…695)

* feat: add Commentary AI for real-time workflow narration (PoC)

- Add JSONL watcher service to monitor Claude CLI session files
- Add Commentary AI service using claude -p --model haiku with --resume
- Add CommentaryPanel UI with auto-scroll and event type indicators
- Add ON/OFF toggle in Toolbar for Claude Code run section
- Add session lifecycle management with terminal close cleanup
- Wire --session-id to terminal execution for JSONL file tracking

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* improvement: use user's configured language for commentary AI

- Remove hardcoded Japanese from system prompt
- Add "respond in user's configured language" rule
- Generate startup message via AI instead of fixed string

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* feat: add conversation history, VSCode LM API provider, and language settings

- Add shared conversation history for future log export
- Add VSCode Language Model API as alternative commentary provider
- Add Copilot model selection dropdown (fetched dynamically)
- Add free-text language setting (default: English)
- Move commentary feature toggle to More menu with Beta badge
- Show commentary UI only when feature is enabled

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* improvement: move commentary settings to dropdown and clean up toolbar UI

- Extract commentary settings into CommentaryOptionsDropdown component
- Toolbar now shows only toggle button + chevron dropdown
- Add scrollable dropdown with Provider, Language, Model sections
- Default Copilot model to gpt-4o-mini
- Replace panel title with hardcoded "Commentary", remove unused i18n key

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: sync commentary state to extension host on webview mount

- Commentary panel open at startup no longer fails to trigger commentary
- Sends TOGGLE_COMMENTARY on first mount when localStorage has enabled state

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* improvement: pass slash command .md as context to commentary AI

- Extract exported command file path and pass to commentary session
- Read .md content and include in initial commentary prompt
- Enables step-aware commentary with node names and flow context

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* improvement: increase truncate limit, add flush queue, and processing indicator

- Increase JSONL event truncate limit from 500 to 2000 characters
- Add exclusive flush control to prevent concurrent AI calls
- Queue new events during processing and handle sequentially
- Add dot animation (. .. ...) in commentary panel during generation
- Add COMMENTARY_PROCESSING message for processing state sync

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* improvement: enrich tool_use event context for better commentary quality

- Extract input parameters (command, description, file_path, pattern) from tool_use blocks
- Add explicit system prompt instructions to prevent vague commentary

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: address CodeRabbit review feedback on commentary AI

- Move SessionManager init after currentPanel early return to prevent leak
- Add stopped guard after callAi() to discard late results
- Re-throw startSession errors to propagate to session manager
- Retain trailing partial JSON lines across polls
- Wrap fd read in try-finally to prevent descriptor leak
- Delay SESSION_STARTED until after startup succeeds
- Remove modelsError guard to allow Copilot model retry
- Add aria-label to commentary options trigger button
- Normalize Windows path separators in slash command lookup

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* improvement: add update_nodes MCP tool for partial node updates

- Add update_nodes tool to update specific nodes by ID without sending full workflow
- Support null values in data to delete fields (e.g., switching builtInType)
- Reuse existing applyWorkflowToCanvas path for review mode and validation
- Update ai-editing-skill-template to document update_nodes usage

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: make data field optional in update_nodes MCP tool

- Allow name-only or position-only updates without requiring data
- Guard merge with nullish coalescing for undefined data

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

…VE-2026-4926) (#698)

* chore: resolve path-to-regexp ReDoS vulnerabilities (CVE-2026-4923, CVE-2026-4926)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* chore: add workflow_dispatch trigger to security-scan workflow

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* feat: add undo/redo for canvas nodes and edges

- Add zundo temporal middleware to workflow store for history tracking
- Create UndoRedoControls component with hover popover UI
- Add Ctrl/Cmd+Z (undo) and Ctrl/Cmd+Shift+Z (redo) keyboard shortcuts
- Pause temporal tracking during node drag for single undo entry
- Add i18n translations for undo/redo (en/ja/ko/zh-CN/zh-TW)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: exclude node dimensions from undo/redo history tracking

- Strip width/height from nodes in partialize to prevent React Flow's
  updateNodeDimensions from creating spurious history entries on startup
- Remove debug logging

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: batch setNodes+setEdges into single undo/redo entry

- Add setCanvas(nodes, edges) to workflow store for atomic updates
- Replace separate setNodes/setEdges calls with setCanvas in App, Toolbar,
  and RefinementChatPanel
- Exclude node width/height from partialize to prevent dimension-change entries

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: scope undo/redo history and fix keyboard shortcuts

- Clear temporal history on workflow load/switch, clearWorkflow,
  sub-agent flow switch, and cancel sub-agent flow editing
- Normalize event.key with toLowerCase() for Shift+Z detection
- Skip undo/redo shortcuts when focus is in input/textarea/contenteditable

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Release: v3.32.0

## [3.32.0](v3.31.1...v3.32.0) (2026-04-02)

### Features

* [Experimental] Commentary AI for real-time workflow narration ([#695](#695)) ([9cf4d07](9cf4d07))
* add undo/redo for canvas nodes and edges ([#699](#699)) ([d80ad4e](d80ad4e))

### Improvements

* add update_nodes MCP tool for partial node updates ([#697](#697)) ([fc6152f](fc6152f))