atelier v0.44.0

High-severity audit remediation release — 12 fixes from the 2026-07-15 audit (all 18 high findings now closed; the remaining 6 were fixed in sibling repos or previously resolved).

Fixes

• 19a34c8 fix(permissions): deny agent reads of atelier's gh identity tokens (#365)
• 59db4a3 fix(install): add ~/.local/bin to PATH after native Claude Code install (#364)
• fdf4e95 fix(install): export CLAUDE_CONFIG_DIR after preflight, not before (#363)
• 156ce57 fix(install): register gh credential helper in git-identity (#362)
• 4654381 fix(config): declare planStorage=resident (#357)
• afcb643 fix(update): permission-diff confirmation reachable without a TTY; new --yes flag (#356)
• c523896 fix(setup-project): accept --backend in atelier-setup-project arg parse (#355)
• fedf1b4 fix(abandon-task): route the tracking move via the orchestrator (#354)
• a68a8f2 fix(visual-validation): correct the unexecutable screenshot gist-upload recipe (#353)
• d45caa5 fix(pr-flow): pin the tracking commit as a required pre-push move (#352)
• adbb3a1 fix(decision-broker): read policy from decisionPolicy.byCategory (#351)
• 0048c0d fix(pr-author): run the size gate before the tracking move (#350)

Minor bump per PLAN.md §14.2: the set changes agent prompts, slash commands, hooks and the permission model, and adds backwards-compatible flags (atelier-update --yes, atelier-setup-project --backend).

v0.41.0

Bundles everything merged to main since v0.40.0 — 5 feat, 4 fix, 1 chore.

Features

• /atelier:status ▶ Blocked section — hard-stopped + dependency-gated task visibility (#6 → #309)
• /atelier:abandon-task <id> — stop and discard an in-flight task (#7 → #308)
• planStorage=resident — backend-only plans carried inline through the chain (#300)
• /setup-project CI/CD detection — offers to scaffold CI per stack (#5 → #299)
• pr-opener agent — delegate non-task PR authoring off the reviewing session (#293)

Fixes

• two-party PR review correctness (#44) — standalone flows (/align, /release, /plan-task) delegate the whole author→review→merge coordination to the orchestrator; adds a guarded non-task PR orchestrator mode + author-by-branch-shape; corrects the shipped invariant (#303, #304, #306)
• next-task — derive plan-storage mode from backend, not the planStorage field (#305)

Chore

• tests — remove duplicated Group 5 header in the pr-opener-delegation test (#307)

v0.40.0

Bundles everything merged to main since v0.39.0. Minor bump (feat since the last tag).

Features

• /atelier:release command + atelier-release helper — infer the next SemVer bump from Conventional Commits and cut the release through the chain (#43 → #296)

Fixes

• hooks — make the notification test's get_mtime portable (GNU-first) (#295)

v0.39.0

Bundles everything merged to main since v0.38.0. Minor bump (feat since the last tag).

Features

• task-completion notification cues — success + blocked, opt-in (#42 → #291)

v0.38.0

Bundles everything merged to main since v0.37.0. Minor bump (feats since the last tag).

Features

• operator notification sound — opt-in audible cue (#41 → #289)
• plan candidates surfaced on the no-claimable-task dead-end (#288)
• repo-less install — bootstrap.sh + marketplace-cache runtime, drops the manual clone (#39 → #287)

Fixes

• hardening pass — hooks-liveness doctor check, pinned bootstrap, visible fail-open, docs (#286)
• safe-commit — harden the hook against gate-bypass attempts (#283)

v0.37.0

Bundles everything merged to main since v0.36.0. Minor bump (feats since the last tag).

Features

• /atelier:babysit-prs watcher — drives open task/* PRs to merge (#25)
• auto-merge post-merge base fast-forward + orphan branch sweep (#26)
• planStorage=local contract — carries gitignored plans through the task chain (#279)

Fixes

• doctor: don't flag drift / propose a downgrade when the local plugin is ahead of published (#281 → #282)
• doctor: don't read a protected branch as unprotected when the token lacks admin (#284)
• hooks: fire crt's offline-mirror auto-refresh on SessionStart (#34)
• pr-author: reconcile a diverged task branch with --force-with-lease, not delete (#33)
• tests: defuse SIGPIPE/pipefail race in operator-language.test.sh (#36)

Plus plan/roadmap bookkeeping (#37, #32, #35, mirror-tracking).

v0.36.0

Bundles everything merged to main since v0.35.0.

Features

• orchestrator waits for the CI cycle before the auto-merge gate (#23)
• auto review-fix loop: re-dispatch implementer/tester on request-changes, bounded, then escalate (#24)
• /setup-project detects missing branch protection and offers an autonomous fix (#31)

Fixes

• align: honor decisionPolicy.default=auto in Tier 3 (#30)
• atelier-update: detach stdin on claude plugin mutations so cache refresh doesn't hang (#29)

Chores

• migrate task tracking to the github-project backend
• planning / roadmap bookkeeping for #23 / #24 / #30 / #31

Full changelog: v0.35.0...v0.36.0

v0.35.0 — M9 complete: multi-repo workspaces + bugfixes

Features

• M9 complete — multi-repo workspaces + mixed-backend support (#22): backend-aware cross-repo blocked_by resolution (#22a), mixed-backend workspace-status rendering + backend-deferred blockers (#22b), and a manual-e2e runbook for mixed-backend workspaces (#22c). Closes the M9 epic.

Fixes

• #27 — /plan-task decomposition is no longer silently dropped when the plan commit hasn't reached origin/<base>. /next-task now fails loud (probing git cat-file -e origin/<base>:.plan/<id>.md) and task-orchestrator carries an independent backstop; the contract is documented in plan-task.md and locked by a hermetic regression test.
• #28 — atelier-pr-size-check no longer aborts under set -u on bash 3.2 (macOS system bash) due to empty-array [@] expansion. The §6 auto-merge size guardrail now counts correctly in PR mode instead of a false 0/0.

Full changelog: v0.34.0...v0.35.0

v0.34.0 — M9.3: atelier commands on GitHub Projects

Ships M9.3 — atelier's commands operate on a github-project backend: /atelier:setup-project backend choice (delegates to /create-roadmap --backend), /atelier:next-task read+claim from the Project, and /atelier:plan-task's gate setting the Project Ready field via RoadmapBackend.setReady. Plus structural-CI test auto-discovery (#225). Requires claude-roadmap-tools ≥ 0.6.0. /atelier:update to pick it up.

v0.33.1

Operator chat-language hook fix.

• The SessionStart hook now emits the Address the operator in <lang> directive before the ~26 KB operator-rules.md dump, so it stays within the head of the hook stdout that survives truncation into the model context. Sessions now honor operator.json's language from the first message instead of defaulting to English (#214).
• Also in this release: atelier's own ROADMAP adopted to the PLAN.md §5 layout + a CLAUDE.md tracking-flow note (#213, docs only).

Pick it up with /atelier:update.