singularity/singularity-forge

Fork 0

Mikael Hugo 2111da8e60 sf snapshot: pre-dispatch, uncommitted changes after 53m inactivity

2026-04-30 19:10:38 +02:00

172 KiB

Raw Permalink Blame History

Changelog

All notable changes to SF are documented in this file.

Format based on Keep a Changelog.

Unreleased

2.75.0 - 2026-04-17

Added

proxy: per-family provider priority system with 429 fallback — Gemini/Gemma prefer google-gemini-cli, GLM routes to zai, Kimi to kimi-coding, MiniMax to minimax; global fallback chain (opencode → opencode-go → openrouter → ollama-cloud) applies to all families; rate-limited providers are automatically skipped at runtime
proxy: settings.json proxy.providerPriority overrides per-family defaults
tui: "Proxy priorities" settings submenu dynamically generated from all known model families for configuring preferred provider per family

2.74.0 - 2026-04-14

Added

sf: extend flat-rate provider detection to custom/externalCli providers
claude-code: pass thinking level as effort

Fixed

claude-code-cli: forward image blocks in SDK query prompt (#4183)
keep assistant text visible when thinking traces are long
state: DB-authoritative milestone completeness (#4179)
auto-mode: prevent false milestone merge after complete-milestone failure (#4175)
auto: pause on validate-milestone needs-remediation without slices (#4094)
sf: notify users what to do next after /sf step finishes
cli: restore --help handling when it follows a subcommand or unknown flag
tui: eliminate pinned output duplication and reduce render overhead
auto: prevent premature auto-mode stops on blocked phase + missing reassessment
cli: use junction symlinks in merged node_modules path
tui: reset segment state on claude-code sub-turn shrink
sf: set completed_at when reconciling task status to complete
tui: keep AUTO-mode widgets alive and drop duplicate health panel
sf: use bun for update when installed via Bun (#4145)
tui: render assistant tool calls inline with text instead of grouped at end
sf: restore isAutoMode plumbing and workflow-logger catch in auto-model-selection
sf: preserve custom-model selection on /sf auto bootstrap (#4122)
pi-coding-agent: use safe compaction role markers
pi-ai: detect claude-code overflow text

Changed

remove stale src/app-paths.js leftover
cli: slim down top-level src/ — dedup, unused fallbacks, onboarding

2.73.1 - 2026-04-13

Fixed

sf: address 3 silent-crash secondary issues from #3348 post-#3696 (#4133)
sf: tolerate corrupt task arrays (#4056)
sf: discard milestone DB and worktree state (#4065)
model-resolver: gate saved default restore on provider readiness
tui: stop pinned latest-output mirror from duplicating streaming text
sf: wire subagent_model preference through to dispatch prompt builders
ci: address 5 pipeline integrity issues from release audit (#4119)
ci: regenerate package-lock.json during version bump (#4116)
pi-coding-agent: skip localhost dummy key when fallback resolver provides a configured key

Changed

sf: delete 3 unreferenced dead files and orphaned test (#3728)

2.73.0 - 2026-04-13

Added

pi-ai: add Alibaba DashScope as standalone provider (#3891)
sf: add layered depth enforcement to discuss.md (#4079)

Fixed

sf: reconcile stale slice rows and rebuild STATE.md before DB close (#3658)
sf: block direct writes to sf.db via hooks to prevent corruption (#3674)
sf: break 3 circular dependencies in extension modules (#3730)
claude-code: default SF subagents to bypassPermissions and pre-authorize safe built-ins (#4099 follow-up)
sf: add memory pressure watchdog and persist stuck detection state (#3708)
state: prevent false degraded-mode warning when DB not yet initialized (#3922)
async-jobs: suppress stale follow-up for jobs consumed by await_job (#3787) (#3788)
sf: rebuild STATE.md after unit completion (#3876)
sf: let doctor heal dispatch fixable warnings (#3875)
sf: preserve experimental preferences in merges (#3847)
sf: heal legacy task arrays and evidence rows (#4027)
sf: unlock depth verification outside guided flow (#4058)
sf: preserve paused auto badge after provider pause (#4062)
ollama: add cloud auth support and resolve real context window via /api/show (#4017)
security: activate auth middleware and harden shutdown/update routes (#4023)
sf: normalize workingDirectory prompt paths (#4057)
claude-code: pre-authorize workflow MCP tools so interactive acceptEdits mode stops blocking SF commands
cli: resolve duplicate validateConfiguredModel and missing getPiDefaultModelAndProvider import
update SF runtime ignore patterns for team mode (#2824)
sf: prevent double frontmatter in task SUMMARY.md from projection re-render (#2818)
flush extension provider registrations before model resolution (#1923)
sf: reset db-open attempted flag on close (#4024)
sf: unblock mixed-dependency zero-dep slices (#4025)
pi-tui: filter kitty keypad private-use input (#4026)
sf: disable db mmap on darwin (#4029)
sf: reject empty roadmap stubs as milestone plans (#4063)
persist defaultProvider when user selects Claude Code CLI in onboarding (#4104)
pi-ai: filter unavailable github copilot models (#4031)
claude-code: wrap prompt history in XML tags to stop transcript fabrication
clean up MCP tool rendering in Claude Code CLI stream

Changed

pi-ai: regenerate model registry from upstream APIs (#3887)
require linked issue in PR template (#4112)

2.72.0 - 2026-04-13

Added

agents: add SF phase guard to prevent subagent/phase conflicts
agents: add 8 specialist subagents and slim pro agents
tui: improve sf overlays, shortcuts, and notification flows

Fixed

ci: build artifacts in integration-tests job
auto: recover from OpenRouter credit affordability errors
sf: cast unknown gate id in test to satisfy GateId type
sf: route quality gates through a per-turn registry
mcp: expose every registered tool and fix SDK subpath resolution
mcp: resolve rebase regressions in stream-adapter
mcp: thread abort signals, restore tool fidelity, and fix subpath imports
doctor: skip key check for CLI-authenticated providers
tui: overlay subscription + Ctrl+Shift+P shortcut conflict
models: block unconfigured models from selection surfaces
ollama: clear footer status when provider unavailable
sf: guard model override in minimal command contexts
model: require provider readiness for saved default selection
sf: honor /sf model as session override across dispatch
sf: use milestone branch for merged worktree cleanup
pi-coding-agent: show full OAuth login URLs
auto: add structured cooldown error and bounded retry budget
auto: survive transient 429 credential cooldown in auto sessions
pi-coding-agent: match renderable tools case-insensitively
headless: keep idle timeout off during interactive tools
claude-code-cli: surface result text for success errors
pi-ai: use bearer auth for MiniMax Anthropic API
sf: scope stuck-loop forensics to auto sessions
sf: repair DB-only milestone unpark state
sf: detach auto start from active turns
cli: include all internal node_modules entries in pnpm merged dir
sf: enforce anti-fabrication turn-taking in discuss prompts
cli: address review findings for pnpm merged node_modules
cli: handle pnpm global installs by merging both node_modules roots
sf: keep project db path after worktree enter
sf: ignore prose inputs in pre-exec checks
sf: read existing artifacts before write
mcp-server: use explicit sdk js subpaths
cli: preserve anthropic api provider
sf: document flat task summary layout
sf: require verification classes in validation prompts
mcp-server: open the DB for inline workflow tools
sf: ignore pre-existing files in task ordering
sf: detect property-value JSON invocation errors
cli: honor custom-provider defaults before onboarding
sf: dedupe repeated notifications
sf: open DB before bootstrap deriveState
cli: clean up stdin after sessions command readline interface closes
sf: skip reverse dependents in dispatch fallback
sf: classify plain connection-error as transient
cli: resolve hoisted node_modules for global installs
pi-ai: cast test tool fixtures to any for TSchema compatibility
commands: use specific validation reason in blocked-directory warning
commands: show friendly message when /sf runs from $HOME instead of unhandled error

Changed

ci: run integration tests in parallel with build
ci: cache Next.js build artifacts with Blacksmith cache
sync package-lock.json version fields to 2.68.0
pi-ai: add cache_control breakpoints to tool definitions

2.71.0 - 2026-04-11

Added

mcp-server: add secure_env_collect tool via MCP form elicitation

Fixed

tui: clear pinned output on message_end to prevent duplicate display
tui: clear pinned latest output on turn completion
tui: restore pinned output above editor during tool execution
TOCTOU file locking race conditions in event log and custom workflow graph
tui: mask secure extension input values in interactive mode
claude-code: harden MCP elicitation schema handling
claude-code: accept secure_env_collect MCP elicitation forms
interactive: keep MCP tool output ordered and restore secure prompt fallback
interactive: preserve MCP tool output stream ordering
sf: resolve workflow MCP test typing regressions
mcp: return isError flag on workflow tool execution failures
discuss: add structuredQuestionsAvailable conditional to all gates
discuss: add multi-round questioning to new-project discuss phase
sf: harden claude-code workflow MCP bootstrap
web: drop provisional pre-tool question text

Changed

extract deriveStateFromDb logic into composable helpers
pr: drop web-layer changes from MCP stream-order fix

2.70.1 - 2026-04-11

Fixed

routing: address codex review — complete interactive bypass and accurate banner
routing: skip dynamic routing for interactive dispatches, always show model changes (#3962)
ci: trim windows portability integration load
ci: narrow windows portability coverage
ci: skip validate-pack in windows portability job
ci: unblock windows portability follow-up
windows: harden portability across runtime and tooling
auto: use pathToFileURL for cross-platform import and reconcile regression test
auto: resolve resource-loader.js from SF_PKG_ROOT on resume (#3949)
mcp-server: importLocalModule resolves src/ paths from dist/ context
sf: surface scoped doctor health warnings
sf: skip skipped slices in milestone prompts
sf: handle doubled-backtick pre-exec paths
update: fetch latest version from registry

2.70.0 - 2026-04-10

Added

mcp-server: expose ask_user_questions via elicitation

Fixed

pi-ai: remove Anthropic OAuth flow for TOS compliance
mcp-server: hydrate model credentials into env
mcp-server: hydrate stored tool credentials on startup
sf: auto-enable cmux when detected instead of prompting
mcp-server: URL scheme regex no longer matches Windows drive letters

2.69.0 - 2026-04-10

Added

sf: implement ADR-005 multi-model provider and tool strategy
sf: complete ADR-004 capability-aware model routing implementation

Fixed

sf: add missing directories to codebase generator exclude list
sf: wire ADR-005 infrastructure into live paths
sf: replace empty catch with logWarning for CI compliance
sf: merge enhanced context sections into standard template, clean up stale gate patterns
sf: remove broken discuss-prepared template, inject briefs into discuss.md

2.68.1 - 2026-04-10

Fixed

ci: update FILE-SYSTEM-MAP.md path after docs reorganization
test: update discord invite test path after docs reorganization
sf: resolve resource-loader import for deployed extensions

2.68.0 - 2026-04-10

Added

expose slice replanning over workflow MCP
expose milestone workflow tools over MCP
expose slice completion over workflow MCP
expose task completion alias over workflow MCP
expose SF planning tools over MCP
gate workflow MCP units by provider transport capabilities
expose core SF workflow tools over MCP
add contextual tips system for TUI and web terminal

Fixed

state: prevent false degraded-mode warning when DB not yet initialized
sf: use debugLog in catch block to satisfy empty-catch lint
sf: avoid false manifest and skipped-slice warnings
sf: replace empty catch block with descriptive comment
guard autoCommitDirtyState and restore cwd on MergeConflictError (#2929)
Claude Code MCP tool output rendering and real-time streaming
sf: surface warnings when DB or STATE.md init fails
sf: create sf.db, runtime/, and STATE.md during init (#3880)
sf: suppress workflow stderr during /sf
sf: enforce workflow write gates over MCP
restore autoStartTime on resume + replace empty catch blocks (#3585)
mcp: harden workflow tool boundary
sf: accept em-dash none verification rationale
sf: resync managed resources on auto resume
sf: stop stale forensics context hijacks
sf: serialize workflow MCP execution state
sf: restore milestone status db preflight
claude-code-cli: suppress streamed internal tool noise
sf: skip same-path planning artifact copies
claude-code-cli: suppress internal tool call noise
pi-coding-agent: avoid oauth login for api-key providers
sf: snapshot new untracked files before dispatch
platform: harden command execution and stabilize onboarding sync
pi-ai: restore event stream factory export
sf: use valid codebase refresh logger
sf: auto-refresh codebase cache
sf: align model switching and prefs surfaces
route slice and validation artifacts through DB tools
make sf_complete_task the only execute-task summary path
docs: stop pointing repo documentation to sf.build
add activeEngineId and activeRunDir to PausedSessionMetadata interface
sf: address QA round 4
sf: address QA round 3
sf: address QA round 2
sf: address QA round 1
sf: address review feedback from trek-e
sf: assess recovery from paused worktree state
sf: satisfy extension typecheck for interrupted recovery
sf: restore hook dispatch export and guided flow imports
sf: clear stale paused metadata in guided flow
sf: preserve interrupted-session resume mode
preserve explicit interrupted-session resume mode
preserve step-mode and suppress stale paused resumes
suppress stale interrupted-session resume prompts

Changed

harden workflow MCP executor loading
ci: add weekly workflow to regenerate model registry
deps: refresh audited package locks

2.67.0 - 2026-04-09

Added

context: implement R005 decision scope cascade and derive scope from slice metadata
M005: Tiered Context Injection - relevance-scoped context with 65%+ reduction

Fixed

test: align auto-loop test timers with updated session timeout
sf: repair CI after branch split
sf: repair CI after branch split
sf: repair CI after branch split
sf: fail closed for discussion gate enforcement
sf: harden auto merge recovery and session safety
sf: repair overlay, shortcut, and widget surfaces
sf: prevent stale workflow reconcile state writes
sf: align prompt contracts and validation flow
pi-tui: harden input parsing and editor focus behavior
remote-questions: cancel local TUI when remote answer wins the race
auto: increase session timeout to 120s and treat timeout as recoverable pause (#3767)
ui: apply anthropic-api display name to all model/provider UI surfaces
ui: display 'anthropic-api' in SF preferences wizard provider list
remote-questions: race local TUI against remote channel instead of remote-only routing
ui: display 'anthropic-api' in model selector to distinguish from claude-code
gates: add mechanical enforcement for discussion question gates
prompts: harden non-bypassable gates and exclude dot-folders from scanning
sf: ignore filename headings in parsePlan
providers: match 'out of extra usage' error and respect claude-code provider in model resolution (#3772)
pi-ai: recover XML parameters trapped in JSON strings
retry: guard claude-code fallback to anthropic provider only
providers: route Anthropic subscription users through Claude Code CLI (#3772)
claude-code: use native Windows claude lookup
sf: suppress repeated preferences section warnings
sf: normalize described expected output paths
auto: resilient transient error recovery — defer to Core RetryHandler and fix cmdCtx race

2.66.1 - 2026-04-08

Fixed

pi-tui: revert contentCursorRow, use hardwareCursorRow as movement baseline
pi-tui: use contentCursorRow for render movement baseline instead of cursorRow
sf: add logWarning to empty catch block in orphaned worktree cleanup
sf: add consecutiveFinalizeTimeouts to LoopState in journal tests
sf: add escalation and unit-detach guards to finalize timeout handlers
sf: add timeout guard around postUnitPreVerification to prevent auto-loop hang
sf: OS-specific keyboard shortcut hints via formatShortcut helper
subagent: support list-style tools frontmatter
clear autocomplete rows from content bottom
parse annotated pre-exec file paths
sf: add orphaned milestone branch audit at auto-mode bootstrap

2.66.0 - 2026-04-08

Added

sf: add fast path for queued milestone discussion
sf: add /sf show-config command
reactive: graph diagnostics and subagent_model config
dispatch: parallel research slices and parallel milestone validation
parallel: worker model override for parallel milestone workers

Fixed

sf: validate depth verification answer before unlocking write-gate
sf: revert unknown artifact check to warn-and-proceed
sf: add missing cmd field to test base WorkflowEvent
sf: address remaining adversarial review findings for wave 3
sf: detect concurrent event log growth during reconcile
sf: address adversarial review findings for wave 3
sf: address adversarial review findings for wave 2
sf: address adversarial review findings for wave 1
sf: WAL-safe migration backup + stronger regression tests
sf: consistency and cleanup (wave 5/5)
sf: write safety — atomic writes and randomized tmp paths (wave 4/5)
sf: session and recovery robustness (wave 3/5)
sf: event log and reconciliation robustness (wave 2/5)
sf: critical state machine data integrity fixes (wave 1/5)
sf: critical state machine data integrity fixes (wave 1/5)
sf: remove ecosystem research stub and address adversarial review
sf: suppress model change notification in auto-mode unless verbose
sf: exclude task.files from checkTaskOrdering to prevent false positives
state: skip ghost check for queued milestones in registry build
ci: replace empty catch blocks and raw stderr with logWarning
logging: add debugLog to empty catch in reopen-milestone
state-machine: 9 resilience fixes + 86 regression tests (#3161)
sf: add incremental persistence to discuss prompts
replace empty catch with logWarning for silent-catch-diagnostics test
test: escape regex metacharacters in skip-by-preference pattern test
test: search for numbered step definitions in prompt ordering test
test: update notes loop test for notesVisible guard behavior
test: update action count for note captures now included in results
test: remove extraneous test file from wrong branch
test: update worktree sync tests to use separate milestone IDs
sf: use valid LogComponent type for stale branch guard warning
test: update rogue detection test for auto-remediation behavior
test: update stuck-planning test to expect executing after reconciliation
test: update file path consistency tests for inputs-only checking
test: add CONTEXT file to queued milestone ghost detection test
test: update needs-remediation test to expect validating-milestone phase
sf: import all-done milestones as complete during DB migration
sf: allow milestone completion when validation skipped by preference
sf: set slice sequence at all three insertion sites
sf: four prompt/runtime fixes for completion and session stability
sf: default insertMilestone status to queued instead of active
sf: suppress repeated frontmatter YAML parse warnings
sf: normalize list inputs in complete-task + fix roadmap dep parsing
sf: open DB before status derivation + respect isolation:none in quick
sf: add .bg-shell/ to baseline gitignore patterns
tui: prevent Enter key infinite loop in interview notes mode
provider: handle Enter key to initiate auth setup in provider manager
sf: cap run-uat dispatch attempts to prevent infinite replay loop
mcp: use createRequire to resolve SDK wildcard subpath imports
sf: mark note captures as executed in executeTriageResolutions
sf: validate main_branch preference exists before using in merge
sf: handle deleted cwd in projectRoot to prevent ENOENT crash
sf: skip current milestone in syncWorktreeStateBack to prevent merge conflicts
sf: add structuredQuestionsAvailable conditional to slice discuss
sf: restore full tool set after discuss flow scoping
sf: tighten verifyExpectedArtifact to prevent rogue-write false positives
sf: add verification gate to complete-slice tool
sf: fix pre-execution-checks false positives from backticks and task.files
sf: stop renderAllProjections from overwriting authoritative PLAN.md
sf: auto-checkout to main when isolation:none finds stale milestone branch
sf: auto-remediate stale slice DB status when SUMMARY exists on disk
sf: open DB on demand in sf_milestone_status for non-auto sessions
sf: detect phantom milestones from abandoned sf_milestone_generate_id
sf: force re-validation when verdict is needs-remediation
sf: exclude closed slices from findMissingSummaries check
sf: recover from stale lockfile after crash or SIGKILL
sf: add createdAt timestamp and 30s age guard to staleness check
sf: clear stale pendingAutoStart after /clear interrupts discussion
sf: suppress misleading warnings for expected ENOENT/EISDIR conditions
sf: extract real error from message content when errorMessage is useless
sf: extract real error from message content when errorMessage is useless
sf: show accurate pause message for queued-user-message skip
sf: treat queued-user-message skip as non-retryable interruption
sf: recognize "Not provided." default in isVerificationNotApplicable
sf: discoverManifests skips symlinked extension directories
sf: recognize "Not provided." default in isVerificationNotApplicable
sf: reconcile plan-file tasks into DB when planner skips persistence (#3600)
sf: use isClosedStatus() in dispatch guard instead of raw complete check
browser-tools: make sharp an optional lazy dependency
sf: pass required arguments in defer-milestone-stamp test
sf: replace remaining empty catch with logWarning
sf: use logWarning instead of raw stderr in catch blocks
sf: log error instead of empty catch in STATE.md rebuild
sf: log error instead of empty catch in skip_slice
sf: cast milestone classification to string for type safety
sf: treat zero-slice roadmap as pre-planning in guided flow
sf: rebuild STATE.md after skip-slice and strengthen rethink prompt
sf: use main_branch preference in worktree creation
sf: stamp defer and milestone captures as executed after triage
tui: treat absolute file paths as plain text, not commands
tui: break infinite re-render loop for images in cmux
sf: rebuild STATE.md before guided-flow dispatch
sf: defer queued shells in active milestone selection
retry: prevent 429 quota cascade and 30-min lockout
sf: add fastPathInstruction to buildDiscussMilestonePrompt loadPrompt call

