agl 1.0.17 → 21.0.2

package/changelog.md

@@ -0,0 +1,1026 @@
+# Changelog
+
+## 2026-08-20 - 21.0.2
+
+### Fixes
+
+- stabilize transport and git revision tests (test)
+  - Run transport tests on an OS-assigned port and build the public origin from the actual listening port.
+  - Allow the bounded git revision test to pass when either the file-output limit or transient quota guard rejects first.
+  - Update @api.global/typedserver to 11.1.0 and @push.rocks/smartserve to 6.0.1.
+
+## 2026-08-20 - 21.0.1
+
+### Fixes
+
+- retry concurrent worktree record replacements during reads (gitreversion)
+  - Detect private worktree record replacement or removal during bounded reads and retry transient concurrent changes.
+  - Revalidate file metadata, ownership, and pathname identity after reads before accepting a worktree record.
+  - Add regression coverage for atomic worktree record replacement during listing.
+
+## 2026-08-20 - 21.0.0
+
+### Breaking Changes
+
+- rename package and CLI to agl (package)
+  - Renames the npm package from @modelprofile.com/harness-controller to agl and the CLI binary from hcon to agl.
+  - Updates UI, WebAuthn registration, CLI help, errors, docs, and upgrade messaging with AGL branding.
+  - Bumps controller upgrade management to version 2 and adds package-transition handling between the legacy bridge and AGL.
+  - Adds a managed parallel test runner, sharded Git reversion tests, and hardens private Git ref validation.
+
+## 2026-08-20 - 20.0.3
+
+### Fixes
+
+- support AGL bridge package transition and harden recovery (upgrade,gitreversion)
+  - Add format-3 package-transition transactions from the hcon bridge to agl@21.0.0 with exact package, CLI, management-version, and shim validation.
+  - Recover stalled upgrades with durable worker ownership, recovery-context handoff, authoritative installation resolution, and follower log path switching.
+  - Validate controller status against explicit package identities so bridge and target controllers are accepted only under matching expectations.
+  - Create and validate the Git reversion parent directory securely and replay finalized capture lifecycle gaps after crashes.
+
+## 2026-08-19 - 20.0.2
+
+### Fixes
+
+- bound exact message responses and reduce redundant session work (sessions)
+  - Bound exact message bundle responses to the transcript transfer budget with stable history-limited digests.
+  - Share lifecycle-owned OpenCode and Flex session enumeration across concurrent callers without cancelling underlying work on caller aborts.
+  - Use exhaustive Flex projection snapshots for session lists and session message metrics while preserving truncation guards.
+  - Skip and abort inactive subtask preview hydrations, and reconcile successful archives locally without a supplemental refresh.
+
+- preserve retained upgrade authority and exact cleanup ownership (upgrade)
+  - Serialize upgrade, start-lease, and transaction-lock generations with fail-closed mutation guards and exact owner tombstones so stale cleanup cannot delete a live replacement.
+  - Keep an inherited Linux target alive across blocked migration, retain the unchanged v2 upgrade exclusion after draining admitted starts, and prevent immutable followers from launching a replacement.
+  - Preserve nested CLI startup and cleanup diagnostics, handle command-level help without dispatch, and retain exclusion when controller shutdown remains incomplete.
+  - Make BrowserRuntime startup cancellation wait for runtime-lock and artifact cleanup before releasing host ownership.
+
+- resume prepared controller data-root relocation (dependencies)
+  - Upgrade SmartDB from 5.2.0 to 5.2.1 so the installed controller migration can preserve terminal transaction journals and their exact publication markers while moving the stopped database root.
+
+## 2026-08-19 - 20.0.1
+
+### Fixes
+
+- remove the OpenCode operation lifetime (controller)
+  - Keep accepted OpenCode operations active until exact terminal reconciliation or explicit lifecycle cancellation instead of force-aborting them after 30 minutes.
+
+## 2026-08-19 - 20.0.0
+
+### Breaking Changes
+
+- unify harness-native slash commands and workspace reversion (protocol)
+  - Bump the controller protocol to v22 and replace the separate command-list, session-command, and built-in-command requests with `controller.slash.list` and `controller.slash.execute`.
+  - Add `session.history.changed` so clients invalidate stale transcript and reversion state after an authoritative undo, redo, or branch transition.
+  - Bump Flex IPC to v14 for native slash descriptors and execution results, exact queue/run acknowledgement and cancellation, session reversion metadata, and parent-owned Git reversion and linked-worktree host requests.
+  - Root-export `ControllerGitReversion` and its typed capture, apply, release, metadata, and worktree contracts; Git 2.43 or newer is now required for these workspace operations.
+  - Preserve staged and unstaged Git state independently through lifecycle-managed private bare stores, disposable object generations, and write-ahead apply recovery while retaining later unrelated edits across undo and redo.
+  - Keep capture, finalize, inspection, release metadata, and generated objects out of source repositories; apply imports bounded self-contained packs under exact temporary keeps without controller refs.
+  - Move Flex transcript and Git state together for `/undo` and `/redo`; a project inside a containing repository reverts tracked and non-ignored state across that repository, while ignored paths remain unchanged.
+
+- make project removal explicit and crash-resumable (projects)
+  - Persist removal intent before cleanup, resume interrupted removals at startup, and finalize bound-project tombstones only after Flex, resource, Session Intelligence, Git worktree, and reversion cleanup is confirmed.
+  - Replace active-project snapshot purging with exact Flex `project.register` and `project.remove` requests so an omitted project can never authorize storage deletion.
+  - Bind project registration to the complete ordered device/inode ancestry from the filesystem root through the project directory across controller, Flex, Git, background cleanup, and shutdown admission.
+  - Migrate each truly legacy project exactly once under its owning controller: available canonical directories become completely bound, unavailable entries remain terminally unbound, and incomplete pre-release bindings fail closed.
+  - Retire terminally unbound project metadata without dereferencing its untrusted path; retain retired resource tombstones and path-scoped OpenCode, Flex, and Git artifacts.
+  - Revalidate durable terminal cwd and Git repository, metadata, index-parent, and controller-owned worktree bindings before path-sensitive work or cleanup.
+- migrate installed controller data root to hcon (controller)
+  - Move installed embedded SmartDB storage from the legacy harness-controller config root to the hcon root through a journaled migration.
+  - Retain inherited upgrade startups fail-closed and retry blocked data-root migration without reopening public server or prompt admission.
+  - Serialize temp-password and upgrade data writers, and block package replacement while source controller, temp-password, or Flex child writers remain active.
+  - Fence Flex runtime prompt admission and browser capability cleanup across child exits and recovery generations.
