@bastani/atomic 0.8.26-alpha.1 → 0.8.26-alpha.11

package/dist/builtin/subagents/src/runs/shared/model-fallback.ts

@@ -62,7 +62,7 @@ export function currentModelFullId(model: { provider: string; id: string } | und
 	return `${String(model.provider)}/${model.id}`;
 }
 
-const RETRYABLE_MODEL_FAILURE_PATTERNS = [
+const RETRYABLE_MODEL_FAILURE_PATTERNS: readonly RegExp[] = [
 	/rate\s*limit/i,
 	/too many requests/i,
 	/\b429\b/,
@@ -71,6 +71,7 @@ const RETRYABLE_MODEL_FAILURE_PATTERNS = [
 	/credit/i,
 	/auth(?:entication)?/i,
 	/unauthori[sz]ed/i,
+	/\b40[13]\b/,
 	/forbidden/i,
 	/api key/i,
 	/token expired/i,
@@ -90,14 +91,422 @@ const RETRYABLE_MODEL_FAILURE_PATTERNS = [
 	/upstream/i,
 	/timed? out/i,
 	/timeout/i,
-	/\b502\b/,
-	/\b503\b/,
-	/\b504\b/,
+	/\b50[0-4]\b/,
 ];
 
-export function isRetryableModelFailure(error: string | undefined): boolean {
-	if (!error) return false;
-	return RETRYABLE_MODEL_FAILURE_PATTERNS.some((pattern) => pattern.test(error));
+const NON_RETRYABLE_FAILURE_PATTERNS: readonly RegExp[] = [
+	/command failed/i,
+	/tests? failed/i,
+	/shell/i,
+	/missing file/i,
+	/no such file/i,
+	/completion guard/i,
+	/cancel/i,
+	/abort/i,
+	/interrupted/i,
+];
+
+const CANCELLED_FAILURE_PATTERNS: readonly RegExp[] = [
+	/cancel/i,
+	/abort/i,
+	/interrupted/i,
+];
+
+export type ModelFallbackFailureKind =
+	| "auth_on_candidate_provider"
+	| "rate_limit"
+	| "provider_unavailable"
+	| "network_timeout"
+	| "model_unavailable"
+	| "cancelled"
+	| "task_failure"
+	| "unknown";
+
+export type ModelFallbackFailureSource =
+	| "assistant_message"
+	| "diagnostic"
+	| "throw"
+	| "structured"
+	| "string_fallback";
+
+export interface ModelFallbackFailureSignal {
+	readonly kind: ModelFallbackFailureKind;
+	readonly message: string;
+	readonly source: ModelFallbackFailureSource;
+	readonly stopReason?: string;
+	readonly status?: number;
+	readonly code?: string | number;
+	readonly name?: string;
+}
+
+const FALLBACKABLE_FAILURE_KINDS: ReadonlySet<ModelFallbackFailureKind> = new Set([
+	"auth_on_candidate_provider",
+	"rate_limit",
+	"provider_unavailable",
+	"network_timeout",
+	"model_unavailable",
+]);
+
+function asRecord(value: unknown): Record<string, unknown> | undefined {
+	return value !== null && typeof value === "object" ? value as Record<string, unknown> : undefined;
+}
+
+function field(value: unknown, key: string): unknown {
+	return asRecord(value)?.[key];
+}
+
+function stringField(value: unknown, key: string): string | undefined {
+	const raw = field(value, key);
+	return typeof raw === "string" && raw.trim().length > 0 ? raw : undefined;
+}
+
+function errorName(value: unknown): string | undefined {
+	return value instanceof Error ? value.name : stringField(value, "name");
+}
+
+function directMessageFrom(value: unknown): string | undefined {
+	return stringField(value, "errorMessage")
+		?? stringField(value, "message")
+		?? stringField(value, "statusText");
+}
+
+function integerFrom(value: unknown): number | undefined {
+	if (typeof value === "number" && Number.isInteger(value)) return value;
+	if (typeof value !== "string" || value.trim().length === 0) return undefined;
+	const parsed = Number(value.trim());
+	return Number.isInteger(parsed) ? parsed : undefined;
+}
+
