# Changelog

All notable changes to GSD are documented in this file.

Format based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).

## [Unreleased]

## [2.80.0] - 2026-05-04

### Added
- **gsd**: make uok contracts db authoritative
- **context-mode**: fully wire auto-run context mode

### Fixed
- **post-exec**: tighten explicit extension fallback and +types guard
- **post-exec**: handle dotted module stems and ignore React Router +types imports
- **gsd**: recover planned slices after artifact writes
- **auto**: emit stopped lifecycle event on recovery stop
- **gsd-extension**: address remaining CodeRabbit auto seam feedback
- **gsd-extension**: address auto orchestration review findings
- **gsd-extension**: type pauseAuto error context in loop deps
- **shared**: preserve submitted interview answers on abort
- **gsd-extension**: type pauseAuto error context in loop deps
- **gsd-extension**: preserve cancellation context for auto-mode pauses
- **mcp-server**: update gsd_summary_save PROJECT test fixture for R3a contract
- **gsd**: address PR5279 review — basePath threading + cache invalidation + Gate 1a test rigor
- **gsd**: close depth-verification gate workflow regressions
- **gsd**: resolve plan-slice artifacts case-insensitively
- **gsd**: guard onTurnResult phaseResults access with Array.isArray
- **gsd**: address PR5266 review — trace correlation, cleanup-on-throw, audit context reset
- **gsd**: continue deep queued milestones
- **gsd**: bind task commits to milestone completion guard
- **gsd**: keep project save success if registration fails
- **mcp-server**: Windows path-sep test regex + gate gsd_exec writes
- **gsd**: register deep project milestones
- **gsd**: use homedir() fallback in currentDirectoryRoot for cross-platform consistency

### Changed
- **auto**: dedupe pauseAuto callback signature
- **gsd-extension**: introduce auto orchestration seams and contracts
- **prefs**: rename KNOWN_UNIT_TYPES → KNOWN_UNIT_LABELS in preferences-types
- sync package-lock.json (add @emnapi/runtime)
- sync package-lock.json (add @emnapi/runtime)

## [2.79.0] - 2026-05-03

### Added
- **gsd**: DB-backed auto-mode coordination tables (workers, leases, dispatches, command queue)
- **workspace**: introduce GsdWorkspace and MilestoneScope handle types
- **dispatch**: annotate dispatch actions with delegation-policy verdict
- **delegation**: codify per-tool background-safety policy
- **discuss**: scale questioning depth via project shape classifier
- **headless**: add `gsd headless recover` for non-TTY DB recovery
- **gsd**: doctor flags exhausted run-uat retry counters
- **gsd**: emit pre-ship soft warning on EVAL-REVIEW status
- **gsd**: register /gsd eval-review in catalog and ops dispatcher
- **gsd**: add /gsd eval-review command handler
- **gsd**: add EVAL-REVIEW frontmatter schema module
- **gsd**: add artifact validators for Phase 11 deep mode
- **gsd**: add /gsd new-project and --deep flag for Phase 11
- **gsd**: add research-decision and research-project dispatch units (Phase 11)
- **gsd**: add deep planning mode dispatch units (Phase 11)
- **gsd**: add worktree {list,merge,clean,remove} commands to TUI dispatcher
- **unit-manifest**: introduce planning-dispatch mode for slice plan/complete
- **auto-prompts**: surface manifest skills via recommendations + auto-match
- **auto-dispatch**: default reactive-execute on at >=3 ready tasks
- **subagent**: add dispatch telemetry and stronger prompt guidelines
- **ollama**: configurable probe/request timeouts via env vars
- **pi-coding-agent**: opt-in per-call token telemetry (#5023)
- **auto**: proactive rate limiting via min_request_interval_ms (#2996)
- **gsd**: add doctor check for orphan milestone directories (#4996)
- **mcp-client**: read global MCP config from ~/.gsd/mcp.json
- **gsd**: runtime tools-policy enforcement for planning units (#4934)
- **gsd**: add disabled model provider routing denylist
- **model-routing**: cross-provider tier resolution and provider-agnostic profile defaults

### Fixed
- **gsd**: preserve policy-block pause through dispatch errors
- **gsd**: surface DB-backed stale lock in doctor
- **gsd**: canonicalize deriveState read root and cache key for symlinked worktrees
- **gsd**: persist skip-validation state and clear gate rows on recover
- **gsd**: drop false plain-text claim from cancelled-gate hard block
- **gsd**: redirect cancelled-gate hard block to ask_user_questions
- **tests**: finalize write-gate basePath threading and workspace mock typing
- **metrics**: correct logWarning component in saveLedger fallback
- **paths**: canonicalize gsdRoot result before caching
- **auto-worktree**: validate milestoneId match in ByScope wrappers
- **workspace**: canonicalize base before resolving contract
- **metrics**: invalidate scoped ledger cache after prune
- **metrics**: abort saveLedger when lock not acquired
- **gsd-db**: restore previous connection on openDatabase failure
- **db-writer**: replace startsWith path containment with path.relative
- **tests**: thread basePath through write-gate calls in pre-existing tests
- **auto-worktree**: broaden teardown try/finally to cover chdir
- **guided-flow**: correct Gate 1b escalation message and counter increment ordering
- **worktree-resolver**: use isSamePath instead of string ==/!= for originalBase
- **auto**: warn on resume when persisted worktree is missing
- **metrics**: stale-lock detection + PID stamp + async yield
- **db-writer**: guard saveArtifactToDb root-artifact path
- **auto-worktree**: guarantee activeWorkspace cleared on teardown failure
- **workspace**: unify path normalization on realpathSync.native
- **guided-flow**: bound Gate 1b recovery with retry counter
- **auto-worktree**: mirror cleanup steps in teardownAutoWorktree abort path
- **guided-flow**: discriminate plan-blocked from discuss-incomplete in Gate 1b
- **write-gate**: require basePath; remove process.cwd() defaults
- **paths**: normalize gsdRootCache keys and invalidate via clearPathCache
- **metrics**: atomic merge for parallel-mode metrics.json writes
- **paths**: guard git-root anchor against ~/.gsd resolution
- **mcp**: preserve multi-select array shape and explicit cancellation
- **mcp**: normalize remote ask_user_questions answers into structuredContent
- **mcp**: attach structuredContent to ask_user_questions results
- **guided-flow**: bust path cache before ready-signal validation
- **tests**: live-regression — recover from markdown before headless query
- **gsd**: address db-authoritative review findings
- **gsd**: disable implicit markdown runtime fallback
- **gsd**: complete db-authoritative state contract
- **gsd**: preserve worktree isolation in /gsd handlers + harden MCP cwd
- **gsd**: defer empty-turn nudge on mid-line approval prompts
- **gsd**: refuse project writes when run from $HOME
- **gsd**: allow user gsd integration branches
- **gsd**: honor skip git during init
- **gsd**: sanitize generated commit subjects
- **github-sync**: defer slice prs until completion
- **vscode**: scope agent diff to tracked files
- **vscode**: register checkpoint tree view
- **vscode**: restore checkpoint file existence
- **vscode**: track rpc file mutation events
- **core**: protect bundled gsd slash command
- **gsd**: scope task commits to reported files
- **gsd**: block startup on git index lock
- **gsd**: avoid pushing pr base before draft pr
- **github-sync**: avoid closing issues before delivery
- **github-sync**: keep failed task closure retryable
- **github-sync**: keep slice pr sync retryable
- **github-sync**: use safe git environment
- **github-sync**: scope config cache by project
- **gsd**: use actual branch in worktree cli
- **gsd**: run hooks for automated commits
- **gsd**: block on post-unit git failures
- **gsd**: detect auto worktree by supplied path
- **gsd**: surface branch deletion failures
- **gsd**: validate worktree start branch preference
- **gsd**: detect default branch during init
- **gsd**: preserve current milestone artifacts after merge
- **gsd**: advance checked-out slice worktrees safely
- **gsd**: use integration branch for slice cadence
- **gsd**: preserve dirty worktree state on merge
- **gsd**: per-record advisory lock for unit runtime writes
- **gsd**: self-heal missing workflow_prefs_captured flag
- **gsd**: stop deep setup gate from hijacking executing phases
- **gsd**: atomicize runtime artifact writes
- **gsd**: short-circuit bare /gsd next-action prompt when no UI
- **gsd**: make summary save schema OpenAI-compatible
- **resources**: resync nested compiled extension drift
- **gsd**: reduce duplicate planning noise
- **gsd**: keep planning depth project-local
- **gsd**: align milestone artifact path resolution
- **native**: fall back when stream processor is missing
- **gsd**: keep bare command in smart entry
- **ci**: mirror package dist for Windows tests
- **mcp-server**: resolve Windows Path env lookup
- **mcp-server**: use Windows-safe env CLI shims
- **mcp-server**: address secure env and cache review
- **mcp-server**: unblock test build, sync server version, surface auth failures, propagate cancellation
- **mcp-server**: harden security across workflow handlers, env writer, and session lookup
- **mcp-server**: use compiled imports in dist-test
- **gsd**: cap claude-code context budgeting
- **mcp-server**: try host elicitation before remote channel for ask_user_questions
- prefer source workflow modules in mcp tools
- keep requirements db as source of truth
- harden deep requirements workflow
- **gsd**: rederive zero-slice plan v2 graphs
- **gsd**: prefer nearest bootstrapped project root
- **gsd**: keep deep new-project rooted in cwd
- **gsd**: gate workflow mcp questions safely
- **gsd**: require verified deep approval gates
- **gsd**: keep deep approval gates in chat
- **gsd**: pause milestone approval questions
- **gsd**: bootstrap deep setup git head
- **gsd**: close deep planning audit gaps
- **gsd**: harden deep planning plan gates
- **gsd**: avoid aborting discovery questions
- **gsd**: avoid approval abort on grounding questions
- **gsd**: avoid aborting opening deep interview question
- **gsd**: keep approval question text visible on external CLI
- **gsd**: rederive state on empty plan graph
- resolve slice isolation from project root
- route slice merge isolation through resolver
- **gsd**: skip worktree isolation before first commit
- **gsd**: avoid worktree setup before initial commit
- **gsd**: keep sqlite fallback optional
- **gsd**: make deep project research opt-in
- **gsd**: auto-skip stale tiny app research blockers
- **gsd**: gate plain-text setup approvals
- **gsd**: cap project research for tiny apps
- **gsd**: pause deep setup on approval questions
- **gsd**: guard deep project dispatch state
- **gsd**: three CodeRabbit findings on eval-review prompt and budgeting
- **gsd**: bound eval-review reads to cap and surface AI-SPEC errors
- **gsd**: clean legacy deep setup milestone dirs
- **gsd**: allow root summary saves over workflow mcp
- **gsd**: preserve dev CLI entrypoint for subagents
- **gsd**: three CodeRabbit findings — control flow, marker budget, Windows test
- **gsd**: handle UTF-8 multi-byte chars at the truncation boundary
- **gsd**: clamp computeOverallScore to MIN_SCORE..MAX_SCORE
- **gsd**: align deep research dispatch policy
- **gsd**: degrade AI-SPEC.md read failure to a marker instead of throwing
- **gsd**: stabilize deep new-project workflow
- **gsd**: include eval-review in /gsd help full output
- **tool-bootstrap**: skip provisioning on Windows when tools are on PATH
- **gsd**: wire planning_depth through the prefs load pipeline
- **cross-platform**: consolidate .gsd path resolution into gsdHome()
- **gsd**: wire deep-mode kickoff into showSmartEntry
- **gsd**: block deep research while marker is in flight
- **gsd**: tighten deep planning review contracts
- **gsd**: resolve deep planning review issues
- **gsd**: allow review-tier subagent dispatch from validate-milestone
- **gsd**: address deep planning review feedback
- **claude-code-cli**: persist Always Allow for non-Bash tools
- **gsd**: empty-turn nudge no longer auto-replies to user questions
- **gsd**: address audit findings on deep planning mode (B1, B2, I1-I8)
- **agent-session**: skip idle wait after agent_end
- **agent-session**: guard synthetic agent_end transitions
- **gsd**: preserve auto session handoff in terminals
- **gsd**: anchor cwd without cwd guard
- **gsd**: anchor cwd at project root in mergeAndExit (closes #5079)
- **gsd**: dispatch new debug sessions
- **gsd**: harden worktree dispatch cwd handling
- **gsd**: stop dispatch on cwd anchor failures
- use ?? consistently for modelOverride, add filePath to test helper
- **gsd**: anchor subagent dispatch to canonical worktree path
- **gsd**: harden worktree dirty handling
- **safety**: persist bash evidence at tool_call to close mid-unit re-dispatch race (#5056)
- clarify worktree clean retention reasons
- clarify worktree merge cleanup failures
- **gsd**: preserve inspected empty subagent inputs
- **gsd**: normalize auto worktree loop roots
- gate planning subagent dispatch
- **gsd**: normalize worktree project roots
- **gsd**: restore prompt contract CI
- **ollama**: clamp timeout env timer values
- **ollama**: correct context window for cloud / long-variant models
- **extensions**: drop semver dep, replace with inline isVersionGreater
- **windows**: avoid DEP0190 in Claude CLI binary probes
- **gsd**: normalize self-merge ref guard
- **gsd**: guard milestone message scan
- **gsd**: refuse self-merge when integration branch == milestone branch (#5024)
- **gsd**: bind milestone-tagged commits when .gsd/ is gitignored (#5033)
- **gsd**: run slice workers through headless auto
- **gsd**: resolve home directory correctly on Windows (#5015)
- **startup**: address PR review feedback
- **pi-coding-agent,gsd**: preserve Anthropic prompt cache (#5019)
- **gsd**: classify stream internal errors as transient
- **gsd**: preserve infrastructure git add failures
- **auto**: stamp request interval at dispatch
- **web**: guard shutdown gate process handlers
- **web**: keep shutdown gate out of middleware runtime
- **web**: prevent boot/shutdown phantom race (#4950)
- **web**: block new work in middleware during pending shutdown (#4950)
- **web**: drain SSE streams on shutdown (#4950)
- **tui**: preserve pasted images on regular submit
- report orphan milestone dirs without db
- **gsd**: surface real SQL errors from capture_thought instead of swallowing
- harden milestone id reservation
- include db rows in milestone id reservation
- **model-routing**: normalize resolved tier model IDs
- **gsd**: defer milestone dir creation until first artifact write (#4996)
- **gsd**: reuse ghost milestone IDs in nextMilestoneId to close gap (#4996)
- **gsd**: guard ensurePreconditions against phantom milestone IDs (#4996)
- **pi-ai**: repair dangling xml tool parameters
- **gsd**: enforce manifest tool policy docs
- **gsd**: point orphan branch hint to doctor fix
- **gsd**: preserve disabled model providers in effective prefs
- **model-routing**: document provider-agnostic profile tiers
- **gsd**: cover full help command list
- **model-routing**: address PR #3115 review — implement findModelForTier, behavioral tests, threading
- **extension-sdk**: repair broken pi-ui-tui doc paths and restore dropped hint branches
- **subagent**: seed result model from effective override, not agent default
- **subagent**: thread model override through subagent spawning
- remove ADR/PRD docs from PR #4935 (unrelated to test fix)
- **web**: report terminal creation failures
- **gsd**: checkpoint planning slices without active tasks
- **gsd**: checkpoint all session phases during compaction, not just executing (#4258)
- **extension-sdk**: correct broken link, wrong import, and invalid method in rules
- **ci**: resolve docs-check and lint failures
- **gsd**: guard worktree creation against repos with no commits
- **gsd**: add 12 missing commands to /gsd help menu

### Changed
- **gsd**: migrate auto.lock + paused-session.json to DB-backed coordination (Phase C pt 2)
- **gsd**: canonicalize auto-mode writers + delete copyPlanningArtifacts/reconcile + migrate stuck-state to DB
- **metrics**: sleep between lock acquire retries
- **paths**: decouple gsdRootCache from per-turn clearPathCache
- **auto-worktree**: replace originalBase singleton with workspace registry
- **gsd-db**: scope DB connection by workspace identity
- **metrics**: replace module singleton with explicit workspace
- **db-writer**: route saveArtifactToDb through workspace contract
- **auto-worktree**: sync layer takes explicit workspace pair
- **guided-flow**: validators take MilestoneScope
- **auto**: thread MilestoneScope through session state
- **guided-flow**: pin MilestoneScope at discuss reservation time
- prefer canonical tool names over aliases in prompts and prose
- **gsd**: make db state authoritative
- remove auto-loop.ts barrel, import from ./auto/* directly
- **prompts**: delete superseded guided-*.md files
- route guided-flow.ts callers to auto-prompts builders
- **prompts**: backport guided doctrine into auto-*.md
- **mcp-server**: remove copyright headers
- **mcp-server**: cache .gsd path resolution and milestone/slice walks
- **web**: pin postcss dependency
- **web**: migrate proxy convention and refresh audits
- **gsd**: strip PR/issue references from eval-review code comments
- **gsd**: drop "Phase 11" from deep-planning-mode code
- **gsd**: expose 11 previously-invisible bundled skills to system prompt
- **welcome-screen**: surface MCP server count in banner, suppress google_search deprecation
- **gsd**: migrate remaining files to getHomeDir() + harden forensics redaction
- **mcp-server**: instrument 11 gsd_* alias tools with usage telemetry (#5031)
- **pi-ai**: cache breakpoint after compaction summary boundary (#5027)
- remove copyright headers from startup changes
- **startup**: reduce GSD launch overhead
- **ci**: retry transient macOS RTK check
- **mcp-client**: surface $GSD_HOME in user copy + add collision test

### Deprecated
- **mcp-server**: 11 `gsd_*` alias tools (`gsd_save_decision`, `gsd_update_requirement`, `gsd_save_requirement`, `gsd_generate_milestone_id`, `gsd_task_plan`, `gsd_slice_replan`, `gsd_complete_slice`, `gsd_milestone_complete`, `gsd_milestone_validate`, `gsd_roadmap_reassess`, `gsd_complete_task`) are entering a deprecation window. Each invocation now emits a `deprecation.mcp_alias_used` JSONL record to stderr. Use the canonical names (`gsd_decision_save`, etc.). The aliases will be removed in a future release after telemetry confirms zero usage. (#5031)

## [2.78.1] - 2026-04-25

### Fixed
- **claude-code-cli**: catch-all candidate iteration + auth-status fallback
- **claude-code-cli**: restore Claude subscription detection on Windows

## [2.78.0] - 2026-04-25

### Added
- **workflow**: close single-writer-v3 control plane gaps
- **auto**: UnitContextManifest tools-policy field — declarative-only (#4934)
- **auto**: UnitContextManifest v2 contract — typed computed artifacts (#4924)
- **auto**: migrate complete-slice through composer — #4782 phase 3 batch 3
- **auto**: migrate research-milestone through composer — #4782 phase 3 batch 2
- **auto**: migrate run-uat through composer — #4782 phase 3 batch 1
- **auto**: compose reassess-roadmap context from manifest — #4782 phase 2
- **auto**: wire pipeline variant into dispatch — phase 2 of #4781
- **auto**: milestone scope classifier — phase 1 of #4781
- **auto**: UnitContextManifest schema + data + CI guard — phase 1 of #4782
- **claude-code**: add permission granularity picker for Always Allow
- **pi-coding-agent**: add skillFilter option to buildSystemPrompt
- **gsd**: narrow component system foundation
- **gsd**: add uok swarm contract foundation
- **gsd**: add GPT-5.5 Codex model support
- **pi-coding-agent**: show auth mode alongside providers in /model
- **10-02**: replace google-search source with deprecation stub
- **10-01**: add validateExtensionPackage function and validate subcommand
- **10-01**: create extracted @gsd-extensions/google-search workspace package
- **09-02**: wire sortExtensionPaths into loader and initialize warnings
- **09-02**: add ExtensionLoadWarning type and warnings[] to LoadExtensionsResult
- **09-01**: implement extension topological sort using Kahn's algorithm
- **08-03**: add update subcommand and enhance list/info with user metadata
- **08-03**: add uninstall subcommand with dependency warnings
- **08-02**: add extensions install subcommand for npm, git, and local sources
- **08-01**: thread mergeExtensionEntryPaths into loader and add tests
- **08-01**: extend registry schema and add mergeExtensionEntryPaths
- **07-01**: create extension-validator.ts with validation functions and types
- **06-02**: replace cmux->gsd imports with local structural types and event subscriptions (DECOUPLE-03)
- **06-02**: replace gsd->cmux static imports with event emitters and dynamic imports (DECOUPLE-02)
- **06-01**: create cmux-events.ts shared event contract module
- **pr-risk**: enhance verification prompt with copy-pasteable code block
- visual postinstall with spinner/banner UX (#4641)
- wire component system into runtime — skills, agents, telemetry, dispatch
- unified component system — skills, agents, pipelines, marketplace

### Fixed
- **gsd**: match canonical tool-block types in empty-turn recovery
- **test**: use real temp basePath in dispatch-rule depth-mark test
- **gsd**: harden git process recovery
- **git**: clarify TOCTOU ancestry guard and throttle slice persist
- **git**: harden stash and slice recovery safety
- **git**: repair integration regressions in safety audit
- **gsd**: derive milestone title from summary
- **git**: stash working tree before reset --hard in self-heal and rollback
- **git**: detect and abort rebase/cherry-pick/revert state in recovery
- **git**: force-reset ancestry guard, detached-HEAD refusal, stash-by-ref
- **git**: guard worktree create against unborn branch, force-reset orphans, and shared stash
- **git**: persist slice orchestrator state for crash recovery
- **git**: tokenize prefs.pre_merge_check before invocation
- **git**: atomic acquire and PID-verified stale override in sync-lock
- **git**: require .git/index.lock to be 5min old before force-removing
- **git**: strip GIT_DIR/GIT_WORK_TREE/GIT_INDEX_FILE from env overlay
- **auto**: harden state-machine edge cases
- **git**: run user hooks and honor commit.gpgsign on auto-commits
- **auto**: gate restoreToolBaseline by isAutoMode so guided-flow dispatches don't resurrect auto baseline (#4966)
- **auto**: codex review feedback (#4973)
- **auto**: classify deterministic policy errors as non-retriable (#4973)
- **auto**: bypass depth-verification gate in non-interactive sessions (#4973)
- **gsd**: make pre-exec failure notification actionable
- **auto**: clear verification retry count on success; remove dead state-rebuild constant
- **tui**: harden image-paste handling — reviewer feedback
- **pi-ai**: expose xhigh for gpt-5.5 custom models
- **auto**: stop using active-tool snapshot as model-policy gate; restore baseline between units (#4961)
- **gsd**: avoid write-gate snapshot temp collisions
- **gsd**: fail-closed depth confirmation when options missing (#4950)
- **gsd**: handle EXDEV in write-gate snapshot rename (#4950)
- **uok**: catch exceptions in gate.execute (#4950)
- **gsd**: default write-gate persistence to opt-out (#4950)
- **uok**: correct maxAttempts off-by-one (#4950)
- **uok**: emit audit + DB row for unknown gate id (#4950)
- **headless**: wire 'gsd headless doctor' so live-regression passes
- **auto**: #4926 review — single-source unitType across composer dispatch (#4924)
- **auto**: #4926 CI — dispatch through widened registry view (#4924)
- **auto**: #4925 review — knowledge splice header, UAT in-memory snapshot, test coverage
- **auto**: cap excerpt section bodies at 800 chars (coderabbit, #4780)
- **auto**: address coderabbit review on classifier (#4781)
- **gsd**: expose GPT-5.5 API model entry
- **pi-coding-agent**: guard skillFilter against consumer exceptions
- **gsd**: avoid complete-milestone self-diff failure
- **skills**: explicit user preferences bypass unit-type manifest
- **native**: collect every test file, install regression guard (Closes #4814) (#4855)
- **install**: surface err.cause in RTK fetch-failure log (#4852) (#4853)
- **resource-loader**: use content hash instead of path+size for prompt refresh (#4787) (#4819)
- **gsd**: harden component loader validation
- **knowledge**: scope + budget milestone KNOWLEDGE injection (#4721)
- **pi-coding-agent**: prettify TUI tool-call headers and compact args
- **gsd**: align headless milestone bootstrap with interactive flow
- **gsd**: route missing context through auto recovery
- **gsd**: recover stuck auto-mode when execution-entry phase lacks CONTEXT.md (#4671)
- **mcp-server**: surface plan_milestone sketch/full slice requirement in tool schema
- **state**: restore slice dependency fallback
- **gsd**: flush dirListCache at agent_end before artifact checks (#4648)
- **auto**: address peer review state hardening
- **state**: fail closed on unreadable milestone summaries
- **auto**: persist workflow retry and summary state
- **auto**: harden workflow state transitions
- **tui**: expire stale escape prefixes
- **google-search**: correct deprecation stub message
- **agent-core**: type restored session model
- **security**: harden project-controlled surfaces
- **tui**: expire stale escape prefixes
- **provider**: wire anthropic claude-code migration
- **vscode**: handle sidebar action commands
- **web**: surface terminal input failures
- **auto**: clear resolver on provider cancellation
- **cli**: forward model override to auto headless
- **agent-core**: restore keyless session models
- **mcp-server**: prevent defaultExecFn stdout-buffer deadlock
- **claude-code-cli,mcp-server,mcp-client**: globally unblock tools & close silent-failure gaps
- **claude-code**: restore Windows provider readiness and SDK executable resolution
- **milestone-actions**: assert not-auto-active at writer boundary (#4712)
- **workflow**: guard all durable-state interactive commands against auto-mode (#4712)
- **auto-worktree**: preserve milestone shelter when restore fails
- **gsd**: move turn-epoch bump from recoverTimedOutUnit entry to advance-only sites
- **gsd**: turn-epoch guard for timeout-recovery stale writes
- **pi-coding-agent**: retry after cancelled overflow compaction (#4030)
- **gsd**: honour require_slice_discussion in auto-mode dispatch (#3559)
- **gsd**: park milestone when rewrite-docs resolves abandon override (#3568)
- **gsd**: remove legacy ~/.gsd/agent/skills path from system prompt (#3657)
- **gsd**: idempotent shelter restore + await memory extraction
- **gsd**: atomic writes + lock-wrapped appends for .gsd/ state
- **gsd**: make file-lock actually lock and throw on contention
- **auto-worktree**: release gsd.db handles before pre-merge stash on Windows (#4704)
- **runtime**: classify .gsd/audit/ as runtime state (#4704)
- **workflow**: guard /gsd queue against auto-mode (#4704)
- **validate**: also flag @gsd/* in devDependencies, not just dependencies
- **test pipeline**: include extensions/* in dist-test compilation
- **google-search stub**: correct manifest to reflect deprecation
- **extensions/google-search**: restore Cloud Code Assist OAuth wire format
- **tests**: use process.cwd() for google-search package validation test
- **tests**: restore google-search package validation test
- **tests**: remove obsolete google-search tests after ADR-006 extraction
- **ADR-006 revival**: peer review round 2
- **ADR-006 revival**: address peer review findings
- **loader**: use package-local extension graph helpers
- **09-01**: guard against non-array dependencies.extensions in sort
- **06-02**: explicit arrow param types for handleLostSessionLock + CmuxStateInput for cmux tests
- **06-01**: remove gsd/paths.js import from rtk-session-stats.ts (DECOUPLE-01)
- **compaction**: prevent silent chunk-drop and empty-summary writes (#4665 follow-up)
- **compaction**: prevent degenerate summaries by fixing chunker/truncation mismatch (#4665)
- **deps**: patch 3 transitive vulnerabilities via npm audit fix
- **claude-code-cli**: headless auto-mode permission default to bypassPermissions (#4657)
- **gsd**: require DB status or success SUMMARY for milestone skip (#4663)
- remove optional sequence properties from insertSlice/insertMilestone test calls
- **gsd**: fail closed on complete-milestone summary/db mismatch
- **web**: deep-sync settings onboarding and state surfaces
- **web**: sync token profile support with latest prefs
- **gsd**: expand pre-execution check notification with details + evidence path (#4259)
- resolve CI typecheck errors in component-loader and skill-discovery
- **gsd**: cap artifact-verification retries and fix stuck detection bypass
- **tui**: intercept image file paths from terminal emulator paste
- **tui**: show [Image #N] placeholder instead of file path when pasting images

### Changed
- add npm run verify:pr to mirror CI build job locally (#4979)
- **uok**: derive retry ceiling from RETRY_MATRIX (#4950)
- **gsd**: tighten GateVerdict union, drop empty-string fallback (#4950)
- **gsd**: canonicalize omitted gate state on status=complete (#4950)
- **auto**: lazy-load slice summaries in complete-milestone (#4780)
- **skills**: expand skill manifest wirings to remaining unit types
- **gsd**: extract decideSurvivorAction + rewrite survivor-branch-complete as behaviour tests (Closes #4832) (#4859)
- **skills**: keep manifest PR scoped
- **auto**: execute ADR-003 §4 — reassess-roadmap is opt-in (#4778)
- **skills**: add per-unit-type skill manifest resolver (#4779)
- **auto**: gate reassess-roadmap dispatch behind skip_clean_reassess preference (#4778)
- **pi-coding-agent**: always prefer toolDefinition.label when provided
- **ci**: retrigger pr checks
- untrack repowise.db local cache
- **06-02**: register cmux-events before hooks (defensive ordering)
- **08**: add @types/semver for commands-extensions.ts
- **06-03**: remove 4 misplaced deps from root package.json (DECOUPLE-04, DECOUPLE-05, DECOUPLE-06)
- **workspace**: gsd.linkable manifest — single source of truth + CI coverage gate (#4680)

### Added
- **gsd**: worktree lifespan + divergence telemetry via journal events (#4764). New event types `worktree-created`, `worktree-merged`, `worktree-orphaned`, `auto-exit`, `canonical-root-redirect`, `slice-merged`, `milestone-resquash`. New `summarizeWorktreeTelemetry` aggregator returns counts, orphan breakdown, merge durations, conflict counts, exit reasons, and producer-side "exits with unmerged work" metric.
- **gsd**: `/gsd forensics` surfaces worktree telemetry — new Worktree Telemetry section in reports; new anomalies `worktree-orphan` and `worktree-unmerged-exit` (#4764).
- **gsd**: opt-in slice-cadence worktree collapse (#4765). New `git.collapse_cadence: "milestone" | "slice"` preference (default `milestone`). When set to `slice`, each validated slice is squash-merged to main immediately, shrinking the orphan window from milestone-size to slice-size. Optional `git.milestone_resquash: true` (default when cadence=slice) collapses per-slice commits into one milestone commit at milestone completion.
- **gsd**: worktree-aware `resolveCanonicalMilestoneRoot` helper (#4761) — validators and cross-session readers now route through it so a live worktree for a milestone is preferred over stale project-root state.

