Fixed
- Platform nightly legs fail on half of all days and nothing measures the rate: each alert opens a fresh issue and closes on repair, so a 28-occurrence family reads as 28 first occurrences elemento pm-2zjs0g
- Full-item stdin JSON must preserve declared schema and extension custom fields elemento pm-stdin-schema-fields
- Agent-task token ratchet changes verdict with temporary-root path length elemento pm-agent-token-path
- Exact-tag recovery must preserve the complete reviewed release-control import closure elemento pm-gh1429
- Installed-agent acceptance must recover infeasible context budgets and retain structured refusal diagnostics elemento pm-gh1428
Added
- Fact-preserving SDK table encoding, measured TOON defaults, and complete context budgets elemento pm-kvxqp1
Security
- Remove vulnerable MCP Apps development client from the locked dependency tree (GHSA-6qxp-vccf-f47h) elemento pm-mcpoauth
Fixed
- GH-1411: Compose amount and token ceilings without stale cursors or skipped rows elemento pm-gh1411
- GH-1386: remove conflicting global output projection from get recovery retries elemento pm-gh1386
- GH-1408: Reduce omission receipt overhead for explicit scalar field projections elemento pm-gh1408
- GH-1409/GH-1410: Preserve declared blocker spelling when resolving imported source IDs elemento pm-gh1409
- GH-1398: Preserve bare-help discovery before CLI mutations elemento pm-gh1398
- GH-1392: Keep extension diagnostics read-only and resolve npm-managed freshness elemento pm-gh1392
- PR watch reports success when a mandatory check never reports elemento pm-zpwfzy
- Verify immutable Codecov assets and authenticated Cloud report uploads elemento pm-2x67z9
- GH-1394: Define audited owned-subtree replacement for complete-next settings mutations elemento pm-gh1394
- GH-1393: Seed truthful schema-context settings history for linked tests elemento pm-gh1393
Security
- CodeQL 43: keep worker-bridge debug diagnostics free of raw arguments and stderr elemento pm-cql43
- Dependabot 47 and Scorecard 29: patch indexed source-map offset denial of service elemento pm-dba47
- Adopt CodeQL 4.38.2 and TruffleHog 3.97.9 immutable scanner updates elemento pm-gh1404
Fixed
- GH-1389: Derive get omission receipts from emitted schedule and artifact aliases elemento pm-gh1389
- GH-1388: Expose every declared blocker and its live status in default item reads elemento pm-gh1388
- Compact retained runtime modules and stage packed SDK acceptance efficiently elemento pm-2evidence-dist
- GH-1385: preserve literal annotation prefixes across comment input transports elemento pm-gh1385
- GH-1383: consistent SDK item/history drift reads during concurrent ordinary mutations elemento pm-gh1383
- GH-1355: Agent UX: unknown prefix-option values become nonexistent commands in recovery examples elemento pm-7wzc6f
Added
- GH-1356: SDK: expose the canonical settings preview through host-bound audited mutation elemento pm-2sef82
Fixed
- Transactional preview portability: canonical race fixtures and persistent invalid-path recovery elemento pm-n912nt
- GH-1366: Agent UX: --output-format json emits human errors while --json emits structured errors elemento pm-gh1366
- GH-1354: Linked-test snapshot mode drops nested package dependencies and breaks monorepo acceptance elemento pm-5iwfkj
- GH-1365: Agent UX: typed update refusals blame valid flags instead of the field that failed validation elemento pm-gh1365
- GH-1369: Agent UX: claim --start bypasses compact mutation receipts and returns a noncanonical outer ID elemento pm-gh1369
- GH-1368: Agent UX: context next silently ignores inherited --fields and --depth options, including invalid values elemento pm-gh1368
- GH-1367: Agent UX: context handoff omission receipts suggest depth flags that do not restore omitted sections elemento pm-gh1367
Other
- Published artifact weight: the npm tarball ships 20MB of inline-source sourcemaps plus duplicate tsc and bundle outputs elemento pm-998juj
Fixed
- GH-1354: Linked-test snapshot mode drops nested package dependencies and breaks monorepo acceptance elemento pm-5iwfkj
Security
- Scorecard alert 29: patch Axios in the CodSpeed development dependency graph elemento pm-r61juc
- Remove unpatched braces recursion vulnerability from file matching elemento pm-fnx3np
