v0.4.0

Changelog

• 6380400 docs: cut CHANGELOG 0.4.0 (intro + config wizard)
• 0257fff feat(intro): short animated gopher intro before the TUI
• b9c08c0 feat(tui): finish the interactive /config wizard
• ca38bc9 docs: new full-body gopher header art in README

v0.3.0

Changelog

• 09b0e0f Merge pull request #1 from jbrahy/feat/phaseflow-integration
• e35c521 docs: cut CHANGELOG 0.3.0 for the PhaseFlow release
• 0fe3457 fix(phaseflow): flip the leftmost checkbox, not a marker in the description
• aa2eccb fix(phaseflow): patch review findings (path traversal, error handling, privacy)
• b8c3a2c docs: add PROJECT.md conventions; gitignore local session state
• 8c6c8e2 docs: document phase done/sync/archive and full command surface
• 5babd29 docs(phaseflow): sharpen code comments to explain intent, not restate code
• ebdd370 feat(phaseflow): port deterministic state & milestone bookkeeping to Go
• 66dff35 feat(phaseflow): make the full embedded command surface runnable
• b27fdca docs: document PhaseFlow integration (README, CHANGELOG, CREDITS)
• 9c20516 feat(phaseflow): wire /phase TUI slash command
• dba61a1 feat(phaseflow): wire gophermind phase CLI subcommand
• be40993 feat(phaseflow): command engine (init, status, next, step prompts)
• 67ebb94 feat(phaseflow): embed vendored PhaseFlow command/agent/template assets
• 052f145 feat(phaseflow): native state model, roadmap parser, and config
• 3663538 docs: sync README/CHANGELOG/CONTRIBUTING/RELEASING with v0.2.0