### Fixed
- **gsd**: milestone validation silently read stale project-root state when a live worktree held the real work (#4761). `handleValidateMilestone` now routes through `resolveCanonicalMilestoneRoot` so validation sees the canonical scope regardless of caller cwd.
- **gsd**: bootstrap orphan audit no longer skips in-progress milestones (#4762). When `milestone/<MID>` has commits ahead of main and the DB still reads `in_progress` (auto-mode interrupted before completion), the audit now emits a warning with the commit count and worktree location so the user knows where to resume.

## [2.77.0] - 2026-04-21

### Added
- **ci**: dynamic system-specific verification checklists in pr-risk-check
- **gsd-exec**: add clean-root preflight gate + auto-stash to milestone completion (#4604)
- **prefs**: expose all KNOWN_PREFERENCE_KEYS through /gsd prefs wizard
- **gsd**: default context_mode to ON (opt-out via enabled:false)
- **gsd**: add gsd_exec_search, gsd_resume, and compaction snapshot (slice 2)
- **gsd**: add gsd_exec sandboxed tool-output execution (context-mode slice 1)
- **tui**: render skill invocations in purple chat-frame style
- add Layer 0 shell hooks + new Layer 2 events
- **skills**: add 9 gap-closing skills for GSD workflow coverage
- **gsd**: cutover to memories table as single source of truth (ADR-013 step 6)
- **gsd**: backfill decisions table into memories (ADR-013 step 5)
- **gsd**: memory-store auto-injection parity (ADR-013 step 4)
- **skills**: bundle 6 planning/design skills and surface hidden ones
- **mcp**: expose memory tools to external clients (ADR-013 step 3)
- **gsd**: add structured_fields column to memories table (ADR-013 step 2)
- **gsd**: wire new memory tools across agents and extract-learnings (Option A' dual-write)

### Fixed
- **gsd-db**: writeBlockerPlaceholder DB update for plan-milestone + saveStuckState in standard path (#4634)
- **gsd**: add .mcp.json to ensureGitignore baseline
- **worktree-resolver**: re-throw all errors, not just MergeConflictError (#4633)
- **run-unit**: discard late-resolving newSession() after timeout to prevent root cwd tool runtime (#4632)
- **auto-resume**: use existing milestone worktree as dispatch context during crash recovery (#4628)
- **gsd-db**: prevent milestone status downgrade in reconcileWorktreeDb (#4372) (#4625)
- **mcp-server**: gsd_cancel falls back to milestone/process lookup for sessions without sessionId (#4618)
- **worktree**: prevent double-nested artifact paths when constructing paths inside worktree context (#4635)
- **gsd-db**: stamp SCHEMA_VERSION=21 inside v21 migration block (#4627)
- **gsd-db**: move memories.scope index creation inside v18 migration guard (#4630)
- **auto-start**: await showSmartEntry dispatch before checking milestone context in bootstrapAutoSession (#4631)
- **register-hooks**: pass toolName from tool_execution_start event to markToolStart (#4626)
- **gsd-exec**: derive artifact paths from meta file location, not JSON content (#4619)
- **pre-execution-checks**: strip backtick/quote annotation from input/output values before path check (#4623)
- **dispatcher**: guard SUMMARY.md write with existence check on re-dispatch (#4598) (#4622)
- **ci**: wrap agent prompt as numbered list in GitHub PR summary
- **gsd**: add doctor heal suggestion to plan gate failed error
- **pi-coding-agent**: apply redaction before file entry serialization in _rewriteFile() (#4617)
- **welcome-screen**: truncate Active row text to prevent terminal overflow
- **gsd**: handle worktree context fallback and sanitize paused session paths
- **gsd**: resolve three safety harness false-positive sources (#4576)
- **gsd-exec**: inject pre-exec gate failure context into re-dispatched plan-slice prompt (#4603)
- **pi-ai**: ensure tool function names non-empty for MiniMax (#4538) (#4602)
- **mcp**: add 10-minute timeout to ask_user_questions and secure_env_collect elicitation (#4597)
- **db**: repair invalid quality_gates DDL and add artifact-retry journal event (#4583)
- **skills**: quote descriptions containing colon-space in YAML frontmatter (#4595)
- **auto-worktree**: reorder shelter-before-stash and drop stash pathspec (#4600)
- **safety**: add file_change_allowlist to suppress false-positive unexpected-change warnings (#4596)
- **gsd**: parallel-research timeout no longer causes infinite dispatch loop (#4570)
- **skills**: quote SKILL.md description values containing ': '
- **auto**: pre-check provider request-readiness before unit dispatch (#4578)
- **gsd**: exempt completed-task outputs from ordering checks (#4071) (#4572)
- **pi-ai**: cap tool count at 128 for Groq provider (fixes #4376) (#4575)
- **gsd**: use cl100k_base encoding and provider-aware fallback in token counter (#4569)
- **gsd**: clear HARD BLOCK when write-gate state file is deleted (#4343) (#4577)
- **gsd-extension**: default permission mode to acceptEdits to prevent silent tool denial (#4383) (#4584)
- **gsd-extension**: wire tryRemoteQuestions into MCP ask_user_questions handler (#4585)
- **model-routing**: remove 32k cap for custom models and allow capabilities.supportsXhigh in models.json (#4587)
- **tests**: mark context_mode as exposed-outside-wizard
- **gsd**: update #3628 regression test anchor for multiple triggerTurn sites
- **health-widget**: guard requestRender after widget disposal
- **auto**: keep footer identical between normal and auto mode
- **model-routing**: probe claude.exe on Windows and guard OAuth routing for externalCli providers
- **gsd**: recover silent 'ready' signals and empty-intent turns in discuss flow
- **pre-execution-checks**: require import keyword before from-clause to prevent prose false positives (#4561)
- **error-classifier**: classify stream idle timeout and context overflow as transient (#4559)
- **key-manager**: add claude-code as first-class LLM provider in PROVIDER_REGISTRY
- **gsd-exec**: address adversarial review findings
- **gsd**: preserve slice parallel preferences
- **gsd**: strip stray backticks from annotated inputs
- **gsd-exec**: fix five code-review findings
- **workflow-logger**: add context-mode to LogComponent union
- **pi-agent-core**: cover sk-proj- and sk-admin- OpenAI key shapes
- **db**: guard idx_memories_scope on legacy schema (#4545)
- **gsd**: migrate legacy db before bootstrap indexes
- **pi-agent-core**: redact known secret shapes before persisting session log
- **gsd**: classify extra usage errors as rate limits
- **gsd**: load preferences from auto-start base path
- **mcp**: address CodeRabbit round-2 review on #4477 — 3 findings + regression test
- **db**: address review findings — closeDatabase resets unconditionally; add getDbStatus tests
- **db**: surface structured error on SQLite open failure; add open-time provider fallback
- **file-change-validator**: handle repos with single commit (no HEAD~1)
- **resource-loader**: sync bundled skills to ~/.agents/skills/ on launch
- **init-wizard**: create initial commit after git init (#4530)
- **models**: discover openai-compatible custom providers and parse think tags
- **gsd**: classify complete-slice as standard for routing
- **gsd**: preserve session model/thinking in auto mode
- **mcp**: address review feedback on #4477 — 4 bugs from Jeremy + CodeRabbit
- **mcp**: address CodeRabbit nitpicks on #4477
- **mcp**: rename details to structuredContent across MCP handlers
- **gsd**: classify complete-slice as standard for routing
- **gsd**: preserve session model/thinking in auto mode
- **gsd**: prefer valid user-local templates dir in prompt loader
- **install**: link @gsd-build/mcp-server workspace package
- **search**: narrow native web_search injection to providers that accept it
- **gsd**: preserve transient session-start reason
- blocklist account-unsupported models across auto restarts (#4513)
- **gsd**: pin explicit phase models
- **gsd**: pause transient session-start failures
- **pi-ai**: honor bearer auth for custom providers
- **ci**: address review findings and cross-platform hook tests
- **ci**: export hook event types and wire emitExtensionEvent in GSD wrapper
- **gsd**: return blocked instead of validating-milestone on stuck needs-remediation (#4506)
- **gsd**: bump remaining schema-version assertions to 21 after main merge
- **gsd**: second-round inline review fixes for ADR-013 migration
- **gsd**: honor models.json keys in provider doctor
- **gsd**: peer-review fixes for ADR-013 migration + CI failures
- **skills**: address PR 4505 inline review findings
- **claude-code**: preserve win32 claude.cmd selector in readiness check
- **claude-code**: fallback to claude shim when claude.cmd spawn fails on Windows
- **gsd**: detect Claude CLI on Windows PATH for provider doctor (#4503)
- **gsd**: migrate legacy db before bootstrap indexes
- **gsd**: require terminal milestone for doctor cleanup
- serialize saveDecisionToDb with async mutex to prevent file race condition
- prevent race condition in parallel decision saves

### Changed
- **skills**: rename 4 skills to match GSD naming conventions
- consolidate OAuth provider tests into individual files and remove legacy test suite
- use regex patterns in .secretscanignore for OAuth credentials
- allowlist public Google OAuth credentials in secret scanner
- remove base64 obfuscation from Google OAuth credentials

## [2.76.0] - 2026-04-19

### Added
- **gsd**: memory maintenance \u2014 cap cascade, decay observability, export/import (Phase 5)
- **gsd**: memory relationships / knowledge graph (Phase 4)
- **gsd**: hybrid keyword + semantic memory retrieval (Phase 3)
- **gsd**: memory ingestion + scope/tags (Phase 2)
- **gsd**: memory tools — capture_thought, memory_query, gsd_graph (Phase 1)
- **web**: surface CLI onboarding completion record in settings
- **gsd**: /gsd onboarding re-entry + setup hub disambiguation
- **tui**: refresh chat, footer, and welcome screen
- **models**: add gpt-5.4-mini to openai-codex list (#1215)
- **gsd**: ADR-011 Phase 2 mid-execution escalation (#3789)
- **gsd**: ADR-011 Phase 1 progressive planning (sketch-then-refine) (#3789)
- **routing**: add allow_flat_rate_providers opt-in (#4386)
- **workflow**: unified plugin system with modes and remote install
- **pi-ai**: add claude-opus-4-7 for Bedrock, Antigravity and OpenRouter (#4348)
- **pi-ai**: add claude-opus-4-7 model support
- **remote**: add Telegram command interface for auto-mode control
- **theme**: add tui-classic and web classic/vivid palettes (#4301)
- Added `/gsd debug` GitBook and Mintlify feature pages, wired both…
- Added specialistContext to debug-session-manager template and wir…
- Wired checkpoint and TDD gate logic into the continue handler: di…
- Extended session artifact with DebugCheckpoint/DebugTddGate inter…
- Wired diagnose-only and continue flows to prompt dispatch with ex…
- Implemented a V2 debug session store with atomic JSON persistence…
- **gsd**: add /gsd scan command for rapid codebase assessment
- **pi-ai**: support ANTHROPIC_BASE_URL env var for custom proxy endpoints (#4140)
- **ask-user-questions**: add optional markdown preview panel with side-by-side layout

### Fixed
- **extensions**: widen emitBeforeProviderRequest model param with api
- **search**: gate native web_search on api shape, not provider ID (#4478)
- **mcp**: extend non-empty validation across all schema-loose/executor-strict tools
- **mcp**: reject empty slice fields in gsd_plan_milestone at schema layer
- **gsd**: normalize doctor worktree cwd paths
- **gsd**: skip dashboard git log outside repos
- **gsd**: handle symlinked gsd stash pathspec
- **pi-coding-agent**: preserve subagent tool list when --tools uses casing or extension names
- **mcp**: address peer review — narrow realpath catch, guard prefs throw, document queue race
- **mcp**: schema parity, guard hardening, queue timeout, session eviction (#4475)
- **gsd**: register memory-* LogComponent variants
- **gsd**: thread modelRegistry and sessionContextWindow through dispatch (#4142)
- **gsd**: /gsd onboarding no longer hangs the TUI on re-entry
- **gsd**: address #4468 CodeRabbit review — mention same-task outputs in blocking message
- **gsd**: exempt task's own output from pre-exec input check (#4459)
- **gsd**: address #4463 CodeRabbit review — preserve error text, guard DB, test 'done'
- **onboarding**: suppress duplicate intro banner on /gsd onboarding re-entry
- **gsd**: preserve dynamic routing provider prefixes
- **gsd**: resolve onboarding wizard module from deployed package root
- **gsd**: wrap notifications with column-aware wrapper (#4465)
- **gsd**: cascade skipped-slice status to its tasks (#4375)
- **gsd**: forbid drafting tests that reference gitignored paths
- **gsd**: address #4456 nitpicks — thread pi to setup hub, dedupe + O(1) step lookup
- **gsd**: honor 'not_yet' defer + use basePath for prefs path (#4457 review)
- **gsd**: promote CONTEXT-DRAFT.md in gsd_summary_save tool path
- **gsd**: use workflow-logger in onboarding-state catch (silent-catch test)
- **gsd**: respect resources rootDir in onboarding handler + state
- **gsd**: re-normalize separators after tilde expansion in normalizeFilePath
- **gsd**: pre-exec checks false-positive on directory inputs and ~/ paths
- **gsd**: confirm projection file exists before reporting success
- **gsd**: address CodeRabbit review on #4402 roadmap fix
- **gsd**: preserve ROADMAP.md sections after projection hook
- **tui**: CI green + apply review findings
- **remote-questions**: normalize remote answers to RoundResult shape
- **gsd**: reactivate deferred slice on plan-slice
- **gsd**: block code-extension fallback for non-JS explicit imports
- **gsd**: resolve asset imports in post-execution checks (#4411)
- **tui**: skip pinned Latest Output when text still on-screen (#4440)
- **gsd**: honour git.snapshots preference in doctor snapshot paths (#4420)
- **ci**: make version-check workflow parse cleanly + harden to issues-only
- **gsd**: cap dep summaries + scale preamble to context_window (#4435)
- **ci**: move @next dist-tag when version already published
- **gsd**: use path.relative() for LEARNINGS.md relative path (#4433 review)
- **gsd**: wire /gsd extract-learnings into the cross-session knowledge workflow (#4429)
- **gsd**: normalize python commands with leading whitespace (#4416)
- **gsd**: rewrite full 'py -N' token in normalizePythonCommand (#4416)
- **gsd-db**: add gsd_checkpoint_db tool to flush WAL during active session
- **gsd**: heal .gsd.migrating on resume path in startAuto (#4416)
- **gsd**: normalize python invocations on Windows in verification gate (#4416)
- **gsd**: remove hardcoded rg guidance from planning prompt fallback (#4416)
- **gsd**: self-heal symlinked .gsd staging to prevent silent data loss (#4423)
- **gsd**: pre-exec checks false-positive on URL and prose-annotated inputs (#4421)
- **gsd**: flip uok.gitops.turn_action default to "commit" (#4419)
- **claude-code-cli**: extract test bodies to documented functions
- **claude-code-cli**: address CodeRabbit review on #4425
- **claude-code-cli**: detect Windows .cmd shim in CLI readiness checks
- **gsd**: auto-mode stuck loop on research dispatch (#4414)
- **gsd**: compensating rollback on escalation write failure (pause-required)
- **gsd**: ADR-011 code-review findings — reconcile/restore state preservation, strict validation
- **pi-ai**: address coderabbit review comments on #4392
- **pi-ai**: wire thinking:{type} field and extend adaptive-thinking model coverage (#4392)
- **gsd**: preserve ADR-011 P2 columns through reconcileWorktreeDb
- **gsd**: post-ship review findings for ADR-011 Phase 2
- **gsd**: add missing TaskRow escalation fields to tests + paramsToTaskRow
- **gsd**: use valid LogComponent for escalation warnings
- **auth**: self-heal stale Anthropic OAuth credential (#4399)
- **gsd**: invalidate caches after branch-mode checkout and validate main_branch pref
- **test**: add getIsolationMode override in worktree-skip journal test
- **gsd**: create milestone branch on entry in isolation:branch mode (#4389)
- **gsd**: handle auto-mode limit errors with model fallback (#4373)
- **ci**: remove duplicate tmpdir import in journal-integration test
- **workflow**: path containment, direct-dispatch overrides, gist ext fallback
- **pi-ai**: pass xhigh effort natively for opus-4-7; fix Bedrock mapping; bump SDK to 0.90.0
- **notifications**: fire remote notification before desktop guard
- **notifications**: call sendRemoteNotification from sendDesktopNotification
- **gsd-scan**: use .gsd/codebase/ instead of .planning/codebase/
- **gsd**: redispatch active custom workflow steps
- remove Claude Code reference from forensics comment
- **dispatch**: reconcile DB when SUMMARY exists on disk (#4324)
- **gsd**: stage untracked files on symlink add fallback
- **gsd**: ignore glob-like plan inputs in pre-exec checks
- **ci**: rewrite version-check comment as array join to fix YAML syntax
- **gsd**: pause on complete-milestone disk/db mismatch
- **gsd**: detect repeated units across the stuck window
- **dispatch**: skip complete-milestone for DB-complete milestones (#4324)
- **gsd**: restore slice parallel guard nesting
- **gsd**: repair execute-task plan recovery checkboxes
- **gsd**: fail closed on finalize timeouts
- **gsd**: persist active custom workflow steps before dispatch
- **gsd**: increment unit dispatch counts on dispatch
- **gsd**: treat workflow validate and list as quick commands
- **gsd**: treat unexpected eof as transient network error
- **gsd**: preserve legacy cmux preference writes
- **gsd**: track queued wrapup skips before execution
- **gsd**: enable structured milestone questions in auto mode
- **gsd**: prefer canonical preferences paths
- **gsd**: cancel auto unit when model restore fails
- **gsd**: suppress built-in footer on session_start when auto-mode is active
- **ci**: resolve YAML syntax error in version-check workflow
- **pi-ai**: remove decommissioned Groq models
- **ci**: make rtk shared shim work in dist-test
- **ci**: keep resource extension types self-contained
- **ci**: avoid RpcClient private process type intersection
- **ci**: import isTruthy in rtk runtime
- **doctor**: suppress false Anthropic key missing warning when using claude-code
- **ci**: add strip-types shim for rtk-shared
- **ci**: restore canonical AssistantMessageEventStream export
- **update**: detect bun install via argv[1] path (#4145)
- **gitignore**: restore baseline ignore rules
- **tests**: isolate ExternalCli provider check in web onboarding tests
- **web**: add claude-code ExternalCli provider to onboarding catalog
- **agent-session**: call abort() before _disconnectFromAgent() in newSession/resumeSession (#4243)
- **pi-ai**: hide unsupported ChatGPT codex oauth models
- **test**: add test environment isolation for worktree and RTK tests

### Changed
- **gsd**: route /gsd init preferences through unified writer
- remove accidentally-committed .mcp.json and .worktrees/
- **gsd**: address CodeRabbit review on #4433
- code quality cleanup and contract hardening
- remove local test.cmd helper from feature branch
- auto-commit after complete-milestone
- extract splitCompletedKey() helper, remove duplication (per review)

### Fixed

- **gsd**: promote `CONTEXT-DRAFT.md` to final `CONTEXT.md` in the `gsd_summary_save` tool path (#4442)

## [2.75.0] - 2026-04-15

### Added

- **tui**: render compaction notice in the shared chat-frame style
- **prefs**: add persistent language preference via /gsd language
- **tui**: align tool execution cards with chat frame styling
- **tui**: blend chat frame with shared timestamp and model header
- **extensions**: add GSDExtensionAPI for .gsd/extensions/ (#3338)
- **graph**: parse LEARNINGS.md into knowledge graph and rebuild after extraction
- **gsd**: add /gsd extract-learnings command
- **gsd-uok**: flip default to UOK with emergency legacy fallback
- **gsd-uok**: enforce plan-v2 compile gates and graph metadata
- **gsd-uok**: unify audit envelopes across logger metrics and activity
- **gsd-uok**: add turn-level git transaction modes and closeout gates
- **gsd-uok**: unify reactive and parallel scheduling via execution graph
- **gsd-uok**: enforce model policy filtering before routing
- **gsd-uok**: unify gate plane across pre/post validation checks
- **graph**: implement knowledge graph system (closes #4202)
- **gsd**: add v1→v2 command parity — 12 missing commands

### Fixed

- **ci**: stage all workspace package.json files in release commit
- **tui**: pin rendered block to terminal bottom on clear
- **gsd**: silence benign auto-mode warnings and bind getProviderAuthMode correctly
- **gsd**: stop wiping the artifacts table on every cache invalidation
- **tui**: unstick tool cards after compaction and promote success notifications
- **mcp**: route tool writes to active worktree when milestone has one
- **mcp**: make projectDir optional in workflow tool schemas
- **mcp**: allow external-state worktree paths in workflow project root guard
- **gsd**: stop .mcp.json churn in auto-worktrees and fix evidence id matching
- **auto**: reset session timeout counter on auto-resume
- **auto**: schedule auto-resume timer for session creation timeouts
- **agent-session**: call abort() before \_disconnectFromAgent() in newSession/resumeSession (#4243)
- **gsd**: checkpoint all session phases during compaction, not just executing (#4258)
- **gsd**: expand pre-execution check notification with details + evidence path (#4259)
- **chat**: replay final assistant content on message end
- **interactive**: preserve assistant-tool ordering on chat rebuild
- **chat**: preserve claude MCP thinking visibility during tool windows
- **chat**: cap claude reasoning blocks to keep chat visible
- **chat**: prune orphaned claude MCP provisional sub-turn text
- **chat**: prune orphaned claude MCP provisional sub-turn text
- **chat**: prune claude MCP provisional text above tool output
- **ci**: harden graph fallback and update regression guards
- **gsd**: restore autoCommit import after rebase conflict
- **gsd**: align ADR-009 integration with type-safe builds
- **ci**: remove unsound tsbuildinfo cache causing TS2307 on fresh runners
- **pi-coding-agent**: remove explanatory comment from agent_end handler
- **pi-coding-agent**: finalize streaming component on agent_end instead of removing it
- **release**: sync all workspace versions and harden release scripts
- **ci**: run CI on pipeline.yml changes
- **ci**: install web host deps in dev-publish job
- **gsd**: harden pr-branch/ship argv-safety and canonical artifact paths
- align v1→v2 commands with upstream types, remove engine-dependent slice mutations
- **ci**: disable incremental resources build cache state
- **gsd**: open project DB in headless query
- **gsd**: preserve quoted workflow run overrides
- **gsd**: replace execSync with execFileSync in nativeCommit, nativeIsRepo, nativeResetHard fallbacks
- **ci**: cache dist alongside tsbuildinfo and use workflow-logger in catch blocks
- **gsd**: isolate /gsd command registration from extension bootstrap failures
- **gsd**: close out cancelled auto units
- **pi-coding-agent**: fall back to env keys for built-ins

### Changed

- **gsd**: remove /gsd map-codebase command
- **gsd**: enforce single-writer invariant for engine DB

## [2.74.0] - 2026-04-14

### Added

- **gsd**: extend flat-rate provider detection to custom/externalCli providers
- **claude-code**: pass thinking level as effort

### Fixed

- **claude-code-cli**: forward image blocks in SDK query prompt (#4183)
- keep assistant text visible when thinking traces are long
- **state**: DB-authoritative milestone completeness (#4179)
- **auto-mode**: prevent false milestone merge after complete-milestone failure (#4175)
- **auto**: pause on validate-milestone needs-remediation without slices (#4094)
- **gsd**: notify users what to do next after /gsd step finishes
- **cli**: restore --help handling when it follows a subcommand or unknown flag
- **tui**: eliminate pinned output duplication and reduce render overhead
- **auto**: prevent premature auto-mode stops on blocked phase + missing reassessment
- **cli**: use junction symlinks in merged node_modules path
- **tui**: reset segment state on claude-code sub-turn shrink
- **gsd**: set completed_at when reconciling task status to complete
- **tui**: keep AUTO-mode widgets alive and drop duplicate health panel
- **gsd**: use bun for update when installed via Bun (#4145)
- **tui**: render assistant tool calls inline with text instead of grouped at end
- **gsd**: restore isAutoMode plumbing and workflow-logger catch in auto-model-selection
- **gsd**: preserve custom-model selection on /gsd auto bootstrap (#4122)
- **pi-coding-agent**: use safe compaction role markers
- **pi-ai**: detect claude-code overflow text

### Changed

- remove stale src/app-paths.js leftover
- **cli**: slim down top-level src/ — dedup, unused fallbacks, onboarding

## [2.73.1] - 2026-04-13

### Fixed

- **gsd**: address 3 silent-crash secondary issues from #3348 post-#3696 (#4133)
- **gsd**: tolerate corrupt task arrays (#4056)
- **gsd**: discard milestone DB and worktree state (#4065)
- **model-resolver**: gate saved default restore on provider readiness
- **tui**: stop pinned latest-output mirror from duplicating streaming text
- **gsd**: wire subagent_model preference through to dispatch prompt builders
- **ci**: address 5 pipeline integrity issues from release audit (#4119)
- **ci**: regenerate package-lock.json during version bump (#4116)
- **pi-coding-agent**: skip localhost dummy key when fallback resolver provides a configured key

### Changed

- **gsd**: delete 3 unreferenced dead files and orphaned test (#3728)

## [2.73.0] - 2026-04-13

### Added

- **pi-ai**: add Alibaba DashScope as standalone provider (#3891)
- **gsd**: add layered depth enforcement to discuss.md (#4079)

