v0.2.0

Changelog

• db0d93f style: gofmt the batch-4 additions
• 38f3cba fix(security): contain LSP file path (traversal) (AK#81)
• 6160466 feat(tools): read_parquet columnar-file reader (AD#17)
• 037c2be feat(ui): fleet status view (AJ#75)
• 766d246 feat(tools): sandboxed WASM tool runner (AL#94)
• 8a78cc4 feat(lsp): Language Server client + find_definition (AK#81)
• 4d104cb fix(security): harden db_query read-only + DSN allowlist (AD#11)
• 155979e feat(agent): resumable step execution (AE#29)
• 3ca19cd feat(agent): reflexion loop (AE#27)
• 902a1a4 feat(project): extractive context compression (AF#39)
• 784f661 feat(abtest): multi-model scoreboard + leaderboard (AF#32)
• 0fa7f2d feat(tools): read-only multi-engine SQL (Postgres/MySQL) (AD#11)
• 1bc339b feat(tools): container-exec + netns shell isolation (AI#61, AI#62)
• e9985d1 feat(oauth): device authorization grant flow (AH#54)
• 177f0b0 fix(security): VS Code extension ignores workspace binary override (AK#83)
• c4c34e4 feat(cli): event-driven --watch trigger (AH#57)
• 766bc1c feat(agent): task-graph planner/executor (AE#22)
• 66f55b0 feat(setup): wizard prompts for integration credentials (AK#89)
• 6f58350 feat(cli): --every recurring scheduler (AH#56)
• 78ab058 feat(editors): thin VS Code + Neovim clients (AK#83)
• 4061394 feat(update): checksum-verified self-upgrade (AL#97)
• 558e109 build: reproducible builds (-trimpath) + SBOM (AL#98)
• 4f5016c build: deb/rpm/apk + scoop + winget packaging (AL#96)
• ebb4479 feat(bundle): shareable config bundles (AL#95)
• 803a3b4 feat(tools): hybrid_search (BM25 + vector fusion) (AC#8)
• d856e54 feat(session): shared remote store push/pull (AG#45)
• ac891ce feat(tools): plugin marketplace install (AL#92)
• d1274c9 feat(benchmark): standardized task set + timed harness (AL#100)
• 6708539 feat(telemetry): opt-in, local-only usage counters (AL#99)
• cb2f16e feat(tools): out-of-process plugin SDK (AL#91)
• 844c14e feat(mcp): expose tools as an MCP server (AL#93)
• 1e57e67 feat(ui): fuzzy command palette (AK#85)
• 6b2ebbe feat(trace): dependency-free span tracing (AJ#71)
• 644f359 feat(ui): markdown/code syntax highlighting (AK#86)
• c9e5e77 feat(ui): colorized unified-diff renderer (AK#82)
• 3600732 feat(agent): debate/consensus mode (AE#21)
• ebc3024 feat(tools): episodic memory (AE#25)
• 595631f feat(agent): heuristic tool-use critic (AE#23)
• 3f3ce68 feat(agent): subtask budget allocation helper (AE#28)
• 240fb88 feat(cli): cost-aware model routing (AE#26)
• f7d5b51 feat(ab): prompt regression gate via --min-score (AF#34)
• 92581e2 feat(safety): audit log shipping to a collector (AI#66)
• 636828f feat(abtest): pluggable LLM-judge scorer (AF#33)
• 41076b4 feat(safety): secrets-file resolution for tokens (AI#63)
• 19995b6 fix(security): RBAC fails closed on unknown role (AI#64 follow-up)
• ecbe653 feat(tools): read-only Jira tool (AH#53)
• 51e81a3 feat(tools): docs_lookup with per-version caching (AC#4)
• da502af feat(prompt): answer-with-citations when web search is enabled (AC#6)
• 4347ee5 feat(safety): approval timeout auto-deny (AI#70)
• d47d84d feat(safety): role-based access control for tools (AI#64)
• 7bce884 feat(tools): Slack/Discord notifier (AH#52)
• 17862d4 feat(tools): read-only GitHub API tool (AH#51)
• 48e1ffe fix(security): serve sibling-path parity + SSE injection + migration sandbox
• 9c133ec feat(tools): migration_dryrun schema-diff preview (AD#14)
• 8e4dd78 feat(serve): SSE streaming endpoint /run/stream (AH#58)
• 943364c feat(tools): global profile memory across repos (AG#49)
• b327a4b feat(serve): Prometheus /metrics endpoint (AJ#72)
• 8622829 feat(tools): embedding re-ranking of web_search results (AC#5)
• 3e80dfc feat(prompt): named prompt registry with versioning (AF#31)
• 3b04766 feat(test): golden snapshot helper + default-prompt golden (AF#40)
