diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0dcd2e3..ea238b2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,381 @@ Format based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ---
 
+## 1.0.0 (2026-05-30)
+
+
+### Features
+
+* A2A agent cards metadata for SDLC agents (SDLC Korak 5) ([fec112b](https://github.com/webdevcom01-cell/agent-studio/commit/fec112b8bef7d4cd05515c266695f5a8c5ea57d8))
+* A2A Agent Cards v0.3 — Phase 5 agent improvement ([f7448d2](https://github.com/webdevcom01-cell/agent-studio/commit/f7448d2b74d044a98c5b256d00b099ee25e8ea65))
+* **a2a:** add call_agents_parallel tool for simultaneous sub-agent execution ([718c74b](https://github.com/webdevcom01-cell/agent-studio/commit/718c74b5ce1dcebaf3a6a1fbe6eddc7d76eb9bae))
+* **A3:** Persistent Mode for reflexive_loop with build/test verification ([1df9142](https://github.com/webdevcom01-cell/agent-studio/commit/1df91422798538ad6d2f36fdc89e3d9cc3762ff6))
+* add .claude/scripts/upgrade_agents.py — bulk agent upgrade to 2026 standards ([81158b3](https://github.com/webdevcom01-cell/agent-studio/commit/81158b3eb6c37d2151aa5faa31f0f57ad4325111))
+* add agent-creator and agent-auditor skills (2026 enterprise standards) ([da7d0bf](https://github.com/webdevcom01-cell/agent-studio/commit/da7d0bf62cd5317ea1b577427cd28cf96b5e9634))
+* add ArchitectureOutput schema + ECC agent metadata (SDLC Korak 2) ([9c925e8](https://github.com/webdevcom01-cell/agent-studio/commit/9c925e889d7c8ff8a4af36f433e37b89a18e8401))
+* add audit logging to org/invite/approval routes (SEC-08) ([9e06875](https://github.com/webdevcom01-cell/agent-studio/commit/9e06875dcce82dcc0f1b3b9c922509db1889c19b))
+* add claude_agent_sdk node type with subagents, session resume, MCP tools, and streaming ([d79da1c](https://github.com/webdevcom01-cell/agent-studio/commit/d79da1cc798d593dc99423a513877e18b4cd91af))
+* add conversationId to AgentCallLog + auto-update Conversation.status ([48b5e74](https://github.com/webdevcom01-cell/agent-studio/commit/48b5e74f1157d2461ae05882e5ee79b579792cd1))
+* add human approval + feature branch safety to sdlc-autonomous-pipeline ([ce63068](https://github.com/webdevcom01-cell/agent-studio/commit/ce63068df2947d71c27372fbbe4d3af574827070))
+* add monitoring dashboard script + fix gitignore ([f237f8c](https://github.com/webdevcom01-cell/agent-studio/commit/f237f8c2adb81d04e795045f832d4f3fe2a192c5))
+* add onboarding gate with onboardingCompletedAt field ([79bac09](https://github.com/webdevcom01-cell/agent-studio/commit/79bac09a20cf248cf3e25968686ceb41f17c5880))
+* add project_context node — Phase 1 agent improvement ([87bc70d](https://github.com/webdevcom01-cell/agent-studio/commit/87bc70df4cef6a73232700f18290b85a448e3b99))
+* add remote MCP server exposing agent-studio as Claude Code tool ([9db8812](https://github.com/webdevcom01-cell/agent-studio/commit/9db88124dacac67b630d159b8d855ffed9bce4b0))
+* add sandbox_verify node — Phase 2 agent improvement ([a7de96a](https://github.com/webdevcom01-cell/agent-studio/commit/a7de96a2f93c04aebf30ceaa01f395fbede71870))
+* add sdlc-autonomous-pipeline starter flow ([cfd83d5](https://github.com/webdevcom01-cell/agent-studio/commit/cfd83d5a4e76c80911522ed10aa13456cdeda137))
+* add skill eval definition files for agent-creator and agent-auditor ([c7c73c4](https://github.com/webdevcom01-cell/agent-studio/commit/c7c73c4f4ee45867da088a80947788d5e7c9b86b))
+* add SOMA human review queue ([2992f4d](https://github.com/webdevcom01-cell/agent-studio/commit/2992f4d10e9ac295d72bd5329f308b590f4b4a3d))
+* **admin:** add Review Queue viewer page ([#143](https://github.com/webdevcom01-cell/agent-studio/issues/143)) ([26bec05](https://github.com/webdevcom01-cell/agent-studio/commit/26bec055eca009a542a12f39001631312e6c0be6))
+* **agents:** add failure_modes + LLM Top10 + GitHub patterns to Swarm Security Analyst (AGENT-04 67→70) ([fd8a6f0](https://github.com/webdevcom01-cell/agent-studio/commit/fd8a6f0afe30f2a7b7f5da56c286e0172a198526))
+* **agents:** add output schemas and escalation paths (AGENT-01 batch 1) ([b7d8891](https://github.com/webdevcom01-cell/agent-studio/commit/b7d889181a9e28c920e2b6052938dd7796a8ba2d))
+* **agents:** final schemas for perf/python/prd/reality (AGENT-01 batch 4 complete - all 16 done) ([cc098d4](https://github.com/webdevcom01-cell/agent-studio/commit/cc098d49a2534bee3d2e21c1c2a2f8fd779e88c9))
+* **agents:** structured output for deploy/docs/frontend/refactor (AGENT-01 batch 2) ([b16c777](https://github.com/webdevcom01-cell/agent-studio/commit/b16c777a66c0bb7c52d5aaf7738f5a766b52f445))
+* **agents:** structured output for deploy/docs/frontend/refactor (AGENT-01 batch 2) ([e409c41](https://github.com/webdevcom01-cell/agent-studio/commit/e409c414ba583b8789b676987cf15a06307700d5))
+* **agents:** trade-off schema for architecture agent (AGENT-01 batch 3 complete) ([a88cb08](https://github.com/webdevcom01-cell/agent-studio/commit/a88cb0876516fb7fe143fdb631b2bf891087250f))
+* **api:** OpenAPI 3.1 spec + Swagger UI (faza 3.2) ([6602cdd](https://github.com/webdevcom01-cell/agent-studio/commit/6602cdd3c645d921c5f598b61fbbae6df89f6885))
+* **audit:** wire org admin events to AuditLog (SEC-05) ([69db316](https://github.com/webdevcom01-cell/agent-studio/commit/69db3160baa25201dfd8b57645566027634d8d38))
+* **audit:** wire writeAuditLog for MCP tool RBAC denials in mcp-tool-handler ([8309e80](https://github.com/webdevcom01-cell/agent-studio/commit/8309e80ad73097ba60b242eeff93c8ca06677595))
+* **auth:** add email/password authentication ([4c3abc0](https://github.com/webdevcom01-cell/agent-studio/commit/4c3abc0c10f2a4a893700e10499104814f6abfd9))
+* Autonomous DevOps Swarm — 4-agent AI security pipeline ([119cc0d](https://github.com/webdevcom01-cell/agent-studio/commit/119cc0dc91767dec51aae8a7f59d80becdd171db))
+* autonomous SDLC pipeline — 4 new node types for file writing, process execution, git ops, and Vercel deployment ([bc31d91](https://github.com/webdevcom01-cell/agent-studio/commit/bc31d91245d050a7bac4de3faa4041dbb59a087c))
+* **b1-b2:** Railway worker healthcheck, flag rollout API, and RLS migration ([b593b03](https://github.com/webdevcom01-cell/agent-studio/commit/b593b03a02c8f6920ae6347d65b1bf15ac4ddd7b))
+* **B1:** swarm node — dynamic task pool with N concurrent workers ([7aaf200](https://github.com/webdevcom01-cell/agent-studio/commit/7aaf200eb2ea75e1dfb90d3092d3f7bdad36d8d1))
+* **B2+B3:** parallel context isolation, MAX_BRANCHES=10, ecomode + tier override fix ([842896c](https://github.com/webdevcom01-cell/agent-studio/commit/842896cf876b7944a433d3bec24b2f0959b5667e))
+* **C1:** memsearch-style memory layer — hot/cold tiers, markdown export, API routes, UI ([0354883](https://github.com/webdevcom01-cell/agent-studio/commit/0354883a58e288dd443f2c1d00573eee6fdfb3d6))
+* **C2+C3:** 3-layer skill composition + bayesian hybrid search fusion ([2d3220a](https://github.com/webdevcom01-cell/agent-studio/commit/2d3220afdc929ed279d403b9ab92736ae820f473))
+* **call-agent:** make timeout configurable via node.data.timeout, default 90s ([c6453e6](https://github.com/webdevcom01-cell/agent-studio/commit/c6453e63937c3ec3e60de944385053705c830fb7))
+* cancel propagation to sub-agents on user Stop (Faza 2, Task 2.3) ([01bb52a](https://github.com/webdevcom01-cell/agent-studio/commit/01bb52ab8693e01809327cb24ab1a859bfb4ec4f))
+* **db:** Phase 0a.7b — schema drift sync migration ([#125](https://github.com/webdevcom01-cell/agent-studio/issues/125)) ([9352c14](https://github.com/webdevcom01-cell/agent-studio/commit/9352c1405484bb949f0b8fbb97e1d89ad5437d8b))
+* **db:** Phase 0b — create app_user/admin_user DB roles with least-privilege grants ([407b8d3](https://github.com/webdevcom01-cell/agent-studio/commit/407b8d3e883f3cc5f234eb5902aaea4908856543))
+* **deferred:** A1.9 hook integration test, B3.3 per-task model logging, C3.4 Bayesian benchmark ([800883f](https://github.com/webdevcom01-cell/agent-studio/commit/800883f354944829a51550245b1b2bed769c2236))
+* **ecc-p3:** SDK Learn Hook — auto AgentExecution + ECC instinct extraction ([6679589](https://github.com/webdevcom01-cell/agent-studio/commit/6679589807e8ec0c839e6813eb24e8f4175b9754))
+* **ecc:** auto-sync instincts to Obsidian vault after learn hook ([4bdd7d8](https://github.com/webdevcom01-cell/agent-studio/commit/4bdd7d8ce63926eaf4234d49d2555b307dda554d))
+* **ecc:** Phase F3 — dynamic skill router with C2.3 fallback ([6d189cf](https://github.com/webdevcom01-cell/agent-studio/commit/6d189cf43fc065c9894d94f0f50841f28f6716f0))
+* escalating feedback loop — Phase 4 agent improvement ([4056d0f](https://github.com/webdevcom01-cell/agent-studio/commit/4056d0f7a4c740b0e6199f274997962d4b909c7f))