+  - Bump smartdb to 5.2.0, smartsecret to 1.6.0, and pnpm to 11.22.0.
+
+### Fixes
+
+- fail closed on incomplete or stale controller state (controller)
+  - Reject incomplete OpenCode and Flex session enumerations and verify exact attention-request ownership before replies.
+  - Repair layouts only for positively identified archived sessions and keep late browser mutations scoped to their origin project.
+
+- restore transient Flex tool output at the runtime boundary (dependencies)
+  - Upgrade `@modelprofile.com/flexharness` from 4.0.2 to 4.1.1 and direct `@push.rocks/smartagent` usage from 4.8.0 to 5.0.0.
+
+- keep file-backed storage reads consistent during compaction (dependencies)
+  - Upgrade `@push.rocks/smartdb` from 4.0.2 to 5.0.1.
+
+## 2026-08-16 - 19.0.1
+
+### Fixes
+
+- make session archiving reliable (controller)
+  - Use the owning harness mutation response directly and reconcile unknown outcomes with bounded exact-session readback.
+  - Fence archive against prompts, permissions, background work, Session Intelligence, and concurrent session or project mutations without aborting active work.
+  - Reconcile browser list, layout, selection, and draft state after success, ambiguous failure, and cross-tab archive transitions.
+
+- complete bounded OpenCode archive reconciliation (controller)
+  - Confirm committed archives through exact session-only readback when the mutation response is lost or remains pending.
+  - Keep irreversible mutations and unresolved safety fences controller-owned without retaining the browser request.
+  - Bound reconciliation below the browser request deadline and clean late-response runtime listeners deterministically.
+
+- retain live overlays until authoritative hydration covers them (live-rendering)
+  - Retain OpenCode and Flex live tool, text, and reasoning overlays when hydrated transcript data is incomplete, elided, or failed.
+  - Supplement delayed terminal tool payloads from live events without overriding newer durable terminal results.
+  - Enforce aggregate Flex live snapshot and pending event byte budgets, collapsing stream epochs safely on saturation.
+  - Release retained live stream state when a conversation is archived.
+
+## 2026-08-16 - 19.0.0
+
+### Breaking Changes
+
+- add protocol v21 browser transport for Flex resources (protocol)
+  - Bump controller protocol to v21 and Flex IPC to v13 for qualified browser resource channels.
+  - Bridge Flex resource tools to Browser Runtime through framed capability-bound channels with exact attachment and peer validation.
+  - Add browser resource host cleanup and recovery paths for human views, Flex channels, and pending capability revocations.
+  - Cover browser transport, resource attachment, and Flex tool integration with regression tests.
+
+## 2026-08-15 - 18.4.1
+
+### Fixes
+
+- restore OpenCode subagent cards (web)
+  - Upgrade dees-catalog to 6.10.1 so OpenCode `task` calls retain subtask previews and drill-in actions.
+  - Preserve compact project-task rendering for FlexHarness's action-based task operations.
+  - Cover both classifications in the controller's browser integration suite.
+
+## 2026-08-15 - 18.4.0
+
+### Features
+
+- run Session Intelligence in isolated Flex workers (session-intelligence)
+  - Replace temporary OpenCode analysis sessions with ephemeral in-memory FlexHarness workers pinned to openai/gpt-5.6-luna.
+  - Expose only bounded read-only session tools and require the exact source session to be read before broader access or completion.
+  - Bind private capabilities to one project and harness generation, with one active job per source and four controller-wide.
+  - Fail closed across cancellation, persistence reads, worker disposal, capability revocation, project retirement, and controller shutdown.
+  - Recover legacy temporary sessions while preventing them from appearing in normal session reads and listings.
+
+### Fixes
+
+- recover Flex after Session Intelligence cleanup failures (flex)
+  - Fence new analysis admission and stop the failed Flex generation when worker disposal or capability closure cannot be confirmed.
+  - Retain and retry capability ownership through post-stop browser-channel, operation, and read-connection cleanup before replacement startup.
+  - Settle ready-only host work and repeat resource cleanup while retaining state-changing authority, without allowing stale browser-frame failures to affect a replacement generation.
+
+- preserve accepted OpenCode account switches after peer disconnect (controller)
+  - Bind an accepted switch transaction to controller lifetime rather than the initiating browser connection.
+  - Continue to abort the transaction during controller shutdown.
+
+## 2026-08-14 - 18.3.1
+
+### Fixes
+
+- restore Flex startup for existing conversations (flex)
+  - Authorize project-management migration calls by exact live child generation before Flex reports ready.
+  - Keep browser resources ready-only and fence stale host responses, transport failures, and prior-generation work.
+
+## 2026-08-14 - 18.3.0
+
+### Features
+
+- load older transcripts on upward-scroll demand (web)
+  - Request one older page of up to 50 source-message bundles only when the main conversation or subagent drill-in intentionally reaches the transcript top.
+  - Fence paging by transcript, session, controller, cursor, and stream epoch while aborting obsolete detail, auxiliary, modal, and subtask-preview requests.
+  - Retain the newest 200 bundles within 512 KiB, preserve the visible prepend anchor, prune unconfirmed provisional bundles, and stop repeated or no-progress cursor chains.
+  - Upgrade dees-catalog to 6.10.0 for the demand-paging event and state contract.
+
+## 2026-08-14 - 18.2.0
+
+### Features
+
+- add Harness-owned project management tools (flex)
+  - Enable FlexHarness's `delegate`, `task`, `goal`, `scratchpad`, and `rename_session` tools without shadowing them in the controller tool provider.
+  - Persist generation-fenced task, goal, and scratchpad state in exact controller session documents while keeping browser and Session Intelligence scratchpad revisions synchronized.
+  - Backfill existing Flex sessions idempotently after session-generation repair and retain tombstone, revival, namespace-purge, and failed-purge recovery guarantees.
+  - Bump private Flex IPC to v11 for bounded project-management host operations and pin FlexHarness 4.0.2, Browser Runtime 2.1.2, and dees-catalog 6.9.1.
+
+## 2026-08-14 - 18.1.1
+
+### Fixes
+
+- recover Flex provider accounts after child exits (flex)
+  - Restart a failed Flex child with capped backoff after prior-generation cleanup and exact project reconciliation.
+  - Serve bounded validated account metadata read-only while Flex is unavailable, preserving browser snapshots and blocking mutations.
+  - Retain sanitized exit diagnostics and retry process, browser-channel, operation, and database cleanup without losing ownership.
+
+## 2026-08-14 - 18.1.0
+
+### Features
+
+- add Task subagent support (flex)
+  - Configure a depth-1 inherited-model general subagent for Flex task delegation.
