v4.0.0

4.0.0 (2026-08-15)

⚠ BREAKING CHANGES

• prompts: chain steps are validated strictly. A key with no schema field now fails the prompt's load, naming the key and its step index, instead of being silently discarded.
• mcp-tools: resource_manager(resource_type: "prompt", action: "delete") now requires confirm: true, and the checkpoint resource type and clear action are removed from the tool surface.

Added

• agent-plugins migration, codex fleet integration, and brand system for 4.0.0 (3d402fe)
• chains: add per-run unknowns ledger via prompt_engine observations param (0bdbfbe)
• chains: add record-only per-run telemetry to execution_records (2e84bb3)
• chains: per-step visibility policy + step-scoped gate review (P5) (c07a80c)
• chains: planner-submitted workflow IR compiled to ordinary chain runs (56d8e26)
• chains: stable node identity, per-row run storage, and adaptive mutation v1 (951db98)
• ci: publish server.json to the official MCP registry on every release (5b9ca4b)
• ci: ship the new mark as the desktop extension icon (b165014)
• ci: ship the new mark as the desktop extension icon (d2ff78a)
• ci: sync codex-prompts with the fleet on every release (dcfc124)
• docs: pilot GitHub-native planning lifecycle (237b0ca)
• docs: promote the approved mascot into a canonical brand system (de19f56)
• execution: publish the resolved shell-verify budget and correct force_restart (d76f741)
• gates: add documentation governance gate suite (0beda2d)
• hooks: add hook-harness traced verification and registration dead-wiring detection (b216289)
• main: integrate unreleased 3.3.0 work (c5a7813)
• main: integrate unreleased 3.3.0 work (#211) (c5a7813)
• mcp-tools: enforce confirm on prompt delete; remove the checkpoint resource type (2c3b872)
• mcp-tools: patch-mode prompt update, argument contract repair, ship-signal (P7 T1/T3/T4) (1210977)
• planning: federate plan retirement (621991a)
• planning: federate plan retirement (9bd68db)
• planning: federate plan retirement (#209) (621991a)
• prompts: per-step framework declaration; reject unknown chain-step keys (0e8b787)
• resources: add documentation governance prompt workflow (5f2a1ae)
• resources: ship the planning/ prompt category (P7 OQ-P7-7, T5) (15462ed)
• scripts: commit row 1.5's version registration and its manifest parity (ce8b3d8)
• scripts: declare what each gate reads, and test the rewriter against the corpus (e582adc)
• scripts: fail when a validate/verify script is wired to nothing (a295645)
• scripts: gate framework coverage and the README's shipped-prompt count (f90b024)
• scripts: render the published manifests from the canonical tree (c93034c)
• scripts: require a gate declaring closedBy to audit its exceptions (ee1478e)
• scripts: ship no skills by default; gitignore the export output (16b1a09)
• server: commit row 1.4's agent-plugins skills-sync registration (5f20ff9)
• server: commit Tier 1's deliverables, which were never committed (31e0638)

