Changelog

Release notes

Workspai CLI and VS Code extension updates, fetched live from GitHub.

workspai npm

Workspai CLI (npm)

Open-source Workspace Intelligence CLI with one contract-ordered runner for evidence, verification, and agent grounding.

Latest stable

v0.52.3

Published releases

102

Tracked changes

1620

v0.52.3

2026-08-03Release
Changed
  • Made Governance Pipeline Doctor stages snapshot their exact policy profile
  • Made workspace Readiness evaluate every runtime represented by registered
  • Made artifact remediation plans derive ordered project-scoped producers from
  • Made aggregate readiness, verification, and pipeline actions declare their
  • Made long-lived workspace run start stages use bounded startup verification:
  • Refreshed the release toolchain dependency graph to patched brace-expansion,
Fix
  • Fixed Pipeline evidence collapsing actionable Doctor failures into the
  • Fixed Workspace Verify remediation plans that only reran the aggregate gate
  • Fixed runtime pin blockers that lacked explicit setup and ordered
  • Fixed aggregate gate reruns being presented before their contract-owned root
  • Fixed service start verification waiting for a permanent process until the
  • Fixed exact root overrides retaining vulnerable transitive releases after a
Verification
  • Full CLI suite completed across 214 test files; 207 files passed in the
  • TypeScript, focused Pipeline/Readiness/Workspace Run/remediation tests,
  • npm audit --audit-level=high reports zero known vulnerabilities.
  • The updated CLI was exercised against a real multi-project workspace: the

v0.52.2

2026-08-02Release
Changed
  • Made npm dependency remediation compare exact candidate versions with the
  • Made repeated npm audit records converge on one stable, sorted remediation
  • Made unresolved direct and transitive advisories retain structured owner,
  • Made supported non-Node audit findings use the same guarded resolution model
Fix
  • Fixed downgrade-only or already-installed npm candidates being exposed to
  • Fixed one logical npm repair candidate appearing multiple times when both a
  • Fixed invalid dependency candidates causing repeated Resume attempts even
  • Fixed Doctor treating “no direct automatic fix” as “no compatible source
Verification
  • Dependency-audit tests cover downgrade-only, already-installed, duplicated,
  • Version alignment, release-document validation, type checking, formatting,

v0.52.1

2026-08-02Release
Changed
  • Made Doctor distinguish compatible dependency repairs from breaking-only,
  • Made dependency repair intent a freshly derived policy on every Doctor run,
  • Made remediation plans preserve non-executable dependency decisions as
  • Extended project and workspace Doctor evidence contracts with normalized
Fix
  • Fixed npm audit payloads with boolean fixAvailable values being ignored or
  • Fixed breaking-only dependency paths being exposed as safe automatic fixes.
  • Fixed review-required Doctor capabilities being hidden from remediation
  • Fixed stale derived repair intent taking precedence over the current Doctor
Verification
  • Full CLI suite: 2,257 tests passed across 210 test files, with 8 explicit
  • Doctor dependency-audit, surface-probe, remediation-plan, canary, and schema
  • Contract synchronization, shared-contract parity, and parity snapshots

v0.52.0

2026-07-31Release
New
  • Added durable Verified Engineering Goals with `workspace goal
  • Added workspace- and project-scoped goal contracts that preserve success
  • Added bounded multi-ecosystem dependency baselines with manifest and lockfile
  • Added the public
  • Added project-aware dependency repair transactions to Doctor evidence,
  • Added contract-validated Discord release announcements, a shared release
Changed
  • Made dependency repair completion require manifest/lockfile consistency,
  • Made Verified Goal verification reuse the canonical intelligence chain and
  • Made remediation plans retain the affected project, ecosystem, commands,
  • Extended runtime command, published-contract, extension-compatibility,
  • Made GitHub release notes and Discord announcements consume the same
  • Kept the full official-generator matrix independent from npm publishing while
  • Bumped the monorepo root, workspai, and wspai packages to 0.52.0, and
Fix
  • Fixed dependency repair flows that could treat a manifest-only edit as a
  • Fixed Doctor remediation output that omitted actionable, project-scoped
  • Fixed canonical report-path and schema literals for Verified Goal status by
  • Fixed producer-binding guards so every canonical artifact path and schema is
  • Fixed action-scoped Help so workspace goal ... --target describes a test
Verification
  • Full CLI suite: 2,248 tests passed across 209 test files, with 8 explicit
  • Verified-goal tests cover all goal kinds, workspace/project scope, coverage
  • Doctor and remediation tests cover transaction creation, project identity,
  • Workspace Intelligence runtime conformance passed 11 stages with 16 governed
  • TypeScript, ESLint, format, Markdown links, documentation drift/examples,
  • npm audit --audit-level=moderate reported zero vulnerabilities.

v0.51.0

2026-07-28Release
New
  • Added explicit Knowledge Graph provider applicability so current runs
  • Added deterministic stopword filtering and inverse-document-frequency
  • Added logical interface reconciliation for duplicated contract copies while
  • Added nested runtime-candidate discovery for adopted polyglot monorepos.
  • Added a contract-driven official-generator smoke matrix with per-generator
  • Added a profile-aware, lifecycle-synchronized workspace README.md and a
Changed
  • Made graph quality count applicable-but-empty providers, bounded scans,
  • Made workspace creation and lifecycle sync source the displayed
  • Made workspace README synchronization preserve user-authored content and
  • Made Doctor preserve Electron as desktop and VS Code extensions as
  • Made newly generated typed Doctor repairs use the workspai: namespace while
  • Synchronized canonical FastAPI and NestJS template changes from RapidKit
  • Bumped the monorepo root, workspai, and wspai packages to 0.51.0, and
Fix
  • Fixed graph quality reports that could show complete provider execution while
  • Fixed natural-language graph queries where common words could outrank rare,
  • Fixed repeated logical API/service results consuming a disproportionate
  • Fixed profile changes that updated workspace registry identity without
  • Fixed Electron Doctor output that reported a Vite frontend and warned about
  • Fixed repeated Doctor Quick Fix commands in human and machine-readable
  • Removed duplicated, runtime-specific post-create guidance that obscured the
Verification
  • Graph suites cover provider applicability, unknown accounting, identity
  • Creation and Doctor suites cover the managed README, compact receipt,
  • A real 10-project polyglot workspace exercised Model, Graph search/evidence,
  • TypeScript, lint, format, documentation, contract, package, and full CLI

