933a)
• corpus: add first-class actor projections (b8441f3)
• corpus: add pull-request feedback projections (d1a5c10)
• corpus: bind offline reads to corpus revisions (6e75235)
• corpus: enforce schema lineage hard cutover (471ff51)
• corpus: enforce schema lineage hard cutover (e8df231)
• corpus: persist immutable snapshot and index identities (d1f41e0)
• corpus: separate lifecycle ownership and recovery (2bdeec9)
• corpus: separate lifecycle ownership and recovery (35fec66)
• github: add bounded actor acquisition adapters (e3ab595)
• index: expose revision-bound code-index artifacts and receipt fixture (1b17bea)
• manifest: export digest-bound contribution evidence (3854212)
• manifest: export digest-bound contribution evidence (5c8cd96)
• manifest: expose CLI and MCP export workflows (d6ae1c9)
• mcp,codex: add MCP routing instruction and Codex discovery skill (293c4fd)
• mcp: add canonical workflow artifact resources (4bcdb77)
• mcp: add contribution preflight (96dba80)
• mcp: add contribution preflight for authored pull requests (2eb11ee)
• mcp: add corpus-backed GitHub search and source artifacts (43cbd8f)
• mcp: add corpus-backed GitHub search and source artifacts (ff6e440)
• mcp: add live repository search (3c49d9c)
• mcp: add scalable contribution research workflows (104d026)
• mcp: add scalable research and portfolio workflows (0dd12c6)
• mcp: add typed recovery and coverage workflows (b37336f)
• mcp: adopt typed recovery and facet resources (8b96251)
• mcp: batch repository research and expose recovery guidance (434fd26)
• mcp: bind offline workflows to corpus revisions (d40f7e9)
• mcp: complete scalable PR health contracts (3944e77)
• mcp: complete typed recovery and read-only fix-pattern contracts (3092e8f)
• mcp: consolidate repository research reads (badb5e8)
• mcp: expose atomic actor tools (32043b4)
• mcp: expose pull-request feedback indexing and search (3fa4235)
• mcp: improve agent tool ergonomics (331ab4e)
• mcp: index and search repository pull-request feedback (02616c8)
• mcp: redesign contribution workflow operations (76b94fb)
• onboarding: add npm setup and release flow (5ad6c05)
• onboarding: add npm setup and release flow (bd96abd)
• preflight: detect stale contributor forks (b7adb53)
• preflight: detect stale contributor forks (8f05963)
• radar: gate candidates on contribution eligibility (c8aa248)
• radar: gate candidates on contribution eligibility (9d38db8)
• radar: unify related work evidence (7998117)
• radar: unify related work evidence (f115e27)
• redesign contribution workflow operations (799e1a6)
• release: publish MCP Registry metadata (3f4300e)
• research: bind analysis and evidence to provenance (b73d284)
• setup: configure detected Devin clients (fe891fa)
• setup: improve interactive onboarding (c5dee0e)
• setup: make GitContribute discoverable to Codex (bbf9f1b)
• setup: redesign onboarding journey (cfa4cf3)
• start investigations from threads (#9) (ac1a0fc)
• tui: add contribution research workflow (5aa5d7e)
• validation: add repeatable process telemetry (04d2e72)
• validation: add repeatable runs with process telemetry (8db0673)
• validation: add structured and source-bound evidence workflows (ca59e8d)
• validation: bind runs to workspace snapshots (f91aaf5)
• validation: expose repeatable validation workflows (1b71018)
• validation: import external execution receipts (6fc9341)
• validation: verify expected run observations (e9181a6)
• validation: verify expected run observations (c34e971)
• workflow: derive issue contribution dispositions (c240571)
• workflow: prepare evidence from exact issue sets (c89bc83)
• workflow: prepare exact issue-set evidence (ee1f97c)
• workspace: adopt existing local worktrees safely (9faac44)
• workspace: expose external worktree adoption (891f463)
• workspace: model external worktree adoption (5649f1d)