Fixed

• ci: assert the codex-prompts marketplace entry, which nothing checked (769b023)
• ci: consume repository-standards v1.3.0 so retirement stops restyling docs (4c6cde7)
• ci: consume repository-standards v1.3.0 so retirement stops restyling docs (23af8b4)
• ci: make registry publish idempotent and fix the verify jq path (b845930)
• ci: rebuild the marketplace source guard where it runs (852830b)
• ci: ship package.json in the claude-code-plugin staging too (edb037c)
• contracts: anchor the gate operator's examples and gate registry self-consistency (18d2f7a)
• deps: consume repository-standards v1.2.1 so retirement ignores sidecars (93ebbe9)
• deps: patch OTel advisories via 0.221.0 bump; retire stale protobufjs override (b3f76b8)
• docs: repoint dead cross-references in the retired plan set (18fa3fe)
• execution: resolve handoff visibility by node id, not array position (P6 T2, P4-F2/P6-F1) (db966f8)
• gates: close the last two fallback-to-run-wide review paths (P5 4.4/4.5) (b6cceb5)
• gates: unref temporary gate expiry timers (528647f)
• hooks: delegation enforcement deadlock (mention-vs-use arming, gate sentinel, Agent tool clear) (3073dfd)
• parsers: commit D3's remaining ^ sites, which never landed (572789d)
• parsers: commit the providers 8875ab4 left behind (f54ab79)
• parsers: commit the reserved-operator rejection its tests already assert (08dd126)
• parsers: repair operator registry SSOT, unbreaking ^ in chains (f2336ac)
• pipeline: make YAML delegation reachable on the direct chain path (P6 T1, P5-F5) (a5097a5)
• release: accept Release Please manifest formatting (a1c6333)
• release: accept Release Please manifest formatting (0a8cb30)
• release: synchronize Agent Plugins manifest (9c4c088)
• release: synchronize Agent Plugins manifest (4daf326)
• resources: avoid methodology-vocab false positive in readme_improver (3bf8c9a)
• resources: retire methodology vocabulary from planning prompts (d624481)
• runtime: apply preset timeouts, clear the loader cache on reload, reject reserved + in chains (8875ab4)
• runtime: claim the SqliteEngine singleton at the composition root (741afe5)
• scripts: allowlist tracked-scope.js in the vocabulary guard (d1b03ea)
• scripts: commit the two validate scripts a295645 wired to nothing (727f802)
• scripts: re-resolve the downstream lock with npm update, not npm install (a6bfef8)
• scripts: resolve build outputs in the agent-plugins consumes check (b85f3fd)
• scripts: scan the tracked set so the vocab guard can see dot-paths (5af52f5)
• scripts: stop the plan-row self-test depending on where a real plan lives (2e143f8)
• scripts: stop the tests-typecheck ratchet reading a parse failure as a clean backlog (8428e3e)
• scripts: widen eslint ratchet target to scripts/ and eslint-rules/ (1a96887)
• server: repair injection continuation, nested-prompt ids, doubled banner literal (2286bcb)
• server: version history records what an edit produced, not what it replaced (P7 T2) (08b001f)

Changed

• frameworks: retire the pre-rename methodology back-compat folds (05b6efc)
• scripts: port no-crosslayer-relative to dependency-cruiser and retire the guard (3837b91)
• scripts: scope shipped-content gates by git, not filesystem walk (8468c4a)

