@kodax-ai/kodax 0.7.81 → 0.7.83

package/CHANGELOG.md

@@ -10,6 +10,62 @@ No changes yet.
 
 ---
 
+## [0.7.83] - 2026-08-06
+
+> Git tag and GitHub Release are created by the release workflow. npm
+> publication remains a separate manual operator step.
+
+### Added
+
+- Windows daemon startup now assigns the Runtime process to a kill-on-close Job
+  Object before user code can run. The public
+  `waitForRuntimeDaemonShutdown()` verifier combines the exact durable cleanup
+  outcome with daemon and containment-supervisor exit, advertised by
+  `daemonShutdownVerification:1`.
+
+### Fixed
+
+- Daemon final cleanup can safely retire incomplete current-owner child
+  registry records when kernel Job containment is active. Per-child synchronous
+  process-exit hooks are omitted in that mode, avoiding listener growth and
+  repeated PowerShell tree scans during shutdown. CLI stop now waits for the
+  containment boundary as well as the daemon PID before reporting success.
+- Existing Windows daemons are no longer forced through a lock-only capability
+  upgrade merely to restore Sessions. Shutdown verification remains explicitly
+  negotiable; a legacy daemon must be stopped and relaunched before callers can
+  require the new containment contract.
+- Review hardening closes the Windows Job-assignment failure path by terminating
+  and waiting for a still-suspended daemon before its process handles are closed.
+  This prevents an uncontained orphan when kernel Job assignment fails.
+
+---
+
+## [0.7.82] - 2026-08-05
+
+> Git tag and GitHub Release are created by the release workflow. npm
+> publication remains a separate manual operator step.
+
+### Fixed
+
+- Daemon Host Tool capability discovery now preserves complete, lease-scoped
+  snapshots when it composes them with the active MCP runtime. Explicit server
+  filters select only their requested source, unfiltered discovery stays
+  complete/live, and legacy providers are queried without the ordinary page cap
+  while retaining explicit degraded metadata (Issue 279).
+- A recorded managed-Run Stop now fences provider retry/fallback/continuation,
+  guardrail, tool, and Actor work after cooperative cancellation is observed.
+  The trusted Stop/Abort cause is classified before credential redaction, so
+  status, terminal event, `runs.get()`, and `runs.await()` consistently report
+  interruption without overriding genuine completion or independent failures
+  (Issue 280).
+- `runtime.runs.submitInput()` and daemon preflight now resolve the admitted
+  authoritative Run before reading mutable Session history. Active interrupt
+  and after-turn admission no longer fail with transient `data_changed`; queued
+  continuations still wait for predecessor settlement and retain exact
+  operation-id idempotency (Issue 281).
+
+---
+
 ## [0.7.81] - 2026-08-05
 
 > Git tag and GitHub Release are created by the release workflow. npm

package/README.md

@@ -612,6 +612,28 @@ failure fails the delivery closed rather than emitting an unverifiable event.
 FEATURE_287 remains planned for v0.7.88; this is a non-Feature patch. See the
 [v0.7.81 release checklist](docs/release.md#v0781-release-preparation).
 
+**v0.7.82 Runtime causality release:** Daemon capability discovery now composes
+live, complete MCP and Host Tool snapshots only for unfiltered search; an
+explicit server filter selects that source alone, while legacy providers report
+honest incomplete/unknown discovery. An observed Stop cooperatively fences
+later retries, continuations, guardrails, tools, and Run-admitted Actor work;
+trusted Abort remains terminal causality before credential redaction without
+overriding a real completion or independent failure. Input submission resolves
+the admitted authoritative Run before reading mutable Session history, so
+active interrupt and after-turn admission do not produce a transient
+`data_changed` rejection. FEATURE_287 remains planned for v0.7.88; this is a
+non-Feature patch. See the [v0.7.82 release checklist](docs/release.md#v0782-release-preparation).
+
+**v0.7.83 Windows daemon containment release:** Windows daemon startup creates
+the daemon suspended, assigns it to a kill-on-close Job Object before resuming
+user code, and keeps an out-of-Job supervisor until the Job is empty. The SDK
+exports `waitForRuntimeDaemonShutdown()` and capability
+`daemonShutdownVerification:1`; CLI stop waits for both daemon and supervisor
+exit. Legacy uncontained daemons are not reported as verified and are not
+silently upgraded in place. The Worker owner-lease portion of Issue 256 remains
+scheduled for v0.7.84, and FEATURE_287 remains planned for v0.7.88. See the
+[v0.7.83 release checklist](docs/release.md#v0783-release-preparation).
+
 The v0.7.77 release also adds an opt-in, host-configurable Shell Execution Contract.
 Runtime Session settings or an individual Run can select `pwsh`, Windows
 PowerShell, `cmd`, `bash`, `zsh`, or an explicit Git Bash executable; KodaX

package/README_CN.md

@@ -223,6 +223,23 @@ provenance 失败会 fail closed，不会发布无法验证的交付事件。FEA
 v0.7.88；本版本是非 Feature 补丁。详见
 [v0.7.81 发布清单](docs/release.md#v0781-release-preparation)。
 