Changed

auto-commit after quick-task
auto-commit after quick-task
auto-commit after quick-task
auto-commit after quick-task
auto-commit after quick-task
auto-commit after quick-task
auto-commit after quick-task

2.65.0 - 2026-04-07

Added

sf: persistent notification panel with TUI overlay, widget, and web API
sf: wire blocking behavior and strict mode for enhanced verification
sf: add post-execution cross-task consistency checks
sf: add pre-execution plan verification checks

Fixed

sf: wrap long notification messages and fit overlay to content
sf: remove background color from backdrop, fix message truncation
sf: restore consistent overlay height to prevent ghost artifacts
sf: improve notification overlay backdrop and content-fit sizing
sf: only unlink notification lock when owned, prevent foreign lock deletion
sf: add backdrop dimming and viewport padding to notification overlay
sf: add intent + phase guards to resume context fallback (#3615)
sf: inject task context for unstructured resume prompts (#3615)
pi-coding-agent: restore extension tools after session switch (#3616)
agent-loop: schema overload cap ignores bash execution errors (#3618)
bg-shell: prevent signal handler accumulation + cap alert queue
sf: coerce plain-string provides field to array in complete-slice (#3585)
address PR #3468 review findings
sf: persist autoStartTime across session resume so elapsed timer survives /exit
sf: add enhanced_verification preferences to mergePreferences
headless: treat discuss and plan as multi-turn commands

Changed

interactive: cap rendered chat components + kill orphan descendants
tui: render-skip, frame isolation, Text cache guard, dispose

2.64.0 - 2026-04-06

Added

sf: add LLM safety harness for auto-mode damage control
ollama: native /api/chat provider with full option exposure
parallel: slice-level parallelism with dependency-aware dispatch (#3315)
mcp-client: add OAuth auth provider for HTTP transport (#3295)

Fixed

ui: remove 200-column cap on welcome screen width
address adversarial review findings for #3576
sf: replace hardcoded agent skill paths with dynamic resolution (#3575)
headless: sync resources and use agent dir for query
cli: show latest version and bypass npm cache in update check
sf: follow CONTRIBUTING standards for #3565
sf: address Codex adversarial review findings for #3565
sf: coerce string arrays to objects in complete-slice/task tools (#3565)
sf: harden flat-rate routing guard against alias/resolution gaps
pi-coding-agent: register models.json providers and await Ollama probe in headless mode
ollama: use apiKey auth mode to avoid streamSimple crash
sf: disable dynamic model routing for flat-rate providers
sf: address Codex adversarial review findings
sf: prevent LLM from querying sf.db directly via bash (#3541)
sf: seed requirements table from REQUIREMENTS.md on first update
sf: inject S##-CONTEXT.md from slice discussion into all prompt builders
cli: guard model re-apply against session restore and async rejection
pi-coding-agent: resolve model fallback race that ignores configured provider (#3534)
detection: add xcodegen and Xcode bundle support to project detection (#1882)
perf: share jiti module cache across extension loads (#3308)
resource-sync: prune removed bundled subdirectory extensions on upgrade (#1972)
recognize U+2705 checkmark emoji as completion marker in prose roadmaps (#1897)
web: use safePackageRootFromImportUrl for cross-platform package root (#1881) (#1893)
isolate CmuxClient stdio to prevent TUI hangs in CMUX (#3306)
worktree health check walks parent dirs for monorepo support (#3313)
sf: promote milestone status from queued to active in plan-milestone (#3317)
worktree: correct merge failure notification command from /complete-milestone to /sf dispatch complete-milestone (#1901)
detect and block Gemini CLI OAuth tokens used as API keys (#3296)
auto: break retry loop on tool invocation errors (malformed JSON) (#3298)
git: use git add -u in symlink .sf fallback to prevent hang (#3299)
handle complete-slice context exhaustion to unblock downstream slices (#3300)
cap consecutive tool validation failures to prevent stuck-loop (#3301)
make enrichment tool params optional for limited-toolcall models (#3302)
add filesystem safety guard to complete-slice.md (#3304)
extensions: use bundledExtensionKeys for conflict detection instead of broken path heuristic (#3305)
scope tools during discuss flows to prevent grammar overflow (#3307)
preferences: warn on silent parse failure for non-frontmatter files (#3310)
track remote-questions in managed-resources manifest (#3312)
auto: add timeout guard for postUnitPostVerification in runFinalize (#3314)
sf: handle large markdown parameters in complete-milestone JSON parsing (#3316)
metrics: deduplicate idle-watchdog entries and fix forensics false-positives (#1973)
prevent milestone/slice artifact rendering corruption (#3293)
doctor: strip --fix flag before positional parse (#1919) (#1926)
resolve external-state worktree DB path (#2952) (#3303)
sf: worktree teardown path validation prevents data loss (#3311)
prevent auto-mode from dispatching deferred slices (#3309)
preserve completed slice status on plan-milestone re-plan (#3318)
reopen DB on cold resume, recognize heavy check mark (#3319)
dashboard model label shows dispatched model, not stale previous unit (#3320)

Changed

sf: remove copyright line from test file
sf: trim promptGuidelines to 1 line to reduce per-turn token cost
web: consolidate subprocess boilerplate into shared runner (#1899)

2.63.0 - 2026-04-05

Added

mcp-server: add 6 read-only tools for project state queries (#3515)

Fixed

sf: enrich vague diagnostic messages with root-cause context
test: reset dedup cache between ask-user-freetext tests
db: delete orphaned WAL/SHM files alongside empty sf.db (#2478)
sf: prevent auto-wrapup from interrupting in-flight tool calls (#3512)
sf: handle bare model IDs in resolveDefaultSessionModel (#3517)
sf: wrap decision and requirement saves in transaction to prevent ID races
sf: prefer PREFERENCES.md over settings.json for session bootstrap model (#3517)
sf: add Claude Code official skill directories to skill resolution
dedup: hash full question payload, not just IDs
sf: prevent duplicate ask_user_questions dispatches with per-turn dedup cache
pi-ai: extend repairToolJson to handle XML tags and truncated numbers
pi-coding-agent: cancel stale retries after model switch

Changed

untrack .repowise/ and add to .gitignore

2.62.1 - 2026-04-05

Fixed

sf: gate steer worktree routing on active session, fix messaging
sf: resolve steer overrides to worktree path when worktree is active

2.62.0 - 2026-04-04

Added

sf: enhance /sf codebase with preferences, --collapse-threshold, and auto-init
01-05: fire before_model_select hook, add verbose scoring output, load capability overrides
01-04: register before_model_select placeholder handler in SF hooks
01-04: add BeforeModelSelectEvent to extension API and wire emission
01-03: wire taskMetadata from selectAndApplyModel to resolveModelForComplexity
01-03: insert STEP 2 capability scoring into resolveModelForComplexity
01-01: add taskMetadata to ClassificationResult and export extractTaskMetadata
01-01: add capability types, data tables, and scoring functions to model-router

Fixed

sf: add codebase validation in validatePreferences so preferences are not silently dropped
test: update db-path-worktree-symlink test for simplified diagnostic logging
sf: update tests for errors-only audit persistence, fix empty catch blocks
sf: harden audit log persistence — errors-only, sanitized, demote probe warnings
sf: address adversarial review findings on workflow-logger migration
sf: fail-closed stop guard, harden backtrack parsing, fix prompt params
sf: add diagnostic logging to empty catch blocks in auto-mode
lsp: add legacy alias for renamed kotlin-language-server key
break infinite notes loop when selecting "None of the above"
align defaultRoutingConfig capability_routing to true
pi-coding-agent: upgrade Kotlin LSP to official Kotlin/kotlin-lsp
test: use correct RequirementCounts type fields in edge case tests
remote-questions: fire configured channels in interactive mode

Changed

sf: migrate all catch blocks to centralized workflow-logger
init sf

2.61.0 - 2026-04-04

Added

stop/backtrack capture classifications for milestone regression (#3488)
SF context optimization with model routing and context masking

2.60.0 - 2026-04-04

Added

add /btw skill — ephemeral side questions from conversation context

Fixed

btw: remove LLM-specific references from skill description

2.59.0 - 2026-04-03

Added

extensions: add Ollama extension for first-class local LLM support (#3371)
doctor: stale commit safety check with sf snapshot and auto-cleanup
extensions: wire up topological sort and unified registry filtering (#3152)
widget: add last commit display and dashboard layout improvements (#3226)
model-routing: enable dynamic routing by default (#3120)
vscode: sidebar redesign, SCM provider, checkpoints, diagnostics [3/3]
splash: add remote channel indicator to welcome screen tools row
stream full text and thinking output in headless verbose mode (#2934)
sf: add codebase map — structural orientation for fresh agent contexts

Fixed

worktree: resolve merge conflict for PR #3322 — adopt comprehensive pre-merge cleanup
merge: clean stale MERGE_HEAD before squash merge (#2912)
state: always run disk→DB reconciliation when DB is available (#2631)
git-service: fix merge-base ancestry check and .sf/ leakage in snapshot absorption
extensions: update provides.hooks in 7 extension manifests to match actual registrations (#3157)
surface nativeCommit errors in reconcileMergeState instead of silently swallowing (#3052)
parallel: scope commits to milestone boundaries in parallel mode (#3047)
add windowsHide to all web-mode subprocess spawns (#2628) (#3046)
skip auto-mode pause on empty-content aborted messages (#2695) (#3045)
detect and remove nested .git dirs in worktree cleanup to prevent data loss (#3044)
prevent data loss when git isolation default changes (#2625) (#3043)
read-tool: clamp offset to file bounds instead of throwing (#3007) (#3042)
sf: preserve queued milestones with worktrees in ghost detection (#3041)
compaction: add chunked fallback when messages exceed model context window (#3038)
preserve interactive terminal across tab switches and project changes (#3055)
call cleanupQuickBranch on turn_end to squash-merge quick branch back (#3054)
align run-uat artifact path to ASSESSMENT, preventing false stuck retries (#3053)
replace invalid Discord invite links with canonical URL (#3056)
add Windows shell guard to remaining spawn sites (#3058)
route sf auto to headless runner to prevent hang on piped stdin/stdout (#3057)
respect .gitignore for .sf/ in rethink prompt (#3059)
migrate unit ownership from JSON to SQLite to eliminate read-modify-write race (#3061)
roadmap: handle numbered, bracketed, and indented prose H3 headers in slice parser (#3063)
add worktree-merge to resolveModelWithFallbacksForUnit switch and update KNOWN_UNIT_TYPES (#3066)
clean up MERGE_HEAD on all error paths in mergeMilestoneToMain (#2912) (#3068)
prevent LLM from confusing background task output with user input (#3069)
add openai-codex provider and modern OpenAI models to MODEL_CAPABILITY_TIER and cost tables (#3070)
preserve active tab when switching projects (#3071)
include project name in desktop notifications (#3072)
recover from many-image dimension overflow by stripping older images (#3075)
resolve bare model IDs to anthropic over claude-code provider (#3076)
auto: move selectAndApplyModel before updateProgressWidget (#3079)
detect project relocation and recover state without data loss (#3080)
add free-text input to ask-user-questions when "None of the above" is selected (#3081)
block work execution during /sf queue mode (#2545) (#3082)
detect worktree basePath in sfRoot() to prevent escaping to project root (#3083)
invalidate stale quick-task captures across milestone boundaries (#3084)
defer model validation until after extensions register (#3089)
repair YAML bullet lists in malformed tool-call JSON (#3090)
unify SUMMARY.md render paths for projection fidelity (#3091)
chat mode misrepresents terminal output, looks stuck, omits user messages (#3092)
resolve 4 state corruption bugs in milestone/slice completion (#2945) (#3093)
isolate guided-flow session state and key discussion milestone queries (#2985) (#3094)
guided-flow: route dispatchWorkflow through dynamic routing pipeline (#3153)
skip external state migration inside git worktrees (#2970) (#3227)
coerce non-numeric strings in DB columns during manifest serialization (#2962) (#3229)
route allDiscussed and zero-slices paths to queued milestone discussion (#3150) (#3230)
use loose equality for null checks in secure_env_collect (#2997) (#3231)
prevent prompt explosion from $' in template replacement values (#2968) (#3232)
resolve OAuth API key in buildMemoryLLMCall via modelRegistry (#2959) (#3233)
forensics: read completion status from DB instead of legacy file (#3129) (#3234)
use camelCase parameter names in execute-task and complete-slice prompts (#2933) (#3236)
check bootstrap completeness in init wizard gate, not just .sf/ existence (#2942) (#3237)
specify write tool for PROJECT.md in milestone/slice prompts (#3238)
widen completing-milestone gate to accept "None required" and similar phrasings (#2931) (#3239)
prevent ask_user_questions from poisoning auto-mode dispatch (#2936) (#3240)
guard null s.currentUnit in runUnitPhase closeout after stopAuto race (#2939) (#3241)
replace web_search with search-the-web in prompts and agent frontmatter (#2920) (#3245)
preserve milestone title in upsertMilestonePlanning when DB row pre-exists (#2879) (#3247)
invalidate stale milestone validation on roadmap reassessment (#2957) (#3242)
discuss: add roadmap fallback when DB is open but empty (#2892) (#3244)
integrate Codex & Gemini CLI into provider routes and rate-limit handling (#2922) (#3246)
error-classifier: widen STREAM_RE to cover all 7 V8 JSON parse error variants (#2916) (#3243)
prevent git stash from destroying queued milestone CONTEXT files (#2505) (#3273)
skip staleness rebuild in npm tarball installs (#2877) (#3250)
parallel: check worktree DB for milestone completion in merge (#2812) (#3256)
make claude-code provider stateful with full context and sidechain events (#2859) (#3254)
worktree: preserve non-empty sf.db during sync to prevent truncation (#2815) (#3255)
align @sf/native module type with compiled output (#3253)
parse hook/* completed-unit keys correctly in forensics + doctor (#2826) (#3252)
copy mcp.json into auto-mode worktrees (#2791) (#3251)
add sf_requirement_save and upsert path for requirement updates (#3249)
handle pause_turn stop reason to prevent 400 errors with native web search (#2869) (#3248)
use authoritative milestone status in web roadmap (#2807) (#3258)
classify long-context entitlement 429 as quota_exhausted, not rate_limit (#2803) (#3257)
docs: use ~/.pi/agent/extensions/ for community extension install path (#3131) (#3259)
add disk→DB slice reconciliation in deriveStateFromDb (#2533) (#3262)
run forensics duplicate detection before investigation (#2704) (#3260)
skip TUI render loop on non-TTY stdout to prevent CPU burn (#3095) (#3263)
persist forensics report context across follow-up turns (#2941) (#3261)
invalidate workspace state on turn_end so milestones list stays current (#2706) (#3266)
eliminate 3 recurring doctor audit false positives (#3105) (#3264)
web: reconcile auto-mode state with on-disk lock in dashboard (#2705) (#3265)
treat ghost milestones as ineligible for parallel execution (#2501) (#3268)
redirect auto-mode to headless when stdout is piped (#2732) (#3269)
attempt VACUUM recovery when initSchema fails with corrupt freelist (#2519) (#3270)
resolve db_unavailable loop in worktree/symlink layouts (#2517) (#3271)
correct OAuth fallback request shape for google_search (#2963) (#3272)
prevent UAT stuck-loop and orphaned worktree after milestone completion (#3065)
mcp: handle server names with spaces in mcp_discover (#3037)
sf: detect markdown body verdicts and guard plan-milestone against completed slices (#2960) (#3035)
error-classifier: replace STREAM_RE whack-a-mole with catch-all V8 JSON.parse pattern
type _borderColorKey as 'dim' | 'bashMode' to match ThemeColor
tui: comprehensive TUI review — layout, flow, rendering, and state fixes
sf: harden codebase-map — bug fixes, UX polish, and expanded tests

Changed

state: centralize pipeline logging through workflow logger (#3282)
gitignore: exclude src/ build artifacts, scratch files, and .plans/
complexity: reclassify planning phases from standard to heavy tier

