tamirdresher · Nov 9, 2026 · Nov 9, 2026
@@ -8,7 +8,31 @@ All notable changes to this project will be documented in this file.
 
 - Stable `v1.1.0` predates the following fixes; merging them into `dev` did not publish a fixed stable package. Carry these notes into the next stable release when it is actually promoted. No stable version or publication date is assigned here.
 - `squad upgrade --self --dry-run` reports the planned upgrade without installing it. `squad upgrade --state-backend orphan --dry-run` also avoids backend migration, source deletion, config changes and hook installation (#2303, #2295). Available in `v2.0.0-preview.2` and later previews, not stable `v1.1.0`.
-- `squad memory` and `memory.*` share the backend-aware governed store (#2317, #2316), so CLI writes and MCP searches use the same storage. Available in `v2.0.0-preview.3`, not stable `v1.1.0`. Existing-memory backend migration is a separate issue (#2425).
+- `squad memory` and `memory.*` share the backend-aware governed store (#2317, #2316), so CLI writes and MCP searches use the same storage. Available in `v2.0.0-preview.3` and later previews, not stable `v1.1.0`. Transactional existing-memory backend migration (#2425, #2439) is available in `v2.0.0-preview.4`.
+
+## [2.0.0-preview.4] - 2026-11-09
+
+Fourth Squad 2.0 preview. This release completes the repository migration to `github/squad` across published npm and NuGet package metadata, runtime links, templates, documentation, and `gh-aw` workflow package identity, adds transactional governed-memory backend migration with source-branch casting ownership, and includes memory lock coordination and Copilot SDK runtime compatibility fixes. npm continues to use `insider` as the canonical dist-tag with `preview` as a compatibility alias; `latest` remains on 1.1.0.
+
+### Added
+
+- Expose versioned machine-readable runtime and state-backend metadata in health reports (#2384).
+
+### Changed
+
+- Complete the repository move to `github/squad`: update published npm and NuGet metadata, SDK build and distribution defaults, CLI and SDK user-facing links, `squad init` templates, documentation links (`github.github.com/squad`), and the `gh-aw-enlistment` skill and install verifier for the `github/squad/workflows` package identity, explicit `SQUAD_SHA` manifest preflight verification, and legacy `bradygaster/squad/workflows` migration (#2408, #2410, #2411, #2412, #2432, #2433, #2435).
+- Keep all `.squad/casting/` configuration on the normal source branch across every state backend, refresh managed git hooks to remove the obsolete casting staging block, reject runtime casting policy mutations, and align memory and identity safeguards with their actual scope (#2229, #2439).
+
+### Fixed
+
+- Preserve governed memory transactionally when migrating `local` or `worktree` storage to `orphan` or `two-layer` storage, including decision inbox records, the array index, configuration, audit archives, and tombstones; abort on destination conflicts or transfer errors before switching backend authority and retain source files until the configuration write succeeds (#2425, #2439).
+- Serialize governed-memory index updates across local store instances and processes, and coordinate memory index locks across worktrees with the configured state backend (#2356, #2383).
+- Hold `@github/copilot-sdk` below `1.0.29` so fresh installs do not fail with `ERR_PACKAGE_PATH_NOT_EXPORTED` when `vscode-jsonrpc` 10 breaks the CLI's ESM import patch, and support the Copilot SDK bundled runtime in `Squad.Agents.AI` (#2373, #2414, #2416).
+- Read legacy `## Role` and `## Owns` charter sections during team capability advertisement so declared implementers and reviewers are not reported as advisory-only (#2381).
+- Preserve customized `squad-ci` workflows during `squad upgrade` (#2382).
+- Return a failing exit status from `squad doctor` when validation checks fail (#2376).
+- Replace the invalid `\Z` regex anchor in `history-shadow` section parsing so terminal sections match without duplicating headers and keep a blank line before the next section (#2374).
+- Bind standalone archive checksums to validation records before release upload and remove deprecated Homebrew cask syntax from `generate-packaging.mjs` (#2377, #2437).
 
