@williambeto/ai-workflow 2.4.9 → 2.6.4

package/CHANGELOG.md

@@ -1,259 +1,1229 @@
+## [2.6.4] - 2026-07-04
+
+### 🐛 Bug Fixes
+
+- *(build)* Include README.md, LICENSE, and CHANGELOG.md in publish manifest build layer
+## [2.6.3] - 2026-07-03
+
+### 🐛 Bug Fixes
+
+- *(cli)* Include EVIDENCE.json and tarball patterns in gitignore rules
+
+### 💼 Other
+
+- Docs/contributing-overhaul into main
+- Refactor/priority-2-code-quality into main
+
+### 🚜 Refactor
+
+- Document opencode-merge architecture and configure cliff.toml for non-conventional commits
+
+### 📚 Documentation
+
+- Overhaul CONTRIBUTING.md with AIWK workflow and safety rules
+
+### ⚙️ Miscellaneous Tasks
+
+- Bump version to 2.6.3 and update CHANGELOG
+## [2.6.2] - 2026-07-03
+
+### 💼 Other
+
+- Docs/readme-overhaul into main
+
+### 📚 Documentation
+
+- Overhaul README with clear problem statement, pipeline, risk model and safety guarantees
+
+### ⚙️ Miscellaneous Tasks
+
+- Bump version to 2.6.2 and update CHANGELOG
+## [2.6.1] - 2026-07-03
+
+### 🐛 Bug Fixes
+
+- Replace any types with proper interfaces in pipeline and delegation controller
+
+### 💼 Other
+
+- Chore/document-auxiliary-skills into main
+- Fix/type-safety-and-changelog into main
+
+### 📚 Documentation
+
+- Document 5 auxiliary skills not exposed as subagents
+
+### ⚙️ Miscellaneous Tasks
+
+- Bump version to 2.6.1 and update CHANGELOG
+## [2.6.0] - 2026-07-02
+
+### 🐛 Bug Fixes
+
+- Generalize proportional request classification
+- Harden v2.6 runtime validation flow
+- Restrict actor extraction to explicit invocations
+- Stop parsing actors from natural requests
+- Rename fullModeEvidence to persistedEvidence and improve docs intent detection
+
+### 💼 Other
+
+- Implement v2.6.0 lean and hardened enforcement lifecycle
+- Feat/v2.6.0-lean-enforcement into main
+- Fix/handoff-mandatory-on-write into main
+
+### 📚 Documentation
+
+- Add v2.6.0-roadmap checklist for autonomous goal execution
+
+### 🧪 Testing
+
+- Assert HANDOFF.md is generated for all write-mode executions
+## [2.5.1] - 2026-06-30
+
+### 🚜 Refactor
+
+- Reduce cyclomatic complexity in request-router and runInit
+- Remove execution mode variables from request-router and map riskLevel directly
+- Introduce proportional policy properties and deprecate mode in classifier and planner
+- Eliminate mode dependency in commands and validation engines using explicit policies
+- Eliminate executionMode in run.ts and align agents contract documentation with proportional policies
+- Complete purification of workflow execution modes into proportional policies across core and CLI
+- Eliminate legacy mode parameter and fallback logic from healer engine and quality guard core, relying purely on policies
+- Complete legacy mode parameter backward compatibility mapping for HealerEngine, EvidenceCollector and collect-evidence command
+
+### 📚 Documentation
+
+- Purify runtime operational contract to reflect proportional policies instead of execution modes
+- Purify legacy modes references from dist-assets and developer specs
+- Fully purify legacy modes references from dist-assets, specs, and execution runtime, and update visual snapshots
+- Purify legacy quick/standard/full references from template assets, sage, and compatibility docs
+
+### ⚙️ Miscellaneous Tasks
+
+- Ignore tmp/ directory in gitignore
+- Bump patch to 2.5.1 and create release decision and notes
+## [2.5.0] - 2026-06-29
+
+### 🚀 Features
+
+- Deprecate gemini integration and upgrade E2E test reliability
+
+### 🐛 Bug Fixes
+
+- *(release)* Enforce strict ESM build and E2E tarball extraction verification
+- *(release)* Remove raw TS sources and disable DTS generation for clean tarball
+- *(fidelity-gate)* Flexibilize CSS vars rule with volume threshold and bypass token
+- *(tests)* Update CSS fixtures to exceed 200-char threshold and fix clean.test.js import path
+- Resolve npm publish path ambiguity using explicit relative dot-slash
+
+### 🚜 Refactor
+
+- *(ts)* Complete clean command migration to ts and update readme documentation links
+- *(ts)* Enable compiler-level declaration emit and fix missing parsed flags type
+- Add node_modules/ to the auto-generated gitignore block in init command
+
+### 📚 Documentation
+
+- Modernize and elevate all project documentation to enterprise-grade
+- Improve readme and quickstart legibility and layout formatting
+- Correct readme description to match official core concept
+- Remove execution pipeline diagram block from readme to keep onboarding clean
+- *(customizations)* Add project-specific documentation skill for Antigravity
+- Correct ordered list prefixes and sanitize wsl path leaks in desktop prompt guide
+- Finalize quickstart list styling and stage clean.js deletion
+- Update CHANGELOG.md for v2.4.9 release and Gemini deprecation
+- Document Antigravity IDE agent selector and slash commands
+
+### ⚙️ Miscellaneous Tasks
+
+- *(modernization)* Migrate core, adapters and cli to TypeScript and modular structure with tsup compilation
+- Enforce strict ESM build and E2E validation in GitHub Actions workflows
+- Add v2.4.9 release decision record
+- Bump version to v2.5.0 and update release decision
 ## [2.4.9] - 2026-06-28
 
-### Added
-- Created developer guide `docs/getting-started/authoring-custom-skills.md` for writing and integrating custom capability skills.
-- Enhanced `dist-assets/docs/visual-validation-guide.md` with advanced Playwright session state authentication and Axe-core accessibility auditing.
+### 📚 Documentation
+
+- *(templates)* Remove obsolete runbooks and map legacy skill references to v2 capabilities
+- Add custom skill authoring guide and advanced visual testing walkthroughs
+- Remove read_only_safety_verification.md from npm files bundle to keep output clean
 
-### Fixed
-- Mapped all legacy skill references (e.g. `tester`, `build-and-validate`) to v2 skill names across all prompts and runbooks templates.
-- Removed obsolete third-party integration guides (`use-napkin-project-memory.md` and `use-linear-for-operational-planning.md`) from packaged runbooks.
-- Removed `read_only_safety_verification.md` from the npm publish files list to reduce package size.
-- Fixed MD029 markdown lint style violation in the visual validation guide.
+### 🧪 Testing
 
+- *(coverage)* Add unit tests for identity, finalization, and branch-gate to resolve branch coverage health check
+- *(coverage)* Add unit tests for templates helper functions and set realistic branch coverage threshold
+
+### ⚙️ Miscellaneous Tasks
+
+- *(release)* Bump version to 2.4.9
 ## [2.4.8] - 2026-06-27
 
-### Added
-- Created 5 new specialized domain skills (`cyber-security`, `database`, `devops`, `localization`, and `performance`) under `.ai-workflow/opencode/skills/` to provide guidance on security, database design, pipelines, i18n, and profiling.
-- Added unit tests for `identity.js`, `canonical-finalization.js`, and `branch-gate.js` exceptions to increase test coverage.
-- Optimized route classifier to automatically trigger appropriate subagent and skill loading rules based on the intent context.
+### 🚀 Features
 
-### Fixed
-- Fixed vitest code coverage failures by adjusting thresholds and excludes.
+- *(skills)* Add cyber-security, devops, performance, database, and localization skills
+- *(routing)* Enforce standard mode for code writes and block Atlas direct implementation
 
+### ⚙️ Miscellaneous Tasks
+
+- Add Collaborative Development & CI/CD workflow rules to AGENTS.md
+- *(rules)* Remove collaborative workflow from project AGENTS.md
+- Bump version to 2.4.8 for release
 ## [2.4.7] - 2026-06-27
 
