# Changelog

All notable changes to Z3r0 are documented in this file.

## [0.2.0] - 2026-06-10

### Added

- Added WorkProject attack-chain graphing with assets, findings, attack paths, and auditable record snapshots.
- Added project workspace views for graph exploration, record review, and richer project editing.
- Added Mermaid diagram enforcement and rendering in playground transcripts.

### Changed

- Refined WorkProject tool contracts around assets, findings, task summaries, shared task updates, graph edges, and attack paths.
- Improved project graph layout, task label wrapping, and frontend resource presentation.
- Repositioned README and landing copy around authorized red-team research and controlled multi-agent workflows.

### Fixed

- Consolidated WorkProject record snapshot flow and hardened record persistence.
- Aligned generated API contracts, frontend constants, and backend tool schemas for WorkProject records.
- Moved JWT authentication from bearer authorization to the custom access-token header contract.

## [0.1.1] - 2026-06-05

### Added

- Added paginated `read_subagent_task(run_id, offset)` result and error reads so large subagent outputs can be consumed in chunks.
- Added subtle playground message scrollbars that appear during wheel, touch, and keyboard scrolling.

### Changed

- Kept subagent completion notifications metadata-only; parent agents now read result bodies through `read_subagent_task`.
- Split Vite app and landing entrypoints into dedicated root/config files.

### Fixed

- Kept subagent streams alive across main agent graph rebinds by giving each subagent driver its own bound graph.
- Hardened instance config refresh and agent pool rebuild handling, including restart reporting and rollback on rebuild failure.
- Replaced frontend-only random agent row IDs with stable agent codes in system configuration editing.
- Stored sandbox image size as `bigint`.

## [0.1.0] - 2026-06-03

### Added

- Initial public preview release of Z3r0.
- Multi-agent security workbench with coordinator and specialist agents for code audit, intelligence, penetration validation, reverse engineering, and cryptography review.
- FastAPI backend with authentication, system configuration, work projects, sandbox image/container management, and agent session APIs.
- React workbench with playground chat, session replay, subagent progress, sandbox selection, file manager, shell access, and admin pages.
- Docker-backed sandbox execution for controlled command execution, async jobs, browser/noVNC workflows, and file access.
- Interrupt-driven agent runtime with resumable turns, async command completion notifications, subagent delegation, and context compaction.
- Persistent timeline event log for live streaming and replay.
- Docker Compose production quickstart with PostgreSQL and bundled frontend serving.

### Security

- Added explicit authorized-use and legal boundary documentation.
- Runtime configuration uses local `.z3r0/config.json`, with `.z3r0/config.json.example` as the tracked template.
- Sandbox and Docker socket access are documented as high-privilege deployment surfaces.

### Known Notes

- `docker-compose.prod.yml` includes default PostgreSQL and pgAdmin credentials for local evaluation; change them before exposing the service.
- The application container mounts `/var/run/docker.sock`; deploy only on trusted, isolated hosts.