2.58.0 - 2026-03-28

Added

Added 6 discord.js shard/error/warn event listeners for reconnect…

Fixed

auto: guard startAuto() against concurrent invocation (#2923)
auto-dispatch: widen operational verification gate regex (fixes #2866) (#2898)
parallel: three bugs preventing reliable parallel worker execution (#2801)
web: fall back to project totals when dashboard metrics are zero (#2847)
sf: parse raw YAML under preference headings (#2794)
sf: persist verification classes in milestone validation (#2820)
sf: guard reconcileWorktreeDb against same-file ATTACH corruption (#2825)
web: skip shutdown in daemon mode so server survives tab close (#2842)
headless: skip execution_complete for multi-turn commands (auto/next)
Fixed 3 bugs (launchd JSON parsing, login race condition, interact…

2.57.0 - 2026-03-28

Added

Extended DaemonConfig with control_channel_id and orchestrator se…
Created pure-function event formatters (10 functions) mapping RPC…
models: add GLM-5.1 to Z.AI provider in custom models
Added discord.js v14, DiscordBot class with auth guard and lifecy…
Created packages/daemon workspace package with DaemonConfig/LogLe…
headless text mode shows tool calls + skip UAT pause in headless
Wire --resume flag to resolve session IDs via prefix matching and…
Migrated headless orchestrator to use execution_complete events,…

Fixed

headless: match "completed" status from RPC v2 in exit code mapper
show external drives in directory browser on Linux
Regenerate package-lock.json after merge
sf: resume cold auto bootstrap from db
sf: preserve first auto unit model after session reset
Accept flags after positional command in headless arg parser
sf: discover project subagents in .sf
model-routing: use honest unitTypes for discuss dispatches and map all auto-dispatch phases
revert jsonl.ts to inline implementation — @sf-build/rpc-client not available at source-level test time in CI

Changed

auto-commit after complete-milestone

2.56.0 - 2026-03-27

Added

parallel: /sf parallel watch — native TUI overlay for worker monitoring (#2806)

Fixed

ci: copy web/components to dist-test for xterm-theme test (#2891)
sf: prefer PREFERENCES.md in worktrees (#2796)
sf: resume auto-mode after transient provider pause (#2822)
parallel: resolve session lock contention and 3 related parallel-mode bugs (#2184) (#2800)
web: improve light theme terminal contrast (#2819)
sf: preserve auto start model through discuss (#2837)

Changed

test: compile unit tests with esbuild, reclassify integration tests, fix node_modules symlink (#2809)

2.55.0 - 2026-03-27

Added

colorized headless verbose output with thinking, phases, cost, and durations (#2886)
headless text mode observability + skip UAT pause (#2867)

Fixed

cli: let sf update bypass version mismatch gate (#2845)
contracts: add isWorkspaceEvent guard + close routeLiveInteractionEvent exhaustiveness gap (#2878)
sf: use project root for prior-slice dispatch guard (#2863)
sf: include queue context in milestone planning prompts (#2846)
detect monorepo roots in project discovery to prevent workspace fragmentation (#2849)
bg-shell: recover from deleted cwd in timers (#2850)
sf: enable dynamic routing without models section (#2851)
interactive: fully remove providers from /providers (#2852)

2.54.0 - 2026-03-27

Added

Headless Integration Hardening & Release (M002) (#2811)
parallel: add real-time TUI monitor dashboard with self-healing (#2799)

2.53.0 - 2026-03-27

Added

vscode: activity feed, workflow controls, session forking, enhanced code lens [2/3] (#2656)
sf: enable safety mechanisms by default (snapshots, pre-merge checks) (#2678)

Fixed

hydrate collected secrets for current session (#2788)
resolve stash pop conflicts and stop swallowing merge errors (#2780)
treat any extracted verdict as terminal in isValidationTerminal (#2774)
use localStorage for auth token to enable multi-tab usage (#2785)
guard activeMilestone.id access in discuss and headless paths (#2776)
clean up zombie parallel workers stuck in error state (#2782)
relax milestone validation gate to accept prose evidence (#2779)
write milestone reports to project root instead of worktree (#2778)
auto-resolve build artifact conflicts in milestone merge (#2777)
let rate-limit errors attempt model fallback before pausing (#2775)
prevent sf next from self-killing via stale crash lock (#2784)
add shell flag for Windows spawn in VSCode extension (#2781)

Changed

sf: extract duplicated status guards and validation helpers (#2767)

2.52.0 - 2026-03-27

Added

vscode: status bar, file decorations, bash terminal, session tree, conversation history, code lens [1/2] (#2651)
web: Dark mode contrast — raise token floor and flatten opacity tier system (#2734)
Wire --bare mode across headless → pi-coding-agent → resource-loa…
Added runId generation on prompt/steer/follow_up commands, event…
Added RPC protocol v2 types, init handshake with version detectio…

Fixed

auto-mode stops after provider errors (#2762) (#2764)
add missing runtime stage name to Dockerfile (#2765)
make transaction() re-entrant and add slice_dependencies to initSchema
remove preferences.md from ROOT_STATE_FILES to prevent back-sync overwrite
wire tool handlers through DB port layer, remove _getAdapter from all tools
sf: move state machine guards inside transaction in 5 tool handlers (#2752)
reconcile disk milestones into empty DB before deriveStateFromDb guard (#2686)
sf: seed preferences.md into auto-mode worktrees (#2693)
claude-import: discover marketplace plugins nested inside container directories (#2718)
exempt interactive tools from idle watchdog stall detection (#2676)
guard allSlicesDone against vacuous truth on empty slice array (#2679)
block complete-milestone dispatch when VALIDATION is needs-remediation (#2682)
sf: sync milestone DB status in parkMilestone and unparkMilestone (#2696)
web: auth token gate — synthetic 401 on missing token, unauthenticated boot state, and recovery screen (#2740)
remote-questions: empty-key entry in auth.json shadows valid Discord bot token (#2737)
idle watchdog stalled-tool detection overridden by filesystem activity (#2697)
surface exhausted Claude SDK streams as errors (#2719)
docker: overhaul fragile setup, adopt proven container patterns (#2716)
sf: write DB before disk in validate-milestone to match engine pattern (#2742)
sf: extract and honor milestone argument in /sf auto and /sf next (#2729)
windows: prevent EINVAL by disabling detached process groups on Win32 (#2744)
sf: delete orphaned verification_evidence rows on complete-task rollback (#2746)
sf: wire setLogBasePath into engine init to resurrect audit log (#2745)
Remove premature pendingTools.delete in webSearchResult handler (#2743)
sf: remove redundant assertions that fail TS2367 typecheck
include preferences.md in worktree sync and initial seed

Changed

pi-ai: replace model-ID pattern matching with capability metadata (#2548)
sf-db: comprehensive SQLite audit fixes — indexes, caching, safety, reconciliation
rename preferences.md to PREFERENCES.md for consistency (#2700) (#2738)
sf: unify three overlapping error classifiers into single classify→decide→act pipeline

2.51.0 - 2026-03-26

Added

add /terminal slash command for direct shell execution (#2349)
auto: check verification class compliance before milestone completion (#2623)
validate: extract followUps and knownLimitations in parseSummary (#2622)
managed RTK integration with opt-in preference and web UI toggle (#2620)
validate: inject verification classes into milestone validation prompt (#2621)
skills: add 19 wshobson/agents packs with 40 curated skills
skills: add 11 new skill packs covering major frameworks and languages
skills: add SQLite/SQL detection, SQL optimization pack, and Redis pack
skills: add Prisma and Supabase/Postgres database packs
skills: add cloud platform packs (Firebase, Azure, AWS) and improve detection
skills: curate catalog — add top ecosystem skills, drop low-quality bundled ones
skills: parse SDKROOT from pbxproj for platform-aware iOS skill matching
skills: use ~/.agents/skills/ as primary skills directory with curated catalog

Fixed

improve light theme warning contrast (#2674)
honor explicit model config when model is not in known tier map (#2643)
exclude lastReasoning from retry diagnostic to prevent hallucination loops (#2663)
persist rewrite-docs attempt counter to disk for session restart survival (#2671)
add non-null assertions for parseUnitId optional fields in tests
update triage-dispatch static analysis tests for enqueueSidecar helper
notifications: prefer terminal-notifier over osascript on macOS (#2633)
classify stream-truncation JSON parse errors as transient (#2636)
call ensureDbOpen() before slice queries in /sf discuss (#2640)
prompts: use --body-file for forensics issue creation (#2641)
isLockProcessAlive should return true for own PID (#2642)
check ASSESSMENT file for UAT verdict in checkNeedsRunUat (#2646)
use pauseAuto instead of stopAuto for warning-level dispatch stops (#2666)
signal malformed tool arguments in toolcall_end event (#2647)
prevent double mergeAndExit on milestone completion (#2648)
respect queue-order.json in DB-backed state derivation (#2649)
vscode: support Remote SSH by adding extensionKind and error handler (#2650)
update DB task status in writeBlockerPlaceholder for execute-task (#2657)
normalize path separators in matchesProjectFileMarker for Windows
tests: remove obsolete doctor filesystem test
tests: update doctor issue code to db_done_task_no_summary
restore PR files lost during merge conflict resolution
skills: address QA round 3
skills: address QA round 2
skills: address QA round 1
skills: prioritize ecosystem dir and skip legacy after migration
skills: address QA round 23
skills: address QA round 22
skills: address QA round 21
skills: address QA round 20
skills: address QA round 19
skills: address QA round 18
skills: address QA round 17
skills: address QA round 16
skills: address QA round 15
skills: address QA round 14
skills: address QA round 13
skills: address QA round 12
skills: address QA round 11
skills: address QA round 10
skills: address QA round 8
skills: detect FastAPI via dependency scanning
skills: address QA round 6
skills: address QA round 5
skills: address QA round 4
skills: address QA round 3
skills: address QA round 2
skills: defer greenfield skill selection to post-design phase
skills: add migration from ~/.sf/agent/skills/ to ~/.agents/skills/
sf extension: detect initialized projects in health widget
sf extension: detect initialized projects in health widget

Changed

consolidate docs, remove stale artifacts, and repo hygiene (#2665)
extract runSafely helper for try-catch-debug-continue pattern (#2611)

2.50.0 - 2026-03-26

Added

sf: wire structured error propagation through UnitResult
add parallel quality gate evaluation with evaluating-gates phase
add 8-question quality gates to planning and completion templates

Fixed

reconcile stale task status in filesystem-based state derivation (#2514)
merge duplicate extractUatType imports in auto-dispatch
use Record<string, any> for hasNonEmptyFields to accept typed DB rows
tests: replace undefined assertTrue/assertEq with assert.ok/assert.equal
tests: replace undefined assertTrue/assertEq with assert.ok/deepStrictEqual
sf: handle session_switch event so /resume restores SF state (#2587)
use GitHub Issue Types via GraphQL instead of classification labels
headless: disable overall timeout for auto-mode, fix lock-guard auto-select (#2586)
auto: align UAT artifact suffix with sf_slice_complete output (#2592)
retry-handler: stop treating 5xx server errors as credential-level failures
test: replace stale completedUnits with sessionFile in session-lock test
session-lock: retry lock file reads before declaring compromise
sf: prevent ensureSfSymlink from creating subdirectory .sf when git-root .sf exists
auto: add EAGAIN to INFRA_ERROR_CODES to stop budget-burning retries
search: enforce hard search budget and survive context compaction
remote-questions: use static ESM import for AuthStorage hydration
add SAFE_SKILL_NAME guard to reject prompt-injection via crafted skill names
sf: use explicit parameter syntax in skill activation prompts
guard writeIntegrationBranch against workflow-template branches
preserve doctor missing-dir checks for active legacy slices
sf: downgrade isolation mode when worktree creation fails
sf: skip loading files for completed milestones in queue context builder
resolve race conditions in blob-store, discovery-cache, and agent-loop
ai: resolve WebSocket listener leaks and bound session cache
rpc: resolve double-set race, missing error ID, and stream handler
pi-coding-agent: prevent crash when login is cancelled
doctor: compare lockfile mtime against install marker, not directory mtime (#1974)
doctor: chdir out of orphaned worktree before removal (#1946)
roadmap: recognize '## Slice Roadmap' header in extractSlicesSection
prevent worktree sync from overwriting state and forward-sync completed-units.json
web: lazily compute default package root to avoid Windows standalone crash

Changed

adopt parseUnitId utility across all auto-* modules
flatten syncMilestoneDir nesting with shared helper
extract merge-state cleanup helper in reconcileMergeState
extract planning-state validation helpers in detectRogueFileWrites
split doctor-checks into focused modules
merge auto-worktree-sync into auto-worktree
deduplicate artifact path functions into single module
remove dead selfHealRuntimeRecords function from auto-recovery
decouple session-forensics from auto-worktree
remove dead worktree code and unused methods
consolidate branch name patterns into single module
deduplicate session-lock compromise handler and state assignment

2.49.0 - 2026-03-25

Added

add --yolo flag to /sf auto for non-interactive project init

Fixed

use full git log in merge tests to match trailer-based milestone IDs
update parallel-merge test assertion for new trailer format
clarify regex alternation in test assertion
verdict gate accepts PARTIAL for mixed/human-experience/live-runtime UATs

Changed

move SF metadata from commit subject scopes to git trailers

2.48.0 - 2026-03-25

Added

discuss: allow /sf discuss to target queued milestones
enhance /sf forensics with journal and activity log awareness

Fixed

make journal scanning intelligent — limit parsed files, line-count older ones
model-registry: scope custom provider stream handlers to prevent clobbering built-in API handlers
forensics: filter benign bash exit-code-1 and user skips from error traces
sf: clear stale milestone ID reservations at session start
render tool calls above text response for external providers
auto: skip CONTEXT-DRAFT warning for completed/parked milestones

Changed

address review - extract RAPID_ITERATION_THRESHOLD_MS, simplify data access

Removed

remove insertChildBefore usage in chat-controller

2.47.0 - 2026-03-25

Added

agent-core: add externalToolExecution mode for external providers
provider: add Claude Code CLI provider extension

Fixed

claude-code-cli: render tool calls above text response
ci: update FILE-SYSTEM-MAP.md path after docs→docs-internal move
isInheritedRepo false negative when parent has stale .sf; defense-in-depth local .git check in bootstrap
claude-code-cli: resolve SDK executable path and update model IDs
make planning doctrine demoable definition audience-appropriate
prompts: migrate remaining 4 prompts to use DB-backed tool API instead of direct write
make workflow event hash platform-deterministic
reconcile stale task DB status from disk artifacts (#2514)

2.46.1 - 2026-03-25

Fixed

ci: prevent windows-portability from blocking pipeline
ci: prevent pipeline race condition on release push
sf: create empty DB for fresh projects with empty .sf/ (#2510)
remote-questions: hydrate remote channel tokens from auth.json on startup

Changed

trigger CI to pick up pipeline race condition fix
trigger pipeline with race condition fix

2.46.0 - 2026-03-25

Added

sf: single-writer engine v3 — state machine guards, actor identity, reversibility
sf: single-writer state engine v2 — discipline layer on DB architecture
sf: add workflow-logger and wire into engine, tool, manifest, reconcile paths (#2494)

Fixed

sf: align prompts with single-writer tool API
sf: integration-proof — check DB state not roadmap projection after reset
sf: block milestone completion when verification fails (#2500)
ci: add typecheck:extensions to pretest to prevent silent type drift
sf: relax integration-proof cross-validation for table-format roadmap
sf: update integration-proof tests for table-format roadmap projections
sf: update test assertions for schema v11, prompt changes, and removed completedUnits
sf: update test files for removed completedUnits, writeLock signature, and type changes
sf: remove stale completedUnits refs, fix writeLock callers, add missing imports
sf: harden single-writer engine — close TOCTOU, intercept bypasses, status inconsistencies
write-intercept: close bare-relative-path bypass in STATE.md regex
voice: fix misleading portaudio error on PEP 668 Linux systems (#2403) (#2407)
core: address PR review feedback for non-apikey provider support (#2452)
ci: retry npm install in pipeline to handle registry propagation delay (#2462)
sf: change default isolation mode from worktree to none (#2481)
loader: add startup checks for Node version and git availability (#2463)
sf: add worktree lifecycle events to journal (#2486)

2.45.0 - 2026-03-25

Added

web: make web UI mobile responsive (#2354)
sf: add /sf rethink command for conversational project reorganization (#2459)
sf: add renderCall/renderResult previews to DB tools (#2273)
add timestamps on user and assistant messages (#2368)
sf: add /sf mcp command for MCP server status and connectivity (#2362)
complete offline mode support (#2429)
system-context: inject global ~/.sf/agent/KNOWLEDGE.md into system prompt (#2331)

Fixed

sf: handle retentionDays=0 on Windows + run windows-portability on PRs (#2460)
use Array.from instead of Buffer.from for native processStreamChunk state (#2348)
sf: isInheritedRepo conflates ~/.sf with project .sf when git root is $HOME (#2398)
reconcile disk milestones missing from DB in deriveStateFromDb (#2416) (#2422)
auto: reset recoveryAttempts on unit re-dispatch (#2322) (#2424)
detect and preserve submodule state during worktree teardown (#2337) (#2425)
auto-start: handle survivor branch recovery in phase=complete (#2358) (#2427)
sf: widen test search window for CRLF portability on Windows (#2458)
sf: preserve rich task plans on DB roundtrip (#2450) (#2453)
merge worktree back to main when stopAuto is called after milestone completion (#2317) (#2430)
sf: skip doctor directory checks for pending slices (#2446)
sf: migrate completion/validation prompts to DB-backed tools (#2449)
sf: prevent saveArtifactToDb from overwriting larger files with truncated content (#2442) (#2447)
stop auto loop on real code merge conflicts (#2330) (#2428)
classify terminated/connection errors as transient in provider error handler (#2309) (#2432)
archive completed-units.json on milestone transition and sync metrics.json (#2313) (#2431)
supervision timeouts now respect task est: annotations (#2243) (#2434)
auto_pr: true now actually creates PRs — fix 3 interacting bugs (#2302) (#2433)
sf: insert DB row when generating milestone ID (#2416)
sf: reconcile disk-only milestones into DB in deriveStateFromDb (#2416)
preferences: deduplicate unrecognized format warning on repeated loads (#2375)
gate auto-mode bootstrap on SQLite availability (#2419) (#2421)
block /sf quick when auto-mode is active (#2420)
ci: add Rust target for all platforms, not just cross-compilation
ci: restore Rust target triple and separate cross-compilation setup
ci: separate cross-compilation target from toolchain install

