v1.0.0

# 1.0.0 (2026-03-26)


### Bug Fixes

* add cache-busting param to screenshot URL ([#82](https://github.com/KeygraphHQ/shannon/issues/82)) ([4aee8db](https://github.com/KeygraphHQ/shannon/commit/4aee8db3d023414ca03f2d8f6220cf6181f06ed8))
* add chunked writing instructions to all agent prompts ([30b5522](https://github.com/KeygraphHQ/shannon/commit/30b5522647bdb76daa902e161208426f91d95d57))
* add file_path parameter to save_deliverable for large reports ([#123](https://github.com/KeygraphHQ/shannon/issues/123)) ([2f4fa89](https://github.com/KeygraphHQ/shannon/commit/2f4fa89e7b22396a0808421629d6bf100492e677))
* Add Linux support for Docker volume permissions ([11fdb69](https://github.com/KeygraphHQ/shannon/commit/11fdb69826ace61bba718c495fc846f151db7cf6))
* add universal billing error detection for router mode ([9606ffc](https://github.com/KeygraphHQ/shannon/commit/9606ffcf7024a3fd897e722615730e10bcd186c4))
* auto-detect Podman to avoid host-gateway incompatibility ([#117](https://github.com/KeygraphHQ/shannon/issues/117)) ([a5daa07](https://github.com/KeygraphHQ/shannon/commit/a5daa071788fb97a74d88dc236b930947b77d9ee))
* configure git to trust all directories in Docker ([515ade8](https://github.com/KeygraphHQ/shannon/commit/515ade8302716e76f66bbca59e38ab532fea920e))
* copy deliverables to audit-logs once at workflow end instead of per-agent ([7f9c5cc](https://github.com/KeygraphHQ/shannon/commit/7f9c5cc496c3d047ba6c7077bc23c92c3303a62f))
* critical bug - exploitation phase was always skipped ([cfe8dc8](https://github.com/KeygraphHQ/shannon/commit/cfe8dc8bc89f0feacd110b3576bc9a71fd9a0787))
* enable Playwright MCP browser automation in Docker containers ([f40f52f](https://github.com/KeygraphHQ/shannon/commit/f40f52f1181afa22074da4a2f2334e1d6e1903ee)), closes [#docker-playwright-browser-issues](https://github.com/KeygraphHQ/shannon/issues/docker-playwright-browser-issues)
* ensure deliverables directory is writable by container user ([#116](https://github.com/KeygraphHQ/shannon/issues/116)) ([24bcd29](https://github.com/KeygraphHQ/shannon/commit/24bcd29d978810fb8515ec6341f57fa8be039b36))
* err handling for claude code session limit ([cc36fe9](https://github.com/KeygraphHQ/shannon/commit/cc36fe933d61ec4618a2dba492034495ad556c4d))
* extend heartbeat timeout to prevent stalls during sub-agent execution ([#108](https://github.com/KeygraphHQ/shannon/issues/108)) ([9809c76](https://github.com/KeygraphHQ/shannon/commit/9809c769e30de19ade691ab21d879a5ea856918b))
