Merge dev to main: Publish docs site with updated messaging

.changeset/audit-onboarding-skill-guards.md

@@ -0,0 +1,5 @@
+---
+'@bradygaster/squad-cli': patch
+---
+
+Add defensive guards from architecture audit: (1) verify roster is populated after team creation before dispatching to coordinator, preventing empty-roster dispatch loops; (2) warn when `squad upgrade` overwrites customized built-in skills

.changeset/builtin-skills.md

@@ -0,0 +1,17 @@
+---
+"@bradygaster/squad-cli": minor
+---
+
+Ship 8 built-in skills with squad init/upgrade (#788)
+
+New skills distributed automatically on `squad init` and `squad upgrade`:
+- **error-recovery** — graceful failure handling patterns
+- **secret-handling** — credential safety and secrets management
+- **git-workflow** — branch management and commit conventions
+- **session-recovery** — checkpoint and recovery patterns
+- **reviewer-protocol** — code review gate patterns
+- **test-discipline** — test-first discipline and coverage
+- **agent-collaboration** — multi-agent handoff patterns
+- **squad-conventions** — (already shipped, now part of curated set)
+
+All skills are squad-owned (`overwriteOnUpgrade: true`) and update on upgrade.

.changeset/cleanup-ceremony.md

@@ -0,0 +1,12 @@
+---
+"@bradygaster/squad-cli": minor
+---
+
+Add cleanup watch capability for stale file housekeeping (#791)
+
+- New `cleanup` capability in the `housekeeping` phase
+- Clears `.squad/.scratch/` (all ephemeral temp files)
+- Archives orchestration-log and session-log entries older than 30 days
+- Warns about stale decision inbox files (>7 days)
+- Configurable: `everyNRounds` (default: 10), `maxAgeDays` (default: 30)
+- 12 new tests

.changeset/contamination-guard.md

@@ -0,0 +1,8 @@
+---
+---
+
+ci: add PR contamination prevention guard
+
+New diff-guard CI check warns when single-commit PRs touch 30+ files
+(likely branch contamination). Updated copilot-instructions with branch
+creation and staging safety rules.

.changeset/dynamic-state-discovery.md

@@ -0,0 +1,5 @@
+---
+'@bradygaster/squad-cli': patch
+---
+
+Replace hardcoded state artifact lists with dynamic directory scanning in externalize/internalize, preventing silent orphaning when new `.squad/` artifacts are added.

.changeset/external-capability-loading.md

@@ -0,0 +1,9 @@
+---
+'@bradygaster/squad-cli': minor
+---
+
+feat(watch): load external WatchCapabilities from .squad/capabilities/
+
+Users can now define custom watch capabilities as .js files in `.squad/capabilities/`.
+Each file default-exports a WatchCapability object (name, phase, preflight, execute).
+Capabilities are loaded at watch startup and participate in the normal phase-based round cycle.

.changeset/external-state.md

@@ -0,0 +1,16 @@
+---
+"@bradygaster/squad-sdk": minor
+"@bradygaster/squad-cli": minor
+---
+
+Add external state storage — move .squad/ out of the working tree (#792)
+
+- New `stateLocation: 'external'` option in `.squad/config.json`
+- `resolveExternalStateDir()` resolves state under the platform-specific global Squad directory (`resolveGlobalSquadPath()`)
+- `deriveProjectKey()` generates a stable key from the repo path (cross-platform)
+- `resolveSquadPaths()` honors external state location
+- `squad externalize` moves state out, `squad internalize` moves it back
+- State survives branch switches, invisible to `git status`, never pollutes PRs
+- Thin `.squad/config.json` marker stays in repo (gitignored)
+- Path traversal protection on projectKey
+- 12 new tests

.changeset/fact-checker-agent.md

@@ -0,0 +1,12 @@
+---
+"@bradygaster/squad-sdk": minor
+"@bradygaster/squad-cli": minor
+---
+
+Add fact-checker as a built-in agent role (#789)
+
+- New `fact-checker` role in the engineering role catalog (emoji: 🔍, category: quality)
+- Charter template at `templates/fact-checker-charter.md` with verification methodology
+- Added to `AGENT_TEMPLATES` for init scaffolding
+- Template manifest entry for init/upgrade distribution
+- Routing patterns: fact-check, verify, validate, audit, double-check, hallucination, devil's advocate

.changeset/fix-cast-base-path.md

@@ -0,0 +1,5 @@
+---
+'@bradygaster/squad-cli': patch
+---
+
+Passes repo root to LocalAgentSource instead of .squad/ dir, preventing a double-nested .squad/.squad/agents/ lookup. In remote mode, passes paths.teamDir (team repo root) so agents are discovered from the correct location.