Changed

migrate D-G test files from createTestContext to node:test (#2418)
test: replace try/finally with beforeEach/afterEach in packages tests (#2390)
test: migrate sf/tests s-z from custom harness to node:test (#2397)
test: migrate sf/tests o-r from custom harness to node:test (#2401)
test: migrate sf/tests i-n from custom harness to node:test (#2399)
test: migrate sf/tests a-c from custom harness to node:test (#2400)
test: replace try/finally with t.after() in sf/tests (e-i) (#2396)
test: replace try/finally with t.after() in sf/tests (a-d) (#2395)
test: replace try/finally with t.after() in src/tests (o-z) (#2392)
test: replace try/finally with t.after() in src/tests (a-n) (#2394)

2.44.0 - 2026-03-24

Added

core: support for 'non-api-key' provider extensions like Claude Code CLI (#2382)
docker: add official Docker sandbox template for isolated SF auto mode (#2360)
sf: show per-prompt token cost in footer behind show_token_cost preference (#2357)
web: add "Change project root" button to web UI (#2355)
sf: Tool-driven write-side state transitions — replace markdown mutation with atomic SQLite tool calls (#2141)
S06/T02: Strip all 16 lazy createRequire fallback paths from migr…
S05/T04: Migrate remaining 6 callers (auto-prompts, auto-recovery…
S05/T03: Migrate 7 warm/cold callers (doctor, doctor-checks, visu…
S05/T02: Extend migrateHierarchyToDb to populate v8 planning colu…
S05/T01: Schema v10 adds replan_triggered_at column; deriveStateF…
S04/T03: Migrate auto-dispatch.ts (3 rules), auto-verification.ts…
S04/T02: Migrate dispatch-guard.ts to DB queries with isDbAvailab…
S01/T03: Migrate planning prompts to DB-backed tool guidance and…
S01/T01: Partially advanced schema v8 groundwork and documented t…
sf: tool-driven write-side state transitions (M001)

Fixed

post-migration cleanup — pragmas, rollbacks, tool gaps, stale code (#2410)
test: normalize CRLF in auto-stash-merge assertion for Windows
test: swallow EPERM on Windows temp dir cleanup in auto-stash-merge test
sf: add file-based fallbacks for DB-dependent code paths and fix CI test failures
sf: remove stale observabilityIssues reference in journal-integration test
extensions: detect TypeScript syntax in .js extension files and suggest renaming to .ts (#2386)
sf: prevent planning data loss from destructive upsert and post-unit re-import (#2370)
sf: use correct notify severity type ("warning" not "warn")
web: resolve compiled .js modules for all subprocess calls under node_modules (#2320)
test: increase perf assertion threshold to prevent CI flake (#2327)
add missing SQLite WAL sidecars and journal to runtime exclusion lists (#2299)
sf: remove stale observability validator + fix greenfield worktree check
memory: fix memory and resource leaks across TUI, LSP, DB, and automation (#2314)
sf: preserve freeform DECISIONS.md content on decision save (#2319)
pi-ai: restore alibaba-coding-plan provider via models.custom.ts (#2350)
doctor: skip false env_dependencies error in auto-worktrees (#2318)
sf: auto-stash dirty files before squash merge and surface dirty filenames in error (#2298)
sf: keep params as any in db-tools executors (CI tsconfig is stricter)
sf: replace any types in db-tools executor signatures
sf: resolve 4 TS compilation errors from parser migration
sf: wrap plan-task DB writes in transaction + untrack .sf/ artifacts
S04/T04: Add planning-crossval tests proving DB↔rendered↔parsed pa…
S04/T01: Add schema v9 migration with sequence column on slices/ta…
remove .sf/ milestone artifacts from git index
tests: update remediation step assertions and crossval fixture
sf: address all 7 review findings from PR #2141
tests: remove invalid seq property from insertMilestone calls

Changed

contrib: add CODEOWNERS and team workflow docs (#2286)
M001: auto-commit after complete-milestone
M001: auto-commit after validate-milestone
M001/S06: auto-commit after complete-slice
M001/S06: auto-commit after plan-slice
M001/S06: auto-commit after research-slice
M001/S05: auto-commit after complete-slice
M001/S05: auto-commit after plan-slice
M001/S05: auto-commit after research-slice
M001/S04: auto-commit after complete-slice
M001/S04: auto-commit after research-slice
M001/S03: auto-commit after complete-slice
M001/S03: auto-commit after plan-slice
M001/S03: auto-commit after research-slice
M001/S02: auto-commit after complete-slice
M001/S02: auto-commit after plan-slice
M001/S02: auto-commit after research-slice
M001/S01: auto-commit after complete-slice

2.43.0 - 2026-03-23

Added

forensics: opt-in duplicate detection before issue creation (#2105)

Fixed

prevent banner from printing twice on first run (#2251)
test: Windows CI — use double quotes in git commit message (#2252)
async-jobs: suppress duplicate follow-up for awaited job results (#2248) (#2250)
sf: remove force-staging of .sf/milestones/ through symlinks (#2247) (#2249)
sf: remove over-broad skill activation heuristic (#2239) (#2244)
auth: fall through to env/fallback when OAuth credential has no registered provider (#2097)
lsp: bound message buffer and clean up stale client state (#2171)
clean up macOS numbered .sf collision variants (#2205) (#2210)
search: keep duplicate-search loop guard armed (#2117)
clean up extension error listener on session dispose (#2165)
web: resolve 4 pre-existing onboarding contract test failures (#2209)
async bash job timeout hangs indefinitely instead of erroring out (#2214)
sf: apply fast service tier outside auto-mode (#2126)
interactive: clean up leaked SIGINT and extension selector listeners (#2172)
ci: standardize GitHub Actions and Node.js versions (#2169)
native: resolve memory leaks in glob, ttsr, and image overflow (#2170)
extension resource management — prune stale dirs, fix isBuiltIn, gate skills on Skill tool, suppress search warnings (#2235)
batch isolated fixes — error messages, preferences, web auth, MCP vars, detection, gitignore (#2232)
document iTerm2 Ctrl+Alt+G keybinding conflict and add helpful hint (#2231)
footer: display active inference model during execution (#1982)
web: kill stale server process before launch to prevent EADDRINUSE (#1934) (#2034)
git: force LC_ALL=C in GIT_NO_PROMPT_ENV to support non-English locales (#2035)
forensics: force gh CLI for issue creation to prevent misrouting (#2067) (#2094)
force-stage .sf/milestones/ artifacts when .sf is a symlink (#2104) (#2112)
pi-ai: correct Copilot context window and output token limits (#2118)

Changed

startup optimizations — pre-compiled extensions, compile cache, batch discovery (#2125)

2.42.0 - 2026-03-22

Added

sf: declarative workflow engine — YAML-defined workflows through the auto-loop (#2024)
sf: unified rule registry, event journal, journal query tool, and tool naming convention (#1928)
ci: PR risk checker — classify changed files by system and surface risk level (#1930)
ADR attribution — distinguish human vs agent vs collaborative decisions (#1830)
add /sf fast command and gate service tier icon to supported models (#1848) (#1862)
add --host, --port, --allowed-origins flags for web mode (#1847) (#1873)

Fixed

tests: wrap rmSync cleanup in try/catch for Windows EPERM
tests: add maxRetries to rmSync cleanup for Windows EPERM compatibility
recursive key sorting in tool-call loop guard hash function (#1962)
use path.sep for cross-platform path traversal guards and test assertions
tests: use cross-platform path split in run-manager timestamp test
prevent SIGTSTP crash on Windows (#2018)
add missing codeFilesChanged to journal integration test mock
repo-identity: use native realpath on Windows to resolve 8.3 short paths (#1960)
doctor: gate roadmap checkbox on summary existing on disk, not issue detection (#1915)
warn when milestone merge contains only metadata and no code (#1906) (#1927)
worktree: resolve 8.3 short paths and use shell mode for .bat hooks on Windows (#1956)
web: persist auth token in sessionStorage to survive page refreshes (#1877)
clean up SQUASH_MSG after squash-merge and guard worktree teardown against uncommitted changes (#1868)
populate RecoveryContext in hook unit supervision to prevent crash on stalled tool recovery (#1867)
resolve worktree path from git registry when .sf/ symlink is shadowed (#1866)
resolve Node v24 web boot failure — ERR_UNSUPPORTED_NODE_MODULES_TYPE_STRIPPING (#1864)
auto: broaden worktree health check to all ecosystems (#1860)
doctor: cascade slice uncheck when task_done_missing_summary unchecks tasks (#1850) (#1858)
defend exit path against ESM module cache mismatch (#1854)
escape parentheses in paths before bash shell-out, fix __extensionDir fallback (#1872)
use PowerShell Start-Process for Windows browser launch, prevent URL wrapping (#1870)
clear stale unit state and restore CWD when step-wizard exits auto-loop (#1869)
prevent cross-project state leak in brand-new directories (#1639) (#1861)
reconcile worktree HEAD with milestone branch ref before squash merge (#1846) (#1859)
normalize Windows backslash paths in bash command strings (#1436) (#1863)
parsePlan and verifyExpectedArtifact recognize heading-style task entries (#1691) (#1857)
sync all milestone dirs regardless of naming convention (#1547) (#1845)

2.41.0 - 2026-03-21

Added

doctor: worktree lifecycle checks, cleanup consolidation, enhanced /worktree list (#1814)
web: browser-based web interface (#1717)
ci: skip build/test for docs-only PRs and add prompt injection scan (#1699)
docs: add Custom Models guide and update related documentation (#1670)
surface doctor issue details in progress score widget and health views (#1667)
cleanup: add ~/.sf/projects/ orphan detection and pruning (#1686)

Fixed

skip web build on Windows — Next.js webpack hits EPERM on system dirs
include web build in main build command
fall through to prose slice parser when checkbox parser yields empty under ## Slices (#1744)
auto: verify merge anchored before worktree teardown (#1829)
auto: reject execute-task with zero tool calls as hallucinated (#1838)
also convert --import resolver path to file URL for Windows
use pathToFileURL for Windows-safe ESM import in verification-gate test
sf: read depends_on from CONTEXT-DRAFT.md when CONTEXT.md is absent (#1743)
roadmap: detect ✓ completion marker in prose slice headers (#1816)
auto: reverse-sync root-level .sf files on worktree teardown (#1831)
tui: prevent freeze when using @ file finder (#1832)
prevent silent data loss when milestone merge fails due to dirty working tree (#1752)
verification: avoid DEP0190 by passing command to shell explicitly (#1827)
state: treat zero-slice roadmap as pre-planning instead of blocked (#1826)
hooks: process depth verification in queue mode (#1823)
auto: register SIGHUP/SIGINT handlers to clean lock files on crash (#1821)
auto-dispatch discussion instead of hard-stopping on needs-discussion phase (#1820)
doctor: fix roadmap checkbox and UAT stub immediately instead of deferring (#1819)
auto: resolve pending unitPromise in stopAuto to prevent hang (#1818)
git: handle unborn branch in nativeBranchExists to prevent dispatch deadlock (#1815)
doctor: prevent cleanup from deleting user work files (#1825)
use realpathSync.native on Windows to resolve 8.3 short paths
detect and skip ghost milestone directories in deriveState() (#1817)
create milestone directory when triage defers to a not-yet-existing milestone (#1813)
add @sf/pi-tui to test module resolver in dist-redirect (#1811)
surface unmapped active requirements when all milestones complete (#1805)
normalize paths in tests to handle Windows 8.3 short-path forms (#1804)
share milestone ID reservation between preview and tool (#1569) (#1802)
tui,sf: tool-call loop guard + TUI stack overflow prevention (#1801)
validate paused-session milestone before restoring it (#1664) (#1800)
detect REPLAN-TRIGGER.md in deriveState for triage-initiated replans (#1798)
dispatch uat targets last completed slice instead of activeSlice (#1693) (#1796)
read depends_on from CONTEXT-DRAFT.md when CONTEXT.md absent (#1795)
worktree: sync root-level files and all milestone dirs on worktree teardown (#1794)
dashboard highlights UAT target slice instead of advanced activeSlice (#1793)
dispatch guard skips completed milestones with SUMMARY file (#1791)
ensureDbOpen creates DB + migrates Markdown in interactive sessions (#1790)
add require condition to pi-tui exports for CJS resolution
update integration test to match dependency-aware dispatch guard wording
use createRequire instead of bare require for lazy pi-tui import
update doctor-git test to match PR #1633 behavior change
increase resolveProjectRootFromGitFile walk-up limit from 10 to 30
include ensure-workspace-builds.cjs in npm package files
resolve extension typecheck errors in test files
resolve CI build errors from Wave 4+5 merges
return retry from postUnitPreVerification when artifact verification fails (#1571) (#1782)
hook model field uses model-router resolution instead of Claude-only registry (#1720) (#1781)
stop auto-mode immediately on infrastructure errors (ENOSPC, ENOMEM, etc.) (#1780)
add missing milestones/ segment in resolveHookArtifactPath (#1779)
break needs-discussion infinite loop when survivor branch exists (#1726) (#1778)
tear down browser sessions at unit boundaries and in stopAuto (#1733) (#1777)
rebuild STATE.md and reset completed-units on milestone transition (#1576) (#1775)
resolve pending unit promise on all exit paths to prevent orphaned auto-loop (#1774)
closeout unit on pause and heal runtime records on resume (#1625) (#1773)
call selfHealRuntimeRecords before autoLoop to clear orphaned dispatched records (#1772)
dispatch guard uses dependency declarations instead of positional ordering (#1638) (#1770)
add configurable timeout to await_job to prevent indefinite session blocking (#1769)
parallel: restore orchestrator state from session files and add worker stderr logging (#1748)
prevent getLoadedSkills crash and auto-build workspace packages (#1767)
session lock multi-path cleanup and false positive hardening (#1578) (#1765)
robust node_modules symlink handling to prevent extension loading failures (#1762)
lazy-load @sf/pi-tui in shared/ui.ts to prevent /exit crash (#1761)
validate worktree .git file and fix metrics toolCall casing (#1713) (#1754)
verify implementation artifacts before milestone completion (#1703) (#1760)
make task closeout crash-safe by unchecking orphaned checkboxes (#1650) (#1759)
preserve milestone branch on merge-back during transitions (#1573) (#1758)
write crash lock after newSession so it records correct session path (#1757)
handle symlinked .sf in git add pathspec exclusions (#1712) (#1756)
guard worktree teardown on empty merge to prevent data loss (#1672) (#1755)
resolve symlinks in doctor orphaned-worktree check (#1715) (#1753)
silence spurious extension load error for non-extension libraries (#1709) (#1747)
reset completion state when post_unit_hooks retry_on signal is consumed (#1746)
route needs-discussion phase to showSmartEntry, preventing infinite /sf loop (#1745)
roadmap: parse table-format slices in roadmap files (#1741)
extract milestone title from CONTEXT.md when ROADMAP is missing (#1729)
sf: harden auto-mode telemetry — metrics idempotency, elapsed guard, title sanitization (#1722)
sf: make saveJsonFile atomic via write-tmp-rename pattern (#1719)
sf: syncWorktreeStateBack recurses into tasks/ subdirectory (#1678) (#1718)
prevent parallel worktree path resolution from escaping to home directory (#1677)
add web search budget awareness to discuss and queue prompts (#1702)
harden auto-mode against stale integration metadata and Windows file locks (#1633)
autocomplete: repair /sf skip, add widget/next completions, add discuss to hint (#1675)
search: keep loop guard armed after firing to prevent infinite loop restart (#1671) (#1674)
worktree: detect default branch instead of hardcoding "main" on milestone merge (#1668) (#1669)
remove duplicate TUI header rendered on session_start (#1663)
worktree: recurse into tasks/ when syncing slice artifacts back to project root (#1678) (#1681)

Changed

split shared/mod.ts into pure and TUI-dependent barrels (#1807)
replace hardcoded /tmp paths with os.tmpdir()/homedir() (#1708)
ci: reduce pipeline minutes with shallow clones, npm caching, and exponential backoff (#1700)
split auto-loop.ts monolith into auto/ directory modules (#1682)

2.40.0 - 2026-03-20

Added

pi: add Skill tool resolution (#1661)
health check phase 2 — real-time doctor issue visibility across widget, visualizer, and HTML reports (#1644)
upgrade forensics prompt to full-access SF debugger (#1660)

Fixed

prune stale env-utils.js from extensions root, preventing startup load error (#1655)
splash: replace box corners with full-width bars for visual unity with auto-mode widget (#1654)
add runtime paths to forensics prompt to prevent path hallucination (#1657)
guard TUI render during session transitions to prevent freeze (#1658)
default UAT type to artifact-driven to prevent unnecessary auto-mode pauses (#1651)
cancel trailing async jobs on session switch to prevent wasted LLM turns (#1643)

Changed

decompose autoLoop into pipeline phases (#1615) (#1659)

2.39.0 - 2026-03-20

Added

sf: activate matching skills in dispatched prompts (#1630)
sf: add .sf/RUNTIME.md template for declared runtime context (#1626)
sf: create draft PR on milestone completion when git.auto_pr enabled (#1627)
sf: add browser-executable and runtime-executable UAT types (#1620)
apply model preferences in guided flow for milestone planning (#1614)
sf: GitHub sync extension — auto-sync to Issues, PRs, Milestones (#1603)
add SF_PROJECT_ID env var to override project hash (#1600)
add SF_HOME env var to override global ~/.sf directory (#1566)
sf: add 13 enhancements to /sf doctor (#1583)
feat(ui): minimal SF welcome screen on startup (#1584)

Fixed

recover + prevent #1364 .sf/ data-loss (v2.30.0–v2.38.0) (#1635)
treat summary as terminal artifact even when roadmap slices are unchecked (#1632)
sf: close residual #1364 data-loss vectors on v2.36.0+ (#1637)
auto-resolve npm subpath exports in extension loader (#1624)
create node_modules symlink for dynamic import resolution in extensions (#1623)
filter cross-milestone errors from health tracker escalation (#1621)
move unit closeout to run immediately after completion (#1612)
use pathspec exclusions in smartStage to prevent hanging on large repos (#1613)
add auto-fix for premature slice completion deadlock in doctor (#1611)
resolve ${VAR} env references in MCP client .mcp.json configs (#1609)
return "dispatched" after doctor heal to prevent session race (#1580) (#1610)
update Anthropic OAuth endpoints to platform.claude.com (#1608)
lazy-open SF database on first tool call in manual sessions (#1606)
sf: detect anthropic-vertex in provider doctor (#1598)
sf: tighten prompt automation contracts (#1556)
sf: harden auto-mode agent loop — session teardown, unit correlation, sidecar perf (#1592)
break remaining shared/mod.js barrel imports in report generation chain (#1588)
apply pi manifest opt-out to extension-discovery.ts (#1545)
detect worktree paths resolved through .sf symlinks (#1585)

