# PatchPilot v1.2.0

## Highlights

- Makes the fullscreen shell the stable default, with a compact header, command palette, animated run status, artifacts bar, saved-cost counter, cursor-aware composer, and a `/theme` switch back to the legacy layout.
- Adds context storage and compaction primitives plus `/context` and `/compact` commands so long sessions can preserve useful workspace state without replaying noisy transcripts.
- Adds composable ultra modes: `ultramaxx`, `ultrafast`, `ultracheap`, `ultrafocus:<path>`, and `ultraloop`, with conflict checks and visible keyword styling.
- Adds first-run preferences for default mode, reasoning, thinking budget, and subagents, plus a use-at-your-own-risk acceptance step before onboarding continues.
- Adds Windows hardening for clipboard image paste, path/attachment parsing, Codex CLI launcher resolution, and Gemini-Wrapper bootstrap commands.

## Fixed

- Hardened shell approvals so pipes remain supported, `&&` and `;` are available only through `/experimental shell-metacharacters`, and redirects, expansion, background jobs, OR chains, multiline commands, and glob expansion require explicit approval even in build+bypass.
- Fixed `/write on` and `/shell on` so they no longer bypass the trusted-workspace confirmation panel.
- Fixed fake success for unknown `/experimental` flags by validating supported flags before persisting settings.
- Fixed external-file approval bypass behavior, shell path guards, attachment context handling, and secret/path checks around workspace tools.
- Fixed Gemini-Wrapper re-auth flows so expired cookies can trigger an approval-style refresh panel and failed prompts can retry after refresh.
- Fixed provider retry behavior, todo-only/fake final handling, TUI prompt handling, composer cursor behavior, run-status randomization, and overlay layout clipping.

## Improved

- Refreshes README guidance for the default shell, ultra modes, context commands, shell-metacharacter controls, onboarding disclaimer, remote host setup, and the current safety model.
- Refreshes the npm lockfile with `npm update` and keeps the package verification surface aligned with the current dependency graph.
- Adds broader Vitest coverage for context storage, compaction, shell guards, command help, layout math, clipboard, attachments, provider retry helpers, ultra modes, and Windows-oriented path behavior.

## Pull Requests

- #23 PatchPilot deep-dive hardening and context system.