v0.50.0

2026-07-27Release
New
  • Added first-class project entry contracts and a validated, gitignored
  • Added portable project grounding and
  • Added graph-aware Doctor diagnosis with project roots, structural paths,
  • Added versioned ingestion plan/result contracts for local paths, Git
  • Added Backend, Frontend, Desktop, and Extension kit categories plus
  • Added project coverage --run --target <percent> --strict --json and a
  • Added explicit workspace archive capability, manifest, and operation-result
Changed
  • Made successful workspace/project creation, adoption, import, connection, and
  • Made official ecosystem generators request their latest stable channel while
  • Made current-folder workspace registration foundation-only; non-Python
  • Deepened Doctor runtime-native dependency, security, test, quality,
  • Strengthened the Model/Graph artifact-set lock, structural hash binding,
  • Simplified root CLI Help around the product lifecycle, canonical
  • Bumped the monorepo root, workspai, and wspai packages to 0.50.0, and
Fix
  • Fixed project-local workflows that previously required users or agents to
  • Prevented machine-local absolute workspace paths from leaking into portable
  • Fixed lifecycle gaps where a newly created, adopted, or imported project
  • Fixed nested workspace creation so a child workspace cannot be accidentally
  • Fixed non-Python creation paths that incorrectly initialized Poetry or
  • Fixed ambiguous create/import/adopt routing with explicit ingestion
  • Fixed Help noise that repeated global setup, observability, project, and
  • Isolated enterprise prepack creation and registry smoke tests from the
Verification
  • Full CLI suite: 2,218 tests passed across 205 test files, with 8 explicit
  • Project-entry, graph-aware Doctor, ingestion, archive, categorized-kit,
  • TypeScript, ESLint, format, documentation, package, generated/mirrored

v0.49.0

2026-07-25Release
New
  • Added the public workspace-graph-stream.v1 contract for transport-neutral,
  • Added workspace watch --graph-stream --json so IDEs and other long-running
  • Added graph-stream capability and contract discovery to the runtime command
  • Added a repository-wide brand contract that protects canonical Chistiq,
  • Added a release-note generator and validation gate for publishing the exact
Changed
  • Moved Workspai repository ownership, issue, discussion, contribution, image,
  • Simplified existing-project onboarding: workspai adopt . now creates or
  • Made generic the vendor-neutral agent example while retaining the supported
  • Reworked root, CLI, alias, scenario, workspace-operation, Doctor, CI, and
  • Bumped the monorepo root, workspai, and wspai packages to 0.49.0, and
Fix
  • Fixed GitHub Release links so every release points to its tag-bound document
  • Hardened release validation to reject relative, noncanonical, mismatched-tag,
  • Fixed workspace-watch integration so each emitted event can expose its
  • Fixed onboarding examples that implied users must manually create a workspace
  • Fixed Windows and cross-platform test assumptions in frontend creation,
Verification
  • Full CLI suite: 2,088 tests passed across 194 test files, with 8 explicit
  • Graph-stream schema and publisher tests cover initial snapshots, hash-linked
  • Release-note tests cover canonical GitHub body generation and fail-closed
  • Published and mirrored command/contract inventories include the graph-stream

v0.48.0

2026-07-22Release
New
  • Added a governed Workspace Intelligence evaluation workflow with
  • Added portable Knowledge Graph exports for JSON-LD, GraphML, and GEXF, plus
  • Added versioned evaluation, evaluation-comparison, and model-usage-event
  • Added a documentation content contract and stronger drift guards covering
Changed
  • Expanded the machine-readable Workspace Intelligence architecture and
  • Clarified that the Workspace Model is the system source of truth, while the
  • Reworked the root and CLI READMEs around user goals, the canonical lifecycle,
  • Expanded the wspai alias README with installation guidance, delegation
  • Bumped the monorepo root, workspai, and wspai packages to 0.48.0, and
Fix
  • Fixed CLI validation for the documented Graph options:
  • workspace graph search --limit
  • workspace graph overlay --from
  • Fixed architecture-contract drift that omitted current Graph query/export
  • Removed stale documentation language that described the current graph as a
  • Made --skip-install a host-toolchain-free scaffold boundary for Java, Go,
  • Made workspace-registry transactions retain one immutable canonical, legacy,
  • Made demo-kit fixtures use atomically unique temporary directories and kept
Verification
  • Full CLI suite: 2,076 tests passed across 191 test files, with 8 explicit
  • TypeScript, ESLint, documentation links/examples/drift guards, README command
  • A real isolated workspace exercised Model and Graph generation, bounded

v0.47.0

2026-07-21Release
New
  • Added the versioned, evidence-backed Workspace Knowledge Graph as an atomic
  • Added bounded workspace graph search, typed entity/evidence/path queries,
  • Added versioned contracts for Knowledge Graph, change overlay, bounded search,
  • Added MCP graph search/evidence/path tools and graph discovery through agent
  • Added a user-focused graph guide, benchmark methodology, AI/IDE/MCP scenario,
Changed
  • Made workspace-knowledge-graph.json a required Model-stage artifact in the
  • Expanded graph facts and proofs across source, packages, APIs, events,
  • Changed agent guidance to prefer AGENTS.md and INDEX.json, then bounded
  • Expanded published contract, runtime surface, architecture, artifact producer,
  • Rewrote optional AI module-recommender documentation to distinguish it from
  • Bumped the monorepo root, workspai, and wspai packages to 0.47.0, and
Fix
  • Canonicalized Python/Core bridge project metadata from legacy .rapidkit
  • Fixed artifact, contract, command, and documentation gaps for graph consumers
  • Updated brace-expansion to the patched release required by the high-severity
  • Updated fast-uri to 3.1.4 to resolve its high-severity host-confusion
  • Removed misleading documentation that treated future package extraction as
Verification
  • Full CLI suite: 2,062 tests passed with 8 explicit skips.
  • Workspace Intelligence runtime conformance passed all 11 ordered stages and
  • Documentation links, examples, drift guard, README command smoke, and live