+* **F-01:** call_agent built-in retry with exponential backoff and jitter ([3ab629f](https://github.com/webdevcom01-cell/agent-studio/commit/3ab629f246a29e4fcf7c5a77c90f4c1e2fe3218f))
+* **F-02:** guardrails per-module action config (block/warn/redact) with safety pipeline ([a364d05](https://github.com/webdevcom01-cell/agent-studio/commit/a364d05b7c5d8f1c6f76816dd4b185898770e3b6))
+* **F-03:** cost monitor adaptive mode with automatic model tier downgrade (FinOps 2025) ([5afa7e5](https://github.com/webdevcom01-cell/agent-studio/commit/5afa7e5ce2dc66032c48498c81e1fc7720b879ec))
+* **F-06:** engine safety middleware auto-checks all AI calls (EU AI Act 2025) ([a178f58](https://github.com/webdevcom01-cell/agent-studio/commit/a178f58836cc1f13713be4592623f557da0a5a65))
+* **F1:** lsp_query node (59th) — Language Server Protocol integration ([41eaec5](https://github.com/webdevcom01-cell/agent-studio/commit/41eaec59a9b4b14b0a2190eb3a6949c93eba01cb))
+* **F2:** ast_transform node (58th) — AST-grep structural code search & refactor ([60ca3a2](https://github.com/webdevcom01-cell/agent-studio/commit/60ca3a2ea4685591f7e591c504306876c2c87cb0))
+* Faza 1 Vidljivost — status badge + Resume + bolji error poruke ([263292c](https://github.com/webdevcom01-cell/agent-studio/commit/263292cf4c2151b9ca1f1260c59254340a0edda5))
+* Faza 2.4–4.1 — webhook retry, worker service, open source prep, admin dashboard ([27e33cd](https://github.com/webdevcom01-cell/agent-studio/commit/27e33cd73e625b8180dc9a3d22d24475d737eb2f))
+* **faza3/3.1:** stuck-run detection + force-resume + zombie job guard ([fec622e](https://github.com/webdevcom01-cell/agent-studio/commit/fec622e94683f6fa3e6c8c4140df0c5bd741a243))
+* **faza3/3.1:** UI stuck-run badge + Nastavi button + correct Cancel condition ([3e10a80](https://github.com/webdevcom01-cell/agent-studio/commit/3e10a80fdc1a3203ca179c0a48f48f693c9577f1))
+* **faza3/3.2:** per-step timeouts — replace flat STEP_TIMEOUT_MS with getStepTimeoutMs() ([aeb6088](https://github.com/webdevcom01-cell/agent-studio/commit/aeb6088fb7508036b018851006fc897c006c7fcf))
+* implement Agent Studio + Paperclip integration (F0-F8) ([eff5e22](https://github.com/webdevcom01-cell/agent-studio/commit/eff5e2258dc8f84f64d38c7c9141ea7ba218a093))
+* incremental DB save per sub-agent completion (Faza 2, Task 2.2) ([1efd88d](https://github.com/webdevcom01-cell/agent-studio/commit/1efd88d1a6aef6288f2369138fe585ec1434c869))
+* **kb:** Faza 5 Sesija 1 — embedding retry, stuck-source watchdog, security audit ([4e3a932](https://github.com/webdevcom01-cell/agent-studio/commit/4e3a932ddf3e9e59b9fc80b83e6b187d46a88698))
+* Layer 1 — webhook-to-pipeline bridge + GitHub/GitLab signature support ([b69000b](https://github.com/webdevcom01-cell/agent-studio/commit/b69000b4e03cc342b5e3e6df01ff63ef17da0f1d))
+* Linear sidebar, monochrome design system, DM Sans typography ([aa6da79](https://github.com/webdevcom01-cell/agent-studio/commit/aa6da79b49ef1a8a1c145465a20247d54de83b22))
+* live pipeline progress + better error messages (Faza 1, Task 1.1 + 1.3) ([5f29083](https://github.com/webdevcom01-cell/agent-studio/commit/5f290833be4ab6f108a1a6f6c01cbb4ec5e652dc))
+* **local:** add Ollama local inference support (qwen3:8b) ([6bd6120](https://github.com/webdevcom01-cell/agent-studio/commit/6bd6120f0766f402894c8cb733b30a74cc867187))
+* MCP enforcement layer — Phase 6 agent improvement ([98298ba](https://github.com/webdevcom01-cell/agent-studio/commit/98298ba5c39b67f45b7f8096fa8110e042bd7f76))
+* **mcp-server:** add 5 eval tools + as_create_agent ([cb91205](https://github.com/webdevcom01-cell/agent-studio/commit/cb9120591fb510b229b556348fb82700270584bf))
+* **mcp-server:** add 5 knowledge base tools ([efd996b](https://github.com/webdevcom01-cell/agent-studio/commit/efd996b45029460da07d3d878ced3a838335a372))
+* **mcp-server:** add A2A call log tools (as_get_agent_call_log, as_list_agent_calls) ([e29ce2d](https://github.com/webdevcom01-cell/agent-studio/commit/e29ce2de7b700e269001f14e846e376093aeb6e4))
+* **mcp-server:** add as_chat_with_agent tool ([c5e95a6](https://github.com/webdevcom01-cell/agent-studio/commit/c5e95a6758ce91c508582ad7b71413cbc3050f94))
+* **mcp-server:** add as_update_flow tool for structural flow rewiring ([cb6cadc](https://github.com/webdevcom01-cell/agent-studio/commit/cb6cadc855b16cb39ea0783031b7a0b630ffe282))
+* **mcp-server:** add OAuth2 endpoints for Claude Connectors compatibility ([302ee0a](https://github.com/webdevcom01-cell/agent-studio/commit/302ee0a894483fc1ebd39563a688f3c4e5d96f3f))
+* **mcp-server:** add Railway PostgreSQL MCP server for direct agent/flow access ([80bdf2e](https://github.com/webdevcom01-cell/agent-studio/commit/80bdf2eb42c295e4bb1c21d3417d2959b7c792ee))
+* **mcp:** trigger_agent now async via BullMQ — returns taskId immediately ([23407aa](https://github.com/webdevcom01-cell/agent-studio/commit/23407aa5429d5a97789da207b25da8bfe5b3cc32))
+* monochrome design system — all pages and builder nodes ([9606065](https://github.com/webdevcom01-cell/agent-studio/commit/96060655d93a3e33e706e4da342d369caf9c4ad8))
+* **observability:** AAIF 2026 OTel attributes + feedbackSpan propagation ([1cb5d63](https://github.com/webdevcom01-cell/agent-studio/commit/1cb5d635fbcf4d268f272a41dbd962c33243546e))
+* **observability:** add OTEL traces and metrics to SDLC pipeline orchestrator ([7ddaed9](https://github.com/webdevcom01-cell/agent-studio/commit/7ddaed9480d6443c344c1dbd9997105c637a941c))
+* **observability:** tag Sentry events for SQLSTATE 42501 RLS violations ([#111](https://github.com/webdevcom01-cell/agent-studio/issues/111)) ([5a9b131](https://github.com/webdevcom01-cell/agent-studio/commit/5a9b131fba1ff5c33c1dfedcf6118565e35be902))
+* **orchestrator:** parallel gate step execution (Prompt 2) ([096874a](https://github.com/webdevcom01-cell/agent-studio/commit/096874af2712db06ff122b24d1738485e555a1a4))
+* **orchestrator:** pipeline-level cancel propagation (Prompt 3B) ([dba01c1](https://github.com/webdevcom01-cell/agent-studio/commit/dba01c1669de8476e6f8c5a4187e28b3a57ebba9))
+* **P-07:** eval suite editor shows correct fields per assertion type with helpers ([fd4ca11](https://github.com/webdevcom01-cell/agent-studio/commit/fd4ca1191845d2be065321daa04a3a6e0d36c40f))
+* **P-12:** webhook body mapping logs warning on JSONPath miss with strict mode option ([a08fc83](https://github.com/webdevcom01-cell/agent-studio/commit/a08fc8321f31c213c44a771b4041330516286242))
+* **P-13:** memory-write supports merge_object, deep_merge, append_array, increment strategies ([7cd1993](https://github.com/webdevcom01-cell/agent-studio/commit/7cd1993bb2a68182ab4b294bc10dc7339e5ad1ed))
+* **P4:** Managed Agent Tasks — long-running async execution via BullMQ ([6a667d2](https://github.com/webdevcom01-cell/agent-studio/commit/6a667d22d6f574d389bfed580b595b3fc7f29cb5))
+* **P5:** add SDLC pipeline orchestration — schema, manager, API routes, worker, tests ([69bd771](https://github.com/webdevcom01-cell/agent-studio/commit/69bd77160a2d94facf3d2b8946bdce0b4825fa94))
+* parallel sub-agent execution via system prompt hint (Faza 2, Task 2.1) ([03d7dcd](https://github.com/webdevcom01-cell/agent-studio/commit/03d7dcd358abe1cba98e90677ac2c30227957c41))
+* **parallel-node:** explicit branches[] config, validation, UI editor ([3a53845](https://github.com/webdevcom01-cell/agent-studio/commit/3a53845589dbc5487c1f41df1d430e957d746081))
+* Phase 10 — live refresh, cancel/retry UI, GitLab subpath fix, cancelled metrics, advanced run options, stepMetrics merge on retry ([3ada1dd](https://github.com/webdevcom01-cell/agent-studio/commit/3ada1dd10380c88e52ce8e9fab0e78d23f77626f))
+* Phase 11 — gate enforcement, adaptive routing cache, memory scoring, schema migration, metrics durability ([d719a46](https://github.com/webdevcom01-cell/agent-studio/commit/d719a46f32e46bf7fd57748ae37cd17a345ac992))
+* Phase 9 — GitLab support + glob .sdlcignore + metrics phase filter ([5eb6d7d](https://github.com/webdevcom01-cell/agent-studio/commit/5eb6d7dc6598ba85d5cca667d5065b28ef4ab660))
+* **phase-D:** complete Phase D — verification node + cross-provider orchestration ([f03674c](https://github.com/webdevcom01-cell/agent-studio/commit/f03674cf98e0f967327b32e2f44b916dcc36538d))
+* **phase-d:** verification node + multi-provider orchestration ([44e2372](https://github.com/webdevcom01-cell/agent-studio/commit/44e237247b93b5d4109eefe98e20a64671fccc6d))
+* **phase-E:** session events + renderer/sink notification system ([2e3976c](https://github.com/webdevcom01-cell/agent-studio/commit/2e3976cf9c99dc71e3079aeff0069c957aa680f4))