 ## [2.0.0-preview.3] - 2026-10-29
 

@@ -17,7 +17,7 @@ Create a normal release-preparation PR targeting `dev`. Keep the root, SDK, and
 CLI versions in lockstep:
 
 ```bash
-VERSION=2.0.0-preview.3
+VERSION=2.0.0-preview.4
 npm version "$VERSION" --workspaces --include-workspace-root --no-git-tag-version
 npm pkg set "dependencies.@bradygaster/squad-sdk=>=$VERSION" \
   --workspace @bradygaster/squad-cli
@@ -27,7 +27,7 @@ npm install --package-lock-only
 Add an exact changelog heading:
 
 ```markdown
-## [2.0.0-preview.3] - YYYY-MM-DD
+## [2.0.0-preview.4] - YYYY-MM-DD
 ```
 
 Before merging, verify:
@@ -45,11 +45,11 @@ Wait for `dev` CI to pass after the PR merges.
 
 ## Publish a preview
 
-Use a unique prerelease version such as `2.0.0-preview.3`. The release trigger
+Use a unique prerelease version such as `2.0.0-preview.4`. The release trigger
 is human-only and pins the exact reviewed commit:
 
 ```bash
-VERSION=2.0.0-preview.3
+VERSION=2.0.0-preview.4
 SHA=$(git rev-parse origin/dev)   # the reviewed dev tip, full 40-hex SHA
 gh workflow run squad-release.yml \
   --ref dev \
@@ -62,11 +62,11 @@ gh workflow run squad-release.yml \
 gh run watch
 ```
 
-For `2.0.0-preview.3`, reviewers and release owners explicitly hold Homebrew,
+For `2.0.0-preview.4`, reviewers and release owners explicitly hold Homebrew,
 WinGet, `latest`, and stable promotion. This dispatch publishes the npm pair
 (`insider` canonical plus the `preview` alias) and standalone artifacts only.
 `publish_package_managers=false` is required for this release; there is no
-preview.3 package-manager installation path.
+preview.4 package-manager installation path.
 
 Optional inputs: `npm_dist_tag` (`insider`, the default, or `preview`),
 `add_preview_alias` (default `true`), `build_standalone` (default `true`),
@@ -116,7 +116,7 @@ npm install -g @bradygaster/squad-cli@insider   # canonical self-upgrade channel
 npm install -g @bradygaster/squad-cli@preview   # compatibility alias
 ```
 
-Homebrew and WinGet are intentionally unavailable for preview.3.
+Homebrew and WinGet are intentionally unavailable for preview.4.
 
 Do not dispatch `squad-insider-publish.yml` for a prepared preview version: it
 computes and publishes its own `X.Y.Z-insider.N` snapshot version.
@@ -139,7 +139,7 @@ updates `squad-insider` in Homebrew, and opens or reuses the
 
 Prepare another PR that changes all package versions and the changelog heading
 from the prerelease version to stable `2.0.0`. A preview version cannot be
-converted in place after publication; `2.0.0-preview.3` and `2.0.0` are
+converted in place after publication; `2.0.0-preview.4` and `2.0.0` are
 different releases.
 
 After the stable preparation lands on `dev`, a human must run the promotion

@@ -6,6 +6,10 @@ Full release history for Squad — from beta through the v1 TypeScript replatfor
 
 ## v2.0.0 — Multi-Host Clients & Experimental Backend Contract
 
+### v2.0.0-preview.4 — `github/squad` repository identity, transactional memory migration, and source-branch casting
+
+`v2.0.0-preview.4` keeps `insider` as the canonical npm channel and `preview` as its compatibility alias while `latest` remains on v1.1.0. Published npm and NuGet metadata, runtime URLs, `squad init` templates, documentation links (`github.github.com/squad`), and the `gh-aw-enlistment` skill and install verifier now point at `github/squad` (`github/squad/workflows` with explicit `SQUAD_SHA` manifest verification and Windows/XDG `gh` extension environment preservation). Migrating `local` or `worktree` state to `orphan` or `two-layer` now transfers governed memory transactionally—including decision inbox files, the array index, configuration, audit archives, and tombstones—while keeping `.squad/casting/` on the source branch across all backends and coordinating memory index locks across processes and worktrees. This preview also holds `@github/copilot-sdk` below `1.0.29` to avoid `vscode-jsonrpc` 10 export errors, exposes machine-readable health metadata, reads legacy `Role`/`Owns` charter sections for capability advertisement, preserves customized `squad-ci` workflows during upgrade, returns a non-zero exit code from `squad doctor` on failure, and fixes `history-shadow` terminal section parsing.
+
 ### v2.0.0-preview.3 — safe legacy recovery, opt-in work claims, and a patched standalone runtime
 
 `v2.0.0-preview.3` keeps `insider` as the canonical npm channel and `preview` as its compatibility alias; `latest`, Homebrew, WinGet, and stable promotion remain held. Legacy Squad 0.9.x casting arrays now migrate natively when charter and assignment evidence is unambiguous, preserving identities, assignments, timestamps, and byte-exact originals. Ambiguous casting remains unchanged and is reported accurately, but no longer blocks managed bridge repair or the rest of `squad upgrade`. Optional built-ins remain opt-in with `squad roster add`, and multi-machine `squad watch` claims remain off by default (`--claims git-ref` enables them). Whatever claim provider is configured, `squad watch` now stops on a malformed, empty, or unreadable `.squad/config.json` (only a missing file selects defaults) or an invalid `watch.claims` value, applies `needs:*` capability routing, and never dispatches the same issue twice in one round.

