v3.0.1

v3.0.1 - 2026-08-08

Fixed

• Made ordinary title updates work under Codex's default workspace permissions by moving the current-title read to the mounted app and removing ordinary App Server and filesystem access.
• Stopped resolving Codex from repository-controlled PATH; onboarding now uses a fixed Desktop executable and install, self-test, and status require Codex Desktop 0.146.0 or newer.
• Continued through the fixed Desktop locations when an older user-local Codex bundle appears before a compatible system installation.

Changed

• Removed the per-task subject database. ThreadBear now uses six explicit visible icon prefixes as its small ownership boundary and keeps every other safe title byte intact.
• Made historical onboarding explain and request its one catalog-read permission while keeping the preview, separate consent, immediate native reread, one-write limit, and durable friendly recap; approval-disabled tasks now stop with a plain no-change next step.

v3.0.0

v3.0.0 - 2026-08-08

Changed

• Reset ThreadBear to one terminal local title command that preserves exact subjects, changes only the status icon, keeps actions in response prose, and leaves unsafe titles unchanged.
• Made one short-lived official Codex App Server the read/planning authority and the mounted app-native setter the sole title writer: one prepared current-task title, one-time decoding of native JSON-text results, at most one native call, and exact returned ID/title validation, with no SQLite access, detached write, fallback, or retry.
• Replaced controller migration with explicit, uncapped onboarding that prepares a fresh complete snapshot, immediately checks each app-native task ID and title before its one possible write, reports honest updated, skipped, unchanged, and unconfirmed counts, and discloses that cached historical rows may redraw on project reopen or restart.
• Removed title interception and configuration dependencies; installation now manages only the binary, subject records, guidance, skill, and daily update-only LaunchAgent.
• Separated title-core readiness from updater health, made successful updates report restart requirements, made uninstall wait for any in-flight updater before teardown, and made queued updater processes reject a replaced installed binary; pre-install failures preserve the old install while later local write failures report a rerunnable partial with the binary last.
• Made 2.2.1 upgrades an explicit reset that previews the exact automation and former persistent task, verifies deletion and unpinning before filesystem mutation, imports no state, and performs no heuristic title cleanup.
• Made install, onboarding, manual update, and uninstall guidance friendly and plain: each action now previews what changes and what stays untouched, clearly discloses verified automatic updates, distinguishes safe skips from uncertain writes, and leaves a durable final-response recap with the result and next step.

Removed

• Removed the running-title call, Post hook, persistent ThreadBear task, migration/controller/classifier machinery, archive maintenance, pending title transactions, repair flows, and global title-failure states.

v2.2.1

v2.2.1 - 2026-08-07

Fixed

• Completed guided title migration in bounded concurrent waves without client-created native-call timeouts, while keeping exact inventory reconciliation and read-only Luna classifiers isolated to temporary installation tasks.
• Prevented delayed/older title callbacks and no-op proposals from racing replacement or uninstall teardown with a locked state-format fence, and registered the controller's actual native runtime ID from its marked home delegation instead of trusting Codex's provisional creation handle.
• Required that marked controller registration also come from Codex's native subagent source, preventing an ordinary user task from forging the delegation text and claiming migration authority.
• Made uninstall resumable from any active native task after a completed migration, a stopped failed migration, or a quiescent pre-controller install, with a canonical undecorated ThreadBear home, durable initiator ownership, exact archive restoration, preservation of user-created files beside the managed skill, and binary-last local teardown.
• Kept ambiguity checks on Luna medium, accepted nonempty one-word actions, ignored surplus action fields only for statuses that do not consume them, and retained fail-closed settlement for every unknown native title result, including canonical-home no-ops.

v2.2.0

v2.2.0 - 2026-08-03

Added

• Restored conservative 14-day automatic archiving through one consented hourly Luna heartbeat, deterministic candidate selection, native archive controls, interruption-safe ownership, and ownership-only restore.
• Restored verified automatic updates through the same heartbeat, with bounded official release selection, checksum and candidate validation, same-version repair, and one version-change announcement.

v2.1.7

v2.1.7 - 2026-08-03

Fixed

• Scoped installation completion to native-addressable local Codex tasks and disclosed that older signed-in ChatGPT chat-history rows are outside the current native title API, preventing a zero-local-inventory result from being presented as complete sidebar migration.

v2.1.6

v2.1.6 - 2026-08-03

Fixed

• Removed visual and computer-control checks from ordinary guided installation, dispatched migration before UI or catalog archaeology, began deterministic title writes before Luna worker discovery, and documented the hook's exact unknown-state marker.

v2.1.5

v2.1.5 - 2026-08-03

Changed

• Kept guided installation focused on the persistent ThreadBear task, moved Desktop canaries behind an explicit debug flag, and clarified installation and uninstall language.

Fixed

• Kept pre-controller installs truthful with migration_pending, reconciled stopped controllers to migration_failed, and made guided migration retain and await adaptive Luna worker waves through an explicit terminal result while keeping title writes serial.

v2.1.4

v2.1.4 - 2026-08-03

Fixed

• Bounded each ordinary native title moment to one four-second attempt and reduced the installed PreToolUse and PostToolUse limits to one second.

v2.1.3

v2.1.3 - 2026-08-02

Fixed

• Prevented uninstall/reinstall migration from compounding leading status icons, added on-demand control-task icon cleanup, and preserved durable subjects by truncating only appended next-step actions.

v2.1.2

v2.1.2 - 2026-08-02

Fixed

• Made the published release smoke honor the distinct first-install home and migration-controller contracts before verifying migration and native hook finalization.