# PatchPilot v1.0.0

## Highlights

- Promotes PatchPilot to the first stable CLI release for visible, permissioned coding-agent runs across local, remote, and cloud model routes.
- Finishes the Gemini-Wrapper provider path with explicit cookie onboarding, manual/auto model modes, pinned managed bridge installation, and clearer failure messages.
- Adds real session resume context injection, model-driven `/init`, `/cleanup`, `/doctor fix`, and opt-in `/experimental` controls for subagents, file analysis, and memory.
- Improves the TUI with readable transcript text, scrollable command and session panes, bottom-aligned transcript rendering, approval key isolation, and clearer token/cost/cache labels.

## Fixed

- Fixed a permission escalation bug where `--apply`, `/write on`, or `/shell on` could collapse into full build+bypass mode. Partial permissions now stay partial; bypass only applies to explicitly enabled permission groups.
- Fixed shell confinement by blocking absolute shell path arguments outside the workspace and by detecting dangerous `git`/`npm` subcommands even after global options such as `git -C .` or `npm --prefix .`.
- Fixed stale `/experimental` toggles by making agent runs observe the latest file-analysis and memory settings.
- Fixed Gemini-Wrapper bridge timeout conversion so Python receives the configured seconds budget instead of a shortened fraction.
- Fixed Gemini-Wrapper startup so normal chat runs no longer install unpinned Python packages at runtime.

## Improved

- External file analysis now requires per-path approval and still rejects sensitive paths after resolution.
- `memory_remember` is treated as a durable write and requires write approval before persisting notes in SQLite.
- `/init` now asks the selected model to inspect the repository and write project-specific `PATCHPILOT.md` guidance instead of emitting generic boilerplate.
- Gemini-Wrapper documentation and README copy now label the route as advanced, unofficial, and explicit about session-cookie risk.
- npm metadata now points to the public PatchPilot project page.

## Pull Requests

- #20 Harden Gemini-Wrapper, TUI sessions, experimental tools, and v1 release posture.