Bug Fixes

• acquire: shorten temporary mirror paths (30b303d)
• actors: preserve identity and snapshot integrity (8bc7ca5)
• adapters: harden external boundary failures (dca71ee)
• app,corpus: cross-process durable job ownership with SQLite lease (7b8b3f0)
• app: derive radar duplicate cluster cap from projection metadata (d980df6)
• app: preserve evidence and provenance errors (33fa0f4)
• app: preserve evidence and provenance errors (9edcad7)
• app: prevent heartbeat write bursts (c2769da)
• app: prevent heartbeat write bursts (be8967b)
• app: remove stale reader import (848af83)
• app: report requested thread count in sync batch results (02c45d0)
• app: validate DeepWiki bounds before provider reads (e89d788)
• app: wire bounded retrieval workflows (45c51d8)
• ci: harden corpus lifecycle validation (76fe2df)
• ci: keep setup files bounded and version tests (fe1fafe)
• ci: pass package list to gotestsum (fd161be)
• ci: ratchet existing quality debt (d7c1a57)
• ci: satisfy Go lint checks (ba691d6)
• ci: satisfy lint and file size checks (9b4306a)
• ci: split oversized Go files (e54d108)
• ci: split oversized sync files (3357290)
• cli,app: avoid growing oversized Go files (6c660a0)
• cli,service,acquire,mcp: default-ref and optional workspace input (74add00)
• cli: guard upgrade confirmation output (1df35b7)
• cli: guide blocked corpus migration (be56c9b)
• cli: launch TUI on bare invocation (6b389da)
• cli: validate repository import boundaries (170b2fe)
• clusters: report unchanged projection counts (d116721)
• clusters: report unchanged projection counts (aff1260)
• config: accept retired output settings (1ed08ae)
• config: enforce private configuration directories (49299bb)
• config: migrate retired output settings (5099e85)
• context: bound lifecycle and cleanup work (b04ecf4)
• context: bound lifecycle and cleanup work (170460d)
• context: report reconciliation cleanup errors (9f646bd)
• contribution: satisfy draft validation lint (9cf46a0)
• control: make radar bounds explicit (f00f6a5)
• control: make Radar bounds explicit (6e925cc)
• corpus: bind snapshot writes to committed revisions (fbdf05a)
• corpus: close portfolio rows before snapshot commit (1ad6433)
• corpus: close snapshot reads safely (35de218)
• corpus: expose precedent history recovery (d3a8e9d)
• corpus: pass context and handle error in reconcile retry cleanup (9e66f15)
• corpus: preserve authoritative actor projections (835f4ab)
• corpus: preserve connection busy timeout during job reconcile (a10cdc8)
• corpus: preserve pull-request feedback coverage (925874b)
• corpus: preserve unknown PR merge state (e75c22b)
• corpus: preserve unknown PR merge state (c1a7502)
• corpus: rely on connection busy_timeout for reconcile BEGIN IMMEDIATE (46fc8d3)
• corpus: retry BEGIN IMMEDIATE while preserving busy timeout (8b81861)
• corpus: retry reconcile lock acquisition (da42566)
• corpus: support Darwin disk stat types (fbae94d)
• corpus: surface migration and metadata errors (8f49af6)
• corpus: surface migration and metadata errors (e98892e)
• corpus: unify ranked retrieval projections (9e7bfc9)
• critical bug audit - 5 root-cause fixes with regression tests (092cc99)
• deepwiki: classify provider error text as unavailable (1f593bb)
• discovery: prevent zero-progress split emitting duplicate windows (cadc77e)
• explain removed compatibility inputs (14a8856)
• feedback: preserve comment identity and require explicit routing (ca0b7ca)
• github: bind CI snapshots to PR revisions (2d561e0)
• github: capture selected API version provenance (8a2f9e5)
• github: preserve transport for CI log downloads (b9c67bc)
• github: retry replayable reads safely (c8e4266)
• github: stop fabricating Total in REST feedback pagination (87a96ad)
• harden setup, MCP, and external boundary contracts (fc020d5)
• harden validation and adapter boundaries (2ed471d)
• health: preserve unknown coverage semantics (f154640)
• health: preserve unknown coverage semantics (1a6cfef)
• hydration: refresh exact thread headers (f152a42)
• jobs: bound concurrent execution (180128e)
• jobs: surface transition and batch errors (8028122)
• jobs: surface transition and batch errors (8034d87)
• lint: remove stale workspace resolver (45e6043)
• mcp: accept exact thread sync selectors (9b275e6)
• mcp: accept exact thread sync selectors (447ea29)
• mcp: add typed recovery for incomplete reads (3823689)