+function statusFrom(value: unknown): number | undefined {
+	return integerFrom(field(value, "status"))
+		?? integerFrom(field(value, "statusCode"))
+		?? integerFrom(field(value, "httpStatus"));
+}
+
+function codeFrom(value: unknown): string | number | undefined {
+	const rawCode = field(value, "code");
+	return typeof rawCode === "string" || typeof rawCode === "number" ? rawCode : undefined;
+}
+
+function stopReasonFrom(value: unknown): string | undefined {
+	return stringField(value, "stopReason");
+}
+
+function finishReasonFrom(value: unknown): string | undefined {
+	return stringField(value, "finish_reason") ?? stringField(value, "finishReason");
+}
+
+function causeOf(value: unknown): unknown {
+	return value instanceof Error ? value.cause : field(value, "cause");
+}
+
+function diagnosticErrors(value: unknown): readonly unknown[] {
+	const diagnostics = field(value, "diagnostics");
+	if (!Array.isArray(diagnostics)) return [];
+	const errors: unknown[] = [];
+	for (const diagnostic of diagnostics) {
+		const diagnosticError = field(diagnostic, "error");
+		errors.push(diagnosticError ?? diagnostic);
+	}
+	return errors;
+}
+
+function normalizeCode(value: string | number | undefined): string | undefined {
+	if (value === undefined) return undefined;
+	const normalized = String(value)
+		.trim()
+		.toLowerCase()
+		.replace(/[^a-z0-9]+/g, "_")
+		.replace(/^_+|_+$/g, "");
+	return normalized.length > 0 ? normalized : undefined;
+}
+
+function kindFromStatus(status: number | undefined): ModelFallbackFailureKind | undefined {
+	switch (status) {
+		case 401:
+		case 403:
+			return "auth_on_candidate_provider";
+		case 408:
+			return "network_timeout";
+		case 404:
+			return "model_unavailable";
+		case 429:
+			return "rate_limit";
+		default:
+			if (status !== undefined && status >= 500 && status <= 599) return "provider_unavailable";
+			return undefined;
+	}
+}
+
+function refusalKindFromCode(code: string | number | undefined): ModelFallbackFailureKind | undefined {
+	const normalizedCode = normalizeCode(code);
+	if (normalizedCode === undefined) return undefined;
+	if (normalizedCode.includes("content_filter") || normalizedCode.includes("contentfilter")) return "task_failure";
+	if (normalizedCode.includes("safety") || normalizedCode.includes("policy")) return "task_failure";
+	switch (normalizedCode) {
+		case "blocked":
+		case "blocked_by_provider":
+		case "blocked_by_safety":
+		case "blocked_by_policy":
+		case "provider_refusal":
+		case "refusal":
+		case "tool_refusal":
+		case "tool_call_refusal":
+		case "tool_use_refusal":
+			return "task_failure";
+		default:
+			return undefined;
+	}
+}
+
+function kindFromCode(code: string | number | undefined): ModelFallbackFailureKind | undefined {
+	const normalizedCode = normalizeCode(code);
+	if (normalizedCode === undefined) return undefined;
+	const refusalKind = refusalKindFromCode(code);
+	if (refusalKind !== undefined) return refusalKind;
+	const httpStatusKind = kindFromStatus(integerFrom(code));
+	if (httpStatusKind !== undefined) return httpStatusKind;
+
+	switch (normalizedCode) {
+		case "auth":
+		case "auth_required":
+		case "authentication_required":
+		case "unauthorized":
+		case "forbidden":
+		case "invalid_api_key":
+		case "missing_api_key":
+		case "invalid_key":
