March 202618 releases
- Skip .papi commits when directory is gitignored
- API key management UI — generate, view, and revoke keys
- Email signup + sign-in with confirmation flow
- Provider-aware user_profiles trigger for email auth
- Provider-aware auth — support email alongside GitHub OAuth
- Preserve Supabase session cookies through middleware
- Separate auth layout — login/onboard without app nav
- Redirect unauthenticated root URL to landing page
- Add block action to board_deprioritise + planner blocked-task instructions
- Add PRE-BUILD VERIFICATION to BUILD HANDOFFs
- Drop -alpha suffix from npm package versions so latest dist-tag advances
- Data proxy: per-user API keys with project ownership verification
- Scope onboard endpoint to prevent cross-user project enumeration and claiming races
- Remove hardcoded project UUIDs from brain-supabase.ts
- Create waitlist_signups migration (table has no migration, was created manually)
- Cockpit shows 'Released' instead of 'ready for release' for completed cycles
- Security: restrict admin telemetry to owner-only, not any authenticated user
- Allow authenticated dashboard sessions to access admin telemetry
- Add missing NOT NULL fields to dashboard createBuildReport
- Cascade user_id on project claim + fix ensure-schema gaps
- Board empty states, hide filters when empty, remove CLI jargon
- Security: strip x-papi-* headers from incoming requests to prevent spoofing
- Unify API route auth to support GitHub OAuth sessions
- Revert "Revert "fix: guard ProjectProvider against non-array API responses""
- Revert "fix: guard ProjectProvider against non-array API responses"
- Guard ProjectProvider against non-array API responses
- Use correct theme tokens in admin page — fixes production render
- Add Admin link to dashboard navigation under More menu
- Add funnel analytics tracking to landing and setup pages
- Configure dogfood logging for external users during setup
- MCP telemetry infrastructure — track tool calls, projects, milestones
- Landing page: CTA hierarchy, scroll incentive, social proof with real numbers
- Landing page CTA hierarchy, scroll incentive, social proof
- Mobile responsive pass: fix critical breakage on cockpit, board, and analytics
- Mobile responsive pass — cockpit, board, analytics
- Strip AD body text in strategy review context
- Release tag version derived from task cycle, not health.totalCycles
- Skip .papi commit in review_submit when directory doesn't exist
- Review_submit handles uncommitted changes before branch switch
- Ad_hoc no longer marks tasks Done when passed a task_id
- PgBouncer prepare:false fix + strategy review query parallelization
- CycleHero layout — flex instead of grid for even stat distribution
- Single-row grid layout — stats beside headline with divider
- Segmented ring — shows Done/InReview/InProgress progress
- Ring visibility — brighter track, done/total counter
- Stats strip redesign — full-width grid with large numbers
- Address review feedback — consolidate hero pane
- Analytics reframe: kill metrics wall, add headline insight, make velocity chart the hero
- Analytics reframe — velocity chart hero + headline insight + kill metrics wall
- Update stale sprint_number/sprint_range column refs to cycle_number/cycle_range
- Cockpit redesign: Cycle Ring hero + headline insight + progressive disclosure
- Cockpit redesign — Cycle Ring hero + headline insight + progressive disclosure
- Revert: restore cockpit to pre-redesign state
- Address cockpit review feedback — 6 fixes
- Cockpit redesign — Cycle Ring hero, stats bar, progressive disclosure
- Add XS to effort/complexity taxonomy
- Bootstrap-project skill prefers local PAPI build
- Clean up .papi/ references in user-facing strings for PG adapter
- Make error messages adapter-aware for PG users
- Rename sprint_number to cycle_number in MCP tool schemas
- Surface schema creation errors instead of silent swallow
- Remove duplicate column definitions in ensure-schema.ts
- Remove artificial effort budget floor from cycle sizing
- Add project frame + dogfood log to bootstrap-project skill
- Add bootstrap CLAUDE.md to /bootstrap-project skill
- Add /bootstrap-project skill for rapid client project setup
- Complete sprint→cycle DB column rename (migration + adapter)
- Dashboard attention system — "needs attention" badges on cockpit
- Add attention strip to cockpit CommandHeader
- Treat 'In Cycle' status as buildable in dashboard action derivation
- Remove stale migration path references from llms-install.md
- Add deleteActiveDecision — allow strategy tools to permanently remove ADs
- Data write proxy for external users — route MCP server writes through hosted API instead of direct DATABASE_URL
- Data write proxy for external users
- Add Active Decision health audit to zoom-out prompt
- Exclude supabase/ from tsconfig to fix Vercel build
- Dashboard overhaul — fix bugs, remove bloat, improve cockpit strategy
- Resolve merge conflict in docs/INDEX.md
- Remote-hosted prompt architecture — move methodology prompts server-side
- Distribution architecture: how to let external users access PAPI without exposing codebase or sharing DB
- Fix multi-tenant data isolation (Phase 1)
- Add IDE branch-switch notification note to build output
- Bump @papi-ai/server to 0.3.1-alpha.0 and update plugin
- Correct handleBoardDeprioritise test expectations
- Orient missing 'In Cycle' and 'Ready' tasks in sprint count
- Dogfood pipeline v1 — status tracking and planner integration
- Add progressive context budget to zoom-out tool
- New project smoke test — friction audit and checklist
- Dogfood pipeline — strategy reviews write observations to DB
- Deprioritise preserves BUILD HANDOFF, only defer clears it
- Fix 3 pre-existing server test failures