v0.2.0

Changelog

• db0d93f style: gofmt the batch-4 additions
• 38f3cba fix(security): contain LSP file path (traversal) (AK#81)
• 6160466 feat(tools): read_parquet columnar-file reader (AD#17)
• 037c2be feat(ui): fleet status view (AJ#75)
• 766d246 feat(tools): sandboxed WASM tool runner (AL#94)
• 8a78cc4 feat(lsp): Language Server client + find_definition (AK#81)
• 4d104cb fix(security): harden db_query read-only + DSN allowlist (AD#11)
• 155979e feat(agent): resumable step execution (AE#29)
• 3ca19cd feat(agent): reflexion loop (AE#27)
• 902a1a4 feat(project): extractive context compression (AF#39)
• 784f661 feat(abtest): multi-model scoreboard + leaderboard (AF#32)
• 0fa7f2d feat(tools): read-only multi-engine SQL (Postgres/MySQL) (AD#11)
• 1bc339b feat(tools): container-exec + netns shell isolation (AI#61, AI#62)
• e9985d1 feat(oauth): device authorization grant flow (AH#54)
• 177f0b0 fix(security): VS Code extension ignores workspace binary override (AK#83)
• c4c34e4 feat(cli): event-driven --watch trigger (AH#57)
• 766bc1c feat(agent): task-graph planner/executor (AE#22)
• 66f55b0 feat(setup): wizard prompts for integration credentials (AK#89)
• 6f58350 feat(cli): --every recurring scheduler (AH#56)
• 78ab058 feat(editors): thin VS Code + Neovim clients (AK#83)
• 4061394 feat(update): checksum-verified self-upgrade (AL#97)
• 558e109 build: reproducible builds (-trimpath) + SBOM (AL#98)
• 4f5016c build: deb/rpm/apk + scoop + winget packaging (AL#96)
• ebb4479 feat(bundle): shareable config bundles (AL#95)
• 803a3b4 feat(tools): hybrid_search (BM25 + vector fusion) (AC#8)
• d856e54 feat(session): shared remote store push/pull (AG#45)
• ac891ce feat(tools): plugin marketplace install (AL#92)
• d1274c9 feat(benchmark): standardized task set + timed harness (AL#100)
• 6708539 feat(telemetry): opt-in, local-only usage counters (AL#99)
• cb2f16e feat(tools): out-of-process plugin SDK (AL#91)
• 844c14e feat(mcp): expose tools as an MCP server (AL#93)
• 1e57e67 feat(ui): fuzzy command palette (AK#85)
• 6b2ebbe feat(trace): dependency-free span tracing (AJ#71)
• 644f359 feat(ui): markdown/code syntax highlighting (AK#86)
• c9e5e77 feat(ui): colorized unified-diff renderer (AK#82)
• 3600732 feat(agent): debate/consensus mode (AE#21)
• ebc3024 feat(tools): episodic memory (AE#25)
• 595631f feat(agent): heuristic tool-use critic (AE#23)
• 3f3ce68 feat(agent): subtask budget allocation helper (AE#28)
• 240fb88 feat(cli): cost-aware model routing (AE#26)
• f7d5b51 feat(ab): prompt regression gate via --min-score (AF#34)
• 92581e2 feat(safety): audit log shipping to a collector (AI#66)
• 636828f feat(abtest): pluggable LLM-judge scorer (AF#33)
• 41076b4 feat(safety): secrets-file resolution for tokens (AI#63)
• 19995b6 fix(security): RBAC fails closed on unknown role (AI#64 follow-up)
• ecbe653 feat(tools): read-only Jira tool (AH#53)
• 51e81a3 feat(tools): docs_lookup with per-version caching (AC#4)
• da502af feat(prompt): answer-with-citations when web search is enabled (AC#6)
• 4347ee5 feat(safety): approval timeout auto-deny (AI#70)
• d47d84d feat(safety): role-based access control for tools (AI#64)
• 7bce884 feat(tools): Slack/Discord notifier (AH#52)
• 17862d4 feat(tools): read-only GitHub API tool (AH#51)
• 48e1ffe fix(security): serve sibling-path parity + SSE injection + migration sandbox
• 9c133ec feat(tools): migration_dryrun schema-diff preview (AD#14)
• 8e4dd78 feat(serve): SSE streaming endpoint /run/stream (AH#58)
• 943364c feat(tools): global profile memory across repos (AG#49)
• b327a4b feat(serve): Prometheus /metrics endpoint (AJ#72)
• 8622829 feat(tools): embedding re-ranking of web_search results (AC#5)
• 3e80dfc feat(prompt): named prompt registry with versioning (AF#31)
• 3b04766 feat(test): golden snapshot helper + default-prompt golden (AF#40)
• a3463c2 feat(session): turn-by-turn replay viewer (AG#46)
• 36e89d4 feat(agent): auto-checkpoint before gated mutations (AG#44)
• 3fde18d feat(usage): cumulative budget alerts (AJ#74)
• 3f3f9c7 feat(usage): cost dashboard via usage report (AJ#73)
• 387e093 feat(embed): incremental index updates via git (AC#7)
• 71d3b5e feat(embed): retrieval_eval hit@k scoring (AC#10)
• 129cfae feat(tools): knowledge packs via import_pack (AC#9)
• ee91708 feat(tools): long-term vector memory (AG#41)
• cad189d feat(agent): RAG context injection from the semantic index (AC#3)
• cf091c1 feat(tools): embed_index + semantic_search over a local vector store (AC#1)
• 5227028 feat(embed): OpenAI-compatible embeddings provider + vector similarity (AC#2)
• b3cd9a7 feat(fewshot): task-relevant few-shot example bank (AF#36)
• b066959 feat(safety): prompt-injection defense for fetched content (AI#68)
• c8056bc feat(tools): detect_anomalies outlier detection (AJ#80)
• fefbce4 feat(report): --report writes self-contained HTML run report (AJ#79)
• 5b2f8c6 feat(llm): slow-request tracing middleware (AJ#77)
• a17cbbd feat(agent): self-consistency sampling (AE#24)
• 83c2192 feat(session): per-tag GC retention (AG#50)
• 4fade2a fix(tools): make apply_patch truly atomic with rollback (AK#84)
• 30dc81f feat(session): merge branched sessions (AG#42)
• 7ad7892 feat(session): redacted export (AG#47)
• ccc69a7 feat(tools): openapi_ops spec operation lister (AH#60)
• bdc787f feat(llm): JSON HTTP request logging (AJ#76)
• 208e754 feat(doctor): doctor fix auto-remediation (AK#87)
• d6eba88 feat(llm): record/replay transport for hermetic tests (AE#30)
• 6e06070 feat(cli): --dry-run previews mutating tool calls (AK#90)
• 84ff078 feat(tools): seed_data INSERT generator from schema (AD#19)
• aa6ae87 feat(persona): custom persona scaffolder + resolution (AF#35)
• 8164399 feat(safety): policy-as-code test harness (AI#67)
• f318a0a feat(safety): HMAC-signed audit log (AI#65)
• 0fb883e feat(serve): per-caller rate limiting (AH#59)
• fd8f91e feat(serve): HMAC payload verification (AH#55)
• 4138922 feat(cli): shell completion generator (AK#88)
• 96277ba feat(serve): /healthz and /readyz probes (AJ#78)
• 2e81527 feat(tools): data-egress classifier for http_request (AI#69)
• fd19c4f feat(session): full-text search across saved sessions (AG#43)
• 7d8f975 feat(session): tags + filtered listing (AG#48)
• fe5dc60 feat(schema): built-in schema library for --schema @name (AF#38)
• 6c3d374 feat(prompt): per-section token accounting + prompt-tokens cmd (AF#37)
• 8577b08 feat(tools): opt-in sql_query result cache (AD#20)
• b906406 feat(tools): log_metrics time-bucketed log counts (AD#18)
• 0dc0999 feat(tools): data_transform for CSV/JSONL filter/group/aggregate (AD#15)
• 993949a feat(to...