-### Added
-- Integrated `@vitest/coverage-v8` to compute code coverage, establishing a strict **80% minimum threshold** for lines, functions, branches, and statements in `vitest.config.js`.
-- Added the `npm run test:coverage` script in `package.json` for easy local and CI coverage reporting.
-- Created the official community Code of Conduct template at `.github/CODE_OF_CONDUCT.md` with maintainer contact method.
-- Excluded the `coverage/` directory from git tracking in `.gitignore`.
+### 📚 Documentation
 
-### Fixed
-- Mitigated shell injection risks in the `cli-remediation-executor.js` by removing the insecure `shell:true` parameter and spawning native subprocess commands directly via platform detection (`npm` on POSIX and `npm.cmd` on Windows).
-- Fixed 3 failing unit tests in `visual-verifier.test.js` to align with the CSS variables flexibilization threshold (>200 chars) introduced in v2.4.6.
-- Documented `ai-workflow clean` limitations regarding the absolute deletion of custom `opencode.jsonc` configs in `cli-reference.md` and `troubleshooting.md`.
+- Improve project health — Dependabot, SHA pinning, documentation, PR template
+- Add missing v2.4.6 entry to CHANGELOG.md
 
-### Changed
-- Bumped and updated development dependencies (dev-dependencies group) to their latest stable versions for security and build stability.
+### ⚙️ Miscellaneous Tasks
 
+- Project health round 2 — shell:true mitigation, vitest coverage, docs, and Code of Conduct
+- Release 2.4.7 prepared
 ## [2.4.6] - 2026-06-25
 
-### Fixed
-- Flexibilized Design System CSS variables check in `ArtifactFidelityGate` to only enforce the validation when CSS rules volume is substantial (>200 characters), preventing false-positive blocks on tiny or simple style additions.
+### 🐛 Bug Fixes
 
+- *(fidelity-gate)* Flexibilize CSS vars rule — v2.4.6
 ## [2.4.5] - 2026-06-24
 
-### Changed
-- Refined Design System token validation to support both CSS custom property declarations and usages via `var()`, reducing false-positive quality gate blocks on minor style adjustments.
-- Flexibilized `git push` policy to allow remote pushes to non-protected feature/maintenance branches upon explicit human authorization in the chat, keeping `main` and `master` branches strictly protected.
+### 🐛 Bug Fixes
+
+- *(ci)* Remove npm publish provenance flag for private repo
+
+### 💼 Other
+
+- Merge pull request #114 from williambeto/chore/flexibilize-push-and-css-validation
+
+chore(workflow): flexibilize git push and CSS custom property validations
+- Merge pull request #115 from williambeto/release/v2.4.5
 
+chore(release): bump version to 2.4.5
+- Merge pull request #116 from williambeto/fix/remove-provenance
+
+fix(ci): remove provenance flag from npm publish
+
+### ⚙️ Miscellaneous Tasks
+
+- *(workflow)* Flexibilize git push and CSS custom property validations
+- *(release)* Bump version to 2.4.5 and update CHANGELOG.md
 ## [2.4.4] - 2026-06-24
 
-### Added
-- Added `clean` CLI command (`aw clean`) to cleanly de-initialize and remove AI Workflow files and symlinks from a project.
-- Translated all E2E test titles and comments in the codebase to English for consistent localization.
+### ⚙️ Miscellaneous Tasks
 
+- Bump version to 2.4.4
+- Add human-in-the-loop safety rule to AGENTS.md and dist-assets/AGENTS.md
 ## [2.4.3] - 2026-06-24
 
-### Added
-- Hardened agent prompt contract rules and safety gates for all 6 agents (Atlas, Nexus, Orion, Astra, Sage, Phoenix).
-- Hardened workflow procedures and validation checks for core commands (validate, release, deploy, implement, spec-create).
-- Enhanced all 19 default skills with stricter constraint and procedure parameters.
+### 🚀 Features
+
+- *(skills)* Harden 19 default workflow skills (#112)
+- *(core)* Harden 6 agents and 5 commands (#113)
+- *(cli)* Add clean command and translate codebase to English
 
+### ⚙️ Miscellaneous Tasks
+
+- Bump version to 2.4.3
+- Add NPM provenance and Git tag safety gate to publish-npm workflow
 ## [2.4.2] - 2026-06-21
 
-### Added
-- Registered `Frontend-Design-System-Specialist` subagent in `opencode.jsonc` templates and configurations.
-- Updated `Astra` agent prompt contract to explicitly load `frontend-design-system` skill when active.
+### 🚀 Features
+
+- Register Frontend-Design-System-Specialist subagent in opencode config (#109)
+
+### 📚 Documentation
+
+- Make WSL system prompt instructions generic (#108)
 
+### ⚙️ Miscellaneous Tasks
+
+- Bump version to 2.4.2 (#110)
 ## [2.4.1] - 2026-06-21
 
-### Fixed
-- Hardened visual and accessibility quality gates.
-- Enhanced `ArtifactFidelityGate` to check all skill folder path variations for `frontend-design-system`.
-- Documented Playwright, browser, and Axe-core preconditions in README and quickstart documentation.
-- Improved validation resiliency by warning instead of crashing when browser binaries are missing.
+### 🐛 Bug Fixes
+
+- Harden frontend visual and accessibility gates and requirements
 
+### ⚙️ Miscellaneous Tasks
+
+- Bump version to 2.4.1 (#107)
 ## [2.4.0] - 2026-06-20
 
-### Added
-- Native Visual Evidence capture in `collect-evidence` via `--visual-dist` and `--port` parameters, launching a static loopback server and capturing Chromium screenshots using Playwright.
-- CSS/HTML Design System Gate validation in `ArtifactFidelityGate` that automatically runs when the `frontend-design-system` skill is loaded in the repository, checking for CSS custom properties, inline style density, CDN scripts, and semantic HTML layout tags.
-- Native accessibility auditing command `npx aw validate --a11y` via Axe-core running inside Playwright, blocking critical violations and persisting reports in `.evidence/a11y/report.json`.
-- Standard `frontend-design-system` skill (`.agents/skills/frontend-design-system/SKILL.md`) to guide Astra and other agents through visual hierarchy, spacing grids, theme palettes, accessible contrast, and output rules.
-- Automated tests covering static loopback servers, Playwright screenshots, Axe-core checks, inline style gates, CSS tokens, and HTML semantics.
+### 🚀 Features
 
-## [2.3.7] - 2026-06-20
+- Implement frontend design system and visual evidence gates
+- Integrate delightful frontend guidelines into frontend-design-system skill
 
-### Changed
-- Bumped version to 2.3.7.
+### ⚙️ Miscellaneous Tasks
 
+- Bump version to 2.3.7
+- Bump version to 2.4.0
 ## [2.3.6] - 2026-06-20
 
-### Added
-- Request-aware delivery decision and artifact fidelity gates (GREEN phase) to prevent false-positive completions in frontend/backend stack tasks.
-- Hardened check for blocking delivery decisions in `ArtifactFidelityGate` and `Finalizer`.
-- False-positive regression tests and release readiness audit documentation.
+### 🚀 Features
+
+- Implement request-aware delivery decision and artifact fidelity gates (GREEN phase)
+
+### 🐛 Bug Fixes
+
+- Correct architecture and design patterns policy paths in technical plan prompt
+
+### 💼 Other
 
-### Fixed
-- Aligned WordPress root detection logic between `DeliveryDecisionEngine` and `ArtifactFidelityGate`.
-- Corrected architecture and design patterns policy relative paths in the technical plan prompt.
-- Normalized approved release decision string to `RELEASE_OR_DEPLOY_APPROVED`.
+- Harden v2.3.6 workflow false-positive gates
 
+### 📚 Documentation
+
+- Add v2.3.6 final release readiness audit
+
+### 🧪 Testing
+
+- Add false-positive regression tests and audits docs
+
+### ⚙️ Miscellaneous Tasks
+
+- Bump version to 2.3.6
+- Add Core Concept memory to AGENTS.md rules
+- Add Core Concept memory to AGENTS.md rules
+- Harden request-aware delivery decision and artifact fidelity gates
+- Normalize approved release decision to RELEASE_OR_DEPLOY_APPROVED
+- Align WordPress root detection between DeliveryDecisionEngine and ArtifactFidelityGate
+- Enforce blocking delivery decisions in ArtifactFidelityGate and Finalizer
 ## [2.3.5] - 2026-06-20
 