+  - Propagate child session lineage, child model metadata, and family-scoped permissions through Flex IPC v10.
+  - Hide child sessions from root listings while preserving parent attention, task links, public projections, and read-only drill-in views.
+  - Scope yolo auto-accept state per project and route child permission replies to the exact Flex session.
+  - Show the unique active subagent count in the chat working indicator.
+
+## 2026-08-14 - 18.0.2
+
+### Fixes
+
+- retain loaded history across live stream refreshes (web)
+  - Preserve no-op detail refresh intent instead of repeatedly restarting bounded history backfill.
+  - Fence stale tool and Assistant stream enrichment without clearing rendered history or subtask previews.
+  - Keep live snapshot synthesis stable through the returned stream cursors.
+
+## 2026-08-14 - 18.0.1
+
+### Fixes
+
+- keep hcon upgrade preparation within TypedSocket timeout bounds (upgrade)
+  - Replace the grace-length completion request with a bounded prepare-begin acknowledgement and private durable transaction polling.
+  - Persist immutable acceptance, deadline, and completion timestamps so the worker cannot stop the source controller or install a package before successful preparation.
+  - Preserve the documented 1–3600 second grace range, compensate failed preparation, and keep uncertain pause cleanup fail-closed.
+
+## 2026-08-14 - 18.0.0
+
+### Breaking Changes
+
+- separate Assistant message stream ordering from tool delivery (protocol)
+  - Bump the controller protocol to v20 with message stream cursors on bundle-preserving session detail and message stream epoch barriers on harness events.
+  - Stream bounded replace-only OpenCode Assistant text and reasoning snapshots from message part updates and deltas.
+  - Track independent tool and Assistant message epochs through controller, tip-first history backfill, and browser hydration.
+  - Generalize live text and reasoning DTO validation for OpenCode and Flex while preserving Flex source-order requirements and Flex IPC v9.
+
+## 2026-08-13 - 17.0.0
+
+### Breaking Changes
+
+- load conversation tails before bounded history and auxiliary analysis (protocol)
+  - Bump the controller protocol to v19 and replace `IControllerSessionDetail.messages` with a bundle-preserving `messagePage` containing up to 20 newest source-message bundles.
+  - Move `sessionMetrics` and `sessionIntelligenceEnabled` from the core detail into `controller.session.auxiliary.get`, which returns `IControllerSessionAuxiliary` without delaying first paint.
+  - Prepend up to 180 older source bundles asynchronously with generation, stream-epoch, cursor, count, and byte fences; opaque cursors are best-effort continuations rather than immutable snapshots.
+  - Export `controllerInitialMessageBundleLimit`, `controllerMaximumMessageBundles`, and `controllerMaximumTranscriptBytes`; distinguish harness retention loss through `truncated` from controller source-bundle or payload omission through `historyLimited`.
+  - Preserve live snapshot ownership by source bundle and expose partial history instead of replacing an already-rendered conversation on backfill failure.
+  - Bump `@design.estate/dees-catalog` to 6.8.2 so prepended history preserves the visible message anchor.
+## 2026-08-13 - 16.0.3
+
+### Fixes
+
+- fail closed on writer lease stalls and fatal store errors (flex)
+  - Report Flex store fatal errors to the service, close admission, publish failed status, and close the transport with a timeout.
+  - Track uncertain writer lease transitions so recoverable ambiguity can be retried while expired or stalled authority fails closed.
+  - Treat unexpected Flex child transport closure as a protocol failure.
+
+## 2026-08-13 - 16.0.2
+
+### Fixes
+
+- normalize browser toolbar navigation and handle Go actions (browser)
+  - Default bare browser addresses to HTTPS and reject non-HTTP schemes before navigation
+  - Route toolbar submit and Go button actions through guarded navigation handling to avoid stale updates and surface failures
+  - Bump dees-catalog to 6.8.1 and browser-runtime to 2.1.1
+  - Add regression coverage for browser toolbar navigation and resource drag state during rerenders
+
+## 2026-08-13 - 16.0.1
+
+### Fixes
+
+- reconcile archived sessions before refresh completes (sidebar)
+  - Remove archived sessions from applied sidebar layouts so stale layout data cannot restore them
+  - Immediately clear selection, detail, draft, and focus state when archiving the selected session
+  - Ignore stale archive results after project changes and reject invalid archive responses
+## 2026-08-13 - 16.0.0
+
+### Breaking Changes
+
+- switch the controller-owned OpenCode runtime between managed OpenAI accounts (protocol)
+  - Bump the controller protocol to v17 and Flex IPC to v8 with a metadata-only activation RPC and private OAuth retrieval.
+  - Pause the exact active OpenCode cohort, generation-fence SDK traffic, replace the owned runtime and event stream, and continue conversations after the selected account is healthy.
+  - Persist and restage only controller-managed selections, roll back only to confirmed prior managed credentials, and otherwise keep OpenCode fail-closed.
+  - Move Flex provider credentials from individual kernel entries to a kernel-keyed sealed store through an idempotent, byte-preserving, fail-closed migration.
+  - Reject ambient or delegated `OPENCODE_AUTH_CONTENT` and keep credentials outside browser RPC, SmartData, logs, and OpenCode filesystem management.
+- remove controller scheduling and stream accepted harness work directly (protocol)
+  - Bump the controller protocol to v16 and Flex IPC to v7 while preserving harness-owned prompt ordering.
+  - Correlate accepted OpenCode and Flex prompts by exact native identities with bounded abort, recovery, upload cleanup, and operation lifetime ownership.
+  - Stream bounded ordered Flex text and reasoning snapshots through terminal reconciliation and reject stale epochs in the browser.
+  - Add model-backed Flex `/compact` through the existing built-in command RPC and browser workflow.
+  - Recover expired same-controller Flex writer leases with serialized heartbeat and write transitions.
+- add protocol v18 durable terminal and browser resources (resources)
+  - Introduce persisted resource documents, a resource coordinator, and terminal/browser runtime hosts with lifecycle, attachment revision, recovery, and retirement handling.
+  - Add resource and browser-view DTOs, requests, events, validation, audit types, and web UI support.
+  - Integrate BrowserRuntime with Flex IPC v9 browser resource resolution and framed browser channels for agent tool providers.
+  - Migrate session layouts to session-only entries by pruning legacy controller-terminal IDs.
+
+## 2026-08-12 - 15.0.0
+
+### Breaking Changes
+
+- add protocol v15 upgrade handoff with graceful session continuity (protocol)
+  - Bumps the controller protocol to v15 and adds upgrade management version reporting.
+  - Adds sanitized upgrade status, upgrade.changed events, and controller.upgrade.prepare/finalize requests.