+			return "auth_on_candidate_provider";
+		case "etimedout":
+		case "econnreset":
+		case "econnrefused":
+		case "enotfound":
+		case "eai_again":
+		case "fetch_failed":
+		case "network_error":
+		case "timeout":
+		case "timeout_error":
+		case "und_err_connect_timeout":
+			return "network_timeout";
+		case "rate_limit":
+		case "rate_limit_exceeded":
+		case "too_many_requests":
+		case "quota_exceeded":
+			return "rate_limit";
+		case "aborterror":
+		case "aborted":
+		case "cancelled":
+		case "canceled":
+			return "cancelled";
+		case "model_not_found":
+		case "model_unavailable":
+		case "model_disabled":
+		case "unknown_model":
+			return "model_unavailable";
+		case "provider_error":
+		case "api_error":
+		case "service_unavailable":
+		case "temporarily_unavailable":
+		case "overloaded":
+			return "provider_unavailable";
+		default:
+			return undefined;
+	}
+}
+
+const PROVIDER_REFUSAL_FAILURE_PATTERNS: readonly RegExp[] = [
+	/\bfinish[_\s-]?reason\b[^\n]*\bcontent[_\s-]?filter\b/i,
+	/\bcontent[_\s-]?filter(?:ed|ing)?\b/i,
+	/\b(?:safety|policy)\b[^\n]*\b(?:refus(?:e|al|ed|es|ing)?|block(?:ed|ing)?|filter(?:ed|ing)?|violat(?:e|ion|ed|ing)?|disallow(?:ed|ing)?|reject(?:ed|ion|ing)?)\b/i,
+	/\b(?:refus(?:e|al|ed|es|ing)?|block(?:ed|ing)?|filter(?:ed|ing)?|violat(?:e|ion|ed|ing)?|disallow(?:ed|ing)?|reject(?:ed|ion|ing)?)\b[^\n]*\b(?:safety|policy)\b/i,
+	/\btool[_\s-]?(?:call|use)?[_\s-]?refus(?:e|al|ed|es|ing)?\b/i,
+	/\btool(?:\s+call|\s+use)?\b[^\n]*\brefus(?:e|al|ed|es|ing)?\b/i,
+	/\brefus(?:e|al|ed|es|ing)?\b[^\n]*\btool(?:\s+call|\s+use)?\b/i,
+	/\bprovider[_\s-]?refus(?:e|al|ed|es|ing)?\b/i,
+	/\bprovider\b[^\n]*\brefus(?:e|al|ed|es|ing)?\b[^\n]*\b(?:prompt|request|content|policy|safety)\b/i,
+];
+
+function refusalKindFromMessage(message: string): ModelFallbackFailureKind | undefined {
+	if (CANCELLED_FAILURE_PATTERNS.some((pattern) => pattern.test(message))) return "cancelled";
+	if (NON_RETRYABLE_FAILURE_PATTERNS.some((pattern) => pattern.test(message))) return "task_failure";
+	if (PROVIDER_REFUSAL_FAILURE_PATTERNS.some((pattern) => pattern.test(message))) return "task_failure";
+	return undefined;
+}
+
+function fallbackKindFromMessage(message: string, name: string | undefined): ModelFallbackFailureKind | undefined {
+	const refusalKind = refusalKindFromMessage(message);
+	if (refusalKind !== undefined) return refusalKind;
+	const nameKind = kindFromCode(name);
+	if (nameKind !== undefined) return nameKind;
+	if (!RETRYABLE_MODEL_FAILURE_PATTERNS.some((pattern) => pattern.test(message))) return undefined;
+	if (/rate\s*limit|too many requests|\b429\b|quota|billing|credit/i.test(message)) return "rate_limit";
+	if (/auth|unauthori[sz]ed|\b40[13]\b|api key|token expired|forbidden|invalid key/i.test(message)) return "auth_on_candidate_provider";
+	if (/model.*(?:unavailable|disabled|not found|unknown)|(?:unavailable|disabled|not found|unknown).*model/i.test(message)) return "model_unavailable";
+	if (/network|fetch failed|socket|connection refused|timeout|timed? out/i.test(message)) return "network_timeout";
+	return "provider_unavailable";
+}
+
+function signalSource(value: unknown, fallback: ModelFallbackFailureSource | undefined): ModelFallbackFailureSource {
+	if (fallback !== undefined) return fallback;