* improve resume edge cases and shell quoting ([539bd87](https://github.com/KeygraphHQ/shannon/commit/539bd873cc8f62cf43caa83f7cafa2f21f511071))
* mount repos and configs directories into worker container ([#107](https://github.com/KeygraphHQ/shannon/issues/107)) ([2e9ee2a](https://github.com/KeygraphHQ/shannon/commit/2e9ee2a11e709d7a1e161e35160380f5c29e1d7a))
* pass router env vars to SDK subprocess ([742b74c](https://github.com/KeygraphHQ/shannon/commit/742b74c86f58ce9636b8df37d87a3159d5217406))
* prevent deliverables from being lost during agent retry rollbacks ([#112](https://github.com/KeygraphHQ/shannon/issues/112)) ([efb5368](https://github.com/KeygraphHQ/shannon/commit/efb5368b3c2f22e33396294124f1e98f10fd5ad9))
* removed comments ([23618f1](https://github.com/KeygraphHQ/shannon/commit/23618f1fd1bfcc69501b6400b3e23c094260aa9d))
* renamed agent filename ([bbd9db2](https://github.com/KeygraphHQ/shannon/commit/bbd9db2a61c9f4e470202f15e86bd65214c5bd69))
* resolve Docker build failure and clarify env var configuration ([719bf03](https://github.com/KeygraphHQ/shannon/commit/719bf03293277173ca100ff3ee6729031767e25b))
* resolve named workspace workflow ID in logs command ([759c8d8](https://github.com/KeygraphHQ/shannon/commit/759c8d80932d8e9ef7b7cf51c385c7c5332433bd))
* resolve resume workflow ID in logs command ([2cf237d](https://github.com/KeygraphHQ/shannon/commit/2cf237d6382be3535064fe5df7a8fc199c51e6a8))
* restore CLAUDE_CODE_MAX_OUTPUT_TOKENS env var support ([c169b0d](https://github.com/KeygraphHQ/shannon/commit/c169b0d0a620da5c9b46d9e20f57afe5701addb9))
* set originalWorkflowId in logPhaseTransition and remove path import from agents.ts ([f017a41](https://github.com/KeygraphHQ/shannon/commit/f017a4143614a975531d59b38972244a05520702))
* set write permissions on audit-logs and output directories for container user ([65aa562](https://github.com/KeygraphHQ/shannon/commit/65aa5625f6fde428ded981440513dacad7751157))
* store checkpoint as success commit hash and show cumulative metrics ([1b696ca](https://github.com/KeygraphHQ/shannon/commit/1b696cac1bb3a3b85338ec9a225eec10bdc1275c))
* support absolute config paths in checkpoint manager ([39766d0](https://github.com/KeygraphHQ/shannon/commit/39766d0afc452f1d6b7eb93376130a50ddf38a60))
* update session.json status on workflow completion ([dbcb458](https://github.com/KeygraphHQ/shannon/commit/dbcb4587ee0fe381436363202c68ca98805c19b5))
* use session's original createdAt instead of current time ([f0b8c3a](https://github.com/KeygraphHQ/shannon/commit/f0b8c3aa6e0a707038bb5e1be8595bd79ab7a3c3))