### Fixed

- **gsd**: reconcile stale slice rows and rebuild STATE.md before DB close (#3658)
- **gsd**: block direct writes to gsd.db via hooks to prevent corruption (#3674)
- **gsd**: break 3 circular dependencies in extension modules (#3730)
- **claude-code**: default GSD subagents to bypassPermissions and pre-authorize safe built-ins (#4099 follow-up)
- **gsd**: add memory pressure watchdog and persist stuck detection state (#3708)
- **state**: prevent false degraded-mode warning when DB not yet initialized (#3922)
- **async-jobs**: suppress stale follow-up for jobs consumed by await_job (#3787) (#3788)
- **gsd**: rebuild STATE.md after unit completion (#3876)
- **gsd**: let doctor heal dispatch fixable warnings (#3875)
- **gsd**: preserve experimental preferences in merges (#3847)
- **gsd**: heal legacy task arrays and evidence rows (#4027)
- **gsd**: unlock depth verification outside guided flow (#4058)
- **gsd**: preserve paused auto badge after provider pause (#4062)
- **ollama**: add cloud auth support and resolve real context window via /api/show (#4017)
- **security**: activate auth middleware and harden shutdown/update routes (#4023)
- **gsd**: normalize workingDirectory prompt paths (#4057)
- **claude-code**: pre-authorize workflow MCP tools so interactive acceptEdits mode stops blocking GSD commands
- **cli**: resolve duplicate validateConfiguredModel and missing getPiDefaultModelAndProvider import
- update GSD runtime ignore patterns for team mode (#2824)
- **gsd**: prevent double frontmatter in task SUMMARY.md from projection re-render (#2818)
- flush extension provider registrations before model resolution (#1923)
- **gsd**: reset db-open attempted flag on close (#4024)
- **gsd**: unblock mixed-dependency zero-dep slices (#4025)
- **pi-tui**: filter kitty keypad private-use input (#4026)
- **gsd**: disable db mmap on darwin (#4029)
- **gsd**: reject empty roadmap stubs as milestone plans (#4063)
- persist defaultProvider when user selects Claude Code CLI in onboarding (#4104)
- **pi-ai**: filter unavailable github copilot models (#4031)
- **claude-code**: wrap prompt history in XML tags to stop transcript fabrication
- clean up MCP tool rendering in Claude Code CLI stream

### Changed

- **pi-ai**: regenerate model registry from upstream APIs (#3887)
- require linked issue in PR template (#4112)

## [2.72.0] - 2026-04-13

### Added

- **agents**: add GSD phase guard to prevent subagent/phase conflicts
- **agents**: add 8 specialist subagents and slim pro agents
- **tui**: improve gsd overlays, shortcuts, and notification flows

### Fixed

- **ci**: build artifacts in integration-tests job
- **auto**: recover from OpenRouter credit affordability errors
- **gsd**: cast unknown gate id in test to satisfy GateId type
- **gsd**: route quality gates through a per-turn registry
- **mcp**: expose every registered tool and fix SDK subpath resolution
- **mcp**: resolve rebase regressions in stream-adapter
- **mcp**: thread abort signals, restore tool fidelity, and fix subpath imports
- **doctor**: skip key check for CLI-authenticated providers
- **tui**: overlay subscription + Ctrl+Shift+P shortcut conflict
- **models**: block unconfigured models from selection surfaces
- **ollama**: clear footer status when provider unavailable
- **gsd**: guard model override in minimal command contexts
- **model**: require provider readiness for saved default selection
- **gsd**: honor /gsd model as session override across dispatch
- **gsd**: use milestone branch for merged worktree cleanup
- **pi-coding-agent**: show full OAuth login URLs
- **auto**: add structured cooldown error and bounded retry budget
- **auto**: survive transient 429 credential cooldown in auto sessions
- **pi-coding-agent**: match renderable tools case-insensitively
- **headless**: keep idle timeout off during interactive tools
- **claude-code-cli**: surface result text for success errors
- **pi-ai**: use bearer auth for MiniMax Anthropic API
- **gsd**: scope stuck-loop forensics to auto sessions
- **gsd**: repair DB-only milestone unpark state
- **gsd**: detach auto start from active turns
- **cli**: include all internal node_modules entries in pnpm merged dir
- **gsd**: enforce anti-fabrication turn-taking in discuss prompts
- **cli**: address review findings for pnpm merged node_modules
- **cli**: handle pnpm global installs by merging both node_modules roots
- **gsd**: keep project db path after worktree enter
- **gsd**: ignore prose inputs in pre-exec checks
- **gsd**: read existing artifacts before write
- **mcp-server**: use explicit sdk js subpaths
- **cli**: preserve anthropic api provider
- **gsd**: document flat task summary layout
- **gsd**: require verification classes in validation prompts
- **mcp-server**: open the DB for inline workflow tools
- **gsd**: ignore pre-existing files in task ordering
- **gsd**: detect property-value JSON invocation errors
- **cli**: honor custom-provider defaults before onboarding
- **gsd**: dedupe repeated notifications
- **gsd**: open DB before bootstrap deriveState
- **cli**: clean up stdin after sessions command readline interface closes
- **gsd**: skip reverse dependents in dispatch fallback
- **gsd**: classify plain connection-error as transient
- **cli**: resolve hoisted node_modules for global installs
- **pi-ai**: cast test tool fixtures to any for TSchema compatibility
- **commands**: use specific validation reason in blocked-directory warning
- **commands**: show friendly message when /gsd runs from $HOME instead of unhandled error

### Changed

- **ci**: run integration tests in parallel with build
- **ci**: cache Next.js build artifacts with Blacksmith cache
- sync package-lock.json version fields to 2.68.0
- **pi-ai**: add cache_control breakpoints to tool definitions

## [2.71.0] - 2026-04-11

### Added

- **mcp-server**: add secure_env_collect tool via MCP form elicitation

### Fixed

- **tui**: clear pinned output on message_end to prevent duplicate display
- **tui**: clear pinned latest output on turn completion
- **tui**: restore pinned output above editor during tool execution
- TOCTOU file locking race conditions in event log and custom workflow graph
- **tui**: mask secure extension input values in interactive mode
- **claude-code**: harden MCP elicitation schema handling
- **claude-code**: accept secure_env_collect MCP elicitation forms
- **interactive**: keep MCP tool output ordered and restore secure prompt fallback
- **interactive**: preserve MCP tool output stream ordering
- **gsd**: resolve workflow MCP test typing regressions
- **mcp**: return isError flag on workflow tool execution failures
- **discuss**: add structuredQuestionsAvailable conditional to all gates
- **discuss**: add multi-round questioning to new-project discuss phase
- **gsd**: harden claude-code workflow MCP bootstrap
- **web**: drop provisional pre-tool question text

### Changed

- extract deriveStateFromDb logic into composable helpers
- **pr**: drop web-layer changes from MCP stream-order fix

## [2.70.1] - 2026-04-11

### Fixed

- **routing**: address codex review — complete interactive bypass and accurate banner
- **routing**: skip dynamic routing for interactive dispatches, always show model changes (#3962)
- **ci**: trim windows portability integration load
- **ci**: narrow windows portability coverage
- **ci**: skip validate-pack in windows portability job
- **ci**: unblock windows portability follow-up
- **windows**: harden portability across runtime and tooling
- **auto**: use pathToFileURL for cross-platform import and reconcile regression test
- **auto**: resolve resource-loader.js from GSD_PKG_ROOT on resume (#3949)
- **mcp-server**: importLocalModule resolves src/ paths from dist/ context
- **gsd**: surface scoped doctor health warnings
- **gsd**: skip skipped slices in milestone prompts
- **gsd**: handle doubled-backtick pre-exec paths
- **update**: fetch latest version from registry

## [2.70.0] - 2026-04-10

### Added

- **mcp-server**: expose ask_user_questions via elicitation

### Fixed

- **pi-ai**: remove Anthropic OAuth flow for TOS compliance
- **mcp-server**: hydrate model credentials into env
- **mcp-server**: hydrate stored tool credentials on startup
- **gsd**: auto-enable cmux when detected instead of prompting
- **mcp-server**: URL scheme regex no longer matches Windows drive letters

## [2.69.0] - 2026-04-10

### Added

- **gsd**: implement ADR-005 multi-model provider and tool strategy
- **gsd**: complete ADR-004 capability-aware model routing implementation

### Fixed

- **gsd**: add missing directories to codebase generator exclude list
- **gsd**: wire ADR-005 infrastructure into live paths
- **gsd**: replace empty catch with logWarning for CI compliance
- **gsd**: merge enhanced context sections into standard template, clean up stale gate patterns
- **gsd**: remove broken discuss-prepared template, inject briefs into discuss.md

## [2.68.1] - 2026-04-10

### Fixed

- **ci**: update FILE-SYSTEM-MAP.md path after docs reorganization
- **test**: update discord invite test path after docs reorganization
- **gsd**: resolve resource-loader import for deployed extensions

## [2.68.0] - 2026-04-10

### Added

- expose slice replanning over workflow MCP
- expose milestone workflow tools over MCP
- expose slice completion over workflow MCP
- expose task completion alias over workflow MCP
- expose GSD planning tools over MCP
- gate workflow MCP units by provider transport capabilities
- expose core GSD workflow tools over MCP
- add contextual tips system for TUI and web terminal

### Fixed

- **state**: prevent false degraded-mode warning when DB not yet initialized
- **gsd**: use debugLog in catch block to satisfy empty-catch lint
- **gsd**: avoid false manifest and skipped-slice warnings
- **gsd**: replace empty catch block with descriptive comment
- guard autoCommitDirtyState and restore cwd on MergeConflictError (#2929)
- Claude Code MCP tool output rendering and real-time streaming
- **gsd**: surface warnings when DB or STATE.md init fails
- **gsd**: create gsd.db, runtime/, and STATE.md during init (#3880)
- **gsd**: suppress workflow stderr during /gsd
- **gsd**: enforce workflow write gates over MCP
- restore autoStartTime on resume + replace empty catch blocks (#3585)
- **mcp**: harden workflow tool boundary
- **gsd**: accept em-dash none verification rationale
- **gsd**: resync managed resources on auto resume
- **gsd**: stop stale forensics context hijacks
- **gsd**: serialize workflow MCP execution state
- **gsd**: restore milestone status db preflight
- **claude-code-cli**: suppress streamed internal tool noise
- **gsd**: skip same-path planning artifact copies
- **claude-code-cli**: suppress internal tool call noise
- **pi-coding-agent**: avoid oauth login for api-key providers
- **gsd**: snapshot new untracked files before dispatch
- **platform**: harden command execution and stabilize onboarding sync
- **pi-ai**: restore event stream factory export
- **gsd**: use valid codebase refresh logger
- **gsd**: auto-refresh codebase cache
- **gsd**: align model switching and prefs surfaces
- route slice and validation artifacts through DB tools
- make gsd_complete_task the only execute-task summary path
- **docs**: stop pointing repo documentation to gsd.build
- add activeEngineId and activeRunDir to PausedSessionMetadata interface
- **gsd**: address QA round 4
- **gsd**: address QA round 3
- **gsd**: address QA round 2
- **gsd**: address QA round 1
- **gsd**: address review feedback from trek-e
- **gsd**: assess recovery from paused worktree state
- **gsd**: satisfy extension typecheck for interrupted recovery
- **gsd**: restore hook dispatch export and guided flow imports
- **gsd**: clear stale paused metadata in guided flow
- **gsd**: preserve interrupted-session resume mode
- preserve explicit interrupted-session resume mode
- preserve step-mode and suppress stale paused resumes
- suppress stale interrupted-session resume prompts

### Changed

- harden workflow MCP executor loading
- **ci**: add weekly workflow to regenerate model registry
- **deps**: refresh audited package locks

## [2.67.0] - 2026-04-09

### Added

- **context**: implement R005 decision scope cascade and derive scope from slice metadata
- **M005**: Tiered Context Injection - relevance-scoped context with 65%+ reduction

### Fixed

- **test**: align auto-loop test timers with updated session timeout
- **gsd**: repair CI after branch split
- **gsd**: repair CI after branch split
- **gsd**: repair CI after branch split
- **gsd**: fail closed for discussion gate enforcement
- **gsd**: harden auto merge recovery and session safety
- **gsd**: repair overlay, shortcut, and widget surfaces
- **gsd**: prevent stale workflow reconcile state writes
- **gsd**: align prompt contracts and validation flow
- **pi-tui**: harden input parsing and editor focus behavior
- **remote-questions**: cancel local TUI when remote answer wins the race
- **auto**: increase session timeout to 120s and treat timeout as recoverable pause (#3767)
- **ui**: apply anthropic-api display name to all model/provider UI surfaces
- **ui**: display 'anthropic-api' in GSD preferences wizard provider list
- **remote-questions**: race local TUI against remote channel instead of remote-only routing
- **ui**: display 'anthropic-api' in model selector to distinguish from claude-code
- **gates**: add mechanical enforcement for discussion question gates
- **prompts**: harden non-bypassable gates and exclude dot-folders from scanning
- **gsd**: ignore filename headings in parsePlan
- **providers**: match 'out of extra usage' error and respect claude-code provider in model resolution (#3772)
- **pi-ai**: recover XML parameters trapped in JSON strings
- **retry**: guard claude-code fallback to anthropic provider only
- **providers**: route Anthropic subscription users through Claude Code CLI (#3772)
- **claude-code**: use native Windows claude lookup
- **gsd**: suppress repeated preferences section warnings
- **gsd**: normalize described expected output paths
- **auto**: resilient transient error recovery — defer to Core RetryHandler and fix cmdCtx race

## [2.66.1] - 2026-04-08

### Fixed

- **pi-tui**: revert contentCursorRow, use hardwareCursorRow as movement baseline
- **pi-tui**: use contentCursorRow for render movement baseline instead of cursorRow
- **gsd**: add logWarning to empty catch block in orphaned worktree cleanup
- **gsd**: add consecutiveFinalizeTimeouts to LoopState in journal tests
- **gsd**: add escalation and unit-detach guards to finalize timeout handlers
- **gsd**: add timeout guard around postUnitPreVerification to prevent auto-loop hang
- **gsd**: OS-specific keyboard shortcut hints via formatShortcut helper
- **subagent**: support list-style tools frontmatter
- clear autocomplete rows from content bottom
- parse annotated pre-exec file paths
- **gsd**: add orphaned milestone branch audit at auto-mode bootstrap

## [2.66.0] - 2026-04-08

### Added

- **gsd**: add fast path for queued milestone discussion
- **gsd**: add /gsd show-config command
- **reactive**: graph diagnostics and subagent_model config
- **dispatch**: parallel research slices and parallel milestone validation
- **parallel**: worker model override for parallel milestone workers

### Fixed

- **gsd**: validate depth verification answer before unlocking write-gate
- **gsd**: revert unknown artifact check to warn-and-proceed
- **gsd**: add missing cmd field to test base WorkflowEvent
- **gsd**: address remaining adversarial review findings for wave 3
- **gsd**: detect concurrent event log growth during reconcile
- **gsd**: address adversarial review findings for wave 3
- **gsd**: address adversarial review findings for wave 2
- **gsd**: address adversarial review findings for wave 1
- **gsd**: WAL-safe migration backup + stronger regression tests
- **gsd**: consistency and cleanup (wave 5/5)
- **gsd**: write safety — atomic writes and randomized tmp paths (wave 4/5)
- **gsd**: session and recovery robustness (wave 3/5)
- **gsd**: event log and reconciliation robustness (wave 2/5)
- **gsd**: critical state machine data integrity fixes (wave 1/5)
- **gsd**: critical state machine data integrity fixes (wave 1/5)
- **gsd**: remove ecosystem research stub and address adversarial review
- **gsd**: suppress model change notification in auto-mode unless verbose
- **gsd**: exclude task.files from checkTaskOrdering to prevent false positives
- **state**: skip ghost check for queued milestones in registry build
- **ci**: replace empty catch blocks and raw stderr with logWarning
- **logging**: add debugLog to empty catch in reopen-milestone
- **state-machine**: 9 resilience fixes + 86 regression tests (#3161)
- **gsd**: add incremental persistence to discuss prompts
- replace empty catch with logWarning for silent-catch-diagnostics test
- **test**: escape regex metacharacters in skip-by-preference pattern test
- **test**: search for numbered step definitions in prompt ordering test
- **test**: update notes loop test for notesVisible guard behavior
- **test**: update action count for note captures now included in results
- **test**: remove extraneous test file from wrong branch
- **test**: update worktree sync tests to use separate milestone IDs
- **gsd**: use valid LogComponent type for stale branch guard warning
- **test**: update rogue detection test for auto-remediation behavior
- **test**: update stuck-planning test to expect executing after reconciliation
- **test**: update file path consistency tests for inputs-only checking
- **test**: add CONTEXT file to queued milestone ghost detection test
- **test**: update needs-remediation test to expect validating-milestone phase
- **gsd**: import all-done milestones as complete during DB migration
- **gsd**: allow milestone completion when validation skipped by preference
- **gsd**: set slice sequence at all three insertion sites
- **gsd**: four prompt/runtime fixes for completion and session stability
- **gsd**: default insertMilestone status to queued instead of active
- **gsd**: suppress repeated frontmatter YAML parse warnings
- **gsd**: normalize list inputs in complete-task + fix roadmap dep parsing
- **gsd**: open DB before status derivation + respect isolation:none in quick
- **gsd**: add .bg-shell/ to baseline gitignore patterns
- **tui**: prevent Enter key infinite loop in interview notes mode
- **provider**: handle Enter key to initiate auth setup in provider manager
- **gsd**: cap run-uat dispatch attempts to prevent infinite replay loop
- **mcp**: use createRequire to resolve SDK wildcard subpath imports
- **gsd**: mark note captures as executed in executeTriageResolutions
- **gsd**: validate main_branch preference exists before using in merge
- **gsd**: handle deleted cwd in projectRoot to prevent ENOENT crash
- **gsd**: skip current milestone in syncWorktreeStateBack to prevent merge conflicts
- **gsd**: add structuredQuestionsAvailable conditional to slice discuss
- **gsd**: restore full tool set after discuss flow scoping
- **gsd**: tighten verifyExpectedArtifact to prevent rogue-write false positives
- **gsd**: add verification gate to complete-slice tool
- **gsd**: fix pre-execution-checks false positives from backticks and task.files
- **gsd**: stop renderAllProjections from overwriting authoritative PLAN.md
- **gsd**: auto-checkout to main when isolation:none finds stale milestone branch
- **gsd**: auto-remediate stale slice DB status when SUMMARY exists on disk
- **gsd**: open DB on demand in gsd_milestone_status for non-auto sessions
- **gsd**: detect phantom milestones from abandoned gsd_milestone_generate_id
- **gsd**: force re-validation when verdict is needs-remediation
- **gsd**: exclude closed slices from findMissingSummaries check
- **gsd**: recover from stale lockfile after crash or SIGKILL
- **gsd**: add createdAt timestamp and 30s age guard to staleness check
- **gsd**: clear stale pendingAutoStart after /clear interrupts discussion
- **gsd**: suppress misleading warnings for expected ENOENT/EISDIR conditions
- **gsd**: extract real error from message content when errorMessage is useless
- **gsd**: extract real error from message content when errorMessage is useless
- **gsd**: show accurate pause message for queued-user-message skip
- **gsd**: treat queued-user-message skip as non-retryable interruption
- **gsd**: recognize "Not provided." default in isVerificationNotApplicable
- **gsd**: discoverManifests skips symlinked extension directories
- **gsd**: recognize "Not provided." default in isVerificationNotApplicable
- **gsd**: reconcile plan-file tasks into DB when planner skips persistence (#3600)
- **gsd**: use isClosedStatus() in dispatch guard instead of raw complete check
- **browser-tools**: make sharp an optional lazy dependency
- **gsd**: pass required arguments in defer-milestone-stamp test
- **gsd**: replace remaining empty catch with logWarning
- **gsd**: use logWarning instead of raw stderr in catch blocks
- **gsd**: log error instead of empty catch in STATE.md rebuild
- **gsd**: log error instead of empty catch in skip_slice
- **gsd**: cast milestone classification to string for type safety
- **gsd**: treat zero-slice roadmap as pre-planning in guided flow
- **gsd**: rebuild STATE.md after skip-slice and strengthen rethink prompt
- **gsd**: use main_branch preference in worktree creation
- **gsd**: stamp defer and milestone captures as executed after triage
- **tui**: treat absolute file paths as plain text, not commands
- **tui**: break infinite re-render loop for images in cmux
- **gsd**: rebuild STATE.md before guided-flow dispatch
- **gsd**: defer queued shells in active milestone selection
- **retry**: prevent 429 quota cascade and 30-min lockout
- **gsd**: add fastPathInstruction to buildDiscussMilestonePrompt loadPrompt call

### Changed

- auto-commit after quick-task
- auto-commit after quick-task
- auto-commit after quick-task
- auto-commit after quick-task
- auto-commit after quick-task
- auto-commit after quick-task
- auto-commit after quick-task

## [2.65.0] - 2026-04-07

### Added

- **gsd**: persistent notification panel with TUI overlay, widget, and web API
- **gsd**: wire blocking behavior and strict mode for enhanced verification
- **gsd**: add post-execution cross-task consistency checks
- **gsd**: add pre-execution plan verification checks

### Fixed

- **gsd**: wrap long notification messages and fit overlay to content
- **gsd**: remove background color from backdrop, fix message truncation
- **gsd**: restore consistent overlay height to prevent ghost artifacts
- **gsd**: improve notification overlay backdrop and content-fit sizing
- **gsd**: only unlink notification lock when owned, prevent foreign lock deletion
- **gsd**: add backdrop dimming and viewport padding to notification overlay
- **gsd**: add intent + phase guards to resume context fallback (#3615)
- **gsd**: inject task context for unstructured resume prompts (#3615)
- **pi-coding-agent**: restore extension tools after session switch (#3616)
- **agent-loop**: schema overload cap ignores bash execution errors (#3618)
- **bg-shell**: prevent signal handler accumulation + cap alert queue
- **gsd**: coerce plain-string provides field to array in complete-slice (#3585)
- address PR #3468 review findings
- **gsd**: persist autoStartTime across session resume so elapsed timer survives /exit
- **gsd**: add enhanced_verification preferences to mergePreferences
- **headless**: treat discuss and plan as multi-turn commands

### Changed

- **interactive**: cap rendered chat components + kill orphan descendants
- **tui**: render-skip, frame isolation, Text cache guard, dispose

## [2.64.0] - 2026-04-06

### Added

- **gsd**: add LLM safety harness for auto-mode damage control
- **ollama**: native /api/chat provider with full option exposure
- **parallel**: slice-level parallelism with dependency-aware dispatch (#3315)
- **mcp-client**: add OAuth auth provider for HTTP transport (#3295)

### Fixed

- **ui**: remove 200-column cap on welcome screen width
- address adversarial review findings for #3576
- **gsd**: replace hardcoded agent skill paths with dynamic resolution (#3575)
- **headless**: sync resources and use agent dir for query
- **cli**: show latest version and bypass npm cache in update check
- **gsd**: follow CONTRIBUTING standards for #3565
- **gsd**: address Codex adversarial review findings for #3565
- **gsd**: coerce string arrays to objects in complete-slice/task tools (#3565)
- **gsd**: harden flat-rate routing guard against alias/resolution gaps
- **pi-coding-agent**: register models.json providers and await Ollama probe in headless mode
- **ollama**: use apiKey auth mode to avoid streamSimple crash
- **gsd**: disable dynamic model routing for flat-rate providers
- **gsd**: address Codex adversarial review findings
- **gsd**: prevent LLM from querying gsd.db directly via bash (#3541)
- **gsd**: seed requirements table from REQUIREMENTS.md on first update
- **gsd**: inject S##-CONTEXT.md from slice discussion into all prompt builders
- **cli**: guard model re-apply against session restore and async rejection
- **pi-coding-agent**: resolve model fallback race that ignores configured provider (#3534)
- **detection**: add xcodegen and Xcode bundle support to project detection (#1882)
- **perf**: share jiti module cache across extension loads (#3308)
- **resource-sync**: prune removed bundled subdirectory extensions on upgrade (#1972)
- recognize U+2705 checkmark emoji as completion marker in prose roadmaps (#1897)
- **web**: use safePackageRootFromImportUrl for cross-platform package root (#1881) (#1893)
- isolate CmuxClient stdio to prevent TUI hangs in CMUX (#3306)
- worktree health check walks parent dirs for monorepo support (#3313)
- **gsd**: promote milestone status from queued to active in plan-milestone (#3317)
- **worktree**: correct merge failure notification command from /complete-milestone to /gsd dispatch complete-milestone (#1901)
- detect and block Gemini CLI OAuth tokens used as API keys (#3296)
- **auto**: break retry loop on tool invocation errors (malformed JSON) (#3298)
- **git**: use git add -u in symlink .gsd fallback to prevent hang (#3299)
- handle complete-slice context exhaustion to unblock downstream slices (#3300)
- cap consecutive tool validation failures to prevent stuck-loop (#3301)
- make enrichment tool params optional for limited-toolcall models (#3302)
- add filesystem safety guard to complete-slice.md (#3304)
- **extensions**: use bundledExtensionKeys for conflict detection instead of broken path heuristic (#3305)
- scope tools during discuss flows to prevent grammar overflow (#3307)
- **preferences**: warn on silent parse failure for non-frontmatter files (#3310)
- track remote-questions in managed-resources manifest (#3312)
- **auto**: add timeout guard for postUnitPostVerification in runFinalize (#3314)
- **gsd**: handle large markdown parameters in complete-milestone JSON parsing (#3316)
- **metrics**: deduplicate idle-watchdog entries and fix forensics false-positives (#1973)
- prevent milestone/slice artifact rendering corruption (#3293)
- **doctor**: strip --fix flag before positional parse (#1919) (#1926)
- resolve external-state worktree DB path (#2952) (#3303)
- **gsd**: worktree teardown path validation prevents data loss (#3311)
- prevent auto-mode from dispatching deferred slices (#3309)
- preserve completed slice status on plan-milestone re-plan (#3318)
- reopen DB on cold resume, recognize heavy check mark (#3319)
- dashboard model label shows dispatched model, not stale previous unit (#3320)

### Changed

- **gsd**: remove copyright line from test file
- **gsd**: trim promptGuidelines to 1 line to reduce per-turn token cost
- **web**: consolidate subprocess boilerplate into shared runner (#1899)

## [2.63.0] - 2026-04-05

### Added

- **mcp-server**: add 6 read-only tools for project state queries (#3515)

### Fixed

- **gsd**: enrich vague diagnostic messages with root-cause context
- **test**: reset dedup cache between ask-user-freetext tests
- **db**: delete orphaned WAL/SHM files alongside empty gsd.db (#2478)
- **gsd**: prevent auto-wrapup from interrupting in-flight tool calls (#3512)
- **gsd**: handle bare model IDs in resolveDefaultSessionModel (#3517)
- **gsd**: wrap decision and requirement saves in transaction to prevent ID races
- **gsd**: prefer PREFERENCES.md over settings.json for session bootstrap model (#3517)
- **gsd**: add Claude Code official skill directories to skill resolution
- **dedup**: hash full question payload, not just IDs
- **gsd**: prevent duplicate ask_user_questions dispatches with per-turn dedup cache
- **pi-ai**: extend repairToolJson to handle XML tags and truncated numbers
- **pi-coding-agent**: cancel stale retries after model switch

### Changed

- untrack .repowise/ and add to .gitignore

## [2.62.1] - 2026-04-05

### Fixed

- **gsd**: gate steer worktree routing on active session, fix messaging
- **gsd**: resolve steer overrides to worktree path when worktree is active

## [2.62.0] - 2026-04-04

### Added

- **gsd**: enhance /gsd codebase with preferences, --collapse-threshold, and auto-init
- **01-05**: fire before_model_select hook, add verbose scoring output, load capability overrides
- **01-04**: register before_model_select placeholder handler in GSD hooks
- **01-04**: add BeforeModelSelectEvent to extension API and wire emission
- **01-03**: wire taskMetadata from selectAndApplyModel to resolveModelForComplexity
- **01-03**: insert STEP 2 capability scoring into resolveModelForComplexity
- **01-01**: add taskMetadata to ClassificationResult and export extractTaskMetadata
- **01-01**: add capability types, data tables, and scoring functions to model-router