+	if (stopReasonFrom(value) !== undefined || diagnosticErrors(value).length > 0) return "assistant_message";
+	if (value instanceof Error) return "throw";
+	return "structured";
+}
+
+function makeSignal(
+	kind: ModelFallbackFailureKind,
+	value: unknown,
+	source: ModelFallbackFailureSource | undefined,
+): ModelFallbackFailureSignal {
+	const status = statusFrom(value);
+	const code = codeFrom(value);
+	const name = errorName(value);
+	const stopReason = stopReasonFrom(value);
+	return {
+		kind,
+		message: modelFailureMessage(value),
+		source: signalSource(value, source),
+		...(stopReason !== undefined ? { stopReason } : {}),
+		...(status !== undefined ? { status } : {}),
+		...(code !== undefined ? { code } : {}),
+		...(name !== undefined ? { name } : {}),
+	};
+}
+
+function fallbackSignalFromMessage(
+	value: unknown,
+	source: ModelFallbackFailureSource | undefined,
+): ModelFallbackFailureSignal | undefined {
+	const message = modelFailureMessage(value);
+	if (!message.trim()) return undefined;
+	const kind = fallbackKindFromMessage(message, errorName(value));
+	return kind === undefined ? undefined : makeSignal(kind, value, source);
+}
+
+function classifyAssistantRefusalSignal(
+	value: unknown,
+	source: ModelFallbackFailureSource | undefined,
+): ModelFallbackFailureSignal | undefined {
+	const codeRefusalKind = refusalKindFromCode(codeFrom(value))
+		?? refusalKindFromCode(errorName(value))
+		?? refusalKindFromCode(finishReasonFrom(value));
+	if (codeRefusalKind !== undefined) return makeSignal(codeRefusalKind, value, source);
+
+	const messageRefusalKind = refusalKindFromMessage(directMessageFrom(value) ?? "");
+	return messageRefusalKind === undefined ? undefined : makeSignal(messageRefusalKind, value, source);
+}
+
+function isRefusalSignal(signal: ModelFallbackFailureSignal): boolean {
+	return signal.kind === "cancelled" || signal.kind === "task_failure";
+}
+
+function structuredSignal(
+	value: unknown,
+	seen: Set<unknown>,
+	source?: ModelFallbackFailureSource,
+): ModelFallbackFailureSignal | undefined {
+	if (value === undefined || value === null || seen.has(value)) return undefined;
+	if (typeof value === "object") seen.add(value);
+
+	const stopReason = stopReasonFrom(value)?.toLowerCase();
+	if (stopReason === "aborted") return makeSignal("cancelled", value, source);
+
+	const directRefusalSignal = classifyAssistantRefusalSignal(value, source);
+	if (directRefusalSignal !== undefined) return directRefusalSignal;
+
+	const codeKind = kindFromCode(codeFrom(value));
+	const nameKind = kindFromCode(errorName(value));
+	if (codeKind === "cancelled" || nameKind === "cancelled") return makeSignal("cancelled", value, source);
+
+	let firstNestedFallbackSignal: ModelFallbackFailureSignal | undefined;
+	const nestedSeen = new Set(seen);
+	for (const diagnosticError of diagnosticErrors(value)) {
+		const diagnosticSignal = structuredSignal(diagnosticError, nestedSeen, "diagnostic")
+			?? fallbackSignalFromMessage(diagnosticError, "diagnostic");
+		if (diagnosticSignal === undefined) continue;
+		if (isRefusalSignal(diagnosticSignal)) return diagnosticSignal;
+		firstNestedFallbackSignal ??= diagnosticSignal;
+	}
+
+	const cause = causeOf(value);
+	const causeSignal = structuredSignal(cause, nestedSeen, source)