• mcp: avoid recovery encoding overflow (1955ee1)
• mcp: complete revision-bound workflow handoffs (5f83881)
• mcp: disambiguate sync and hydration routing (a4d6ef4)
• mcp: enforce bounded scalable operations (e3213ca)
• mcp: enforce workflow input boundaries (faebca9)
• mcp: expose executable coverage recovery (4f82564)
• mcp: keep private runtime registration aligned (1556cbe)
• mcp: preserve bounded portfolio handoffs (105c7f7)
• mcp: provide typed recovery for incomplete reads (b6e6b78)
• mcp: remove obsolete facet aliases (f883f40)
• mcp: return actionable validation errors (5da4188)
• mcp: return schema registration errors (8f863f6)
• mcp: return schema registration errors (b9852d0)
• mcp: satisfy lint in recovery and facet paths (20e4add)
• mcp: self-seed exact pull request feedback sync (281ec17)
• mcp: synchronize catalog and feedback routing (2ed99ea)
• metadata: inspect existing corpus schema (2f3bd53)
• metadata: inspect existing corpus schema (d95f5e4)
• npm: mark launcher executable (f3bed35)
• platform: preserve atomic replacement and process ownership (b4abd3b)
• propagate MCP job progress errors (729595d)
• radar: align CLI with bounded population (c4ad6cb)
• radar: align CLI with bounded population (d3e042e)
• release: allow manual tag publishing (96e8162)
• release: allow manual tag publishing (92d6418)
• release: manage npm version in release PRs (db3a3fe)
• release: pass NODE_AUTH_TOKEN to npm publish step (cfba588)
• release: resolve npm smoke tarball path (6e98d13)
• release: skip existing assets during tag recovery (bdb6e23)
• release: skip existing assets during tag recovery (64902a2)
• release: update secure toolchain baseline (41acdbd)
• release: use npm trusted publishing (73e6348)
• release: use npm trusted publishing (b32a535)
• release: use trusted-publishing npm client (5a40b9e)
• retry reconciliation during SQLite contention (8e1c876)
• satisfy shutdown lint check (5ffd021)
• search: align corpus ranking and MCP retrieval contracts (900a55e)
• search: index hydrated discussion evidence (3ef4ed3)
• search: index hydrated discussion evidence (d6c4da2)
• search: keep explanations aligned with indexed evidence (0335329)
• search: preserve query and retry contracts (ceece44)
• search: report unknown merge-state matches (a5f6509)
• search: surface unknown merge-state matches (7577bae)
• security: constrain GitHub URL matches (615c625)
• security: reject credential-bearing git remotes (77fe530)
• security: reject credential-bearing Git remotes (1d1484c)
• seeds: separate outcomes from issue context (cb0044c)
• seeds: separate outcomes from issue context (cd6cddf)
• setup: default final consent to apply (996346e)
• setup: edit Codex configuration structurally (2a9a1ff)
• setup: honor redirected Devin config roots (5a9241a)
• setup: keep local verification environment-independent (817d847)
• setup: report failed verification checks (b377730)
• setup: resolve Devin config paths by platform (2908971)
• setup: restore registrations on Windows (4c2060b)
• setup: satisfy lint and preserve dry-run output (7de5d16)
• setup: surface corpus blockers before side effects (dc943e0)
• setup: use direct npx package launcher (3fda85e)
• setup: verify applied installation state (24e976e)
• sync: bound GitHub request fanout (5ee0ef0)
• sync: bound GitHub request fanout (7d60e04)
• sync: show request plan before reads (a891645)
• sync: show request plan before reads (6321c20)
• test: close batch sync services (7e1ba9d)
• test: make platform assertions portable (0bd2230)
• tests: compare canonical worktree paths (e98ccbd)
• tighten snapshot token boundaries and eval timing (4b4c45d)
• upgrade: clarify that the upgrade takes effect after an MCP client restart (f4cdef2)
• upgrade: guard empty npm command arguments (3b5104f)
• upgrade: retain npx executable for activation (39218f7)
• workflows: close review race and batch job gaps (cd08162)
• workflows: preserve complete PR snapshots (fbf0e02)
• workflows: preserve effective batch semantics (3408267)
• workspace: clean up leaked worktree on concurrent Create race (dd5661c)
• workspace: preserve concurrent worktrees and merge conflicts (531756d)
• workspace: propagate context cancellation in git resolution paths (b183851)
• workspace: remove false-positive merge conflict from file content (6682278)
• workspace: resolve omitted refs from repository defaults (615e94f)