• a3463c2 feat(session): turn-by-turn replay viewer (AG#46)
• 36e89d4 feat(agent): auto-checkpoint before gated mutations (AG#44)
• 3fde18d feat(usage): cumulative budget alerts (AJ#74)
• 3f3f9c7 feat(usage): cost dashboard via usage report (AJ#73)
• 387e093 feat(embed): incremental index updates via git (AC#7)
• 71d3b5e feat(embed): retrieval_eval hit@k scoring (AC#10)
• 129cfae feat(tools): knowledge packs via import_pack (AC#9)
• ee91708 feat(tools): long-term vector memory (AG#41)
• cad189d feat(agent): RAG context injection from the semantic index (AC#3)
• cf091c1 feat(tools): embed_index + semantic_search over a local vector store (AC#1)
• 5227028 feat(embed): OpenAI-compatible embeddings provider + vector similarity (AC#2)
• b3cd9a7 feat(fewshot): task-relevant few-shot example bank (AF#36)
• b066959 feat(safety): prompt-injection defense for fetched content (AI#68)
• c8056bc feat(tools): detect_anomalies outlier detection (AJ#80)
• fefbce4 feat(report): --report writes self-contained HTML run report (AJ#79)
• 5b2f8c6 feat(llm): slow-request tracing middleware (AJ#77)
• a17cbbd feat(agent): self-consistency sampling (AE#24)
• 83c2192 feat(session): per-tag GC retention (AG#50)
• 4fade2a fix(tools): make apply_patch truly atomic with rollback (AK#84)
• 30dc81f feat(session): merge branched sessions (AG#42)
• 7ad7892 feat(session): redacted export (AG#47)
• ccc69a7 feat(tools): openapi_ops spec operation lister (AH#60)
• bdc787f feat(llm): JSON HTTP request logging (AJ#76)
• 208e754 feat(doctor): doctor fix auto-remediation (AK#87)
• d6eba88 feat(llm): record/replay transport for hermetic tests (AE#30)
• 6e06070 feat(cli): --dry-run previews mutating tool calls (AK#90)
• 84ff078 feat(tools): seed_data INSERT generator from schema (AD#19)
• aa6ae87 feat(persona): custom persona scaffolder + resolution (AF#35)
• 8164399 feat(safety): policy-as-code test harness (AI#67)
• f318a0a feat(safety): HMAC-signed audit log (AI#65)
• 0fb883e feat(serve): per-caller rate limiting (AH#59)
• fd8f91e feat(serve): HMAC payload verification (AH#55)
• 4138922 feat(cli): shell completion generator (AK#88)
• 96277ba feat(serve): /healthz and /readyz probes (AJ#78)
• 2e81527 feat(tools): data-egress classifier for http_request (AI#69)
• fd19c4f feat(session): full-text search across saved sessions (AG#43)
• 7d8f975 feat(session): tags + filtered listing (AG#48)
• fe5dc60 feat(schema): built-in schema library for --schema @name (AF#38)
• 6c3d374 feat(prompt): per-section token accounting + prompt-tokens cmd (AF#37)
• 8577b08 feat(tools): opt-in sql_query result cache (AD#20)
• b906406 feat(tools): log_metrics time-bucketed log counts (AD#18)
• 0dc0999 feat(tools): data_transform for CSV/JSONL filter/group/aggregate (AD#15)
• 993949a feat(tools): chart tool for sparkline/bar output (AD#16)
• 2188307 feat(tools): db_explain query-plan helper for SQLite (AD#13)
• f145979 feat(tools): db_schema explorer for SQLite (AD#12)
• 332ba41 docs: add todo-4.md — 100 batch-4 feature ideas
• f0ef083 feat(tools): read-only sql_query tool for SQLite (Z#71)
• 7d4fc02 feat(tools): web_search via the Brave Search API (Y#62)
• a26597b ci: add CI workflow + contributor hygiene (AB#99, AB#91)
• 3d15891 feat(tools): offline disk cache for fetch_url (Y#70)
• 461a3c3 feat(cli): first-run welcome tour after setup (W#46)
• 84b4738 feat(cli): A/B prompt experiments (V#38)
• 2374d32 feat(stream): stdin control messages for print mode (S#4)
• bf44bb1 feat(cli): fleet/overseer mode — concurrent supervised tasks (X#52)
• 06105f6 feat(cli,tui): interactive resume picker for chat (T#17)
• c92aa52 feat(prompt): structured prompt system (V#31)
• c98eb95 fix(serve): harden webhook against the 3 review findings (Y#67)
• 4d5f8b7 feat(tools): add gated set_csv_cell editor (Z#76)
• bbec93e feat(tools): durable scratchpad tool for cross-turn task state (T#19)