+		?? fallbackSignalFromMessage(cause, source);
+	if (causeSignal !== undefined) {
+		if (isRefusalSignal(causeSignal)) return causeSignal;
+		firstNestedFallbackSignal ??= causeSignal;
+	}
+
+	const statusKind = kindFromStatus(statusFrom(value));
+	if (statusKind !== undefined) return makeSignal(statusKind, value, source);
+	if (codeKind !== undefined) return makeSignal(codeKind, value, source);
+	if (nameKind !== undefined) return makeSignal(nameKind, value, source);
+
+	if (firstNestedFallbackSignal !== undefined) return firstNestedFallbackSignal;
+
+	if (stopReason === "error") return makeSignal("provider_unavailable", value, source);
+
+	return undefined;
+}
+
+function messageFromUnknown(value: unknown, seen: Set<unknown>): string | undefined {
+	if (value === undefined || value === null || seen.has(value)) return undefined;
+	if (typeof value === "string") return value.trim().length > 0 ? value : undefined;
+	if (typeof value === "number" || typeof value === "boolean" || typeof value === "bigint") return String(value);
+	if (typeof value === "symbol" || typeof value === "function") return undefined;
+	seen.add(value);
+
+	if (value instanceof Error && value.message.trim().length > 0) return value.message;
+	const directMessage = directMessageFrom(value);
+	if (directMessage !== undefined) return directMessage;
+
+	for (const diagnosticError of diagnosticErrors(value)) {
+		const diagnosticMessage = messageFromUnknown(diagnosticError, seen);
+		if (diagnosticMessage !== undefined) return diagnosticMessage;
+	}
+
+	const causeMessage = messageFromUnknown(causeOf(value), seen);
+	if (causeMessage !== undefined) return causeMessage;
+
+	const stopReason = stopReasonFrom(value);
+	if (stopReason !== undefined) return `Assistant message ended with stopReason:${stopReason}`;
+	const finishReason = finishReasonFrom(value);
+	if (finishReason !== undefined) return `Model request finished with finish_reason:${finishReason}`;
+	const status = statusFrom(value);
+	if (status !== undefined) return `Model request failed with status ${status}`;
+	const code = codeFrom(value);
+	if (code !== undefined) return `Model request failed with code ${String(code)}`;
+
+	return undefined;
+}
+
+export function modelFailureMessage(error: unknown): string {
+	const structuredMessage = messageFromUnknown(error, new Set());
+	if (structuredMessage !== undefined) return structuredMessage;
+	const rendered = String(error);
+	return rendered === "[object Object]" ? "Model request failed" : rendered;
+}
+
+export function normalizeModelFailureSignal(error: unknown): ModelFallbackFailureSignal {
+	const structured = structuredSignal(error, new Set());
+	if (structured !== undefined) return structured;
+
+	const message = modelFailureMessage(error);
+	const name = errorName(error);
+	const fallbackKind = message.trim().length > 0
+		? fallbackKindFromMessage(message, name)
+		: undefined;
+	return {
+		kind: fallbackKind ?? "unknown",
+		message,
+		source: "string_fallback",
+		...(name !== undefined ? { name } : {}),
+	};
+}
+
+export function isRetryableModelFailure(error: unknown): boolean {
+	if (error === undefined) return false;
+	const signal = normalizeModelFailureSignal(error);
+	return FALLBACKABLE_FAILURE_KINDS.has(signal.kind);
 }
 