### Fixed

- **gsd**: add codebase validation in validatePreferences so preferences are not silently dropped
- **test**: update db-path-worktree-symlink test for simplified diagnostic logging
- **gsd**: update tests for errors-only audit persistence, fix empty catch blocks
- **gsd**: harden audit log persistence — errors-only, sanitized, demote probe warnings
- **gsd**: address adversarial review findings on workflow-logger migration
- **gsd**: fail-closed stop guard, harden backtrack parsing, fix prompt params
- **gsd**: add diagnostic logging to empty catch blocks in auto-mode
- **lsp**: add legacy alias for renamed kotlin-language-server key
- break infinite notes loop when selecting "None of the above"
- align defaultRoutingConfig capability_routing to true
- **pi-coding-agent**: upgrade Kotlin LSP to official Kotlin/kotlin-lsp
- **test**: use correct RequirementCounts type fields in edge case tests
- **remote-questions**: fire configured channels in interactive mode

### Changed

- **gsd**: migrate all catch blocks to centralized workflow-logger
- init gsd

## [2.61.0] - 2026-04-04

### Added

- stop/backtrack capture classifications for milestone regression (#3488)
- GSD context optimization with model routing and context masking

## [2.60.0] - 2026-04-04

### Added

- add /btw skill — ephemeral side questions from conversation context

### Fixed

- **btw**: remove LLM-specific references from skill description

## [2.59.0] - 2026-04-03

### Added

- **extensions**: add Ollama extension for first-class local LLM support (#3371)
- **doctor**: stale commit safety check with gsd snapshot and auto-cleanup
- **extensions**: wire up topological sort and unified registry filtering (#3152)
- **widget**: add last commit display and dashboard layout improvements (#3226)
- **model-routing**: enable dynamic routing by default (#3120)
- **vscode**: sidebar redesign, SCM provider, checkpoints, diagnostics [3/3]
- **splash**: add remote channel indicator to welcome screen tools row
- stream full text and thinking output in headless verbose mode (#2934)
- **gsd**: add codebase map — structural orientation for fresh agent contexts

### Fixed

- **worktree**: resolve merge conflict for PR #3322 — adopt comprehensive pre-merge cleanup
- **merge**: clean stale MERGE_HEAD before squash merge (#2912)
- **state**: always run disk→DB reconciliation when DB is available (#2631)
- **git-service**: fix merge-base ancestry check and .gsd/ leakage in snapshot absorption
- **extensions**: update provides.hooks in 7 extension manifests to match actual registrations (#3157)
- surface nativeCommit errors in reconcileMergeState instead of silently swallowing (#3052)
- **parallel**: scope commits to milestone boundaries in parallel mode (#3047)
- add windowsHide to all web-mode subprocess spawns (#2628) (#3046)
- skip auto-mode pause on empty-content aborted messages (#2695) (#3045)
- detect and remove nested .git dirs in worktree cleanup to prevent data loss (#3044)
- prevent data loss when git isolation default changes (#2625) (#3043)
- **read-tool**: clamp offset to file bounds instead of throwing (#3007) (#3042)
- **gsd**: preserve queued milestones with worktrees in ghost detection (#3041)
- **compaction**: add chunked fallback when messages exceed model context window (#3038)
- preserve interactive terminal across tab switches and project changes (#3055)
- call cleanupQuickBranch on turn_end to squash-merge quick branch back (#3054)
- align run-uat artifact path to ASSESSMENT, preventing false stuck retries (#3053)
- replace invalid Discord invite links with canonical URL (#3056)
- add Windows shell guard to remaining spawn sites (#3058)
- route `gsd auto` to headless runner to prevent hang on piped stdin/stdout (#3057)
- respect .gitignore for .gsd/ in rethink prompt (#3059)
- migrate unit ownership from JSON to SQLite to eliminate read-modify-write race (#3061)
- **roadmap**: handle numbered, bracketed, and indented prose H3 headers in slice parser (#3063)
- add worktree-merge to resolveModelWithFallbacksForUnit switch and update KNOWN_UNIT_TYPES (#3066)
- clean up MERGE_HEAD on all error paths in mergeMilestoneToMain (#2912) (#3068)
- prevent LLM from confusing background task output with user input (#3069)
- add openai-codex provider and modern OpenAI models to MODEL_CAPABILITY_TIER and cost tables (#3070)
- preserve active tab when switching projects (#3071)
- include project name in desktop notifications (#3072)
- recover from many-image dimension overflow by stripping older images (#3075)
- resolve bare model IDs to anthropic over claude-code provider (#3076)
- **auto**: move selectAndApplyModel before updateProgressWidget (#3079)
- detect project relocation and recover state without data loss (#3080)
- add free-text input to ask-user-questions when "None of the above" is selected (#3081)
- block work execution during /gsd queue mode (#2545) (#3082)
- detect worktree basePath in gsdRoot() to prevent escaping to project root (#3083)
- invalidate stale quick-task captures across milestone boundaries (#3084)
- defer model validation until after extensions register (#3089)
- repair YAML bullet lists in malformed tool-call JSON (#3090)
- unify SUMMARY.md render paths for projection fidelity (#3091)
- chat mode misrepresents terminal output, looks stuck, omits user messages (#3092)
- resolve 4 state corruption bugs in milestone/slice completion (#2945) (#3093)
- isolate guided-flow session state and key discussion milestone queries (#2985) (#3094)
- **guided-flow**: route dispatchWorkflow through dynamic routing pipeline (#3153)
- skip external state migration inside git worktrees (#2970) (#3227)
- coerce non-numeric strings in DB columns during manifest serialization (#2962) (#3229)
- route allDiscussed and zero-slices paths to queued milestone discussion (#3150) (#3230)
- use loose equality for null checks in secure_env_collect (#2997) (#3231)
- prevent prompt explosion from $' in template replacement values (#2968) (#3232)
- resolve OAuth API key in buildMemoryLLMCall via modelRegistry (#2959) (#3233)
- **forensics**: read completion status from DB instead of legacy file (#3129) (#3234)
- use camelCase parameter names in execute-task and complete-slice prompts (#2933) (#3236)
- check bootstrap completeness in init wizard gate, not just .gsd/ existence (#2942) (#3237)
- specify write tool for PROJECT.md in milestone/slice prompts (#3238)
- widen completing-milestone gate to accept "None required" and similar phrasings (#2931) (#3239)
- prevent ask_user_questions from poisoning auto-mode dispatch (#2936) (#3240)
- guard null s.currentUnit in runUnitPhase closeout after stopAuto race (#2939) (#3241)
- replace `web_search` with `search-the-web` in prompts and agent frontmatter (#2920) (#3245)
- preserve milestone title in upsertMilestonePlanning when DB row pre-exists (#2879) (#3247)
- invalidate stale milestone validation on roadmap reassessment (#2957) (#3242)
- **discuss**: add roadmap fallback when DB is open but empty (#2892) (#3244)
- integrate Codex & Gemini CLI into provider routes and rate-limit handling (#2922) (#3246)
- **error-classifier**: widen STREAM_RE to cover all 7 V8 JSON parse error variants (#2916) (#3243)
- prevent git stash from destroying queued milestone CONTEXT files (#2505) (#3273)
- skip staleness rebuild in npm tarball installs (#2877) (#3250)
- **parallel**: check worktree DB for milestone completion in merge (#2812) (#3256)
- make claude-code provider stateful with full context and sidechain events (#2859) (#3254)
- **worktree**: preserve non-empty gsd.db during sync to prevent truncation (#2815) (#3255)
- align @gsd/native module type with compiled output (#3253)
- parse hook/\* completed-unit keys correctly in forensics + doctor (#2826) (#3252)
- copy mcp.json into auto-mode worktrees (#2791) (#3251)
- add gsd_requirement_save and upsert path for requirement updates (#3249)
- handle pause_turn stop reason to prevent 400 errors with native web search (#2869) (#3248)
- use authoritative milestone status in web roadmap (#2807) (#3258)
- classify long-context entitlement 429 as quota_exhausted, not rate_limit (#2803) (#3257)
- **docs**: use ~/.pi/agent/extensions/ for community extension install path (#3131) (#3259)
- add disk→DB slice reconciliation in deriveStateFromDb (#2533) (#3262)
- run forensics duplicate detection before investigation (#2704) (#3260)
- skip TUI render loop on non-TTY stdout to prevent CPU burn (#3095) (#3263)
- persist forensics report context across follow-up turns (#2941) (#3261)
- invalidate workspace state on turn_end so milestones list stays current (#2706) (#3266)
- eliminate 3 recurring doctor audit false positives (#3105) (#3264)
- **web**: reconcile auto-mode state with on-disk lock in dashboard (#2705) (#3265)
- treat ghost milestones as ineligible for parallel execution (#2501) (#3268)
- redirect auto-mode to headless when stdout is piped (#2732) (#3269)
- attempt VACUUM recovery when initSchema fails with corrupt freelist (#2519) (#3270)
- resolve db_unavailable loop in worktree/symlink layouts (#2517) (#3271)
- correct OAuth fallback request shape for google_search (#2963) (#3272)
- prevent UAT stuck-loop and orphaned worktree after milestone completion (#3065)
- **mcp**: handle server names with spaces in mcp_discover (#3037)
- **gsd**: detect markdown body verdicts and guard plan-milestone against completed slices (#2960) (#3035)
- **error-classifier**: replace STREAM_RE whack-a-mole with catch-all V8 JSON.parse pattern
- type \_borderColorKey as 'dim' | 'bashMode' to match ThemeColor
- **tui**: comprehensive TUI review — layout, flow, rendering, and state fixes
- **gsd**: harden codebase-map — bug fixes, UX polish, and expanded tests

### Changed

- **state**: centralize pipeline logging through workflow logger (#3282)
- **gitignore**: exclude src/ build artifacts, scratch files, and .plans/
- **complexity**: reclassify planning phases from standard to heavy tier

## [2.58.0] - 2026-03-28

### Added

- Added 6 discord.js shard/error/warn event listeners for reconnect…

### Fixed

- **auto**: guard startAuto() against concurrent invocation (#2923)
- **auto-dispatch**: widen operational verification gate regex (fixes #2866) (#2898)
- **parallel**: three bugs preventing reliable parallel worker execution (#2801)
- **web**: fall back to project totals when dashboard metrics are zero (#2847)
- **gsd**: parse raw YAML under preference headings (#2794)
- **gsd**: persist verification classes in milestone validation (#2820)
- **gsd**: guard reconcileWorktreeDb against same-file ATTACH corruption (#2825)
- **web**: skip shutdown in daemon mode so server survives tab close (#2842)
- **headless**: skip execution_complete for multi-turn commands (auto/next)
- Fixed 3 bugs (launchd JSON parsing, login race condition, interact…

## [2.57.0] - 2026-03-28

### Added

- Extended DaemonConfig with control_channel_id and orchestrator se…
- Created pure-function event formatters (10 functions) mapping RPC…
- **models**: add GLM-5.1 to Z.AI provider in custom models
- Added discord.js v14, DiscordBot class with auth guard and lifecy…
- Created packages/daemon workspace package with DaemonConfig/LogLe…
- headless text mode shows tool calls + skip UAT pause in headless
- Wire --resume flag to resolve session IDs via prefix matching and…
- Migrated headless orchestrator to use execution_complete events,…

### Fixed

- **headless**: match "completed" status from RPC v2 in exit code mapper
- show external drives in directory browser on Linux
- Regenerate package-lock.json after merge
- **gsd**: resume cold auto bootstrap from db
- **gsd**: preserve first auto unit model after session reset
- Accept flags after positional command in headless arg parser
- **gsd**: discover project subagents in .gsd
- **model-routing**: use honest unitTypes for discuss dispatches and map all auto-dispatch phases
- revert jsonl.ts to inline implementation — @gsd-build/rpc-client not available at source-level test time in CI

### Changed

- auto-commit after complete-milestone

## [2.56.0] - 2026-03-27

### Added

- **parallel**: /gsd parallel watch — native TUI overlay for worker monitoring (#2806)

### Fixed

- **ci**: copy web/components to dist-test for xterm-theme test (#2891)
- **gsd**: prefer PREFERENCES.md in worktrees (#2796)
- **gsd**: resume auto-mode after transient provider pause (#2822)
- **parallel**: resolve session lock contention and 3 related parallel-mode bugs (#2184) (#2800)
- **web**: improve light theme terminal contrast (#2819)
- **gsd**: preserve auto start model through discuss (#2837)

### Changed

- **test**: compile unit tests with esbuild, reclassify integration tests, fix node_modules symlink (#2809)

## [2.55.0] - 2026-03-27

### Added

- colorized headless verbose output with thinking, phases, cost, and durations (#2886)
- headless text mode observability + skip UAT pause (#2867)

### Fixed

- **cli**: let gsd update bypass version mismatch gate (#2845)
- **contracts**: add isWorkspaceEvent guard + close routeLiveInteractionEvent exhaustiveness gap (#2878)
- **gsd**: use project root for prior-slice dispatch guard (#2863)
- **gsd**: include queue context in milestone planning prompts (#2846)
- detect monorepo roots in project discovery to prevent workspace fragmentation (#2849)
- **bg-shell**: recover from deleted cwd in timers (#2850)
- **gsd**: enable dynamic routing without models section (#2851)
- **interactive**: fully remove providers from /providers (#2852)

## [2.54.0] - 2026-03-27

### Added

- Headless Integration Hardening & Release (M002) (#2811)
- **parallel**: add real-time TUI monitor dashboard with self-healing (#2799)

## [2.53.0] - 2026-03-27

### Added

- **vscode**: activity feed, workflow controls, session forking, enhanced code lens [2/3] (#2656)
- **gsd**: enable safety mechanisms by default (snapshots, pre-merge checks) (#2678)

### Fixed

- hydrate collected secrets for current session (#2788)
- resolve stash pop conflicts and stop swallowing merge errors (#2780)
- treat any extracted verdict as terminal in isValidationTerminal (#2774)
- use localStorage for auth token to enable multi-tab usage (#2785)
- guard activeMilestone.id access in discuss and headless paths (#2776)
- clean up zombie parallel workers stuck in error state (#2782)
- relax milestone validation gate to accept prose evidence (#2779)
- write milestone reports to project root instead of worktree (#2778)
- auto-resolve build artifact conflicts in milestone merge (#2777)
- let rate-limit errors attempt model fallback before pausing (#2775)
- prevent gsd next from self-killing via stale crash lock (#2784)
- add shell flag for Windows spawn in VSCode extension (#2781)

### Changed

- **gsd**: extract duplicated status guards and validation helpers (#2767)

## [2.52.0] - 2026-03-27

### Added

- **vscode**: status bar, file decorations, bash terminal, session tree, conversation history, code lens [1/2] (#2651)
- **web**: Dark mode contrast — raise token floor and flatten opacity tier system (#2734)
- Wire --bare mode across headless → pi-coding-agent → resource-loa…
- Added runId generation on prompt/steer/follow_up commands, event…
- Added RPC protocol v2 types, init handshake with version detectio…

### Fixed

- auto-mode stops after provider errors (#2762) (#2764)
- add missing runtime stage name to Dockerfile (#2765)
- make transaction() re-entrant and add slice_dependencies to initSchema
- remove preferences.md from ROOT_STATE_FILES to prevent back-sync overwrite
- wire tool handlers through DB port layer, remove \_getAdapter from all tools
- **gsd**: move state machine guards inside transaction in 5 tool handlers (#2752)
- reconcile disk milestones into empty DB before deriveStateFromDb guard (#2686)
- **gsd**: seed preferences.md into auto-mode worktrees (#2693)
- **claude-import**: discover marketplace plugins nested inside container directories (#2718)
- exempt interactive tools from idle watchdog stall detection (#2676)
- guard allSlicesDone against vacuous truth on empty slice array (#2679)
- block complete-milestone dispatch when VALIDATION is needs-remediation (#2682)
- **gsd**: sync milestone DB status in parkMilestone and unparkMilestone (#2696)
- **web**: auth token gate — synthetic 401 on missing token, unauthenticated boot state, and recovery screen (#2740)
- **remote-questions**: empty-key entry in auth.json shadows valid Discord bot token (#2737)
- idle watchdog stalled-tool detection overridden by filesystem activity (#2697)
- surface exhausted Claude SDK streams as errors (#2719)
- **docker**: overhaul fragile setup, adopt proven container patterns (#2716)
- **gsd**: write DB before disk in validate-milestone to match engine pattern (#2742)
- **gsd**: extract and honor milestone argument in /gsd auto and /gsd next (#2729)
- **windows**: prevent EINVAL by disabling detached process groups on Win32 (#2744)
- **gsd**: delete orphaned verification_evidence rows on complete-task rollback (#2746)
- **gsd**: wire setLogBasePath into engine init to resurrect audit log (#2745)
- Remove premature pendingTools.delete in webSearchResult handler (#2743)
- **gsd**: remove redundant assertions that fail TS2367 typecheck
- include preferences.md in worktree sync and initial seed

### Changed

- **pi-ai**: replace model-ID pattern matching with capability metadata (#2548)
- **gsd-db**: comprehensive SQLite audit fixes — indexes, caching, safety, reconciliation
- rename preferences.md to PREFERENCES.md for consistency (#2700) (#2738)
- **gsd**: unify three overlapping error classifiers into single classify→decide→act pipeline

## [2.51.0] - 2026-03-26

### Added

- add /terminal slash command for direct shell execution (#2349)
- **auto**: check verification class compliance before milestone completion (#2623)
- **validate**: extract followUps and knownLimitations in parseSummary (#2622)
- managed RTK integration with opt-in preference and web UI toggle (#2620)
- **validate**: inject verification classes into milestone validation prompt (#2621)
- **skills**: add 19 wshobson/agents packs with 40 curated skills
- **skills**: add 11 new skill packs covering major frameworks and languages
- **skills**: add SQLite/SQL detection, SQL optimization pack, and Redis pack
- **skills**: add Prisma and Supabase/Postgres database packs
- **skills**: add cloud platform packs (Firebase, Azure, AWS) and improve detection
- **skills**: curate catalog — add top ecosystem skills, drop low-quality bundled ones
- **skills**: parse SDKROOT from pbxproj for platform-aware iOS skill matching
- **skills**: use ~/.agents/skills/ as primary skills directory with curated catalog

### Fixed

- improve light theme warning contrast (#2674)
- honor explicit model config when model is not in known tier map (#2643)
- exclude lastReasoning from retry diagnostic to prevent hallucination loops (#2663)
- persist rewrite-docs attempt counter to disk for session restart survival (#2671)
- add non-null assertions for parseUnitId optional fields in tests
- update triage-dispatch static analysis tests for enqueueSidecar helper
- **notifications**: prefer terminal-notifier over osascript on macOS (#2633)
- classify stream-truncation JSON parse errors as transient (#2636)
- call ensureDbOpen() before slice queries in /gsd discuss (#2640)
- **prompts**: use --body-file for forensics issue creation (#2641)
- isLockProcessAlive should return true for own PID (#2642)
- check ASSESSMENT file for UAT verdict in checkNeedsRunUat (#2646)
- use pauseAuto instead of stopAuto for warning-level dispatch stops (#2666)
- signal malformed tool arguments in toolcall_end event (#2647)
- prevent double mergeAndExit on milestone completion (#2648)
- respect queue-order.json in DB-backed state derivation (#2649)
- **vscode**: support Remote SSH by adding extensionKind and error handler (#2650)
- update DB task status in writeBlockerPlaceholder for execute-task (#2657)
- normalize path separators in matchesProjectFileMarker for Windows
- **tests**: remove obsolete doctor filesystem test
- **tests**: update doctor issue code to db_done_task_no_summary
- restore PR files lost during merge conflict resolution
- **skills**: address QA round 3
- **skills**: address QA round 2
- **skills**: address QA round 1
- **skills**: prioritize ecosystem dir and skip legacy after migration
- **skills**: address QA round 23
- **skills**: address QA round 22
- **skills**: address QA round 21
- **skills**: address QA round 20
- **skills**: address QA round 19
- **skills**: address QA round 18
- **skills**: address QA round 17
- **skills**: address QA round 16
- **skills**: address QA round 15
- **skills**: address QA round 14
- **skills**: address QA round 13
- **skills**: address QA round 12
- **skills**: address QA round 11
- **skills**: address QA round 10
- **skills**: address QA round 8
- **skills**: detect FastAPI via dependency scanning
- **skills**: address QA round 6
- **skills**: address QA round 5
- **skills**: address QA round 4
- **skills**: address QA round 3
- **skills**: address QA round 2
- **skills**: defer greenfield skill selection to post-design phase
- **skills**: add migration from ~/.gsd/agent/skills/ to ~/.agents/skills/
- **gsd extension**: detect initialized projects in health widget
- **gsd extension**: detect initialized projects in health widget

### Changed

- consolidate docs, remove stale artifacts, and repo hygiene (#2665)
- extract runSafely helper for try-catch-debug-continue pattern (#2611)

## [2.50.0] - 2026-03-26

### Added

- **gsd**: wire structured error propagation through UnitResult
- add parallel quality gate evaluation with evaluating-gates phase
- add 8-question quality gates to planning and completion templates

### Fixed

- reconcile stale task status in filesystem-based state derivation (#2514)
- merge duplicate extractUatType imports in auto-dispatch
- use Record<string, any> for hasNonEmptyFields to accept typed DB rows
- **tests**: replace undefined assertTrue/assertEq with assert.ok/assert.equal
- **tests**: replace undefined assertTrue/assertEq with assert.ok/deepStrictEqual
- **gsd**: handle session_switch event so /resume restores GSD state (#2587)
- use GitHub Issue Types via GraphQL instead of classification labels
- **headless**: disable overall timeout for auto-mode, fix lock-guard auto-select (#2586)
- **auto**: align UAT artifact suffix with gsd_slice_complete output (#2592)
- **retry-handler**: stop treating 5xx server errors as credential-level failures
- **test**: replace stale completedUnits with sessionFile in session-lock test
- **session-lock**: retry lock file reads before declaring compromise
- **gsd**: prevent ensureGsdSymlink from creating subdirectory .gsd when git-root .gsd exists
- **auto**: add EAGAIN to INFRA_ERROR_CODES to stop budget-burning retries
- **search**: enforce hard search budget and survive context compaction
- **remote-questions**: use static ESM import for AuthStorage hydration
- add SAFE_SKILL_NAME guard to reject prompt-injection via crafted skill names
- **gsd**: use explicit parameter syntax in skill activation prompts
- guard writeIntegrationBranch against workflow-template branches
- preserve doctor missing-dir checks for active legacy slices
- **gsd**: downgrade isolation mode when worktree creation fails
- **gsd**: skip loading files for completed milestones in queue context builder
- resolve race conditions in blob-store, discovery-cache, and agent-loop
- **ai**: resolve WebSocket listener leaks and bound session cache
- **rpc**: resolve double-set race, missing error ID, and stream handler
- **pi-coding-agent**: prevent crash when login is cancelled
- **doctor**: compare lockfile mtime against install marker, not directory mtime (#1974)
- **doctor**: chdir out of orphaned worktree before removal (#1946)
- **roadmap**: recognize '## Slice Roadmap' header in extractSlicesSection
- prevent worktree sync from overwriting state and forward-sync completed-units.json
- **web**: lazily compute default package root to avoid Windows standalone crash

### Changed

- adopt parseUnitId utility across all auto-\* modules
- flatten syncMilestoneDir nesting with shared helper
- extract merge-state cleanup helper in reconcileMergeState
- extract planning-state validation helpers in detectRogueFileWrites
- split doctor-checks into focused modules
- merge auto-worktree-sync into auto-worktree
- deduplicate artifact path functions into single module
- remove dead selfHealRuntimeRecords function from auto-recovery
- decouple session-forensics from auto-worktree
- remove dead worktree code and unused methods
- consolidate branch name patterns into single module
- deduplicate session-lock compromise handler and state assignment

## [2.49.0] - 2026-03-25

### Added

- add --yolo flag to /gsd auto for non-interactive project init

### Fixed

- use full git log in merge tests to match trailer-based milestone IDs
- update parallel-merge test assertion for new trailer format
- clarify regex alternation in test assertion
- verdict gate accepts PARTIAL for mixed/human-experience/live-runtime UATs

### Changed

- move GSD metadata from commit subject scopes to git trailers

## [2.48.0] - 2026-03-25

### Added

- **discuss**: allow /gsd discuss to target queued milestones
- enhance /gsd forensics with journal and activity log awareness

### Fixed

- make journal scanning intelligent — limit parsed files, line-count older ones
- **model-registry**: scope custom provider stream handlers to prevent clobbering built-in API handlers
- **forensics**: filter benign bash exit-code-1 and user skips from error traces
- **gsd**: clear stale milestone ID reservations at session start
- render tool calls above text response for external providers
- **auto**: skip CONTEXT-DRAFT warning for completed/parked milestones

### Changed

- address review - extract RAPID_ITERATION_THRESHOLD_MS, simplify data access

### Removed

- remove insertChildBefore usage in chat-controller

## [2.47.0] - 2026-03-25

### Added

- **agent-core**: add externalToolExecution mode for external providers
- **provider**: add Claude Code CLI provider extension

### Fixed

- **claude-code-cli**: render tool calls above text response
- **ci**: update FILE-SYSTEM-MAP.md path after docs→docs-internal move
- isInheritedRepo false negative when parent has stale .gsd; defense-in-depth local .git check in bootstrap
- **claude-code-cli**: resolve SDK executable path and update model IDs
- make planning doctrine demoable definition audience-appropriate
- **prompts**: migrate remaining 4 prompts to use DB-backed tool API instead of direct write
- make workflow event hash platform-deterministic
- reconcile stale task DB status from disk artifacts (#2514)

## [2.46.1] - 2026-03-25

### Fixed

- **ci**: prevent windows-portability from blocking pipeline
- **ci**: prevent pipeline race condition on release push
- **gsd**: create empty DB for fresh projects with empty .gsd/ (#2510)
- **remote-questions**: hydrate remote channel tokens from auth.json on startup

### Changed

- trigger CI to pick up pipeline race condition fix
- trigger pipeline with race condition fix

## [2.46.0] - 2026-03-25

### Added

- **gsd**: single-writer engine v3 — state machine guards, actor identity, reversibility
- **gsd**: single-writer state engine v2 — discipline layer on DB architecture
- **gsd**: add workflow-logger and wire into engine, tool, manifest, reconcile paths (#2494)

### Fixed

- **gsd**: align prompts with single-writer tool API
- **gsd**: integration-proof — check DB state not roadmap projection after reset
- **gsd**: block milestone completion when verification fails (#2500)
- **ci**: add typecheck:extensions to pretest to prevent silent type drift
- **gsd**: relax integration-proof cross-validation for table-format roadmap
- **gsd**: update integration-proof tests for table-format roadmap projections
- **gsd**: update test assertions for schema v11, prompt changes, and removed completedUnits
- **gsd**: update test files for removed completedUnits, writeLock signature, and type changes
- **gsd**: remove stale completedUnits refs, fix writeLock callers, add missing imports
- **gsd**: harden single-writer engine — close TOCTOU, intercept bypasses, status inconsistencies
- **write-intercept**: close bare-relative-path bypass in STATE.md regex
- **voice**: fix misleading portaudio error on PEP 668 Linux systems (#2403) (#2407)
- **core**: address PR review feedback for non-apikey provider support (#2452)
- **ci**: retry npm install in pipeline to handle registry propagation delay (#2462)
- **gsd**: change default isolation mode from worktree to none (#2481)
- **loader**: add startup checks for Node version and git availability (#2463)
- **gsd**: add worktree lifecycle events to journal (#2486)

## [2.45.0] - 2026-03-25

### Added

- **web**: make web UI mobile responsive (#2354)
- **gsd**: add `/gsd rethink` command for conversational project reorganization (#2459)
- **gsd**: add renderCall/renderResult previews to DB tools (#2273)
- add timestamps on user and assistant messages (#2368)
- **gsd**: add `/gsd mcp` command for MCP server status and connectivity (#2362)
- complete offline mode support (#2429)
- **system-context**: inject global ~/.gsd/agent/KNOWLEDGE.md into system prompt (#2331)

