Changelog

223releases tagged fix

Every PAPI release carrying the fix tag. What shipped, when.

Get started free

June 20262 releases

v0.283.0

  • C283: visibility-scoped docs system (tasks 1977, 2007, 2008, 2012-2014)
  • Restore login nav + fix mobile on landing v3
  • Allow /public static assets through auth gate

v0.282.0

  • Cycle 282 — README demo + rewrite
  • Tag capturing project_id on idea-captured actions
  • Cycle 282 — Owner: Owner Action Queue v2 (delegation + richer schema + nudge)
  • Move Decisions section labels outside video frame
  • Wire real iframe support via /cockpit-embed/* routes
  • Full redesign across 8 sections

May 202613 releases

v0.274.0

  • Cross-project config audit CLI (npx @papi-ai/server audit)
  • Cycle 274 — Core: planner grounding, prompt dedup, quality rubric, degradation + coherence guards
  • Build-in-public OBS overlay + live-data hook
  • Build_execute auto-commit no longer silently drops new untracked files

v0.273.0

  • Resolve WWW-Authenticate-missing P0 — Railway was deploying stale cycle-224 branch
  • Exclude remotion/ from root tsconfig so local vercel --prod typechecks
  • Promote OAuth as primary install path + auto-default project ID
  • C273 security: AD-27 fail-closed + admin client centralization + API surface hardening
  • Pin owner project resolution to PAPI_PROJECT_ID (stop wrong-project drift)

v0.271.0

  • Install-snippets default URL expects mcp.getpapi.ai, not Railway
  • Exclude bundled @papi-ai/skills payloads from ESLint
  • Background doc-gardener for docs/INDEX.md
  • CLAUDE.md/AGENTS.md size-enforcement hook
  • Two-layer CLAUDE/AGENTS harness for Codex/Cursor/Devin
  • Ship papi-cycle AGENTS.md bundle as canonical harness
  • @papi-ai/skills single source of truth

v0.270.0

  • Merge shared cycle branch — server
  • Merge shared cycle branch — platform
  • Merge shared cycle branch — core
  • URL source-of-truth + build-time validation
  • Creating file for storing CLA Signatures
  • Hosted MCP HTTP transport restored — mcp.getpapi.ai live
  • Security(c269): quick fixes from security audit + cadence hook

v0.269.0

  • Cycle 269 — Server batch (6 tasks) + docs reconcile
  • Skills export spike — AGENTS.md + per-phase SKILL.md bundle
  • Clarify DATABASE_URL guidance — session pooler (5432) not transaction pooler
  • Cap fan-out concurrency to prevent pool saturation

v0.266.0

  • Owner Pre-Flight Activation Polish
  • Bypass cookie auth for /api/cron/* paths in proxy

v0.264.0

  • Merge shared cycle branch — gtm
  • Pin OAuth metadata issuer to NEXT_PUBLIC_APP_URL not VERCEL_URL
  • Drop .js extension from oauth-tokens import for Next.js turbopack
  • Wire OAuth 2.1 server + DCR + Railway 401 + UI copy
  • OAuth flow for remote MCP — user pastes one URL, no token handling
  • C263: Remote MCP production — multi-tenant HTTP transport

v0.260.0

  • MCP Server DX batch — phase-tag fix, enum rename, pre-build gates (7 tasks)
  • Switch default DATABASE_URL template from port 6543 to 5432 (session pooler)

v0.257.0

  • HubFrontDoor polish — kicker removal, tab hierarchy, copy clearance, softer idle state
  • Self-contained LLM onboarding payload at /llms-full.txt
  • Block review_submit auto-merge on batch-build branches
  • Use superseded column, route 'new' actions to upsert
  • Warn when dependsOn refs an unresolvable branch
  • Rewrite new-N placeholder IDs in boardCorrections.dependsOn
  • Split Database row into PAPI control plane DB + Product DB
  • Re-throw path-identity hard-stop + explicit Windows-path detection

v0.255.0

  • Wider container, byline, CTA, opening scenario
  • SEO + competitor naming on /manifesto
  • Cancellation audit foundation (cancelled_by field)
  • Hub front door — parallel paths, GitHub default
  • /manifesto — Building Is Indecisive Work
  • Decision Mapping visual lift on /strategy
  • Drop /patch-notes from shipped action footer
  • /time-machine redesign — feature for all users
  • Skip path-identity check after first run — was re-running on every tool call