.changeset/fix-changelog-gate.md

@@ -0,0 +1,5 @@
+---
+'@bradygaster/squad-cli': patch
+---
+
+Fix changelog-gate CI to accept .changeset/ files as alternative to direct CHANGELOG.md edits

.changeset/fix-copilot-message-flag.md

@@ -0,0 +1,11 @@
+---
+'@bradygaster/squad-cli': patch
+'@bradygaster/squad-sdk': patch
+---
+
+Fix obsolete --message flag in watch and loop commands
+
+Replace `--message` with `-p` across all watch capabilities and loop command.
+Use `copilot` directly on Windows to avoid .cmd console window issues,
+fall back to `gh copilot` on other platforms. Fix TOKEN_PATH typo in
+comms-teams.ts (pre-existing bug from #906).

.changeset/fix-detect-squad-dir-zero-deps.md

@@ -0,0 +1,7 @@
+---
+"@bradygaster/squad-cli": patch
+---
+
+fix(cli): revert detect-squad-dir to zero-dependency bootstrap
+
+The StorageProvider refactor (26047dc5) accidentally converted this bootstrap utility from raw node:fs to FSStorageProvider. This file runs before the SDK is loaded and must not depend on @bradygaster/squad-sdk. Adds regression guard test.

.changeset/fix-doctor-casting-upgrade.md

@@ -0,0 +1,5 @@
+---
+'@bradygaster/squad-cli': patch
+---
+
+Fix squad doctor and upgrade for insiders installs: add .squad/casting/ to ENSURE_DIRECTORIES, scaffold casting defaults from templates with permission-safe fallback, and clarify ESM warnings for global installs.

.changeset/fix-nap-archival-budget.md

@@ -0,0 +1,12 @@
+---
+"@bradygaster/squad-cli": patch
+---
+
+fix(nap): account for separator newlines in decision archival budget
+
+The budget calculation in archiveDecisions() did not account for the newline
+separators added during content reassembly. This caused the final recentContent
+to exceed DECISION_THRESHOLD even after archival. Fix adds reassemblyOverhead
+and per-entry separator bytes to the budget calculation.
+
+Closes #123

.changeset/fix-nap-subprocess-cwd.md

@@ -0,0 +1,9 @@
+---
+"@bradygaster/squad-cli": patch
+---
+
+fix(cli): wire --team-root / SQUAD_TEAM_ROOT into squad resolution for nap, status, and cost commands (#734)
+
+Commands that resolve .squad/ now respect the SQUAD_TEAM_ROOT env var (set by --team-root flag),
+fixing subprocess invocations (e.g. Copilot CLI bang commands) where process.cwd() differs from
+the interactive shell. Also improves the nap error message to show the searched directory.

.changeset/fix-onboarding-mode-bail.md

@@ -0,0 +1,5 @@
+---
+"@bradygaster/squad-cli": patch
+---
+
+fix: CLI no longer bails when configured is false; starts onboarding session instead (#843)

.changeset/fix-roster-sync.md

@@ -0,0 +1,5 @@
+---
+'@bradygaster/squad-sdk': patch
+---
+
+Sync squad.agent.md roster when agents added to team.md

.changeset/fix-silent-agent-md-skip.md

@@ -0,0 +1,6 @@
+---
+'@bradygaster/squad-cli': patch
+'@bradygaster/squad-sdk': patch
+---
+
+Warn when squad.agent.md template is missing during upgrade or init instead of silently skipping file creation. Adds `warnings` field to `InitResult` for structured error reporting.

.changeset/fix-team-root-all-commands.md

@@ -0,0 +1,5 @@
+---
+'@bradygaster/squad-cli': patch
+---
+
+Extend SQUAD_TEAM_ROOT to all resolveSquad() call sites for subprocess compatibility

.changeset/fix-triage-label-slug.md

@@ -0,0 +1,8 @@
+---
+'@bradygaster/squad-sdk': patch
+'@bradygaster/squad-cli': patch
+---
+
+Fix triage label slug derivation: use `slugify()` instead of `toLowerCase()` so multi-word agent names produce valid GitHub labels (e.g. "Steve Rogers" → `squad:steve-rogers` instead of `squad:steve rogers`).
+
+Pre-create all `squad:{member}` labels at watch startup via `ensureTag()` so `gh issue edit --add-label` never fails on missing labels.