v0.46.0

2026-07-18Release
New
  • Added the contract-backed workspace intelligence run command as the unified
  • Added the versioned workspai-workspace-intelligence-run-v1 report contract,
  • Added transactional workspace lifecycle utilities with rollback coverage for
  • Added first-class frontend project execution coverage and hardened generators
Changed
  • Hardened the canonical intelligence sequence across sync, model, contract
  • Made the unified runner report each required stage with deterministic status,
  • Expanded CLI documentation, command help, runtime contracts, artifact
  • Hardened Python-engine discovery and workspace metadata propagation while
  • Bumped the monorepo root, workspai, and wspai packages to 0.46.0, and
  • Expanded the release-gated suite to 2,042 passing tests, with targeted
  • Raised the verified CLI coverage to 81.66% statements, 71.27% branches,
Fix
  • Fixed lifecycle partial-write gaps by rolling back newly created metadata,
  • Fixed project metadata path validation and registry/mirror consistency across
  • Fixed platform capability probes and runtime adapter behavior for Python, Go,
  • Fixed documentation and config-example drift, including removal of an
  • Fixed Windows lifecycle journal writes so GitHub-hosted filesystems may reject
  • Fixed macOS path assertions to compare canonical real paths and corrected the
  • Fixed the npm dependency tree used by CycloneDX SBOM generation by removing an
  • Hardened metrics collection so test, lint, and audit execution or parse
  • Fixed metrics collection for the expanded enterprise suite by publishing a
  • Removed type-only declarations and compatibility-only re-export barrels from
  • Fixed cross-platform test and runtime drift across Python venv orchestration,
  • Made Python project orchestration dependency-injectable so venv, Poetry, and
Verification
  • corepack npm run check
  • corepack npm --workspace workspai run contracts:check
  • corepack npm --workspace workspai run docs:validate
  • corepack npm --workspace workspai run test
  • Unified runner contract, CLI-chain, lifecycle transaction, frontend execution,
  • 2,042 tests passed with 8 explicitly skipped; aggregate coverage passed the

v0.45.0

2026-07-15Release
New
  • Added the versioned workspai-cli-runtime-command-inventory-v1 contract,
  • Added command-surface verification that fails on registered/declared drift
  • Added producer-command ownership to artifact contract descriptors, including
  • Added machine-readable command documentation for canonical argv, stdin input
  • Added complete workspace action discovery to workspace --help.
Changed
  • Expanded the runtime command surface and published contract catalog with
  • Included the runtime inventory in generated shared contracts and enterprise
  • Documented the required stdin contract for workspace feedback record and
  • Registered workspace feedback record --json as a producer of the governed
  • Completed the Workspace Intelligence subcommand classification with contract,
  • Bumped the monorepo root, workspai, and wspai packages to 0.45.0, and
Fix
  • Fixed pipeline --strict semantics so warning-only pipelines remain advisory
  • Hardened concurrent dist-test build locking so waiting processes re-check
  • Kept live command inventory generation deterministic across test and package

v0.44.0

2026-07-14Release
New
  • Added Workspace Intelligence architecture and chain contracts to make the
  • Added generated contract coverage for runtime command discovery, CLI operation
  • Added runtime conformance and adversarial validation scripts for Workspace
  • Added archive capability, manifest, and operation result contracts for ZIP64,
  • Added readiness --workspace <path> for release-readiness checks outside the
Changed
  • Bumped the monorepo root, workspai, and wspai packages to 0.44.0, and
  • Expanded operational JSON schemas for autopilot, doctor, infra, product,
  • Hardened workspace snapshot, archive, contract verify, graph freshness,
  • Updated CLI and docs so Workspace Intelligence evidence flags are documented
  • Updated npm release workflow behavior so reruns can tolerate already-published
Fix
  • Fixed pipeline --no-agent-sync so it no longer writes agent-grounding
  • Fixed Workspace Intelligence option validation so workspace impact and
  • Fixed the artifact catalog mapping for autopilot-release.v1.json.
  • Fixed release-readiness workspace targeting parity with analyze --workspace
  • Fixed Windows artifact writes so EPERM from filesystem fsync does not
  • Increased timeout headroom for slower CLI process and HTTP retry integration
Verification
  • corepack npm run check
  • corepack npm --workspace workspai run contracts:check
  • corepack npm --workspace workspai run check:workspace-intelligence-runtime
  • corepack npm --workspace workspai run check:workspace-intelligence-adversarial
  • corepack npm --workspace workspai run docs:validate
  • corepack npm test
  • Real workspace smoke tests across my-new-wsp, my-works, my-workspace,
Showing the latest 12 of 102 published releases.Browse full history

VS Code extension

Workspai VS Code

Workspace intelligence inside VS Code — explorer, studio, advisor, and chat participant.