+* **phase7:** add sourceRepoUrl — clone source repo before RAG indexing ([1da107d](https://github.com/webdevcom01-cell/agent-studio/commit/1da107dcf25d4e1f1c9b3dbb5a7c8b67f7276d65))
+* **phase8:** sourceRepoUrl UI + per-agent metrics + .sdlcignore ([2c4657d](https://github.com/webdevcom01-cell/agent-studio/commit/2c4657d3b475668944ea2ccade757017a8002ec6))
+* pipeline resume — skip already-completed sub-agents on restart (Faza 3, Task 3.1) ([8bd20f3](https://github.com/webdevcom01-cell/agent-studio/commit/8bd20f3a7e2f6a40f08077f7f860aaf2dd5fa326))
+* **pipeline:** Phase 5 — approval gate UI + Slack AWAITING_APPROVAL notification ([0faf4ac](https://github.com/webdevcom01-cell/agent-studio/commit/0faf4ac3bb769b2fc73177206ff42dde7bf3bb88))
+* **pipeline:** Phase 6 — metrics summary card with per-agent stats and model performance table ([4da7fca](https://github.com/webdevcom01-cell/agent-studio/commit/4da7fca65dfd1ba04f7c46aca254659693a58c44))
+* post-deploy verifier with 6 NIST-inspired checks ([97059b5](https://github.com/webdevcom01-cell/agent-studio/commit/97059b5989e61d9d43cf6d08246b4fc010d28d81))
+* propagate sub-agent waitForInput through call_agent to parent ([1411bd5](https://github.com/webdevcom01-cell/agent-studio/commit/1411bd57b0c8799c5ded8bad6385bab89a4f0eb4))
+* **reliability:** Faza 6 — worker shutdown, admin guard, agent-calls tests ([19a9f97](https://github.com/webdevcom01-cell/agent-studio/commit/19a9f97869b9bba89dafb22cfef1cb68fd14b47e))
+* render structured AI outputs in chat UI (CodeGen/PRGate/Architecture) ([3dfa870](https://github.com/webdevcom01-cell/agent-studio/commit/3dfa870b8d1c96d389114569362f8fbc687e754d))
+* **rls:** add rls-status-checker skill with dependency graph ([e72e4ac](https://github.com/webdevcom01-cell/agent-studio/commit/e72e4acc0f545d7c4d8d3bd93a04983aa2a0a2fa))
+* **rls:** Phase 0b.5 — refactor 5 raw $transaction helpers ([#121](https://github.com/webdevcom01-cell/agent-studio/issues/121)) ([48a72a5](https://github.com/webdevcom01-cell/agent-studio/commit/48a72a5f1605958f908b9ce754f6bf9fed26637f))
+* **rls:** Phase 0c — JWT currentOrgId + AsyncLocalStorage propagation ([#118](https://github.com/webdevcom01-cell/agent-studio/issues/118)) ([8de264f](https://github.com/webdevcom01-cell/agent-studio/commit/8de264f19f16031b73ef0c3a60f51900d9a049ac))
+* **rls:** Phase 0d — personal org backfill migration ([#119](https://github.com/webdevcom01-cell/agent-studio/issues/119)) ([5a1a0a9](https://github.com/webdevcom01-cell/agent-studio/commit/5a1a0a92e6f14a6f8a5fbddd7ce33493684dc019))
+* **rls:** Phase 0f — RLS_ENFORCEMENT_ENABLED feature flag kill switch ([#115](https://github.com/webdevcom01-cell/agent-studio/issues/115)) ([857e31e](https://github.com/webdevcom01-cell/agent-studio/commit/857e31e4e873c82cb592408870a5ac1f1f211b05))
+* **rls:** Phase 1 [#1](https://github.com/webdevcom01-cell/agent-studio/issues/1) — OrganizationMember RLS + blocker fixes ([97a518c](https://github.com/webdevcom01-cell/agent-studio/commit/97a518cde17aaa5d1bcb08f774204af2065c0f9d))
+* **rls:** Phase 1 [#1](https://github.com/webdevcom01-cell/agent-studio/issues/1) — OrganizationMember RLS + blocker fixes ([97a518c](https://github.com/webdevcom01-cell/agent-studio/commit/97a518cde17aaa5d1bcb08f774204af2065c0f9d))
+* **rls:** Phase 1 [#1](https://github.com/webdevcom01-cell/agent-studio/issues/1) — OrganizationMember RLS + blocker fixes ([34333e6](https://github.com/webdevcom01-cell/agent-studio/commit/34333e6584a1d14b505932bf87b699a6705ced48))
+* **rls:** Phase 1 [#10](https://github.com/webdevcom01-cell/agent-studio/issues/10) — ApprovalPolicy RLS + callsite fixes ([#138](https://github.com/webdevcom01-cell/agent-studio/issues/138)) ([9b27c21](https://github.com/webdevcom01-cell/agent-studio/commit/9b27c2179b73f6a08f77876b24394ab3473a815f))
+* **rls:** Phase 1 [#11](https://github.com/webdevcom01-cell/agent-studio/issues/11) — PolicyDecision RLS + callsite fixes ([#139](https://github.com/webdevcom01-cell/agent-studio/issues/139)) ([d03825c](https://github.com/webdevcom01-cell/agent-studio/commit/d03825ced4f41ab2ed54c4bfdb53d07b6b05fdd4))
+* **rls:** Phase 1 [#2](https://github.com/webdevcom01-cell/agent-studio/issues/2) — Invitation RLS + blocker fixes ([#130](https://github.com/webdevcom01-cell/agent-studio/issues/130)) ([4ab9d19](https://github.com/webdevcom01-cell/agent-studio/commit/4ab9d19eff7793bbf0834a8e1e3a6ab3527b3c17))
+* **rls:** Phase 1 [#3](https://github.com/webdevcom01-cell/agent-studio/issues/3) — CompanyMission RLS + callsite fixes ([#131](https://github.com/webdevcom01-cell/agent-studio/issues/131)) ([254a256](https://github.com/webdevcom01-cell/agent-studio/commit/254a25653746239ac7e56c88234fbe440e3f032c))
+* **rls:** Phase 1 [#4](https://github.com/webdevcom01-cell/agent-studio/issues/4) — Department RLS + callsite fixes + gitignore scheduler lock ([#132](https://github.com/webdevcom01-cell/agent-studio/issues/132)) ([708e5c7](https://github.com/webdevcom01-cell/agent-studio/commit/708e5c7528df86953c10c6dd24ffc31c99ac8d73))
+* **rls:** Phase 1 [#5](https://github.com/webdevcom01-cell/agent-studio/issues/5) — Goal RLS + callsite fixes ([#133](https://github.com/webdevcom01-cell/agent-studio/issues/133)) ([c91ad04](https://github.com/webdevcom01-cell/agent-studio/commit/c91ad04b31a7629845119fa31a26f67ad36b7b76))
+* **rls:** Phase 1 [#6](https://github.com/webdevcom01-cell/agent-studio/issues/6) — AgentPermissionGrant RLS + callsite fixes ([#134](https://github.com/webdevcom01-cell/agent-studio/issues/134)) ([e2c5c78](https://github.com/webdevcom01-cell/agent-studio/commit/e2c5c7841246bdcc945f49d445d1c8877d1672eb))
+* **rls:** Phase 1 [#7](https://github.com/webdevcom01-cell/agent-studio/issues/7) — HeartbeatConfig RLS + callsite fixes ([#135](https://github.com/webdevcom01-cell/agent-studio/issues/135)) ([4ed3232](https://github.com/webdevcom01-cell/agent-studio/commit/4ed3232b6e36a7a45f81b7afe1fc70b7095f1628))
+* **rls:** Phase 1 [#8](https://github.com/webdevcom01-cell/agent-studio/issues/8) — HeartbeatContext RLS + callsite fixes ([#136](https://github.com/webdevcom01-cell/agent-studio/issues/136)) ([7220ca6](https://github.com/webdevcom01-cell/agent-studio/commit/7220ca6dda62839ba314900d441e9680a8646037))
+* **rls:** Phase 1 [#9](https://github.com/webdevcom01-cell/agent-studio/issues/9) — HeartbeatRun RLS + callsite fixes ([#137](https://github.com/webdevcom01-cell/agent-studio/issues/137)) ([f58abdc](https://github.com/webdevcom01-cell/agent-studio/commit/f58abdcb1f9be66aca25d53e801dd6a790e7d492))
+* **rls:** scaffold skills/rls-rollout/ for Phase 1 SQL generation ([#128](https://github.com/webdevcom01-cell/agent-studio/issues/128)) ([50eaab5](https://github.com/webdevcom01-cell/agent-studio/commit/50eaab558a09150beaf118e67583a6c9e131b617))
+* route CR payload save to chat endpoint via shared utility ([ea38913](https://github.com/webdevcom01-cell/agent-studio/commit/ea38913ed6e8756ec609cdfa7c0d026159b5e860))
+* **runtime:** A1 lifecycle hook system + A2.4 onPreCompact event ([d19ef32](https://github.com/webdevcom01-cell/agent-studio/commit/d19ef3226aed35f408c7e08456272999e871cd4d))
+* **saas:** Phase 0.1 — ECC Skills MCP numReplicas 1 → 2 ([3c444d2](https://github.com/webdevcom01-cell/agent-studio/commit/3c444d28fccbe5b67358e63d02d26818cd41ca38))
+* **saas:** Phase 0.2 — RBAC enforcement in MCP tool handler ([c90ac59](https://github.com/webdevcom01-cell/agent-studio/commit/c90ac59b9ef0ae51e8488b6f466c9fcce75afff9))
+* **saas:** Phase 0.3 — AuditLog in flow execution and handler paths ([c3cdf4b](https://github.com/webdevcom01-cell/agent-studio/commit/c3cdf4bde25c29a689e664399e9360d9161a6924))
+* **saas:** Phase 0.4 — OTEL warning when endpoint not configured ([795a6e8](https://github.com/webdevcom01-cell/agent-studio/commit/795a6e8154f182944740846af2ae7738f4b0d004))
+* **saas:** Phase 1.1 — BullMQ queue infrastructure ([cbc07cf](https://github.com/webdevcom01-cell/agent-studio/commit/cbc07cf3f73e0428e2044eeb873b15d12b566bf6))
+* **saas:** Phase 1.2 — Chat API async job-based execution ([fa78de2](https://github.com/webdevcom01-cell/agent-studio/commit/fa78de2f582e1a9926097da0345bf4a483ce7072))
+* **saas:** Phase 1.3 — Worker Railway service configuration ([a6d116e](https://github.com/webdevcom01-cell/agent-studio/commit/a6d116ecb6479300c14e575202a58b7e05283915))
+* **saas:** Phase 1.4 — Job monitoring dashboard ([c5f0c57](https://github.com/webdevcom01-cell/agent-studio/commit/c5f0c57f8ccdeadd8a9b6ade1601b30effa2c0ea))
+* **saas:** Phase 1.5 — Email (Resend) + Error Monitoring (Sentry) ([f103b4c](https://github.com/webdevcom01-cell/agent-studio/commit/f103b4c1d932ffa4b72c52ad2d9d942baf4df25b))