Changed

sf: unify sidecar mini-loop into main dispatch path (#1617)
auto-loop: initial cleanup — hoist constant, cache prefs per iteration (#1616)
sf: add 30K char hard cap on prompt preamble (#1619)
sf: replace stuck counter with sliding-window detection (#1618)
auto-loop: 5 code smell fixes (#1602)
sf: replace session-scoped promise bridge with per-unit one-shot (#1595)
sf: remove prompt compression subsystem (~4,100 lines) (#1597)
sf: crashproof stopAuto with independent try/catch per cleanup step (#1596)

2.38.0 - 2026-03-20

Added

sf: ADR-004 — derived-graph reactive task execution (#1546)
add anthropic-vertex provider for Claude on Vertex AI (#1533)

Fixed

ci: reduce GitHub Actions minutes ~60-70% (~10k → ~3-4k/month) (#1552)
sf: reactive batch verification + dependency-based carry-forward (#1549)
sf: enforce backtick file paths in task plan IO sections (#1548)

2.37.1 - 2026-03-20

Fixed

interactive guard menu for remote auto-mode sessions (#1507) (#1524)
use pull_request_target so AI triage has secret access on PRs
cmux library directory incorrectly loaded as extension (#1537)
separate pi-tui-dependent layout utils to fix report generation (#1527)
clarify session lock loss diagnostics (#1535)
#1526: auto-mode worktree commits land on main instead of milestone branch (#1534)

2.37.0 - 2026-03-20

Added

dashboard: two-column layout with redesigned widget (#1530)
integrate cmux with sf runtime (#1532)

Fixed

add session-level search budget to prevent unbounded native web search (#1309) (#1529)

2.36.0 - 2026-03-20

Added

deprecate agent-instructions.md in favor of AGENTS.md / CLAUDE.md (#1492) (#1514)
AI-powered issue and PR triage via Claude Haiku (#1510)

Fixed

preserve user messages during abort with origin-aware queue clearing (#1439) (#1521)
remove broken SwiftUI skill and add CI reference check (#1476) (#1520)
wire escalateTier into auto-loop retry path (#1505) (#1519)
prevent bare /sf from stealing session lock from running auto-mode (#1507) (#1517)
wire dead token-profile defaults and add /sf rate command (#1505) (#1516)
prevent false-positive session lock loss during sleep/event loop stalls (#1512) (#1513)
sf: filter non-milestone directories from findMilestoneIds (#1494) (#1508)
sf: accept 'passed' as terminal validation verdict (#1429) (#1509)
add missing imports breaking CI build (#1511)
prevent ensureGitignore from adding .sf when tracked in git (#1364) (#1367)
check project root .env when secrets gate runs in worktree (#1387) (#1470)
realign cwd before dispatch + clean stale merge state on failure (#1389) (#1400)
create milestones/ directory in worktree when missing (#1374)
inject network_idle warning into hook prompts (#1345) (#1401)
verify symlink after migration + fix test failures (#1377) (#1404)
validate CWD instead of project root when running from a SF worktree (#1317) (#1504)
sf: detect initialized health widget projects (#1432)
smarter .sf root discovery — git-root anchor + walk-up replaces symlink hack (#1386)
correct SF-WORKFLOW.md fallback path and sync to agentDir (#1375)
always include reasoning.encrypted_content for OpenAI reasoning models
sf: avoid EISDIR crash in file loader
sf: open existing database on inspect

2.35.0 - 2026-03-19

Added

sf: add /sf changelog command with LLM-summarized release notes (#1465)

Fixed

restore lsp single-server selector export
mcp: preserve args for mcp_call tool invocations (#1354)
accumulate session cost independently of message array (#1423)
resolve CI failures — scope provider check, fix Windows path, correct severity
close 5 doctor coverage gaps — providers, lock dir, integration branch, orphaned worktrees
add PID self-check to guided-flow crash lock detection (#1398)
prefs: close merge, validation, serialization, and docs gaps

Changed

deduplicate error emission and message patterns in agent-core (#1444)
simplify settings manager with generic setter helpers (#1461)
consolidate theme files and remove manual schema (#1478)
extract overlay layout and compositing from TUI into separate module (#1482)
extract slash command handlers from interactive-mode (#1485)
remove dead code (unused exports) (#1486)
extract retry handler and compaction orchestrator from agent-session
deduplicate rendering patterns in markdown and keys
consolidate shared code between OpenAI providers
deduplicate RPC mode shared patterns
extract shared tree rendering utilities
consolidate OAuth callback server and helper utilities
extract shared file lock utilities
consolidate resource loader with generic update/dedupe methods
consolidate model switching logic in agent-session
extract shared helpers in compaction module
deduplicate toPosixPath, ZERO_USAGE, and shortenPath utilities
consolidate 9 emit methods in extension runner into shared invokeHandlers
consolidate extension type guards and inline handler type aliases
consolidate duplicate patterns in LSP module

2.34.0 - 2026-03-19

Added

auto-generate OpenRouter model registry from API + add missing models (#1407) (#1426)

Fixed

release stranded bootstrap locks and handle re-entrant reacquire (#1352)
add JS fallbacks for wrapTextWithAnsi and visibleWidth when native addon unavailable (#1418) (#1428)
emit agent_end after abort during tool execution (#1414) (#1417)
auto-discard bootstrap crash locks and clean auto.lock on exit (#1397)
harden quick-task branch lifecycle — disk recovery + integration branch guard (#1342)
skip verification retry on spawn infra errors (ETIMEDOUT, ENOENT) (#1340)
keep external SF state stable in worktrees (#1334)
stop excluding all .sf/ from commits — only exclude runtime files (#1326) (#1328)
handle ECOMPROMISED in uncaughtException guard and align retry onCompromised (#1322) (#1332)

2.33.1 - 2026-03-19

Fixed

clean up stale numbered lock files and harden signal/exit handling (#1315) (#1323)
worktree sync and home-directory safety check (#1311, #1317) (#1322)

Changed

remove orphaned mcporter extension manifest (#1318)

2.33.0 - 2026-03-19

Added

add live regression test harness for post-build pipeline validation (#1316)

Fixed

align retry lock path with primary lock settings to prevent ECOMPROMISED (#1307)
skip symlinks in makeTreeWritable to prevent EPERM on NixOS/nix-darwin (#1303)
handle Windows EPERM on .sf migration rename with copy+delete fallback (#1296)
add actionable recovery guidance to crash info messages (#1295)
resolve main repo root in worktrees for stable identity hash (#1294)
merge quick-task branch back to original after completion (#1293)

Changed

extract tryMergeMilestone to eliminate 4 duplicate merge paths in auto.ts (#1314)
dispatch loop hardening — defensive guards, regression tests, lock alignment (#1310)
extract parseUnitId() to centralize unit ID parsing (#1282)
extract getErrorMessage() helper to eliminate 65 inline duplicates (#1280)
consolidate DB-fallback inline functions in auto-prompts (#1276)

2.32.0 - 2026-03-19

Added

always-on health widget and visualizer health tab expansion (#1286)
environment health checks, progress score, and status integration (#1263)

Fixed

skip crash recovery when auto.lock was written by current process (#1289)
load worktree-cli extension modules via jiti instead of static ESM imports (#1285)
sf: prevent concurrent dispatch during skip chains (#1272) (#1283)
skip non-artifact UAT dispatch in auto-mode (#1277)

Changed

deduplicate knownUnitTypes and STATE_REBUILD_MIN_INTERVAL_MS constants (#1281)
extract prompt builder helpers for inlined context and source file lists (#1279)
extract createGitService() factory, remove debug logs (#1278)
extract dispatchUnit helper, inline dead buildDocsCommitInstruction (#1275)
unify unit-type switch statements into lookup map (#1273)

2.31.2 - 2026-03-18

Fixed

sf: stop replaying completed run-uat units (#1270)

2.31.1 - 2026-03-18

Fixed

prevent false-positive 'Session lock lost' during auto-mode (#1257)

2.31.0 - 2026-03-18

Added

add aws-auth extension for automatic Bedrock credential refresh (#1253)
add -w/--worktree CLI flag for isolated worktree sessions (#1247)

Fixed

remove stale git-commit assertion in worktree test after commit_docs removal
remove commit_docs test that broke CI after type removal (#1258)
replace blanket git clean .sf/ with targeted runtime file removal (#1252)
invalidate caches inside discuss loop to detect newly written slice context (#1249)
robust prose slice header parsing — handle H1-H4, bold, dots, no-separator variants (#1248)
clean up stranded .sf.lock/ directory to prevent false lock conflicts (#1251)

Changed

remove dead commit_docs preference (incompatible with external .sf/ state) (#1258)

2.30.0 - 2026-03-18

Added

add extension manifest + registry for user-managed enable/disable (#1238)
add model health indicator to auto-mode progress widget (#1232)
simplify auto pipeline — merge research into planning, mechanical completion (ADR-003) (#1235)
add create-sf-extension skill (#1229)
add built-in skill authoring system (ADR-003) (#1228)
prefs: two-step provider→model picker in preferences wizard (#1218)
workflow templates — right-sized workflows for every task type (#1185)

Fixed

align react-best-practices skill name with directory name (#1234)
gate slice progression on UAT verdict, not just file existence (#1241)
invalidate caches before roadmap check in /sf discuss (#1240)
use shell: true for LSP spawn on Windows to resolve .cmd executables (#1233)
increase headless new-milestone timeout and limit investigation scope (#1230)
clean untracked .sf/ files before squash-merge to prevent failure (#1239)
graceful fallback when native addon is unavailable on unsupported platforms (#1225)
replace ambiguous double-question in discussion reflection step (#1226)
kill non-persistent bg processes between auto-mode units (#1217)
Two-column dashboard layout with task checklist (#1195)

Changed

move .sf/ to external state directory with symlink (ADR-002) (#1242)
replace MCPorter with native MCP client (#1210)
extend json-persistence utility and migrate top JSON I/O callsites (#1216)
deduplicate dispatchDoctorHeal — keep single copy in commands-handlers.ts (#1211)
remove facade re-exports from auto.ts — import directly from source modules (#1214)
extract shared HTTP client for remote-questions adapters (#1212)

2.29.0 - 2026-03-18

Added

add searchExcludeDirs setting for @ file autocomplete blacklist (#1202)
ci: automate prod-release with version bump, changelog, and tag push (#1194)
auto-open HTML reports in default browser on manual export (#1164)
upgrade to Node.js 24 LTS across CI, Docker, and package config (#1165)
add /sf logs command to browse activity, debug, and metrics logs (#1162)
browser-tools: configurable screenshot resolution, format, and quality (#1152)
add pre-commit secret scanner and CI secret detection (#1148)
mcporter: add .sf/mcp.json per-project MCP config support (#1141)
metrics: add API request counter for copilot/subscription users (#1140)
per-milestone depth verification + queue-flow write-gate (#1116)
add OSC 8 clickable hyperlinks for file paths in export notifications (#1114)
park/discard actions for in-progress milestones (#1107)
ci: implement three-stage promotion pipeline (Dev → Test → Prod) (#1098)
cache-ordered prompt assembly and dashboard cache hit rate (#1094)
add comprehensive API key manager (/sf keys) (#1089)
ci: add multi-stage Dockerfile for CI builder and runtime images
sf: add directory safeguards for system/home paths (#1053)
enhance HTML report with derived metrics, visualizations, and interactivity (#1078)
auto-extract lessons to KNOWLEDGE.md on slice/milestone completion (#711) (#1081)
auto-create PR on milestone completion (#687) (#1084)
wire semantic chunking, add preferences, metrics, and docs
add token optimization suite for prompt caching, compression, and smart context selection
autocomplete: add /thinking completions, SF subcommand descriptions, and test coverage (#1019)
add respectGitignoreInPicker setting for @ file picker (#979) (#1016)
prefs: add search_provider to preferences.md (#1001)
add --events flag for JSONL stream filtering (#1000)
add 10 bundled skills for UI, quality, and code optimization (#999)
ux: group model list by provider in /sf prefs wizard (#993)
add --answers flag for headless answer injection (#982)
add project onboarding detection and init wizard

Fixed

ci: add npm publish to prod-release and prevent mid-deploy cancellation (#1208)
ci: use env var for Discord webhook secret in if-condition
complete shared barrel exports and add import-claude to help text (#1198)
broaden unit-runtime path sanitization to strip all unsafe characters
detect stale bundled resources via content fingerprint (#1193)
include promptGuidelines in customPrompt path of buildSystemPrompt (#1187)
prevent branch-mode merge fallback from firing in worktree isolation (#1183)
treat auto-discovered verification failures as advisory, not blocking (#1188)
ci: remove @latest npm promotion from pipeline
ci: skip GitHub release creation when tag already exists
handle Windows non-ASCII paths in cpSync with copyFileSync fallback (#1181)
non-blocking verification gate for auto-discovered commands (#1177)
add defensive guards against undefined .filter() in auto-mode dispatch/recovery (#1180)
sync living docs (DECISIONS/REQUIREMENTS/PROJECT/KNOWLEDGE) between worktree and project root (#1173)
route needs-discussion phase to interactive flow instead of stopping (#1175)
run resource-skew check before early TTY gate
move TTY check before heavy initialization to prevent process hang
ci: skip init smoke test in non-TTY CI environments (#1172)
ci: skip publish when version already exists on npm (#1166)
ci: use local binary for pipeline smoke test (#1163)
prevent concurrent SF sessions from overlapping on same project (#1154)
exclude completion-transition errors from health escalation at task level (#1157)
ci: skip git-diff guard in prepublishOnly during CI (#1160)
/sf quick respects git isolation: none preference (#1156)
text-based fallbacks for RPC mode where TUI widgets produce empty turns (#1112)
headless-query: use jiti to load extension .ts modules (#1143)
pause auto-mode when env variables needed instead of blocking (#1147)
ci: fix dev-publish version stamp and platform sync (#1145)
google-search: add 30s timeout to Gemini API call (#1139)
verification-gate: sanitize preference commands with isLikelyCommand (#1138)
auto-dashboard: show trigger task label for hook units (#1136)
auto-worktree: detect worktree structurally when originalBase is null (#1135)
model-resolver: prefer provider's recommended variant over saved base model (#1131)
auto-worktree: auto-commit project root dirty state before milestone merge (#1130)
guided-flow: support re-discuss flow for already-discussed slices (#1129)
dispatch guard skips parked milestones — they no longer block later milestone dispatch (#1126)
worktree reassess-roadmap loop — existsSync fallback in checkNeedsReassessment (#1117)
lsp: use where.exe on Windows to resolve command paths (#1134)
sf-db: auto-initialize database when tools are called (#1133)
inline preferences path to fix remote questions setup (#1110) (#1111)
ci: add safe.directory for containerized pipeline job (#1108)
remove .sf/ from tracking, ignore entire directory
update tests for god-file decomposition
strip model variant suffix for API key auth (#1097) (#1099)
match both milestoneId and sliceId when filtering duplicate blocker cards
add dispatch stall guards to prevent auto-mode pause after slice completion (#1073) (#1076)
prevent summarizing phase stall by retrying dropped agent_end events (#1072) (#1074)
use atomic writes for completed-units.json and invalidate caches in db-writer (#1069)
reject prose Verify: fields from being executed as shell commands (#1066) (#1068)
restore session model on error instead of reading stale global prefs (#1065) (#1067)
prevent run-uat re-dispatch loop when roadmap checkbox update fails (#1063) (#1064)
inline compareSemver in sf extension to fix broken relative import (#1058)
disable reasoning for MiniMax-M2.5 in alibaba-coding-plan provider (#1003) (#1055)
improve LSP diagnostics when no servers detected (#1082) (#1086)
prevent summarizing phase stall by retrying dropped agent_end events (#1072)
switch alibaba-coding-plan to OpenAI-compat endpoint with proper compat flags (#1003)
add barrel files for remote-questions, ttsr, and shared extensions (#1048)
consolidate frontmatter parsing into shared module (#1040)
always ensure tasks/ directory exists for slice units (#900) (#1050)
centralize SF timeout and cache constants (#1038)
improve RemotePromptRecord.ref type safety (#1041)
document silent catch handlers in browser-tools (#1037)
use literal union types in RuntimeErrorJSON for type safety (#1034)
extract sanitizeError to shared module and apply to ask-user-questions (#1033)
deduplicate formatDateShort into shared/format-utils (#1032)
add error handlers to visualizer overlay promise chains (#1027)
security: use execFileSync in resolve-config-value to prevent shell operator bypass (#1025)
security: use execFile for browser URL opening to prevent shell injection (#1022)
prevent duplicate milestone IDs when generating multiple before persisting (#961) (#1018)
consolidate duplicate formatting functions (#1011)
sf: delete orphaned complexity.ts (#1005)
search: consolidate duplicate Brave API helpers (#1010)
merge worktree to main when all milestones complete (#962) (#1007)
sf: deduplicate resolveGitHeadPath function (#1015)
add missing package.json subpath exports and oauth stubs (#1014)
sf: consolidate string-array normalizer functions into shared utility (#1009)
browser-tools: document intentional silent catches, add debug logging for others (#1013)
consolidate duplicate VerificationCheck/Result type definitions (#1008)
sf: add GIT_NO_PROMPT_ENV to gitFileExec and deduplicate constant (#1006)
remote-questions: add null coalesce for optional threadUrl (#1004)
auto-resume on transient server errors, not just rate limits (#886) (#957)
replace ambiguous compound question in reflection step (#963) (#1002)
sf: remove STATE.md update instructions from all prompts (#983)
sf: clear all caches after discuss dispatch so picker sees new CONTEXT files (#981)
auto: dispatch retry after verification gate failure (#998)
enforce SFError usage and activate unused error codes (#997)
unify extension discovery logic (#995)
deduplicate tierLabel/tierOrdinal exports (#988)
deduplicate getMainBranch implementations (#994)
add error handling for unhandled promise rejections (#992)
deduplicate formatTokenCount into shared format-utils (#987)
add debug logging to silent catch blocks in auto.ts (#986)
deduplicate formatDuration into shared format-utils (#989)
add exports fields to pi-tui and pi-agent-core packages (#991)
remove dead github-client.ts (never imported) (#990)
deduplicate parseJSONL and unify MAX_JSONL_BYTES constant (#985)
remove broken ./hooks export path from pi-coding-agent (#984)
inline bundled extension path parsing in subagent