-### Fixed
-- Corrected the governance policy relative path header in all standard skill Markdown files.
+### 🐛 Bug Fixes
+
+- Correct governance policy relative path in skill headers
+
+### ⚙️ Miscellaneous Tasks
 
+- Bump version to 2.3.5
 ## [2.3.4] - 2026-06-20
 
-### Fixed
-- Corrected the mapping and resolution path of policies under `opencode/docs`.
+### 🐛 Bug Fixes
 
+- Correct policies path mapping to opencode/docs
+
+### ⚙️ Miscellaneous Tasks
+
+- Bump version to 2.3.4
 ## [2.3.3] - 2026-06-20
 
-### Added
-- First phase implementation of the Delivery Decision Engine and Artifact Fidelity Gate checking for correct technology stacks.
-- Hardened PromptContracts and validation scripts for stack-aware quality checking.
+### 🚀 Features
+
+- Implement Delivery Decision Engine and Artifact Fidelity Gate
+
+### 📚 Documentation
 
-## [2.3.2] - 2026-06-19
+- Clarify first-time vs installed usage of aw alias
+- Add v2.3.2 contract quality audit report
 
+### ⚙️ Miscellaneous Tasks
 
-### Documentation
-- Clarified first-time usage with `npx @williambeto/ai-workflow init`.
-- Clarified local installed-package alias usage with `npx aw init`, `npx aw doctor`, and `npx aw run`.
+- Add aw binary alias to CLI
+- Prepare v2.3.2 release
+- Harden contracts and validators for stack-aware quality
+- Bump version to 2.3.3
+## [2.3.1] - 2026-06-19
 
-### Notes
-- No CLI behavior changed.
-- No runtime behavior changed.
+### 🚀 Features
 
-## [2.3.1] - 2026-06-18
+- *(routing)* Implement generic routing contract and agent consistency checks
+- Normalize active agents with PromptContract and validate:agents check
 
-### Fixed
-- Enforced runtime actor selection for explicit actor routing.
-- Prevented silent fallback to default runtime behavior when a selected specialized actor cannot be applied.
-- Blocked specialized actor execution when the runtime does not support `--agent`.
-- Added truthful ledger evidence for requested actor, selected actor, runtime requested actor and runtime applied actor.
-- Hardened routing consistency validation across agents, runtime adapter and delegation ledger.
+### 🐛 Bug Fixes
 
-### Added
-- Unit tests covering OpenCode runtime actor enforcement and fail-closed checks.
-- E2E coverage for explicit actor routing, blocked fallbacks and default non-specialized execution.
-- Updated routing consistency validation to catch unsupported actor execution returning success.
+- Enforce runtime actor constraint and fail closed on missing --agent support
 
-### Release
-- Prepared locally only.
-- Not published to npm.
-- No git tag created.
-- No remote push performed.
+### 💼 Other
 
+- Merge branch 'fix/routing-contract-agent-consistency' into main
+
+### ⚙️ Miscellaneous Tasks
+
+- Prepare v2.3.1 release locally
+- Convert active skills, subagents, and commands into PromptContracts
+- Enforce consumer-facing npm packaging policy and add verify check
+- Finalize v2.3.1 release readiness evidence
 ## [2.3.0] - 2026-06-16
 
-### Added
-- Isolated read-only workspace runner to prevent execution modifications from altering the original repository.
-- Sage validation agent execution in full/deep task mode, logging events to the ledger and handling revalidation.
-- Real OpenCode smoke test integration inside the `release:verify` suite.
-- Scenario 17 in E2E tests verifying the complete multi-agent coordination loop (`Astra -> Sage -> Phoenix -> Sage`).
+### 🚀 Features
 
-### Fixed
-- Sequential state transitions for read-only runs (`IMPLEMENTING -> IMPLEMENTED -> VALIDATING -> COMPLETED`).
-- Snapshot comparison logic to correctly target `.snapshot.files` and compare `.sha256` properties.
-- Bypassed physical writing of ledger histories and handoff markdown files during read-only executions.
-- Injected mock OpenCode environment configuration inside `verify-packed-consumer.mjs` for autonomous sandbox runs.
+- Implement stability, delegation controller, multi-stack planner, runtime remediation and finalizer
+- Implement operational invariants for v2.3.0
 
-## [2.0.5] - 2026-06-08
+### 🐛 Bug Fixes
 
-### Fixed
+- *(readonly)* Resolve read-only state transitions, snapshot checks, and disable physical file writes
+- *(release)* Execute Sage in full mode, integrate real OpenCode smoke test in release:verify
+- *(release)* Self-contain opencode check in CLI smoke test
 
-- Locked standard/full Atlas completion behind current-task Sage, Evidence Collector, and QualityGuard execution.
-- Rejected direct Atlas `PASS`, user-deferred `/validate`, self-validation, and missing executable finalizer paths.
-- Added canonical cross-field validation for branch evidence, owners, artifacts, truthfulness, collector/final status, and Phoenix/Sage consistency.
-- Strengthened fictitious-product claim detection for unsupported market superlatives, pricing, SLA/support, API, batch, and export capabilities.
-- Added regression tests for runtime completion lock and internally inconsistent canonical results.
+### 💼 Other
 
-## [2.0.3] - 2026-06-08
+- Merge branch 'feat/stability-delegation-remediation-finalizer' into main
+- Fix critical vulnerabilities: block main branch writes, prevent command injection, enforce read-only containment, ensure finalizer integrity check, Phoenix remediation file content check, and implement 12 E2E operational scenarios
+- Fix finalizer content hashing, read-only confinement checks on HEAD/index/status/SHA-256, block destructive commands in adapter, map delegation to Atlas and Sage actors, and add real E2E consumer flow tests
+- Finalize CHANGELOG.md and release decision for v2.3.0
+- Finalize release decision for v2.3.0
 
-### Added
+### 📚 Documentation
 
-- Lightweight workflow profiles separating execution mode from domain quality guidance.
-- Deterministic profile routing for frontend product, frontend utility, backend API, refactor, documentation, and security review work.
-- Objective owner-completion contract with one bounded resume before `BLOCKED`.
-- Consumer workflow profile documentation.
+- Include read_only_safety_verification.md in workspace and files array
 
-### Changed
+### ⚙️ Miscellaneous Tasks
 
-- Visual validation now uses objective rendered checks instead of subjective labels or benchmark comparison.
-- Frontend product and utility profiles load both frontend and UI/UX skills without imposing a fixed SaaS page template.
-- Product Truthfulness accepts clear page-level conceptual labels for non-authoritative commercial concepts while keeping official/live/security/SLA claims strict.
-- Atlas handoff guidance is shorter and outcome-first.
+- Add publishConfig to restrict release to public npm registry
+- Solve read-only validation, dynamic paths, and logEvent delegation fixes
+- Remove obsolete research reports and implementation plan
+- *(release)* Update commit and tarball sha256 in release decision
+## [2.2.7] - 2026-06-15
 
-# Changelog
+### 🚀 Features
 
-## [2.0.4] - 2026-06-08
+- Add Antigravity adapter, non-fast-forward merge gate, and UNC path PowerShell support
+- Restructure agents and subagents under .agents/agents/{Name}/agent.json
+- Restructure agents and subagents under lowercase directories with hidden false for discovery
 