+  - Enhances hcon upgrade with bounded grace periods, optional session continuation, durable worker progress, and JSON terminal output.
+  - Seals prompt admission during upgrades, pauses captured active sessions, and finalizes or compensates sessions after restart or worker loss.
+  - Updates the browser UI to persist upgrade status and perform cache-busted reloads with stale-bundle detection.
+  - Improves Flex writer lease transitions to recover expired leases and serialize heartbeat/write renewals.
+
+## 2026-08-12 - 14.2.0
+
+### Features
+
+- add Flex session rename tool (flex)
+  - Expose an unpermissioned rename_session tool that updates only the invoking Flex session title.
+  - Reuse the controller session title validation contract for both browser rename requests and the Flex tool.
+  - Bump @modelprofile.com/flexharness to 3.3.0 to support title updates while Flex work is active.
+
+## 2026-08-11 - 14.1.0
+
+### Features
+
+- consume canonical FlexHarness prompt queues (flex)
+  - Upgrade FlexHarness to 3.2.0 and Flex IPC to v6 for bounded per-session FIFO admission and exact queue cancellation.
+  - Correlate prompt lifecycle and upload ownership by project, session, queue, and promoted run identifiers without inferring scheduling from background jobs.
+  - Keep OpenCode on its separate controller-owned FIFO while FlexHarness owns Flex scheduling, retirement, and shutdown cleanup.
+
+## 2026-08-11 - 14.0.1
+
+### Fixes
+
+- retain referenced Flex projection candidates during orphan maintenance (flex-persistence)
+  - Upgrade SmartDB to 4.0.2 so dotted array-backed index queries fall back to authoritative scans.
+  - Keep every public candidate referenced by a Flex public head beyond the orphan grace period.
+
+## 2026-08-11 - 14.0.0
+
+### Breaking Changes
+
+- preserve authoritative Flex transcript chronology end to end (protocol)
+  - Bump the controller protocol to v13 and Flex IPC to v4 with source message and part coordinates.
+  - Repair older projection chains from private snapshots before publishing strict ordered records.
+  - Keep persisted, paged, hydrated, and live tool entries on the same source-order contract.
+  - Upgrade dees-catalog to 6.5.0 and FlexHarness to 3.1.0 for ordered rendering and live event coordinates.
+- synchronize ephemeral composer drafts and path-based uploads (protocol)
+  - Bump the controller protocol to v14 and Flex IPC to v5 with revisioned draft get, update, event, and operation contracts.
+  - Synchronize bounded text and attachments across authenticated browsers without persisting draft or upload content.
+  - Reserve immutable draft revisions for sends and commands, retain failed or outcome-unknown drafts, and preserve concurrent newer edits.
+  - Materialize attachments in private controller-owned temporary directories and clean exact OpenCode and Flex operation ownership on completion, deletion, child exit, or shutdown.
+  - Extract server harness-operation coordination and browser draft synchronization into focused state-machine classes.
+  - Upgrade SmartAgent to 4.7.0 and dees-catalog to 6.6.0 for Flex read-only upload roots and controlled attachment limits.
+
+## 2026-08-10 - 13.0.0
+
+### Breaking Changes
+
+- persist terminal positions in revisioned sidebar layouts (protocol)
+  - Bump the controller protocol to v12 with explicit conversation, terminal, and mixed layout-item ID types while retaining the existing persisted field names.
+  - Allow terminals to reorder with conversations and move into, between, and out of groups through the existing revisioned layout update path.
+  - Serialize layout writes with terminal lifecycle pruning so dead terminal references cannot be reintroduced and connected clients receive the confirmed revision.
+### Features
+
+- upgrade dees-catalog to 6.4.0 (web)
+  - Consume the latest published harness component release.
+- stream Flex tool execution snapshots to connected browsers (flex)
+  - Add Flex IPC v3 `tool.updated` events for the existing allowlisted tool-part projection.
+  - Preserve active and terminal phases through bounded child/controller queues, harness-specific stream epochs, and cursor-safe detail hydration.
+  - Reuse the existing live tool cards while keeping durable terminal Flex projections authoritative.
+- allow CLI temporary-password sign-in during setup (auth)
+  - Expose the CLI temporary-password form on the initial setup screen as well as the normal login screen.
+  - Allow authenticated setup-required peers to enter the main UI without enrolling a passkey.
+  - Permit resume-token authentication while passkey setup remains pending.
+  - Update browser tests and documentation for setup-time temporary-password access.
+
+## 2026-08-10 - 12.0.0
+
+### Breaking Changes
+
+- persist account-aware session models and expose provider usage (protocol)
+  - Bump the controller protocol to v10 and Flex IPC to v2 with durable per-session model choices, authoritative child catalog validation, and metadata-only provider account rate limits.
+  - Upgrade dees-catalog to 6.3.0 and SmartAI to 6.0.0 for controlled composer account selection and OpenAI account quota retrieval.
+  - Serialize model persistence and two-phase logout per provider connection, fencing the account before clearing every matching global and session choice, with live and startup recovery before credential removal.
+
+### Fixes
+
+- keep generic New conversations on OpenCode and release deletion state immediately (web)
+  - Prevent sticky Flex draft or selection state from routing the generic New conversation action into FlexHarness.
+  - Reconcile a successful deletion locally and release the mutation lock before the supplemental session refresh.
+- remove duplicate account-aware session model entry (changelog)
+  - Remove redundant expanded changelog bullets already covered by the consolidated protocol entry.
+
+## 2026-08-10 - 11.0.0
+
+### Breaking Changes
+
+- add provider connection status and harden lease heartbeats (flex)
+  - Bump the controller protocol to v9 and add provider connection status for active and reauthentication-required connections.
+  - Update Flex provider management to show reauthentication state, refresh catalogs after successful login, and track per-connection refresh progress.
+  - Renew Flex writer leases on every heartbeat with bounded deadlines and retry transient database failures without marking leases lost.
+
+## 2026-08-10 - 10.1.0
+
+### Features
+
+- stream bounded subagent previews inside parent conversations (web)
+  - Upgrade dees-catalog to 6.2.0 and project active plus recent child sessions into chronological subtask cards.
+  - Hydrate at most 16 previews from bounded 40-bundle message pages with four concurrent reads, stale-selection rejection, and coalesced event refreshes.
+  - Preserve the dedicated subagent drill-in while exposing authoritative child status and truncation in the parent transcript.
+
+### Fixes
+
+- remove duplicate pending subagent preview entry (changelog)
+  - Remove duplicated Pending changelog text for web subagent previews.