 export function formatModelAttemptNote(attempt: ModelAttemptSummary, nextModel?: string): string {

package/dist/builtin/subagents/src/runs/shared/worktree.ts

@@ -2,7 +2,7 @@ import { spawnSync } from "node:child_process";
 import * as fs from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
-import { APP_NAME } from "@bastani/atomic";
+import { APP_NAME, createGitEnvironment } from "@bastani/atomic";
 
 export interface WorktreeSetup {
 	cwd: string;
@@ -82,7 +82,7 @@ interface RepoState {
 const DEFAULT_WORKTREE_SETUP_HOOK_TIMEOUT_MS = 30000;
 
 function runGit(cwd: string, args: string[]): GitResult {
-	const result = spawnSync("git", ["-C", cwd, ...args], { encoding: "utf-8" });
+	const result = spawnSync("git", ["-C", cwd, ...args], { encoding: "utf-8", env: createGitEnvironment() });
 	return {
 		stdout: result.stdout ?? "",
 		stderr: result.stderr ?? "",

package/dist/builtin/web-access/CHANGELOG.md

@@ -4,6 +4,66 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+## [0.8.26-alpha.11] - 2026-06-08
+
+### Changed
+
+- Published a synchronized Atomic 0.8.26-alpha.11 prerelease alongside the subagent codebase-agent tool restriction changes; no functional changes were made in the web-access extension.
+
+## [0.8.26-alpha.10] - 2026-06-08
+
+### Changed
+
+- Bumped package version for the Atomic 0.8.26-alpha.10 prerelease.
+
+## [0.8.26-alpha.9] - 2026-06-07
+
+### Changed
+
+- Bumped package version for the Atomic 0.8.26-alpha.9 prerelease.
+
+## [0.8.26-alpha.8] - 2026-06-07
+
+### Changed
+
+- Bumped package version for the Atomic 0.8.26-alpha.8 prerelease.
+
+## [0.8.26-alpha.7] - 2026-06-07
+
+### Changed
+
+- Bumped package version for the Atomic 0.8.26-alpha.7 prerelease.
+
+## [0.8.26-alpha.6] - 2026-06-06
+
+### Changed
+
+- Bumped package version for the Atomic 0.8.26-alpha.6 prerelease.
+
+## [0.8.26-alpha.5] - 2026-06-06
+
+### Changed
+
+- Bumped package version for the Atomic 0.8.26-alpha.5 prerelease.
+
+## [0.8.26-alpha.4] - 2026-06-05
+
+### Changed
+
+- Bumped package version for the Atomic 0.8.26-alpha.4 prerelease.
+
+## [0.8.26-alpha.3] - 2026-06-05
+
+### Changed
+
+- Bumped package version for the Atomic 0.8.26-alpha.3 prerelease.
+
+## [0.8.26-alpha.2] - 2026-06-05
+
+### Changed
+
+- Bumped package version for the Atomic 0.8.26-alpha.2 prerelease.
+
 ## [0.8.26-alpha.1] - 2026-06-05
 
 ### Changed

package/dist/builtin/web-access/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bastani/web-access",
-  "version": "0.8.26-alpha.1",
+  "version": "0.8.26-alpha.11",
   "private": true,
   "description": "Atomic extension for web search, URL fetching, GitHub repo cloning, PDF/video extraction. Fork of: https://github.com/nicobailon/pi-web-access",
   "contributors": [
@@ -30,7 +30,7 @@
   },
   "peerDependencies": {
     "@bastani/atomic": "*",
-    "@earendil-works/pi-tui": "*"
+    "@earendil-works/pi-tui": "^0.78.1"
   },
   "peerDependenciesMeta": {
     "@bastani/atomic": {

package/dist/builtin/workflows/CHANGELOG.md

@@ -6,6 +6,78 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 
 ## [Unreleased]
 