+* **saas:** Phase 2 — Multi-tenancy (Organization model + RBAC + Invite flow) ([3d533fe](https://github.com/webdevcom01-cell/agent-studio/commit/3d533fe5b31b56cd7a535b1f7e868da0106b62cb))
+* **saas:** Phase 2.5 — GDPR Compliance (deletion, export, retention) ([c903571](https://github.com/webdevcom01-cell/agent-studio/commit/c90357110719920bd4d179ca4841d492bc127539))
+* **saas:** Phase 3 — Security Hardening (CSP, sessions, uploads, rate limits) ([7ae4860](https://github.com/webdevcom01-cell/agent-studio/commit/7ae48601c7dee9bc2de4e411d8176339e0f3e182))
+* **saas:** Phase 3.5 — Webhook Reliability (retry engine + dead letter queue) ([4ca36fb](https://github.com/webdevcom01-cell/agent-studio/commit/4ca36fbcc5462732fc43d163784e3e7fedf27289))
+* **saas:** Phase 4 — Beta Launch Prep (onboarding, admin, landing, security audit) ([e023f4b](https://github.com/webdevcom01-cell/agent-studio/commit/e023f4b8cd2223ebe65ae01e4bf2e0d0d9340c14))
+* **saas:** Phase 4.5 — Feature Flags + API Versioning ([6ad7f58](https://github.com/webdevcom01-cell/agent-studio/commit/6ad7f582d1766977b4895c353eeca024dddf9895))
+* schema-aware routing in meta-orchestrator (SDLC Korak 4) ([a714879](https://github.com/webdevcom01-cell/agent-studio/commit/a714879cff39c1bff60c085144025bb2648e8069))
+* **sdk-sessions:** Phase 2 — DB-backed session persistence for claude_agent_sdk node ([ea67c50](https://github.com/webdevcom01-cell/agent-studio/commit/ea67c50ba6c98af9f93e742a40efdc7493c3a345))
+* **sdlc:** add 25 SDLC pipeline agents + Phase C/D ([a28b578](https://github.com/webdevcom01-cell/agent-studio/commit/a28b5786bc1d1c566935b00ad15eac17e6b63b36))
+* **sdlc:** add 25 SDLC pipeline agents + Phase C/D specialist agents ([649f15a](https://github.com/webdevcom01-cell/agent-studio/commit/649f15addf2985ea8b4606cbdabab9bb252a0950))
+* **sdlc:** add ecc-implementer step to new-feature and bug-fix pipelines ([b88e5dc](https://github.com/webdevcom01-cell/agent-studio/commit/b88e5dcdc5aab379582ff43ea6654de82051f1bf))
+* **sdlc:** add gpt-4o-mini to model catalog and set as primary model for all phases ([0544392](https://github.com/webdevcom01-cell/agent-studio/commit/054439202ae680f47bd113c133c8b9dc7f468ee8))
+* **sdlc:** E2B cloud sandbox integration for isolated code execution ([46f7f74](https://github.com/webdevcom01-cell/agent-studio/commit/46f7f7447f9f5cd43500dff7bc84b225d91c5b5c))
+* **sdlc:** inject Obsidian vault context into pipeline runs ([e7ef87f](https://github.com/webdevcom01-cell/agent-studio/commit/e7ef87fac77749cbddd90fef8a9f482359924c0b))
+* **sdlc:** integrate RAG, multi-step planning, and feedback loop (P6) ([432f959](https://github.com/webdevcom01-cell/agent-studio/commit/432f95921d901b9457103051960d007fa6d992c7))
+* **sdlc:** P2-P5 — model overrides, phase-aware RAG, AI retry, real-fs integration tests + deploy-trigger fix ([0e6f5d3](https://github.com/webdevcom01-cell/agent-studio/commit/0e6f5d3e03b5c335b8fb9787ac32006f3c101cba))
+* **sdlc:** Phase 1 — static_analysis infrastructure node (tsc + eslint) ([ecb13ab](https://github.com/webdevcom01-cell/agent-studio/commit/ecb13ab550196159d1bfabf2585834eb948925d2))
+* **sdlc:** Phase 2 — pr_generation infrastructure node with rich PR body ([057ee87](https://github.com/webdevcom01-cell/agent-studio/commit/057ee8751ac4f7b113b1d70ef02a671d3610ec04))
+* **sdlc:** Phase 3 — ecc-security-reviewer structured output + GATE_STEPS ([5b42230](https://github.com/webdevcom01-cell/agent-studio/commit/5b42230d76138d16b4e9df508e1c21d24d434021))
+* **sdlc:** Phase 4 — pipeline resumability + stale-run detection ([f90aba4](https://github.com/webdevcom01-cell/agent-studio/commit/f90aba40f76c1a7693f7aa8964e5551efd320f42))
+* **sdlc:** real file writing + compilation + test execution (P7) ([4493187](https://github.com/webdevcom01-cell/agent-studio/commit/4493187acb9f23748a751183767ba0066f07d05a))
+* **sdlc:** switch default model from deepseek-chat to gpt-4o-mini ([a72b9af](https://github.com/webdevcom01-cell/agent-studio/commit/a72b9afa7d55420e5547a80ca83eb2b6f217b385))
+* **sdlc:** Tier 3 + Tier 4 — real-exec bug fix, observability, adaptive routing & retry escalation ([006cef4](https://github.com/webdevcom01-cell/agent-studio/commit/006cef4d4aa1fc3c4bb63a61562baf426c2059da))
+* **sdlc:** Tier 5 — git/PR integration after pipeline completion ([45e5bcb](https://github.com/webdevcom01-cell/agent-studio/commit/45e5bcb14876ef855f1f7759ab9d2e2705591c45))
+* **security:** enforce org-level RBAC in mcp-tool-handler ([6a9ab03](https://github.com/webdevcom01-cell/agent-studio/commit/6a9ab03055e5424e7b6ff348842197d0c1469ea5))
+* **security:** enterprise hardening — RBAC, API keys, OIDC, circuit breaker, audit log ([4f1de60](https://github.com/webdevcom01-cell/agent-studio/commit/4f1de60fa4721880fbbf6c63f94f5b6148a531cd))
+* **sesija-2:** optimistic locking + schema-drift test coverage ([8a70c59](https://github.com/webdevcom01-cell/agent-studio/commit/8a70c591b1d74ee1836d4163d9b9843e749367b2))
+* **sesija-3:** embed error state, redis null-path tests, coverage setup ([a17ce7b](https://github.com/webdevcom01-cell/agent-studio/commit/a17ce7b031088851e5837f5e37b2576bc5d888e3))
+* **session-5:** ECC human approval gate, OpenAPI security schemes, CHANGELOG ([b0b1b12](https://github.com/webdevcom01-cell/agent-studio/commit/b0b1b121a53de0cdcbc0ec2e92e9367825100696))
+* **session-6:** CLI stuck notification, rate-limit headers on all responses ([bc04dd6](https://github.com/webdevcom01-cell/agent-studio/commit/bc04dd69c5380a5b6f6fc559e6857a9fb485a16f))
+* **skills:** add rls-rollout skill v1.0.0 ([#96](https://github.com/webdevcom01-cell/agent-studio/issues/96)) ([800502b](https://github.com/webdevcom01-cell/agent-studio/commit/800502bfef70cb2b50d61698cd4d8872d98bdd73))
+* smart context compaction before history truncation (A2) ([cfe42f9](https://github.com/webdevcom01-cell/agent-studio/commit/cfe42f94fc15884f032fc235a773360e02c158d6))
+* **soma:** add SOMA marketing trio agent prompts ([e8f7753](https://github.com/webdevcom01-cell/agent-studio/commit/e8f7753f04dc7a1705336cff30c7876c7ed45ea1))
+* **soma:** add SOMA Obsidian memory vault ([87b3b3a](https://github.com/webdevcom01-cell/agent-studio/commit/87b3b3a2c215b966b96f344799622bb95582d886))
+* **soma:** persist and display quality_flags in review queue ([#157](https://github.com/webdevcom01-cell/agent-studio/issues/157)) ([881d2dd](https://github.com/webdevcom01-cell/agent-studio/commit/881d2ddc6f906a5f21a8dfd2f8759844eb3184fe))
+* **Task 3.2:** Per-Agent Timeout Profiles for agent-as-tool orchestration ([b675d59](https://github.com/webdevcom01-cell/agent-studio/commit/b675d5959302e1ee0f6a2b556069614cc27385ad))
+* **Task 3.3:** OpenTelemetry AAIF 2026 multi-hop agent tracing ([fcb05c4](https://github.com/webdevcom01-cell/agent-studio/commit/fcb05c490aafb350f417c995bb2db78c519c3224))
+* typed output schemas — Phase 3 agent improvement ([566afa1](https://github.com/webdevcom01-cell/agent-studio/commit/566afa105a3749401ad585820d4e61da72c692b7))
+* **ui:** add SDLC Pipelines page with step metrics and finalOutput viewer ([8b35eb7](https://github.com/webdevcom01-cell/agent-studio/commit/8b35eb7a5138fb43eb22a6f6dc897656df62c34c))
+* update agent-auditor skill with Phase 1-6 audit standards (Plan 2) ([6bb3465](https://github.com/webdevcom01-cell/agent-studio/commit/6bb3465cafca81fb41ebcdb49a9444cc2b319e77))
+* update agent-creator skill with Phase 1-6 node standards (Plan 1) ([1a40927](https://github.com/webdevcom01-cell/agent-studio/commit/1a40927d34c3bf8c2c16b9e0a7c36d0ade5e0f73))
+* update SDLC orchestrator prompt with Phase 1-6 node types (SDLC Korak 3) ([52795d2](https://github.com/webdevcom01-cell/agent-studio/commit/52795d241dd4b21444e5bbbe2ff2c8e28c355b4f))
+* update starter flows with Phase 1-6 node types (SDLC Korak 1) ([5d2d3f2](https://github.com/webdevcom01-cell/agent-studio/commit/5d2d3f226333badb94132787b75ec5af754cf6e6))
+* v2 SDLC pipeline — async webhook, issue idempotency, RAG KB seed, code review node, PR creation ([a0ce580](https://github.com/webdevcom01-cell/agent-studio/commit/a0ce580fcfe8522e06114687762e2e8dd2a6a197))
+* **vault-lint:** add build-guide to canonical type enum ([daf8750](https://github.com/webdevcom01-cell/agent-studio/commit/daf8750a061229fe1e2533c443d19566e7ebe05a))
+* **vault-lint:** add winners-log to canonical type enum ([ce0b71f](https://github.com/webdevcom01-cell/agent-studio/commit/ce0b71f3e474253b6bab0092a28e3f4b48a9880e))
+* **vault-lint:** exempt root README.md (front-door meta file) ([f70c2d8](https://github.com/webdevcom01-cell/agent-studio/commit/f70c2d8348d04c193dc7c940dea5ff0f98710869))
