From 4f18455879f8caf0e9eda9b49ec948e8644438cc Mon Sep 17 00:00:00 2001
From: Sawyer Cutler <sawyer@dirtroad.dev>
Date: Sat, 12 Sep 2026 20:57:42 -0700
Subject: [PATCH] Release corbits 0.3.24

---
 CHANGELOG.md | 25 +++++++++++++++++++++++++
 package.json |  2 +-
 2 files changed, 26 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3890eb1bf..5fc68895f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,31 @@ matching `## [X.Y.Z]` section (plus install instructions). Do not maintain
 parallel copies under `docs/` or `scripts/notes/`. At cut time: rename
 `## [Unreleased]` to `## [X.Y.Z] - YYYY-MM-DD`, then run the release script.
 
+## [0.3.24] - 2026-09-13
+
+### Added
+
+- Queued steers and follow-ups now surface in a pending column above the
+  prompt: pick with Up/Down, force-deliver with Enter, drop with Ctrl+X,
+  exit with Esc, and pop back to the composer with Ctrl+G.
+- OpenCode Zen models are discovered live with a seed fallback, per-model
+  protocol routing, and a picker overlay.
+
+### Changed
+
+- Builder chain now mandates same-commit regression tests, docs upkeep, and
+  criteria-mapped reporting.
+- Prompt size budgets are now per-director per-family, and the gaasbot
+  ceiling is raised (chars 54800, bytes 56000).
+
+### Fixed
+
+- Shell parsing serial: here-strings stay inline, heredoc terminators match
+  exactly, arithmetic and comment openers parse correctly, and secret checks
+  run in the right order.
+- First-party OpenAI reasoning models now send max_completion_tokens.
+- The shell secret denylist resolves symlinks before matching.
+
 ## [0.3.23] - 2026-09-12
 
 ### Added
diff --git a/package.json b/package.json
index 571d6a661..b128f8707 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@corbits/code",
-  "version": "0.3.23",
+  "version": "0.3.24",
   "description": "Single-process coding agent CLI built on the Interchange runtime (Bun + TypeScript)",
   "private": true,
   "license": "SEE LICENSE IN LICENSE.md",