.changeset/fleet-dispatch-hybrid.md

@@ -0,0 +1,5 @@
+---
+"@bradygaster/squad-cli": minor
+---
+
+Add /fleet hybrid dispatch mode for squad watch --execute (#775) — enables parallel issue analysis via Copilot CLI /fleet, 2.9x faster than sequential dispatch for read-heavy work

.changeset/git-state-backends.md

@@ -0,0 +1,17 @@
+---
+"@bradygaster/squad-sdk": minor
+"@bradygaster/squad-cli": minor
+---
+
+feat(sdk): git-notes + orphan-branch state backends for .squad/
+
+Adds two git-native state storage backends as alternatives to the worktree
+and external directory approaches:
+
+- **git-notes** (`refs/notes/squad`): State stored in git notes ref. Survives
+  branch switches, invisible in diffs and PRs.
+- **orphan-branch** (`squad-state`): Dedicated orphan branch with no common
+  ancestor. State files never appear in main.
+
+Configure via `.squad/config.json`: `{ "stateBackend": "git-notes" }` or
+the `--state-backend` CLI flag.

.changeset/init-upgrade-parity-tests.md

@@ -0,0 +1,8 @@
+---
+---
+
+test: add init/upgrade/doctor parity test suite
+
+7 tests verifying that init and upgrade produce equivalent scaffolding.
+Guards against drift where new init features (like casting) are not
+mirrored in upgrade.

.changeset/loop-command.md

@@ -0,0 +1,9 @@
+---
+"@bradygaster/squad-cli": minor
+---
+
+feat(cli): Add `squad loop` command — prompt-driven continuous work loop
+
+New `squad loop` command reads a `loop.md` file and runs it as a continuous work loop.
+No GitHub issues required — the prompt is the work driver. Includes `--init` to scaffold
+a boilerplate loop file, frontmatter validation, and composable capability flags.

.changeset/manifest-driven-skills.md

@@ -0,0 +1,17 @@
+---
+"@bradygaster/squad-sdk": patch
+"@bradygaster/squad-cli": patch
+---
+
+fix: use TEMPLATE_MANIFEST to drive skill installation instead of wholesale directory copy
+
+Both sdkInitSquad() and syncAllSkills() previously copied the entire templates/skills/
+directory, ignoring the curated 8-skill subset declared in TEMPLATE_MANIFEST.
+This meant all 37+ template skills shipped on every init/upgrade, and
+overwriteOnUpgrade was never consulted.
+
+Now both code paths iterate TEMPLATE_MANIFEST entries:
+- init (SDK): only the 8 manifest skills are copied on first init
+- upgrade (CLI): syncAllSkills() reads manifest entries, respects overwriteOnUpgrade
+
+Fixes #833

.changeset/monorepo-subfolder-support.md

@@ -0,0 +1,8 @@
+---
+"@bradygaster/squad-cli": patch
+"@bradygaster/squad-sdk": patch
+---
+
+fix: monorepo subfolder support — never run git init (#939)
+
+When `squad init` runs in a subfolder of a monorepo, place `.github/agents/squad.agent.md` at the git root and `.squad/` in the subfolder. Never run `git init`.

.changeset/pid-tracker-cleanup.md

@@ -0,0 +1,9 @@
+---
+'@bradygaster/squad-cli': patch
+---
+
+fix(watch): track child process PIDs and cleanup orphans on exit
+
+Prevents MCP server process leaks during long-running watch sessions.
+Tracks PIDs of spawned copilot sessions, kills them on exit/crash,
+and cleans up stale orphans from previous crashed runs on startup.

.changeset/quiet-notifications.md

@@ -0,0 +1,13 @@
+---
+"@bradygaster/squad-cli": minor
+---
+
+Add `--notify-level` to control watch round reporting noise (#803)
+
+- `--notify-level important` (default): only print rounds with actual work items
+- `--notify-level all`: print every round including empty (old behavior)
+- `--notify-level none`: suppress all round output
+- Add machine name (`os.hostname()`) and repo name to round headers for attribution
+  (shown in round headers when the board has items, and in "Board is clear" message)
+- Configurable via `.squad/config.json` watch section: `"notifyLevel": "important"`
+- Empty rounds silenced by default — no more "Round 160, Round 161" spam

.changeset/readiness-file-list.md

@@ -0,0 +1,7 @@
+---
+---
+
+ci: add file list with line stats to PR readiness comment
+
+The PR readiness bot now shows changed files with per-file addition/deletion
+counts, scope classification (Product/Infrastructure/Mixed), and totals.

.changeset/readiness-rerun.md

@@ -0,0 +1,8 @@
+---
+---
+
+ci: re-run PR readiness check after Squad CI completes
+
+Added workflow_run trigger to the readiness check so it refreshes after
+CI finishes. Uses PR API for draft status instead of env var (more reliable
+for workflow_run events). Includes 3 new draft-override tests.