+* **vault-lint:** validate type against canonical enum (handoff, analysis added) ([6f7ccf8](https://github.com/webdevcom01-cell/agent-studio/commit/6f7ccf8e1e067074506281be3be48f53d41b9a56))
+* webhook eval assertions — webhook_response_valid and webhook_payload_echoed ([0cf96ce](https://github.com/webdevcom01-cell/agent-studio/commit/0cf96ce054d05bfe9c7ecebce4faa73925ae258f))
+* **worker:** add Dockerfile.worker for Railway worker service ([9b9cf51](https://github.com/webdevcom01-cell/agent-studio/commit/9b9cf51a52b418b5eccff7e21a666a5cea10047a))
+* **worker:** add railway.worker.toml for BullMQ worker service ([cd93394](https://github.com/webdevcom01-cell/agent-studio/commit/cd9339403dd1f7055c45db5d58442fab28b61d99))
+* **worker:** add Slack notification for SDLC pipeline completion and failure ([d18fae3](https://github.com/webdevcom01-cell/agent-studio/commit/d18fae3374a5904def2b4653c4eec95b47fd2200))
+* **worker:** enable async-execution flag for BullMQ job routing ([9209e27](https://github.com/webdevcom01-cell/agent-studio/commit/9209e271b78168ee95db95a690eb2338f9c604cf))
+
+
+### Bug Fixes
+
+* Fix:  ([932209a](https://github.com/webdevcom01-cell/agent-studio/commit/932209a4b3c0b13645bfad59cd2c83575d68d97e))
+* A2A format mismatch + timeout ([4231b8f](https://github.com/webdevcom01-cell/agent-studio/commit/4231b8fb42c4ca34f3e1ea86ff89ef736b7648db))
+* **a2a:** inject sub-agent input as user message in messageHistory ([e27c2a8](https://github.com/webdevcom01-cell/agent-studio/commit/e27c2a85f1b6c53801e61a43d0f64e3841bc2014))
+* accept GITHUB_TOKEN env var (in addition to GITHUB_PAT) for git integration ([ab4a9ff](https://github.com/webdevcom01-cell/agent-studio/commit/ab4a9ff4f965439b3cdde1a4fa3127f9891c861d))
+* add /evals redirect to /evals/standards ([b01d080](https://github.com/webdevcom01-cell/agent-studio/commit/b01d080fb6de72664751111e6d948dfbe91ae502))
+* add BotMessageSquare to lucide mock, update node counts for claude_agent_sdk node ([e9f15e4](https://github.com/webdevcom01-cell/agent-studio/commit/e9f15e478db5dfd8355c88d16f23dd9f943aab70))
+* add compositionLayer migration + settings/profile page ([0157553](https://github.com/webdevcom01-cell/agent-studio/commit/0157553c3a194d56608cb47546e48471f13b2302))
+* add JSON extractor nodes to TI and HW flows ([8fd44ef](https://github.com/webdevcom01-cell/agent-studio/commit/8fd44ef438dff22fc3833d0da08bbf50f385419b))
+* add lockVersion to Flow schema and make route resilient ([a4e9e77](https://github.com/webdevcom01-cell/agent-studio/commit/a4e9e7708516e2584acf93f43f4321fdb7fa769e))
+* add missing columns migration — fusionStrategy + User soft-delete ([8d2c9ae](https://github.com/webdevcom01-cell/agent-studio/commit/8d2c9aea534c2c13c38caf16a5dbb13a97702d6a))
+* add packages field to pnpm-workspace.yaml for Railway build ([df6689e](https://github.com/webdevcom01-cell/agent-studio/commit/df6689ea7a054ddd43f35ecd3657beda2401f55a))
+* **ai-handler:** surface errors in catch block + write to outputVariable ([c66df16](https://github.com/webdevcom01-cell/agent-studio/commit/c66df16bd4633c977d3cd6a175fa9c3df66a4276))
+* **ai-response:** add try/catch fallback on generateObject failure ([2c7f117](https://github.com/webdevcom01-cell/agent-studio/commit/2c7f117a38c7995eb62d4e76cc374c69ce90fe95))
+* **ai-response:** use json_object mode + larger token budget for generateObject ([2fd7a4a](https://github.com/webdevcom01-cell/agent-studio/commit/2fd7a4a716768a696c3bbd15f5c0d1eea08f9f0d))
+* **ai-response:** use strictJsonSchema:false for OpenAI generateObject compatibility ([c49eec3](https://github.com/webdevcom01-cell/agent-studio/commit/c49eec3cdc1fe093a5712a894a92538f1de496ab))
+* **auth:** allow Google account linking to existing email accounts ([585ff94](https://github.com/webdevcom01-cell/agent-studio/commit/585ff94f28de9e496e8b7eb4227f07747c709578))
+* **auth:** explicit secret + revert prisma db push from buildCommand ([a8627f4](https://github.com/webdevcom01-cell/agent-studio/commit/a8627f4bfcef948781de9f12dfdfda118082d3a8))
+* **auth:** remove custom logger that broke TS build ([39eedc8](https://github.com/webdevcom01-cell/agent-studio/commit/39eedc81189588073e52e720ed40fb212651eb01))
+* **auth:** set GitHub OAuth issuer to fix RFC 9207 iss mismatch ([a115882](https://github.com/webdevcom01-cell/agent-studio/commit/a115882eb12e83d592f46efd7bb6f6af6c710bfd))
+* **auth:** strip GitHub iss param at route level to bypass RFC 9207 mismatch ([bf2874b](https://github.com/webdevcom01-cell/agent-studio/commit/bf2874b2ff411a616704575ee92f5dd633a1f7c6))
+* **build:** add @ast-grep/napi to serverExternalPackages ([74c4d50](https://github.com/webdevcom01-cell/agent-studio/commit/74c4d508af3510b636488b5fda9db8a1c9a02c17))
+* **build:** coerce userMessage undefined to null for prepareContextForExecution ([5f50c87](https://github.com/webdevcom01-cell/agent-studio/commit/5f50c8770e2eb76dbc1e689a22e8b683ed22e3d3))
+* **build:** create .git marker in build script for Tailwind v4 ([1855775](https://github.com/webdevcom01-cell/agent-studio/commit/1855775d4bec274240f18e548b42e1cf478b5cce))
+* **build:** create minimal .git/HEAD for Tailwind v4 Oxide scanner ([7200484](https://github.com/webdevcom01-cell/agent-studio/commit/7200484dec3ad0bd91b9d14658b7328c00af7723))
+* **build:** exclude mcp-server from root tsconfig to fix Next.js build ([dc303e5](https://github.com/webdevcom01-cell/agent-studio/commit/dc303e53db07b365b94a92d0531626aef310231e))
+* **chat:** inject session userId into context for human_approval node ([6f5d356](https://github.com/webdevcom01-cell/agent-studio/commit/6f5d356c69ee5e5b762ed92b7ea2af93b9db7a8d))
+* **chat:** streaming requests bypass async BullMQ queue ([ed9aaf9](https://github.com/webdevcom01-cell/agent-studio/commit/ed9aaf97db65aa4c5aecbced636b85916dd57561))
+* **ci:** cache .next + temporary continue-on-error on E2E + tech-debt update ([#106](https://github.com/webdevcom01-cell/agent-studio/issues/106)) ([8a3a01c](https://github.com/webdevcom01-cell/agent-studio/commit/8a3a01c1de710b4a06a49dcd777bbef66cc587a8))
+* **ci:** increase Playwright webServer timeout for CI ([#105](https://github.com/webdevcom01-cell/agent-studio/issues/105)) ([2807c8b](https://github.com/webdevcom01-cell/agent-studio/commit/2807c8b22913fb17f8538a2c8fa8346d5c1a8e86))
+* **ci:** remove package-lock.json to fix release-please crash ([#108](https://github.com/webdevcom01-cell/agent-studio/issues/108)) ([7bc73fc](https://github.com/webdevcom01-cell/agent-studio/commit/7bc73fce594ff15c2eec542e6e6fa6d437b16c4a))
+* **config:** move outputFileTracingIncludes to top-level (Next.js 15.5+) ([3f93eb2](https://github.com/webdevcom01-cell/agent-studio/commit/3f93eb2aff711b1ae0c15e9dec85f84a12c0bd89))
+* configure pnpm cross-platform native binaries for Cowork sandbox ([4af6419](https://github.com/webdevcom01-cell/agent-studio/commit/4af6419263857b751b88688d12ef79739ced1b54))
+* conversationId type mismatch in PipelineProgress (string | undefined → null) ([93b5714](https://github.com/webdevcom01-cell/agent-studio/commit/93b57146683713a3408e9bbdd540da4317602380))
+* **csp:** remove strict-dynamic that blocked all JS execution ([117f881](https://github.com/webdevcom01-cell/agent-studio/commit/117f881246e959dd6f514647db77240639cf0a69))
+* **css:** add [@source](https://github.com/source) directive so Tailwind v4 scans tsx files ([c63a7b8](https://github.com/webdevcom01-cell/agent-studio/commit/c63a7b808135d795385eb185b1e127e3fc724b7f))
+* **css:** ensure Tailwind v4 finds project root in Docker build ([7dc8081](https://github.com/webdevcom01-cell/agent-studio/commit/7dc80810b84afe1daba083c21740e3ac52aa97f3))
+* **css:** use [@source](https://github.com/source) directory path to fix Tailwind v4 scanning in production ([0ee8f94](https://github.com/webdevcom01-cell/agent-studio/commit/0ee8f9457d3e8a33d382e2d4f64e8f9b49622a7e))
+* **css:** use source(none) + explicit [@source](https://github.com/source) to bypass .gitignore scanning issue ([97de3f3](https://github.com/webdevcom01-cell/agent-studio/commit/97de3f3f47bac85bef4ba9df37516ad5ddca923a))
+* **db:** add migration for Organization, ApiKey, and Agent columns missing from prod ([6dea67d](https://github.com/webdevcom01-cell/agent-studio/commit/6dea67d8dae9fc4af502f31858a5977decf9ec06))
+* **db:** wrap SET LOCAL hnsw.ef_search in $transaction (Phase 0e) ([#99](https://github.com/webdevcom01-cell/agent-studio/issues/99)) ([c4cfd9a](https://github.com/webdevcom01-cell/agent-studio/commit/c4cfd9a6f7c9147e3540bef017536079d2648835))