### Fixed

- **gsd**: handle retentionDays=0 on Windows + run windows-portability on PRs (#2460)
- use Array.from instead of Buffer.from for native processStreamChunk state (#2348)
- **gsd**: isInheritedRepo conflates ~/.gsd with project .gsd when git root is $HOME (#2398)
- reconcile disk milestones missing from DB in deriveStateFromDb (#2416) (#2422)
- **auto**: reset recoveryAttempts on unit re-dispatch (#2322) (#2424)
- detect and preserve submodule state during worktree teardown (#2337) (#2425)
- **auto-start**: handle survivor branch recovery in phase=complete (#2358) (#2427)
- **gsd**: widen test search window for CRLF portability on Windows (#2458)
- **gsd**: preserve rich task plans on DB roundtrip (#2450) (#2453)
- merge worktree back to main when stopAuto is called after milestone completion (#2317) (#2430)
- **gsd**: skip doctor directory checks for pending slices (#2446)
- **gsd**: migrate completion/validation prompts to DB-backed tools (#2449)
- **gsd**: prevent saveArtifactToDb from overwriting larger files with truncated content (#2442) (#2447)
- stop auto loop on real code merge conflicts (#2330) (#2428)
- classify terminated/connection errors as transient in provider error handler (#2309) (#2432)
- archive completed-units.json on milestone transition and sync metrics.json (#2313) (#2431)
- supervision timeouts now respect task est: annotations (#2243) (#2434)
- auto_pr: true now actually creates PRs — fix 3 interacting bugs (#2302) (#2433)
- **gsd**: insert DB row when generating milestone ID (#2416)
- **gsd**: reconcile disk-only milestones into DB in deriveStateFromDb (#2416)
- **preferences**: deduplicate unrecognized format warning on repeated loads (#2375)
- gate auto-mode bootstrap on SQLite availability (#2419) (#2421)
- block /gsd quick when auto-mode is active (#2420)
- **ci**: add Rust target for all platforms, not just cross-compilation
- **ci**: restore Rust target triple and separate cross-compilation setup
- **ci**: separate cross-compilation target from toolchain install

### Changed

- migrate D-G test files from createTestContext to node:test (#2418)
- **test**: replace try/finally with beforeEach/afterEach in packages tests (#2390)
- **test**: migrate gsd/tests s-z from custom harness to node:test (#2397)
- **test**: migrate gsd/tests o-r from custom harness to node:test (#2401)
- **test**: migrate gsd/tests i-n from custom harness to node:test (#2399)
- **test**: migrate gsd/tests a-c from custom harness to node:test (#2400)
- **test**: replace try/finally with t.after() in gsd/tests (e-i) (#2396)
- **test**: replace try/finally with t.after() in gsd/tests (a-d) (#2395)
- **test**: replace try/finally with t.after() in src/tests (o-z) (#2392)
- **test**: replace try/finally with t.after() in src/tests (a-n) (#2394)

## [2.44.0] - 2026-03-24

### Added

- **core**: support for 'non-api-key' provider extensions like Claude Code CLI (#2382)
- **docker**: add official Docker sandbox template for isolated GSD auto mode (#2360)
- **gsd**: show per-prompt token cost in footer behind show_token_cost preference (#2357)
- **web**: add "Change project root" button to web UI (#2355)
- **gsd**: Tool-driven write-side state transitions — replace markdown mutation with atomic SQLite tool calls (#2141)
- **S06/T02**: Strip all 16 lazy createRequire fallback paths from migr…
- **S05/T04**: Migrate remaining 6 callers (auto-prompts, auto-recovery…
- **S05/T03**: Migrate 7 warm/cold callers (doctor, doctor-checks, visu…
- **S05/T02**: Extend migrateHierarchyToDb to populate v8 planning colu…
- **S05/T01**: Schema v10 adds replan_triggered_at column; deriveStateF…
- **S04/T03**: Migrate auto-dispatch.ts (3 rules), auto-verification.ts…
- **S04/T02**: Migrate dispatch-guard.ts to DB queries with isDbAvailab…
- **S01/T03**: Migrate planning prompts to DB-backed tool guidance and…
- **S01/T01**: Partially advanced schema v8 groundwork and documented t…
- **gsd**: tool-driven write-side state transitions (M001)

### Fixed

- post-migration cleanup — pragmas, rollbacks, tool gaps, stale code (#2410)
- **test**: normalize CRLF in auto-stash-merge assertion for Windows
- **test**: swallow EPERM on Windows temp dir cleanup in auto-stash-merge test
- **gsd**: add file-based fallbacks for DB-dependent code paths and fix CI test failures
- **gsd**: remove stale observabilityIssues reference in journal-integration test
- **extensions**: detect TypeScript syntax in .js extension files and suggest renaming to .ts (#2386)
- **gsd**: prevent planning data loss from destructive upsert and post-unit re-import (#2370)
- **gsd**: use correct notify severity type ("warning" not "warn")
- **web**: resolve compiled .js modules for all subprocess calls under node_modules (#2320)
- **test**: increase perf assertion threshold to prevent CI flake (#2327)
- add missing SQLite WAL sidecars and journal to runtime exclusion lists (#2299)
- **gsd**: remove stale observability validator + fix greenfield worktree check
- **memory**: fix memory and resource leaks across TUI, LSP, DB, and automation (#2314)
- **gsd**: preserve freeform DECISIONS.md content on decision save (#2319)
- **pi-ai**: restore alibaba-coding-plan provider via models.custom.ts (#2350)
- **doctor**: skip false env_dependencies error in auto-worktrees (#2318)
- **gsd**: auto-stash dirty files before squash merge and surface dirty filenames in error (#2298)
- **gsd**: keep params as any in db-tools executors (CI tsconfig is stricter)
- **gsd**: replace any types in db-tools executor signatures
- **gsd**: resolve 4 TS compilation errors from parser migration
- **gsd**: wrap plan-task DB writes in transaction + untrack .gsd/ artifacts
- **S04/T04**: Add planning-crossval tests proving DB↔rendered↔parsed pa…
- **S04/T01**: Add schema v9 migration with sequence column on slices/ta…
- remove .gsd/ milestone artifacts from git index
- **tests**: update remediation step assertions and crossval fixture
- **gsd**: address all 7 review findings from PR #2141
- **tests**: remove invalid `seq` property from insertMilestone calls

### Changed

- **contrib**: add CODEOWNERS and team workflow docs (#2286)
- **M001**: auto-commit after complete-milestone
- **M001**: auto-commit after validate-milestone
- **M001/S06**: auto-commit after complete-slice
- **M001/S06**: auto-commit after plan-slice
- **M001/S06**: auto-commit after research-slice
- **M001/S05**: auto-commit after complete-slice
- **M001/S05**: auto-commit after plan-slice
- **M001/S05**: auto-commit after research-slice
- **M001/S04**: auto-commit after complete-slice
- **M001/S04**: auto-commit after research-slice
- **M001/S03**: auto-commit after complete-slice
- **M001/S03**: auto-commit after plan-slice
- **M001/S03**: auto-commit after research-slice
- **M001/S02**: auto-commit after complete-slice
- **M001/S02**: auto-commit after plan-slice
- **M001/S02**: auto-commit after research-slice
- **M001/S01**: auto-commit after complete-slice

## [2.43.0] - 2026-03-23

### Added

- **forensics**: opt-in duplicate detection before issue creation (#2105)

### Fixed

- prevent banner from printing twice on first run (#2251)
- **test**: Windows CI — use double quotes in git commit message (#2252)
- **async-jobs**: suppress duplicate follow-up for awaited job results (#2248) (#2250)
- **gsd**: remove force-staging of .gsd/milestones/ through symlinks (#2247) (#2249)
- **gsd**: remove over-broad skill activation heuristic (#2239) (#2244)
- **auth**: fall through to env/fallback when OAuth credential has no registered provider (#2097)
- **lsp**: bound message buffer and clean up stale client state (#2171)
- clean up macOS numbered .gsd collision variants (#2205) (#2210)
- **search**: keep duplicate-search loop guard armed (#2117)
- clean up extension error listener on session dispose (#2165)
- **web**: resolve 4 pre-existing onboarding contract test failures (#2209)
- async bash job timeout hangs indefinitely instead of erroring out (#2214)
- **gsd**: apply fast service tier outside auto-mode (#2126)
- **interactive**: clean up leaked SIGINT and extension selector listeners (#2172)
- **ci**: standardize GitHub Actions and Node.js versions (#2169)
- **native**: resolve memory leaks in glob, ttsr, and image overflow (#2170)
- extension resource management — prune stale dirs, fix isBuiltIn, gate skills on Skill tool, suppress search warnings (#2235)
- batch isolated fixes — error messages, preferences, web auth, MCP vars, detection, gitignore (#2232)
- document iTerm2 Ctrl+Alt+G keybinding conflict and add helpful hint (#2231)
- **footer**: display active inference model during execution (#1982)
- **web**: kill stale server process before launch to prevent EADDRINUSE (#1934) (#2034)
- **git**: force LC_ALL=C in GIT_NO_PROMPT_ENV to support non-English locales (#2035)
- **forensics**: force gh CLI for issue creation to prevent misrouting (#2067) (#2094)
- force-stage .gsd/milestones/ artifacts when .gsd is a symlink (#2104) (#2112)
- **pi-ai**: correct Copilot context window and output token limits (#2118)

### Changed

- startup optimizations — pre-compiled extensions, compile cache, batch discovery (#2125)

## [2.42.0] - 2026-03-22

### Added

- **gsd**: declarative workflow engine — YAML-defined workflows through the auto-loop (#2024)
- **gsd**: unified rule registry, event journal, journal query tool, and tool naming convention (#1928)
- **ci**: PR risk checker — classify changed files by system and surface risk level (#1930)
- ADR attribution — distinguish human vs agent vs collaborative decisions (#1830)
- add /gsd fast command and gate service tier icon to supported models (#1848) (#1862)
- add --host, --port, --allowed-origins flags for web mode (#1847) (#1873)

### Fixed

- **tests**: wrap rmSync cleanup in try/catch for Windows EPERM
- **tests**: add maxRetries to rmSync cleanup for Windows EPERM compatibility
- recursive key sorting in tool-call loop guard hash function (#1962)
- use path.sep for cross-platform path traversal guards and test assertions
- **tests**: use cross-platform path split in run-manager timestamp test
- prevent SIGTSTP crash on Windows (#2018)
- add missing codeFilesChanged to journal integration test mock
- **repo-identity**: use native realpath on Windows to resolve 8.3 short paths (#1960)
- **doctor**: gate roadmap checkbox on summary existing on disk, not issue detection (#1915)
- warn when milestone merge contains only metadata and no code (#1906) (#1927)
- **worktree**: resolve 8.3 short paths and use shell mode for .bat hooks on Windows (#1956)
- **web**: persist auth token in sessionStorage to survive page refreshes (#1877)
- clean up SQUASH_MSG after squash-merge and guard worktree teardown against uncommitted changes (#1868)
- populate RecoveryContext in hook unit supervision to prevent crash on stalled tool recovery (#1867)
- resolve worktree path from git registry when .gsd/ symlink is shadowed (#1866)
- resolve Node v24 web boot failure — ERR_UNSUPPORTED_NODE_MODULES_TYPE_STRIPPING (#1864)
- **auto**: broaden worktree health check to all ecosystems (#1860)
- **doctor**: cascade slice uncheck when task_done_missing_summary unchecks tasks (#1850) (#1858)
- defend exit path against ESM module cache mismatch (#1854)
- escape parentheses in paths before bash shell-out, fix \_\_extensionDir fallback (#1872)
- use PowerShell Start-Process for Windows browser launch, prevent URL wrapping (#1870)
- clear stale unit state and restore CWD when step-wizard exits auto-loop (#1869)
- prevent cross-project state leak in brand-new directories (#1639) (#1861)
- reconcile worktree HEAD with milestone branch ref before squash merge (#1846) (#1859)
- normalize Windows backslash paths in bash command strings (#1436) (#1863)
- parsePlan and verifyExpectedArtifact recognize heading-style task entries (#1691) (#1857)
- sync all milestone dirs regardless of naming convention (#1547) (#1845)

## [2.41.0] - 2026-03-21

### Added

- **doctor**: worktree lifecycle checks, cleanup consolidation, enhanced /worktree list (#1814)
- **web**: browser-based web interface (#1717)
- **ci**: skip build/test for docs-only PRs and add prompt injection scan (#1699)
- **docs**: add Custom Models guide and update related documentation (#1670)
- surface doctor issue details in progress score widget and health views (#1667)
- **cleanup**: add ~/.gsd/projects/ orphan detection and pruning (#1686)

### Fixed

- skip web build on Windows — Next.js webpack hits EPERM on system dirs
- include web build in main build command
- fall through to prose slice parser when checkbox parser yields empty under ## Slices (#1744)
- **auto**: verify merge anchored before worktree teardown (#1829)
- **auto**: reject execute-task with zero tool calls as hallucinated (#1838)
- also convert --import resolver path to file URL for Windows
- use pathToFileURL for Windows-safe ESM import in verification-gate test
- **gsd**: read depends_on from CONTEXT-DRAFT.md when CONTEXT.md is absent (#1743)
- **roadmap**: detect ✓ completion marker in prose slice headers (#1816)
- **auto**: reverse-sync root-level .gsd files on worktree teardown (#1831)
- **tui**: prevent freeze when using @ file finder (#1832)
- prevent silent data loss when milestone merge fails due to dirty working tree (#1752)
- **verification**: avoid DEP0190 by passing command to shell explicitly (#1827)
- **state**: treat zero-slice roadmap as pre-planning instead of blocked (#1826)
- **hooks**: process depth verification in queue mode (#1823)
- **auto**: register SIGHUP/SIGINT handlers to clean lock files on crash (#1821)
- auto-dispatch discussion instead of hard-stopping on needs-discussion phase (#1820)
- **doctor**: fix roadmap checkbox and UAT stub immediately instead of deferring (#1819)
- **auto**: resolve pending unitPromise in stopAuto to prevent hang (#1818)
- **git**: handle unborn branch in nativeBranchExists to prevent dispatch deadlock (#1815)
- **doctor**: prevent cleanup from deleting user work files (#1825)
- use realpathSync.native on Windows to resolve 8.3 short paths
- detect and skip ghost milestone directories in deriveState() (#1817)
- create milestone directory when triage defers to a not-yet-existing milestone (#1813)
- add @gsd/pi-tui to test module resolver in dist-redirect (#1811)
- surface unmapped active requirements when all milestones complete (#1805)
- normalize paths in tests to handle Windows 8.3 short-path forms (#1804)
- share milestone ID reservation between preview and tool (#1569) (#1802)
- **tui,gsd**: tool-call loop guard + TUI stack overflow prevention (#1801)
- validate paused-session milestone before restoring it (#1664) (#1800)
- detect REPLAN-TRIGGER.md in deriveState for triage-initiated replans (#1798)
- dispatch uat targets last completed slice instead of activeSlice (#1693) (#1796)
- read depends_on from CONTEXT-DRAFT.md when CONTEXT.md absent (#1795)
- **worktree**: sync root-level files and all milestone dirs on worktree teardown (#1794)
- dashboard highlights UAT target slice instead of advanced activeSlice (#1793)
- dispatch guard skips completed milestones with SUMMARY file (#1791)
- ensureDbOpen creates DB + migrates Markdown in interactive sessions (#1790)
- add require condition to pi-tui exports for CJS resolution
- update integration test to match dependency-aware dispatch guard wording
- use createRequire instead of bare require for lazy pi-tui import
- update doctor-git test to match PR #1633 behavior change
- increase resolveProjectRootFromGitFile walk-up limit from 10 to 30
- include ensure-workspace-builds.cjs in npm package files
- resolve extension typecheck errors in test files
- resolve CI build errors from Wave 4+5 merges
- return retry from postUnitPreVerification when artifact verification fails (#1571) (#1782)
- hook model field uses model-router resolution instead of Claude-only registry (#1720) (#1781)
- stop auto-mode immediately on infrastructure errors (ENOSPC, ENOMEM, etc.) (#1780)
- add missing milestones/ segment in resolveHookArtifactPath (#1779)
- break needs-discussion infinite loop when survivor branch exists (#1726) (#1778)
- tear down browser sessions at unit boundaries and in stopAuto (#1733) (#1777)
- rebuild STATE.md and reset completed-units on milestone transition (#1576) (#1775)
- resolve pending unit promise on all exit paths to prevent orphaned auto-loop (#1774)
- closeout unit on pause and heal runtime records on resume (#1625) (#1773)
- call selfHealRuntimeRecords before autoLoop to clear orphaned dispatched records (#1772)
- dispatch guard uses dependency declarations instead of positional ordering (#1638) (#1770)
- add configurable timeout to await_job to prevent indefinite session blocking (#1769)
- **parallel**: restore orchestrator state from session files and add worker stderr logging (#1748)
- prevent getLoadedSkills crash and auto-build workspace packages (#1767)
- session lock multi-path cleanup and false positive hardening (#1578) (#1765)
- robust node_modules symlink handling to prevent extension loading failures (#1762)
- lazy-load @gsd/pi-tui in shared/ui.ts to prevent /exit crash (#1761)
- validate worktree .git file and fix metrics toolCall casing (#1713) (#1754)
- verify implementation artifacts before milestone completion (#1703) (#1760)
- make task closeout crash-safe by unchecking orphaned checkboxes (#1650) (#1759)
- preserve milestone branch on merge-back during transitions (#1573) (#1758)
- write crash lock after newSession so it records correct session path (#1757)
- handle symlinked .gsd in git add pathspec exclusions (#1712) (#1756)
- guard worktree teardown on empty merge to prevent data loss (#1672) (#1755)
- resolve symlinks in doctor orphaned-worktree check (#1715) (#1753)
- silence spurious extension load error for non-extension libraries (#1709) (#1747)
- reset completion state when post_unit_hooks retry_on signal is consumed (#1746)
- route needs-discussion phase to showSmartEntry, preventing infinite /gsd loop (#1745)
- **roadmap**: parse table-format slices in roadmap files (#1741)
- extract milestone title from CONTEXT.md when ROADMAP is missing (#1729)
- **gsd**: harden auto-mode telemetry — metrics idempotency, elapsed guard, title sanitization (#1722)
- **gsd**: make saveJsonFile atomic via write-tmp-rename pattern (#1719)
- **gsd**: syncWorktreeStateBack recurses into tasks/ subdirectory (#1678) (#1718)
- prevent parallel worktree path resolution from escaping to home directory (#1677)
- add web search budget awareness to discuss and queue prompts (#1702)
- harden auto-mode against stale integration metadata and Windows file locks (#1633)
- **autocomplete**: repair /gsd skip, add widget/next completions, add discuss to hint (#1675)
- **search**: keep loop guard armed after firing to prevent infinite loop restart (#1671) (#1674)
- **worktree**: detect default branch instead of hardcoding "main" on milestone merge (#1668) (#1669)
- remove duplicate TUI header rendered on session_start (#1663)
- **worktree**: recurse into tasks/ when syncing slice artifacts back to project root (#1678) (#1681)

### Changed

- split shared/mod.ts into pure and TUI-dependent barrels (#1807)
- replace hardcoded /tmp paths with os.tmpdir()/homedir() (#1708)
- **ci**: reduce pipeline minutes with shallow clones, npm caching, and exponential backoff (#1700)
- split auto-loop.ts monolith into auto/ directory modules (#1682)

## [2.40.0] - 2026-03-20

### Added

- **pi**: add Skill tool resolution (#1661)
- health check phase 2 — real-time doctor issue visibility across widget, visualizer, and HTML reports (#1644)
- upgrade forensics prompt to full-access GSD debugger (#1660)

### Fixed

- prune stale env-utils.js from extensions root, preventing startup load error (#1655)
- **splash**: replace box corners with full-width bars for visual unity with auto-mode widget (#1654)
- add runtime paths to forensics prompt to prevent path hallucination (#1657)
- guard TUI render during session transitions to prevent freeze (#1658)
- default UAT type to artifact-driven to prevent unnecessary auto-mode pauses (#1651)
- cancel trailing async jobs on session switch to prevent wasted LLM turns (#1643)

### Changed

- decompose autoLoop into pipeline phases (#1615) (#1659)

## [2.39.0] - 2026-03-20

### Added

- **gsd**: activate matching skills in dispatched prompts (#1630)
- **gsd**: add .gsd/RUNTIME.md template for declared runtime context (#1626)
- **gsd**: create draft PR on milestone completion when git.auto_pr enabled (#1627)
- **gsd**: add browser-executable and runtime-executable UAT types (#1620)
- apply model preferences in guided flow for milestone planning (#1614)
- **gsd**: GitHub sync extension — auto-sync to Issues, PRs, Milestones (#1603)
- add GSD_PROJECT_ID env var to override project hash (#1600)
- add GSD_HOME env var to override global ~/.gsd directory (#1566)
- **gsd**: add 13 enhancements to /gsd doctor (#1583)
- feat(ui): minimal GSD welcome screen on startup (#1584)

### Fixed

- recover + prevent #1364 .gsd/ data-loss (v2.30.0–v2.38.0) (#1635)
- treat summary as terminal artifact even when roadmap slices are unchecked (#1632)
- **gsd**: close residual #1364 data-loss vectors on v2.36.0+ (#1637)
- auto-resolve npm subpath exports in extension loader (#1624)
- create node_modules symlink for dynamic import resolution in extensions (#1623)
- filter cross-milestone errors from health tracker escalation (#1621)
- move unit closeout to run immediately after completion (#1612)
- use pathspec exclusions in smartStage to prevent hanging on large repos (#1613)
- add auto-fix for premature slice completion deadlock in doctor (#1611)
- resolve ${VAR} env references in MCP client .mcp.json configs (#1609)
- return "dispatched" after doctor heal to prevent session race (#1580) (#1610)
- update Anthropic OAuth endpoints to platform.claude.com (#1608)
- lazy-open GSD database on first tool call in manual sessions (#1606)
- **gsd**: detect anthropic-vertex in provider doctor (#1598)
- **gsd**: tighten prompt automation contracts (#1556)
- **gsd**: harden auto-mode agent loop — session teardown, unit correlation, sidecar perf (#1592)
- break remaining shared/mod.js barrel imports in report generation chain (#1588)
- apply pi manifest opt-out to extension-discovery.ts (#1545)
- detect worktree paths resolved through .gsd symlinks (#1585)

### Changed

- **gsd**: unify sidecar mini-loop into main dispatch path (#1617)
- **auto-loop**: initial cleanup — hoist constant, cache prefs per iteration (#1616)
- **gsd**: add 30K char hard cap on prompt preamble (#1619)
- **gsd**: replace stuck counter with sliding-window detection (#1618)
- **auto-loop**: 5 code smell fixes (#1602)
- **gsd**: replace session-scoped promise bridge with per-unit one-shot (#1595)
- **gsd**: remove prompt compression subsystem (~4,100 lines) (#1597)
- **gsd**: crashproof stopAuto with independent try/catch per cleanup step (#1596)

## [2.38.0] - 2026-03-20

### Added

- **gsd**: ADR-004 — derived-graph reactive task execution (#1546)
- add anthropic-vertex provider for Claude on Vertex AI (#1533)

### Fixed

- **ci**: reduce GitHub Actions minutes ~60-70% (~10k → ~3-4k/month) (#1552)
- **gsd**: reactive batch verification + dependency-based carry-forward (#1549)
- **gsd**: enforce backtick file paths in task plan IO sections (#1548)

## [2.37.1] - 2026-03-20

### Fixed

- interactive guard menu for remote auto-mode sessions (#1507) (#1524)
- use pull_request_target so AI triage has secret access on PRs
- cmux library directory incorrectly loaded as extension (#1537)
- separate pi-tui-dependent layout utils to fix report generation (#1527)
- clarify session lock loss diagnostics (#1535)
- **#1526**: auto-mode worktree commits land on main instead of milestone branch (#1534)

## [2.37.0] - 2026-03-20

### Added

- **dashboard**: two-column layout with redesigned widget (#1530)
- integrate cmux with gsd runtime (#1532)

### Fixed

- add session-level search budget to prevent unbounded native web search (#1309) (#1529)

## [2.36.0] - 2026-03-20

### Added

- deprecate agent-instructions.md in favor of AGENTS.md / CLAUDE.md (#1492) (#1514)
- AI-powered issue and PR triage via Claude Haiku (#1510)

### Fixed

- preserve user messages during abort with origin-aware queue clearing (#1439) (#1521)
- remove broken SwiftUI skill and add CI reference check (#1476) (#1520)
- wire escalateTier into auto-loop retry path (#1505) (#1519)
- prevent bare /gsd from stealing session lock from running auto-mode (#1507) (#1517)
- wire dead token-profile defaults and add /gsd rate command (#1505) (#1516)
- prevent false-positive session lock loss during sleep/event loop stalls (#1512) (#1513)
- **gsd**: filter non-milestone directories from findMilestoneIds (#1494) (#1508)
- **gsd**: accept 'passed' as terminal validation verdict (#1429) (#1509)
- add missing imports breaking CI build (#1511)
- prevent ensureGitignore from adding .gsd when tracked in git (#1364) (#1367)
- check project root .env when secrets gate runs in worktree (#1387) (#1470)
- realign cwd before dispatch + clean stale merge state on failure (#1389) (#1400)
- create milestones/ directory in worktree when missing (#1374)
- inject network_idle warning into hook prompts (#1345) (#1401)
- verify symlink after migration + fix test failures (#1377) (#1404)
- validate CWD instead of project root when running from a GSD worktree (#1317) (#1504)
- **gsd**: detect initialized health widget projects (#1432)
- smarter .gsd root discovery — git-root anchor + walk-up replaces symlink hack (#1386)
- correct GSD-WORKFLOW.md fallback path and sync to agentDir (#1375)
- always include reasoning.encrypted_content for OpenAI reasoning models
- **gsd**: avoid EISDIR crash in file loader
- **gsd**: open existing database on inspect

## [2.35.0] - 2026-03-19

### Added

- **gsd**: add /gsd changelog command with LLM-summarized release notes (#1465)

### Fixed

- restore lsp single-server selector export
- **mcp**: preserve args for mcp_call tool invocations (#1354)
- accumulate session cost independently of message array (#1423)
- resolve CI failures — scope provider check, fix Windows path, correct severity
- close 5 doctor coverage gaps — providers, lock dir, integration branch, orphaned worktrees
- add PID self-check to guided-flow crash lock detection (#1398)
- **prefs**: close merge, validation, serialization, and docs gaps

### Changed

- deduplicate error emission and message patterns in agent-core (#1444)
- simplify settings manager with generic setter helpers (#1461)
- consolidate theme files and remove manual schema (#1478)
- extract overlay layout and compositing from TUI into separate module (#1482)
- extract slash command handlers from interactive-mode (#1485)
- remove dead code (unused exports) (#1486)
- extract retry handler and compaction orchestrator from agent-session
- deduplicate rendering patterns in markdown and keys
- consolidate shared code between OpenAI providers
- deduplicate RPC mode shared patterns
- extract shared tree rendering utilities
- consolidate OAuth callback server and helper utilities
- extract shared file lock utilities
- consolidate resource loader with generic update/dedupe methods
- consolidate model switching logic in agent-session
- extract shared helpers in compaction module
- deduplicate toPosixPath, ZERO_USAGE, and shortenPath utilities
- consolidate 9 emit methods in extension runner into shared invokeHandlers
- consolidate extension type guards and inline handler type aliases
- consolidate duplicate patterns in LSP module

## [2.34.0] - 2026-03-19

### Added

- auto-generate OpenRouter model registry from API + add missing models (#1407) (#1426)

### Fixed

- release stranded bootstrap locks and handle re-entrant reacquire (#1352)
- add JS fallbacks for wrapTextWithAnsi and visibleWidth when native addon unavailable (#1418) (#1428)
- emit agent_end after abort during tool execution (#1414) (#1417)
- auto-discard bootstrap crash locks and clean auto.lock on exit (#1397)
- harden quick-task branch lifecycle — disk recovery + integration branch guard (#1342)
- skip verification retry on spawn infra errors (ETIMEDOUT, ENOENT) (#1340)
- keep external GSD state stable in worktrees (#1334)
- stop excluding all .gsd/ from commits — only exclude runtime files (#1326) (#1328)
- handle ECOMPROMISED in uncaughtException guard and align retry onCompromised (#1322) (#1332)

## [2.33.1] - 2026-03-19

### Fixed

- clean up stale numbered lock files and harden signal/exit handling (#1315) (#1323)
- worktree sync and home-directory safety check (#1311, #1317) (#1322)

### Changed

- remove orphaned mcporter extension manifest (#1318)

