docs: update CHANGELOG for v0.6.7

[OneStepAt4time]

Summary

Updates CHANGELOG.md [Unreleased] section with 82 PRs merged May 8–10 that were missing from the last changelog update (#2959).

Added (10 entries)

• ag run command — zero-to-session (feat(cli): add 'ag run' — zero-to-session in one command (#3043) #3050)
• ag init --force flag (fix(cli): add --force flag and config-exists warning to ag init (#3028) #3035)
• Session export endpoint GET /v1/sessions/:id/export (feat(api): session export endpoint — download transcript as JSONL/Markdown (#3114) #3153)
• Dashboard: session health banner (feat(dashboard): session health alert banner (#3000) #3033), ContextWindowMeter (feat(dashboard): ContextWindowMeter component (#3127) #3141), SessionTimelineView (feat(dashboard): SessionTimelineView — visual timeline with dots, line, filters (#3126) #3149)
• pending session status (fix(session): new sessions start as 'pending' instead of 'unknown' (#3058) #3061)
• Terminal session states: killed, completed, crashed (fix: session lifecycle bugs — terminal states + ACP status sync #3140)

Changed (10 entries)

• ACP enabled by default (fix(api): warn when ACP disabled + enable by default in ag run (#3068) #3083, fix(acp): default acpEnabled to true — sessions no longer stuck at pending (#3078) #3109)
• CLI: authToken instead of clientAuthToken (fix(cli): ag init writes authToken instead of clientAuthToken (#3085) #3088)
• Session name/label validation (fix(validation): reject special characters in session name/label (#3091) #3095)
• RBAC, batch-delete, ACP status preservation fixes
• Dashboard a11y: CSS variables across 10 pages (fix(dashboard): replace hardcoded light-mode colors with CSS variables — 10 pages #2966)
• Dead consensus.ts removed (chore: remove dead consensus.ts (#3112) #3117)

Fixed (30+ entries)

• Security: auth on sensitive endpoints (fix(security): add requireRole check to GET /v1/sessions (#2975) #2992, fix(security): add auth checks to /metrics, dead-letter, channels/health (#2976, #2977) #2994), session enumeration prevention (fix(security): prevent session ID enumeration via 404/403 differentiation (#3071) #3146), duplicate key names (fix(security): reject duplicate API key names within the same tenant (#3073) #3106), Telegram sanitization (fix(security): sanitize md2html hrefs, topic names, and callback_data (#3173) #3174)
• ACP: prompt routing (fix(acp): route prompts through ACP runtime instead of stub (#3093) #3096), storage resilience (fix(acp): handle empty/malformed local storage file gracefully (#3036) #3037), /read from event store (fix(acp): /read endpoint returns messages from ACP event store (#3143) #3151), child process env (fix(acp): log child process stderr + global name alias (#3135, #3134) #3147, fix(acp): pass HOME and Anthropic env vars to child process (#3135) #3148)
• CLI: curl auth header (fix(cli): include auth header in curl output from ag create (#2996) #3021), unknown commands (fix(cli): reject unknown commands instead of silently creating sessions (#3079) #3104), health check retry (fix(cli): retry health check after spawn failure (#3067) #3150)
• Dashboard: design tokens (fix(dashboard): resolve 46 design-token gate violations (#2980) #3007), CostPage (fix(dashboard): CostPage budget link + CSV export all records (#3015, #3012) #3025), PWA manifest (fix(dashboard): serve manifest.json at root without auth for PWA (#3092) #3111), responsive (fix(dashboard): responsive breakpoints and error boundaries for 4 pages #3130)
• Core: atomic JSON writes (fix(core): atomic writes for all JSON state files (#3045) #3047), worktree data loss (fix(worktree): force baseRef=head to prevent silent data loss (#3155) #3158), audit chain validation (fix(audit): resolve chain validation across rotated log files (#2986) #3019)

Documentation (16 entries)

• QA sprint fixes (docs: fix 14 broken links, stale MCP count, phantom resources (QA sprint) #2993), API accuracy drift (docs: fix API accuracy drift from security + validation PRs (#2994, #3008, #3022) #3023), SSE auth (docs: fix SSE troubleshooting, ag init warning, unknown status (#3030, #3028, #3032) #3040)
• ag run docs (docs: add ag run — zero-to-session command (#3050, #3043) #3055), pending status (docs: add 'pending' session status to API reference (#3061) #3065, docs: add 'pending' session status to README table (#3061) #3066), terminal states (docs: add terminal session states (killed, completed, crashed) #3145)
• Session export docs (docs: add session export endpoint (GET /v1/sessions/:id/export) #3160, docs: add session export user guide + competitive threat matrix #3161), competitive intel (docs: competitive intel — CC feature mapping + positioning brief (#3006, #3013, #3014, #3003, #3004) #3056)
• Architecture, CONTRIBUTING, config fixes

CI (5 entries)

• Auto-label pin (fix(ci): pin auto-label action to CJS-compatible deps (#2978) #3002, fix(ci): regenerate auto-label lockfile to match pinned deps #3044), trivy+node (fix(ci): pin trivy-action, upgrade setup-node, optimize lint install #3122), Helm dedup (perf(ci): deduplicate Helm chart build in release pipeline #3124), Dependabot bumps (build(deps): bump dorny/paths-filter from 3 to 4 #3162–build(deps-dev): bump @types/node from 25.6.0 to 25.6.2 in /dashboard #3167)

Test plan

• Verify no duplicate entries with existing changelog content
• Spot-check PR numbers link to correct PRs
• Confirm all categories (Added/Changed/Fixed/Docs/CI) present

[aegis-gh-agent]

✅ Approved.

Review — PR #3175: docs: update CHANGELOG for v0.6.7

All 9 merge gates pass:

• CI: all 17 checks green (lint, test, CodeQL, Trivy, Gitleaks, GitGuardian, helm-smoke, dashboard-e2e)
• Mergeable, no conflicts
• Targets develop ✅
• Security: all scans clean
• Docs-only PR — no regression risk

Content quality:

• 82 PRs documented across Added (8), Changed (9), Fixed (30+), Docs (16), CI (5)
• All entries follow established changelog format with correct PR/issue links
• No duplicates with existing entries
• Categories properly structured

Clean, comprehensive changelog update. Ready to merge.

[aegis-gh-agent]

✅ Approved. Clean CHANGELOG update — 82 PRs properly categorized, all gates pass. Single file change, no source code, CI green.