+* **db:** wrap withOrgContext in $transaction so session var survives pool (Phase 0a) ([#97](https://github.com/webdevcom01-cell/agent-studio/issues/97)) ([35140d3](https://github.com/webdevcom01-cell/agent-studio/commit/35140d377b3d48185d9fbba186de167dbec002d0))
+* deploy-trigger skips gracefully when VERCEL_TOKEN not set ([c1c7060](https://github.com/webdevcom01-cell/agent-studio/commit/c1c7060e42dc949dbb35fb02a86667266f8a9e28))
+* **deploy-trigger:** guard clauses returned nextNodeId "passed" instead of "failed" ([0e6f5d3](https://github.com/webdevcom01-cell/agent-studio/commit/0e6f5d3e03b5c335b8fb9787ac32006f3c101cba))
+* **deploy:** copy static files into standalone output for Railway ([2e0c82b](https://github.com/webdevcom01-cell/agent-studio/commit/2e0c82b1307cc2494dc54e4ab90c441a8e608bc7))
+* **deploy:** correct Next.js standalone server path in railway.toml ([d40a284](https://github.com/webdevcom01-cell/agent-studio/commit/d40a2845f2456e1e3c60346d54ded4c937b729fe))
+* **deploy:** replace db:push with prisma migrate deploy in render.yaml ([a0d709f](https://github.com/webdevcom01-cell/agent-studio/commit/a0d709f3929ca6077ec16293626112cc63348808))
+* **deploy:** revert startCommand to 'node server.js' — Nixpacks flattens standalone ([89eac43](https://github.com/webdevcom01-cell/agent-studio/commit/89eac433b3455ddde9aad4b6232b59f4734b8b1c))
+* **deploy:** run prisma db push during build to sync DB schema ([1506649](https://github.com/webdevcom01-cell/agent-studio/commit/1506649cf4d79bdbd2093044ce6f17706e284832))
+* **deploy:** switch to Dockerfile builder, runner stage last for Railway ([4d524c6](https://github.com/webdevcom01-cell/agent-studio/commit/4d524c65fe48eccc5206d20838e1351af1616f78))
+* **deps:** patch 5 prod vulnerabilities via pnpm overrides ([e79802c](https://github.com/webdevcom01-cell/agent-studio/commit/e79802c24b0a5c55ad439228d6c5a4fd96459fc4))
+* **deps:** replace xlsx (SheetJS) with exceljs — eliminate HIGH CVEs ([e0bd0ce](https://github.com/webdevcom01-cell/agent-studio/commit/e0bd0ce39eea1e4a1246d17a1c987b123145f74d))
+* **devops-swarm:** fix FastMCP init + add HTTP /health endpoints ([e87136a](https://github.com/webdevcom01-cell/agent-studio/commit/e87136aa5d8d70c2b31004dabc4b564b794a4e4b))
+* disable async-execution flag by default to fix as_chat_with_agent MCP tool ([4ebf95d](https://github.com/webdevcom01-cell/agent-studio/commit/4ebf95d0f35b5c8ab89e819d06e3073082ed6c3e))
+* disable async-execution flag until worker service is deployed ([c1d50cd](https://github.com/webdevcom01-cell/agent-studio/commit/c1d50cd8ee2f8171b53edf51a5425bf94d4ca3a9))
+* **docker:** add cache bust arg to force rebuild ([89d8056](https://github.com/webdevcom01-cell/agent-studio/commit/89d805610f24e446f0930a27b5151dc136633950))
+* **docker:** add git to runner stage apk install ([7f2c302](https://github.com/webdevcom01-cell/agent-studio/commit/7f2c30291c0f9f2d1b3ca92a9ceec37c60308e6b))
+* **docker:** create .git marker before pnpm build for Tailwind v4 scanning ([a960b17](https://github.com/webdevcom01-cell/agent-studio/commit/a960b17c45bd74d549a36b71bcba5f07c6099cdc))
+* **docker:** git init in builder stage for Tailwind v4 Oxide scanner ([97dcf7e](https://github.com/webdevcom01-cell/agent-studio/commit/97dcf7ef107b13b5cd18ce13b24269bef91ee7dc))
+* **docker:** install vitest globally in runner stage ([74b1e8f](https://github.com/webdevcom01-cell/agent-studio/commit/74b1e8fb33bf8c56ed130f17e59f05eb79fb1e94))
+* EACCES fallback to /tmp/sdlc for Railway read-only /app directory ([f764bef](https://github.com/webdevcom01-cell/agent-studio/commit/f764bef483e053206d71b6e6659964617c0948ae))
+* **ecc:** P0 fixes — eccEnabled toggle, HITL gate, instincts endpoint, ECC dashboard + test suite cleanup ([913692f](https://github.com/webdevcom01-cell/agent-studio/commit/913692f9058a6ebb2a107a7a21aa1d78b5a64c23))
+* **ecc:** switch EXTRACT_MODEL from claude-haiku to gpt-4.1-mini ([6e01a0e](https://github.com/webdevcom01-cell/agent-studio/commit/6e01a0ebe549d00c74dcdc96dca8ef6fd6881e89))
+* **feedback-loop:** add externalSignal param + AbortSignal.any (Prompt 3A) ([5cbc51f](https://github.com/webdevcom01-cell/agent-studio/commit/5cbc51fdc8ef811e8ed4bde8998bacc1d66f7be2))
+* **file-writer:** add direct filePath+content mode for single-file writes ([ee32ac8](https://github.com/webdevcom01-cell/agent-studio/commit/ee32ac8a44eafbcdeda9978435d3091149fc1036))
+* forensic audit P0+P1 — routes, inline styles, icon compliance ([4b48027](https://github.com/webdevcom01-cell/agent-studio/commit/4b480273176111ce89f67f86f14906784a0cf174))
+* function handler auto-unwrap, btoa sandbox, dark mode layout ([c82741a](https://github.com/webdevcom01-cell/agent-studio/commit/c82741a8c20618235f94799a9a0b1931d1028522))
+* generate review_batch_id server-side to prevent CR agent timestamp hallucination ([b0679d5](https://github.com/webdevcom01-cell/agent-studio/commit/b0679d55a73c6caa592419228d4cea850c2377f1))
+* **git-node:** bootstrap git repo in /tmp/sdlc before operations ([e34193e](https://github.com/webdevcom01-cell/agent-studio/commit/e34193e54cff27ab025700f1ca2b88e27825fe6b))
+* **git-node:** configure identity + HTTPS auth for Railway ephemeral env ([2ecd040](https://github.com/webdevcom01-cell/agent-studio/commit/2ecd040bd2bb72b6863508c07c63241cf1c7b8c8))
+* **git-node:** correct logger.error signature — root cause of [object Object] ([3c48f52](https://github.com/webdevcom01-cell/agent-studio/commit/3c48f523d98a0dca32a9567e3eb39f464b26e0dd))
+* **git-node:** rename log fields to avoid logger token-key redaction ([b4b6c8b](https://github.com/webdevcom01-cell/agent-studio/commit/b4b6c8b06269376de4d54d63a9d4e10c6e7993b4))
+* **git-node:** sanitize branch name to strip spaces and invalid chars ([7562f91](https://github.com/webdevcom01-cell/agent-studio/commit/7562f91e50978674ce7411fcf743c751c311995e))
+* **git-node:** startup credentials guard + clear error serialization ([2658f13](https://github.com/webdevcom01-cell/agent-studio/commit/2658f133e3ee1ccdfcbecd9224281ba7f349e2c0))
+* **git-node:** use || instead of ?? for GIT_REPO fallback in push case ([43b21b0](https://github.com/webdevcom01-cell/agent-studio/commit/43b21b02f0ad890fe81417c6107584277cc44886))
+* guard all writer.write() calls in streaming handler + propagate cancel to inner stream ([f0a27a3](https://github.com/webdevcom01-cell/agent-studio/commit/f0a27a360089d74e1d2ac3045f92e707b4a81748))
+* **human-approval:** accept typed approve/reject in chat for authenti… ([59bf92c](https://github.com/webdevcom01-cell/agent-studio/commit/59bf92ce320e79435cf7a09f420fb824e7967933))
+* **human-approval:** accept typed approve/reject in chat for authenticated users ([4f2ec3a](https://github.com/webdevcom01-cell/agent-studio/commit/4f2ec3a3c338f238c39884e5b365db89f1d27288))
+* **human-approval:** add conversational fallback when userId is null ([2494454](https://github.com/webdevcom01-cell/agent-studio/commit/2494454e83128a67925a5ef7f8cba6fcb0715dda))
+* **human-approval:** conversational fallback when userId is null ([2cba233](https://github.com/webdevcom01-cell/agent-studio/commit/2cba233e1aa57cb5bf29e39d6c7e2b098beffbd2))
+* **human-approval:** return sourceHandle 'rejected' for reject and timeout-stop paths ([f7362ce](https://github.com/webdevcom01-cell/agent-studio/commit/f7362ce90d60bffa86fd1dca281108c74c06523a))
+* HW A2A payload + CR input validation + banned phrases quality gate ([bfb1117](https://github.com/webdevcom01-cell/agent-studio/commit/bfb1117f87ac3f3d0550297ce9ac3a1e348646df))
+* include CLAUDE.md in standalone build + use gpt-4o-mini for RAG query transform ([3c82491](https://github.com/webdevcom01-cell/agent-studio/commit/3c824912266fcc1194772158bdd21d15865b6911))
+* increase sub-agent timeout, maxTokens, and agent discovery limit ([ccb5f0f](https://github.com/webdevcom01-cell/agent-studio/commit/ccb5f0f72345edaa78bf80de533dbf2852cf46f6))
+* increase sub-agent timeout, maxTokens, and agent discovery limit ([5a22e9a](https://github.com/webdevcom01-cell/agent-studio/commit/5a22e9a9de4db3bfd75b8f930202baed9a0c569f))
+* invisible button text on evals page (white-on-white) ([8394bc0](https://github.com/webdevcom01-cell/agent-studio/commit/8394bc09d589c230f069d6166365f7d152e11e30))
+* **lint:** replace console.error with logger in error-display and flow-builder (DEBT-05) ([e9d6247](https://github.com/webdevcom01-cell/agent-studio/commit/e9d624743cc2351a223a17f307f53bd984506331))
+* **mcp-server:** use 'text' literal type in ToolResult for SDK v1.6.1 compat ([0c2f4ac](https://github.com/webdevcom01-cell/agent-studio/commit/0c2f4ac5d70417482285e21bc53a513b1e3acf45))