• 2974a87 feat(cli): webhook trigger via serve mode (Y#67)
• a5d1adf feat(cli): add status prompt-line for shell integration (W#50)
• 1764421 feat(tools): add gated create_migration scaffolder (Z#74)
• 95f738c feat(cli): session diff to review an agent's work (T#18)
• 0aac6b4 feat(safety): tamper-evident audit log of tool calls (AA#81)
• 4ff74da feat(safety): opt-in judge-model approval for gated tools (AA#89)
• 9709409 feat(tools): session-wide network budget for fetch_url/http_request (Y#69)
• 8da1b47 feat(agent,cli): schema-constrained structured output (Z#75)
• cbeffb5 feat(tools): add gated http_request API-caller tool (Y#64)
• 78b5ef5 feat(project): discover and inject .gophermind/skills/*.md (V#39)
• 304d50b feat(session): optional at-rest encryption for the session store (T#20)
• f8342cf feat(cli): session branching (T#12)
• e7a80dc feat(cli): task queue / job runner (X#56)
• 22864f4 feat(agent): verifier pass with a correction round (X#58)
• 4ffa6d7 feat(project): prompt fragments via {{include: path}} (V#35)
• 414319e feat(project): prompt linting for long/conflicting instructions (V#37)
• 8b3eddd feat(cli): named session aliases (T#14)
• 73d0244 feat(project): cap injected context to a share of the window (V#40)
• 5da7e52 feat(tools): apply ulimit resource limits to run_shell (AA#85)
• 282c7e3 feat(banner): add rotating tip-of-the-day under the splash (W#45)
• edbd7b3 feat(coven): add read-only gophermind-plan adapter; note egress allowlist (S#7, Y#68)
• d0b322c feat(safety): wire per-tool approval policies from .gophermind/policy (AA#84)
• cd45d28 feat(project): opt-in dynamic repo-context injection (V#36)
• 6122a42 docs(todo-3): reconcile checkboxes for verified-existing features
• 0310462 feat(tools): add read-only analyze_log tool (Z#77)
• fd3ff37 feat(safety,agent): opt-in secret/PII redaction of transcripts (AA#88)
• d90e99e feat(tools): add read-only inspect_data tool for CSV/JSON/JSONL (Z#72)
• be67afe feat(cli): session GC and export/import (T#13, T#15)
• a62125f feat(project): load .gophermind/prompt.md as a per-repo prompt override (V#34)
• 0609cc7 feat(cli): add --fortune off toggle (W#44)
• 3c59d0e feat(cli): add --persona presets (reviewer|architect|tester) (V#32)
• 504d9f1 feat(tools): add read-only structured git_info tool (Z#79)
• c1c1d53 feat(tools): add definition-aware find_symbol tool (Z#80)
• 0b18ebb feat(cli): opt-in update-available notice on startup (W#48)
• 41870b1 feat(cli): --output-format json for run/ask (S#5)
• e4768f2 docs(todo-3): mark T#16 auto session titles done (covered by sessions list summarize)
• e1ed616 feat(stream): richer result subtypes with error codes (S#3)
• aecbe8a docs(todo-3): mark already-shipped items 8 (cost-in-result) and 10 (protocol-version) done
• 1b3b8b0 feat(llm,cli): implement --think and --speed toggles (S#2)
• 94ad28f feat(cli): add gophermind sessions list/show/rm subcommand (T#11)
• c34d3d0 fix(tools): harden fetch_url against SSRF (redirects + private IPs)
• fe51c2e feat(cli): add gophermind doctor diagnostics subcommand (W#47)
• 0f01aae feat(cli): add --no-banner/--quiet to suppress the startup splash (W#42)
• 7cff959 feat(tools): add gated, egress-controlled fetch_url tool (Y#61)
• 685326b feat(safety): warn on secrets written via write_file/edit_file (E#60)
• 74f824f feat(agent): enforce cost/time guardrails in Send + wire --max-cost/--max-tokens/--max-duration (B#25)
• 0d2596b feat(cli): wire --read-only everywhere and run/ask --plan/--parallel/--tool-budget
• 510342d test(batch-3): cover agent orchestration + llm tool_choice logic
• 7314e34 feat(tools): wire in & test ranged-read, multi-edit, glob, stat, move/delete/mkdir, apply_patch, enhanced search/shell
• 9a2f664 feat(batch-3): land agent-orchestration, tools, and safety features (green)
• fcac1f7 docs(coven): update PR draft to reflect conjure checks passing