-### Fixed
+### 🐛 Bug Fixes
 
-- Removed circular finalization evidence by deriving canonical results from executed policy checks and persisting them in `EVIDENCE.json`.
-- Enforced all canonical standard/full final response fields from one machine-readable contract.
-- Persisted and rendered delegation owners, loaded skills, delivery artifacts, Sage revalidation, Evidence Collector, QualityGuard, Product Truthfulness, finalizer, and terminal status.
-- Required structured TypeScript waivers with an explicit source and concrete constraint.
-- Added regression coverage for omitted fields, direct finalizer bypass, remediation without Sage revalidation, and canonical status spelling.
+- Correct SKILLS_COMMON_GOVERNANCE.md relative path in consumer skills and copy policies to .agents/docs/policies/
+- Copy SKILLS_COMMON_GOVERNANCE.md into each platform's docs/policies/ on deploy
+- Adjust visual regression diff tolerance for CI compatibility and add v2.2.6 release decision
 
+### 💼 Other
 
-## 2.0.2
+- Feat/add-antigravity-support
 
-### Fixed
+### 🚜 Refactor
 
-- Enforced mode-specific final delivery artifacts so `standard` cannot pass with `delivery-summary.md`.
-- Added mandatory finalization evidence for collector, QualityGuard, Product Truthfulness, delegation, and finalizer identity.
-- Prevented `PASS` when canonical finalization fields are missing or inconsistent.
-- Added direct tests for standard artifact mismatch and finalization evidence.
-- Kept bounded remediation responsible for correcting final-gate failures before promotion.
+- Use native .agents/ directory for Antigravity skills, agents, and commands
 
-## 2.0.1
+### 📚 Documentation
 
-### Fixed
+- Promote Antigravity to Supported and document /agents behavior in compatibility matrix
 
-- Added bounded, progress-aware remediation for recoverable quality and delegation gates.
-- Prevented unresolved gate failures from being downgraded to `PASS_WITH_NOTES`.
-- Added hard remediation limits by execution mode and blocking on repeated/no-progress findings.
-- Synchronized the root evidence contract with the canonical distributed contract.
-- Added direct coverage for implementation documentation and remediation lifecycle behavior.
+### ⚙️ Miscellaneous Tasks
 
-## 2.0.0
+- *(release)* 2.2.7
+## [2.2.6] - 2026-06-14
 
-### Added
+### 🐛 Bug Fixes
 
-- OpenCode-first workflow with six primary ownership roles.
-- Proportional `quick`, `standard`, and `full` delivery modes.
-- Persisted delivery artifacts and executable evidence collection.
-- Branch recovery, quality gates, delegation statuses, Product Truthfulness, and safe packaging.
-- TypeScript default for new frontend applications unless explicitly waived.
-- Consumer quickstart, runtime compatibility guidance, and v2 upgrade documentation.
-- Optional Codex, Claude Code, and Gemini adapter assets.
+- *(validate)* Bypass npx command resolution to avoid scoped package registry lookup in CI
+- *(validate)* Build dist folder automatically inside upgrade validation script
 
-### Changed
+### 💼 Other
 
-- Public version identity is now aligned with the npm upgrade path from `1.x` to `2.0.0`.
-- Active documentation describes only the current 2.0 product and supported migration path.
-- Repository-maintenance paths are separated from consumer-facing paths.
-- The initial `2.0.0` rollout uses the npm `next` dist-tag without moving `latest`.
+- Merge pull request #106 from williambeto/fix/upgrade-path-ci
 
-### Removed
+fix(validate): bypass npx command resolution in CI
 
-- Obsolete pre-2.0 runtime guidance, taxonomies, aliases, package paths, and intermediate release-candidate documentation.
+### ⚙️ Miscellaneous Tasks
 
-## Previous public releases
+- Add playwright install step to github actions workflows
+- Bump version to 2.2.6
+## [2.2.5] - 2026-06-14
 
-The previous npm line ends at `1.19.1`. Detailed historical changes remain available in Git history and GitHub Releases.
+### 🚀 Features
 
-## 2.1.0
+- Cleanup boilerplate across remaining 18 skill files
+- Add automated upgrade regression validator
+- Add automated playwright visual e2e validation for templates
 
-### Changed
+### ⚙️ Miscellaneous Tasks
+
+- Local version bump to 2.2.3
+- Bump version to 2.2.4
+- Bump version to 2.2.5
+## [2.2.2] - 2026-06-14
+
+### 🚀 Features
+
+- Extract skills common governance policy and refactor project-memory
+
+### ⚙️ Miscellaneous Tasks
+
+- Bump version to 2.2.2 and update release notes
+## [2.2.1] - 2026-06-14
+
+### 📚 Documentation
+
+- Clean up public documentation links in README.md
+
+### ⚙️ Miscellaneous Tasks
+
+- Bump version to 2.2.1 and update release records
+## [2.2.0] - 2026-06-14
+
+### 🚀 Features
+
+- Complete natural request execution workflow with execute command
+- Add token economy validator and dedicated state machine tests
+
+### 💼 Other
+
+- Merge branch 'feat/finalize-workflow-kit'
+- Merge branch 'feat/finalize-workflow-kit'
+
+### 📚 Documentation
+
+- Update execute command quick start example in README
+- Add visual E2E validation & semantic UX quality guide
+- Finalize v2.2.0 release decision and notes
+
+### ⚙️ Miscellaneous Tasks
+
+- Add public package author
+- Add public package author
+- Align package-lock.json version with package.json
+## [2.1.0] - 2026-06-10
+
+### 🚀 Features
+
+- Add test coverage, remove dead code, document design decisions
+- Test coverage, dead code removal, design docs (#post-audit)
+- Wire default CLI remediation executor to HealerEngine
+- Default CLI remediation executor (#full-mode-ready)
+
+### 🐛 Bug Fixes
+
+- Enforce canonical finalization evidence
+- Release v2.0.4 canonical finalization
+- Enforce runtime-backed canonical finalization
+- Release v2.0.5 runtime enforcement
+- Enforce proportional behavioral testing
+- Require Atlas runtime finalization
+- Keep non-executable work proportional
+- Keep style and dependency changes proportional
+- Correct P0/P1 bugs found in static workflow audit
+- Correct P0/P1 bugs found in static workflow audit (#smoke-tested)
+
+### 🚜 Refactor
+
+- Recover proportionate v2 workflow
+- Recover proportionate v2 workflow
+
+### 📚 Documentation
+
+- Align publish readiness for v2.1.0
+- Align publish readiness for v2.1.0
+- Align generated consumer paths
+- Align generated consumer paths
+- Finalize public release decision
+- Finalize public release decision
+- Clarify modes and profiles
+- Clarify modes and profiles
+- Record final package checksum
+- Align public documentation after npm release
+- Align public documentation after npm release
+
+### ⚙️ Miscellaneous Tasks
+
+- Remove local project memory artifact
+- Remove local project memory artifact
+- Enable manual npm publish workflow
+- Enable manual npm publish workflow
+## [2.0.3] - 2026-06-08
 