Latest stable

v0.36.0

Published releases

57

Tracked changes

1440

v0.36.0

2026-08-03Release
New
  • Durable Create-session recovery that turns orphaned planning/running records
  • First-install-safe managed workspace creation, including parent-directory
  • Cross-runtime remediation-plan detail for dependency resolution paths that
Changed
  • Studio now distinguishes a persisted repair record from a live provider-owned
  • The Create history locks only the operation currently owned by the live
  • CLI discovery now recognizes direct, global npm, NVM, FNM, asdf, Volta, and
  • The managed default workspace uses the CLI-aligned minimal profile and does
Fix
  • Fixed fresh-install project creation failing with unknown error when
  • Fixed stale Create sessions remaining permanently labelled Creating and
  • Fixed false CLI-missing notifications when Workspai was installed under a
  • Fixed Studio repair recovery loops that could imply an active repair after
Other
  • VS Code 1.106.0+
  • Workspai CLI 0.52.3+
  • RapidKit Core 0.6.0 only for Python-backed kits and modules

v0.35.0

2026-08-02Release
New
  • Native Studio Agent runtime: durable Agent / Ask / Plan sessions, governed Workspai tools, causal blocker traversal, source patch transactions, dependency-security repair, and evidence-derived completion.
  • Callable model selector contract: provider-qualified model identities with session-only transports excluded and retryable model failover for native Studio tool calls.
  • Enterprise dashboard evidence loop: Command → Evidence → Next Step with activity trail, outcome review, next-step rail, and contract-aware command dispatch (dashboardCommandContracts, dashboardCommandRegistry).
  • Dashboard UX polish (v0.35): Studio Command Center handoff strip (Evidence · Run · Project · Home); Home Workspace Advisor entry and clickable health metrics; navigation telemetry dedup on re-selected tabs; responsive Run sub-nav scroll on narrow widths.
  • Enterprise-minimal stabilization pass: Evidence Guided mode now renders one current path instead of duplicating attention cards; Evidence view controls use compact Guided / Workflows / All labels; Studio uses a calmer panel workspace with carded chat/context/sidebar surfaces; Workspai now contributes a standard VS Code Secondary Sidebar tab plus Activity Bar fallback, with Create with AI / Workspace Advisor / Studio as the minimal AI surface and a live creation timeline.
  • Evidence surfaces: CommandActivityPanel, EvidenceOutcomePanel, ReleaseHub, DashboardEvidenceSection, governance/sparse empty states, and Incident Studio handoff from evidence cards.
  • Governance onboarding: fresh-install onboarding, ops-chain banner, and automatic bootstrap → doctor → analyze chain after workspace create, clone, import, or add.
  • Operate & governance UI: EnterpriseDashboardFlow, WorkspaceGovernancePanel, ActionTile, SectionHeader, FrameworkIcon, and CommandCheatsheet.
  • Settings bridge: embedded WorkspaiSettingsPanel aligned with dashboard design tokens via workspaiSettingsBridge.
  • Incident Studio VNext: primary studio surface replacing the legacy monolith, with ChatSurface, ContextPanel, WorkspaceSidebar, CommandRibbon, CliSurfaceSection, ShipLoopSection, ActionOutcomePanel, and MissionControlHeader.
  • Ship loop: analyze → verify-gates → readiness → archive → autopilot-release with host bridges, ship evidence refresh, and stabilization loop.
  • Studio session persistence: reload-safe state for ship loop, CLI surface, and chat brain sessions.
  • AI action framework (host): action contract, registry, executor, safety/redaction layers, command policy, and aiProviderService for LLM routing.
  • Studio policy gates: telemetry policy core, policy gate mapper parity (host + webview), guided-mode blocks for advanced CLI, and mutation gate before fix/archive/autopilot paths.
  • Studio CLI surface: incidentCliActionMatrix, inline command bridge (pinned Workspai CLI), doctor evidence bridge, repro pack and enterprise export bridges.
  • Studio action registry: analyze, workspace advisor, governed fix, verify-gates, and terminal-bridge actions with audit trail.
  • Workspai design system: token layers (workspai-tokens, workspai-primitives, studio chrome, analyze report CSS), WorkspaiThemeProvider, WorkspaiEmptyState, WorkspaiBanner, and contributor DESIGN_SYSTEM.md.
  • Design-system CI: drift guard tests, studio chrome CSS extract/verify scripts, and website/extension parity check script.
  • AI creation intent: aiCreationHeuristic and structured languageModelResponse parsing for safer create flows and module suggestions.
  • Analyze scoping: analyzeReportBridge so dashboard and studio analyze viewers respect workspace vs project context.
  • Setup command-center: embedded Setup & Settings with full-width host, theme-safe loading skeletons, ToolRow matrix, and collapsible optional/advanced sections.
  • npm governance pipeline parity (npm 0.34.0 CLI): workspai.workspacePipeline (pipeline --json --strict), pipeline evidence card from pipeline-last-run.json, Release hub orchestrator banner, and sidebar Run & Release / Governance menu entries.
  • Vitest expansion: dashboard bridges, studio redesign contracts, design-system drift, ship-loop integration, AI action framework, presentation contracts, and smoke stabilization suites.
  • Enterprise hardening modules: workspacePathBoundary, incidentInlineCommandRunner, incidentStudioStabilizationPolicy, dashboardEvidencePending, and dashboardEvidenceRefreshSchedule (webview).
  • Workspace adoption parity: extension adoption now delegates to canonical rapidkit adopt --json first, with a schema-aligned local fallback for offline or unavailable npm CLI scenarios.
  • Multi-stack adopted project discovery: adopted frontend and backend projects can be registered outside the workspace tree and still appear in Dashboard, Evidence, Sidebar, and project discovery flows.
Changed
  • Assistant Agent mode now owns the complete card incident graph and may finish only after a fresh, non-blocking verify observation; generated reports are refreshed through canonical producers rather than edited.
  • Studio turn limits are now explicit host/test boundaries only. Production Agent sessions compact into durable checkpoints and retain ownership until verified completion, cancellation, or a real provider/protocol failure.