@@ -1,6 +1,6 @@
 {
   "name": "@bradygaster/squad",
-  "version": "2.0.0-preview.3",
+  "version": "2.0.0-preview.4",
   "private": true,
   "description": "Squad — Programmable multi-agent runtime for GitHub Copilot, built on @github/copilot-sdk",
   "type": "module",

@@ -1,5 +1,23 @@
 # @bradygaster/squad-cli
 
+## 2.0.0-preview.4
+
+### Patch Changes
+
+- Complete the repository move to `github/squad` across published package metadata, CLI user-facing links, `squad init` templates, and the `gh-aw-enlistment` skill and install verifier (`github/squad/workflows` identity, explicit `SQUAD_SHA` manifest preflight verification, legacy `bradygaster/squad/workflows` migration guidance, Windows/XDG `gh` extension environment preservation, and first-install safe-update secrets).
+
+- Preserve governed memory transactionally when migrating `local` or `worktree` storage to `orphan` or `two-layer` storage, including decision inbox records, the array index, configuration, audit archives, and tombstones. Abort on destination conflicts or transfer failure before changing backend authority, and retain source files until the configuration write succeeds.
+
+- Keep all `.squad/casting/` configuration on the normal source branch for every state backend, refresh managed git hooks without retaining the obsolete casting staging block, reject runtime casting policy mutations, and align memory and identity safeguards and coordinator instructions with their actual scope.
+
+- Hold `@github/copilot-sdk` below `1.0.29` so interactive shell and Copilot features do not fail with `ERR_PACKAGE_PATH_NOT_EXPORTED` after a fresh install (#2414).
+
+- Expose versioned machine-readable runtime and state-backend metadata in health reports.
+
+- Preserve customized `squad-ci` workflows during `squad upgrade`.
+
+- Return a failing exit status from `squad doctor` when validation checks fail.
+
 ## 2.0.0-preview.3
 
 ### Minor Changes

@@ -1,6 +1,6 @@
 {
   "name": "@bradygaster/squad-cli",
-  "version": "2.0.0-preview.3",
+  "version": "2.0.0-preview.4",
   "description": "Squad CLI — Command-line interface for the Squad multi-agent runtime",
   "type": "module",
   "bin": {
@@ -179,7 +179,7 @@
     "node": ">=22.5.0"
   },
   "dependencies": {
-    "@bradygaster/squad-sdk": ">=2.0.0-preview.3",
+    "@bradygaster/squad-sdk": ">=2.0.0-preview.4",
     "@modelcontextprotocol/sdk": "^1.32.1",
     "ink": "^7.1.1",
     "react": "^19.3.0",

@@ -2,6 +2,24 @@
 
 <!-- cspell:words ambiently -->
 
+## 2.0.0-preview.4
+
+### Patch Changes
+
+- Point published package metadata, SDK build and distribution defaults, user-facing links, and the shipped `gh-aw-enlistment` skill and verifier at `github/squad` (`github/squad/workflows` package identity, explicit `SQUAD_SHA` manifest preflight verification, legacy migration guidance, and Windows/XDG `gh` extension environment preservation).
+
+- Keep `.squad/casting/` configuration on the normal source branch across every state backend, reject runtime casting policy mutations, and align memory and identity safeguards with their actual scope.
+
+- Serialize governed-memory index updates across local store instances and processes, and coordinate memory index locks across worktrees with the configured state backend.
+
+- Hold `@github/copilot-sdk` below `1.0.29` to prevent `vscode-jsonrpc` 10 ESM export errors in the CLI (#2414).
+
+- Expose versioned machine-readable runtime and state-backend metadata in health reports.
+
+- Read legacy `## Role` and `## Owns` charter sections during team capability advertisement so declared implementers and reviewers are not reported as advisory-only.
+
+- Fix `history-shadow` section parsing by replacing the invalid `\Z` regex anchor so terminal sections match without duplicate headers and preserve a blank line before the next section.
+
 ## 2.0.0-preview.3
 
 ### Minor Changes

@@ -1,6 +1,6 @@
 {
   "name": "@bradygaster/squad-sdk",
-  "version": "2.0.0-preview.3",
+  "version": "2.0.0-preview.4",
   "description": "Squad SDK — Programmable multi-agent runtime for GitHub Copilot",
   "type": "module",
   "main": "./dist/index.js",