+## [0.8.26-alpha.11] - 2026-06-08
+
+### Changed
+
+- Published a synchronized Atomic 0.8.26-alpha.11 prerelease alongside the subagent codebase-agent tool restriction changes; no functional changes were made in the workflows extension.
+
+## [0.8.26-alpha.10] - 2026-06-08
+
+### Changed
+
+- Bumped package version for the Atomic 0.8.26-alpha.10 prerelease.
+
+## [0.8.26-alpha.9] - 2026-06-07
+
+### Changed
+
+- Bumped package version for the Atomic 0.8.26-alpha.9 prerelease.
+
+## [0.8.26-alpha.8] - 2026-06-07
+
+### Changed
+
+- Updated workflow-stage chat so `/compact` is the no-argument compaction command and `/context-compact` is no longer handled locally.
+
+## [0.8.26-alpha.7] - 2026-06-07
+
+### Changed
+
+- Refined bundled workflow prompts to keep natural instructions inside meaningful XML sections while removing redundant wrapper noise.
+
+### Fixed
+
+- Fixed the builtin `goal` and `ralph` workflows to fork looped worker/orchestrator-stage sessions from their matching prior iteration, preserving accumulated context while keeping reviewer stages independent ([#1275](https://github.com/bastani-inc/atomic/issues/1275)).
+- Fixed workflow completion gates to rely on structured decision fields instead of manual text/regex heuristics in `goal` and `open-claude-design`.
+
+## [0.8.26-alpha.6] - 2026-06-06
+
+### Changed
+
+- Bumped package version for the Atomic 0.8.26-alpha.6 prerelease.
+
+## [0.8.26-alpha.5] - 2026-06-06
+
+### Fixed
+
+- Fixed the workflow global tool-event hook ignoring unscoped parent-session prompts instead of attributing them to running stages, preventing false `awaiting_input` / "needs attention" states from unrelated `ask_user_question` calls ([#1261](https://github.com/bastani-inc/atomic/issues/1261)).
+
+## [0.8.26-alpha.4] - 2026-06-05
+
+### Changed
+
+- Upgraded builtin workflow fallback model tiers so degraded runs land on stronger models: bumped `github-copilot/claude-opus-4.8` fallbacks from `:medium` to `:xhigh` in `deep-research-codebase` and `ralph`, replaced `claude-sonnet-4-8`/`4.8` fallbacks with `claude-opus-4-8`/`4.8` in the `goal` and `ralph` runner configs, and raised `claude-sonnet-4-6`/`4.6` fallbacks from `:medium` to `:high` in `open-claude-design` ([#1259](https://github.com/bastani-inc/atomic/issues/1259)).
+
+## [0.8.26-alpha.3] - 2026-06-05
+
+### Changed
+
+- Changed the builtin `ralph` workflow to include the workflow current working directory in every stage prompt so planner, implementation, simplification, review, and PR handoff stages keep repository work anchored to the workflow checkout.
+- Changed the builtin `ralph` workflow to skip pull-request creation by default unless `create_pr=true`, omit `pr_report` when disabled, and keep provider-aware PR/MR/review creation instructions in the final stage ([#1255](https://github.com/bastani-inc/atomic/issues/1255)).
+
+## [0.8.26-alpha.2] - 2026-06-05
+
+### Changed
+
+- Updated the `research-codebase` skill to capture a `breaking_changes_allowed` compatibility posture before research fanout, carry it through sub-agent prompts, and record it in research documents so downstream specs and workflows do not preserve legacy APIs by default when breaking changes are allowed ([#1225](https://github.com/bastani-inc/atomic/issues/1225)).
+
+### Fixed
+
+- Fixed stage-local workflow HIL `input` and `editor` prompts losing draft text across Ctrl+D detach/reattach; drafts are kept live-only in memory and cleared when the prompt or run/stage exits ([#1179](https://github.com/bastani-inc/atomic/issues/1179)).
+- Fixed workflow worktree Git commands to strip ambient repository-local Git environment variables before inspecting or creating targeted worktrees.
+- Suppressed intermediate model fallback failure warnings from successful workflow stages while preserving final failures and raw per-attempt diagnostics ([#1226](https://github.com/bastani-inc/atomic/issues/1226)).
+
 ## [0.8.26-alpha.1] - 2026-06-05
 