## [2.33.0] - 2026-03-19

### Added

- add live regression test harness for post-build pipeline validation (#1316)

### Fixed

- align retry lock path with primary lock settings to prevent ECOMPROMISED (#1307)
- skip symlinks in makeTreeWritable to prevent EPERM on NixOS/nix-darwin (#1303)
- handle Windows EPERM on .gsd migration rename with copy+delete fallback (#1296)
- add actionable recovery guidance to crash info messages (#1295)
- resolve main repo root in worktrees for stable identity hash (#1294)
- merge quick-task branch back to original after completion (#1293)

### Changed

- extract tryMergeMilestone to eliminate 4 duplicate merge paths in auto.ts (#1314)
- dispatch loop hardening — defensive guards, regression tests, lock alignment (#1310)
- extract parseUnitId() to centralize unit ID parsing (#1282)
- extract getErrorMessage() helper to eliminate 65 inline duplicates (#1280)
- consolidate DB-fallback inline functions in auto-prompts (#1276)

## [2.32.0] - 2026-03-19

### Added

- always-on health widget and visualizer health tab expansion (#1286)
- environment health checks, progress score, and status integration (#1263)

### Fixed

- skip crash recovery when auto.lock was written by current process (#1289)
- load worktree-cli extension modules via jiti instead of static ESM imports (#1285)
- **gsd**: prevent concurrent dispatch during skip chains (#1272) (#1283)
- skip non-artifact UAT dispatch in auto-mode (#1277)

### Changed

- deduplicate knownUnitTypes and STATE_REBUILD_MIN_INTERVAL_MS constants (#1281)
- extract prompt builder helpers for inlined context and source file lists (#1279)
- extract createGitService() factory, remove debug logs (#1278)
- extract dispatchUnit helper, inline dead buildDocsCommitInstruction (#1275)
- unify unit-type switch statements into lookup map (#1273)

## [2.31.2] - 2026-03-18

### Fixed

- **gsd**: stop replaying completed run-uat units (#1270)

## [2.31.1] - 2026-03-18

### Fixed

- prevent false-positive 'Session lock lost' during auto-mode (#1257)

## [2.31.0] - 2026-03-18

### Added

- add aws-auth extension for automatic Bedrock credential refresh (#1253)
- add -w/--worktree CLI flag for isolated worktree sessions (#1247)

### Fixed

- remove stale git-commit assertion in worktree test after commit_docs removal
- remove commit_docs test that broke CI after type removal (#1258)
- replace blanket git clean .gsd/ with targeted runtime file removal (#1252)
- invalidate caches inside discuss loop to detect newly written slice context (#1249)
- robust prose slice header parsing — handle H1-H4, bold, dots, no-separator variants (#1248)
- clean up stranded .gsd.lock/ directory to prevent false lock conflicts (#1251)

### Changed

- remove dead commit_docs preference (incompatible with external .gsd/ state) (#1258)

## [2.30.0] - 2026-03-18

### Added

- add extension manifest + registry for user-managed enable/disable (#1238)
- add model health indicator to auto-mode progress widget (#1232)
- simplify auto pipeline — merge research into planning, mechanical completion (ADR-003) (#1235)
- add create-gsd-extension skill (#1229)
- add built-in skill authoring system (ADR-003) (#1228)
- **prefs**: two-step provider→model picker in preferences wizard (#1218)
- workflow templates — right-sized workflows for every task type (#1185)

### Fixed

- align react-best-practices skill name with directory name (#1234)
- gate slice progression on UAT verdict, not just file existence (#1241)
- invalidate caches before roadmap check in /gsd discuss (#1240)
- use shell: true for LSP spawn on Windows to resolve .cmd executables (#1233)
- increase headless new-milestone timeout and limit investigation scope (#1230)
- clean untracked .gsd/ files before squash-merge to prevent failure (#1239)
- graceful fallback when native addon is unavailable on unsupported platforms (#1225)
- replace ambiguous double-question in discussion reflection step (#1226)
- kill non-persistent bg processes between auto-mode units (#1217)
- Two-column dashboard layout with task checklist (#1195)

### Changed

- move .gsd/ to external state directory with symlink (ADR-002) (#1242)
- replace MCPorter with native MCP client (#1210)
- extend json-persistence utility and migrate top JSON I/O callsites (#1216)
- deduplicate dispatchDoctorHeal — keep single copy in commands-handlers.ts (#1211)
- remove facade re-exports from auto.ts — import directly from source modules (#1214)
- extract shared HTTP client for remote-questions adapters (#1212)

## [2.29.0] - 2026-03-18

### Added

- add searchExcludeDirs setting for @ file autocomplete blacklist (#1202)
- **ci**: automate prod-release with version bump, changelog, and tag push (#1194)
- auto-open HTML reports in default browser on manual export (#1164)
- upgrade to Node.js 24 LTS across CI, Docker, and package config (#1165)
- add /gsd logs command to browse activity, debug, and metrics logs (#1162)
- **browser-tools**: configurable screenshot resolution, format, and quality (#1152)
- add pre-commit secret scanner and CI secret detection (#1148)
- **mcporter**: add .gsd/mcp.json per-project MCP config support (#1141)
- **metrics**: add API request counter for copilot/subscription users (#1140)
- per-milestone depth verification + queue-flow write-gate (#1116)
- add OSC 8 clickable hyperlinks for file paths in export notifications (#1114)
- park/discard actions for in-progress milestones (#1107)
- **ci**: implement three-stage promotion pipeline (Dev → Test → Prod) (#1098)
- cache-ordered prompt assembly and dashboard cache hit rate (#1094)
- add comprehensive API key manager (/gsd keys) (#1089)
- **ci**: add multi-stage Dockerfile for CI builder and runtime images
- **gsd**: add directory safeguards for system/home paths (#1053)
- enhance HTML report with derived metrics, visualizations, and interactivity (#1078)
- auto-extract lessons to KNOWLEDGE.md on slice/milestone completion (#711) (#1081)
- auto-create PR on milestone completion (#687) (#1084)
- wire semantic chunking, add preferences, metrics, and docs
- add token optimization suite for prompt caching, compression, and smart context selection
- **autocomplete**: add /thinking completions, GSD subcommand descriptions, and test coverage (#1019)
- add respectGitignoreInPicker setting for @ file picker (#979) (#1016)
- **prefs**: add search_provider to preferences.md (#1001)
- add `--events` flag for JSONL stream filtering (#1000)
- add 10 bundled skills for UI, quality, and code optimization (#999)
- **ux**: group model list by provider in /gsd prefs wizard (#993)
- add `--answers` flag for headless answer injection (#982)
- add project onboarding detection and init wizard

### Fixed

- **ci**: add npm publish to prod-release and prevent mid-deploy cancellation (#1208)
- **ci**: use env var for Discord webhook secret in if-condition
- complete shared barrel exports and add import-claude to help text (#1198)
- broaden unit-runtime path sanitization to strip all unsafe characters
- detect stale bundled resources via content fingerprint (#1193)
- include promptGuidelines in customPrompt path of buildSystemPrompt (#1187)
- prevent branch-mode merge fallback from firing in worktree isolation (#1183)
- treat auto-discovered verification failures as advisory, not blocking (#1188)
- **ci**: remove @latest npm promotion from pipeline
- **ci**: skip GitHub release creation when tag already exists
- handle Windows non-ASCII paths in cpSync with copyFileSync fallback (#1181)
- non-blocking verification gate for auto-discovered commands (#1177)
- add defensive guards against undefined .filter() in auto-mode dispatch/recovery (#1180)
- sync living docs (DECISIONS/REQUIREMENTS/PROJECT/KNOWLEDGE) between worktree and project root (#1173)
- route needs-discussion phase to interactive flow instead of stopping (#1175)
- run resource-skew check before early TTY gate
- move TTY check before heavy initialization to prevent process hang
- **ci**: skip init smoke test in non-TTY CI environments (#1172)
- **ci**: skip publish when version already exists on npm (#1166)
- **ci**: use local binary for pipeline smoke test (#1163)
- prevent concurrent GSD sessions from overlapping on same project (#1154)
- exclude completion-transition errors from health escalation at task level (#1157)
- **ci**: skip git-diff guard in prepublishOnly during CI (#1160)
- /gsd quick respects git isolation: none preference (#1156)
- text-based fallbacks for RPC mode where TUI widgets produce empty turns (#1112)
- **headless-query**: use jiti to load extension .ts modules (#1143)
- pause auto-mode when env variables needed instead of blocking (#1147)
- **ci**: fix dev-publish version stamp and platform sync (#1145)
- **google-search**: add 30s timeout to Gemini API call (#1139)
- **verification-gate**: sanitize preference commands with isLikelyCommand (#1138)
- **auto-dashboard**: show trigger task label for hook units (#1136)
- **auto-worktree**: detect worktree structurally when originalBase is null (#1135)
- **model-resolver**: prefer provider's recommended variant over saved base model (#1131)
- **auto-worktree**: auto-commit project root dirty state before milestone merge (#1130)
- **guided-flow**: support re-discuss flow for already-discussed slices (#1129)
- dispatch guard skips parked milestones — they no longer block later milestone dispatch (#1126)
- worktree reassess-roadmap loop — existsSync fallback in checkNeedsReassessment (#1117)
- **lsp**: use where.exe on Windows to resolve command paths (#1134)
- **gsd-db**: auto-initialize database when tools are called (#1133)
- inline preferences path to fix remote questions setup (#1110) (#1111)
- **ci**: add safe.directory for containerized pipeline job (#1108)
- remove .gsd/ from tracking, ignore entire directory
- update tests for god-file decomposition
- strip model variant suffix for API key auth (#1097) (#1099)
- match both milestoneId and sliceId when filtering duplicate blocker cards
- add dispatch stall guards to prevent auto-mode pause after slice completion (#1073) (#1076)
- prevent summarizing phase stall by retrying dropped agent_end events (#1072) (#1074)
- use atomic writes for completed-units.json and invalidate caches in db-writer (#1069)
- reject prose Verify: fields from being executed as shell commands (#1066) (#1068)
- restore session model on error instead of reading stale global prefs (#1065) (#1067)
- prevent run-uat re-dispatch loop when roadmap checkbox update fails (#1063) (#1064)
- inline compareSemver in gsd extension to fix broken relative import (#1058)
- disable reasoning for MiniMax-M2.5 in alibaba-coding-plan provider (#1003) (#1055)
- improve LSP diagnostics when no servers detected (#1082) (#1086)
- prevent summarizing phase stall by retrying dropped agent_end events (#1072)
- switch alibaba-coding-plan to OpenAI-compat endpoint with proper compat flags (#1003)
- add barrel files for remote-questions, ttsr, and shared extensions (#1048)
- consolidate frontmatter parsing into shared module (#1040)
- always ensure tasks/ directory exists for slice units (#900) (#1050)
- centralize GSD timeout and cache constants (#1038)
- improve RemotePromptRecord.ref type safety (#1041)
- document silent catch handlers in browser-tools (#1037)
- use literal union types in RuntimeErrorJSON for type safety (#1034)
- extract sanitizeError to shared module and apply to ask-user-questions (#1033)
- deduplicate formatDateShort into shared/format-utils (#1032)
- add error handlers to visualizer overlay promise chains (#1027)
- **security**: use execFileSync in resolve-config-value to prevent shell operator bypass (#1025)
- **security**: use execFile for browser URL opening to prevent shell injection (#1022)
- prevent duplicate milestone IDs when generating multiple before persisting (#961) (#1018)
- consolidate duplicate formatting functions (#1011)
- **gsd**: delete orphaned complexity.ts (#1005)
- **search**: consolidate duplicate Brave API helpers (#1010)
- merge worktree to main when all milestones complete (#962) (#1007)
- **gsd**: deduplicate resolveGitHeadPath function (#1015)
- add missing package.json subpath exports and oauth stubs (#1014)
- **gsd**: consolidate string-array normalizer functions into shared utility (#1009)
- **browser-tools**: document intentional silent catches, add debug logging for others (#1013)
- consolidate duplicate VerificationCheck/Result type definitions (#1008)
- **gsd**: add GIT_NO_PROMPT_ENV to gitFileExec and deduplicate constant (#1006)
- **remote-questions**: add null coalesce for optional threadUrl (#1004)
- auto-resume on transient server errors, not just rate limits (#886) (#957)
- replace ambiguous compound question in reflection step (#963) (#1002)
- **gsd**: remove STATE.md update instructions from all prompts (#983)
- **gsd**: clear all caches after discuss dispatch so picker sees new CONTEXT files (#981)
- **auto**: dispatch retry after verification gate failure (#998)
- enforce GSDError usage and activate unused error codes (#997)
- unify extension discovery logic (#995)
- deduplicate tierLabel/tierOrdinal exports (#988)
- deduplicate getMainBranch implementations (#994)
- add error handling for unhandled promise rejections (#992)
- deduplicate formatTokenCount into shared format-utils (#987)
- add debug logging to silent catch blocks in auto.ts (#986)
- deduplicate formatDuration into shared format-utils (#989)
- add exports fields to pi-tui and pi-agent-core packages (#991)
- remove dead github-client.ts (never imported) (#990)
- deduplicate parseJSONL and unify MAX_JSONL_BYTES constant (#985)
- remove broken ./hooks export path from pi-coding-agent (#984)
- inline bundled extension path parsing in subagent

### Changed

- extract numeric validation helpers in prefs wizard (#1205)
- deduplicate projectRoot() and dispatchDoctorHeal() between commands.ts and commands-handlers.ts (#1203)
- extract shared JSON persistence utility, migrate metrics + routing-history + unit-runtime (#1206)
- remove unused preferences-hooks.ts re-export facade (#1207)
- remove commands.ts re-exports, import directly from submodules (#1204)
- extract frontmatter body extraction into shared helper (#1201)
- deduplicate projectRoot() — single source in commands.ts (#1197)
- extract PER_REQUEST_TIMEOUT_MS to shared types (#1196)
- update state — S01 planned, ready for execution
- **M001-1ya5a3/S01**: auto-commit after state-rebuild
- **M001-1ya5a3/S01**: auto-commit after research-slice
- decompose doctor.ts into types, format, and checks modules (#1096)
- extract milestone-ids and guided-flow-queue from guided-flow.ts (#1095)
- decompose preferences.ts, populate skills and models modules (#1091)
- decompose auto.ts into 6 focused modules (#1088)
- decompose commands.ts into 5 focused modules
- remove redundant test file, identify consolidation targets (#1070)
- batch 2 — consolidate preferences, convert 8 more files to node:test (#1061)
- consolidate tests by area, standardize on node:test (#1059)
- skip initResources when version matches, consolidate startup I/O (#1052)
- centralize magic numbers into constants.ts (#1044)
- **resource-loader**: extract syncResourceDir to eliminate triplicated sync logic (#1036)
- **bg-shell**: split 1604-line god file into tool, command, and lifecycle modules (#1049)
- **headless**: split 772-line god file into events, UI, and context modules (#1047)
- **gsd**: extract safeCopy/safeMkdir helpers to replace repetitive try/catch FS patterns (#1043)
- **gsd**: extract atomicWriteSync utility to replace 6 duplicate write-tmp-rename patterns (#1046)
- **gsd**: unify duplicate padRight/truncate into shared format-utils (#1045)
- **loader**: consolidate 5 duplicate package.json version reads into cached helper (#1042)
- **headless**: remove duplicate jsonLine, use serializeJsonLine from pi-coding-agent (#1039)
- fix unicode regex discrepancy and standardize function naming (#1031)
- fix chalk version mismatch and document pinned dependency rationale (#1030)
- add concurrency limits to unbounded Promise.all operations (#1029)
- optimize SSE streaming buffer to avoid quadratic string growth (#1024)
- reduce makeTreeWritable calls from 6 to 2 on startup (#1023)
- add domain-grouped re-exports for preferences module (#996)

## [2.28.0] - 2026-03-17

### Added

- `gsd headless query` command for instant, read-only state inspection — returns phase, cost, progress, and next-unit as parseable JSON without spawning an LLM session
- `/gsd update` slash command for in-session self-update
- `/gsd export --html --all` for retrospective milestone reports

### Fixed

- Failure recovery & resume safeguards: atomic file writes, OAuth fetch timeouts (30s), RPC subprocess exit detection, extension command context guards, bash temp file cleanup, settings write queue flush, LSP init retry with backoff, crash detection on session resume, blob garbage collection
- Consolidated duplicate `mcp-server.ts` into single implementation
- Consolidated duplicate `bundled-extension-paths.ts` into single module
- Removed duplicate `marketplace-discovery.test.ts` test file
- Established npm as canonical package manager
- Exported RPC utilities from pi-coding-agent public API
- Prompt system requires grammatical narration for clearer agent output

### Changed

- Updated documentation for v2.26 and v2.27.0 features
- Documented all `preferences.md` fields in reference and template
- Removed stale `.pi/agents/` files superseded by built-in agent definitions

## [2.27.0] - 2026-03-17

### Added

- HTML report generator with progression index across milestones
- Crash recovery for parallel orchestrator — persisted state with PID liveness detection
- Headless orchestration skill with supervised mode
- Verification enforcement gate for milestone completion
- `git.manage_gitignore` preference to opt out of automatic `.gitignore` changes

### Changed

- Encapsulated auto.ts state into AutoSession class (cleaner session lifecycle)
- Extracted 7 focused modules from auto.ts (auto-worktree-sync, resource staleness, stale escape)
- TUI dashboard cleanup, dedup, and feature improvements
- Reordered visualizer tabs and HTML report sections into logical groupings

### Fixed

- Single ENTER now correctly submits slash command argument autocomplete
- Web search loop broken with consecutive duplicate guard
- Transient network errors retried before model fallback
- Parallel worker PID tracking, spawn-status race, and exit persistence
- `/gsd discuss` now recommends next undiscussed slice
- Roadmap parser allows suffix text after `## Slices` heading
- User's model choice no longer overwritten when API key is temporarily unavailable
- Reassess-roadmap skip loop broken by preventing re-persistence of evicted keys
- LSP command resolution and ENOENT crash on Windows/MSYS
- Dispatch plan-slice when task plan files are missing
- Reduced CPU usage on long auto-mode sessions
- Orphan-prone child processes reaped across session churn
- Symlinked skill directories resolved in `always_use_skills` and preferences
- Replan-slice infinite loop and non-standard `finish_reason` crash
- Skip slice plan commit when `commit_docs` is false
- Context-pressure monitor wired to send wrap-up signal at 70%
- Missing STATE.md in fresh worktree no longer deadlocks pre-dispatch health gate
- Stale runtime unit files for completed milestones cleaned on startup
- Broken install detection with Windows symlink fallback
- Auto-restart headless mode on crash with exponential backoff
- Generic type preserved on `resolveModelId` through resolution

## [2.26.0] - 2026-03-17

### Added

- Model selector grouped by provider with model type, provider, and API docs fields
- `require_slice_discussion` option to pause auto-mode before each slice for human review
- Discussion status indicators in `/gsd discuss` slice picker
- Worker NDJSON monitoring and budget enforcement for parallel orchestration
- `gsd_generate_milestone_id` tool for multi-milestone unique ID generation
- Alt+V clipboard image paste shortcut on macOS
- Hashline edit mode integration into active workflow
- Fallback parser for prose-style roadmaps without `## Slices` section

### Fixed

- Windows path normalization in LLM-visible text to prevent bash failures
- Async bash job completion no longer triggers spurious LLM turns
- Native web_search limited to max 5 uses per response
- Completed milestone with summary no longer re-entered as active on resume
- Replan-slice artifact verification breaks infinite replanning-slice loop
- Auto-heal STATE.md missing in preDispatchHealthGate
- Worktree artifact copy includes STATE.md, KNOWLEDGE.md, OVERRIDES.md
- Transient network errors marked as retriable in Anthropic provider
- `needs-remediation` treated as terminal validation verdict to prevent hard loop
- Post-hook doctor uses fixLevel 'all' to fix roadmap checkboxes
- `task_done_missing_summary` fixable in doctor to prevent validate-milestone skip loop
- BMP clipboard images on WSL2 handled via wl-paste PNG conversion
- Extended idle timeout for headless new-milestone
- EPIPE handling in LSP sendNotification with proper process exit wait
- Debug logging for silent early-return paths in dispatchNextUnit
- Untracked .gsd/ state files removed before milestone merge checkout
- Crash prevention when cancelling OAuth provider login dialog
- Resource staleness check compares gsdVersion instead of syncedAt
- Unique temp paths in saveFile() to prevent parallel write collisions
- Validation/summary file generation for completed milestones during migration
- Cache invalidation before initial state derivation in startAuto
- Headless mode no longer exits early on progress notifications containing 'complete'

### Removed

- Symlink-based development workflow (reverted PR #744)

### Changed

- Explicit Gemini OAuth ToS warning added to README — recommends API keys over OAuth
- Documentation updated for v2.24 release features
- Bug report template updated with model type, provider, and API docs fields

## [2.25.0] - 2026-03-16

### Added

- Native web search results rendering in TUI with `PREFER_BRAVE_SEARCH` environment variable toggle
- Meaningful commit messages generated from task summaries instead of generic messages
- Incremental memory system for auto-mode sessions
- Visualizer enriched with stats and discussion status
- 14 new E2E smoke tests for CLI verification

### Fixed

- Phantom skip loop caused by stale crash recovery context
- Skip-loop now interruptible and counts toward lifetime cap
- Cache invalidation consistency — orphaned `invalidateStateCache()` calls replaced, DB artifact cache included in `invalidateAllCaches()`
- Plan checkbox reconciliation on worktree re-attach after crash

### Changed

- Removed unnecessary `as any` casts, dead exports, and duplicate code
- Updated documentation for v2.22 and v2.23 release features

## [2.24.0] - 2026-03-16

### Added

- **Parallel milestone orchestration** — run multiple workers across phases simultaneously
- Dashboard view for parallel workers with 80% budget alert
- Headless `new-milestone` command for programmatic milestone creation
- Interactive update prompt on startup when a new version is available
- Symlink-based development workflow for `src/resources/`
- Descriptions added to `/gsd` autocomplete commands
- `validate-milestone` phase and dispatch

### Fixed

- Sync `completed-units.json` across worktree boundaries
- Worktree artifact verification uses correct base path
- Auto-resume auto-mode after rate limit cooldown
- Raise `maxDelayMs` default from 60s to 300s for better rate-limit handling
- Downgrade `missing_tasks_dir` to warning for completed slices
- Prevent stale state loop on auto-mode restart with existing worktree
- Always sync bundled resources and clean stale files
- Add stop reason to every auto-mode stop
- Skip redundant checkout in worktree merge when main already current
- Prevent runaway execute-task when task plan missing after failed research
- Fix read-only file permissions after cpSync from Nix store
- Fix parallel sendMessage calls missing required fields
- Strip clack UI from postinstall, keep silent Playwright download

### Changed

- Lazy-load LLM provider SDKs to reduce startup time

## [2.23.0] - 2026-03-16

### Added

- **VS Code extension** — full extension with chat participant, RPC integration, marketplace publishing under FluxLabs publisher
- **`gsd headless`** — redesigned headless mode for full workflow orchestration: auto-responds to prompts, detects completion, supports `--json` output and `--timeout` flags
- **`gsd sessions`** — interactive session picker for browsing and resuming saved sessions (#721)
- **10 new browser tools** — `browser_save_pdf`, `browser_save_state`, `browser_restore_state`, `browser_mock_route`, `browser_block_urls`, `browser_clear_routes`, `browser_emulate_device`, `browser_extract`, `browser_visual_diff`, `browser_zoom_region`, `browser_generate_test`, `browser_check_injection`, `browser_action_cache` (#698)
- **Structured discussion rounds** — `ask_user_questions` in guided-discuss-milestone for better requirement gathering (#688)
- **`validate-milestone` prompt** — milestone validation prompt and template
- **`models.json` resolution** — custom model definitions with fallback to `~/.pi/agent/models.json`

### Changed

- **Background shell performance** — optimized hot path with parallel git queries and lazy workspace validation

### Fixed

- Forensics uses `GSD_VERSION` env var instead of fragile package.json path traversal; now worktree-aware to prevent stale root misdiagnosis
- Background commands rewritten to prevent pipe-open hang; stalled-tool detection added with prompt guidance
- Auto mode breaks infinite skip loop on repeatedly-skipped completed units
- Roadmap parser expands range syntax in depends (e.g. `S01-S04` → `S01,S02,S03,S04`)
- Empty scaffold plan files rejected during plan-slice artifact verification (#699)
- Anti-pattern rule prevents `bash &` usage that causes agent hangs (#733)
- Shift-Tab navigates to previous tab in workflow visualizer (#717)
- Capture resolutions executed after triage instead of only classified (#714)
- Screenshot constraining uses independent width/height caps (#725)
- `auto.lock` written at startup; remote sessions detected in dashboard (#723)
- Cross-platform test compatibility with `process.ppid`
- CSP nonce, dead branch cleanup, restart cooldown fixes
- CI fix: `pi.getActiveTools()` replaces `ctx.getActiveTools()`

## [2.22.0] - 2026-03-16

### Added

- **`/gsd forensics`** — post-mortem investigation of auto-mode failures with structured root-cause analysis
- **Claude marketplace import** — import Claude marketplace plugins as namespaced GSD components
- **MCP server mode** — run GSD as an MCP server with `--mode mcp`
- **`/review` skill** — code review with diff-aware context
- **`/test` skill** — test generation and execution
- **`/lint` skill** — linting integration
- **GitHub API client** — diff-aware context injection and tiktoken-based token counting
- **File watcher** — chokidar-based file watching for live updates
- **`git.isolation: "none"`** — disable worktree isolation for projects that don't need it
- **E2E smoke tests** — end-to-end test suite for extension integration
- **Subcommand help** — inline help text for all GSD subcommands

### Fixed

- `verificationBudget` passed correctly to execute-task prompt template
- Background shell worktree cwd detection normalized to prevent stale paths
- Skill loading made an active directive in auto-mode units
- Auto-worktree validated as real git worktree before use
- MCP server discovery from project-root `.mcp.json`
- Command injection surface eliminated in diff-context; file-watcher path resolution hardened
- Thinking level clamped to `low` for gpt-5.x models
- `completedAt` coerced to String in visualizer changelog sort
- Warp terminal added to unsupported Ctrl+Alt shortcut list
- Fractional slice IDs (e.g. S03.5) supported in roadmap parser
- `executorContextConstraints` provided to plan-slice template
- Worktree state synced to project root after each unit
- Initial state derived from worktree when one exists
- Hardware cursor auto-enabled in Warp terminal
- CSI 3J scrollback clear removed from TUI full redraws
- Worktree edge cases — `resolveGitDir`, `captureIntegrationBranch` guard, doctor path

## [2.21.0] - 2026-03-16

### Added

- **Browser tools TypeScript conversion** — `browser-tools/core.js` converted to TypeScript with c8 test coverage
- **SSRF protection on `fetch_page`** — blocks private IPs, metadata endpoints, and non-HTTP protocols
- **Stale async job cancellation** — heuristic prevents outdated results in auto-mode

### Changed

- **Pause/resume recovery** — reuses crash recovery infrastructure for more reliable context restoration
- **Build scripts extracted** — inline package.json scripts moved to standalone files for cross-platform support
- **Help text deduplicated** — consolidated across CLI entry points
- **Dependency alignment** — `@types/mime-types` moved to devDependencies, chalk versions consolidated

### Fixed

- Task counter display no longer shows "task 5/4" after loop recovery
- Browser-tools TypeScript type errors in CI
- 4 small issues (#663): Windows GitHub Copilot login, Tavily display, MCPorter auto-install, notification preferences
- Cross-platform `validate-pack` script compatibility