Performance Improvements

• bound indexing, jobs, search, and clustering (9c96943)
• clustering: prune impossible duplicate pairs (047d6a7)
• codeindex: batch blob reads and reuse snapshots (d78acd7)
• jobs: bound execution and batch cancellations (c70dc60)
• mcp: reduce payloads and batch corpus reads (eaa944a)
• search: share one snapshot for pages and counts (ce1fea8)

[2.0.0] (2026-08-09)

⚠ BREAKING CHANGES

• mcp: github.search_threads and github.read_source_files now require repository: {owner, repo}. Flat owner and repo request fields are no longer accepted. See the v2 MCP migration guide.

Features

• mcp: add optional repository scope to authored pull-request portfolios.

Bug Fixes

• mcp: return host-neutral native resource links for durable artifacts.

1.1.0 (2026-08-08)

Features

• preflight: detect stale contributor forks (b7adb53)
• preflight: detect stale contributor forks (8f05963)
• release: publish MCP Registry metadata (3f4300e)
• validation: add structured and source-bound evidence workflows (ca59e8d)

Bug Fixes

• cli: guard upgrade confirmation output (1df35b7)
• critical bug audit - 5 root-cause fixes with regression tests (092cc99)
• discovery: prevent zero-progress split emitting duplicate windows (cadc77e)
• github: stop fabricating Total in REST feedback pagination (87a96ad)
• mcp: preserve bounded portfolio handoffs (105c7f7)
• workspace: clean up leaked worktree on concurrent Create race (dd5661c)
• workspace: preserve concurrent worktrees and merge conflicts (531756d)
• workspace: propagate context cancellation in git resolution paths (b183851)
• workspace: remove false-positive merge conflict from file content (6682278)

1.0.0 (2026-08-03)

⚠ BREAKING CHANGES

• mcp: corpus.search_code_batch is now corpus.search_code, corpus.list_pull_requests is now corpus.search_pull_requests, github.sync_ci_failures is now github.sync_pull_request_ci, and prescriptive composite workflow tools are no longer advertised.

Features

• corpus: add first-class actor projections (b8441f3)
• github: add bounded actor acquisition adapters (e3ab595)
• mcp: expose atomic actor tools (32043b4)

Bug Fixes

• actors: preserve identity and snapshot integrity (8bc7ca5)
• corpus: preserve authoritative actor projections (835f4ab)
• feedback: preserve comment identity and require explicit routing (ca0b7ca)
• mcp: keep private runtime registration aligned (1556cbe)
• mcp: synchronize catalog and feedback routing (2ed99ea)

0.19.0 (2026-08-01)

Features

• corpus: add pull-request feedback projections (d1a5c10)
• mcp: add contribution preflight (96dba80)
• mcp: add contribution preflight for authored pull requests (2eb11ee)
• mcp: expose pull-request feedback indexing and search (3fa4235)
• mcp: index and search repository pull-request feedback (02616c8)

Bug Fixes

• corpus: expose precedent history recovery (d3a8e9d)
• corpus: preserve pull-request feedback coverage (925874b)
• mcp: add typed recovery for incomplete reads (3823689)
• mcp: provide typed recovery for incomplete reads (b6e6b78)
• tests: compare canonical worktree paths (e98ccbd)
• upgrade: retain npx executable for activation (39218f7)

0.18.0 (2026-08-01)

Features

• mcp: add corpus-backed GitHub search and source artifacts (43cbd8f)
• mcp: add corpus-backed GitHub search and source artifacts (ff6e440)

Bug Fixes

• upgrade: guard empty npm command arguments (3b5104f)

0.17.0 (2026-07-31)