Documentation

• docs: adaptive-chain-runtime master plan + P1 unknowns-ledger plan + staged P0 template (1c87f4a)
• docs: add a square 512px icon derived from the logo for directory listings (c874040)
• docs: add Tier 6 + Agent Plugins migration plan (single source tree, rendered distributions) (713f520)
• docs: bring Tier 2b current — registry+Smithery live, Glama claimed, PulseMCP baseline (a6ca08b)
• docs: close 0.5b Workstreams A/B/C, file the checkpoint finding as 0.5.26 (ec73f85)
• docs: close 4.0.1, unblock 4.4, row the unmeasured install path (13e2ba2)
• docs: close 4.10 by deletion, row the unvalidated marketplace PR path (0328f21)
• docs: close 4.4, ship 4.12's capability, record the 4.0.0 verification (2a6e980)
• docs: close 4.5, record shape A as implemented, row the last unobserved link (584f6db)
• docs: close 4.8 from a live marketplace install, row same-name shadowing (30f2207)
• docs: close all release gates — v3.2.1 finalized across every surface (009d952)
• docs: close E9/E10, file E11 — a ✓ did not mean committed (37b012e)
• docs: close the push sequence, row the SIGPIPE flake (6c1d213)
• docs: close the Renovate remediation plan — the canary merged itself (3490711)
• docs: close Tiers 2-3, mark the falsified premises (c5405be)
• docs: close Tiers 5-6, apply the owner rulings (0e9c3ef)
• docs: close Workstream D and E6, correct the D1/D3 site claims (47636b0)
• docs: confirm 4.5 — a git-sourced Codex install has no runtime (84aa445)
• docs: correct the downstream consumption model (a4e51ca)
• docs: defer Tier 5 — Codex integration + rendered-distribution decision (9f2922e)
• docs: documentation governance policy and client-install CTA correction (4bb8955)
• docs: file E8 for the two foreign validate:all reds (7fcdc4e)
• docs: file E9/E10 — the committed state was six gates behind the tree (6a3bab3)
• docs: finalize Tier 4 — close the shipping lane, name every open blocker (d8c806f)
• docs: flush the extension-icon findings to the deviation log (7ff6fab)
• docs: keep each retiring plan with its own deviation log (b91a260)
• docs: link Workflow IR reference from docs index (06d9630)
• docs: mark the brand-asset plan finished (b11624a)
• docs: p1 live drive complete — success signal observed; p0 template applied (0013955)
• docs: patch mode, version semantics, visibility fields, ship-signal (P5/P7) (7897f7e)
• docs: queue adaptive-chain-runtime plans for retirement at release (c88ebb2)
• docs: queue claims-conformance suite design (token-free functional validation) (7dc83ae)
• docs: record accepted-work lifecycle (9232acd)
• docs: record Codex skill repair (a9b4df1)
• docs: record commit-preparation verification trail on P6 companions (1f2e8fb)
• docs: record E7 — the gate that watched the wrong tree (717e792)
• docs: record final commit-preparation verification trail (f6da764)
• docs: record further commit-preparation verification trail (ce07dc4)
• docs: record GitHub Project rollout (0481033)
• docs: record HEAD verification runs in the implementation ledger (ac07fd1)
• docs: record orphan cleanup + nested-delete fix in p1 notes (5e89d28)
• docs: record p1 unknowns-ledger implementation notes + status writeback (c809943)
• docs: record P5 compile-closure verification runs (5ce70a7)
• docs: record p5/p6/p7 plan writebacks and implementation notes (a2af74d)
• docs: record P6 plan writebacks + master-plan closure (860af13)
• docs: record PR linkage fallback (89d6cb2)
• docs: record sub-agent delegation contract plan (ab8ded5)
• docs: record the auto-merge-on-major finding (59f3c3d)
• docs: record the breaking bundle and close its plan rows (82cf4cd)
• docs: record the migration-exposed retirement defect and release validation (fdc7ea0)
• docs: record tiers 0.8-4.3, and what the probes got wrong (4bc3b6b)
• docs: retire codex-prompts-port and downstream-standards-federation plans to reference (f011130)
• docs: retire E8, flush the retirement deviations (e8f84ef)
• docs: retire the Renovate notes with their plan (a61479f)
• docs: retire the Renovate notes with their plan, not after it (274a0de)
• docs: retire Tier 5 into Tier 6; draft step-10 awesome-claude-code form for owner (2add00d)
• docs: row the codex distribution shapes, flag the same risk in gemini (fec8a60)
• docs: row the npm ruling and the codex staleness before Tier 4 (27cb02a)
• docs: row the release-time sync, correct what joining the fleet costs (f850cd7)
• docs: shipped prompt count 27 -> 28 (5862564)
• docs: stamp the open planning rows, log the release-readiness sweep (26352a9)
• docs: state the resource:// opt-in, correct the prompt count, close Tier 0.5 (1044afd)
• docs: track the brand-asset plan and close its acquisition-recovery row (faf69ae)
• docs: workflow IR reference + chain docs lockstep + CHANGELOG (af4a8c5)
• planning: bind retirement plan to issue 210 (b2fb2de)
• planning: record GitHub lifecycle linkage (af83915)
• planning: record isolated review handoff (5d42f97)
• planning: record mainline delivery linkage (384c76c)

Maintenance

• release: target 3.3.0 (91d7bc1)
• target 4.0.0 for the breaking release (2d00cd6)