+
+## 2026-08-09 - 10.0.2
+
+### Fixes
+
+- preserve native PTY support during global upgrades (upgrade)
+  - Passes pnpm allow-build flags for node-pty and fs-ext-extra-prebuilt when installing the target controller version
+
+## 2026-08-09 - 10.0.1
+
+### Fixes
+
+- hydrate large OpenCode conversations through bounded cursor pages instead of one oversized response
+
+## 2026-08-09 - 10.0.0
+
+### Breaking Changes
+
+- migrate Flex sessions to split durable stores (flex)
+  - Upgrade FlexHarness to 3.0.1 and SmartAgent to 4.6.0 for the new Flex store API.
+  - Split Flex durable state into separate scope, projection, permission, agent event/archive, and job domains with per-project writer leases.
+  - Add bounded public projections backed by public heads, visible digests, and integrity-linked projection sources.
+  - Migrate retained FlexHarness 2 snapshots before runtime admission with resumable completion markers and projection repair.
+  - Treat scheduled Flex sessions as busy in controller status projections.
+
+## 2026-08-09 - 9.0.0
+
+### Breaking Changes
+
+- stream live OpenCode tool snapshots (opencode)
+  - add protocol v8 live tool execution DTOs, cursors, and session.tool.updated events
+  - coalesce controller-delivered tool snapshots with stream epoch barriers to recover from delivery gaps
+  - merge live tool overlays into the browser chat UI before authoritative hydration
+  - bump OpenCode SDK and platform packages to 1.18.15
+
+## 2026-08-09 - 8.0.0
+
+### Breaking Changes
+
+- add protocol v7 session scratchpads and intelligence workflows (protocol)
+  - Bumps the controller protocol to v7 with session metrics, scratchpad state, intelligence exchanges, and new scratchpad/intelligence request methods.
+  - Persists scoped session state with CAS scratchpad saves, bounded intelligence exchanges, tombstones, recovery, and temporary-session cleanup.
+  - Updates the browser chat experience to expose scratchpads, intelligence interactions, session metrics, and conversation sidebar toggling.
+  - Upgrades dees-catalog to 6.0.0 and moves the Conversations toggle into the application header.
+
+### Features
+
+- move conversations sidebar toggle to app header (web)
+  - Moves the Conversations sidebar toggle from chat components into the application header.
+  - Updates dees-catalog to 6.0.0.
+  - Adjusts sidebar tests and documentation for the new toggle ownership.
+
+## 2026-08-08 - 7.0.0
+
+### Breaking Changes
+
+- add FlexHarness runtime and protocol v6 qualified identifiers (controller-protocol)
+  - Bump the controller protocol to v6 and qualify runtime-owned IDs with harness ownership across sessions, messages, permissions, questions, terminals, and events.
+  - Add FlexHarness as an independently supervised session runtime with isolated framed IPC, provider management, model refresh, and bounded public projections.
+  - Replace the single defaultModel setting with per-harness defaultModels and add idempotent migrations for existing OpenCode settings and session layouts.
+  - Add bounded session message paging and single-message retrieval APIs.
+  - Update CLI status, controller shutdown, project reconciliation, terminal handling, and browser validation for multi-harness operation.
+  - Drain and purge removed Flex project scopes, and reconcile abandoned candidate publications with bounded age-gated maintenance.
+  - Preserve ordered database and harness cleanup during detached controller shutdown before verified process-group escalation.
+
+## 2026-08-07 - 6.3.0
+
+### Features
+
+- move terminal process ownership into the controller (terminals)
+  - Spawn shells directly with Smartshell's shell-free node-pty API and controller-generated opaque terminal IDs.
+  - Add fixed-slab bounded per-terminal scrollback with independent peer replay cursors, exact authenticated-peer output delivery, and ordered trailing output.
+  - Close project terminals before deregistration and retain process ownership until independent PTY exit confirmation.
+  - Bound terminal, peer, and ordered control admission and make cleanup single-flight across project retirement and controller shutdown.
+  - Reuse the sanitized child-runtime environment policy for OpenCode and controller-owned terminal shells.
+
+## 2026-08-07 - 6.2.0
+
+### Features
+
+- add hcon upgrade workflow for pnpm-global installations (upgrade)
+  - Add a new hcon upgrade command that launches a detached upgrade worker with private logging and optional JSON output.
+  - Authorize running-controller upgrades through a one-time local launch grant bound to the verified controller process and package installation.
+  - Serialize upgrades and controller starts with upgrade coordination locks and start leases.
+  - Add shared controller management helpers for status checks, verified stops, port checks, and upgrade launch requests.
+  - Document the new upgrade flow and add tests for upgrade coordination, worker payloads, process inspection, and package transaction behavior.
+
+## 2026-08-06 - 6.1.0
+
+### Features
+
+- migrate embedded SmartDB storage to controller data directory (storage)
+  - Default embedded database and detached log paths now use XDG config storage, with repository checkouts using .nogit.
+  - Add journaled one-time migration from the legacy XDG state SmartDB location with digest verification and retry safety.
+  - Harden SmartData and embedded database startup/shutdown serialization and cleanup error reporting.
+  - Bump @push.rocks/smartdb to 2.18.1 and include migration sources in published files.
+
+## 2026-08-06 - 6.0.0
+
+### Breaking Changes
+
+- add revisioned session layouts and controller system metrics (controller-protocol)
+  - Changes session group get/update contracts to use IControllerSessionLayout with explicit ungrouped ordering and optimistic concurrency revisions.
+  - Adds protected controller.system.metrics sampling for CPU, memory, and network rates.
+  - Adds controller.session.discard-empty to safely clean up unused materialized draft sessions.
+  - Propagates authoritative session status, error, and attention markers through controller events and sidebar UI.
+
+## 2026-08-05 - 5.5.2
+
+### Fixes
+
+- upgrade the controller transport stack to TypedServer 10 and TypedSocket 7
+  - Use the strict package-major handshake before admitting controller RPC.
+  - Preserve server-owned authentication state, explicit push targets, and default-deny client tags on the new transport.
+  - Document the required stop-before-upgrade process and refresh active build and test tooling.
+
+## 2026-08-04 - 5.5.1
+
+### Fixes
+
+- avoid blocking startup on initial audit history pruning (authstore)
+  - Run the initial audit retention sweep asynchronously so large existing backlogs do not delay controller readiness.
+  - Keep recurring audit history pruning scheduled in the background.
+
+## 2026-08-04 - 5.5.0
+
+### Features
+
+- surface OpenCode model effort in session details (controller)
+  - Capture OpenCode message variant metadata as effort and include the latest assistant effort in session details.
+  - Show effort alongside the model in the OpenCode session header.
+  - Prune oversized audit backlogs in bounded batches to avoid large materialized queries.