+**v0.7.82 Runtime 因果性发布**：daemon 的未过滤 capability 发现会组合 live、complete
+的 MCP 与 Host Tool snapshot；显式 `server` 过滤只选择对应来源，legacy provider 则如实
+报告 incomplete/unknown。观察到 Stop 后，后续 retry、continuation、guardrail、tool 及
+Run-admitted Actor 工作会协作式停止；可信 Abort 会在 credential redaction 前保留为终态
+因果，但不会覆盖真实 completion 或独立 failure。输入提交先解析已接纳的 authoritative
+Run，再读取可变 Session history，因此活动中断和 after-turn 接纳不会产生瞬态
+`data_changed` 拒绝。FEATURE_287 仍计划于 v0.7.88；本版本是非 Feature 补丁。详见
+[v0.7.82 发布清单](docs/release.md#v0782-release-preparation)。
+
+**v0.7.83 Windows daemon containment 发布**：Windows daemon 会先以 suspended
+状态创建，在用户代码运行前分配到 kill-on-close Job Object，并由 Job 外部的
+supervisor 等待整个 Job 清空。SDK 导出 `waitForRuntimeDaemonShutdown()`，并通过
+`daemonShutdownVerification:1` 宣布该能力；CLI stop 会等待 daemon 与 supervisor
+都退出。旧的未 containment daemon 不会被报告为已验证，也不会被静默地原地升级。
+Issue 256 的 Worker owner lease 部分仍计划于 v0.7.84，FEATURE_287 仍计划于
+v0.7.88。详见 [v0.7.83 发布清单](docs/release.md#v0783-release-preparation)。
+
 v0.7.77 还增加了由宿主显式配置的 Shell Execution Contract。Runtime Session
 设置或单次 Run 可以选择 `pwsh`、Windows PowerShell、`cmd`、`bash`、`zsh`
 或 Git Bash 的绝对路径；KodaX 会在实际项目 cwd 中解析 shell 环境，再通过同一

package/dist/chunks/{agent-UMBMZLCW.js → agent-S7LMMTG7.js}

@@ -1,2 +1,2 @@
 // @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{Ja as g,La as h,Ya as i,Za as j,a as c,db as k,ra as d,sa as e,ta as f}from"./chunk-VTFG3B7U.js";import"./chunk-HTVLCHWH.js";import"./chunk-D66EWPAX.js";import"./chunk-KHEFUT6O.js";import"./chunk-TRNAWSXP.js";import{wb as a,xb as b}from"./chunk-QMPJJCBE.js";import"./chunk-EVXIJPZ6.js";import"./chunk-E7C4DRD2.js";import"./chunk-6UENDY33.js";import"./chunk-ONUPGMER.js";export{e as bucketProviderPayloadSize,g as buildAutoRepoIntelligenceContext,f as checkPromiseSignal,b as cleanupIncompleteToolCalls,h as describeTransientProviderRetry,c as emitResilienceDebug,d as estimateProviderPayloadBytes,k as runKodaX,j as saveRequiredSessionSnapshot,i as saveSessionSnapshot,a as validateAndFixToolHistory};
+import{Ja as g,La as h,Ya as i,Za as j,a as c,db as k,ra as d,sa as e,ta as f}from"./chunk-TC2VHPG5.js";import"./chunk-HTVLCHWH.js";import"./chunk-6QILIBOU.js";import"./chunk-KHEFUT6O.js";import"./chunk-TRNAWSXP.js";import{xb as a,yb as b}from"./chunk-45E23YJI.js";import"./chunk-EVXIJPZ6.js";import"./chunk-E7C4DRD2.js";import"./chunk-6UENDY33.js";import"./chunk-ONUPGMER.js";export{e as bucketProviderPayloadSize,g as buildAutoRepoIntelligenceContext,f as checkPromiseSignal,b as cleanupIncompleteToolCalls,h as describeTransientProviderRetry,c as emitResilienceDebug,d as estimateProviderPayloadBytes,k as runKodaX,j as saveRequiredSessionSnapshot,i as saveSessionSnapshot,a as validateAndFixToolHistory};

package/dist/chunks/argument-completer-SQHG2LYE.js

@@ -0,0 +1,2 @@
+// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
+import{Ea as a,Fa as b}from"./chunk-DSFHIUHZ.js";import"./chunk-HI6RCW5Y.js";import"./chunk-DZUMH6GJ.js";import"./chunk-3DKQC7A2.js";import"./chunk-TC2VHPG5.js";import"./chunk-RAQGGVIF.js";import"./chunk-HTVLCHWH.js";import"./chunk-XB2JNLXH.js";import"./chunk-6QILIBOU.js";import"./chunk-KHEFUT6O.js";import"./chunk-TRNAWSXP.js";import"./chunk-45E23YJI.js";import"./chunk-EVXIJPZ6.js";import"./chunk-E7C4DRD2.js";import"./chunk-6UENDY33.js";import"./chunk-ONUPGMER.js";export{a as ArgumentCompleter,b as createArgumentCompleter};