Changelog
320releases across 5 months
Every PAPI release, cycle by cycle. Each one pushes back against project drift.
Get started freeMarch 202618 releases
- Strategy review: replace cycle-count staleness with drift-based staleness for briefs, ADs, and North Star
- Strategy review: link recommendations to action items with status tracking
- Track build iteration count (pushbacks before review) as rework metric
- Strategy review: include non-task git commits in context to catch ad-hoc work
- Orient: include npm published version vs local version check — flag dist-tag drift
- Fix process.env.PAPI_PROJECT_DIR mutation race condition in API routes
- Npm security audit — verify package config, 2FA, access controls
- Validate /api/intelligence model and maxTokens to prevent cost abuse
- Add PAPI_LIGHT_MODE config for branchless builds
- Create /security-audit skill for codebase-wide reviews
- Fix planner cycle sizing, rec expiry, scope pre-check
- Add block action to board_deprioritise + planner blocked-task instructions
- Add PRE-BUILD VERIFICATION to BUILD HANDOFFs
- Drop -alpha suffix from npm package versions so latest dist-tag advances
- Internal improvements and maintenance.
- Add Strict-Transport-Security header to next.config.ts
- Data proxy: per-user API keys with project ownership verification
- Scope onboard endpoint to prevent cross-user project enumeration and claiming races
- Remove hardcoded project UUIDs from brain-supabase.ts
- Create waitlist_signups migration (table has no migration, was created manually)
- Cockpit shows 'Released' instead of 'ready for release' for completed cycles
- Security: restrict admin telemetry to owner-only, not any authenticated user
- Allow authenticated dashboard sessions to access admin telemetry
- Add missing NOT NULL fields to dashboard createBuildReport
- Cascade user_id on project claim + fix ensure-schema gaps
- Board empty states, hide filters when empty, remove CLI jargon
- Security: remove user_id IS NULL fallback — strict user isolation
- Data isolation — scope DB queries by user_id + onboarding gate
- Security: restrict OAuth login to allowlisted GitHub accounts
- Security: strip x-papi-* headers from incoming requests to prevent spoofing
- Unify API route auth to support GitHub OAuth sessions
- Revert "Revert "fix: guard ProjectProvider against non-array API responses""
- Revert "fix: guard ProjectProvider against non-array API responses"
- Guard ProjectProvider against non-array API responses
- Use correct theme tokens in admin page — fixes production render
- Add Admin link to dashboard navigation under More menu
- Add funnel analytics tracking to landing and setup pages
- Configure dogfood logging for external users during setup
- MCP telemetry infrastructure — track tool calls, projects, milestones
- Landing page: CTA hierarchy, scroll incentive, social proof with real numbers
- Landing page CTA hierarchy, scroll incentive, social proof
- Mobile responsive pass: fix critical breakage on cockpit, board, and analytics
- Mobile responsive pass — cockpit, board, analytics
- Delta-only discovery canvas in strategy review
- Summarise completed tasks by module in strategy review
- Compact previous strategy reviews to summary + top recommendation
- Exclude deferred tasks from strategy review context
- Fetch 5 human reviews instead of 20 in strategy review
- Strip AD body text in strategy review context
- Release tag version derived from task cycle, not health.totalCycles
- Skip .papi commit in review_submit when directory doesn't exist
- Review_submit handles uncommitted changes before branch switch
- Ad_hoc no longer marks tasks Done when passed a task_id
- PgBouncer prepare:false fix + strategy review query parallelization
- CycleHero layout — flex instead of grid for even stat distribution
- Single-row grid layout — stats beside headline with divider
- Segmented ring — shows Done/InReview/InProgress progress
- Ring visibility — brighter track, done/total counter
- Stats strip redesign — full-width grid with large numbers
- Address review feedback — consolidate hero pane
- Analytics reframe: kill metrics wall, add headline insight, make velocity chart the hero
- Analytics reframe — velocity chart hero + headline insight + kill metrics wall
- Update stale sprint_number/sprint_range column refs to cycle_number/cycle_range
- Cockpit redesign: Cycle Ring hero + headline insight + progressive disclosure
- Cockpit redesign — Cycle Ring hero + headline insight + progressive disclosure
- Revert: restore cockpit to pre-redesign state
- Address cockpit review feedback — 6 fixes
- Cockpit redesign — Cycle Ring hero, stats bar, progressive disclosure
- Add XS to effort/complexity taxonomy
- Bootstrap-project skill prefers local PAPI build
- Clean up .papi/ references in user-facing strings for PG adapter
- Make error messages adapter-aware for PG users
- Rename sprint_number to cycle_number in MCP tool schemas
- Surface schema creation errors instead of silent swallow
- Remove duplicate column definitions in ensure-schema.ts
- Remove artificial effort budget floor from cycle sizing
- Add project frame + dogfood log to bootstrap-project skill
- Add bootstrap CLAUDE.md to /bootstrap-project skill
- Add /bootstrap-project skill for rapid client project setup
- Complete sprint→cycle DB column rename (migration + adapter)
- Codebase sprint→cycle rename — 1,753 references across 108 files still use old taxonomy