March 202618 releases
- Onboarding wizard: multi-step guided flow for new users (Phase 2)
- Replace expired Discord invite with permanent link
- Let Claude Code create .mcp.json — user pastes one prompt
- Rewrite config + install steps for clarity
- Simplify onboard config to match zero-config proxy architecture
- Dev Mode panel — simulate user states for testing onboarding and user-type flows
- Transfer guiding principles and strategy detection to prompts.ts planner prompt
- Owner-to-product transfer audit — categorise memory files and CLAUDE.md rules
- Research Cursor IDE compatibility with PAPI MCP server
- Add phase-level update support to hierarchy_update tool
- Stage definitions should include auth/security as explicit phase prerequisites
- Security audit gate — require pre-shipment surface audit before any access-widening change
- Default new tasks to Small complexity — bulk creation from research sessions should not assume Medium
- Update get_plan_context SQL function to include dead_ends column
- Board_edit clears cycle assignment when status set to Backlog
- Overhaul priority system and task selection logic
- Discovered issues pipeline: surface unactioned issues at cycle end and create linked backlog tasks
- Strategy review pre-check — scan plans directory and recent docs before assembling context
- Landing page: honest multi-client messaging — "Works best with Claude Code, compatible with any MCP client"
- Add XS estimation rule for copy-only changes, cite over-estimation stats
- Strengthen idea tool reference requirement — mandatory for research/planning sessions
- Address PR review findings — JSONB passthrough, duplicate import, planWriteBack stringify
- MCP server: improve dead_ends and brief_implications capture in build_execute
- RealignPhases should run during orient or plan, not only during strategy review
- BUG: Data-proxy JSONB double-encoding — JSON.stringify before Supabase JS insert
- BUG: Proxy-adapter returns snake_case rows — camelCase field access silently fails
- Fix stale [S${cycle}] prefix in briefImplications format string — should be [C${cycle}]
- Copy: shift positioning from context persistence to velocity governance
- Add Active Decision compliance check to papi-audit skill
- Add cockpit empty state for new projects and completed cycles
- Only show doc reference nudge when task is actually created
- User-friendly error messages in DataWarning
- Show user identity in dashboard header
- Inject relevant Active Decisions into build_execute handoff
- Rename Docs to Get Started on landing page
- Extract hardcoded Vercel URLs to env vars
- Doc registry actions param + idea tool reference nudge
- SSE refresh debounce — prevent excessive re-renders on batch operations
- Extract comment formatting helper — dedup build.ts and board.ts
- Resolve onboarding/auth bugs breaking dashboard
- Doc registry phase 3 — doc_scan tool + dashboard data + plans directory
- Add retry on display_id collision in dashboard review submit
- Exclude scripts/ from tsconfig to fix Vercel type-check
- Only build prompts entry on Vercel — skip full server bundle
- Split tsup config so prompts entry builds without adapter deps
- Add server package build to Vercel build pipeline
- Add prompts subpath export to MCP server package
- Add display_id to dashboard review submission
- Wire SSE into cockpit for instant dashboard refresh
- Surface task comments in build_list and board_view output
- Add request-scoped memoization to dashboard data-provider
- Fix N+1 queries in loadProjectsFromDb and completeBuild over-fetch
- Protect Deferred phases from auto-propagation regression
- Tighten mapSupabaseResult — require mapper, restore length guard
- Idea tool similarity gate — block creation and require user confirmation
- Enforce full-depth strategy review output with two-phase delivery
- Prevent phase auto-update from regressing manually-set statuses
- Add project bootstrap from portfolio page
- Add cockpit polling and focus revalidation
- Replace allowlist gate with email-verified check
- Secure multi-tenant write paths
- Skip .papi commits when directory is gitignored
- API key management UI — generate, view, and revoke keys
- Email signup + sign-in with confirmation flow
- Provider-aware user_profiles trigger for email auth
- Provider-aware auth — support email alongside GitHub OAuth
- Preserve Supabase session cookies through middleware
- Separate auth layout — login/onboard without app nav
- Redirect unauthenticated root URL to landing page
- Add block action to board_deprioritise + planner blocked-task instructions
- Add PRE-BUILD VERIFICATION to BUILD HANDOFFs
- Drop -alpha suffix from npm package versions so latest dist-tag advances
- Data proxy: per-user API keys with project ownership verification
- Scope onboard endpoint to prevent cross-user project enumeration and claiming races
- Remove hardcoded project UUIDs from brain-supabase.ts
- Create waitlist_signups migration (table has no migration, was created manually)
- Cockpit shows 'Released' instead of 'ready for release' for completed cycles
- Security: restrict admin telemetry to owner-only, not any authenticated user
- Allow authenticated dashboard sessions to access admin telemetry
- Add missing NOT NULL fields to dashboard createBuildReport
- Cascade user_id on project claim + fix ensure-schema gaps
- Board empty states, hide filters when empty, remove CLI jargon
- Security: strip x-papi-* headers from incoming requests to prevent spoofing
- Unify API route auth to support GitHub OAuth sessions
- Revert "Revert "fix: guard ProjectProvider against non-array API responses""
- Revert "fix: guard ProjectProvider against non-array API responses"
- Guard ProjectProvider against non-array API responses
- Use correct theme tokens in admin page — fixes production render
- Add Admin link to dashboard navigation under More menu
- Add funnel analytics tracking to landing and setup pages
- Configure dogfood logging for external users during setup
- MCP telemetry infrastructure — track tool calls, projects, milestones
- Landing page: CTA hierarchy, scroll incentive, social proof with real numbers
- Landing page CTA hierarchy, scroll incentive, social proof
- Mobile responsive pass: fix critical breakage on cockpit, board, and analytics
- Mobile responsive pass — cockpit, board, analytics
- Strip AD body text in strategy review context
- Release tag version derived from task cycle, not health.totalCycles
- Skip .papi commit in review_submit when directory doesn't exist
- Review_submit handles uncommitted changes before branch switch
- Ad_hoc no longer marks tasks Done when passed a task_id
- PgBouncer prepare:false fix + strategy review query parallelization