+  - Bump @design.estate/dees-catalog to 4.9.0.
+
+## 2026-08-04 - 5.4.0
+
+### Features
+
+- surface model metadata in session and subagent views (opencode)
+  - Normalize provider/model labels for assistant messages and subagent tool calls.
+  - Expose the latest assistant model in session details and display it in chat and subagent headings.
+  - Bump @design.estate/dees-catalog to 4.8.1.
+
+## 2026-08-04 - 5.3.2
+
+### Fixes
+
+- bump @push.rocks/smartdb to 2.17.0 (deps)
+  - Updates @push.rocks/smartdb from 2.15.4 to 2.17.0.
+
+## 2026-08-04 - 5.3.1
+
+### Fixes
+
+- cap audit log retention by event count (authstore)
+  - Prunes oldest audit events when the collection exceeds the count cap before applying age-based retention.
+  - Shortens the audit prune interval from 6 hours to 30 minutes to keep embedded storage scans bounded.
+
+## 2026-08-04 - 5.3.0
+
+### Features
+
+- support file attachments in session messages (sessions)
+  - Accept and validate base64 attachments on controller.session.send requests.
+  - Store uploaded files in per-message temporary directories and append their paths to the prompt for tool-based reading.
+  - Forward chat composer uploads with outgoing session messages and update dees-catalog to 4.7.0.
+
+## 2026-08-04 - 5.2.2
+
+### Fixes
+
+- abort busy sessions before shutdown and raise raw response limits (opencode)
+  - Abort busy OpenCode sessions across registered project directories before stopping the child process, bounded by a shutdown timeout.
+  - Increase raw OpenCode response and SSE event buffering limits to tolerate larger local session histories.
+
+## 2026-08-04 - 5.2.1
+
+### Fixes
+
+- bump @design.estate/dees-catalog to 4.6.1 (deps)
+  - Updates @design.estate/dees-catalog from 4.6.0 to 4.6.1
+
+## 2026-08-04 - 5.2.0
+
+### Features
+
+- add browser authentication resume after transport reconnects (auth)
+  - Adds single-use in-memory resume tokens that rotate on successful resume and expire without extending the original login lifetime.
+  - Stores resume tokens in browser sessionStorage to re-authenticate reconnecting transports without user interaction.
+  - Adds the controller.auth.resume typed request and request validation.
+  - Raises the websocket payload limit to 16 MiB and bumps typedsocket to 6.2.0.
+  - Records recent transport close events for diagnostics.
+
+## 2026-08-04 - 5.1.0
+
+### Features
+
+- add embedded smartdb database mode (database)
+  - Use an embedded smartdb engine by default when HARNESS_CONTROLLER_MONGO_URL is not set, with storage under the controller state directory or HARNESS_CONTROLLER_DB_DIR.
+  - Allow secondary CLI processes to attach to the running embedded engine socket for direct database operations such as temp-password.
+  - Keep external MongoDB-compatible server support through HARNESS_CONTROLLER_MONGO_URL and HARNESS_CONTROLLER_MONGO_DB.
+  - Add bounded audit log pruning and embedded database integration coverage.
+
+## 2026-08-04 - 5.0.2
+
+### Fixes
+
+- bundle highlight.js for CSP-safe code views (web)
+  - Provide highlight.js through the catalog library loader before terminal or code views mount.
+  - Bump @design.estate/dees-catalog to 4.6.0 and add highlight.js 11.11.1.
+
+## 2026-08-04 - 5.0.1
+
+### Fixes
+
+- correct CLI error prefix and bump dees catalog (cli,deps)
+  - Update CLI error output label from opencode-controller to harness-controller.
+  - Bump @design.estate/dees-catalog from 4.5.1 to 4.5.2.
+
+## 2026-08-04 - 5.0.0
+
+### Breaking Changes
+
+- rename OpenCode controller to Harness Controller (branding)
+  - Renames the package to @modelprofile.com/harness-controller and updates controller identity metadata.
+  - Changes the CLI command and help text to the new Harness Controller naming.
+  - Replaces OPENCODE_CONTROLLER_* configuration variables with HARNESS_CONTROLLER_* equivalents.
+  - Updates proxy secret header, WebAuthn display identity, UI element/export names, log paths, tests, and documentation for the new naming.
+
+## 2026-08-04 - 4.8.7
+
+### Fixes
+
+- refine sidebar section styling and update dees-catalog (ui)
+  - Add a Project section label above the project selector.
+  - Adjust sidebar header spacing and label styling for a more consistent layout.
+  - Bump @design.estate/dees-catalog from 4.5.0 to 4.5.1.
+
+## 2026-08-04 - 4.8.6
+
+### Fixes
+
+- bump @design.estate/dees-catalog to 4.5.0 (deps)
+  - Updates @design.estate/dees-catalog from 4.4.0 to 4.5.0.
+
+## 2026-08-04 - 4.8.5
+
+### Fixes
+
+- prevent event fanout from blocking permission handling (controller)
+  - Dispatch controller events asynchronously so stale browser peers cannot delay the event stream.
+  - Debounce auto-accept permission sweeps per directory to avoid excessive work during permission-event bursts.
+  - Increase protected operation rate limits and lengthen session refresh debounce for busy agent runs.
+
+## 2026-08-04 - 4.8.4
+
+### Fixes
+
+- bump @design.estate/dees-catalog to 4.4.0 (deps)
+  - Updates @design.estate/dees-catalog from 4.3.2 to 4.4.0.
+
+## 2026-08-04 - 4.8.3
+
+### Fixes
+
+- prevent stale session state from accumulating (sessions)
+  - Bound auto-accept session tracking by removing oldest stale session ids.
+  - Prune model and effort overrides for sessions that no longer exist.
+  - Clear subagent modal state on session or project switches and cap pending terminal output buffering.
+
+## 2026-08-03 - 4.8.2
+
+### Fixes
+
+- bump @design.estate/dees-catalog to 4.3.2 (deps)
+  - Updates @design.estate/dees-catalog from 4.3.1 to 4.3.2.
+
+## 2026-08-03 - 4.8.1
+
+### Fixes
+
+- bump @design.estate/dees-catalog to 4.3.1 (deps)
+  - Updates @design.estate/dees-catalog from 4.3.0 to 4.3.1.
+
+## 2026-08-03 - 4.8.0
+
+### Features
+
+- add subagent session drill-in view (subagents)
+  - Expose childSessionId on tool calls when tool metadata references a spawned session
+  - Open a modal message list for subtask sessions from harness subtask events
+  - Refresh the subagent drill-in modal when child session events arrive
+  - Upgrade dees-catalog to 4.3.0 for subtask open support
+
+## 2026-08-03 - 4.7.7
+
+### Fixes
+
+- bump @design.estate/dees-catalog to 4.2.1 (deps)
+  - Updated @design.estate/dees-catalog from 4.2.0 to 4.2.1.