Features

• corpus: bind offline reads to corpus revisions (6e75235)
• corpus: persist immutable snapshot and index identities (d1f41e0)
• index: expose revision-bound code-index artifacts and receipt fixture (1b17bea)
• mcp: add typed recovery and coverage workflows (b37336f)
• mcp: adopt typed recovery and facet resources (8b96251)
• mcp: bind offline workflows to corpus revisions (d40f7e9)
• mcp: complete typed recovery and read-only fix-pattern contracts (3092e8f)
• research: bind analysis and evidence to provenance (b73d284)

Bug Fixes

• app: remove stale reader import (848af83)
• cli: validate repository import boundaries (170b2fe)
• config: enforce private configuration directories (49299bb)
• corpus: bind snapshot writes to committed revisions (fbdf05a)
• mcp: complete revision-bound workflow handoffs (5f83881)
• mcp: expose executable coverage recovery (4f82564)
• mcp: satisfy lint in recovery and facet paths (20e4add)
• mcp: self-seed exact pull request feedback sync (281ec17)
• release: allow manual tag publishing (96e8162)
• release: allow manual tag publishing (92d6418)
• release: skip existing assets during tag recovery (bdb6e23)
• release: skip existing assets during tag recovery (64902a2)
• release: use npm trusted publishing (73e6348)
• release: use npm trusted publishing (b32a535)
• tighten snapshot token boundaries and eval timing (4b4c45d)

0.16.0 (2026-07-30)

Features

• mcp: redesign contribution workflow operations (76b94fb)
• redesign contribution workflow operations (799e1a6)
• setup: configure detected Devin clients (fe891fa)

Bug Fixes

• app: prevent heartbeat write bursts (c2769da)
• app: prevent heartbeat write bursts (be8967b)
• github: bind CI snapshots to PR revisions (2d561e0)
• github: preserve transport for CI log downloads (b9c67bc)
• mcp: enforce workflow input boundaries (faebca9)
• release: pass NODE_AUTH_TOKEN to npm publish step (cfba588)
• setup: honor redirected Devin config roots (5a9241a)
• setup: resolve Devin config paths by platform (2908971)
• upgrade: clarify that the upgrade takes effect after an MCP client restart (f4cdef2)
• workflows: close review race and batch job gaps (cd08162)
• workflows: preserve complete PR snapshots (fbf0e02)
• workflows: preserve effective batch semantics (3408267)

0.15.0 (2026-07-29)

Features

• mcp: add canonical workflow artifact resources (4bcdb77)

0.14.0 (2026-07-29)

Features

• contribution: add evidence-backed draft handoff (c3ce58c)
• contribution: preserve proof-aware draft artifacts (3cfed98)
• tui: add contribution research workflow (5aa5d7e)
• validation: import external execution receipts (6fc9341)
• workflow: derive issue contribution dispositions (c240571)

Bug Fixes

• config: accept retired output settings (1ed08ae)
• config: migrate retired output settings (5099e85)
• contribution: satisfy draft validation lint (9cf46a0)
• github: capture selected API version provenance (8a2f9e5)

0.13.0 (2026-07-28)

Features

• ci: add release-please, gotestsum, integration tests, and harden repo (21e0f34)
• mcp: batch repository research and expose recovery guidance (434fd26)
• mcp: consolidate repository research reads (badb5e8)

Bug Fixes

• acquire: shorten temporary mirror paths (30b303d)
• ci: pass package list to gotestsum (fd161be)
• ci: split oversized sync files (3357290)
• github: retry replayable reads safely (c8e4266)
• hydration: refresh exact thread headers (f152a42)
• jobs: bound concurrent execution (180128e)
• mcp: remove obsolete facet aliases (f883f40)
• mcp: return actionable validation errors (5da4188)
• npm: mark launcher executable (f3bed35)
• test: close batch sync services (7e1ba9d)

Performance Improvements

• bound indexing, jobs, search, and clustering (9c96943)
• clustering: prune impossible duplicate pairs (047d6a7)
• codeindex: batch blob reads and reuse snapshots (d78acd7)
• jobs: bound execution and batch cancellations (c70dc60)
• mcp: reduce payloads and batch corpus reads (eaa944a)
• search: share one snapshot for pages and counts (ce1fea8)