  • Native tool execution is causal-generation aware: duplicate inspections, audits, remediations, and verifies are suppressed until source or governed evidence advances; source patch results refresh the generation before the next repair step.
  • Long-running Agent prompts retain causal tool and verify events while dropping duplicate request/status chatter, keeping repair sessions within provider context budgets.
  • Retired legacy AIIncidentStudio.tsx (~7.5k lines) in favor of IncidentStudioVNext and modular studio regions.
  • Replaced CommandReference with CommandCheatsheet; removed QuickLinks, HeroAction, and AIActions from the dashboard shell.
  • Reworked welcomePanel and App.tsx for dashboard dispatch, evidence refresh, and studio integration at scale.
  • Expanded workspace and project treeviews to notify governance ops chain and honor dashboard workspace payloads.
  • npm CLI verify: Setup version probe uses developer-style npx rapidkit --version so terminal output matches the card; orchestration commands remain pinned.
  • Guided/lite/responsive studio polish (Wave Y): denser guided conversation, action outcome essentials, collapsible sections, and responsive studio chrome.
  • Evidence refresh: replaced multi-timer refresh storm (0 / 1.8s / 5s / 12s) with debounced coalescing (750ms + one 5s follow-up); refresh only when commands opt in via refreshEvidence: true.
  • Project adoption UX: “convert generic project” is now “adopt project into Workspai workspace”; known stacks are no longer skipped and are adopted through the same governance contract.
  • Package build contract: VSIX prepublish now builds webview assets in production mode so dev source maps do not enter the release package.
Fix
  • Fixed dependency incidents stopping at an unsafe npm downgrade even when a compatible owner upgrade, transitive constraint, or runtime-native source transaction remained available. Studio now preserves CLI-authored resolution candidates, respects the Doctor-selected ecosystem in polyglot projects, and reaches a user decision only after bounded compatibility investigation.
  • Fixed every multi-tool VS Code LM request failing before its first model turn because LanguageModelChatToolMode.Required was used with more than one tool.
  • Fixed copilotcli and other session-only providers appearing as runnable Workspai models even though they cannot answer extension LM requests.
  • Fixed missing/retired models and empty provider streams terminating Studio without trying another callable model.
  • Fixed Readiness repairs exhausting an arbitrary 80-turn budget after repeatedly auditing the same dependency advisory; duplicate observations now remain in the model ledger but are omitted from the user-facing timeline.
  • Fixed dependency repair retry state surviving a successful source patch, which could prevent the Agent from regenerating the lockfile after applying an evidence-supported manifest override.
  • Fixed underspecified native patch-tool input: models now receive the exact workspace-relative full-file replacement and source-hash contract.
  • Updated adm-zip and axios to patched releases and made security audit / VSIX packaging use the pinned Corepack package manager path instead of relying on a globally installed npm binary.
  • Raised the VS Code engine floor to 1.106.0, where contributed Secondary Sidebar containers became stable, preventing Workspai from silently falling back into Explorer or requiring a proposed API.
  • Hardened Electron smoke so proposed-API rejection and missing Workspai view-container diagnostics fail the release even when the extension host exits with code zero.
  • Incident Studio stable wiring gaps (doctor scope payloads, sync graph, telemetry refresh).
  • AI creation intent planning and module suggestion boundaries for supported project types.
  • UserMode typing (standard) and shell-view lifecycle guards for Settings/Setup tabs.
  • Doctor telemetry refresh alignment with scoped workspace/project evidence.
  • Security (P0): user-supplied paths cannot escape the active workspace; shell metacharacters rejected; Studio inline CLI restricted to an allowlisted RapidKit surface executed without a shell.
  • Dashboard ops chain (P0): cross-workspace chain bleed in the webview; bootstrap step stall without timeout; silent no-op when contract dispatch fails (now warns + dashboardCommandFailed).
  • Evidence (P0): workspace-level project-doctor artifacts without project identity no longer attach to the wrong selected project; missing bootstrap card always shown.
  • Studio (P1): mutation gate parity via shared stabilization policy; standalone panel incomingMessage merge and project path/name injection.
  • Reliability (P1): pending evidence cards reconcile from resolved cards and activity completed/failed; removed blind 15s pending timeout.
  • Incident Studio stabilization (0.35.0): resync analyze-backed VNext state after report reload; project scope for standalone chat brain and palette open; CLI mutation detection without cliActionId; session persistence queue before load; scope selector disabled without project; ContextPanel AI/verify gate parity; chat-brain error banner; mission-control ErrorBoundary; coalesced App embed host-handler refs for CLI/ship loop.
  • Adopted project visibility: external adopted projects written to .rapidkit/imported-projects.json are now resolved by workspace manager, project explorer, and welcome-panel project discovery instead of disappearing after refresh.
  • Fallback adoption drift: if npm CLI adoption is unavailable, the extension writes aligned project.json, adopt.json, adopt-readiness.json, context.json, and workspace registry metadata instead of legacy partial markers.
Removed
  • Legacy AIIncidentStudio component and interaction tests (superseded by studioRedesignContracts and presentation contract suites).
  • Dashboard CommandReference.tsx, QuickLinks.tsx, HeroAction.tsx, AIActions.tsx.
Verification
  • ./node_modules/.bin/tsc --noEmit
  • corepack npm test (321 files / 2282 passed / 2 skipped)
  • node scripts/release-stop-gate.mjs --skip-kpi
  • env PATH=/tmp:$PATH ./node_modules/.bin/vsce package --no-dependencies --out /tmp/workspai-0.35.0.vsix