+
+## 2026-08-03 - 4.7.6
+
+### Fixes
+
+- bump @design.estate/dees-catalog to 4.2.0 (deps)
+  - Updates @design.estate/dees-catalog from 4.1.0 to 4.2.0.
+
+## 2026-08-03 - 4.7.5
+
+### Fixes
+
+- bump @design.estate/dees-catalog to 4.1.0 (deps)
+  - Updates @design.estate/dees-catalog from 4.0.3 to 4.1.0.
+
+## 2026-08-03 - 4.7.4
+
+### Fixes
+
+- update @design.estate/dees-catalog to 4.0.3 (deps)
+  - Updated @design.estate/dees-catalog from 4.0.2 to 4.0.3.
+
+## 2026-08-03 - 4.7.3
+
+### Fixes
+
+- restore completed question card answers from model output (web)
+  - Parse completed question call output for model-facing question/answer pairs when structured answers are unavailable.
+  - Fall back to cached question card responses before marking completed answers as empty.
+
+## 2026-08-03 - 4.7.2
+
+### Fixes
+
+- bump @design.estate/dees-catalog to 4.0.2 (deps)
+  - Updates @design.estate/dees-catalog from 4.0.1 to 4.0.2.
+
+## 2026-08-03 - 4.7.1
+
+### Fixes
+
+- handle model-backed builtin session commands asynchronously (sessions)
+  - Run compact and init builtin session commands in the background so browser requests return immediately and progress is delivered through session events.
+  - Increase OpenCode SDK timeout for model-backed builtin commands to ten minutes.
+
+## 2026-08-03 - 4.7.0
+
+### Features
+
+- add built-in session slash commands (sessions)
+  - Expose compact, undo, redo, and init in slash command autocomplete
+  - Add validated controller.session.builtin request handling with auth coverage
+  - Run matching OpenCode session operations and refresh session state after execution
+
+## 2026-08-03 - 4.6.5
+
+### Fixes
+
+- show orphaned question tool calls in transcript (questions)
+  - Link pending question requests to their originating tool call IDs.
+  - Render orphaned running or pending question calls as expired and errored calls as dismissed instead of hiding them.
+
+## 2026-08-03 - 4.6.4
+
+### Fixes
+
+- persist answered question cards from transcript (chat)
+  - Filter question tool-call messages out of the chat transcript so raw question JSON is not rendered.
+  - Rebuild answered question cards from completed question tool calls so responses persist after reload.
+  - Avoid duplicate answered question cards when transcript data replaces the local cache.
+
+## 2026-08-03 - 4.6.3
+
+### Fixes
+
+- prevent oversized transcript payloads from starving message normalization (opencodeclient)
+  - Use independent payload budgets for each tool call so oversized tool data elides locally.
+  - Cap reasoning text per message and elide reasoning parts beyond the per-message budget.
+  - Keep transcript loading resilient by relying on final oldest-message trimming instead of a shared aggregate message budget.
+
+## 2026-08-03 - 4.6.2
+
+### Fixes
+
+- bump @design.estate/dees-catalog to 4.0.1 (deps)
+  - Update @design.estate/dees-catalog from 4.0.0 to 4.0.1
+
+## 2026-08-03 - 4.6.1
+
+### Fixes
+
+- bump @design.estate/dees-catalog to 4.0.0 (deps)
+  - Updated @design.estate/dees-catalog from 3.104.0 to 4.0.0.
+
+## 2026-08-03 - 4.6.0
+
+### Features
+
+- add per-chat yolo mode and resilient transcript loading (chat)
+  - Add a controller.session.yolo request to toggle per-chat permission auto-accept for the current controller run.
+  - Expose each session detail's effective auto-accept state so the chat can switch between Ask and Yolo modes.
+  - Render permissions and questions inline in the conversation and keep answered cards visible in the transcript.
+  - Elide oversized transcript payloads and trim oldest messages so session details remain loadable within transport limits.
+
+## 2026-08-03 - 4.5.1
+
+### Fixes
+
+- document integrated terminal behavior (readme)
+  - Adds README coverage for terminal creation, server-side PTY lifecycle, browser reattachment, shared sizing, and audited terminal events.
+
+## 2026-08-03 - 4.5.0
+
+### Features
+
+- add PTY terminal relay and web UI (terminal)
+  - Expose typed controller requests for terminal listing, creation, renaming, removal, attach, detach, input, resize, and output streaming.
+  - Bridge OpenCode PTY WebSocket sessions through an authenticated TerminalRelay with input limits, resize handling, peer detach cleanup, and terminal change events.
+  - Add bundled xterm support and terminal selection/rendering in the browser client.
+
+## 2026-08-03 - 4.4.0
+
+### Features
+
+- add shared text prompt modal for create and rename dialogs (web)
+  - Adds a reusable single-field prompt for group creation, group renaming, and conversation renaming
+  - Focuses and selects prompt input when opened and supports Enter key submission
+  - Keeps empty-value validation before applying prompt actions
+
+## 2026-08-03 - 4.3.1
+
+### Fixes
+
+- accept session group controller events in socket client (controller-events)
+  - Export controllerEventTypes and derive TControllerEventType from it to keep runtime validation aligned with type definitions.
+  - Include sessiongroups.changed in the browser socket client's allowed controller event set.
+
+## 2026-08-03 - 4.3.0
+
+### Features
+
+- add per-project session grouping (session-groups)
+  - Add persisted per-project session group storage with validation and typed socket get/update endpoints.
+  - Enable creating, renaming, deleting, dragging, and reordering conversation groups in the web UI.
+  - Synchronize group changes across connected clients and remove archived or deleted sessions from groups.
+  - Bump @design.estate/dees-catalog to 3.102.0 for grouping support.
+
+## 2026-08-03 - 4.2.3
+
+### Fixes
+
+- filter child sessions from session listings (opencodeclient)
+  - Exclude sessions with a parentId so child sessions do not appear as standalone conversations.
+
+## 2026-08-03 - 4.2.2
+
+### Fixes
+
+- list only root sessions when loading conversations (opencodeclient)
+  - Pass roots: true when requesting the session list to exclude internal subagent child sessions.
+  - Prevents child sessions from consuming the request limit and crowding out top-level conversations.
+
+## 2026-08-03 - 4.2.1
+
+### Fixes
+
+- centralize audit event validation vocabulary (audit)
+  - Derive the audit event type union from a shared const list.
+  - Use the shared audit event list for runtime document validation so valid events cannot drift from persisted validation.