Changed

extract numeric validation helpers in prefs wizard (#1205)
deduplicate projectRoot() and dispatchDoctorHeal() between commands.ts and commands-handlers.ts (#1203)
extract shared JSON persistence utility, migrate metrics + routing-history + unit-runtime (#1206)
remove unused preferences-hooks.ts re-export facade (#1207)
remove commands.ts re-exports, import directly from submodules (#1204)
extract frontmatter body extraction into shared helper (#1201)
deduplicate projectRoot() — single source in commands.ts (#1197)
extract PER_REQUEST_TIMEOUT_MS to shared types (#1196)
update state — S01 planned, ready for execution
M001-1ya5a3/S01: auto-commit after state-rebuild
M001-1ya5a3/S01: auto-commit after research-slice
decompose doctor.ts into types, format, and checks modules (#1096)
extract milestone-ids and guided-flow-queue from guided-flow.ts (#1095)
decompose preferences.ts, populate skills and models modules (#1091)
decompose auto.ts into 6 focused modules (#1088)
decompose commands.ts into 5 focused modules
remove redundant test file, identify consolidation targets (#1070)
batch 2 — consolidate preferences, convert 8 more files to node:test (#1061)
consolidate tests by area, standardize on node:test (#1059)
skip initResources when version matches, consolidate startup I/O (#1052)
centralize magic numbers into constants.ts (#1044)
resource-loader: extract syncResourceDir to eliminate triplicated sync logic (#1036)
bg-shell: split 1604-line god file into tool, command, and lifecycle modules (#1049)
headless: split 772-line god file into events, UI, and context modules (#1047)
sf: extract safeCopy/safeMkdir helpers to replace repetitive try/catch FS patterns (#1043)
sf: extract atomicWriteSync utility to replace 6 duplicate write-tmp-rename patterns (#1046)
sf: unify duplicate padRight/truncate into shared format-utils (#1045)
loader: consolidate 5 duplicate package.json version reads into cached helper (#1042)
headless: remove duplicate jsonLine, use serializeJsonLine from pi-coding-agent (#1039)
fix unicode regex discrepancy and standardize function naming (#1031)
fix chalk version mismatch and document pinned dependency rationale (#1030)
add concurrency limits to unbounded Promise.all operations (#1029)
optimize SSE streaming buffer to avoid quadratic string growth (#1024)
reduce makeTreeWritable calls from 6 to 2 on startup (#1023)
add domain-grouped re-exports for preferences module (#996)

2.28.0 - 2026-03-17

Added

sf headless query command for instant, read-only state inspection — returns phase, cost, progress, and next-unit as parseable JSON without spawning an LLM session
/sf update slash command for in-session self-update
/sf export --html --all for retrospective milestone reports

Fixed

Failure recovery & resume safeguards: atomic file writes, OAuth fetch timeouts (30s), RPC subprocess exit detection, extension command context guards, bash temp file cleanup, settings write queue flush, LSP init retry with backoff, crash detection on session resume, blob garbage collection
Consolidated duplicate mcp-server.ts into single implementation
Consolidated duplicate bundled-extension-paths.ts into single module
Removed duplicate marketplace-discovery.test.ts test file
Established npm as canonical package manager
Exported RPC utilities from pi-coding-agent public API
Prompt system requires grammatical narration for clearer agent output

Changed

Updated documentation for v2.26 and v2.27.0 features
Documented all preferences.md fields in reference and template
Removed stale .pi/agents/ files superseded by built-in agent definitions

2.27.0 - 2026-03-17

Added

HTML report generator with progression index across milestones
Crash recovery for parallel orchestrator — persisted state with PID liveness detection
Headless orchestration skill with supervised mode
Verification enforcement gate for milestone completion
git.manage_gitignore preference to opt out of automatic .gitignore changes

Changed

Encapsulated auto.ts state into AutoSession class (cleaner session lifecycle)
Extracted 7 focused modules from auto.ts (auto-worktree-sync, resource staleness, stale escape)
TUI dashboard cleanup, dedup, and feature improvements
Reordered visualizer tabs and HTML report sections into logical groupings

Fixed

Single ENTER now correctly submits slash command argument autocomplete
Web search loop broken with consecutive duplicate guard
Transient network errors retried before model fallback
Parallel worker PID tracking, spawn-status race, and exit persistence
/sf discuss now recommends next undiscussed slice
Roadmap parser allows suffix text after ## Slices heading
User's model choice no longer overwritten when API key is temporarily unavailable
Reassess-roadmap skip loop broken by preventing re-persistence of evicted keys
LSP command resolution and ENOENT crash on Windows/MSYS
Dispatch plan-slice when task plan files are missing
Reduced CPU usage on long auto-mode sessions
Orphan-prone child processes reaped across session churn
Symlinked skill directories resolved in always_use_skills and preferences
Replan-slice infinite loop and non-standard finish_reason crash
Skip slice plan commit when commit_docs is false
Context-pressure monitor wired to send wrap-up signal at 70%
Missing STATE.md in fresh worktree no longer deadlocks pre-dispatch health gate
Stale runtime unit files for completed milestones cleaned on startup
Broken install detection with Windows symlink fallback
Auto-restart headless mode on crash with exponential backoff
Generic type preserved on resolveModelId through resolution

2.26.0 - 2026-03-17

Added

Model selector grouped by provider with model type, provider, and API docs fields
require_slice_discussion option to pause auto-mode before each slice for human review
Discussion status indicators in /sf discuss slice picker
Worker NDJSON monitoring and budget enforcement for parallel orchestration
sf_generate_milestone_id tool for multi-milestone unique ID generation
Alt+V clipboard image paste shortcut on macOS
Hashline edit mode integration into active workflow
Fallback parser for prose-style roadmaps without ## Slices section

Fixed

Windows path normalization in LLM-visible text to prevent bash failures
Async bash job completion no longer triggers spurious LLM turns
Native web_search limited to max 5 uses per response
Completed milestone with summary no longer re-entered as active on resume
Replan-slice artifact verification breaks infinite replanning-slice loop
Auto-heal STATE.md missing in preDispatchHealthGate
Worktree artifact copy includes STATE.md, KNOWLEDGE.md, OVERRIDES.md
Transient network errors marked as retriable in Anthropic provider
needs-remediation treated as terminal validation verdict to prevent hard loop
Post-hook doctor uses fixLevel 'all' to fix roadmap checkboxes
task_done_missing_summary fixable in doctor to prevent validate-milestone skip loop
BMP clipboard images on WSL2 handled via wl-paste PNG conversion
Extended idle timeout for headless new-milestone
EPIPE handling in LSP sendNotification with proper process exit wait
Debug logging for silent early-return paths in dispatchNextUnit
Untracked .sf/ state files removed before milestone merge checkout
Crash prevention when cancelling OAuth provider login dialog
Resource staleness check compares sfVersion instead of syncedAt
Unique temp paths in saveFile() to prevent parallel write collisions
Validation/summary file generation for completed milestones during migration
Cache invalidation before initial state derivation in startAuto
Headless mode no longer exits early on progress notifications containing 'complete'

Removed

Symlink-based development workflow (reverted PR #744)

Changed

Explicit Gemini OAuth ToS warning added to README — recommends API keys over OAuth
Documentation updated for v2.24 release features
Bug report template updated with model type, provider, and API docs fields

2.25.0 - 2026-03-16

Added

Native web search results rendering in TUI with PREFER_BRAVE_SEARCH environment variable toggle
Meaningful commit messages generated from task summaries instead of generic messages
Incremental memory system for auto-mode sessions
Visualizer enriched with stats and discussion status
14 new E2E smoke tests for CLI verification

Fixed

Phantom skip loop caused by stale crash recovery context
Skip-loop now interruptible and counts toward lifetime cap
Cache invalidation consistency — orphaned invalidateStateCache() calls replaced, DB artifact cache included in invalidateAllCaches()
Plan checkbox reconciliation on worktree re-attach after crash

Changed

Removed unnecessary as any casts, dead exports, and duplicate code
Updated documentation for v2.22 and v2.23 release features

2.24.0 - 2026-03-16

Added

Parallel milestone orchestration — run multiple workers across phases simultaneously
Dashboard view for parallel workers with 80% budget alert
Headless new-milestone command for programmatic milestone creation
Interactive update prompt on startup when a new version is available
Symlink-based development workflow for src/resources/
Descriptions added to /sf autocomplete commands
validate-milestone phase and dispatch

Fixed

Sync completed-units.json across worktree boundaries
Worktree artifact verification uses correct base path
Auto-resume auto-mode after rate limit cooldown
Raise maxDelayMs default from 60s to 300s for better rate-limit handling
Downgrade missing_tasks_dir to warning for completed slices
Prevent stale state loop on auto-mode restart with existing worktree
Always sync bundled resources and clean stale files
Add stop reason to every auto-mode stop
Skip redundant checkout in worktree merge when main already current
Prevent runaway execute-task when task plan missing after failed research
Fix read-only file permissions after cpSync from Nix store
Fix parallel sendMessage calls missing required fields
Strip clack UI from postinstall, keep silent Playwright download

Changed

Lazy-load LLM provider SDKs to reduce startup time

2.23.0 - 2026-03-16

Added

VS Code extension — full extension with chat participant, RPC integration, marketplace publishing under FluxLabs publisher
sf headless — redesigned headless mode for full workflow orchestration: auto-responds to prompts, detects completion, supports --json output and --timeout flags
sf sessions — interactive session picker for browsing and resuming saved sessions (#721)
10 new browser tools — browser_save_pdf, browser_save_state, browser_restore_state, browser_mock_route, browser_block_urls, browser_clear_routes, browser_emulate_device, browser_extract, browser_visual_diff, browser_zoom_region, browser_generate_test, browser_check_injection, browser_action_cache (#698)
Structured discussion rounds — ask_user_questions in guided-discuss-milestone for better requirement gathering (#688)
validate-milestone prompt — milestone validation prompt and template
models.json resolution — custom model definitions with fallback to ~/.pi/agent/models.json

Changed

Background shell performance — optimized hot path with parallel git queries and lazy workspace validation

Fixed

Forensics uses SF_VERSION env var instead of fragile package.json path traversal; now worktree-aware to prevent stale root misdiagnosis
Background commands rewritten to prevent pipe-open hang; stalled-tool detection added with prompt guidance
Auto mode breaks infinite skip loop on repeatedly-skipped completed units
Roadmap parser expands range syntax in depends (e.g. S01-S04 → S01,S02,S03,S04)
Empty scaffold plan files rejected during plan-slice artifact verification (#699)
Anti-pattern rule prevents bash & usage that causes agent hangs (#733)
Shift-Tab navigates to previous tab in workflow visualizer (#717)
Capture resolutions executed after triage instead of only classified (#714)
Screenshot constraining uses independent width/height caps (#725)
auto.lock written at startup; remote sessions detected in dashboard (#723)
Cross-platform test compatibility with process.ppid
CSP nonce, dead branch cleanup, restart cooldown fixes
CI fix: pi.getActiveTools() replaces ctx.getActiveTools()

2.22.0 - 2026-03-16

Added

/sf forensics — post-mortem investigation of auto-mode failures with structured root-cause analysis
Claude marketplace import — import Claude marketplace plugins as namespaced SF components
MCP server mode — run SF as an MCP server with --mode mcp
/review skill — code review with diff-aware context
/test skill — test generation and execution
/lint skill — linting integration
GitHub API client — diff-aware context injection and tiktoken-based token counting
File watcher — chokidar-based file watching for live updates
git.isolation: "none" — disable worktree isolation for projects that don't need it
E2E smoke tests — end-to-end test suite for extension integration
Subcommand help — inline help text for all SF subcommands

Fixed

verificationBudget passed correctly to execute-task prompt template
Background shell worktree cwd detection normalized to prevent stale paths
Skill loading made an active directive in auto-mode units
Auto-worktree validated as real git worktree before use
MCP server discovery from project-root .mcp.json
Command injection surface eliminated in diff-context; file-watcher path resolution hardened
Thinking level clamped to low for gpt-5.x models
completedAt coerced to String in visualizer changelog sort
Warp terminal added to unsupported Ctrl+Alt shortcut list
Fractional slice IDs (e.g. S03.5) supported in roadmap parser
executorContextConstraints provided to plan-slice template
Worktree state synced to project root after each unit
Initial state derived from worktree when one exists
Hardware cursor auto-enabled in Warp terminal
CSI 3J scrollback clear removed from TUI full redraws
Worktree edge cases — resolveGitDir, captureIntegrationBranch guard, doctor path

2.21.0 - 2026-03-16

Added

Browser tools TypeScript conversion — browser-tools/core.js converted to TypeScript with c8 test coverage
SSRF protection on fetch_page — blocks private IPs, metadata endpoints, and non-HTTP protocols
Stale async job cancellation — heuristic prevents outdated results in auto-mode

Changed

Pause/resume recovery — reuses crash recovery infrastructure for more reliable context restoration
Build scripts extracted — inline package.json scripts moved to standalone files for cross-platform support
Help text deduplicated — consolidated across CLI entry points
Dependency alignment — @types/mime-types moved to devDependencies, chalk versions consolidated

Fixed

Task counter display no longer shows "task 5/4" after loop recovery
Browser-tools TypeScript type errors in CI
4 small issues (#663): Windows GitHub Copilot login, Tavily display, MCPorter auto-install, notification preferences
Cross-platform validate-pack script compatibility

2.20.0 - 2026-03-16

Added

Telegram remote questions — receive and respond to SF questions via Telegram bot alongside existing Slack and Discord channels (#645)
/sf quick — execute a quick task with SF guarantees (atomic commits, state tracking) without the full planning overhead (#437)
/sf mode — workflow mode system with solo and team presets that configure defaults for milestone IDs, git commit behavior, and documentation settings (#651)
/sf help — categorized command reference with descriptions for all SF subcommands (#630)
/sf doctor — 7 runtime health checks with auto-fix for common state corruption issues (#646)
Agent instructions injection — agent-instructions.md loaded into every agent session for persistent per-project behavioral guidance (#437)
Skill lifecycle management — telemetry tracking, health dashboard, and heal-skill command for managing custom skills (#599)
SQLite context store — surgical prompt injection from structured knowledge base for precise context engineering (#619)
Context-window budget engine — proportional prompt sizing that allocates context budget across system prompt sections based on relevance (#660)
LSP activated by default — Language Server Protocol now auto-activates with call hierarchy, formatting, signature help, and synchronized edits (#639)
Extension smoke tests — CI catches import failures, circular deps, and module resolution issues across all bundled extensions
sf --debug mode — structured JSONL diagnostic logging for troubleshooting dispatch and state issues (#468)
Worktree post-create hook — run custom setup scripts when SF creates a new worktree (#597)

Fixed

CPU spinning from regex backtracking — replaced [\s\S]*? regex in preferences parser with indexOf-based scanning (#468)
Model config bleed between concurrent SF instances — isolated model configuration per session (#650)
Onboarding wizard repeats — skip onboarding for extension-based providers that don't require auth.json credentials (#589)
Session tool rebuild on cwd change — tools now rebuild correctly when working directory changes mid-session (#633)
Auto mode state derivation after discussion fallthrough — re-derives state to prevent stale dispatches (#609)
Milestone branch preservation on auto stop — prevents work loss when stopping auto mode (#601)
Infinite loop when milestone detection silently fails — findMilestoneIds now logs errors and warns instead of looping (#456)
Google Search OAuth fallback — uses Google Cloud Code Assist API when GEMINI_API_KEY is not set (#466)

Changed

Preferences wizard — replaced serial flow with categorized menu for faster configuration (#623)
Slack remote questions — brought to feature parity with Discord integration (#628)
YAML support in hooks — hooks now support YAML configuration alongside JSON (#637)

2.19.0 - 2026-03-16

Added

Workflow visualizer — /sf visualize opens a full-screen TUI overlay with four tabs: Progress (milestone/slice/task tree), Dependencies (ASCII dep graph), Metrics (cost/token bar charts), and Timeline (chronological execution history). Supports Tab/1-4 switching, per-tab scrolling, auto-refresh every 2s, and optional auto-trigger after milestone completion via auto_visualize preference (#626)
Mid-execution capture & triage — /sf capture lets you fire-and-forget thoughts during auto-mode. The system triages accumulated captures at natural seams between tasks, classifies impact into five types (quick-task, inject, defer, replan, note), and proposes action with user confirmation. Dashboard shows pending capture count badge. Capture context injected into replan and reassess prompts (#512)
Dynamic model routing — complexity-based model routing classifies units into light/standard/heavy tiers and routes to cheaper models when appropriate, reducing token consumption 20-50% on capped plans. Includes budget-pressure-aware routing, cross-provider cost comparison, escalation on failure, adaptive learning from routing history (rolling 50-entry window with user feedback support), and task plan introspection (code block counting, complexity keyword detection) (#579)
Feature-branch lifecycle integration test — proves milestone worktrees branch from and merge back to feature branches, never touching main (#624)
Discord integration parity with Slack — plus new remote-questions documentation (#620)

Fixed

Absolute paths in auto-mode prompts — write-target variables now passed as absolute paths, eliminating LLM path confusion in worktree contexts that caused artifacts written to wrong location and loop detection (#627)
Worktree lifecycle on mid-session milestone transitions (#616, #618)
Eager template cache warming — prevents version-skew crash in long auto-mode sessions (#621)

2.18.0 - 2026-03-16

Added

Milestone queue reorder — /sf queue supports reordering milestone execution priority with dependency-aware validation, persistent ordering via .sf/QUEUE-ORDER.json (#460)
.sf/KNOWLEDGE.md — persistent project-specific context file loaded into agent prompts. New /sf knowledge command with rule, pattern, and lesson subcommands for adding entries (#585)
Dynamic model discovery — runtime model enumeration from provider APIs (Ollama, OpenAI, Google, OpenRouter) with per-provider TTL caching and discovery adapters. New ProviderManagerComponent TUI for managing providers with auth status and model counts (#581)
Expanded preferences wizard — all configurable fields now exposed in the setup wizard, model ID validation, and updatePreferencesModels() for safe read-modify-write of model config (#580)
Comprehensive documentation — 12 new docs covering getting started, auto-mode, commands, configuration, token optimization, cost management, git strategy, team workflows, skills, migration, troubleshooting, and architecture (#605)
resolveProjectRoot() — all SF commands resolve the effective project root from worktree paths instead of using raw process.cwd(), preventing path confusion across worktree boundaries (#602)
1,813 lines of new tests — 13 new test files covering discovery cache, model discovery, model registry, models-json-writer, auto-worktree, derive-state-deps, in-flight tool tracking, knowledge, memory leak guards, preferences wizard fields, queue order, queue reorder E2E, and stale worktree cwd

