Verified builds & checksums.

Multi-agent local orchestration, first-class Claude Code CLI execution, IDE workspace & file opening, advanced verification & handoff step primitives, truthful provider capabilities, and built-in ecosystem update engine.

Added

• Real Provider Capability Model with 15 granular flags (START_AGENT, SUBMIT_PROMPT, OPEN_FILE, HEADLESS, INTERACTIVE_ONLY, etc.) and SQLite detection hydration across restarts.
• First-class Claude Code CLI adapter executing non-interactive prompts with streaming terminal buffers, process tracking, and immediate cancellation.
• Advanced workflow step primitives: OPEN_FILE, VERIFY (with structured exit code, duration, pass/fail evaluation), and HANDOFF (packaging git state, changed files, and test summaries).
• Capability-based provider selection (requiredCapabilities) resolving dynamically at execution time.
• In-app update engine with cryptographic SHA-256 verification, semver negotiation, and offline resiliency.
• SINVAUX Ecosystem service detecting local Scaffold and Aftermath installations for unified desktop control.

Improved

• ProviderRegistry availability logic completely overhauled: eliminated fabricated fallbacks; providers only report AVAILABLE if detected or verified on host.
• Workflow stepper UI with dedicated verification scorecards and handoff inspection drawers.
• Command palette (Ctrl+K) quick actions for pending approvals and workflow control.

Fixed

• Approval TOCTOU race prevention: step execution validates immutable SHA-256 snapshot of command, args, cwd, and target files before running.
• Workspace concurrency conflicts: strict exclusive locking prevents simultaneous conflicting missions or workflows on the same repository.

Known Invariants & Boundaries

• Windows 10/11 x64 primary platform. Direct process spawning uses shell: false to guarantee immunity to command injection vulnerabilities.
• GUI IDE adapters (Antigravity, Cursor, VS Code) open workspaces and files natively, but correctly declare interactiveOnly without simulating phantom CLI prompt capabilities.

Controlled local orchestration layer: sequential workflows, APPROVE_EACH human-in-the-loop gating, workspace locking, and restart recovery.

Added

• Workflow engine supporting sequential step execution with RUN_MISSION, RUN_TESTS, and OPEN_WORKSPACE.
• APPROVE_EACH security policy requiring explicit cryptographic confirmation prior to executing consequential steps.
• WorkspaceLockService enforcing exclusive execution per repository directory.
• Crash and restart recovery re-evaluating pending workflows from durable SQLite state.

Improved

• MissionManager process output capturing with rolling circular line buffers.

Fixed

• Prevented concurrent step execution on identical working directories.

Known Invariants & Boundaries

• Interactive IDE tools cannot be driven headless via CLI prompt in v0.2.

Initial standalone developer command center: project registry, process manager, read-only Git state observer, and SQLite persistence.

Added

• Project registry with path canonicalization and duplicate prevention.
• Direct process spawning with shell: false and bounded memory buffers.
• Read-only Git observer reading branch, commit log, and dirty status.
• Provider detection querying Windows PATH and standard registry locations.

Known Invariants & Boundaries

• Scaffold independence guaranteed; no coupling to external cloud backends.