+
+## 2026-08-03 - 4.2.0
+
+### Features
+
+- add session rename and archive actions (sessions)
+  - Add typed controller requests, validation, audit events, and OpenCode client update support for renaming and archiving sessions.
+  - Add a conversation context menu in the web UI with Rename, Archive, and Delete actions.
+  - Bump dees-catalog to 3.101.0 for the updated session list context interactions.
+
+## 2026-08-03 - 4.1.0
+
+### Features
+
+- add question handling and auto-accept permissions (controller)
+  - Add OpenCode question normalization, session detail exposure, reply/reject controller API, and UI cards for answering pending questions.
+  - Persist an auto-accept permissions setting and automatically reply once to pending permission requests across registered projects when enabled.
+  - Add client-side draft conversations before first send and move archived sessions out of the main conversation list.
+
+## 2026-08-03 - 4.0.0
+
+### Breaking Changes
+
+- allow registering projects from any directory on disk (projects)
+  - Changes --projects-root from an enforcing project boundary to the default base for relative paths and initial suggestions.
+  - Accepts absolute project paths outside the default base while keeping relative display names for projects under it.
+  - Updates path suggestions, UI copy, documentation, and tests for filesystem-wide project registration.
+
+## 2026-08-03 - 3.4.0
+
+### Features
+
+- support absolute paths when registering projects (projects)
+  - Accept absolute disk paths below the configured projects root for project creation and normalize them before registration.
+  - Return absolute path suggestions for absolute queries and expose the projects root through controller settings for the UI.
+  - Show the projects root and inline project creation errors in the add-project form.
+  - Document the absolute and relative project path workflow and extend validation tests.
+
+## 2026-08-03 - 3.3.0
+
+### Features
+
+- add CLI temporary password login (auth)
+  - Add hashed temporary password persistence with TTL expiry, one-minute to 24-hour lifetime bounds, and an active credential limit.
+  - Expose a temp-password CLI command that mints browser login credentials directly from the controller database and records audit events.
+  - Add a typed temporary password login endpoint and browser UI form for authenticating with minted credentials.
+  - Document temporary password usage and add auth store coverage for minting, verification, expiry, and limits.
+
+## 2026-08-03 - 3.2.0
+
+### Features
+
+- support reasoning effort variants in model selection (models)
+  - Adds validation and persistence for optional model variant selections.
+  - Sends selected variants to OpenCode as the body-level variant parameter while keeping model references unchanged.
+  - Surfaces advertised model variants in the settings dialog and chat composer effort dropdowns.
+
+## 2026-08-03 - 3.1.0
+
+### Features
+
+- add project removal flow and transport close handling (controller)
+  - Add a confirmed UI action to remove the selected project from the project list without deleting files on disk.
+  - Surface non-normal transport closures in the web app, including frame-limit disconnect messages during reconnects.
+  - Reduce normalized response budgets to stay under the typedsocket frame limit and update aggregate budget coverage.
+
+## 2026-08-03 - 3.0.0
+
+### Breaking Changes
+
+- switch project registration to existing paths and add slash command support (controller-protocol)
+  - Bumps the controller protocol to v3 and changes project creation requests from name to path.
+  - Registers only existing visible directories below the projects root, including nested relative paths, instead of creating new project folders.
+  - Adds project path suggestions for the add-project UI.
+  - Adds OpenCode command listing, slash-command autocomplete, and server-side command execution with command-pinned agent or model support.
+  - Adds per-message model overrides while preserving the persisted default model behavior.
+
+## 2026-08-03 - 2.0.0
+
+### Breaking Changes
+
+- add project-scoped sessions and default model settings (controller)
+  - Bump the controller protocol to v2 and require projectId on session and permission requests.
+  - Add projectsRoot configuration with legacy adoption, project persistence, and project create/list/remove endpoints.
+  - Add model listing and persisted default model settings with live project and settings change events.
+  - Update the web UI with project selection, project creation, model selection, and backend version reload handling.
+
+## 2026-08-03 - 1.1.0
+
+### Features
+
+- add setup-code option and detached diagnostics logging (controller-startup)
+  - Adds validation and propagation for operator-provided setup codes during foreground and detached starts.
+  - Writes detached controller stderr diagnostics to a per-port XDG state log with rotation and file safety checks.
+  - Improves controller process verification for default-port launches and relative CLI paths.
+  - Updates tests and documentation for setup-code behavior, detached logs, and process inspection.
+
+## 2026-08-03 - 1.0.2
+
+### Fixes
+
+- normalize passkey begin failures as typed responses (auth)
+  - Convert passkey setup and authentication begin failures into TypedResponseError responses.
+  - Log underlying controller operation errors while keeping wire responses generic.
+
+## 2026-08-03 - 1.0.1
+
+### Fixes
+
+- bump typedserver to 9.2.1 and typedsocket to 6.1.0 (deps)
+  - Update @api.global/typedserver from 9.2.0 to 9.2.1
+  - Update @api.global/typedsocket from 6.0.0 to 6.1.0
+
+## 2026-08-02 - 1.0.0
+
+### Features
+
+- add initial passkey-authenticated OpenCode controller (controller)
+  - Add CLI lifecycle commands for detached and foreground controller operation, status checks, and verified stop handling.
+  - Implement immutable runtime configuration with WebAuthn origin, RP ID, workspace, and trusted proxy validation.
+  - Add SmartData-backed passkey setup/authentication, ceremony persistence, credential counter updates, and audit events.
+  - Expose typed controller API, browser socket client, and web UI for sessions, messages, permissions, and OpenCode status.
+  - Add OpenCode supervision/client integration plus build configuration and test coverage.
+
+### Breaking Changes
+
+- restrict local transport to loopback and harden pre-authentication controls (controller)
+  - Local mode now binds the controller HTTP/WebSocket listener to 127.0.0.1; all-interface binding is limited to trusted proxy mode.
+  - Count wrong setup-code attempts before validation and add a global unauthenticated preflight limit.
+  - Reap surviving OpenCode process-group members when the leader exits and avoid later signalling a possibly recycled group id.
+  - Upgrade TypedRequest, TypedServer, and TypedSocket dependencies and add live transport coverage for default-deny client tags.
+  - Disable npm publication in release configuration and update documentation for git-only release and proxy isolation.
+
+### Fixes
+
+- remove redundant pending changelog summary (changelog)
+  - Remove duplicate Pending entry already covered by the Features section.
+- restore sha512 integrity metadata for legacy lockfile entries (deps)
+  - Replace 20 collision-weak sha1 integrity values (a registry-metadata artifact) with the upstream sha512 values and verify a frozen-lockfile install against them.