-- Recovered the original product direction: proportionate workflows, useful software, and concise evidence.
-- Kept protected-branch enforcement, required validation execution, bounded remediation, and false-success prevention as non-negotiable guardrails.
-- Removed mandatory canonical response fields, owner JSON, fixed delivery filenames, and persisted evidence from quick/standard work.
-- Simplified Atlas to route and coordinate without forcing multi-agent ceremony.
-- Simplified QualityGuard to objective branch, validation, documentation, UI-evidence, and full-mode persistence checks.
-- Replaced keyword-driven Product Truthfulness enforcement with semantic guidance.
+### 💼 Other
+
+- Merge remote-tracking branch 'origin/release/v2.0.3-workflow-profile-stabilization'
+
+### 🚜 Refactor
+
+- Stabilize workflow profiles and core boundaries
+## [2.0.2] - 2026-06-08
+
+### 🐛 Bug Fixes
+
+- Preserve canonical finalization statuses
+
+### 💼 Other
+
+- Merge remote-tracking branch 'origin/release/v2.0.2-final-gate-enforcement'
+## [2.0.1] - 2026-06-07
+
+### 🐛 Bug Fixes
+
+- Add bounded quality remediation
+
+### 💼 Other
+
+- Merge remote-tracking branch 'origin/release/v2.0.1-bounded-quality-remediation'
+## [2.0.0] - 2026-06-06
+
+### 🚀 Features
+
+- *(cli)* Implement platform-specific flags for native skills migration (PR 0)
+- *(adapters)* Implement multi-platform native migration (PR 0 - Phase 2)
+- *(sdd)* Implement tiered spec templates and validator (REQ-005)
+- *(cli)* Integrate SDD Engine gate into 'implement' command (REQ-005)
+- *(gates)* Implement core branch gate logic and hook installation (REQ-001 - PR 1)
+- *(gates)* Implement override mechanism and audit logging (REQ-001 - PR 2)
+- *(hardening)* Inject Subagent Completion Contract into all platform adapters
+- *(evidence)* Implement Standardized Evidence Collector engine (REQ-002)
+- *(handoff)* Implement Automated Handoff Packets engine (REQ-003)
+- *(quality)* Implement Automated Quality Policy Enforcement (REQ-008)
+- *(autonomy)* Implement Self-Healing Lifecycle and Phoenix agent (REQ-004)
+- *(release)* AI Workflow Kit v3.0.0 - Elite Governance
+- *(cli)* Implement master 'run' command (Elite Conveyor Belt)
+- *(core)* Stabilize v3.0.0 implementation
+- *(release)* AI Workflow Kit v3.0.0 - Elite Governance (Stable)
+- *(core)* Unified v3.0.0 architecture for NPM distribution
+- *(core)* Complete v3.0.0 structural unification
+- Implement documentation governance engine (REQ-012)
+- *(agent)* Add prompt-engineer as production subagent (#81)
+- *(v3)* Consolidate core architecture and optimize token economy
+- *(core)* V3.0.0 consolidation - agent metadata standardization and repo purity
+- *(core)* Consolidate repository structure and unify package identity
+- *(core)* Consolidate Brain into Muscle (D8) - Unified Private Monorepo
+- *(core)* Complete opencode agent registry with all 19 core skills
+- *(core)* PR-1 remediation - restore validation pipeline and fix paths
+- *(templates)* Make README.workflow.md more actionable
+- *(ci)* Generate and add missing package-lock.json
+- *(ci)* Integrate lockfile integrity spec (REQ-015/TECH-015) and update status
+- *(release)* V3.2.1 finalization
+- *(root)* Reorganize root directory and update engine paths
+- *(memory)* Implement on-demand project memory initialization
+- *(examples)* Distribute high-quality examples to consumers
+- *(config)* Synchronize managed blocks with canonical opencode keys
+- *(examples)* Complete master expansion with 15 high-fidelity examples and automated validation
+- Implement native Gemini CLI integration via .gemini/ structure
+- *(gemini)* Ensure reliable extension discovery via hard copies and frontmatter
+- *(codex)* Implement multi-directory deep integration architecture
+- *(claude)* Implement hierarchical rule strategy for Claude Code integration
+- *(guard)* Add self-execution protection to init command
+- *(dev)* Implement --dev-mode flag for init command
+- Generate standard consumer workflow output
+- Add full profile examples output
+
+### 🐛 Bug Fixes
+
+- Resolve v2 runtime behavior blockers
+- Harden v2 release content and validation
+- Harden v2 quality and runtime gates
+- Prevent v2 output quality regression
+- Enforce system-wide v2 output quality gates
+- Add quality failure examples to 7 skills with existing boundaries
+- Enforce system-wide v2 output quality gates
+- Prevent autopilot branch gate deadlock
+- Align implementation manager contract
+- Align release validation deployment managers
+- Align discovery spec planning audit managers
+- Align v2 command contracts
+- Repair v2 release candidate package memory blockers
+- Resolve v2 runtime scenario blockers
+- Replace generic v2 skill descriptions
+- Harden branch gate and output quality enforcement
+- Enforce branch gate and output quality
+- *(cli)* Resolve race condition in platform migration
+- *(governance)* Remove orphan agent references to finalize Elite 6 purity
+- *(core)* Final v3.0.0 stability fixes
+- *(core)* Implement dynamic package root resolution in package-assets.js
+- *(core)* Remove accidental pollution from previous commit
+- Import QualityGuard in collect-evidence command
+- *(core)* Restore specialized skill content and harden validation
+- Remove invalid MD060 rule from markdownlint config
+- *(docs)* Resolve full documentation local links
+- Micro items phase 1 — skill count, guide prompt, guide link, DESIGN note (#78)
+- Small items phase 1 — link fix, engines, evidence, rm placeholder (#79)
+- *(package)* Correct files array, remove invalid main, sync version (#82)
+- *(lint)* Restore lint:md — fix script, silence noisy rules, fix test spec (#84)
+- *(prompt-engineer)* Migrate from agents/ to skills/ path
+- *(package)* Include opencode prompt-engineer skill
+- *(opencode)* Remove default Linear MCP config
+- *(ai-workflow)* Remove broken subagents and bump 3.1.10
+- Node engine >=20.11 and remove invalid MD060 lint rule
+- *(cli-docs)* Fix parser to handle hyphenated command names
+- *(ci)* Handle non-git environments in artifact validator
+- *(ci)* Improve artifact safety validator with recursive scan
+- *(consumer)* Restore governance infrastructure and fix prompt references
+- *(consumer)* Restore missing templates, inject validation script and fix prompt links
+- *(consumer)* Finalize sanity adjustments for update-memory, optimize-tokens and README
+- *(workspace)* Remove temporary .txt artifacts
+- *(agents)* Normalize YAML 'name' field to lowercase in all agents
+- *(workspace)* Remove AGENTS.md from gitignore
+- *(docs)* Restore AGENTS.md as a physical file
+- *(docs)* Update Elite Governance version to v3.8.6 in AGENTS.md
+- *(governance)* Remediate audit findings and align taxonomy
+- *(test)* Add self-repairing symlinks to delegation validator
+- *(ci)* Update release notes extraction regex for CHANGELOG.md
+- Restore dogfooding opencode config boundary
+- Minimize standard consumer output
+- Remove stale opencode config from package policy
+- Clarify Atlas routing for ambiguous and remediation tasks
+- Resolve critical runtime contract blockers
+- Harden rc11 documentation ui security and provider compatibility
+- Enforce delivery artifacts and evidence collection
+- Add proportional workflow modes
+- Enforce efficient workflow artifact conformance
+- Enforce runtime finalization and evidence integrity
+- Enforce product truthfulness and frontend quality
+- Consolidate runtime status and evidence contracts
+- Harden behavioral contracts across workflow assets
+- Enforce executable delegation and product truthfulness
+
+### 💼 Other
+
+- Merge branch 'fix/output-quality-regression'
+- Fix PR-2 documentation links
