# PatchPilot v0.3.1-beta

## Highlights

- Clarifies the agent mode model: `plan` is read-only, `build` is approval-gated, and `build+bypass` is an explicit trusted-workspace mode.
- Adds a third Tab state for `build+bypass` with an in-TUI disclaimer that must be accepted before write and shell permissions are enabled.
- Keeps prerelease npm publishing on the `beta` dist-tag so stable installs remain on the latest stable release.

## Fixed

- Stops `build` mode from looking identical to `plan` by making approval-gated editing the visible behavior.
- Prevents accidental bypass activation from a normal mode toggle; users must explicitly accept the warning.
- Marks beta GitHub releases as prereleases and reads release notes from `docs/releases/<tag>.md`.

## Improved

- Header and sidebar now show `off`, `approval`, or `on` permissions based on the active mode instead of mixing mode and permission state.
- Slash commands document `/mode bypass` and `/bypass` as explicit advanced controls.
- Website-facing install flow can point users to the npm package instead of only GitHub assets.

## Pull Requests

- #17 Prepare v0.3.1 beta mode safety.