## [2.20.0] - 2026-03-16

### Added

- **Telegram remote questions** — receive and respond to GSD questions via Telegram bot alongside existing Slack and Discord channels (#645)
- **`/gsd quick`** — execute a quick task with GSD guarantees (atomic commits, state tracking) without the full planning overhead (#437)
- **`/gsd mode`** — workflow mode system with solo and team presets that configure defaults for milestone IDs, git commit behavior, and documentation settings (#651)
- **`/gsd help`** — categorized command reference with descriptions for all GSD subcommands (#630)
- **`/gsd doctor`** — 7 runtime health checks with auto-fix for common state corruption issues (#646)
- **Agent instructions injection** — `agent-instructions.md` loaded into every agent session for persistent per-project behavioral guidance (#437)
- **Skill lifecycle management** — telemetry tracking, health dashboard, and heal-skill command for managing custom skills (#599)
- **SQLite context store** — surgical prompt injection from structured knowledge base for precise context engineering (#619)
- **Context-window budget engine** — proportional prompt sizing that allocates context budget across system prompt sections based on relevance (#660)
- **LSP activated by default** — Language Server Protocol now auto-activates with call hierarchy, formatting, signature help, and synchronized edits (#639)
- **Extension smoke tests** — CI catches import failures, circular deps, and module resolution issues across all bundled extensions
- **`gsd --debug` mode** — structured JSONL diagnostic logging for troubleshooting dispatch and state issues (#468)
- **Worktree post-create hook** — run custom setup scripts when GSD creates a new worktree (#597)

### Fixed

- **CPU spinning from regex backtracking** — replaced `[\s\S]*?` regex in preferences parser with indexOf-based scanning (#468)
- **Model config bleed between concurrent GSD instances** — isolated model configuration per session (#650)
- **Onboarding wizard repeats** — skip onboarding for extension-based providers that don't require auth.json credentials (#589)
- **Session tool rebuild on cwd change** — tools now rebuild correctly when working directory changes mid-session (#633)
- **Auto mode state derivation after discussion fallthrough** — re-derives state to prevent stale dispatches (#609)
- **Milestone branch preservation on auto stop** — prevents work loss when stopping auto mode (#601)
- **Infinite loop when milestone detection silently fails** — `findMilestoneIds` now logs errors and warns instead of looping (#456)
- **Google Search OAuth fallback** — uses Google Cloud Code Assist API when `GEMINI_API_KEY` is not set (#466)

### Changed

- **Preferences wizard** — replaced serial flow with categorized menu for faster configuration (#623)
- **Slack remote questions** — brought to feature parity with Discord integration (#628)
- **YAML support in hooks** — hooks now support YAML configuration alongside JSON (#637)

## [2.19.0] - 2026-03-16

### Added

- **Workflow visualizer** — `/gsd visualize` opens a full-screen TUI overlay with four tabs: Progress (milestone/slice/task tree), Dependencies (ASCII dep graph), Metrics (cost/token bar charts), and Timeline (chronological execution history). Supports Tab/1-4 switching, per-tab scrolling, auto-refresh every 2s, and optional auto-trigger after milestone completion via `auto_visualize` preference (#626)
- **Mid-execution capture & triage** — `/gsd capture` lets you fire-and-forget thoughts during auto-mode. The system triages accumulated captures at natural seams between tasks, classifies impact into five types (quick-task, inject, defer, replan, note), and proposes action with user confirmation. Dashboard shows pending capture count badge. Capture context injected into replan and reassess prompts (#512)
- **Dynamic model routing** — complexity-based model routing classifies units into light/standard/heavy tiers and routes to cheaper models when appropriate, reducing token consumption 20-50% on capped plans. Includes budget-pressure-aware routing, cross-provider cost comparison, escalation on failure, adaptive learning from routing history (rolling 50-entry window with user feedback support), and task plan introspection (code block counting, complexity keyword detection) (#579)
- **Feature-branch lifecycle integration test** — proves milestone worktrees branch from and merge back to feature branches, never touching main (#624)
- **Discord integration parity with Slack** — plus new remote-questions documentation (#620)

### Fixed

- **Absolute paths in auto-mode prompts** — write-target variables now passed as absolute paths, eliminating LLM path confusion in worktree contexts that caused artifacts written to wrong location and loop detection (#627)
- **Worktree lifecycle on mid-session milestone transitions** (#616, #618)
- **Eager template cache warming** — prevents version-skew crash in long auto-mode sessions (#621)

## [2.18.0] - 2026-03-16

### Added

- **Milestone queue reorder** — `/gsd queue` supports reordering milestone execution priority with dependency-aware validation, persistent ordering via `.gsd/QUEUE-ORDER.json` (#460)
- **`.gsd/KNOWLEDGE.md`** — persistent project-specific context file loaded into agent prompts. New `/gsd knowledge` command with `rule`, `pattern`, and `lesson` subcommands for adding entries (#585)
- **Dynamic model discovery** — runtime model enumeration from provider APIs (Ollama, OpenAI, Google, OpenRouter) with per-provider TTL caching and discovery adapters. New `ProviderManagerComponent` TUI for managing providers with auth status and model counts (#581)
- **Expanded preferences wizard** — all configurable fields now exposed in the setup wizard, model ID validation, and `updatePreferencesModels()` for safe read-modify-write of model config (#580)
- **Comprehensive documentation** — 12 new docs covering getting started, auto-mode, commands, configuration, token optimization, cost management, git strategy, team workflows, skills, migration, troubleshooting, and architecture (#605)
- **`resolveProjectRoot()`** — all GSD commands resolve the effective project root from worktree paths instead of using raw `process.cwd()`, preventing path confusion across worktree boundaries (#602)
- **1,813 lines of new tests** — 13 new test files covering discovery cache, model discovery, model registry, models-json-writer, auto-worktree, derive-state-deps, in-flight tool tracking, knowledge, memory leak guards, preferences wizard fields, queue order, queue reorder E2E, and stale worktree cwd

### Fixed

- **Heap OOM during long-running auto-mode sessions** — four sources of unbounded memory growth: activity log serialized all entries for SHA1 dedup (now streaming writes with lightweight fingerprint), uncleaned `activityLogState` Map between sessions, unbounded `completedUnits` array (now capped at 200), and `dirEntryCache`/`dirListCache` growing without bounds (now evicted at 200 entries) (#611)
- **Stale worktree cwd after milestone completion** — three-layer fix: `escapeStaleWorktree()` at auto-mode entry, unconditional cwd restore in `stopAuto()`, and cwd restore on partial merge failure (#608)
- **Worktree created from integration branch instead of main** — `createAutoWorktree` reads integration branch from META.json, merge targets integration branch not hardcoded main (#606)
- **Milestone merge skipped in branch isolation mode** — branch-mode fallback detects `milestone/*` branch and performs squash-merge (#603)
- **`parseContextDependsOn()` destroys unique milestone ID case** — was lowercasing IDs, breaking dependency resolution (#604)
- **Tool-aware idle detection** — prevents false interruption of long-running tasks in auto-mode (#596)
- **Remote questions onboarding crash** — extracted `saveRemoteQuestionsConfig` into compiled src/ helper to avoid cross-boundary .ts import (#592)
- **`showNextAction` crash** — falls back to `select()` when `custom()` returns undefined (#447, #615)

### Changed

- Comprehensive update to preferences reference and configuration guide (#614)
- Auto-mode artifact writes scoped to active milestone worktree, preventing cross-milestone pollution (#590)

## [2.17.0] - 2026-03-15

### Added

- **Token optimization profiles** — `budget`, `balanced`, and `quality` presets that coordinate model selection, phase skipping, and context compression to reduce token usage by 40-60% on budget mode
- **Complexity-based task routing** — automatically classifies tasks as simple/standard/heavy and routes to appropriate models, with persistent learning from routing history
- **`git.commit_docs` preference** — set to `false` to keep `.gsd/` planning artifacts local-only, useful for teams where only some members use GSD

### Changed

- Updated Ollama cloud provider model catalog

### Fixed

- Native binary hangs in GSD auto-mode paths (#453)
- Auto-mode can be stopped from a different terminal (#586)
- Parse cache collision causing false loop detection on `complete-slice` (#583)
- Exhaustive switch handling and cleanup in Google provider (#587)

## [2.16.0] - 2026-03-15

### Added

- `/gsd steer` command — hard-steer plan documents during execution without stopping the pipeline
- Native git operations via libgit2 — ~70 fewer process spawns per dispatch cycle
- Native performance optimizations for `deriveState`, JSONL parsing, and path resolution
- Default model upgraded to Opus 4.6 with 1M context variant
- PR template and bug report issue template

### Fixed

- Auto-mode continues after guided milestone planning instead of stalling at "Milestone planned"
- Git commands no longer fail when repo path contains spaces
- Arrow key cursor updates and Shift+Enter newline insertion in TUI
- Tool API keys loaded from `auth.json` at session startup
- TypeScript errors resolved across extension, test, and async-jobs files

### Changed

- Hot-path lookup caching and error resilience optimizations
- Extension type-checking added to CI pipeline

## [2.15.1] - 2026-03-15

### Fixed

- Auto-mode worktree path resolution — prompt templates now include working directory, preventing artifacts from being written to the wrong location and causing infinite re-dispatches
- Auto-mode resource sync detection — gracefully stops when resources change mid-session instead of crashing
- Auto-mode missing import for `resolveSkillDiscoveryMode` causing crash on startup
- Auto-mode recovery hardened — checkbox verification falls through correctly, corrupt roadmaps fail verification instead of silently passing, atomic writes for completed-units.json, and task completion verified via artifacts not just file existence
- Auto-mode progress widget now refreshes from disk every 5 seconds during unit execution instead of appearing frozen
- Undo command now invalidates all caches (not just state cache), preventing stale results after undoing completed tasks

### Changed

- CI pipeline supports prerelease publishing with `--tag next` for testing before stable release

### Added

- Unit tests for auto-dashboard, auto-recovery, and crash-recovery modules (46 new tests)

## [2.15.0] - 2026-03-15

### Added

- **8 new commands**: budget enforcement, notifications, and quality-of-life improvements (#441)
- **Preferences schema validation**: detects unknown/typo'd preference keys and surfaces warnings instead of silently ignoring them (#542)
- **Pipeline-aware prompts**: each agent phase (research, plan, execute, complete) now knows its role in the pipeline, eliminating redundant code exploration between phases (#543)
- **Research depth calibration**: three-tier system (deep/targeted/light) so agents match effort to actual complexity (#543)

### Changed

- Auto-mode decomposed into focused modules for maintainability (#534)
- Dispatch logic extracted from if-else chain to dispatch table (#539)
- v1 migration code gated behind dynamic import — only loaded when needed (#541)
- Background shell module decomposed into focused modules
- Unified cache invalidation into single `invalidateAllCaches()` function (#545)

### Fixed

- Executor agents now receive explicit working directory, preventing writes to main repo instead of worktree (#543)
- Merge loop and .gsd/ conflict auto-resolution in worktree model, `git.isolation` preference restored (#536)
- Arrow keys no longer insert escape sequences as text during LLM streaming (#493)
- YAML preferences parser hardened for OpenRouter model IDs with special characters (#488)
- `@` file autocomplete debounced to prevent TUI freeze on large codebases (#448)
- Auto-mode stops cleanly when dispatch gap watchdog fails (#537)
- Synchronous I/O removed from hot paths (#540)
- Silent catch blocks now capture error references for crash diagnostics (#546)
- `ctx.log` error in GSD provider recovery path fixed
- TUI resource leaks patched in loader, cancellable-loader, input, and editor components (#482)
- Hardcoded ANSI escapes replaced with chalk for consistent terminal handling (#482)

## [2.14.4] - 2026-03-15

### Fixed

- **Session cwd update** — `newSession()` now updates the LLM's perceived working directory to reflect `process.chdir()` into auto-worktrees. Previously the system prompt was frozen at the original project root, causing the LLM to `cd` back and write files to the wrong location. This was the root cause of complete-slice and plan-slice loops in worktree-based projects.

## [2.14.3] - 2026-03-15

### Fixed

- **Copy planning artifacts into new auto-worktrees** — `createAutoWorktree` now copies `.gsd/milestones/`, `DECISIONS.md`, `REQUIREMENTS.md`, `PROJECT.md` from the source repo into the worktree. Prevents plan-slice loops in projects with pre-v2.14.0 `.gitignore`.

## [2.14.2] - 2026-03-15

### Fixed

- **Dispatch reentrancy deadlock** — `_dispatching` flag was never reset after first dispatch, permanently blocking all subsequent unit dispatches. Wrapped in try/finally.
- **`.gitignore` self-heal** — existing projects with blanket `.gsd/` ignore now auto-remove it on next auto-mode start, replacing with explicit runtime-only patterns so planning artifacts are tracked in git.
- **Discuss depth verification** — render summary as chat text (markdown renders), use ask_user_questions for short confirmation only.

## [2.14.1] - 2026-03-15

### Fixed

- **Quiet auto-mode warnings** — internal recovery machinery (dispatch gap watchdog, model fallback chain) downgraded to verbose-only. Users only see warnings when action is needed.
- **Dispatch recovery hardening** — artifact fallback when completion key missing, TUI freeze prevention, reentrancy guard, atomic writes, stale runtime record cleanup

## [2.14.0] - 2026-03-15

### Added

- **Discussion manifest** — mechanical process verification for multi-milestone context discussions
- **Session-internal `/gsd config`** — configure GSD settings within a running session
- **Model selection UI** — select list instead of free-text input for model preferences
- **Startup performance** — faster GSD launch via optimized initialization

### Changed

- **Branchless worktree architecture** — eliminated slice branches entirely. All work commits sequentially on `milestone/<MID>` within auto-mode worktrees. No branch creation, switching, or merging within a worktree. ~2600 lines of merge/conflict/branch-switching code removed.
- **`.gitignore` overhaul** — planning artifacts (`.gsd/milestones/`) are tracked in git naturally. Only runtime files are gitignored. No more force-add hacks.
- **Multi-milestone enforcement** — `depends_on` frontmatter enforced in multi-milestone CONTEXT.md

### Fixed

- **Auto-mode loop detection failures** — artifacts on wrong branch or invisible after branch switch no longer possible (root cause eliminated by branchless architecture)
- **Nested worktree creation** — auto-mode no longer creates worktrees inside existing manual worktrees, preventing wrong-repo state reads and "All milestones complete" false positives
- **Dispatch recovery hardening** — artifact fallback when completion key missing, TUI freeze prevention on cascading skips, reentrancy guard, atomic writes, stale runtime record cleanup, git index.lock cleanup
- **Hook orchestration** — finalize runtime records, add supervision, fix retry
- **Empty slice plan stays in planning** — no longer incorrectly transitions to summarizing
- **Prefs wizard** — launch directly from `/gsd prefs`, fix parse/serialize cycle for empty arrays
- **Discussion routing** — `/gsd discuss` routes to draft when phase is needs-discussion

### Removed

- `ensureSliceBranch()`, `switchToMain()`, `mergeSliceToMain()`, `mergeSliceToMilestone()`
- `shouldUseWorktreeIsolation()`, `getMergeToMainMode()`, `buildFixMergePrompt()`
- `withMergeHeal()`, `recoverCheckout()`, `fix-merge` unit type
- `git.isolation` and `git.merge_to_main` preferences (deprecated with warnings)

## [2.13.1] - 2026-03-15

### Fixed

- Windows: multi-line commit messages in `mergeSliceToMilestone` broke shell parsing — switched to `execFileSync` with argument arrays
- Windows: single-quoted git arguments and bash-only redirects in test files
- Windows: worktree path normalization for `shouldUseWorktreeIsolation` and stale branch detection

## [2.13.0] - 2026-03-15

### Added

- **Worktree isolation for auto-mode** — auto-mode creates isolated git worktrees per milestone, with `--no-ff` slice merges preserving commit history and squash merge to main on milestone completion
- **Self-healing git repair** — automatic recovery from detached HEAD, stale locks, and orphaned worktrees
- **Worktree-aware doctor** — git health diagnostics and worktree integrity checks
- **Isolation preferences** — choose between worktree and branch isolation modes

### Fixed

- **Dispatch loop: parse cache stale data** — `dispatchNextUnit()` cleared path cache but not parse cache, allowing stale roadmap checkbox state to persist through doctor→dispatch transitions (#462)
- **Dispatch loop: completion not persisted after agent session** — `handleAgentEnd()` now verifies artifacts and persists the completion key before re-entering the dispatch loop, preventing re-dispatch when `deriveState()` sees pre-merge branch state (#462)
- **Dispatch loop: recovery counter reset without persistence** — loop-recovery and self-repair paths now persist completion keys and include a hard lifetime dispatch cap of 6 (#462, #463)
- **Dispatch loop: non-execute-task units had no artifact verification** — `complete-slice`, `plan-slice`, and other unit types now verify artifacts on disk before bail-out (#465)
- `@` file autocomplete debounced to prevent TUI freeze on large codebases (#452)
- Guard against newer synced resources from future versions (#445)
- Prevent `web_search` tool injection for non-Anthropic providers serving Claude models (#446)

## [2.12.0] - 2026-03-15

### Added

- **Parallel tool calling** — tools from a single assistant message execute concurrently by default, with sequential mode as opt-in (`toolExecution: "sequential"`) and `beforeToolCall`/`afterToolCall` hooks for interception
- **Ollama Cloud** as model and web tool provider
- **Extensible hook system** for auto-mode state machine — post-unit hooks fire after unit completion
- **Event queue settlement** for parallel tool execution — extension `tool_call`/`tool_result` handlers always see settled agent state

### Changed

- Inline static templates into prompt builders, eliminating ~44 READ tool calls per milestone

### Fixed

- Auto-mode dispatch loop when `cachedReaddir` returns stale data after unit writes files
- Parse and path caches cleared alongside state cache after unit completion
- `bg_shell` hangs indefinitely when `ready_port` server fails to start — now transitions to error state with stderr context
- Em dash and slash characters in milestone/slice titles corrupting GSD state management
- Guided-flow self-heals stale runtime records from crashed auto-mode sessions on wizard start
- CI smoke test ANSI code stripping

## [2.11.1] - 2026-03-15

### Fixed

- **URGENT: auto-mode loops on research-slice and plan-slice** — `handleAgentEnd` called `invalidateStateCache()` but not `clearPathCache()` or `clearParseCache()`. The in-process directory listing cache in `paths.ts` retained the pre-subagent empty directory snapshot, so `resolveSliceFile()` returned `null` for artifacts the subagent had just written. This caused `dispatchNextUnit` to re-dispatch the same unit (`research-slice` or `plan-slice`) instead of advancing, incrementing the dispatch counter until the `MAX_UNIT_DISPATCHES=3` limit triggered a hard stop with "Loop detected" (#421)

## [2.11.0] - 2026-03-14

### Added

- Cross-provider fallback when rate or quota limits are hit (#125)
- Custom OpenAI-compatible endpoint option in onboarding wizard (#335)
- Model provider selection in preferences (#350)
- Auto-mode fallback model rotation on network errors (#386)
- Native libgit2-backed git read operations for dispatch hotpath (#388)

### Changed

- Replace hardcoded extension list with dynamic discovery in loader
- Deduplicate transitive dependency summaries in prompt builders
- Reduce dispatch gap timeout from 30s to 5s
- Memoize `deriveState()` per dispatch cycle
- Wire native batch parser into `deriveState()` hotpath (#389)
- Add session-scoped directory listing cache and content-hash-keyed parse cache for path resolution
- Optimize discovery and interactive hot paths

### Fixed

- Resolve OpenRouter model IDs in auto-mode and show active model per phase
- Suppress git-svn noise causing confusing errors on affected systems (#404)
- Include export-html templates in pkg/ shim (#370, #395)
- Increase timeout for z.ai provider to handle slow API spikes (#379, #396)
- Prevent login dialog from leaving dangling promises that freeze the UI (#280, #390)
- Improve Cloud Code Assist 404 error with actionable model guidance (#384)
- Prevent auto-mode hang when dispatch chain breaks after slice tasks complete (#381, #382)
- Fix packaging verification and path portability (#378)
- Read resources from dist/ to prevent branch-drift in npm-link setups (#314)
- Always use native Anthropic web search when available (#374)
- CI smoke test — wait for registry propagation, show errors (#383)
- Bypass pre-commit hooks on GSD infrastructure commits to prevent lint-staged empty commit errors (#385)

## [2.10.12] - 2026-03-14

### Added

- Multi-milestone readiness flow with per-milestone discussion gate (#377)

### Fixed

- Fix `npx gsd-pi@latest` failing with `ERR_MODULE_NOT_FOUND: Cannot find package '@gsd/pi-coding-agent'`. The loader now creates workspace package symlinks at runtime before importing, so it works even when `npx` skips postinstall scripts (#380)

## [2.10.11] - 2026-03-14

### Fixed

- Hoist workspace package dependencies (undici, anthropic SDK, openai, chalk, etc.) into root `dependencies` so they install for end users. v2.10.10 removed `bundleDependencies` but didn't promote the transitive deps (#376)
- Add `undici` as root dependency to resolve startup crash (#372)
- Check `GROQ_API_KEY` before entering voice mode to prevent crash (#367)

## [2.10.10] - 2026-03-14

### Added

- Alibaba Cloud coding-plan provider support (#295)
- Linux voice mode: Groq Whisper API backend for fast, accurate speech-to-text (#366)
- Opus 4.6 1M as default model, model selector UX improvements, Discord onboarding (#290)

### Fixed

- Fix broken `npm install` / `npx gsd-pi@latest` caused by unpublished `@gsd/*` workspace packages leaking into npm dependencies. Workspace cross-references removed from published package metadata; packages resolve via bundled `node_modules/` at runtime (#369)
- Add pre-publish tarball install validation (`validate-pack`) to CI and publish pipeline, preventing broken packages from reaching npm
- Handle empty index after runtime file stripping in squash-merge (#364)
- Add retry logic for transient network/auth failures instead of crashing (#365)
- Auto-mode: stale lock detection, SIGTERM handler, live-session guard (#362)

## [2.10.9] - 2026-03-14

### Added

- Team collaboration: multiple users can work on the same repo without milestone name clashes by checking in `.gsd/` planning artifacts (#338)

### Changed

- Execute-task loop detection uses adaptive reconciliation instead of hard-stopping, reducing false positives (#342)
- Memory storage switched from better-sqlite3 to sql.js (WASM) for Node 25+ compatibility (#356)

### Fixed

- Node 22.22+ compatibility: `.ts` import extensions normalized to `.js` for module resolution (#354)
- Infinite loop when complete-slice merges to main are interrupted (#345)
- Credential backoff no longer triggers on transport errors; quota exhaustion handled gracefully (#353)
- OAuth-backed providers (Gemini) no longer crash on quota exhaustion (#347)
- Secrets skip in auto mode no longer crashes (#352)
- Untracked runtime files discarded before branch switch to prevent checkout conflicts (#346)
- TUI crash/corruption on code blocks with lines exceeding terminal width (#343)
- Infinite skip loop in `gsd auto` broken by adding roadmap completion check
- Model ID variant suffix stripped correctly for OAuth Anthropic API calls
- `.gsd/` planning artifacts force-added and `handleAgentEnd` reentrancy guarded (#341)

## [2.10.8] - 2026-03-14

### Fixed

- Publish verification checks `dist/loader.js` is non-empty (`-s`) and uses `--ignore-scripts` on `npm pack --dry-run` to match actual publish behaviour (#298)

## [2.10.7] - 2026-03-14

### Added

- GitHub Workflows skill with CI workflow template and `ci_monitor` tool (#294)
- Auto-resolve merge conflicts via LLM-powered fix-merge session
- Auto-update integration branch when user starts auto-mode from a different branch (#300)

### Changed

- Secrets manifest is re-checked before every dispatch, not just at auto mode start
- Replaced TS parameter properties with explicit fields for Node strip-types compatibility
- Hardened CI publish pipeline to prevent broken releases (#304)

### Fixed

- Unresolvable artifact paths now correctly treated as stale completion state, preventing OOM crashes (#313)
- Eliminated branch checkout during slice merge that caused STATE.md conflicts (#307)
- Removed infinite delivery retry loop for background job completions (#301)
- Display ⌥ instead of Alt for keybindings on macOS (#299)

### Removed

- Deprecated legacy dead code from OAuth module

## [2.10.6] - 2026-03-13

### Added

- Native Rust output truncation module for efficient large-output handling (#268)
- Native Rust xxHash32 hasher for hashline IDs — faster line hashing (#272)
- Native Rust bash stream processor for single-pass chunk processing (#271)
- Memory extraction pipeline (#261)
- `claude-opus-4-6` model with 1M context window (#288)

### Fixed

- Oversized TUI lines now truncated instead of crashing (#287)
- Anthropic rate limit backoff now respects server-requested retry delay
- CI publish guard: skip main package publish if already on npm
- Strip hashline prefixes from TUI read output (#265)

## [2.10.5] - 2026-03-13

### Added

- Async background jobs extension for non-blocking task execution (#260)
- Multi-credential round-robin with rate-limit fallback across API keys
- Bash interceptor to block commands that duplicate dedicated tools (Read, Write, Edit, Grep, Glob)
- `gsd update` subcommand for self-update (#273)
- Task isolation for subagent filesystem safety (#254)
- Native Rust streaming JSON parser (#266)
- Web search provider selection added to onboarding wizard (#278)

### Changed

- Simplified onboarding into two-step auth flow — plain language instead of OAuth jargon (#274)

### Fixed

- `optionalDependencies` in published `gsd-pi@2.10.4` were still pinned to `2.10.2`, causing users to install the broken engine binaries that 2.10.4 was meant to fix (#276)
- Auto-resolve `.gsd/` planning artifact conflicts during slice merge (#264)
- Use version ranges for native engine optional dependencies (#286)
- Guard publish against uncommitted version sync changes
- Show 'keep current' option in config when already authenticated (#283)
- Restore bashInterceptor settings dropped by async-jobs merge
- Collapse tool output by default

## [2.10.4] - 2026-03-13

### Fixed

- Native binary distribution — `.node` binaries were missing from the npm tarball, causing startup crashes on all platforms since v2.10.0
- Native loader resolution chain: tries `@gsd-build/engine-{platform}` npm package first, then local dev build, with clear error messages listing supported platforms

### Added

- Per-platform optional dependency packages (`@gsd-build/engine-*`) for macOS (ARM64/x64), Linux (x64/ARM64), and Windows (x64)
- Cross-platform native binary CI build and publish workflow
- Version synchronization script for lock-step platform package releases

## [2.10.2] - 2026-03-13

### Added

- Native Rust TTSR regex engine — pre-compiles all stream rule conditions into a single `RegexSet` for one-pass DFA matching instead of O(rules × conditions) JS regex iteration
- Native Rust diff engine — fuzzy text matching (`fuzzyFindText`, `normalizeForFuzzyMatch`) and unified diff generation (`generateDiff`) via the `similar` crate, replacing the `diff` npm package
- Native Rust GSD file parser — frontmatter parsing, section extraction, batch `.gsd/` directory parsing, and structured roadmap parsing with transparent JS fallback

## [2.10.1] - 2026-03-13

### Fixed

- `@gsd/native` package ships pre-compiled JavaScript instead of raw TypeScript, fixing startup crashes on Node.js 20, 22, and 24 (#248)

## [2.10.0] - 2026-03-13

### Added

- Native Rust engine with high-performance N-API modules replacing JS/WASM dependencies:
  - **grep** — ripgrep-backed content and filesystem search
  - **glob** — gitignore-aware file discovery with scan caching
  - **ps** — cross-platform process tree management
  - **clipboard** — native clipboard access via arboard (text + image)
  - **highlight** — syntect-based syntax highlighting (replaces `cli-highlight`)
  - **ast** — structural code search and rewrite via ast-grep (38+ languages)
  - **html** — HTML-to-Markdown conversion
  - **text** — ANSI-aware text measurement, wrapping, truncation, and slicing
  - **fd** — fuzzy file path discovery for autocomplete
  - **image** — decode, encode, and resize images (PNG, JPEG, GIF, WebP)
- Background shell `env` action to query shell session environment state
- Background shell `run` action for blocking command execution on persistent sessions
- Background shell `session` process type for persistent interactive sessions
- Hashline edits — line-hash-anchored file editing
- Universal config discovery extension

### Changed

- Find tool uses native Rust glob instead of `fd` CLI binary
- Syntax highlighting uses native syntect instead of `cli-highlight` npm package
- Autocomplete uses native fd module instead of `fd` CLI subprocess
- Text utilities (visible width, wrapping, truncation, slicing) use native Rust instead of JS
- Clipboard operations use native arboard instead of platform-specific CLI tools
- Image processing uses native Rust `image` crate instead of Photon WASM

### Fixed

- Prevent move operation from silently overwriting existing files
- Separate access/unlink error handling in delete path
- Untrack runtime files from slice branch before squash-merge
- Copy LSP defaults.json to dist during build
- Native module test assertions