Fixed

Heap OOM during long-running auto-mode sessions — four sources of unbounded memory growth: activity log serialized all entries for SHA1 dedup (now streaming writes with lightweight fingerprint), uncleaned activityLogState Map between sessions, unbounded completedUnits array (now capped at 200), and dirEntryCache/dirListCache growing without bounds (now evicted at 200 entries) (#611)
Stale worktree cwd after milestone completion — three-layer fix: escapeStaleWorktree() at auto-mode entry, unconditional cwd restore in stopAuto(), and cwd restore on partial merge failure (#608)
Worktree created from integration branch instead of main — createAutoWorktree reads integration branch from META.json, merge targets integration branch not hardcoded main (#606)
Milestone merge skipped in branch isolation mode — branch-mode fallback detects milestone/* branch and performs squash-merge (#603)
parseContextDependsOn() destroys unique milestone ID case — was lowercasing IDs, breaking dependency resolution (#604)
Tool-aware idle detection — prevents false interruption of long-running tasks in auto-mode (#596)
Remote questions onboarding crash — extracted saveRemoteQuestionsConfig into compiled src/ helper to avoid cross-boundary .ts import (#592)
showNextAction crash — falls back to select() when custom() returns undefined (#447, #615)

Changed

Comprehensive update to preferences reference and configuration guide (#614)
Auto-mode artifact writes scoped to active milestone worktree, preventing cross-milestone pollution (#590)

2.17.0 - 2026-03-15

Added

Token optimization profiles — budget, balanced, and quality presets that coordinate model selection, phase skipping, and context compression to reduce token usage by 40-60% on budget mode
Complexity-based task routing — automatically classifies tasks as simple/standard/heavy and routes to appropriate models, with persistent learning from routing history
git.commit_docs preference — set to false to keep .sf/ planning artifacts local-only, useful for teams where only some members use SF

Changed

Updated Ollama cloud provider model catalog

Fixed

Native binary hangs in SF auto-mode paths (#453)
Auto-mode can be stopped from a different terminal (#586)
Parse cache collision causing false loop detection on complete-slice (#583)
Exhaustive switch handling and cleanup in Google provider (#587)

2.16.0 - 2026-03-15

Added

/sf steer command — hard-steer plan documents during execution without stopping the pipeline
Native git operations via libgit2 — ~70 fewer process spawns per dispatch cycle
Native performance optimizations for deriveState, JSONL parsing, and path resolution
Default model upgraded to Opus 4.6 with 1M context variant
PR template and bug report issue template

Fixed

Auto-mode continues after guided milestone planning instead of stalling at "Milestone planned"
Git commands no longer fail when repo path contains spaces
Arrow key cursor updates and Shift+Enter newline insertion in TUI
Tool API keys loaded from auth.json at session startup
TypeScript errors resolved across extension, test, and async-jobs files

Changed

Hot-path lookup caching and error resilience optimizations
Extension type-checking added to CI pipeline

2.15.1 - 2026-03-15

Fixed

Auto-mode worktree path resolution — prompt templates now include working directory, preventing artifacts from being written to the wrong location and causing infinite re-dispatches
Auto-mode resource sync detection — gracefully stops when resources change mid-session instead of crashing
Auto-mode missing import for resolveSkillDiscoveryMode causing crash on startup
Auto-mode recovery hardened — checkbox verification falls through correctly, corrupt roadmaps fail verification instead of silently passing, atomic writes for completed-units.json, and task completion verified via artifacts not just file existence
Auto-mode progress widget now refreshes from disk every 5 seconds during unit execution instead of appearing frozen
Undo command now invalidates all caches (not just state cache), preventing stale results after undoing completed tasks

Changed

CI pipeline supports prerelease publishing with --tag next for testing before stable release

Added

Unit tests for auto-dashboard, auto-recovery, and crash-recovery modules (46 new tests)

2.15.0 - 2026-03-15

Added

8 new commands: budget enforcement, notifications, and quality-of-life improvements (#441)
Preferences schema validation: detects unknown/typo'd preference keys and surfaces warnings instead of silently ignoring them (#542)
Pipeline-aware prompts: each agent phase (research, plan, execute, complete) now knows its role in the pipeline, eliminating redundant code exploration between phases (#543)
Research depth calibration: three-tier system (deep/targeted/light) so agents match effort to actual complexity (#543)

Changed

Auto-mode decomposed into focused modules for maintainability (#534)
Dispatch logic extracted from if-else chain to dispatch table (#539)
v1 migration code gated behind dynamic import — only loaded when needed (#541)
Background shell module decomposed into focused modules
Unified cache invalidation into single invalidateAllCaches() function (#545)

Fixed

Executor agents now receive explicit working directory, preventing writes to main repo instead of worktree (#543)
Merge loop and .sf/ conflict auto-resolution in worktree model, git.isolation preference restored (#536)
Arrow keys no longer insert escape sequences as text during LLM streaming (#493)
YAML preferences parser hardened for OpenRouter model IDs with special characters (#488)
@ file autocomplete debounced to prevent TUI freeze on large codebases (#448)
Auto-mode stops cleanly when dispatch gap watchdog fails (#537)
Synchronous I/O removed from hot paths (#540)
Silent catch blocks now capture error references for crash diagnostics (#546)
ctx.log error in SF provider recovery path fixed
TUI resource leaks patched in loader, cancellable-loader, input, and editor components (#482)
Hardcoded ANSI escapes replaced with chalk for consistent terminal handling (#482)

2.14.4 - 2026-03-15

Fixed

Session cwd update — newSession() now updates the LLM's perceived working directory to reflect process.chdir() into auto-worktrees. Previously the system prompt was frozen at the original project root, causing the LLM to cd back and write files to the wrong location. This was the root cause of complete-slice and plan-slice loops in worktree-based projects.

2.14.3 - 2026-03-15

Fixed

Copy planning artifacts into new auto-worktrees — createAutoWorktree now copies .sf/milestones/, DECISIONS.md, REQUIREMENTS.md, PROJECT.md from the source repo into the worktree. Prevents plan-slice loops in projects with pre-v2.14.0 .gitignore.

2.14.2 - 2026-03-15

Fixed

Dispatch reentrancy deadlock — _dispatching flag was never reset after first dispatch, permanently blocking all subsequent unit dispatches. Wrapped in try/finally.
.gitignore self-heal — existing projects with blanket .sf/ ignore now auto-remove it on next auto-mode start, replacing with explicit runtime-only patterns so planning artifacts are tracked in git.
Discuss depth verification — render summary as chat text (markdown renders), use ask_user_questions for short confirmation only.

2.14.1 - 2026-03-15

Fixed

Quiet auto-mode warnings — internal recovery machinery (dispatch gap watchdog, model fallback chain) downgraded to verbose-only. Users only see warnings when action is needed.
Dispatch recovery hardening — artifact fallback when completion key missing, TUI freeze prevention, reentrancy guard, atomic writes, stale runtime record cleanup

2.14.0 - 2026-03-15

Added

Discussion manifest — mechanical process verification for multi-milestone context discussions
Session-internal /sf config — configure SF settings within a running session
Model selection UI — select list instead of free-text input for model preferences
Startup performance — faster SF launch via optimized initialization

Changed

Branchless worktree architecture — eliminated slice branches entirely. All work commits sequentially on milestone/<MID> within auto-mode worktrees. No branch creation, switching, or merging within a worktree. ~2600 lines of merge/conflict/branch-switching code removed.
.gitignore overhaul — planning artifacts (.sf/milestones/) are tracked in git naturally. Only runtime files are gitignored. No more force-add hacks.
Multi-milestone enforcement — depends_on frontmatter enforced in multi-milestone CONTEXT.md

Fixed

Auto-mode loop detection failures — artifacts on wrong branch or invisible after branch switch no longer possible (root cause eliminated by branchless architecture)
Nested worktree creation — auto-mode no longer creates worktrees inside existing manual worktrees, preventing wrong-repo state reads and "All milestones complete" false positives
Dispatch recovery hardening — artifact fallback when completion key missing, TUI freeze prevention on cascading skips, reentrancy guard, atomic writes, stale runtime record cleanup, git index.lock cleanup
Hook orchestration — finalize runtime records, add supervision, fix retry
Empty slice plan stays in planning — no longer incorrectly transitions to summarizing
Prefs wizard — launch directly from /sf prefs, fix parse/serialize cycle for empty arrays
Discussion routing — /sf discuss routes to draft when phase is needs-discussion

Removed

ensureSliceBranch(), switchToMain(), mergeSliceToMain(), mergeSliceToMilestone()
shouldUseWorktreeIsolation(), getMergeToMainMode(), buildFixMergePrompt()
withMergeHeal(), recoverCheckout(), fix-merge unit type
git.isolation and git.merge_to_main preferences (deprecated with warnings)

2.13.1 - 2026-03-15

Fixed

Windows: multi-line commit messages in mergeSliceToMilestone broke shell parsing — switched to execFileSync with argument arrays
Windows: single-quoted git arguments and bash-only redirects in test files
Windows: worktree path normalization for shouldUseWorktreeIsolation and stale branch detection

2.13.0 - 2026-03-15

Added

Worktree isolation for auto-mode — auto-mode creates isolated git worktrees per milestone, with --no-ff slice merges preserving commit history and squash merge to main on milestone completion
Self-healing git repair — automatic recovery from detached HEAD, stale locks, and orphaned worktrees
Worktree-aware doctor — git health diagnostics and worktree integrity checks
Isolation preferences — choose between worktree and branch isolation modes

Fixed

Dispatch loop: parse cache stale data — dispatchNextUnit() cleared path cache but not parse cache, allowing stale roadmap checkbox state to persist through doctor→dispatch transitions (#462)
Dispatch loop: completion not persisted after agent session — handleAgentEnd() now verifies artifacts and persists the completion key before re-entering the dispatch loop, preventing re-dispatch when deriveState() sees pre-merge branch state (#462)
Dispatch loop: recovery counter reset without persistence — loop-recovery and self-repair paths now persist completion keys and include a hard lifetime dispatch cap of 6 (#462, #463)
Dispatch loop: non-execute-task units had no artifact verification — complete-slice, plan-slice, and other unit types now verify artifacts on disk before bail-out (#465)
@ file autocomplete debounced to prevent TUI freeze on large codebases (#452)
Guard against newer synced resources from future versions (#445)
Prevent web_search tool injection for non-Anthropic providers serving Claude models (#446)

2.12.0 - 2026-03-15

Added

Parallel tool calling — tools from a single assistant message execute concurrently by default, with sequential mode as opt-in (toolExecution: "sequential") and beforeToolCall/afterToolCall hooks for interception
Ollama Cloud as model and web tool provider
Extensible hook system for auto-mode state machine — post-unit hooks fire after unit completion
Event queue settlement for parallel tool execution — extension tool_call/tool_result handlers always see settled agent state

Changed

Inline static templates into prompt builders, eliminating ~44 READ tool calls per milestone

Fixed

Auto-mode dispatch loop when cachedReaddir returns stale data after unit writes files
Parse and path caches cleared alongside state cache after unit completion
bg_shell hangs indefinitely when ready_port server fails to start — now transitions to error state with stderr context
Em dash and slash characters in milestone/slice titles corrupting SF state management
Guided-flow self-heals stale runtime records from crashed auto-mode sessions on wizard start
CI smoke test ANSI code stripping

2.11.1 - 2026-03-15

Fixed

URGENT: auto-mode loops on research-slice and plan-slice — handleAgentEnd called invalidateStateCache() but not clearPathCache() or clearParseCache(). The in-process directory listing cache in paths.ts retained the pre-subagent empty directory snapshot, so resolveSliceFile() returned null for artifacts the subagent had just written. This caused dispatchNextUnit to re-dispatch the same unit (research-slice or plan-slice) instead of advancing, incrementing the dispatch counter until the MAX_UNIT_DISPATCHES=3 limit triggered a hard stop with "Loop detected" (#421)

2.11.0 - 2026-03-14

Added

Cross-provider fallback when rate or quota limits are hit (#125)
Custom OpenAI-compatible endpoint option in onboarding wizard (#335)
Model provider selection in preferences (#350)
Auto-mode fallback model rotation on network errors (#386)
Native libgit2-backed git read operations for dispatch hotpath (#388)

Changed

Replace hardcoded extension list with dynamic discovery in loader
Deduplicate transitive dependency summaries in prompt builders
Reduce dispatch gap timeout from 30s to 5s
Memoize deriveState() per dispatch cycle
Wire native batch parser into deriveState() hotpath (#389)
Add session-scoped directory listing cache and content-hash-keyed parse cache for path resolution
Optimize discovery and interactive hot paths

Fixed

Resolve OpenRouter model IDs in auto-mode and show active model per phase
Suppress git-svn noise causing confusing errors on affected systems (#404)
Include export-html templates in pkg/ shim (#370, #395)
Increase timeout for z.ai provider to handle slow API spikes (#379, #396)
Prevent login dialog from leaving dangling promises that freeze the UI (#280, #390)
Improve Cloud Code Assist 404 error with actionable model guidance (#384)
Prevent auto-mode hang when dispatch chain breaks after slice tasks complete (#381, #382)
Fix packaging verification and path portability (#378)
Read resources from dist/ to prevent branch-drift in npm-link setups (#314)
Always use native Anthropic web search when available (#374)
CI smoke test — wait for registry propagation, show errors (#383)
Bypass pre-commit hooks on SF infrastructure commits to prevent lint-staged empty commit errors (#385)

2.10.12 - 2026-03-14

Added

Multi-milestone readiness flow with per-milestone discussion gate (#377)

Fixed

Fix npx sf-run@latest failing with ERR_MODULE_NOT_FOUND: Cannot find package '@sf/pi-coding-agent'. The loader now creates workspace package symlinks at runtime before importing, so it works even when npx skips postinstall scripts (#380)

2.10.11 - 2026-03-14

Fixed

Hoist workspace package dependencies (undici, anthropic SDK, openai, chalk, etc.) into root dependencies so they install for end users. v2.10.10 removed bundleDependencies but didn't promote the transitive deps (#376)
Add undici as root dependency to resolve startup crash (#372)
Check GROQ_API_KEY before entering voice mode to prevent crash (#367)

2.10.10 - 2026-03-14

Added

Alibaba Cloud coding-plan provider support (#295)
Linux voice mode: Groq Whisper API backend for fast, accurate speech-to-text (#366)
Opus 4.6 1M as default model, model selector UX improvements, Discord onboarding (#290)

Fixed

Fix broken npm install / npx sf-run@latest caused by unpublished @sf/* workspace packages leaking into npm dependencies. Workspace cross-references removed from published package metadata; packages resolve via bundled node_modules/ at runtime (#369)
Add pre-publish tarball install validation (validate-pack) to CI and publish pipeline, preventing broken packages from reaching npm
Handle empty index after runtime file stripping in squash-merge (#364)
Add retry logic for transient network/auth failures instead of crashing (#365)
Auto-mode: stale lock detection, SIGTERM handler, live-session guard (#362)

2.10.9 - 2026-03-14

Added

Team collaboration: multiple users can work on the same repo without milestone name clashes by checking in .sf/ planning artifacts (#338)

Changed

Execute-task loop detection uses adaptive reconciliation instead of hard-stopping, reducing false positives (#342)
Memory storage switched from better-sqlite3 to sql.js (WASM) for Node 25+ compatibility (#356)

Fixed

Node 22.22+ compatibility: .ts import extensions normalized to .js for module resolution (#354)
Infinite loop when complete-slice merges to main are interrupted (#345)
Credential backoff no longer triggers on transport errors; quota exhaustion handled gracefully (#353)
OAuth-backed providers (Gemini) no longer crash on quota exhaustion (#347)
Secrets skip in auto mode no longer crashes (#352)
Untracked runtime files discarded before branch switch to prevent checkout conflicts (#346)
TUI crash/corruption on code blocks with lines exceeding terminal width (#343)
Infinite skip loop in sf auto broken by adding roadmap completion check
Model ID variant suffix stripped correctly for OAuth Anthropic API calls
.sf/ planning artifacts force-added and handleAgentEnd reentrancy guarded (#341)

2.10.8 - 2026-03-14

Fixed

Publish verification checks dist/loader.js is non-empty (-s) and uses --ignore-scripts on npm pack --dry-run to match actual publish behaviour (#298)

2.10.7 - 2026-03-14

Added

GitHub Workflows skill with CI workflow template and ci_monitor tool (#294)
Auto-resolve merge conflicts via LLM-powered fix-merge session
Auto-update integration branch when user starts auto-mode from a different branch (#300)

Changed

Secrets manifest is re-checked before every dispatch, not just at auto mode start
Replaced TS parameter properties with explicit fields for Node strip-types compatibility
Hardened CI publish pipeline to prevent broken releases (#304)

Fixed

Unresolvable artifact paths now correctly treated as stale completion state, preventing OOM crashes (#313)
Eliminated branch checkout during slice merge that caused STATE.md conflicts (#307)
Removed infinite delivery retry loop for background job completions (#301)
Display ⌥ instead of Alt for keybindings on macOS (#299)

Removed

Deprecated legacy dead code from OAuth module

2.10.6 - 2026-03-13

Added

Native Rust output truncation module for efficient large-output handling (#268)
Native Rust xxHash32 hasher for hashline IDs — faster line hashing (#272)
Native Rust bash stream processor for single-pass chunk processing (#271)
Memory extraction pipeline (#261)
claude-opus-4-6 model with 1M context window (#288)

Fixed

Oversized TUI lines now truncated instead of crashing (#287)
Anthropic rate limit backoff now respects server-requested retry delay
CI publish guard: skip main package publish if already on npm
Strip hashline prefixes from TUI read output (#265)

2.10.5 - 2026-03-13

Added

Async background jobs extension for non-blocking task execution (#260)
Multi-credential round-robin with rate-limit fallback across API keys
Bash interceptor to block commands that duplicate dedicated tools (Read, Write, Edit, Grep, Glob)
sf update subcommand for self-update (#273)
Task isolation for subagent filesystem safety (#254)
Native Rust streaming JSON parser (#266)
Web search provider selection added to onboarding wizard (#278)