+* **mcp:** fix orphaned conversation + misleading total field ([5426c80](https://github.com/webdevcom01-cell/agent-studio/commit/5426c8065e18947e7e14313c4e7d8135e4afd0c2))
+* **mcp:** guard NaN inputs and validate variables is a JSON object ([56985c1](https://github.com/webdevcom01-cell/agent-studio/commit/56985c1356c4e4c7fd7ef78f619b4087eca6efdd))
+* **mcp:** notifications/initialized returns 202 Accepted per MCP spec ([217837e](https://github.com/webdevcom01-cell/agent-studio/commit/217837ec354b244e2439130db7f5e4807e25a0ac))
+* **mcp:** queue failure guard, ABANDONED status, trim validation, args check ([990e42c](https://github.com/webdevcom01-cell/agent-studio/commit/990e42cdfbda7206bee4714de7e536b8f49199d0))
+* **mcp:** round 6 — ABANDONED progress, cancelTask guard, conversation status paths ([624ced0](https://github.com/webdevcom01-cell/agent-studio/commit/624ced0fa5c446ec9a4331c3439860d978335da9))
+* **middleware:** allow x-api-key requests through session guard ([5e45b82](https://github.com/webdevcom01-cell/agent-studio/commit/5e45b824e2ac24d031f948132239fec1e58b062f))
+* move getModel call inside AI step branch, default to deepseek-chat ([586fff3](https://github.com/webdevcom01-cell/agent-studio/commit/586fff341984a159f4f565cebb2abc8410ec7004))
+* move phases useMemo before early returns (React error [#310](https://github.com/webdevcom01-cell/agent-studio/issues/310)) ([2debc44](https://github.com/webdevcom01-cell/agent-studio/commit/2debc441d38790e6cc243738f6ea474b89194168))
+* **openapi:** explicit auth type for SecurityRequirementObject TS2322 ([e3d33cc](https://github.com/webdevcom01-cell/agent-studio/commit/e3d33cc08ea777642b13938a462e3d2d9cb7c552))
+* **P-10:** structured-output supports string format and secondary output variable ([5983189](https://github.com/webdevcom01-cell/agent-studio/commit/598318982b56632e4ca0b7fa8d48da129c3e5b62))
+* **P-11:** notification webhook URL resolution priority: runtime > config > env ([fbebc7a](https://github.com/webdevcom01-cell/agent-studio/commit/fbebc7ad742a2eff9545473b0b23ede90b274a12))
+* **P-14:** function node warns on missing outputVariable and uses fallback __function_result ([7ff9d8f](https://github.com/webdevcom01-cell/agent-studio/commit/7ff9d8fd89775e97274cb8d46c8920eee7023b7c))
+* **P-15:** ai_extract auto-converts schema objects to fields[] with structured editor ([1a44175](https://github.com/webdevcom01-cell/agent-studio/commit/1a441756f9618371e141212a69760a6f258af89f))
+* pass input message to sub-agent executeFlow call ([4a220dc](https://github.com/webdevcom01-cell/agent-studio/commit/4a220dcd52a1b91259b58e227d690d2e2c542078))
+* **phase-F:** close all audit gaps — 100% Phase F completion ([bd72051](https://github.com/webdevcom01-cell/agent-studio/commit/bd720515e7c6948c93fbc6e946d9132ecdc7b942))
+* **phase12:** gate BLOCK retry + UI + performance ([5897447](https://github.com/webdevcom01-cell/agent-studio/commit/58974471cd7c546d6ec9cfa00747a08f206b2a7e))
+* prevent client disconnect from losing pipeline results in streaming engine ([324b52e](https://github.com/webdevcom01-cell/agent-studio/commit/324b52e72b362d57b52bfffc205867366f0b3eee))
+* **process-runner:** add node to allowed command prefixes ([4fe6219](https://github.com/webdevcom01-cell/agent-studio/commit/4fe6219ca87a85ed89681d5bccfb94e3092c212d))
+* **process-runner:** resolve template args and support args[] array on node.data ([0ea4aa4](https://github.com/webdevcom01-cell/agent-studio/commit/0ea4aa41b2c031e1253eed72133cc2028b4a9c5c))
+* **rag:** use Prisma.raw for SET LOCAL hnsw.ef_search to avoid $1 syntax error ([0d82fbd](https://github.com/webdevcom01-cell/agent-studio/commit/0d82fbd01d089fc73528e44e37573a7fd9b554ed))
+* rename GIT_TOKEN to GITHUB_PAT ([788b467](https://github.com/webdevcom01-cell/agent-studio/commit/788b467fad10a63edeec693569515dd07d5a9139))
+* replace hardcoded deepseek-chat with gpt-4.1-mini across codebase ([01e0811](https://github.com/webdevcom01-cell/agent-studio/commit/01e0811a8f0f6cf0fc7497c63c3ebb6da2e6a464))
+* replace node:crypto with Web Crypto API in security-headers (Edge compat) ([4413351](https://github.com/webdevcom01-cell/agent-studio/commit/44133511afbc2dc233ff8098a2d4f6c98e365a26))
+* resolve all pre-existing test failures ([3e140cf](https://github.com/webdevcom01-cell/agent-studio/commit/3e140cf7f537edc1919f2579ab1f1667ddcdd127))
+* restore files accidentally removed from git index ([6364886](https://github.com/webdevcom01-cell/agent-studio/commit/63648866e54d489ae74ac38986900248eaf4d6bb))
+* rewrite auth request URL to public origin (Railway proxy iss mismatch) ([f07071c](https://github.com/webdevcom01-cell/agent-studio/commit/f07071c6774e11cd5f56f2702ff90bfb34b46294))
+* **rls:** Phase 0a.5 — HAL-8 NULL exploit hotfix ([#107](https://github.com/webdevcom01-cell/agent-studio/issues/107)) ([e9fd740](https://github.com/webdevcom01-cell/agent-studio/commit/e9fd74065ebca1463e6265c5d7b43995dbea4c50))
+* **runtime:** prevent command+args doubling in process-runner-handler ([46a03f5](https://github.com/webdevcom01-cell/agent-studio/commit/46a03f5482c1f84cec97e712913587f59ff9c8cb))
+* **runtime:** resolve template vars in file-writer targetDir ([#54](https://github.com/webdevcom01-cell/agent-studio/issues/54)) ([1295a54](https://github.com/webdevcom01-cell/agent-studio/commit/1295a54eecaa8abaeb79e9945924cf08a353188f))
+* **runtime:** resolve template vars in git-node-handler workingDir ([4de2602](https://github.com/webdevcom01-cell/agent-studio/commit/4de2602424de1f0424043ea090be49dc74694eb6))
+* **runtime:** resolve template vars in git-node-handler workingDir ([#56](https://github.com/webdevcom01-cell/agent-studio/issues/56)) ([e35a42d](https://github.com/webdevcom01-cell/agent-studio/commit/e35a42d9d590e110e6da4d77ca0c722f80068bf7))
+* **runtime:** surface real file-writer error in logs and UI ([#55](https://github.com/webdevcom01-cell/agent-studio/issues/55)) ([7ab5821](https://github.com/webdevcom01-cell/agent-studio/commit/7ab58212b394963d297550616f6782bf900ee429))
+* **runtime:** vitest source-file guard in process-runner-handler ([33bbebf](https://github.com/webdevcom01-cell/agent-studio/commit/33bbebf8d5cd21d79ff94c0661c53b37f37d7b70))
+* **runtime:** vitest source-file guard in process-runner-handler ([645db92](https://github.com/webdevcom01-cell/agent-studio/commit/645db92cdf9fbe831b1a0f3afa6bdaa9177d0fb3))
+* **sandbox:** add encodeURIComponent/unescape/escape to vm sandbox ([1d7134c](https://github.com/webdevcom01-cell/agent-studio/commit/1d7134c69e3465512334664bb5f2ad71e0c2d793))
+* **schema:** move expectedDurationSeconds from Account to Agent model ([c220808](https://github.com/webdevcom01-cell/agent-studio/commit/c22080895df9f1b637501b5e49a3ad37cb19593c))
+* **scripts:** link all user agents to GitMCP vault ([32d0385](https://github.com/webdevcom01-cell/agent-studio/commit/32d038583c90762aca0d2fda76ead3d46dbbec9d))
+* **scripts:** load .env.local in setup-gitmcp ([046498f](https://github.com/webdevcom01-cell/agent-studio/commit/046498fe7b6c8d3691aa14517e0c515722a1d784))
+* **scripts:** use generated prisma client path in migration script ([c5c6740](https://github.com/webdevcom01-cell/agent-studio/commit/c5c6740153959bbfb4450f73f4a58a61e0a921d8))
+* **sdlc:** 7 forensic fixes — sandbox_verify conflict, timeout, stale impl, collectFiles cap, Error: false positive, stack trace noise, dead variable ([b74a252](https://github.com/webdevcom01-cell/agent-studio/commit/b74a2526b294394cd45c9c99e593cca9dff88404))
+* **sdlc:** add missing diagnostic logs for zero-files implementation steps ([cadaba4](https://github.com/webdevcom01-cell/agent-studio/commit/cadaba43624c9eee5b4b564e290513181e004bd7))
+* **sdlc:** add slug+runId to CodeGenOutputSchema, fix 7 pipeline issues, sync tests ([fc38d1a](https://github.com/webdevcom01-cell/agent-studio/commit/fc38d1adc827c0426185d5abdafc1d5252adf19b))
+* **sdlc:** add workspace diagnostic logging to git-integration ([adb37fe](https://github.com/webdevcom01-cell/agent-studio/commit/adb37feb60a9bec7ef05616ac8128588aa35e956))
+* **sdlc:** always use phase priority for implementation steps (gpt-4o-mini lacks structured output) ([15617c3](https://github.com/webdevcom01-cell/agent-studio/commit/15617c3ae10ff5555cf127e50d1cabae85b1923e))
+* **sdlc:** block path traversal and absolute paths in patch-applier (S3/C8) ([932209a](https://github.com/webdevcom01-cell/agent-studio/commit/932209a4b3c0b13645bfad59cd2c83575d68d97e))
+* **sdlc:** catch runtime errors in feedback loop + enforce vitest imports in codegen ([4a1a311](https://github.com/webdevcom01-cell/agent-studio/commit/4a1a3110355ba145e3b09a620a71ad02577791b3))
