June 202612 releases
- Cycle 295 — Server: (risk-tier)
- Set/update the North Star directly via strategy_change capture
- Cycle 295 — Core
- Tie Done to a real git merge — block Done on failed merge
- Doc_register fails soft — never wedge the workflow on registry errors
- Hosted-assumption sweep of packages/server — findings doc + stdio-only annotation
- Session-guidance state is process-global — hosted multi-tenant pod aggregates ALL users' tool calls, so the "fresh window" nag fires permanently for everyone (Wes QoL)
- Decision-outcome ledger — capture structured evidence_ref + metric_delta on deliberate AD events (validate/modify/invalidate)
- Cycle 294 — core: (Decision-Intelligence substrate)
- Cycle 294 — server
- Orient times out (~30s) and self-exits — slow query fan-out, not a real pool wedge
- Cycle assignment 0/N in skip_handoffs + row-cap ceiling + proxy parity
- Revoke anon/authenticated TRUNCATE schema-wide + lock the default
- Merge shared cycle branch — mcp-server
- Merge shared cycle branch — dashboard
- Monetization floor — pricing page + entitlements + Stripe
- Resolve vs dynamic-segment conflict under app/api/projects
- Invitation email delivery via Resend
- Add invitation accept paths to PUBLIC_PATHS
- User documentation — guide + handbook (cycle 11)
- Invitation acceptance page
- Project team management page
- Invitation API endpoints
- Project membership access control — cycle 8
- Release(server): v0.7.34 — promote flag-not-block metering to latest
- Release(server): v0.7.33 — flag-not-block metering
- Flag heavy free-tier usage instead of hard-blocking
- Add skipVersion option to close cycle without git tag
- Plugin marketplace inventory + registry automation
- Lock user_profiles.tier against user-level writes
- Connector packaging + integration recipe skill
- Never scan the server filesystem under hosted transport (BUG-002)
- C288 core — contributor tools, owner-identity guard, cycle invariant, default project (tasks 2029/2049/2052/2087/2092)
- Papi-install skill — one-command MCP connection
- Contributor paperwork back-fill — CLA.md, ledger, CODEOWNERS, PR template
- Idempotent release tag creation — recover from partial release
- Rewrite burn fetchers onto VERIFIED provider endpoints
- MCP registry submission prep — mcpName + UTM inventory
- Activation & retention cockpit — stage-exit auto-evaluation + per-user retention
- Adopt hub-v4 design — golden-thread hub driven by the visitor's commands
- Project_switch rebinds the session to the switched project
- V3 — shared structure, drag-and-drop rows, accounts parity
- Revert favicon to pre-C287 mark
- Centralize auth with getAuthUser() wrapper
- Built-with-PAPI project carousel — real screenshots, names, cycles, links
- Brand-book wordmark replaces mascot face + health-signal cards
- Import TaskStatus in data route + untrack private docs/owner/action-queue.md
- C286 Infra: cost-resilience findings + orphaned owner commits (SKIP_AUTH scoping, hub fixes)
- C286 Marketing: landing owner pass + Run-with-PAPI badge & /install
- Front-door connection-signal routing + starter templates
- One-shot recovery email for stalled installs (kill-switched)
- Landing B — warm mascot-brand rebuild per mockup B
- Show logged-in state in landing nav + bounce authed users off /login
- Decisions video now plays on first interaction
- Marketing blog — /blog index + 3 launch posts (Lovable switch funnel)
- User-configurable project resolution method (root_hash / repo_url / manual)
- @YiumPotato has signed the CLA in cathalos92/papi-ui#934
- Papi face on empty, error, and 404 states
- Mount companion on hub — rest of scope pre-built
- Chat-bubble onboarding with papi face
- Mobile shell — bottom tab bar with live papi face
- Simplify primary nav to 4 destinations
- Original papi mascot face + companion in cockpit brand
- Marketing — changelog RSS/JSON feeds + HN draft
- Telemetry — UTM tagging + activation funnel digest
- Distribution — release auto-post + registry research
- Core — template guidance + papi-auto branch-coherence guard
- Admin 7-day-active metric + per-channel cohort widgets
- Hosted-fallback handles no-global-identity checkouts
- Merge shared cycle branch — server
- Merge shared cycle branch — owner-actions
- Merge shared cycle branch — infra
- Correct user_profiles key for GitHub App + make URL probes non-fatal on egress loss
- Point README install command at canonical mcp.getpapi.ai URL
- Correct clone path in CONTRIBUTING.md to papi-ui
- @Stonebridge-Systems has signed the CLA in cathalos92/papi-ui#927
- C283: visibility-scoped docs system (tasks 1977, 2007, 2008, 2012-2014)
- Restore login nav + fix mobile on landing v3
- Allow /public static assets through auth gate
- Cycle 282 — README demo + rewrite
- Tag capturing project_id on idea-captured actions
- Cycle 282 — Owner: Owner Action Queue v2 (delegation + richer schema + nudge)
- Move Decisions section labels outside video frame
- Wire real iframe support via /cockpit-embed/* routes
- Full redesign across 8 sections
May 20266 releases
- Cross-project config audit CLI (npx @papi-ai/server audit)
- Cycle 274 — Core: planner grounding, prompt dedup, quality rubric, degradation + coherence guards
- Build-in-public OBS overlay + live-data hook
- Build_execute auto-commit no longer silently drops new untracked files
- Resolve WWW-Authenticate-missing P0 — Railway was deploying stale cycle-224 branch
- Exclude remotion/ from root tsconfig so local vercel --prod typechecks
- Promote OAuth as primary install path + auto-default project ID
- C273 security: AD-27 fail-closed + admin client centralization + API surface hardening
- Pin owner project resolution to PAPI_PROJECT_ID (stop wrong-project drift)
- Install-snippets default URL expects mcp.getpapi.ai, not Railway
- Exclude bundled @papi-ai/skills payloads from ESLint
- Background doc-gardener for docs/INDEX.md
- CLAUDE.md/AGENTS.md size-enforcement hook
- Two-layer CLAUDE/AGENTS harness for Codex/Cursor/Devin
- Ship papi-cycle AGENTS.md bundle as canonical harness
- @papi-ai/skills single source of truth
- Merge shared cycle branch — server
- Merge shared cycle branch — platform
- Merge shared cycle branch — core
- URL source-of-truth + build-time validation
- Creating file for storing CLA Signatures
- Hosted MCP HTTP transport restored — mcp.getpapi.ai live
- Security(c269): quick fixes from security audit + cadence hook
- Cycle 269 — Server batch (6 tasks) + docs reconcile
- Skills export spike — AGENTS.md + per-phase SKILL.md bundle
- Clarify DATABASE_URL guidance — session pooler (5432) not transaction pooler
- Cap fan-out concurrency to prevent pool saturation
- Owner Pre-Flight Activation Polish
- Bypass cookie auth for /api/cron/* paths in proxy