v0.253.0

  • Right task bar visual lift + expand handle bug fix
  • Add C253 directory copy set to messaging.md
  • Kill 5000-row metrics fetch + 500-doc scan + add proxy timeout
  • Portfolio surface design pass — hierarchy, colour, framing match the landing-page quality
  • Correct broken import path in cycle-branch-reuse.test.ts
  • Followup(security): add regression guards for /api/data CDN cache leak
  • Scope /api/data responses as private to prevent CDN cache cross-tenant leak
  • Merge shared cycle branch — setup
  • Merge shared cycle branch — mcp-server
  • Merge shared cycle branch — strategy
  • Replace hardcoded cyclesSinceStrategyReview=0 with real query
  • Strategy_change AD context, review merge visibility, learning lifecycle tools
  • Redesign — single action-center band + tabbed intelligence panel
  • Attention surface triggers, LastCycleSummary, learnings filter fix
  • Skip Vercel prod builds on irrelevant commits
  • Gate dashboard plan launcher behind feature flag

v0.252.0

  • Redesign — single action-center band + tabbed intelligence panel
  • Attention surface triggers, LastCycleSummary, learnings filter fix
  • Skip Vercel prod builds on irrelevant commits
  • Gate dashboard plan launcher behind feature flag

v0.251.0

  • Merge shared cycle branch — core
  • Release next-action no longer fires plan launcher
  • CycleComplete vs cycleAllDone, rich attention detail
  • Paired band align-items start, not stretch
  • Put Next Action CTA inline with headline
  • Polish: hub density + right-panel UX feedback
  • Right panel expansion — content variants + structure
  • Collapse Strategy Reviews into single nav entry
  • Strategy review hub prominence + numbered archive
  • Hub card rebuild — v6 composition with restored intelligence surfaces
  • Hub hero zone redesign — spine + companion ring + anticipatory strategy review
  • Decommission /setup route — new front-door bootstrap surface in /hub
  • HubFrontDoor surface + /setup decommission (Block B)
  • Debug(auth): add structured logging to OAuth callback to diagnose first-attempt failure
  • Implement /privacy + /contact pages and contact form API
  • Page-level redirect to /hub for already-connected users
  • Backfill 226 releases + side TOC + prepend on release
  • Stop parking returning users in /setup; collapse hidden Reveal blocks
  • Allow public access to SEO + marketing routes
  • Foundations for indexability and AI-engine citation
  • Unblock CI — wrap /setup in Suspense and align stale MCP tests

April 20263 releases

v0.249.0

  • Merge shared cycle branch — infrastructure
  • Merge shared cycle branch — dashboard
  • Gestalt pre-build check — read cycle as a whole before first build_execute
  • Point second-project init at /hub Add Project flow instead of /setup
  • Surface squash-merge errors + pre-flight guard for no-gh environments
  • Parallelize health queries + deduplicate build reports fetch
  • Public docs site — install guide + tool reference + nav cleanup
  • Branch detection + auth trim + release guard improvements
  • Runtime self-host guard for shell DATABASE_URL leak
  • Replace project switcher select with bounded popover
  • /admin/activation scoreboard — six-metric funnel view (AD-27)
  • Require PAPI_ADAPTER=pg when DATABASE_URL is set
  • Add /docs/install public route — fixes dead --help link
  • Preserve SQLSTATE code in proxy error path
  • User_profiles backfill migration + orphan alert on orient
  • Guard null task.title across build path + data-proxy
  • Release server guard — block release when cycle tasks not Done/Cancelled
  • Auto-append .mcp.json to .gitignore on setup in git repos
  • Warn users to gitignore .mcp.json after API key generation
  • Arrival surface — recommendation pill + welcome letter
  • Doc action-item scanner
  • Add pgcrypto extension + throw on schema-creation failure
  • Name lock — Adaptive across forward-facing surfaces
  • Diff-aware lint-staged — only block on errors touching staged lines

v0.248.0

  • Merge shared cycle branch — dashboard
  • Hub setup checklist widget — activation steps with DB-derived state (AD-28)
  • Collapse setup wizard to 3-minute path (name → API key → MCP config)
  • Make '+N more' pill a full clickable link to board

v0.246.0

  • Orient ad_hoc suppression on fresh projects
  • Hub arrival pair
  • Doc action-item scanner
  • Sub-agent dispatch for plan and strategy_review
  • Insert projects row before writing .mcp.json
  • Tighten init guard for partial-onboarding state
  • Build workspace packages before CI tests
  • Resolve 500 on orient for user innateiq
  • Handle bare-array JSON shape from supabase db query