 ### Fixed

package/dist/builtin/workflows/README.md

@@ -587,20 +587,22 @@ Child workflow outputs: `result`, `status`, `approved`, `goal_id`, `objective`,
 
 ### `ralph`
 
-Plan → orchestrate → simplify → review → PR-handoff workflow: write an RFC-style technical design document under `specs/`, delegate implementation through sub-agents, simplify recent changes, run parallel reviewers, iterate until approval or the loop limit, then prepare a pull-request report. Reviewers inspect repository infrastructure directly as needed; Ralph no longer runs separate `infra-*` discovery stages.
+Plan → orchestrate → simplify → review workflow with optional final-stage PR handoff: write an RFC-style technical design document under `specs/`, delegate implementation through sub-agents, simplify recent changes, run parallel reviewers, and iterate until approval or the loop limit. Ralph skips PR creation by default; prompt text alone does not opt in. Pass `create_pr=true` to authorize only the final `pull-request` stage to inspect provider credentials and attempt provider-appropriate PR/MR/review creation (for example GitHub `gh`, Azure Repos `az repos pr create`, or Sapling/Phabricator tooling). Ralph's own PR-creation instructions live in that final stage. Reviewers inspect repository infrastructure directly as needed; Ralph no longer runs separate `infra-*` discovery stages.
 
 ```text
 /workflow ralph prompt="Plan and migrate the database layer to Drizzle ORM" max_loops=3 base_branch=develop
+/workflow ralph prompt="Plan and migrate the database layer to Drizzle ORM" max_loops=3 base_branch=develop create_pr=true
 ```
 
-| Input         | Type     | Required | Default       | Description                                                   |
-| ------------- | -------- | -------- | ------------- | ------------------------------------------------------------- |
-| `prompt`      | `text`   | ✓        | —             | Task, feature request, issue summary, or spec path to plan, execute, refine, review, and prepare for PR. |
-| `max_loops`        | `number` | —        | `10`          | Maximum plan/orchestrate/review iterations before PR handoff. |
-| `base_branch`      | `string` | —        | `origin/main` | Branch reviewers and PR-prep compare the current delta with; also used to create a missing worktree. |
-| `git_worktree_dir` | `string` | —        | `""`          | Optional reusable Git worktree root. Empty runs in the invoking checkout; non-empty values run Ralph stages in the created/reused worktree. |
+| Input              | Type      | Required | Default       | Description                                                   |
+| ------------------ | --------- | -------- | ------------- | ------------------------------------------------------------- |
+| `prompt`           | `text`    | ✓        | —             | Task, feature request, issue summary, or spec path to plan, execute, refine, and review. |
+| `max_loops`        | `number`  | —        | `10`          | Maximum plan/orchestrate/review iterations before completion or optional final handoff. |
+| `base_branch`      | `string`  | —        | `origin/main` | Branch reviewers and the optional final stage compare the current delta with; also used to create a missing worktree. |
+| `git_worktree_dir` | `string`  | —        | `""`          | Optional reusable Git worktree root. Empty runs in the invoking checkout; non-empty values run Ralph stages in the created/reused worktree. |
+| `create_pr`        | `boolean` | —        | `false`       | Safe-by-default PR creation flag. Omitted or `false` skips the final `pull-request` stage and omits `pr_report`; prompt text alone does not opt in, and only strict `true` authorizes the final `pull-request` stage to attempt provider-appropriate PR/MR/review creation. |
 
-Child workflow outputs: `result`, `plan`, `plan_path`, `implementation_notes_path`, `pr_report`, `approved`, `iterations_completed`, `review_report`, and `review_report_path`.
+Child workflow outputs: `result`, `plan`, `plan_path`, `implementation_notes_path`, `approved`, `iterations_completed`, `review_report`, and `review_report_path`. `pr_report` is included only when `create_pr=true` and the final `pull-request` stage runs.
 
 ### `open-claude-design`