+- Merge branch 'feat/consolidate-cli-commands'
+- Merge branch 'fix/prompt-engineer-skill-path'
+- Merge branch 'feat/simplify-profiles'
+- Merge branch 'feat/private-spec-authority'
+- Merge branch 'fix/readme-public-link'
+- Merge v3.0.0 compliance: Governance consolidation and REQ-014
+
+Consolida conformidade v3.0.0. Aprovado por Atlas/Sage.
+- Merge Lockfile integration
+
+Lockfile integrado e validado.
+- Merge release v3.2.1
+
+Conclusão da versão 3.2.1.
+- Merge pull request #91 from williambeto/feat/root-organization
+
+feat(root): reorganize root directory
+- Merge pull request #92 from williambeto/release/v3.4.1
+
+chore(release): v3.4.1
+- *(assets)* Sanitize templates and move internal roadmap
+- Merge pull request #93 from williambeto/bugfix/template-sanitization
+
+bugfix(assets): sanitize templates
+- Merge pull request #94 from williambeto/feat/on-demand-memory
+
+feat(memory): on-demand project memory
+- Merge pull request #95 from williambeto/release/v3.5.1
+
+chore(release): v3.5.1
+- Merge pull request #96 from williambeto/feat/examples-distribution
+
+feat(examples): distribute workflow examples
+- Merge pull request #97 from williambeto/release/v3.6.0
+
+chore(release): v3.6.0
+- Merge pull request #98 from williambeto/fix/consumer-governance
+
+fix(consumer): restore governance
+- Merge pull request #99 from williambeto/release/v3.6.2
+
+chore(release): v3.6.2
+- Merge pull request #100 from williambeto/feat/managed-blocks-sync
+
+feat(config): sync managed blocks
+- Merge pull request #101 from williambeto/release/v3.7.1
+
+chore(release): v3.7.1
+- Merge pull request #102 from williambeto/feat/consumer-sanity-restoration
+
+fix(consumer): restoration of templates and scripts
+- Merge pull request #103 from williambeto/release/v3.7.3
+
+chore(release): v3.7.3
+- Merge pull request #104 from williambeto/feat/master-examples-expansion
+
+feat(examples): Master Expansion (15 Examples)
+- Merge pull request #105 from williambeto/release/v3.8.0
+
+chore(release): v3.8.0
+- V3.8.1 - Elite Remediation
+- V3.8.2 - Gemini CLI Deep Integration
+- Integrate v4 distribution restructuring
+- Merge branch 'fix/runtime-taxonomy-inventory'
+- Merge branch 'fix/final-runtime-flow'
+
+docs: integrate corrected final-flow dist-assets
+
+- Implement gate flow: Spec draft -> Spec review -> Technical plan ->
+  PR breakdown -> Implementation -> Validation -> Evidence report
+- Atlas blocks implementation until all required gates satisfied
+- Nexus owns spec draft/review, Orion owns plan/PR breakdown
+- Astra implements only after approved PR scope, Sage validates
+- Merge branch 'refactor/multiruntime-contracts-clean'
+- Merge branch 'fix/atlas-mode-output-consistency'
+- Merge remote-tracking branch 'origin/release/v4-contracts-rc'
+
+# Conflicts:
+#	package-lock.json
+#	package.json
+- Merge branch 'chore/freeze-release-automation'
+- Merge remote-tracking branch 'origin/release/v4-mainline-clean'
+- Merge remote-tracking branch 'origin/release/rc8-test-enforcement-approved'
+- Merge remote-tracking branch 'origin/release/rc9-cleaned-conservative-2'
+- Merge remote-tracking branch 'origin/release/rc10-critical-contract-fixes'
+- Merge remote-tracking branch 'origin/release/rc11-fixed-doc-security-ui-no-icons'
+- Merge remote-tracking branch 'origin/release/rc12-delivery-artifacts-evidence'
+- Merge remote-tracking branch 'origin/release/rc13-proportional-workflow-modes'
+- Merge remote-tracking branch 'origin/release/rc14-workflow-efficiency'
+- Merge remote-tracking branch 'origin/release/rc15-runtime-finalization-evidence'
+- Merge remote-tracking branch 'origin/release/rc16-product-truthfulness'
+- Merge remote-tracking branch 'origin/release/rc17-runtime-status-contracts'
+- Merge remote-tracking branch 'origin/release/rc18-behavioral-contract-hardening'
+- Merge remote-tracking branch 'origin/release/rc19-executable-delegation-truthfulness'
+- Merge remote-tracking branch 'origin/release/rc20-docs-onboarding-compatibility'
+- Merge remote-tracking branch 'origin/release/rc21-v4-docs-consolidation'
+- Merge remote-tracking branch 'origin/release/rc22-public-version-2.0.0'
+
+### 🚜 Refactor
+
+- Remove codex shipped assets
+- Implement v2 command taxonomy
+- Implement v2 primary agents
+- Implement v2 specialist subagents
+- Implement v2 skills and capabilities
+- Update v2 opencode config and generated output
+- *(agents)* Strict Elite 6 identity unification
+- *(templates)* Strictly enforce Pure Elite 6 agent generation
+- *(cli)* Remove 6 commands, keep 4 core — run, init, collect-evidence, doctor
+- *(init)* Make full profile the only mode
+- *(governance)* Consolidate governance policies and archive legacy documents
+- Add multi-runtime runtime contracts
+
+### 📚 Documentation
+
+- Add v2 product direction spec
+- Add v2 taxonomy spec
+- Add v2 runtime and codex removal policy spec
+- Add v2 package output spec
+- Add v2 migration inventory spec
+- Add v2 removal plan spec
+- Add v2 opencode integration spec
+- Add v2 validation strategy spec
+- Add v2 release plan spec
+- Add v2 implementation pr breakdown spec
+- Add v2 migration guide
+- Update package metadata for opencode-first v2
+- Rewrite references for v2 taxonomy
+- Finalize v2 skill content
+- Add v2 quality runtime release spec draft
+- Define v2 artifact instruction contract
+- Tighten v2 artifact gate contract
+- Add v2 quality runtime technical plan
+- Add v2 quality runtime pr breakdown
+- Define subagent completion contract
+- Final release validation evidence (PR B7)
+- Add validation evidence and consumer smoke test to section 16
+- Add canonical v2 policy contracts
+- Reference canonical v2 policy contracts
+- Roll out ui evidence gate usage
+- Finalize CHANGELOG.md for v3.0.0 release
+- Finalize CHANGELOG for v3.0.0 release
+- *(core)* Update package README to v3.0.0 manifesto
+- Add Quickstart guide and enhance README for public readiness
+- Unify 8 canonical policies with standardized numbering
+- Fix final broken link in npm-consumer-quickstart
+- *(adr)* Document inline vs file ADR convention (#80)
+- *(readme)* Rewrite inner README — remove outdated refs, align with root tone (#83)
+- *(spec)* Add current CLI documentation proposal
+- *(governance)* Enforce private spec authority
+- *(readme)* Replace broken public source link
+- *(readme)* Remove failing external link
+- Add governance boundary README in docs/policies/
+- *(specs)* Update project context to reflect unified monorepo structure
+- *(quickstart)* Fix entry point references
+- *(full-docs)* Restructure and fix cross-reference links
+- *(cli)* Add CLI command reference and validation script
+- *(api)* Add API engine reference documenting BranchGate, HealerEngine, orchestrator, init, and platform adapters
+- *(adr)* Add architecture decision records ADR-0000 through ADR-0007
+- *(contributing)* Add comprehensive contributing guide with SDD workflow, validation gates, and PR process
+- Add troubleshooting guide, consumer onboarding, slim README
+- *(index)* Add documentation map INDEX.md
+- Create project documentation (OpenSpec)
+- Add practical try-it-now block to README and template
+- Translate to English and refocus on OpenCode-first workflow
+- *(quickstart)* Rewrite to match OpenCode-first pattern
+- Update changelog for v3.8.1-v3.8.4 releases
+- Define v2 distribution boundaries and quality contracts
+- Add non-negotiable governance rules (no .ai-workflow scanning, English only)
+- Inventory current v2 runtime assets
+- Audit v2 distribution restructuring
+- Prepare distribution restructuring merge readiness
+- Finalize merge readiness after version alignment
+- Normalize runtime taxonomy and inventory
+- Integrate corrected final-flow dist-assets