+* **sdlc:** corporate-level pipeline hardening — mandatory test enforcement ([3ee6afa](https://github.com/webdevcom01-cell/agent-studio/commit/3ee6afa98e64165330fe41a3584c970182b1921e))
+* **sdlc:** disable OpenAI strict-mode schema for generateObject ([bdce830](https://github.com/webdevcom01-cell/agent-studio/commit/bdce8306d2d430539cb7a05aa66a761fc6bbf153))
+* **sdlc:** extend PATH in runVerificationCommands so vitest resolves on Railway ([c99deb3](https://github.com/webdevcom01-cell/agent-studio/commit/c99deb37f80fedcec5f677310b305425cbdd99ea))
+* **sdlc:** fail implementation step when zero files generated ([6272a82](https://github.com/webdevcom01-cell/agent-studio/commit/6272a826e165441665708e9d196c75213eef670e))
+* **sdlc:** fix contextParts off-by-one when priorMemory present (C2+D4) ([0b8e53d](https://github.com/webdevcom01-cell/agent-studio/commit/0b8e53d87cc3657e4384d5d5d167dd0d3988b800))
+* **sdlc:** increase maxOutputTokens to prevent code gen truncation ([a0dabc6](https://github.com/webdevcom01-cell/agent-studio/commit/a0dabc60b8be05be7591ddea50559b8f6fff1e55))
+* **sdlc:** log model fallback and escalation events in model router ([c553185](https://github.com/webdevcom01-cell/agent-studio/commit/c55318533b6ef2a6fec532acaaa27c3593c09ebb))
+* **sdlc:** move vitest to dependencies so it survives Railway prod prune ([45440db](https://github.com/webdevcom01-cell/agent-studio/commit/45440db25659be30a09ffe08764368d546c2824d))
+* **sdlc:** pr_generation output shows clear status instead of 'undefined' ([6b07ed6](https://github.com/webdevcom01-cell/agent-studio/commit/6b07ed62e981a238bd006102788ba36630d15283))
+* **sdlc:** preserve workspace on pipeline failure for post-mortem inspection ([514428e](https://github.com/webdevcom01-cell/agent-studio/commit/514428e65f563d9b786da52a273c50e0470f297a))
+* **sdlc:** prevent false positive didTestsFail on vitest '0 failed' summary (C1) ([22955aa](https://github.com/webdevcom01-cell/agent-studio/commit/22955aafa341ccb75c3633694f39aba6539cc484))
+* **sdlc:** redact GitHub PAT from git error messages before logging (S1) ([a6698e2](https://github.com/webdevcom01-cell/agent-studio/commit/a6698e265df88f76850ef795abb9870306c805b7))
+* **sdlc:** schema + typecheck fixes for generateObject ([7e150e3](https://github.com/webdevcom01-cell/agent-studio/commit/7e150e34cadd366bac23b0a190d9b93e6a1701a6))
+* **sdlc:** surface git integration errors in pipeline result and UI ([c368d60](https://github.com/webdevcom01-cell/agent-studio/commit/c368d60c1e29d22c65fe5352f5097a8ac54e53c0))
+* **sdlc:** switch pipeline-memory extraction from deepseek-chat to gpt-4o-mini ([8601864](https://github.com/webdevcom01-cell/agent-studio/commit/8601864f16973938ec2599e3b975a3eec19c4b2b))
+* **sdlc:** use gpt-4.1 first for implementation steps (supports generateObject) ([0fcd271](https://github.com/webdevcom01-cell/agent-studio/commit/0fcd27126e52d0a04f8beb343987c62cc976a198))
+* **security:** address 20/21 Dependabot alerts — website overrides, mcp-server ip-address, deal-flow-agent pip, dependabot config ([6af5585](https://github.com/webdevcom01-cell/agent-studio/commit/6af55859aa2da7fe59cc6448883f650414923f81))
+* **security:** bump next 15.5.18 + override vulnerable transitive deps ([#144](https://github.com/webdevcom01-cell/agent-studio/issues/144)) ([c0914bf](https://github.com/webdevcom01-cell/agent-studio/commit/c0914bf02ed1c06fa4836b755476c154704fd2c3))
+* **security:** remediate mcp-server and website sub-project deps ([#152](https://github.com/webdevcom01-cell/agent-studio/issues/152)) ([d4950da](https://github.com/webdevcom01-cell/agent-studio/commit/d4950da1702579c4f5a141d05783dd05003a8aa5))
+* **security:** remove hardcoded DeepSeek API key and Railway DB URL ([650eea7](https://github.com/webdevcom01-cell/agent-studio/commit/650eea7bfac9432e0ff394a319417e183dafa0ca))
+* **security:** resolve 3 Phase-0 enterprise blocking issues ([53fa3d0](https://github.com/webdevcom01-cell/agent-studio/commit/53fa3d0ad5342c42152959e6070c1edb6f772718))
+* **security:** return error message in RBAC denial response ([a6a47b2](https://github.com/webdevcom01-cell/agent-studio/commit/a6a47b2cd750469fd0a8d15daaea24454eb7800f))
+* **slack:** truncate Block Kit fields to stay within Slack's hard limits ([55219e9](https://github.com/webdevcom01-cell/agent-studio/commit/55219e9bc82b32ea33e07d98dee20d7c5e13fdae))
+* **soma:** cr-payload C-2/M-1/M-4 bugs + CR prompt review_batch_id cleanup ([#141](https://github.com/webdevcom01-cell/agent-studio/issues/141)) ([4c199e8](https://github.com/webdevcom01-cell/agent-studio/commit/4c199e8af830507b4c9bb0b221f8bd57fbedee64))
+* **soma:** propagate userId into sub-agent context for Review Queue visibility ([1afb0e9](https://github.com/webdevcom01-cell/agent-studio/commit/1afb0e996829b6c481cc20d876be70d3a9cb585a))
+* **soma:** remove duplicate SomaReviewBatch creation per CR run ([#142](https://github.com/webdevcom01-cell/agent-studio/issues/142)) ([8d2eecc](https://github.com/webdevcom01-cell/agent-studio/commit/8d2eecc1b99c641551948ea21ee8cf5057d68712))
+* sync local Faza 6 changes that were never committed to git ([f319258](https://github.com/webdevcom01-cell/agent-studio/commit/f319258a258d1d27c7f94e8b7d5cb1ef3a15df2b))
+* **Task 3.2:** remove duplicate DEFAULT_TIMEOUT_SECONDS declaration ([0cfb6b1](https://github.com/webdevcom01-cell/agent-studio/commit/0cfb6b187013e34f8df31e6740f5370199410fe9))
+* **tests:** fix unresolved ../types import in schema-drift-empty-data test ([dddb0ca](https://github.com/webdevcom01-cell/agent-studio/commit/dddb0cac82de0ffb0b65c9ec3472fe7c00c87d55))
+* **tests:** orchestrator-model-overrides 3rd-arg assertion for externalSignal ([c462d47](https://github.com/webdevcom01-cell/agent-studio/commit/c462d4773a77063de01ff46f3f7c12feb32a3638))
+* **theme:** add dark class to html root and fix ThemeProvider blank screen ([428f6fd](https://github.com/webdevcom01-cell/agent-studio/commit/428f6fdf7bc85ab795b16afac68636eaad3eed2b))
+* **timeouts:** increase agent-as-tool timeout profiles for DeepSeek latency ([db0359a](https://github.com/webdevcom01-cell/agent-studio/commit/db0359ab5905a118a83b96ccf9229653e1bdd6c2))
+* **types:** escape shell variable in step5-runbook template literal ([fd836ca](https://github.com/webdevcom01-cell/agent-studio/commit/fd836ca4a601b5598c7dffaf33e5d1079c1318f6))
+* **ui:** fix pipelines data shape - use data.runs not data directly ([a915b5d](https://github.com/webdevcom01-cell/agent-studio/commit/a915b5d9a1058e69621c260196e5dc962f7cf9d4))
+* **ui:** remove ReactMarkdown and prose classes from pipelines page ([242ad8f](https://github.com/webdevcom01-cell/agent-studio/commit/242ad8fff61974d535004efaf45c3bb0d72867a0))
+* **ui:** rewrite pipelines page with stable components ([7980c7c](https://github.com/webdevcom01-cell/agent-studio/commit/7980c7c1b0d2eab67dca22045db1c3e23e768edb))
+* upgrade @auth/core + rewrite auth URL for Railway proxy (iss mismatch fix) ([dee17a2](https://github.com/webdevcom01-cell/agent-studio/commit/dee17a2826bfe7d4a44edf98e9df4bf33f2ad8e3))
+* upgrade CI pnpm version to v10 to match local pnpm v10.28.2 ([657e628](https://github.com/webdevcom01-cell/agent-studio/commit/657e628ebbeae455d4dd11ea9799e77017c018f4))
+* **vault-lint:** don't count canonical type-names as tag sprawl (§3 requires type in tags) ([a9d7068](https://github.com/webdevcom01-cell/agent-studio/commit/a9d70688d96a9227dfb766c7953cbf7e1e38aada))
+* vitest outside /app root — cwd + symlinks for /tmp/sdlc workspace ([ae1eff2](https://github.com/webdevcom01-cell/agent-studio/commit/ae1eff25452534d620863851708a01611ac4cd1c))
+* **webhooks:** correct pipeline trigger URL + guard + isPipelineTrigger in list ([4c1f059](https://github.com/webdevcom01-cell/agent-studio/commit/4c1f059dd9850a3c06db2a0eb52447d4213417c9))
+* **worker:** install git in alpine image for SDLC git integration ([a497f82](https://github.com/webdevcom01-cell/agent-studio/commit/a497f821e7247ab7f1c07577abfd21860be7751e))
+* **worker:** install git in Docker image for SDLC git integration ([e75140e](https://github.com/webdevcom01-cell/agent-studio/commit/e75140e825f8f96feddc0977bd8a94165628eb1f))
+
+
+### Performance Improvements
+
+* **sdlc:** add SHA-256 hash-based cache to indexCodebase to skip unchanged files (P1) ([bbb37b1](https://github.com/webdevcom01-cell/agent-studio/commit/bbb37b1630191da3e7ec9af4783148f144c762cf))
+
 ## [Unreleased]
 
 ### Added (2026-04-28)
diff --git a/package.json b/package.json
index 221b5b1..eeadde4 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "agent-studio",
-  "version": "0.1.0",
+  "version": "1.0.0",
   "private": true,
   "scripts": {
     "dev": "next dev --turbopack",