@archpilotlabs/archpilot 0.2.8 → 0.2.9

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## 0.2.9
+
+### Added
+
+- Added structural finding classification so architecture violations, setup gaps, and guidance are represented explicitly instead of being inferred from finding message text.
+- Added broader same-schema tenant discriminator support for `tenant_id`, organization, workspace, account, company, and customer-based discriminator conventions.
+
+### Improved
+
+- Improved validation performance on large multi-module repositories, significantly reducing analysis time for dependency-heavy projects.
+- Improved production source-scope handling so persistence, infrastructure, adapter, and provider code is analyzed where applicable without weakening test, generated, frontend, migration, or tooling exclusions.
+- Improved governance risk accuracy for cross-module dependency findings by distinguishing contract drift from stronger public-surface violations and transitive dependency cycles.
+- Improved tenant isolation analysis so actual tenant predicate evidence is distinguished from tenant-like fields that are only selected or projected.
+- Improved module and component resolution for governance risk and reporting by using structured architecture identities before legacy path-based fallbacks.
+- Improved drift and reporting identity so finding classification and score deductions remain stable even when human-readable finding messages change.
+
+### Notes
+
+- Isolated `AP-DEP-004` contract drift no longer automatically results in critical governance risk. `AP-DEP-005` public-surface bypass and `AP-DEP-008` transitive dependency cycles retain stronger risk treatment.
+
+---
+
 ## 0.2.8
 
 ### Added