### Features

* add beta release and rollback workflows with cosign signing ([#247](https://github.com/KeygraphHQ/shannon/issues/247)) ([601fbe7](https://github.com/KeygraphHQ/shannon/commit/601fbe7756e078aa309a84eca88e96e4f874d03d))
* add claude-code-router support for multi-model testing ([914860a](https://github.com/KeygraphHQ/shannon/commit/914860a6bdf317b1bb343fd82ed7d66e067d8c91))
* add configurable output directory with --output flag ([#41](https://github.com/KeygraphHQ/shannon/issues/41)) ([8381198](https://github.com/KeygraphHQ/shannon/commit/8381198c418ff91f6a70c567faf73729ea53f353))
* add configurable pipeline retry and concurrency settings ([#157](https://github.com/KeygraphHQ/shannon/issues/157)) ([d67c07d](https://github.com/KeygraphHQ/shannon/commit/d67c07dc557fd2df2f48399c9e987c1c21b00bcf))
* add custom base URL support for Anthropic-compatible endpoints ([#246](https://github.com/KeygraphHQ/shannon/issues/246)) ([ae4bd45](https://github.com/KeygraphHQ/shannon/commit/ae4bd45a301e491dde5a3fe1a77923121e21d562))
* add DeepSeek provider support for claude-code-router ([d925c49](https://github.com/KeygraphHQ/shannon/commit/d925c4942be2001e83f0f63ed7419ba2ebfc5d79))
* add environment variable support for Claude Code token limits ([0b9580a](https://github.com/KeygraphHQ/shannon/commit/0b9580a99aa2d99830505fb6d144252c07fb1bf3))
* add Google Vertex AI support with service account auth ([6a76df2](https://github.com/KeygraphHQ/shannon/commit/6a76df2f4c653778c67dfc375ff07a84696ffcfe))
* add issue templates ([#110](https://github.com/KeygraphHQ/shannon/issues/110)) ([77c5b26](https://github.com/KeygraphHQ/shannon/commit/77c5b26a945af439a17f31cab3cdefac9a529989))
* add model tracking and reporting across pipeline ([cd04c7a](https://github.com/KeygraphHQ/shannon/commit/cd04c7a6d2d34f6bfbc7dcc986c9287a8fac913d))
* add MSYS path fix, Claude Code CLI, and Windows instructions ([e85f6e0](https://github.com/KeygraphHQ/shannon/commit/e85f6e0c73850e4127197e7180ffd9ff88d436cf))
* add named workspaces and workspace listing ([ee5d7b8](https://github.com/KeygraphHQ/shannon/commit/ee5d7b80a0d8b281d52a08195c3a2f70241b6a5e))
* add npx CLI with monorepo, CI/CD, and ephemeral worker architecture ([#256](https://github.com/KeygraphHQ/shannon/issues/256)) ([bc8fd20](https://github.com/KeygraphHQ/shannon/commit/bc8fd203edb0af18b18bdc4bc4efe122262cc743)), closes [#252](https://github.com/KeygraphHQ/shannon/issues/252) [#254](https://github.com/KeygraphHQ/shannon/issues/254) [#255](https://github.com/KeygraphHQ/shannon/issues/255)
* add OpenRouter provider support for claude-code-router ([d01980c](https://github.com/KeygraphHQ/shannon/commit/d01980ce4b5fddbb811dc77a36394aabf97c674b))
* add preflight validation phase with structured error reporting ([c0d46cb](https://github.com/KeygraphHQ/shannon/commit/c0d46cb6b9b1ed3cf4ed38b61683296e33b94671))
* add resume header to workflow.log showing previous workflow ID and checkpoint ([9074149](https://github.com/KeygraphHQ/shannon/commit/9074149778d9e78a01c2bdfba5b740ff2cbe4a2c))
* add three-tier model system with Bedrock support ([b62abfe](https://github.com/KeygraphHQ/shannon/commit/b62abfea4c675f83ee3369993add1b78d84bc056))
* add workflow resume from workspace via --workspace flag ([f932fad](https://github.com/KeygraphHQ/shannon/commit/f932fad2edae6b1e539646740062ce0dfbe0a6f0))
* copy deliverables to audit-logs for self-contained audit trail ([80bc8e3](https://github.com/KeygraphHQ/shannon/commit/80bc8e3a44a163aaf4c8c9a71a401386628d66d9))
* expand injection analysis scope to cover LFI/RFI/SSTI/Path Traversal/Deserialization ([d82d1fa](https://github.com/KeygraphHQ/shannon/commit/d82d1fa7530e0663328924dd6c3b3c95bf309ba8))
* implement unified audit system v3.0 with crash-safety and self-healing ([27334a4](https://github.com/KeygraphHQ/shannon/commit/27334a4dd6aedb375351cd8abfbab9c052f296e9))
* improve audit log naming with timestamp and app context ([258830b](https://github.com/KeygraphHQ/shannon/commit/258830b030c802f4a3cbbadcfbb1d30bf8cb1bb7))
* migrate to use MCP tools instead of helper scripts ([eae0b8d](https://github.com/KeygraphHQ/shannon/commit/eae0b8d654e210b06c457e2f5a469a4ae7258a98))
* typescript migration ([#40](https://github.com/KeygraphHQ/shannon/issues/40)) ([3ac07a4](https://github.com/KeygraphHQ/shannon/commit/3ac07a471896a6946a596a6df2d8db523914b8bd))
* upgrade claude-agent-sdk to 0.2.38 and adapt to new SDK types ([#113](https://github.com/KeygraphHQ/shannon/issues/113)) ([3c13a9a](https://github.com/KeygraphHQ/shannon/commit/3c13a9a7e6eb2a2856ad00f59d8cf06f76f56b0d))


### Reverts

* remove '402' billing pattern causing false positives ([63741d7](https://github.com/KeygraphHQ/shannon/commit/63741d780e5b6ccd7a579a1f551a58affbfba94b))