agent-skillboard 0.1.2 → 0.2.2

package/CHANGELOG.md

@@ -1,5 +1,44 @@
 # Changelog
 
+## Unreleased
+
+## 0.2.2 — 2026-07-03
+
+### Changed
+
+- High-risk runtime/plugin source action cards now recommend a one-time source review instead of defaulting to a block action.
+- Reviewed quarantined runtime/plugin skills can be activated into a workflow as `manual-only` skills, keeping ask-after preference learning separate from source trust review.
+- Bootstrap and install docs explain source review followed by manual activation for runtime/plugin skills.
+- Generated guard hooks pin their install-time SkillBoard command, config, skills root, and workflow instead of accepting environment overrides for those trust-boundary values.
+- README now surfaces public alpha and config schema v1 status near the quick product summary.
+- npm package contents exclude historical planning documents under `docs/plans`.
+- CI check matrix includes Node 24 before publish-time verification.
+
+## 0.2.1 — 2026-07-02
+
+### Added
+
+- Ask-after skill routing guidance for ambiguous or fallback skill choices.
+- Packaged runtime smoke coverage for npm-installed SkillBoard usage.
+
+### Changed
+
+- Release automation now skips publishing only when the exact npm version already exists.
+- AI bridge guidance emphasizes route candidates, post-use policy suggestions, and guard disclosure.
+
+## 0.2.0 — 2026-06-30
+
+### Added
+
+- AI-mediated brief/action-card flow with current action IDs and post-apply brief refresh.
+- Source inventory refresh, doctor/status summaries, source pin refresh, and install-output detection.
+- Richer dry-run plans for lifecycle, import, hook, and cleanup workflows.
+
+### Changed
+
+- README and install docs now lead with low-burden npm usage instead of source-tree setup.
+- Workflow routing now separates installed skills from currently allowed skills more explicitly.
+
 ## 0.1.2 — 2026-06-29
 
 ### Added