cli: v5.5.0

5.5.0 (2026-10-16)

⚠ BREAKING CHANGES

• the aidd telemetry commands, the aidd-telemetry hooks and skills, backlog-link.json and the AIDD-Session-Id commit trailer are removed; measurement returns, for Claude Code first, later on this branch.

Features

• telemetry: ask who is measured at opt-in (#1034) (06dbb98) (@blafourcade)
• telemetry: deterministic claude code token measurement, release 1 (#993) (0a103e6) (@blafourcade)
• telemetry: filter the report by task, ticket, person and more (#1033) (7084a88) (@blafourcade)

Bug Fixes

• aidd-pm: give a spec gap one home, and refuse only one written elsewhere (#969) (22c541a) (@blafourcade)
• cli: clear remaining dependency security advisories (#1013) (05b166b), closes #469 (@blafourcade)
• cli: launch Biome reliably in the Windows architecture guards (#1000) (aab3480) (@blafourcade)
• cli: patch vulnerable development dependencies (#1011) (4704286), closes #1008 (@blafourcade)
• cli: preserve exact mutation filtering with vitest 5 (#1003) (0940c07) (@blafourcade)
• cli: preserve noninteractive git fetches with simple-git v4 (4ffbc0a) (@dependabot[bot])
• cli: render setup validation errors cleanly (#966) (7f92f85) (@blafourcade)
• cli: restore OpenCode plugins and verify Kilo runtime hooks (#971) (12777d0) (@blafourcade)
• cli: the test sandbox keeps node when a tool binary shares its directory (#968) (bf0f216) (@blafourcade)
• cli: validate github token responses without leaking credentials (3e67f6f), closes #467 (@blafourcade)
• cli: validate GitHub token responses without leaking credentials (#1004) (3e67f6f) (@blafourcade)
• test: keep node available in isolated E2E PATH (21afc26) (@alexsoyes)
• test: preserve Node in E2E sandbox (#963) (21afc26) (@alexsoyes)

Miscellaneous

• deps-dev: bump the npm-dev-dependencies group (44084ff) (@dependabot[bot])
• deps-dev: bump the npm-dev-dependencies group across 1 directory with 11 updates (9ac49ac) (@dependabot[bot])
• deps-dev: bump the npm-dev-dependencies group in /cli with 3 updates (#1020) (44084ff) (@dependabot[bot])
• deps-dev: upgrade CLI tooling with compatible vitest and stryker (#912) (9ac49ac) (@dependabot[bot])
• deps: bump @inquirer/prompts from 8.7.2 to 8.7.3 in /cli (#1021) (015c35a) (@dependabot[bot])
• deps: bump simple-git from 3.36.0 to 4.0.2 in /cli (477aeed) (@dependabot[bot])
• deps: bump smol-toml from 1.8.0 to 1.9.0 in /cli (#934) (4919f04) (@dependabot[bot])
• deps: bump smol-toml from 1.9.0 to 1.9.1 in /cli (#1022) (aaca070) (@dependabot[bot])

Performance

• telemetry: a report reads its period, not the whole history (#1032) (ae8705f) (@blafourcade)
• telemetry: the ledger is kept by day, so an ingest costs what it adds (#1031) (fcb6022) (@blafourcade)

Documentation

• delete the cost-report and metrics contracts and aidd_docs/runs/, rewrite (0a103e6) (@blafourcade)