v0.1.0

Changelog

• c8a7aae fix(release): drop signs block; notarize published macOS archive in Makefile
• c3b6d3c fix(release): notarize signs step produces no .sig (output: false)
• e1f503d feat(dist): npm package + Linux/Windows release builds
• ddc0ffa feat: --version flag (conformance) + OpenCoven PR draft
• d202178 feat(print): system-prompt append, permission-mode, and OpenCoven manifest (SP3+SP4)
• 48ac9fa feat(print): session persistence with --session-id and --resume (OpenCoven SP2)
• 87d765f feat(print): Claude-Code-compatible stream-json protocol (OpenCoven SP1)
• 98ac6c4 docs: add a real README and CONTRIBUTING guide
• 2261894 feat(startup): show a fortune, version, and recent changes under the gopher
• 76e38a3 fix(release): auto-source GITHUB_TOKEN from gh and require signing vars
• d0d643c chore(gitignore): never commit credentials.md or signing keys
• 57bb852 fix(release): make signing skip cleanly on credential-free snapshots
• 12c3f39 chore: remove scratch cmd/hello hello-world
• b81c27a docs: add backlogs, prompt-system plan, and session notes
• bd5ccc1 feat(config): first-run setup wizard, global config, and no baked-in endpoint
• bb1d8dc feat(release): signed+notarized Homebrew release pipeline and version command
• a00207f feat(tui): stop OSC-11 background-query leak and add gopher banner
• 4749760 chore: ignore the compiled gophermind binary
• 73d9f8d docs(security): queue streaming-cancellation entry for deploy
• a9f66aa feat(stream): polish mid-stream cancellation across llm, agent, and TUI
• fce2394 feat(llm): request/response middleware hooks for the HTTP client
• e475577 feat(llm): optional mutual-TLS and custom-CA for secure internal endpoints
• 3d76201 feat(agent): add JSONL transcript export of full message history
• bfec093 feat(sampling): per-request temperature/top-p override via config and /temp TUI command
• 75b8eba feat(llm): fallback model chain for graceful degradation
• 47cd95c feat(llm): probe model capabilities (context window, tool support, max output)
• fc83a95 feat(llm): response caching by prompt hash with TTL
• d3e3471 feat(llm): automatic retry with bounded exponential backoff
• 330470c feat(config): named provider profiles selectable by --profile
• 418a4da feat(llm): streaming token usage & cost meter
• 14bc566 docs(security): coordination note — cwd done, remaining items owned by live fleet
• dc39f38 docs(security): audit log, report, and staged deploy queue
• 0a49387 fix(safety): close sandbox escapes — symlink containment, search arg injection, deny-list bypass
• 61f8d63 feat(tui): full-screen alt-screen layout with scrollable viewport
• 9281594 chore: add bin/build.sh to build and launch gophermind
• dd4858f fix(cli): guard args[1:] so bare invocation doesn't panic
• 8b25eaa feat(tui): commit finished output to scrollback; teatest e2e
• 4ce4129 feat(tui): launch TUI for interactive mode; TTY guard; drop line REPL
• dafa2a7 feat(tui): Bubble Tea interactive session (model, update, view, run)
• b9f0749 feat(agent): stream prose as token events; add Reset
• 4f549f8 feat(llm): streaming completions with tool-call reassembly
• dbc34b0 docs: TUI implementation plan
• 8c8a1d1 docs: TUI design spec (Claude Code-style interface)
• 4ebfa1d feat: gophermind agentic coding harness baseline
• e4adcc5 chore(small-feature): auto-commit after workflow-template
• da30e25 docs: create roadmap (9 phases)
• 3715313 docs: define v1 requirements
• 7a0fbff docs: complete project research
• e6fceaa chore: add project config
• ce89b0d docs: initialize project
• ccaf136 first commit