.changeset/review-findings-fix.md

@@ -0,0 +1,5 @@
+---
+'@bradygaster/squad-cli': patch
+---
+
+fix: address post-merge review findings — catch unknown narrowing and deprecation warnings for start/rc commands

.changeset/scope-boundary-check.md

@@ -0,0 +1,8 @@
+---
+---
+
+ci: scope boundary enforcement for repo-health PRs
+
+New CI check that fails repo-health PRs if they modify product source
+code under packages/*/src/. Enforces separation between infrastructure
+and product changes.

.changeset/scratch-dir-utility.md

@@ -0,0 +1,10 @@
+---
+"@bradygaster/squad-sdk": minor
+---
+
+Add `.squad/.scratch/` directory for organized temp file management (#790)
+
+- `scratchDir()` — resolve and optionally create the scratch directory
+- `scratchFile()` — create named temp files inside `.scratch/`
+- Init scaffolds `.squad/.scratch/` and adds it to `.gitignore`
+- Agents and CLI should use these utilities instead of writing temp files to repo root

.changeset/self-upgrade.md

@@ -0,0 +1,12 @@
+---
+"@bradygaster/squad-cli": minor
+---
+
+Add `squad upgrade --self` to upgrade the CLI package itself (#798)
+
+- `squad upgrade --self` → installs `@bradygaster/squad-cli@latest` (stable)
+- `squad upgrade --self --insider` → installs `@bradygaster/squad-cli@insider` (prerelease)
+- After self-upgrade, automatically continues with repo upgrade to apply new templates
+- Detects package manager (npm/pnpm/yarn) from npm_config_user_agent
+- Clear error on permission denied (suggests sudo or npx)
+- Help text updated with new flags

.changeset/shell-injection-fixes.md

@@ -0,0 +1,12 @@
+---
+'@bradygaster/squad-sdk': patch
+---
+
+Eliminate shell injection vectors in scheduler and state backend
+
+- Replace all `execSync` calls with `execFileSync` using explicit argv arrays (no shell interpretation)
+- Refactor git helper functions to accept `string[]` instead of space-delimited strings
+- Add `validateTaskRef()` for scheduler script refs (rejects null bytes, newlines)
+- Add `validateStateKey()` for state backend keys (rejects null bytes, newlines, tabs, path traversal)
+- Validate script task refs at manifest parse time (defense-in-depth)
+- Add security-focused tests for both scheduler and state backend

.changeset/skill-security-scanner.md

@@ -0,0 +1,5 @@
+---
+'@bradygaster/squad-cli': patch
+---
+
+Add markdown-aware skill security scanner (Phase 1) to security-review.mjs. Scans .copilot/skills and .squad/skills markdown files for embedded credentials, download-and-execute patterns, and privilege escalation commands. Includes fenced code block suppression, inline code span suppression, and placeholder token detection. Zero false positives on existing 35 skill files.

.changeset/smart-pr-nudge.md

@@ -0,0 +1,8 @@
+---
+---
+
+ci: add smart PR nudge for stale PRs
+
+New workflow that runs on weekdays and posts actionable diagnoses on PRs
+stale for 7+ days. Checks CI status, unresolved threads, missing reviews,
+outdated branches, and draft status. Won't nudge the same PR twice per week.

.changeset/start-tunnel-node-pty.md

@@ -0,0 +1,5 @@
+---
+'@bradygaster/squad-cli': patch
+---
+
+Validate node-pty availability before side effects in squad start --tunnel

.changeset/subprocess-integration-tests.md

@@ -0,0 +1,8 @@
+---
+---
+
+test: add Copilot CLI subprocess integration tests for SQUAD_TEAM_ROOT
+
+8 tests covering SQUAD_TEAM_ROOT env-var resolution, fallback to cwd,
+and resolveSquad() integration. Guards against subprocess working directory
+bugs in Copilot CLI bang commands.

.changeset/teams-adapter-fixes.md

@@ -0,0 +1,5 @@
+---
+'@bradygaster/squad-sdk': patch
+---
+
+Teams adapter: encode channelId in deep-link URL, log warning on icacls failure, add integration tests

.changeset/teams-adapter-security.md

@@ -0,0 +1,5 @@
+---
+'@bradygaster/squad-sdk': patch
+---
+
+Teams adapter token security: tenant-scoped token cache (keyed by tenant ID hash), explicit logout() for session teardown, 15-minute device-code timeout guard, stale token cleanup on permanent auth errors, per-instance user ID cache. Migration guide for async createCommunicationAdapter change.