## [2.9.0] - 2026-03-13

### Added

- LSP tool — full Language Server Protocol integration with diagnostics, go-to-definition, references, hover, document/workspace symbols, rename, code actions, type definition, and implementation support
- `/thinking` slash command for toggling thinking level during sessions
- Interactive wizard mode for `/gsd prefs` with guided configuration
- Startup update check with 24-hour cache — notifies when a new version is available

### Fixed

- TypeScript type errors across gsd, browser-tools, search-the-web, and misc extension files
- Milestone ID generation uses max-based approach instead of length+1 (prevents ID collisions)
- Non-thinking models handled correctly in `/thinking` command
- Auto-mode pauses on provider errors to prevent reassess-roadmap loop
- TAB hint displayed for notes input in discuss-mode survey
- Slice branches merge to integration branch instead of main
- Prefs wizard audit findings addressed
- Deduplicated maxNum logic with test coverage
- Command injection eliminated in LSP config `which()` function
- Unhandled JSON.parse in LSP message reader wrapped with error handling

## [2.8.3] - 2026-03-13

### Fixed

- `ask_user_questions` handles undefined `custom()` result in RPC mode
- Provider-aware model resolution for per-phase preferences (respects `provider` field instead of parsing model name prefixes)
- Execute-task artifact verification aligned with `deriveState` — adds self-repair for missing artifacts
- Research phase infinite loop broken; state synced on stop
- Auto-resolve merge conflicts on `.gsd/` runtime files
- Auto-switch model after `/login` and `/logout` to prevent API key errors
- Anthropic provider detection uses `provider` field instead of model name prefix matching

## [2.8.2] - 2026-03-13

### Fixed

- Path operations use `node:path` stdlib instead of hardcoded forward slashes, fixing cross-platform compatibility
- Prompts use relative paths to prevent Windows drive letter mangling
- Runtime files already in the git index are untracked to prevent merge conflicts
- HTTP_PROXY and HTTPS_PROXY environment variables respected for all outbound requests
- Windows NUL redirects sanitized to /dev/null in Git Bash environments

### Changed

- `.claude/` and `.gsd/` directories untracked from repo, `*.tgz` gitignored

## [2.8.1] - 2026-03-13

### Added

- Discussion depth verification and context write-gate for richer milestone discussions
- TTSR + blob/artifact storage (ported from oh-my-pi)
- Skip/discard escape hatches in no-roadmap wizard
- Configurable `merge_strategy` preference for slice completion

### Fixed

- `fsevents` bumped to ~2.3.3 for Node 25 compatibility; added as optional dep for Linux installs
- Observability warnings injected into agent prompt for enforcement
- Auto-detect headless environment for Playwright browser launch
- UAT artifact verified before marking complete-slice done
- Prior slices must complete on main before next slice dispatches
- smartStage fallback bypasses runtime exclusions when `.gsd/` is gitignored
- `/exit` uses graceful shutdown instead of hard kill

## [2.8.0] - 2026-03-13

### Added

- Browser tools: `browser_analyze_form` and `browser_fill_form` — form field inventory and intelligent filling by label/name/placeholder
- Browser tools: `browser_find_best` — scored element candidates for semantic intents
- Browser tools: `browser_act` — execute common browser micro-tasks in one call
- Browser tools: 108 unit and integration tests covering all new components

### Changed

- Browser tools: decomposed 5000-line monolithic `index.ts` into focused modules (state, capture, settle, lifecycle, refs, utils) with 11 categorized tool files
- Browser tools: consolidated state capture reduces evaluate round-trips per action
- Browser tools: zero-mutation settle short-circuit for faster page interaction
- Browser tools: conditional body text capture — low-signal tools skip it for smaller token payloads
- Browser tools: screenshot resizing uses `sharp` instead of canvas evaluate calls
- Browser tools: screenshots opt-in on navigate (no longer sent by default)

## [2.7.1] - 2026-03-13

### Added

- Model fallback support for auto-mode phases — if the configured model fails, GSD tries alternate models before stopping
- `/kill` command for immediate process termination

### Fixed

- `npm install -g gsd-pi` now works — workspace packages bundled in npm tarball via `bundleDependencies`
- External PI ecosystem packages (pi-rtk, pi-context, etc.) can now resolve `@mariozechner/*` imports through jiti aliases
- Missing `export-html` vendor files (marked.min.js, highlight.min.js) restored
- Skipped API keys now persist so the setup wizard doesn't repeat on every launch
- Provider config and extension loading reused correctly

### Changed

- `/exit` uses graceful shutdown (saves session state); `/kill` replaces the old immediate-exit behavior

## [2.7.0] - 2026-03-12

### Changed

- Vendor Pi SDK source (tui, ai, agent-core, coding-agent) into workspace monorepo under `packages/`, replacing the compiled npm dependency and patch-package workflow. Pi internals are now directly modifiable as TypeScript source.
- Existing patches (setModel persist option, Windows VT input caching) applied as source edits.
- Build pipeline runs workspace packages in dependency order before GSD compilation.
- Removed `patch-package` from devDependencies and postinstall.

## [2.6.0] - 2026-03-12

### Added

- Proactive secret management — planning phase forecasts required API keys into a manifest; auto-mode collects pending secrets before dispatching the first slice
- `--continue` / `-c` CLI flag to resume the most recent session

### Fixed

- Doctor post-hook no longer preempts `complete-slice` dispatch
- `main_branch` preference restored; `runPreMergeCheck` implemented for merge safety
- Recovery/retry prompt injection capped to prevent V8 OOM on large sessions
- `.gsd/` excluded from pre-switch auto-commits to prevent squash merge conflicts

## [2.5.1] - 2026-03-12

### Added

- `secure_env_collect` now auto-detects existing keys, destination files, and provides guidance field for better onboarding UX

### Changed

- Right-sized pipeline for simple work — single-slice milestones skip redundant research/plan sessions, reducing 9-10 sessions to 5-6
- Heavyweight plan sections (Proof Level, Integration Closure, Observability) are now conditional, omitted for simple slices

### Fixed

- Squash-merge now aborts cleanly on conflict and stops auto-mode instead of looping with corrupted state
- Resolved baked-in merge conflict markers in loader.ts, logo.ts, and postinstall.js

## [2.5.0] - 2026-03-12

### Added

- Native Anthropic web search — Claude models get server-side web search automatically, no Brave API key required
- GitService fully wired into codebase — programmatic git operations replace shell-based git commands in prompts
- Merge guards prevent slice completion when uncommitted changes or conflicts exist
- Snapshot support for saving and restoring `.gsd/` state
- Auto-push after slice squash-merge to main
- Rich commit messages with structured metadata

### Fixed

- State machine deadlock when units fail to produce expected artifacts — retry and cross-validation now gate completion
- Duplicate Brave search tools when toggling providers repeatedly
- Windows test glob patterns (single quotes → unquoted for shell expansion)
- Conversation replay error caused by thinking blocks in stored history
- Brave search tools removed from API payload when no `BRAVE_API_KEY` is set
- Restore notifications suppressed on session resume to reduce UX noise

## [2.4.0] - 2026-03-12

### Added

- Automatic migration of provider credentials from existing Pi installations — skip re-authentication when switching to GSD
- Pi extensions from `~/.pi/agent/extensions/` discoverable in interactive mode
- GitService core implementation for programmatic git operations

### Changed

- System prompt compressed by 48% (360 → 187 lines) for better context efficiency
- Refined agent character and communication style prompts
- Added craft standards, self-debugging awareness, and work narration to agent prompts

### Fixed

- RPC mode crash when `ctx.ui.theme` is undefined (#121)

## [2.3.11] - 2026-03-12

### Added

- Branded clack-based onboarding wizard on first launch — LLM provider selection (OAuth + API key), optional tool API keys, and setup summary (#118)
- `gsd config` subcommand to re-run the setup wizard anytime
- Shared `src/logo.ts` module as single source of truth for ASCII banner

### Fixed

- Parallel subagent results no longer truncated at 200 characters

### Changed

- `wizard.ts` trimmed to env hydration only — onboarding logic moved to `onboarding.ts`
- First-launch banner removed from `loader.ts` (onboarding wizard handles branding)

## [2.3.10] - 2026-03-12

### Added

- Branded postinstall experience with animated spinners, progress indicators, and clean summary (#115)

### Fixed

- Ctrl+Alt shortcuts (dashboard, bg manager, voice) now show slash-command fallback in terminals that lack Kitty keyboard protocol support — macOS Terminal.app, JetBrains IDEs (#100, #104)

## [2.3.9] - 2026-03-12

### Added

- Tavily as alternative web search provider alongside Brave Search (#102)
- Auto-mode progress widget now shows all stats; footer hidden during auto-mode (#75)

### Fixed

- Auto-mode infinite loop and closeout instability — idempotent unit dispatch, retry caps, and atomic closeout (#96, #109)
- Migration no longer requires ROADMAP.md — milestones inferred from phases/ directory when missing (#93, #90)
- Worktree branch safety — proper namespacing and slice branch base selection (#92)
- Windows: use `execFile` to avoid single-quote shell issues (#103)
- Broken `read @GSD-WORKFLOW.md` references replaced with `/gsd` command (#88)
- Google Search extension updated to use `gemini-2.5-flash` (#83)
- Duplicate `getCurrentBranch` import in auto.ts (#87)
- `formatCost` crash on non-number cost values (#74)
- Avoid `sudo` prompts in postinstall script (#73)
- `.gsd/` folder removed from git tracking; consolidated `.gitignore` (#78)
- Multiple community-reported bugs across CLI, auto-mode, and extensions

## [2.3.8] - 2026-03-11

### Fixed

- Worktree file operations (Write, Read, Edit) now resolve paths against the active working directory instead of the launch directory (#72)
- Auto-mode merge guard handles all slice completion paths, preventing infinite dispatch loops when `complete-slice` is bypassed (#71)

## [2.3.7] - 2026-03-11

### Added

- Remote user questions via Slack/Discord for headless auto-mode sessions

### Fixed

- Auto-mode model switches no longer persist as the user's global default (#30)
- Auto-mode resume now rebuilds disk state and runs doctor before dispatching, preventing inline execution after pause (#16)
- Silent dispatch failure when command context is null now surfaces an error notification
- Race condition between timeout handlers and prompt dispatch in auto-mode
- Remote questions: validate IDs before test-send, sanitize error messages to prevent token leakage
- Remote questions: cap user_note at 500 chars to prevent LLM context injection
- Remote questions: validate channel ID format to prevent SSRF
- Remote questions: add 15s per-request fetch timeout to adapters
- Remote questions: distinguish Discord 404 from auth errors in reactions
- Prompt store sorting uses `updatedAt` instead of filename
- TypeScript parameter properties desugared for `--experimental-strip-types` compatibility

### Changed

- Remote question result details use discriminated union type

## [2.3.6] - 2026-03-11

### Fixed

- Postinstall no longer triggers hidden `sudo` prompt on Linux — Playwright's `--with-deps` flag is no longer run automatically, preventing `npm install -g` from appearing to hang (#67)
- Auto-commit dirty files before branch switch to prevent lost work during slice transitions

### Changed

- Updated README to reflect current commands, extensions, and step mode workflow

## [2.3.5] - 2026-03-11

### Fixed

- Voice extension: transcription no longer lost when pausing and resuming recording

## [2.3.4] - 2026-03-11

### Added

- CHANGELOG.md with curated history from v0.1.6 onwards
- Project-local `/publish-version` command for npm releases
- GitHub Sponsors funding configuration
- npm publish and install smoke test

## [0.3.3] - 2026-03-11

### Added

- `/gsd next` step mode — walk through units one at a time with a wizard between each
- `/gsd` bare command defaults to step mode
- `/exit` command to kill the GSD process immediately
- `/clear` as alias for `/new` (new session)
- MCPorter extension for lazy on-demand MCP server integration
- `/voice` extension for real-time speech-to-text
- Pi global install scripts
- Post-hook bookkeeping: auto-run doctor + rebuild STATE.md after each unit

### Changed

- Improved worktree merge, create, remove, and reload resilience
- Discuss prompt rewritten with reflection step and depth enforcement

### Fixed

- Idle watchdog false-firing on active agents — tasks >10min no longer get incorrectly skipped (#52)
- Browser screenshots constrained to 1568px max dimension (#56)
- Pi extensions loaded from `~/.pi/agent/extensions/` (#51)

### Removed

- `/gsd-run` command (replaced by `/gsd` and `/gsd next`)

## [0.3.1] - 2026-03-11

### Fixed

- Windows VT input restored after child processes exit (#41)
- Print/JSON mode in cli.js so subagents don't hang
- Discuss prompt loop prevention
- Managed tools bootstrap and gh auth
- Session list scoped to current working directory
- Bash/bg_shell hang and kill issues on Windows (#40)
- `/gsd-run` hardcoded `~/.pi/` path (#38)
- Windows backspace in masked input + custom browser path support (#36, #34)

### Changed

- Renamed "Get Stuff Done" to "Get Shit Done"

## [0.3.0] - 2026-03-11

### Added

- `/worktree` (`/wt`) — git worktree lifecycle management (#31)
- `/gsd migrate` — `.planning` to `.gsd` migration tool (#28)

### Fixed

- Skipped API keys now persist so wizard doesn't repeat on every launch (#27)
- Scoped models restored from settings on new session startup (#22)
- Startup fallback no longer overwrites user's default model with Sonnet (#29)

## [0.2.9] - 2026-03-11

### Fixed

- Idle recovery skips stuck units instead of silently stalling (#19)
- `pkg/package.json` version synced with pi-coding-agent to prevent false update banner
- Milestones with summary but no roadmap treated as complete (#13)

## [0.2.8] - 2026-03-11

### Added

- Mac-tools extension (macOS native automation)

## [0.2.6] - 2026-03-11

### Fixed

- Default model validated against full registry on every startup

## [0.2.5] - 2026-03-11

### Fixed

- Circular self-dependency removed, default model set to anthropic/claude-sonnet-4-6 with thinking off

## [0.2.4] - 2026-03-11

### Added

- Branded setup wizard UI with visual hierarchy, descriptions, and status feedback
- Branded banner on first launch
- Postinstall banner with version and next-step hint

### Fixed

- All `.pi/` paths updated to `.gsd/`
- Default model matching by `id.includes('sonnet')` for dated API IDs
- Circular gsd-pi self-dependency removed
- Pi SDK version check suppressed
- Selected options stay lit when notes field is focused

## [0.1.6] - 2026-03-11

### Added

- GitHub extension tool suite with confirmation gate
- Bundled skills: frontend-design, swiftui, debug-like-expert
- Skills trigger table in system prompt
- Resource loader syncs bundled skills to `~/.gsd/agent/skills/`

### Fixed

- `~/.gsd/agent/` paths in prompt templates instead of `~/.pi/agent/` (#10)
- Guard against re-injecting discuss prompt when session already in flight

### Changed

- License updated to MIT

[Unreleased]: https://github.com/gsd-build/gsd-2/compare/v2.80.0...HEAD
[2.80.0]: https://github.com/gsd-build/gsd-2/compare/v2.79.0...v2.80.0
[2.79.0]: https://github.com/gsd-build/gsd-2/compare/v2.78.1...v2.79.0
[2.78.1]: https://github.com/gsd-build/gsd-2/compare/v2.78.0...v2.78.1
[2.78.0]: https://github.com/gsd-build/gsd-2/compare/v2.77.0...v2.78.0
[2.77.0]: https://github.com/gsd-build/gsd-2/compare/v2.76.0...v2.77.0
[2.76.0]: https://github.com/gsd-build/gsd-2/compare/v2.75.0...v2.76.0
[2.75.0]: https://github.com/gsd-build/gsd-2/compare/v2.74.0...v2.75.0
[2.74.0]: https://github.com/gsd-build/gsd-2/compare/v2.73.1...v2.74.0
[2.73.1]: https://github.com/gsd-build/gsd-2/compare/v2.73.0...v2.73.1
[2.73.0]: https://github.com/gsd-build/gsd-2/compare/v2.72.0...v2.73.0
[2.72.0]: https://github.com/gsd-build/gsd-2/compare/v2.71.0...v2.72.0
[2.71.0]: https://github.com/gsd-build/gsd-2/compare/v2.70.1...v2.71.0
[2.70.1]: https://github.com/gsd-build/gsd-2/compare/v2.70.0...v2.70.1
[2.70.0]: https://github.com/gsd-build/gsd-2/compare/v2.69.0...v2.70.0
[2.69.0]: https://github.com/gsd-build/gsd-2/compare/v2.68.1...v2.69.0
[2.68.1]: https://github.com/gsd-build/gsd-2/compare/v2.68.0...v2.68.1
[2.68.0]: https://github.com/gsd-build/gsd-2/compare/v2.67.0...v2.68.0
[2.67.0]: https://github.com/gsd-build/gsd-2/compare/v2.66.1...v2.67.0
[2.66.1]: https://github.com/gsd-build/gsd-2/compare/v2.66.0...v2.66.1
[2.66.0]: https://github.com/gsd-build/gsd-2/compare/v2.65.0...v2.66.0
[2.65.0]: https://github.com/gsd-build/gsd-2/compare/v2.64.0...v2.65.0
[2.64.0]: https://github.com/gsd-build/gsd-2/compare/v2.63.0...v2.64.0
[2.63.0]: https://github.com/gsd-build/gsd-2/compare/v2.62.1...v2.63.0
[2.62.1]: https://github.com/gsd-build/gsd-2/compare/v2.62.0...v2.62.1
[2.62.0]: https://github.com/gsd-build/gsd-2/compare/v2.61.0...v2.62.0
[2.61.0]: https://github.com/gsd-build/gsd-2/compare/v2.60.0...v2.61.0
[2.60.0]: https://github.com/gsd-build/gsd-2/compare/v2.59.0...v2.60.0
[2.59.0]: https://github.com/gsd-build/gsd-2/compare/v2.58.0...v2.59.0
[2.58.0]: https://github.com/gsd-build/gsd-2/compare/v2.57.0...v2.58.0
[2.57.0]: https://github.com/gsd-build/gsd-2/compare/v2.56.0...v2.57.0
[2.56.0]: https://github.com/gsd-build/gsd-2/compare/v2.55.0...v2.56.0
[2.55.0]: https://github.com/gsd-build/gsd-2/compare/v2.54.0...v2.55.0
[2.54.0]: https://github.com/gsd-build/gsd-2/compare/v2.53.0...v2.54.0
[2.53.0]: https://github.com/gsd-build/gsd-2/compare/v2.52.0...v2.53.0
[2.52.0]: https://github.com/gsd-build/gsd-2/compare/v2.51.0...v2.52.0
[2.51.0]: https://github.com/gsd-build/gsd-2/compare/v2.50.0...v2.51.0
[2.50.0]: https://github.com/gsd-build/gsd-2/compare/v2.49.0...v2.50.0
[2.49.0]: https://github.com/gsd-build/gsd-2/compare/v2.48.0...v2.49.0
[2.48.0]: https://github.com/gsd-build/gsd-2/compare/v2.47.0...v2.48.0
[2.47.0]: https://github.com/gsd-build/gsd-2/compare/v2.46.1...v2.47.0
[2.46.1]: https://github.com/gsd-build/gsd-2/compare/v2.46.0...v2.46.1
[2.46.0]: https://github.com/gsd-build/gsd-2/compare/v2.45.0...v2.46.0
[2.45.0]: https://github.com/gsd-build/gsd-2/compare/v2.44.0...v2.45.0
[2.44.0]: https://github.com/gsd-build/gsd-2/compare/v2.43.0...v2.44.0
[2.43.0]: https://github.com/gsd-build/gsd-2/compare/v2.42.0...v2.43.0
[2.42.0]: https://github.com/gsd-build/gsd-2/compare/v2.41.0...v2.42.0
[2.41.0]: https://github.com/gsd-build/gsd-2/compare/v2.40.0...v2.41.0
[2.40.0]: https://github.com/gsd-build/gsd-2/compare/v2.39.0...v2.40.0
[2.39.0]: https://github.com/gsd-build/gsd-2/compare/v2.38.0...v2.39.0
[2.38.0]: https://github.com/gsd-build/gsd-2/compare/v2.37.1...v2.38.0
[2.37.1]: https://github.com/gsd-build/gsd-2/compare/v2.37.0...v2.37.1
[2.37.0]: https://github.com/gsd-build/gsd-2/compare/v2.36.0...v2.37.0
[2.36.0]: https://github.com/gsd-build/gsd-2/compare/v2.35.0...v2.36.0
[2.35.0]: https://github.com/gsd-build/gsd-2/compare/v2.34.0...v2.35.0
[2.34.0]: https://github.com/gsd-build/gsd-2/compare/v2.33.1...v2.34.0
[2.33.1]: https://github.com/gsd-build/gsd-2/compare/v2.33.0...v2.33.1
[2.33.0]: https://github.com/gsd-build/gsd-2/compare/v2.32.0...v2.33.0
[2.32.0]: https://github.com/gsd-build/gsd-2/compare/v2.31.2...v2.32.0
[2.31.2]: https://github.com/gsd-build/gsd-2/compare/v2.31.1...v2.31.2
[2.31.1]: https://github.com/gsd-build/gsd-2/compare/v2.31.0...v2.31.1
[2.31.0]: https://github.com/gsd-build/gsd-2/compare/v2.30.0...v2.31.0
[2.30.0]: https://github.com/gsd-build/gsd-2/compare/v2.29.0...v2.30.0
[2.29.0]: https://github.com/gsd-build/gsd-2/compare/v2.28.0...v2.29.0
[2.28.0]: https://github.com/gsd-build/gsd-2/compare/v2.27.0...v2.28.0
[2.27.0]: https://github.com/gsd-build/gsd-2/compare/v2.26.0...v2.27.0
[2.26.0]: https://github.com/gsd-build/gsd-2/compare/v2.25.0...v2.26.0
[2.25.0]: https://github.com/gsd-build/gsd-2/releases/tag/v2.25.0
[2.24.0]: https://github.com/gsd-build/gsd-2/compare/v2.23.0...v2.24.0
[2.23.0]: https://github.com/gsd-build/gsd-2/compare/v2.22.0...v2.23.0
[2.21.0]: https://github.com/gsd-build/gsd-2/compare/v2.20.0...v2.21.0
[2.19.0]: https://github.com/gsd-build/gsd-2/compare/v2.18.0...v2.19.0
[2.18.0]: https://github.com/gsd-build/gsd-2/compare/v2.17.0...v2.18.0
[2.17.0]: https://github.com/gsd-build/gsd-2/compare/v2.16.0...v2.17.0
[2.16.0]: https://github.com/gsd-build/gsd-2/compare/v2.15.1...v2.16.0
[2.15.1]: https://github.com/gsd-build/gsd-2/releases/tag/v2.15.1
[2.15.0]: https://github.com/gsd-build/gsd-2/compare/v2.14.4...v2.15.0
[2.14.4]: https://github.com/gsd-build/gsd-2/compare/v2.14.3...v2.14.4
[2.14.3]: https://github.com/gsd-build/gsd-2/compare/v2.14.2...v2.14.3
[2.14.2]: https://github.com/gsd-build/gsd-2/compare/v2.14.1...v2.14.2
[2.14.1]: https://github.com/gsd-build/gsd-2/compare/v2.14.0...v2.14.1
[2.14.0]: https://github.com/gsd-build/gsd-2/compare/v2.13.1...v2.14.0
[2.13.1]: https://github.com/gsd-build/gsd-2/compare/v2.13.0...v2.13.1
[2.13.0]: https://github.com/gsd-build/gsd-2/compare/v2.12.0...v2.13.0
[2.12.0]: https://github.com/gsd-build/gsd-2/compare/v2.11.1...v2.12.0
[2.11.1]: https://github.com/gsd-build/gsd-2/compare/v2.11.0...v2.11.1
[2.11.0]: https://github.com/gsd-build/gsd-2/compare/v2.10.12...v2.11.0
[2.10.12]: https://github.com/gsd-build/gsd-2/compare/v2.10.11...v2.10.12
[2.10.11]: https://github.com/gsd-build/gsd-2/compare/v2.10.10...v2.10.11
[2.10.10]: https://github.com/gsd-build/gsd-2/compare/v2.10.9...v2.10.10
[2.10.9]: https://github.com/gsd-build/gsd-2/compare/v2.10.8...v2.10.9
[2.10.8]: https://github.com/gsd-build/gsd-2/compare/v2.10.7...v2.10.8
[2.10.7]: https://github.com/gsd-build/gsd-2/compare/v2.10.6...v2.10.7
[2.10.6]: https://github.com/gsd-build/gsd-2/compare/v2.10.5...v2.10.6
[2.10.5]: https://github.com/gsd-build/gsd-2/compare/v2.10.4...v2.10.5
[2.10.4]: https://github.com/gsd-build/gsd-2/compare/v2.10.2...v2.10.4
[2.10.2]: https://github.com/gsd-build/gsd-2/compare/v2.10.1...v2.10.2
[2.10.1]: https://github.com/gsd-build/gsd-2/compare/v2.10.0...v2.10.1
[2.10.0]: https://github.com/gsd-build/gsd-2/compare/v2.9.0...v2.10.0
[2.9.0]: https://github.com/gsd-build/gsd-2/compare/v2.8.3...v2.9.0
[2.8.3]: https://github.com/gsd-build/gsd-2/compare/v2.8.2...v2.8.3
[2.8.2]: https://github.com/gsd-build/gsd-2/compare/v2.8.1...v2.8.2
[2.8.1]: https://github.com/gsd-build/gsd-2/compare/v2.8.0...v2.8.1
[2.8.0]: https://github.com/gsd-build/gsd-2/compare/v2.7.1...v2.8.0
[2.7.1]: https://github.com/gsd-build/gsd-2/compare/v2.7.0...v2.7.1
[2.7.0]: https://github.com/gsd-build/gsd-2/compare/v2.6.0...v2.7.0
[2.6.0]: https://github.com/gsd-build/gsd-2/compare/v2.5.1...v2.6.0
[2.20.0]: https://github.com/gsd-build/gsd-2/releases/tag/v2.20.0
[2.22.0]: https://github.com/gsd-build/gsd-2/releases/tag/v2.22.0
[2.5.1]: https://github.com/gsd-build/gsd-2/compare/v2.5.0...v2.5.1
[2.5.0]: https://github.com/gsd-build/gsd-2/compare/v2.4.0...v2.5.0
[2.4.0]: https://github.com/gsd-build/gsd-2/compare/v2.3.11...v2.4.0
[2.3.11]: https://github.com/gsd-build/gsd-2/compare/v2.3.10...v2.3.11
[2.3.10]: https://github.com/gsd-build/gsd-2/compare/v2.3.9...v2.3.10
[2.3.9]: https://github.com/gsd-build/gsd-2/compare/v2.3.8...v2.3.9
[2.3.8]: https://github.com/gsd-build/gsd-2/compare/v2.3.7...v2.3.8
[2.3.7]: https://github.com/gsd-build/gsd-2/compare/v2.3.6...v2.3.7
[2.3.6]: https://github.com/gsd-build/gsd-2/compare/v2.3.5...v2.3.6
[2.3.5]: https://github.com/gsd-build/gsd-2/compare/v2.3.4...v2.3.5
[2.3.4]: https://github.com/gsd-build/gsd-2/compare/v0.3.3...v2.3.4
[0.3.3]: https://github.com/gsd-build/gsd-2/compare/v0.3.1...v0.3.3
[0.3.1]: https://github.com/gsd-build/gsd-2/compare/v0.3.0...v0.3.1
[0.3.0]: https://github.com/gsd-build/gsd-2/compare/v0.2.9...v0.3.0
[0.2.9]: https://github.com/gsd-build/gsd-2/compare/v0.2.8...v0.2.9
[0.2.8]: https://github.com/gsd-build/gsd-2/compare/v0.2.6...v0.2.8
[0.2.6]: https://github.com/gsd-build/gsd-2/compare/v0.2.5...v0.2.6
[0.2.5]: https://github.com/gsd-build/gsd-2/compare/v0.2.4...v0.2.5
[0.2.4]: https://github.com/gsd-build/gsd-2/compare/v0.1.6...v0.2.4
[0.1.6]: https://github.com/gsd-build/gsd-2/releases/tag/v0.1.6