+- Clarify Atlas task mode vs response mode
+- Tighten Atlas classification thresholds
+- Add consumer onboarding and runtime compatibility
+- Consolidate v4 documentation and remove legacy guidance
+
+### 🧪 Testing
+
+- Update v2 validation checks
+- Document blocked v2 runtime behavior validation
+- Harden skill specialist validation
+- Validate v2 runtime scenarios
+- Validate canonical policy references
+- Add ui evidence gate
+- Add ui evidence gate
+- Detect ui evidence gate applicability
+- Detect ui evidence gate applicability
+- Add ui evidence validator fixtures
+- Add ui evidence validator fixtures
+
+### ⚙️ Miscellaneous Tasks
+
+- Document pre-v2 freeze baseline
+- Document pre-v2 freeze baseline (#72)
+- Record v2 project memory
+- Prepare v2 release readiness
+- *(release)* 1.19.2 [skip ci]
+- *(release)* 1.19.3 [skip ci]
+- *(release)* 1.19.4 [skip ci]
+- *(release)* 1.19.5 [skip ci]
+- Fix v2 public release readiness
+- *(release)* 1.19.2 [skip ci]
+- *(release)* 1.19.3 [skip ci]
+- *(release)* 1.19.4 [skip ci]
+- *(release)* 1.19.5 [skip ci]
+- *(release)* 1.19.6 [skip ci]
+- *(release)* 1.19.7 [skip ci]
+- *(release)* 1.19.8 [skip ci]
+- Restore v2 release version
+- *(release)* 1.19.9 [skip ci]
+- Restore v2 release version
+- *(release)* Integrate native skills migration (REQ-000)
+- *(release)* Integrate SDD Engine (REQ-005)
+- *(release)* Integrate Automated Branch Gates (REQ-001)
+- *(release)* Integrate Standardized Evidence Collector (REQ-002)
+- *(release)* Integrate Automated Handoff Packets (REQ-003)
+- *(release)* Integrate Quality Policy Enforcement (REQ-008)
+- *(release)* Integrate Self-Healing (REQ-004)
+- *(release)* Final certification hardening and bugfixes (REQ-007)
+- *(core)* Ignore local governance artifacts
+- Fix CI validation suite and synchronize with v3.0.0 architecture
+- *(security)* Sanitize local paths and legacy project naming
+- *(release)* 3.1.0 [skip ci]
+- Move validation dependencies to root for CI compatibility
+- Harden CI resilience for artifact safety validation
+- *(release)* 3.1.1 [skip ci]
+- *(release)* 3.1.2 [skip ci]
+- *(release)* 3.1.3 [skip ci]
+- *(release)* 3.1.4 [skip ci]
+- *(release)* 3.1.5 [skip ci]
+- *(release)* 3.1.6 [skip ci]
+- *(release)* 3.1.7 [skip ci]
+- Release 3.1.8
+- *(release)* 3.1.9 [skip ci]
+- *(release)* 3.1.10 [skip ci]
+- *(core)* V3.1.13 final refinements - gemini visibility and build resilience
+- Track openspec artifacts and ignore opencode/dist
+- *(specs)* Restore missing REQ-014 artifact
+- *(specs)* Restore missing TECH-014 artifact
+- *(governance)* Update validator refs to match renamed policies
+- *(cleanup)* Remove accidental temp files
+- *(release)* 3.2.0 [skip ci]
+- *(release)* 3.3.0 [skip ci]
+- *(release)* 3.4.0 [skip ci]
+- *(release)* V3.4.1 [Opencode First]
+- *(release)* 3.5.0 [skip ci]
+- *(release)* V3.5.1 [Opencode First]
+- *(release)* V3.6.0 [Opencode First]
+- *(release)* 3.6.1 [skip ci]
+- *(release)* V3.6.2 [Opencode First]
+- *(release)* 3.7.0 [skip ci]
+- *(release)* V3.7.1 [Opencode First]
+- *(release)* 3.7.2 [skip ci]
+- *(release)* V3.7.3 [Opencode First]
+- *(release)* 3.8.0 [skip ci]
+- *(release)* V3.8.0 [Excellence Sanity Suite & Examples]
+- Implement remediation v3.8.1 - vitest, idempotent symlinks, and execution timeouts
+- *(release)* V3.8.3 - Final Gemini CLI Discovery Fix
+- *(release)* V3.8.4 - Codex Deep Integration
+- *(release)* V3.8.5 - Claude Deep Integration
+- *(workspace)* Remove test installation artifacts
+- *(workspace)* Remove root-level artifacts (AGENTS.md, examples, .ai-workflow.json)
+- *(test)* Add detailed logging to cli smoke test for CI debugging
+- *(ci)* Enable CI triggers for debugging branch
+- *(ci)* Revert debugging trigger
+- *(release)* 3.9.0 [skip ci]
+- *(release)* 3.9.1 [skip ci]
+- *(ci)* Rename AGENTS.md to AGENTS.tmp
+- *(ci)* Rename AGENTS.tmp to AGENTS.md
+- *(release)* Bump version to 3.9.2
+- Define v2 install profiles
+- Separate runtime policies from development planning files
+- Normalize distribution assets directory
+- Remove local dogfooding artifacts
+- Set v4 prerelease version
+- *(release)* 3.10.0 [skip ci]
+- Bump v4 contracts prerelease metadata
+- *(release)* 3.10.0 [skip ci]
+- Freeze release automation during v4 stabilization
+- Move mainline to v4 contracts RC
+- Bump v4 contracts RC7 metadata
+- Checkpoint rc7 operational workflow contracts
+- Enforce tests and evidence for rc8
+- Prepare rc9 cleaned conservative package
+- Prepare public v2 release identity
+## [1.19.1] - 2026-05-23
+
+### 🚀 Features
+
+- Add init profiles and manifest v2
+- Merge managed opencode config
+- Store managed backups with retention
+- Strengthen doctor operational checks
+- Add full profile local agents and skills
+- Expand full profile agent-skill catalog
+- *(cli)* Add codex prompt starters to full profile
+- *(cli)* Add codex wrapper commands
+- Init now copies real skill/agent/workflow assets instead of stubs
+- Init copies real skill/agent/workflow assets instead of stubs
+- Complete roadmap pending items sequence
+- Complete roadmap pending items sequence
+- Add npm consumer quickstart guide
+- Add npm consumer quickstart guide
+- Clean up legacy codex-repo-starter and submodule references
+- Clean up legacy codex-repo-starter and submodule references
+- Restructure README as landing page (< 250 lines)
+- Restructure README as landing page (< 250 lines)
+- Consolidate quick-start and from-zero-to-first-pr runbooks
+- Consolidate quick-start and from-zero-to-first-pr runbooks
+- Add missing skills to AGENTS.md and full-documentation (seo-audit, minimal-context, stack-variant-creator)
+- Add missing skills to AGENTS.md and full-documentation
+- Merge nuxt-dashboard-workflow + vue-clean-architecture into vue-nuxt (P1)
+- Merge nuxt-dashboard-workflow + vue-clean-architecture into vue-nuxt
+- Trim AGENTS.md — reduced from 964 to 766 lines (P2)
+- Trim AGENTS.md — 964→766 lines, focus on operational contract
+- Add interactive 'ai-workflow guide' command (P4)
+- Add interactive 'ai-workflow guide' command
+- Add spec-driven workflow standard
+- Migrate to .ai-workflow symlink layout (#41)
+- Feat/release ship command (#49)
+
+* feat: add release:ship automation command
+
+* fix: correct release:ship commit command
+
+* fix: correct release:ship tag command
+- Add Linear MCP integration and operational planning runbook (#51)
+- Add lightweight spec-engineer workflow
+- Add Atlas OpenCode agent (#70)
+
+### 🐛 Bug Fixes
+
+- Create opencode config on init
+- Remove invalid opencode metadata key
+- Harden public readiness safety
+- *(cli)* Make full default install profile
+- *(cli)* Add codex prompt fallback and dispatcher
+- Rename to @williambeto/ai-workflow and add .env.local to gitignore
+- Add bin entry to root package.json so ai-workflow CLI resolves
+- Bump to 1.12.6 for republish with bin entry
+- Rename vue-nuxt SKILL.md heading to match skill name exactly
+- Prevent init from hanging terminal
+- Route deploy command to deploy-engineer (#47)
+- Apply readiness audit fixes (security, package, branding, docs)
+- Apply readiness audit fixes (security, package, branding, docs)
+- Update semantic-release CI to Node.js 22
+- Update semantic-release CI to Node.js 22
+- Skip auto-generated CHANGELOG.md from markdownlint and link validation (#56)
+- Remove --provenance flag for private repo publish (#57)
+- Add missing spec-engineer agent to managed OpenCode config (#58)
+- *(cli-catalog)* Sync managed config with current repo skills
+- *(cli-catalog)* Sync managed config with current repo skills
+- *(audit)* Harden artifact safety and align CLI/OpenCode catalog
+- *(audit)* Harden artifact safety and align CLI/OpenCode catalog
