Changed

• deps: Bump deepagents 0.4.3 → 0.5.6 with langchain stack pulled forward (anthropic 0.78→0.97, langchain 1.2.10→1.2.17, langchain-anthropic 1.3.3→1.4.2, langgraph 1.0.10rc1→1.1.10, langsmith 0.7.31→0.8.0) (#582)
• deps: Bump deepagents to 0.5.x; LocalSandbox callers must pass virtual_mode=False explicitly to keep the unrestricted path (#582)
• deps: Bump langchain-openai 1.1.9 → 1.1.14, python-multipart 0.0.22 → 0.0.26, langchain-core 1.2.22 → 1.2.28, lxml 6.0.2 → 6.1.0, python-dotenv 1.2.1 → 1.2.2, pillow 12.1.1 → 12.2.0 (#572, #576, #577, #578, #573)

Fixed

• knowledge: Switch PDF chunker to HybridChunker (cl100k_base, max 512 tokens) with a 64-token minimum filter, contextualize chunks with heading breadcrumbs, and unify the search similarity threshold at 0.3 — eliminates noisy single-token chunks and improves semantic relevance of top results (#587)
• knowledge: Drop document-text previews from the "tiny chunks" warning log to avoid leaking user-uploaded content into operator logs (#587)
• validation: Reject plans without task structure (missing ### Task N: headers) before processing, so architect raw output written to the wrong stage no longer slips through to execution (#580)
• dashboard: Use function-form manualChunks in vite.config.ts for compatibility with current Rollup/Vite types — restores broken dashboard build (#582)

Security

• deps: Patch Pygments 2.19.2 → 2.20.0 (Dependabot alert #39: ReDoS in GUID matching) (#580)
• deps: Patch transformers 4.57.6 → 5.6.2 via docling 2.73 → 2.91 (Dependabot alert #56: Trainer arbitrary code execution) (#580)
• deps: Patch lodash-es transitives → 4.18.1 via pnpm override (Dependabot alerts #50, #51: prototype pollution and code injection) (#580)
• deps: Patch uuid transitive → 14.0.0 via pnpm override (Dependabot alert #67: missing buffer bounds check) (#580)
• deps: Patch vite transitive → 6.4.2 via pnpm override in docs/site (Dependabot alert #55: path traversal in optimized deps .map handling) (#580)
• deps: Bump dompurify 3.3.2 → 3.4.0 (#575)
• deps: Bump postcss 8.5.6 → 8.5.12 in docs/site (#579)
• deps: Bump cryptography 46.0.6 → 46.0.7 (#572)
• deps: Bump uuid 11.1.0 → 11.1.1 in dashboard (#583)

• beagle-core: Add review-skill skill for automated skill PR review — validates structural validity, design quality, and marketplace consistency with reference checks for structure, design, and marketplace integration (#111)

Changed

• BREAKING: Merged beagle-meta into beagle-core — skill-builder and review-skill now live under beagle-core
• BREAKING: Merged beagle-remix-v2 into beagle-react — all 12 Remix v2 skills now live under beagle-react
• BREAKING: Delisted beagle-ai from marketplace (deprecated; files preserved on disk but removed from marketplace.json)

Removed

• docling, github-projects, sqlite-vec vendor skills from beagle-core
• beagle-meta plugin entry (merged into beagle-core)
• beagle-remix-v2 plugin entry (merged into beagle-react)
• beagle-ai plugin entry (delisted from marketplace)

• training: Corpus pipeline architecture — harvest, reward, bitemporal projection (#104)

  Introduces the daydream/training/ package with three pipeline stages: harvest collects ATIF trajectory runs from the archive into labeled training corpora, reward scores trajectory steps against configurable reward signals (cost efficiency, grounding accuracy, finding acceptance rate), and bitemporal projects reward labels back onto trajectory steps using both wall-clock and agent-logical timestamps. Designed for offline RL/RLHF fine-tuning loops over daydream's own review traces.

• training: JSONL exporter for ATIF trajectories (#95)

  Adds daydream training export subcommand to convert archived ATIF trajectory files into newline-delimited JSON suitable for ML training pipelines. Each trajectory step becomes one JSONL record with flattened token counts, cost, tool I/O, and phase labels.

• deep: Language-agnostic structural review meta-stack (#101)

  Adds a structural review pass that runs independently of per-language Beagle skills, analyzing cross-cutting concerns (API contract consistency, error propagation patterns, dependency direction violations) using tree-sitter parse trees. Activates automatically in deep mode when multiple stacks are detected.

• archive: Capture source_path in manifest and add harvest clone cache (#106)

  The archive manifest now records the absolute source_path of the reviewed repository, enabling corpus harvest to trace runs back to their origin repo. Adds a clone cache under ~/.daydream/harvest/clones/ so repeated harvests against the same repo skip redundant clones.

Changed

• docs: Rewrite README for research/ML audience (#107)

Fixed

• tests: Isolate DAYDREAM_ARCHIVE_DIR to stop polluting ~/.daydream/archive (#100)

  Tests that exercise archive functionality now use a temporary directory instead of the user's real archive, preventing test runs from creating stale entries in the production archive index.

• explore: Remove .coderabbit.yaml from pattern-scanner prompts (#96)

Security

• deps: Bump idna in the uv group (#97)

• Add global navbar with search and navigation
• Remove WikiLive internal navbar, integrate with global navbar
• Add navbar assigns to HomeLive, remove duplicate header
• Add placeholder SettingsLive page
• Wrap routes in live_session with NavbarHook
• Rewrite app/1 layout with global navbar
• Add Repositories.search/1 for navbar search
• Add NavbarHook for global search event handling
• Make DB port configurable via PEARL_DB_PORT env var
• Add docker-compose for Postgres 18 + pgvector

Fixed

• Preserve search input value and remove dead mobile button
• Update streaming tests for new ask button selector
• Remove unused inner_block slot and fix breadcrumb test
• Use @inner_content instead of render_slot(@inner_block) in layout
• Use pg18-compatible volume mount path in docker-compose

Changed

• Use Phoenix form component for navbar search

Documentation

• Add global navbar design document and implementation plan
• Fix plan doc inconsistencies from PR review
• Add docker compose and PEARL_DB_PORT to CLAUDE.md
• Docker-first setup instructions in README
• Add Docker Postgres setup implementation plan and design

Other

• Remove global navbar plan docs
• Add .beagle/ to gitignore