v0.34.0

2026-06-10Release
New
  • Workspace Infrastructure commands: plan, up, down, status, and open compose file, with Docker pre-flight checks, optional flags, and a dedicated workspace sidebar submenu.
  • Workspace Foundation: Ensure command with non-destructive and force re-sync modes plus modal confirmation before rewriting foundation files.
  • Project lifecycle commands for Build, Start (production), Lint, and Format from the Projects tree, including running-server conflict handling on start.
  • Module Maintenance commands: upgrade, diff, checkpoint, rollback, and uninstall, with registry-backed module selection, dry-run modes, and guarded confirmations for destructive actions.
  • Vitest coverage for infra, foundation, project lifecycle stage, and module maintenance terminal dispatch paths.
Changed
  • Expanded package.json command palette, workspace context menus, and project context menus to expose the new CLI parity surfaces.
Verification
  • npm run compile
  • npm run lint
  • vitest run (1094 tests)

v0.33.0

2026-06-08Release
New
  • Full .NET setup-runtime support across the command palette setup flow and the dashboard setup experience.
  • dotnet-only workspace bootstrap profile across schemas, completion, hover help, AI create flows, command reference, and workspace creation UI.
  • Drift guard coverage that keeps .NET and dotnet-only surfaced in setup/runtime/profile experiences.
Changed
  • Updated marketplace/package metadata to include .NET Web API and C# discovery terms.
  • Expanded polyglot and enterprise workspace profile copy to include .NET alongside Python, Node.js, Go, and Java.
  • Hardened release-stop-gate tests so script subprocesses run with a clean Node CLI environment instead of inheriting Vitest worker hooks.
  • Reset RapidKit CLI test mocks between tests and aligned fallback expectations with the actual direct-binary-to-npx execution path.
Fix
  • Fixed setup/runtime UI drift where .NET projects were supported by project creation but missing from runtime verification flows.
  • Fixed dashboard setup guidance so .NET SDK 8+ install, verify, path detection, and AI setup suggestions are visible.
  • Fixed profile parity gaps where dotnet-only could be accepted by the CLI surface but omitted from extension schemas or UI helpers.
Verification
  • ./node_modules/.bin/tsc --noEmit
  • ./node_modules/.bin/vitest run
  • ./node_modules/.bin/eslint src --ext ts --max-warnings 100
  • node scripts/sync-import-stack-parity-snapshot.mjs --check
  • node esbuild.js --production
  • node esbuild.js from webview-ui

v0.32.1

2026-06-08Release
New
  • Shared runtime command surface contract for extension/npm parity covering scaffold kits, module-support boundaries, lifecycle commands, and runtime tiers.
  • Runtime command surface parity tests to keep dashboard, AI creation, module suggestions, and CLI snippets aligned with the Workspai CLI.
  • .NET project creation and dashboard surfaces alongside the existing FastAPI, NestJS, Go, and Spring Boot flows.
Changed
  • Updated extension-host RapidKit calls to use the pinned Workspai CLI form: npx --yes --package rapidkit rapidkit ....
  • Aligned dashboard command reference, quick links, setup flows, project creation, and module browser copy with the latest Workspai CLI command surface.
  • Restricted AI module suggestions to FastAPI and NestJS, with explicit native package ecosystem guidance for Go, Spring Boot, and .NET.
  • Hardened AI prompt guidance so generated recommendations use current doctor/project/module command scopes.
Fix
  • Fixed .NET AI creation messaging that could incorrectly describe Spring Boot module behavior.
  • Fixed user-facing module install snippets that used unpinned rapidkit add module commands.
  • Fixed stale doctor command examples such as rapidkit doctor --scope=workspace in Studio surfaces.
  • Fixed module details and browser command previews so they copy the same supported CLI form documented by npm.
Verification
  • npm run typecheck
  • npm run check:parity-snapshot
  • vitest run src/test/runtimeCommandSurfaceParity.test.ts src/test/driftGuard.test.ts src/test/platformCapabilities.test.ts src/test/springSupportContracts.test.ts src/test/aiService.test.ts
  • npm run lint:stabilization (passes with existing warning budget)
  • npm run build
  • git diff --check

v0.32.0

2026-06-02Release
New
  • Enterprise Workspai dashboard flow with clearer workspace operations, project build, share/handoff, recent workspace, template, and module browsing sections.
  • Workspace Contract Registry documentation surface with screenshot coverage for sidebar Contract Graph and workspace.contract.json inspection.
  • Shared enterprise modal foundation for workspace creation, project creation, module installation, module details, and AI creation flows.
  • Webview error boundary support so dashboard rendering failures can surface recoverable errors instead of blank screens.
  • Updated screenshot inventory, README tour, and media documentation for Marketplace/readme preparation.
Changed
  • Reworked dashboard IA so workspace-level actions, project-level actions, and share/archive flows sit in their correct scopes.
  • Refined Project Actions and Module Browser copy to show selected project/workspace context without exposing local absolute paths.
  • Simplified onboarding and setup entry points around Workspai command-center language.
  • Refreshed modal interaction design with denser enterprise layout, command previews, clearer targets, and consistent footer actions.
  • Updated package metadata version to 0.32.0 across package.json and package-lock.json.
  • Added safe npm overrides for vulnerable transitive test dependencies while keeping the VS Code test CLI on the current release line.
Fix
  • Fixed dashboard switch/selection refresh behavior paths covered by the redesigned workspace overview flow.
  • Fixed module install/details surfaces that previously showed workspace paths where project context was expected.
  • Fixed duplicate webview message-case behavior encountered during dashboard/modal integration.
  • Cleared npm audit findings for the release package without using npm audit fix --force.
Verification
  • ./node_modules/.bin/tsc --noEmit
  • node esbuild.js from webview-ui
  • npm audit --json reports 0 vulnerabilities
  • git diff --check

v0.31.0

2026-05-31Release
New
  • Modular workspace analyze helper with stable runAnalyze, loadReport, and revealEvidence message handlers.
  • Dedicated Workspace Live Diagnosis analyze card for stable incident workflows.
Changed
  • Moved analyze lifecycle from the redesign-only Incident Studio path into the stable WelcomePanel / AIIncidentStudio experience.
  • Added clearer guidance for missing analyze output and prompt users to run rapidkit analyze.
Fix
  • Fixed missing analyze output flow so users are guided to rerun analysis instead of seeing an empty state.
Other
  • Recommended validation: npm run compile and npm run test.

