From 71e5d094207373a1400139124b5b33c70e341353 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 14 Mar 2026 06:02:34 +0000
Subject: [PATCH 1/3] Initial plan


From bb598c78e3dd97cf38c55f98abe0898e3f2f36f7 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 14 Mar 2026 06:14:56 +0000
Subject: [PATCH 2/3] fix: harden publish verification and document fix for
 missing dist/loader.js

Co-authored-by: glittercowboy <186001655+glittercowboy@users.noreply.github.com>
---
 .github/workflows/build-native.yml | 4 ++--
 CHANGELOG.md                       | 1 +
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/build-native.yml b/.github/workflows/build-native.yml
index 3fb4e9412..e526fa218 100644
--- a/.github/workflows/build-native.yml
+++ b/.github/workflows/build-native.yml
@@ -173,11 +173,11 @@ jobs:
         run: npm run build
 
       - name: Verify dist exists
-        run: test -f dist/loader.js || { echo "::error::dist/loader.js missing after build"; exit 1; }
+        run: test -s dist/loader.js || { echo "::error::dist/loader.js missing or empty after build"; exit 1; }
 
       - name: Verify tarball contents
         run: |
-          npm pack --dry-run 2>&1 | tee /tmp/pack-output.txt
+          npm pack --dry-run --ignore-scripts 2>&1 | tee /tmp/pack-output.txt
           grep -q "dist/loader.js" /tmp/pack-output.txt || {
             echo "::error::dist/loader.js not in tarball"
             exit 1
diff --git a/CHANGELOG.md b/CHANGELOG.md
index d9108d648..d8df723a8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -23,6 +23,7 @@ Format based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 - Eliminated branch checkout during slice merge that caused STATE.md conflicts (#307)
 - Removed infinite delivery retry loop for background job completions (#301)
 - Display ⌥ instead of Alt for keybindings on macOS (#299)
+- Publish verification checks `dist/loader.js` is non-empty (`-s`) and uses `--ignore-scripts` on `npm pack --dry-run` to match actual publish behaviour (#298)
 
 ### Removed
 - Deprecated legacy dead code from OAuth module

From 1a052eaa1dbcbc78c1a95d8f0d88186bf8454fc7 Mon Sep 17 00:00:00 2001
From: Lex Christopherson <lex@glittercowboy.com>
Date: Sat, 14 Mar 2026 00:59:32 -0600
Subject: [PATCH 3/3] 2.10.8

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 CHANGELOG.md      | 9 +++++++--
 package-lock.json | 4 ++--
 package.json      | 2 +-
 3 files changed, 10 insertions(+), 5 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index d8df723a8..a8cfd5899 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,11 @@ Format based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [2.10.8] - 2026-03-14
+
+### Fixed
+- Publish verification checks `dist/loader.js` is non-empty (`-s`) and uses `--ignore-scripts` on `npm pack --dry-run` to match actual publish behaviour (#298)
+
 ## [2.10.7] - 2026-03-14
 
 ### Added
@@ -23,7 +28,6 @@ Format based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 - Eliminated branch checkout during slice merge that caused STATE.md conflicts (#307)
 - Removed infinite delivery retry loop for background job completions (#301)
 - Display ⌥ instead of Alt for keybindings on macOS (#299)
-- Publish verification checks `dist/loader.js` is non-empty (`-s`) and uses `--ignore-scripts` on `npm pack --dry-run` to match actual publish behaviour (#298)
 
 ### Removed
 - Deprecated legacy dead code from OAuth module
@@ -454,7 +458,8 @@ Format based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 ### Changed
 - License updated to MIT
 
-[Unreleased]: https://github.com/gsd-build/gsd-2/compare/v2.10.7...HEAD
+[Unreleased]: https://github.com/gsd-build/gsd-2/compare/v2.10.8...HEAD
+[2.10.8]: https://github.com/gsd-build/gsd-2/compare/v2.10.7...v2.10.8
 [2.10.7]: https://github.com/gsd-build/gsd-2/compare/v2.10.6...v2.10.7
 [2.10.6]: https://github.com/gsd-build/gsd-2/compare/v2.10.5...v2.10.6
 [2.10.5]: https://github.com/gsd-build/gsd-2/compare/v2.10.4...v2.10.5
diff --git a/package-lock.json b/package-lock.json
index 62e7d93c1..03b444326 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "gsd-pi",
-  "version": "2.10.7",
+  "version": "2.10.8",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "gsd-pi",
-      "version": "2.10.7",
+      "version": "2.10.8",
       "bundleDependencies": [
         "@gsd/native",
         "@gsd/pi-agent-core",
diff --git a/package.json b/package.json
index a79cf20f9..fbad59586 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "gsd-pi",
-  "version": "2.10.7",
+  "version": "2.10.8",
   "description": "GSD — Get Shit Done coding agent",
   "license": "MIT",
   "repository": {