+- *(init)* Use canonical opencode full config
+- *(init)* Ignore generated workflow footprint
+- *(init)* Include napkin memory in npm install
+- *(init)* Include Atlas agent asset (#72)
+
+### 💼 Other
+
+- Merge pull request #1 from williambeto/chore/initial-continuity-checks
+
+chore: lockfile refresh and CLI smoke check
+- Merge pull request #2 from williambeto/fix/workflow-validate-if-present
+
+fix: create opencode.jsonc during init
+- Merge pull request #3 from williambeto/feat/init-profiles-manifest
+
+feat: add init profiles and manifest v2
+- Merge pull request #4 from williambeto/feat/opencode-managed-merge
+
+feat: add managed opencode.jsonc merge
+- Merge pull request #5 from williambeto/feat/backup-policy-retention
+
+feat: add managed backup policy and retention
+- Merge pull request #6 from williambeto/feat/doctor-operational-readiness
+
+feat: strengthen doctor operational readiness
+- Merge pull request #8 from williambeto/feat/full-profile-agents-skills
+
+feat: enable full profile local agents and skills
+- Merge pull request #9 from williambeto/feat/full-profile-complete-catalog
+
+feat: expand full profile to full agent/skill catalog
+- Merge pull request #10 from williambeto/fix/opencode-schema-compatible-managed-metadata
+
+fix: keep opencode.jsonc schema-compatible
+- Merge pull request #11 from williambeto/docs/public-readiness-roadmap
+
+fix: harden public readiness safety
+- Merge pull request #12 from williambeto/docs/package-identity-consistency
+
+docs: align package identity
+- Merge pull request #13 from williambeto/docs/quickstart-install-path
+
+docs: clarify quickstart install path
+- Merge pull request #14 from williambeto/docs/opencode-codex-usage
+
+docs: clarify opencode codex adoption
+- Merge pull request #15 from williambeto/docs/example-validation-path
+
+docs: add consumer cli smoke evidence
+- Merge pull request #16 from williambeto/docs/public-preview-polish
+
+docs: add public preview guidance
+- Merge pull request #17 from williambeto/docs/final-readiness-cleanup
+
+docs: fix final readiness references
+- Merge pull request #18 from williambeto/fix/default-full-profile
+
+fix(cli): make full default install profile
+- Merge pull request #19 from williambeto/feat/full-profile-codex-prompts
+
+feat(cli): add codex prompt starters to full profile
+- Merge pull request #20 from williambeto/fix/codex-start-prompt-missing-agents-fallback
+
+fix(cli): add codex prompt fallback and dispatcher
+- Merge pull request #21 from williambeto/docs/roadmap-codex-parity-update
+
+docs: update roadmap with codex parity progress
+- Merge pull request #22 from williambeto/docs/roadmap-application-flow-update
+
+docs: add app flow and preview evidence
+- Merge pull request #23 from williambeto/feat/codex-wrapper-commands
+
+feat(cli): add codex wrapper commands
+- Merge pull request #24 from williambeto/docs/codex-wrapper-evidence-and-setup
+
+docs: add codex wrapper quickstart evidence
+- Merge pull request #25 from williambeto/docs/publish-readiness-final-evidence
+
+docs: add final publish readiness report
+- Merge pull request #26 from williambeto/docs/roadmap-github-release-no-npm
+
+docs: defer npm publish in roadmap
+- Merge main into docs/roadmap-update-operational-cli
+- Merge pull request #7 from williambeto/docs/roadmap-update-operational-cli
+
+docs: reflect standalone CLI operational progress
+- Merge pull request #50 from williambeto/docs/roadmap-score-improvements
+
+docs: update roadmap score improvement plan
+- Merge branch 'chore/discovery-gate-enforcement'
+- Merge branch 'chore/release-1.18.8'
+- Merge branch 'feat/spec-engineer-lightweight'
+- Merge branch 'docs/agent-skill-audit-report'
+- Merge pull request #62 from williambeto/docs/branching-policy
+
+docs(policy): add branching policy and language rule
+- Merge pull request #63 from williambeto/docs/branch-cleanup-runbook
+
+docs(runbook): add branch cleanup workflow
+- Merge pull request #64 from williambeto/fix/opencode-init-exposure
+
+fix(init): use canonical opencode full config
+- Merge pull request #65 from williambeto/fix/init-gitignore-generated-footprint
+
+fix(init): ignore generated workflow footprint
+- Merge pull request #66 from williambeto/docs/release-validation-fixes
+
+docs: fix release validation references
+- Merge pull request #67 from williambeto/chore/release-1.18.17
+
+chore: release 1.18.17
+- Merge pull request #68 from williambeto/docs/release-checklist-ci-vs-local
+
+docs(runbook): clarify local vs CI npm auth
+- Merge pull request #69 from williambeto/fix/install-exposure-stability
+
+fix(init): include napkin memory in npm install
+
+### 🚜 Refactor
+
+- *(skill)* Rename codex-pr-workflow to pr-orchestrator
+- *(skill)* Rename codex-pr-workflow to pr-orchestrator
+
+### 📚 Documentation
+
+- Update roadmap with standalone CLI hardening
+- Align package identity
+- Clarify quickstart install path
+- Clarify opencode codex adoption
+- Add consumer cli smoke evidence
+- Add public preview guidance
+- Fix final readiness references
+- Update roadmap with codex parity progress
+- Add app flow and preview evidence
+- Add codex wrapper quickstart evidence
+- Add final publish readiness report
+- Defer npm publish in roadmap
+- Codex/OpenCode compatibility audit and 3 incremental fixes (#27)
+- *(ROADMAP.md)* Add Phase 15 — Codex/OpenCode compatibility audit
+- *(CHANGELOG.md)* Add Phase 15 entries to Unreleased
+- Add Phase 16 CLI bin entry fix, update CHANGELOG to 1.12.6
+- Add Codex↔OpenCode cross-references in full-documentation
+- Add Codex↔OpenCode cross-references in full-documentation
+- Mark P2.2, P2.3, P3.1, P3.2 complete in backlog
+- Close P3 (no unification needed)
+- Add project utility report
+- Reconcile roadmap and remove old backlogs
+- Add roadmap utility report references
+- Enforce continuous release hardening baseline (#43)
+- Clarify deprecated .workflow consumer path (#44)
+- Remove historical note blocks (#45)
+- Enforce branch gate in agents and skills (#46)
+- Enforce strict orchestrator delegation by step (#48)
+- Update roadmap score improvement plan
+- Enforce discovery gating and roadmap phases
+- Prepare repository for public visibility (#53)
+- *(taxonomy)* Add naming spec and mapping
+- *(policy)* Add branching policy and doc language rule
+- *(runbook)* Add branch cleanup workflow
+- Fix refs for release validation
+- *(runbook)* Clarify local vs CI npm auth
+
+### ⚙️ Miscellaneous Tasks
+
+- Bootstrap ai-workflow repository
+- Refresh package-lock metadata
+- Centralize CLI smoke validation
+- Bump version to 1.15.0 for npm publish
+- Finalize public-readiness updates (#40)
+- Bump release version to 1.18.1
+- Release 1.18.5
+- Add npmignore hardening (#42)
+- Release 1.18.6
+- Release 1.18.7
+- Release 1.18.8
+- Chore/remove workflow scripts (#52)
+
+* chore: remove workflow:validate and workflow:doctor consumer scripts
+
+These were thin wrappers:
+- workflow:validate -> npm run validate --if-present (use npm run validate directly)
+- workflow:doctor -> ai-workflow doctor (use CLI directly)
+
+Removes merge-package-json.js (only used for injecting these scripts),
+updates templates.js, init.js, doctor.js, and all docs references.
+
+* docs: add changelog entry for consumer script removal
+
+* chore: prepare changelog for v1.18.9 release
+- Release 1.18.9
+- Release 1.18.10
+- *(release)* 1.18.11 [skip ci]
+- *(release)* 1.18.12 [skip ci]
+- *(release)* 1.18.13 [skip ci]
+- *(release)* 1.18.14 [skip ci]
+- *(release)* 1.18.15 [skip ci]
+- *(release)* 1.18.16 [skip ci]
+- *(release)* 1.18.17 [skip ci]
+- Release 1.18.17
+- *(release)* 1.18.18 [skip ci]
+- *(release)* 1.19.0 [skip ci]
+- *(release)* 1.19.1 [skip ci]