v0.30.0

2026-05-27Release
New
  • Structured AI response cards in Studio were refined with clearer semantics and improved presentation for better readability.
  • Modal evidence contract is now surfaced across AI incident and debugging workflows, improving traceability and diagnostic transparency.
  • AI output quality gate introduced to strengthen response consistency before downstream execution.
  • Workspace snapshot recovery added to improve resilience during failed imports or workspace restoration scenarios.
Changed
  • AI chat interaction clarity improved, including stronger stream timeout handling for more reliable conversational flows.
  • Editor debugging surfaces expanded with richer AI debug actions and enhanced architecture lens visibility.
  • Incident verification workflows hardened with stricter verify-first release gating behavior.
  • Workspace import pipeline strengthened with additional hardening safeguards.
  • Organization and documentation domain references migrated to chistiq / www.workspai.com.
Fix
  • Stream timeout instability and chat clarity regressions addressed in AI interaction flows.
  • Verification gate edge cases in incident release workflows resolved to reduce release validation failures.
  • Workspace import robustness issues mitigated through recovery and defensive import handling.
Other
  • This release primarily focuses on platform stabilization, reliability improvements, and operational hardening across AI, Editor, Incident, and Workspace flows.
  • Recommended release verification steps remain: npm run compile and npm run build prior to VSIX publishing or marketplace release creation.
  • Commit scope included in this release covers the latest delivery set through v0.30.0.
  • ce4ee8b — feat(studio): clarify structured AI response cards
  • e1daab1 — fix(ai): improve chat clarity and stream timeout
  • d630705 — feat(ai): surface modal evidence contract
  • aeebc0b — feat(editor): enrich AI debug actions and architecture lens
  • 262f407 — fix(incident): harden verify-first release gates
  • 551a9d1 — feat(ai): add output quality gate
  • 6709580 — feat(workspace): add snapshot recovery and import hardening
  • 59aa208 — chore: migrate organization and domain references

v0.29.1

2026-05-23Release
New
  • Consolidated a significant set of stabilization and governance improvements since v0.29.0 including AI runtime lifecycle hardening, memory-policy contract exposure and enforcement, provenance/export reliability improvements, and Incident Studio (vNext) delivery as an opt-in webview.
  • Removed an embedded non-English string in src/commands/aiFreeFeatures.ts and sanitized generated artifacts.
  • Made a deterministic textual ordering alignment in src/ui/panels/welcomePanel.ts to keep contract-based tests stable (no runtime behavior change).
  • Validated full source with npm run compile, npm run typecheck, and npx vitest run (all tests green).
  • 2ff3a50 — chore: commit rapidkit-vscode stable extension changes; preserve current stable AI feature base
  • touched: README.md, src/commands/aiFreeFeatures.ts, src/commands/chatParticipant.ts, src/commands/incidentStudioNext.ts, src/ui/panels/welcomePanel.ts, src/ui/panels/incidentStudioPanel.ts, webview redesign files under webview-ui/src/components/StudioRedesign/, webview-ui/src/lib/studioFeatureFlags.ts, webview-ui/esbuild.js
  • notes: localization cleanup, deterministic textual-order alignment to satisfy contract tests, and in-tree Studio redesign (opt-in).
  • ead47c2 — feat(workspace): add autopilot release command integration
  • touched: package.json, src/commands/workspaceOperations.ts, src/test/driftGuard.test.ts, src/ui/panels/welcomePanel.ts
  • 05c2c3d — stabilization: extract creation/report lanes in welcome panel
  • touched: src/ui/panels/welcomePanel.ts
  • 19af650 — stabilization: isolate activation and incident lanes (wave 2)
  • touched: src/extension.ts, src/ui/panels/welcomePanel.ts
  • 96a6fab — fix(stabilization): harden polyglot watchers and AI stream reliability
  • touched: src/core/aiModelSelection.ts, src/core/aiService.ts, src/extension.ts, src/ui/panels/welcomePanel.shared.ts, src/ui/panels/welcomePanel.ts

v0.29.0

2026-05-19Release
New
  • Welcome panel chat brain tracking support via new panel helper module:
  • src/ui/panels/welcomePanelChatBrainTracking.ts
Changed
  • AI stream/runtime stabilization finalized across host and panel paths:
  • deterministic model alias matching and safer model fallback behavior
  • request timeout and cancellation lifecycle hardening in stream execution
  • stream done signaling tightened to avoid duplicate terminal events
  • module suggestion parsing and AI response handling made more defensive
  • Command path typing hardening (enterprise consistency):
  • legacy command handlers migrated from unsafe any usage to guarded typed/unknown flows
  • workspace/project selection command contracts aligned with provider models
  • project creation command imports normalized to static imports and strict error narrowing
  • Doctor and provenance command reliability improved through strict typing and safer contract parsing.
Fix
  • Type contract regressions blocking compile in workspace/project selection integration (workspaceSelection <-> extension wiring).
  • Add module command type-safety bug in slug resolution and selected-project payload narrowing.
  • AI service test parity updated to match cancellation semantics and prevent stale done-event assumptions.
Verification
  • Full validation run for this release window passed:
  • npm run compile
  • npm run test (all test files passing)
  • Lint remains warning-only for known non-blocking debt outside this release scope.
  • Commit scope included in this release is the full range from tag v0.28.0 to current HEAD:
  • e68f54e refactor(stabilization): inline ui preference workspace path resolver
  • 8c3bd0b refactor(stabilization): inline workspace project discovery deps wrapper
  • 1c65c59 refactor(stabilization): inline incident primary cta experiment variant wrapper
  • f275da1 refactor(stabilization): extract telemetry workspace path resolver helper
  • 25f6410 refactor(stabilization): inline nonce generation helper
  • 4283cbd refactor(stabilization): inline prediction confidence band helper
  • ea32346 refactor(stabilization): inline incident rollback protected path helper
  • e8c9162 refactor(stabilization): inline incident rollback approval/protection helpers
  • 6ec502a refactor(stabilization): inline chatbrain fallback helper calls
  • 2e7526c refactor(stabilization): inline sandbox verify helper calls
  • 396efbe refactor(stabilization): inline ui preference helper calls
  • 1a65fca refactor(stabilization): extract chatbrain request tracking helpers
  • 4a92cbd refactor(stabilization): extract sandbox verify parsing helpers
  • c1013c7 refactor(stabilization): extract chatbrain fallback helpers
  • db82945 refactor(stabilization): extract ui preference helpers from welcome panel
  • a03b363 refactor(stabilization): extract telemetry experiment helpers from welcome panel
  • 7d725cb refactor(stabilization): split incident policy helpers from welcome panel
  • 7df368e refactor(stabilization): reduce any debt in extension lifecycle and setup panel
  • 423f4a1 refactor(stabilization): enforce lint budget and harden workspace operations
  • 0ea490d refactor(stabilization): tighten command item typing in workspace selection
  • d8ec173 refactor(stabilization): harden createWorkspace typing contracts
  • ef7602d fix(stabilization): harden gates typing and observability
  • 5d83228 chore: harden release gate, memory policy, and repro-pack safety

