# Changelog

This project follows Semantic Versioning after its first public release. Before 1.0,
contract-breaking changes are allowed only when they are explicit in this file and the
relevant schema version is advanced.

## Unreleased

### Added

- Private Project Kiln Phase 0 workspace and evidence baseline.
- Dependency-free core identity contract and `kiln doctor` smoke CLI.
- Versioned normalized game records with validated game IDs, installation UUIDs,
  contract roles, compatibility data, capabilities, and installation paths.
- Durable XDG installation identity registry with exact fingerprint matching, move
  aliases, bounded hostile-input handling, locking, backups, and atomic replacement.
- Provider and runtime capability interfaces plus a deterministic mock adapter covering
  every required Phase 1 outcome.
- Versioned argument-safe launch plans, conservative lifecycle policy, and structured
  machine-readable errors.
- Versioned TOML configuration with fixed precedence, merge provenance, commented
  defaults, and compare-and-swap replacement validation.
- Versioned schema reporting from `kiln doctor --json` and structured JSON CLI errors.
- Native adapter discovery from bounded per-user manifests and explicitly approved
  Desktop Entries, with deterministic search and resolution.
- Native dry-run planning, owned process execution, private launch logs, and structured
  launch failures through the shared CLI.
- Configuration defaults, validation, explanation, safe scalar edits, and native
  launch-plan integration.
- Bounded redacted process capture and adversarial configuration, path, symlink, UTF-8,
  environment, working-directory, and failure tests.
- Read-only Steam library-folder and app-manifest discovery with stable App ID identity,
  normalized records, provider-scoped CLI list/search/info/scan commands, hostile fixtures,
  and local installation acceptance evidence.
- Typed native and Flatpak Steam launch plans, shell-free client submission, private logs,
  structured missing-client failures, and real native/Proton launch acceptance evidence.

### Corrected

- Replaced the unused hosted-workflow plan with a complete local `make check` gate and
  made Rust 1.97.1 the single minimum and reviewed compiler.
- Removed the `fs2` compatibility dependency in favor of Rust 1.97 standard-library file
  locking.
- Advanced the private launch-plan schema to version 2 so dry runs carry the exact
  working directory used for execution.
- Enforced the active compiler pin instead of assuming distro Cargo honors Rustup files.