Changed

Simplified onboarding into two-step auth flow — plain language instead of OAuth jargon (#274)

Fixed

optionalDependencies in published sf-run@2.10.4 were still pinned to 2.10.2, causing users to install the broken engine binaries that 2.10.4 was meant to fix (#276)
Auto-resolve .sf/ planning artifact conflicts during slice merge (#264)
Use version ranges for native engine optional dependencies (#286)
Guard publish against uncommitted version sync changes
Show 'keep current' option in config when already authenticated (#283)
Restore bashInterceptor settings dropped by async-jobs merge
Collapse tool output by default

2.10.4 - 2026-03-13

Fixed

Native binary distribution — .node binaries were missing from the npm tarball, causing startup crashes on all platforms since v2.10.0
Native loader resolution chain: tries @sf-build/engine-{platform} npm package first, then local dev build, with clear error messages listing supported platforms

Added

Per-platform optional dependency packages (@sf-build/engine-*) for macOS (ARM64/x64), Linux (x64/ARM64), and Windows (x64)
Cross-platform native binary CI build and publish workflow
Version synchronization script for lock-step platform package releases

2.10.2 - 2026-03-13

Added

Native Rust TTSR regex engine — pre-compiles all stream rule conditions into a single RegexSet for one-pass DFA matching instead of O(rules × conditions) JS regex iteration
Native Rust diff engine — fuzzy text matching (fuzzyFindText, normalizeForFuzzyMatch) and unified diff generation (generateDiff) via the similar crate, replacing the diff npm package
Native Rust SF file parser — frontmatter parsing, section extraction, batch .sf/ directory parsing, and structured roadmap parsing with transparent JS fallback

2.10.1 - 2026-03-13

Fixed

@sf/native package ships pre-compiled JavaScript instead of raw TypeScript, fixing startup crashes on Node.js 20, 22, and 24 (#248)

2.10.0 - 2026-03-13

Added

Native Rust engine with high-performance N-API modules replacing JS/WASM dependencies:
- grep — ripgrep-backed content and filesystem search
- glob — gitignore-aware file discovery with scan caching
- ps — cross-platform process tree management
- clipboard — native clipboard access via arboard (text + image)
- highlight — syntect-based syntax highlighting (replaces cli-highlight)
- ast — structural code search and rewrite via ast-grep (38+ languages)
- html — HTML-to-Markdown conversion
- text — ANSI-aware text measurement, wrapping, truncation, and slicing
- fd — fuzzy file path discovery for autocomplete
- image — decode, encode, and resize images (PNG, JPEG, GIF, WebP)
Background shell env action to query shell session environment state
Background shell run action for blocking command execution on persistent sessions
Background shell session process type for persistent interactive sessions
Hashline edits — line-hash-anchored file editing
Universal config discovery extension

Changed

Find tool uses native Rust glob instead of fd CLI binary
Syntax highlighting uses native syntect instead of cli-highlight npm package
Autocomplete uses native fd module instead of fd CLI subprocess
Text utilities (visible width, wrapping, truncation, slicing) use native Rust instead of JS
Clipboard operations use native arboard instead of platform-specific CLI tools
Image processing uses native Rust image crate instead of Photon WASM

Fixed

Prevent move operation from silently overwriting existing files
Separate access/unlink error handling in delete path
Untrack runtime files from slice branch before squash-merge
Copy LSP defaults.json to dist during build
Native module test assertions

2.9.0 - 2026-03-13

Added

LSP tool — full Language Server Protocol integration with diagnostics, go-to-definition, references, hover, document/workspace symbols, rename, code actions, type definition, and implementation support
/thinking slash command for toggling thinking level during sessions
Interactive wizard mode for /sf prefs with guided configuration
Startup update check with 24-hour cache — notifies when a new version is available

Fixed

TypeScript type errors across sf, browser-tools, search-the-web, and misc extension files
Milestone ID generation uses max-based approach instead of length+1 (prevents ID collisions)
Non-thinking models handled correctly in /thinking command
Auto-mode pauses on provider errors to prevent reassess-roadmap loop
TAB hint displayed for notes input in discuss-mode survey
Slice branches merge to integration branch instead of main
Prefs wizard audit findings addressed
Deduplicated maxNum logic with test coverage
Command injection eliminated in LSP config which() function
Unhandled JSON.parse in LSP message reader wrapped with error handling

2.8.3 - 2026-03-13

Fixed

ask_user_questions handles undefined custom() result in RPC mode
Provider-aware model resolution for per-phase preferences (respects provider field instead of parsing model name prefixes)
Execute-task artifact verification aligned with deriveState — adds self-repair for missing artifacts
Research phase infinite loop broken; state synced on stop
Auto-resolve merge conflicts on .sf/ runtime files
Auto-switch model after /login and /logout to prevent API key errors
Anthropic provider detection uses provider field instead of model name prefix matching

2.8.2 - 2026-03-13

Fixed

Path operations use node:path stdlib instead of hardcoded forward slashes, fixing cross-platform compatibility
Prompts use relative paths to prevent Windows drive letter mangling
Runtime files already in the git index are untracked to prevent merge conflicts
HTTP_PROXY and HTTPS_PROXY environment variables respected for all outbound requests
Windows NUL redirects sanitized to /dev/null in Git Bash environments

Changed

.claude/ and .sf/ directories untracked from repo, *.tgz gitignored

2.8.1 - 2026-03-13

Added

Discussion depth verification and context write-gate for richer milestone discussions
TTSR + blob/artifact storage (ported from oh-my-pi)
Skip/discard escape hatches in no-roadmap wizard
Configurable merge_strategy preference for slice completion

Fixed

fsevents bumped to ~2.3.3 for Node 25 compatibility; added as optional dep for Linux installs
Observability warnings injected into agent prompt for enforcement
Auto-detect headless environment for Playwright browser launch
UAT artifact verified before marking complete-slice done
Prior slices must complete on main before next slice dispatches
smartStage fallback bypasses runtime exclusions when .sf/ is gitignored
/exit uses graceful shutdown instead of hard kill

2.8.0 - 2026-03-13

Added

Browser tools: browser_analyze_form and browser_fill_form — form field inventory and intelligent filling by label/name/placeholder
Browser tools: browser_find_best — scored element candidates for semantic intents
Browser tools: browser_act — execute common browser micro-tasks in one call
Browser tools: 108 unit and integration tests covering all new components

Changed

Browser tools: decomposed 5000-line monolithic index.ts into focused modules (state, capture, settle, lifecycle, refs, utils) with 11 categorized tool files
Browser tools: consolidated state capture reduces evaluate round-trips per action
Browser tools: zero-mutation settle short-circuit for faster page interaction
Browser tools: conditional body text capture — low-signal tools skip it for smaller token payloads
Browser tools: screenshot resizing uses sharp instead of canvas evaluate calls
Browser tools: screenshots opt-in on navigate (no longer sent by default)

2.7.1 - 2026-03-13

Added

Model fallback support for auto-mode phases — if the configured model fails, SF tries alternate models before stopping
/kill command for immediate process termination

Fixed

npm install -g sf-run now works — workspace packages bundled in npm tarball via bundleDependencies
External PI ecosystem packages (pi-rtk, pi-context, etc.) can now resolve @mariozechner/* imports through jiti aliases
Missing export-html vendor files (marked.min.js, highlight.min.js) restored
Skipped API keys now persist so the setup wizard doesn't repeat on every launch
Provider config and extension loading reused correctly

Changed

/exit uses graceful shutdown (saves session state); /kill replaces the old immediate-exit behavior

2.7.0 - 2026-03-12

Changed

Vendor Pi SDK source (tui, ai, agent-core, coding-agent) into workspace monorepo under packages/, replacing the compiled npm dependency and patch-package workflow. Pi internals are now directly modifiable as TypeScript source.
Existing patches (setModel persist option, Windows VT input caching) applied as source edits.
Build pipeline runs workspace packages in dependency order before SF compilation.
Removed patch-package from devDependencies and postinstall.

2.6.0 - 2026-03-12

Added

Proactive secret management — planning phase forecasts required API keys into a manifest; auto-mode collects pending secrets before dispatching the first slice
--continue / -c CLI flag to resume the most recent session

Fixed

Doctor post-hook no longer preempts complete-slice dispatch
main_branch preference restored; runPreMergeCheck implemented for merge safety
Recovery/retry prompt injection capped to prevent V8 OOM on large sessions
.sf/ excluded from pre-switch auto-commits to prevent squash merge conflicts

2.5.1 - 2026-03-12

Added

secure_env_collect now auto-detects existing keys, destination files, and provides guidance field for better onboarding UX

Changed

Right-sized pipeline for simple work — single-slice milestones skip redundant research/plan sessions, reducing 9-10 sessions to 5-6
Heavyweight plan sections (Proof Level, Integration Closure, Observability) are now conditional, omitted for simple slices

Fixed

Squash-merge now aborts cleanly on conflict and stops auto-mode instead of looping with corrupted state
Resolved baked-in merge conflict markers in loader.ts, logo.ts, and postinstall.js

2.5.0 - 2026-03-12

Added

Native Anthropic web search — Claude models get server-side web search automatically, no Brave API key required
GitService fully wired into codebase — programmatic git operations replace shell-based git commands in prompts
Merge guards prevent slice completion when uncommitted changes or conflicts exist
Snapshot support for saving and restoring .sf/ state
Auto-push after slice squash-merge to main
Rich commit messages with structured metadata

Fixed

State machine deadlock when units fail to produce expected artifacts — retry and cross-validation now gate completion
Duplicate Brave search tools when toggling providers repeatedly
Windows test glob patterns (single quotes → unquoted for shell expansion)
Conversation replay error caused by thinking blocks in stored history
Brave search tools removed from API payload when no BRAVE_API_KEY is set
Restore notifications suppressed on session resume to reduce UX noise

2.4.0 - 2026-03-12

Added

Automatic migration of provider credentials from existing Pi installations — skip re-authentication when switching to SF
Pi extensions from ~/.pi/agent/extensions/ discoverable in interactive mode
GitService core implementation for programmatic git operations

Changed

System prompt compressed by 48% (360 → 187 lines) for better context efficiency
Refined agent character and communication style prompts
Added craft standards, self-debugging awareness, and work narration to agent prompts

Fixed

RPC mode crash when ctx.ui.theme is undefined (#121)

2.3.11 - 2026-03-12

Added

Branded clack-based onboarding wizard on first launch — LLM provider selection (OAuth + API key), optional tool API keys, and setup summary (#118)
sf config subcommand to re-run the setup wizard anytime
Shared src/logo.ts module as single source of truth for ASCII banner

Fixed

Parallel subagent results no longer truncated at 200 characters

Changed

wizard.ts trimmed to env hydration only — onboarding logic moved to onboarding.ts
First-launch banner removed from loader.ts (onboarding wizard handles branding)

2.3.10 - 2026-03-12

Added

Branded postinstall experience with animated spinners, progress indicators, and clean summary (#115)

Fixed

Ctrl+Alt shortcuts (dashboard, bg manager, voice) now show slash-command fallback in terminals that lack Kitty keyboard protocol support — macOS Terminal.app, JetBrains IDEs (#100, #104)

2.3.9 - 2026-03-12

Added

Tavily as alternative web search provider alongside Brave Search (#102)
Auto-mode progress widget now shows all stats; footer hidden during auto-mode (#75)

Fixed

Auto-mode infinite loop and closeout instability — idempotent unit dispatch, retry caps, and atomic closeout (#96, #109)
Migration no longer requires ROADMAP.md — milestones inferred from phases/ directory when missing (#93, #90)
Worktree branch safety — proper namespacing and slice branch base selection (#92)
Windows: use execFile to avoid single-quote shell issues (#103)
Broken read @SF-WORKFLOW.md references replaced with /sf command (#88)
Google Search extension updated to use gemini-2.5-flash (#83)
Duplicate getCurrentBranch import in auto.ts (#87)
formatCost crash on non-number cost values (#74)
Avoid sudo prompts in postinstall script (#73)
.sf/ folder removed from git tracking; consolidated .gitignore (#78)
Multiple community-reported bugs across CLI, auto-mode, and extensions

2.3.8 - 2026-03-11

Fixed

Worktree file operations (Write, Read, Edit) now resolve paths against the active working directory instead of the launch directory (#72)
Auto-mode merge guard handles all slice completion paths, preventing infinite dispatch loops when complete-slice is bypassed (#71)

2.3.7 - 2026-03-11

Added

Remote user questions via Slack/Discord for headless auto-mode sessions

Fixed

Auto-mode model switches no longer persist as the user's global default (#30)
Auto-mode resume now rebuilds disk state and runs doctor before dispatching, preventing inline execution after pause (#16)
Silent dispatch failure when command context is null now surfaces an error notification
Race condition between timeout handlers and prompt dispatch in auto-mode
Remote questions: validate IDs before test-send, sanitize error messages to prevent token leakage
Remote questions: cap user_note at 500 chars to prevent LLM context injection
Remote questions: validate channel ID format to prevent SSRF
Remote questions: add 15s per-request fetch timeout to adapters
Remote questions: distinguish Discord 404 from auth errors in reactions
Prompt store sorting uses updatedAt instead of filename
TypeScript parameter properties desugared for --experimental-strip-types compatibility

Changed

Remote question result details use discriminated union type

2.3.6 - 2026-03-11

Fixed

Postinstall no longer triggers hidden sudo prompt on Linux — Playwright's --with-deps flag is no longer run automatically, preventing npm install -g from appearing to hang (#67)
Auto-commit dirty files before branch switch to prevent lost work during slice transitions

Changed

Updated README to reflect current commands, extensions, and step mode workflow

2.3.5 - 2026-03-11

Fixed

Voice extension: transcription no longer lost when pausing and resuming recording

2.3.4 - 2026-03-11

Added

CHANGELOG.md with curated history from v0.1.6 onwards
Project-local /publish-version command for npm releases
GitHub Sponsors funding configuration
npm publish and install smoke test

0.3.3 - 2026-03-11

Added

/sf next step mode — walk through units one at a time with a wizard between each
/sf bare command defaults to step mode
/exit command to kill the SF process immediately
/clear as alias for /new (new session)
MCPorter extension for lazy on-demand MCP server integration
/voice extension for real-time speech-to-text
Pi global install scripts
Post-hook bookkeeping: auto-run doctor + rebuild STATE.md after each unit

Changed

Improved worktree merge, create, remove, and reload resilience
Discuss prompt rewritten with reflection step and depth enforcement

Fixed

Idle watchdog false-firing on active agents — tasks >10min no longer get incorrectly skipped (#52)
Browser screenshots constrained to 1568px max dimension (#56)
Pi extensions loaded from ~/.pi/agent/extensions/ (#51)

Removed

/sf-run command (replaced by /sf and /sf next)

0.3.1 - 2026-03-11

Fixed

Windows VT input restored after child processes exit (#41)
Print/JSON mode in cli.js so subagents don't hang
Discuss prompt loop prevention
Managed tools bootstrap and gh auth
Session list scoped to current working directory
Bash/bg_shell hang and kill issues on Windows (#40)
/sf-run hardcoded ~/.pi/ path (#38)
Windows backspace in masked input + custom browser path support (#36, #34)

Changed

Renamed "Get Stuff Done" to "Singularity Forge"

0.3.0 - 2026-03-11

Added

/worktree (/wt) — git worktree lifecycle management (#31)
/sf migrate — .planning to .sf migration tool (#28)

Fixed

Skipped API keys now persist so wizard doesn't repeat on every launch (#27)
Scoped models restored from settings on new session startup (#22)
Startup fallback no longer overwrites user's default model with Sonnet (#29)

0.2.9 - 2026-03-11

Fixed

Idle recovery skips stuck units instead of silently stalling (#19)
pkg/package.json version synced with pi-coding-agent to prevent false update banner
Milestones with summary but no roadmap treated as complete (#13)

0.2.8 - 2026-03-11

Added

Mac-tools extension (macOS native automation)

0.2.6 - 2026-03-11

Fixed

Default model validated against full registry on every startup

0.2.5 - 2026-03-11

Fixed

Circular self-dependency removed, default model set to anthropic/claude-sonnet-4-6 with thinking off

0.2.4 - 2026-03-11

Added

Branded setup wizard UI with visual hierarchy, descriptions, and status feedback
Branded banner on first launch
Postinstall banner with version and next-step hint

Fixed

All .pi/ paths updated to .sf/
Default model matching by id.includes('sonnet') for dated API IDs
Circular sf-run self-dependency removed
Pi SDK version check suppressed
Selected options stay lit when notes field is focused

0.1.6 - 2026-03-11

Added

GitHub extension tool suite with confirmation gate
Bundled skills: frontend-design, swiftui, debug-like-expert
Skills trigger table in system prompt
Resource loader syncs bundled skills to ~/.sf/agent/skills/

Fixed

~/.sf/agent/ paths in prompt templates instead of ~/.pi/agent/ (#10)
Guard against re-injecting discuss prompt when session already in flight

Changed

License updated to MIT

172 KiB Raw Permalink Blame History Unescape Escape

Changelog

Unreleased

2.75.0 - 2026-04-17

Added

2.74.0 - 2026-04-14

Added

Fixed

Changed

2.73.1 - 2026-04-13

Fixed

Changed

2.73.0 - 2026-04-13

Added

Fixed

Changed

2.72.0 - 2026-04-13

Added

Fixed

Changed

2.71.0 - 2026-04-11

Added

Fixed

Changed

2.70.1 - 2026-04-11

Fixed

2.70.0 - 2026-04-10

Added

Fixed

2.69.0 - 2026-04-10

Added

Fixed

2.68.1 - 2026-04-10

Fixed

2.68.0 - 2026-04-10

Added

Fixed

Changed

2.67.0 - 2026-04-09

Added

Fixed

2.66.1 - 2026-04-08

Fixed

2.66.0 - 2026-04-08

Added

Fixed

Changed

2.65.0 - 2026-04-07

Added

Fixed

Changed

2.64.0 - 2026-04-06

Added

Fixed

Changed

2.63.0 - 2026-04-05

Added

Fixed

Changed

2.62.1 - 2026-04-05

Fixed

2.62.0 - 2026-04-04

Added

Fixed

Changed

2.61.0 - 2026-04-04

Added

2.60.0 - 2026-04-04

Added

Fixed

2.59.0 - 2026-04-03

Added

Fixed

Changed

2.58.0 - 2026-03-28

Added

Fixed

2.57.0 - 2026-03-28

Added

Fixed

172 KiB

Raw Permalink Blame History