v0.28.0

2026-05-13Release
New
  • Enterprise E1/E2 execution slice shipped across Incident Studio contracts:
  • E1 baseline hardening with versioned cross-service impact score contract (v1) and execution-complete confidence/scope safeguards.
  • E2.1 local-processing memory policy profile exposure (policyProfile, sensitivity, localProcessingMode) in host and payload contracts.
  • E2.2 memory write-access contract enforcement for workspace memory write paths.
  • E2.3 repro-pack sensitivity labels end-to-end (host evidence, payload normalization, UI rendering, and export bundle contract).
  • E2.4 memory influence audit timeline linked to decision artifacts across host -> payload -> UI -> export flow.
  • E2.5 security review hardening coverage for memory/export paths (contract/drift/test enforcement).
  • Release governance tooling:
  • scripts/export-open-issues-report.mjs added for release issue-severity evidence export.
  • release-stop gate integration and workflow usage for open-issue severity blocking.
Changed
  • CI release gate enforcement strengthened:
  • .github/workflows/extension-smoke-matrix.yml now enforces release-stop checks with open-issue severity inputs.
  • scripts/release-stop-gate.mjs and package scripts aligned to stricter stop-gate behavior.
  • Incident Studio host/webview contracts updated for memory-policy governance, repro-pack security labels, and artifact-linked audit timeline evidence.
  • Impact and architecture reasoning safety strengthened through updated system graph and lens contracts, with expanded scenario and fixture coverage.
Fix
  • Fail-closed mutation safety regressions prevented with expanded drift guard and flow-level assertions for unknown-scope and policy-bound routes.
  • Memory/export redaction consistency tightened so sensitive fields remain sanitized in normalized payloads and link-safe bundle exports.
Verification
  • Core enterprise stabilization suites for E1/E2 slices pass in the release range:
  • src/test/impactScoreScenarioMatrix.test.ts
  • src/test/systemGraphIndexer.test.ts
  • src/test/workspaceMemoryService.test.ts
  • src/test/incidentReproPackUtils.test.ts
  • src/test/incidentStudioPayload.test.ts
  • src/test/AIIncidentStudio.interaction.test.ts
  • src/test/driftGuard.test.ts
  • Commit scope included in this release is the full range from tag v0.27.3 to current HEAD.

v0.27.3

2026-05-12Release
New
  • Incident Studio policy modules — added new policy/evidence helper modules under src/ui/panels/:
  • incidentStudioPolicyGates.ts
  • incidentStudioResponseValidator.ts
  • incidentStudioVerifyRerun.ts
  • incidentStudioVerifyDiff.ts
  • incidentStudioEvidenceMapping.ts
  • incidentStudioEvidenceProvenance.ts
  • incidentStudioConfidenceUI.ts
  • incidentStudioExportProvenance.ts
  • Core backend contract modules:
  • src/core/backendFrameworkContract.ts (framework/runtime -> stack contract)
  • src/core/verifyPackContractExporter.ts (export verify-pack contract to .rapidkit/reports)
  • src/core/workspaceHygieneProbes.ts (duplicate-deps, SCM hygiene, README framework alignment)
  • Parity snapshot automation — added deterministic shared snapshot sync/check commands:
  • sync:parity-snapshot
  • check:parity-snapshot
  • contracts/backend-import-stack-parity.snapshot.json
  • scripts/sync-import-stack-parity-snapshot.mjs
  • Release notes artifact — added releases/RELEASE_NOTES_v0.27.3.md.
  • Regression suites — added focused test coverage for policy gates, verifier rerun/diff, evidence provenance/export, response contract validation, workspace boundary matching, and parity snapshot checks.
Changed
  • Incident Studio claim coherence (webview) — webview-ui/src/components/AIIncidentStudio.tsx now enforces NO-GO/verify-gate truth in UI claims:
  • blocks success messaging when verify/release gates are unsatisfied
  • downgrades GO to gated HOLD when verify completion gates are not met
  • surfaces explicit scope-truth and flow-vs-telemetry labels
  • guided mode now renders deterministic next+verify intent chips and hides dense action board panel
  • Command transport + display separation:
  • execution path normalized to portable npx --yes --package rapidkit rapidkit ...
  • user-facing command rendering simplified to rapidkit ...
  • applied across Incident Studio, command reference, and welcome panel pathways
  • Workspace stabilization telemetry model (src/utils/workspaceUsageTracker.ts):
  • added thresholds/metrics/gates for:
  • routeFallbackNonSuccessShare
  • verifyIncompleteWarningRate
  • topVerifyPathMissReasonShare
  • propagated to payload contract types and Incident Studio KPI cards/exports
  • Welcome panel runtime hardening (src/ui/panels/welcomePanel.ts):
  • explicit shell dispatch per OS for terminal-bridge execution
  • incident telemetry refresh wrapped with safe fallback postMessage
  • command scope detection expanded for workspace-level rapidkit actions
  • Release gate enforcement in CI — removed KPI bypass from smoke matrix release gate and switched to fixture-backed inputs (wave3-kpi-marker, claim checklist, enterprise gate, release posture label).
  • Formatting gate in CI — added format:check to smoke workflow (non-Windows) for local/CI parity.
Fix
  • Workspace path prefix-collision bug — src/utils/findWorkspace.ts now uses normalized boundary-safe containment checks, so sibling paths like workspace-other are no longer treated as nested under workspace.
  • Doctor command messaging parity — doctor evidence tooltips/context hints now use the portable canonical invocation.
  • Formatting consistency in release branch — normalized prettier formatting on high-churn files used by validation.
Showing the latest 12 of 57 published releases.Browse full history

Workspai CLI · same workspace truth