@kodax-ai/kodax 0.7.96-alpha.7 → 0.7.96-beta.1

package/CHANGELOG.md

@@ -6,6 +6,25 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+## [0.7.96-beta.1] - 2026-09-03
+
+The first beta pre-release of the v0.7.96 line: it retains the full alpha.7
+sandbox-first, trusted-text, and permission-profile feature set and adds the
+Linux native compatibility fix below. npm publication remains a separate
+manual maintainer action.
+
+### Fixed
+
+- Restored Linux glibc 2.28 compatibility for the FEATURE_295 native text
+  authority (Issue 328). Linux x64/arm64 addons now compile with Rust 1.98.0
+  inside architecture-matched, digest-pinned `manylinux_2_28` builders, and the
+  normal staging path hashes and packages those prebuilt bytes without
+  recompiling on the Ubuntu host. CI and release lanes scan every staged Linux
+  addon and fail if any required symbol exceeds `GLIBC_2.28`, so private
+  Kylin V10 / glibc 2.28 deployments can load the trusted text authority
+  again. No text-transaction, CAS, lock, atomic-replace, receipt, or fail-closed
+  runtime path changed.
+
 ## [0.7.96-alpha.7] - 2026-09-03
 
 ### Fixed

package/README.md

@@ -759,7 +759,7 @@ permission UI, and recovers stale prepared Session tails through an
 authoritative merge. Background persistence failures are surfaced as
 diagnostics rather than hidden.
 
-**v0.7.96-alpha.7 release:** Windows shell admission now follows the
+**v0.7.96-beta.1 release:** Windows shell admission now follows the
 Codex concurrency boundary: versioned setup performs legacy migration once,
 while ordinary admission accepts effective inherited normal-token access and
 only converges a missing exact-root restricted capability using `SET_ACCESS`
@@ -793,13 +793,16 @@ protected-cache generation across later `npm link` rebuilds; another build
 cannot swap a long-lived process onto a mismatched native evidence schema.
 Unlowerable nested shell bodies remain opaque for exact Exec Policy plus the
 normal Edits/Auto[LLM] host boundary, rather than becoming a parser-generated
-hard forbid. Alpha.7 also self-heals a stale Windows setup
+hard forbid. The release also self-heals a stale Windows setup
 generation before an interactive REPL starts, keeps current-marker startup on a
 fast path, shows live elapsed time only while real recovery runs, and documents
 that sandbox doctor is a host control-plane operation (`/sandbox` in the REPL or
-`kodax sandbox doctor` directly in a user terminal). npm publication remains a
+`kodax sandbox doctor` directly in a user terminal). Linux x64/arm64 native
+text authorities compile in digest-pinned `manylinux_2_28` builders and are
+gated to `GLIBC_2.28`, restoring the supported private-deployment floor
+(Issue 328). npm publication remains a
 manual maintainer action. See the
-[release checklist](docs/release.md#v0796-alpha7-release-preparation).
+[release checklist](docs/release.md#v0796-beta1-release-preparation).
 
 **v0.7.96-alpha.3 release:** Provider credentials are lazy, scoped,
 revocable capabilities (ADR-068). The v2 credential broker keeps Provider
@@ -1389,7 +1392,7 @@ kodax "your task"
 
 KodaX can be packaged into a single executable + a small `builtin/` sidecar directory using `bun --compile`. The target machine does **not** need Node.js or any other runtime.
 
-Supported targets: `win-x64`, `linux-x64`, `linux-arm64`, `darwin-x64`, `darwin-arm64`. Win7 / pre-glibc-2.27 distros / LoongArch are not supported.
+Supported targets: `win-x64`, `linux-x64`, `linux-arm64`, `darwin-x64`, `darwin-arm64`. Win7 / pre-glibc-2.28 distros / LoongArch are not supported.
 
 **Build locally**:
 

package/README_CN.md

@@ -296,7 +296,7 @@ SDK 系统代码契约更新，但没有放宽 shell/sandbox 的 fail-closed 边
 `handleRuntimePermissionRequest()` 管理 SDK 权限 UI，并在 prepared Session 尾部遇到
 `data_changed` 时通过权威 delta 合并恢复；后台持久化失败会显示为诊断，不再静默丢失。
 
-**v0.7.96-alpha.7 发布**：Windows shell 准入现在遵循 Codex 的并发边界：
+**v0.7.96-beta.1 发布**：Windows shell 准入现在遵循 Codex 的并发边界：
 版本化 setup 只执行一次 legacy 迁移；普通准入在 capability 已存在时只读，只有缺失
 精确 root restricted capability 时才用 `SET_ACCESS` 与 DACL 回读收敛，且不等待任何
 跨进程目标互斥锁。稳定 filesystem capability SID 保留在对象上，每条命令的 token
@@ -324,11 +324,13 @@ shell 内容保留为 opaque 完整 argv，由精确 Exec Policy 与正常 Edits
 失败的 broker 代际会立即脱离复用但不会停止仍在运行的 holder，并继续计入固定端口容量直到进程
 实际关闭；启动/控制阶段各自以 15 秒为界，不会缩短命令执行 deadline。多个 npm-link/`kodax -r`
 客户端同时遇到空闲旧 daemon 时，会以认证临时身份选出一个替换者，其余客户端脱离后等待或续跑
-同一精确 prepared ticket；忙碌或不可信的 daemon 仍保持不动并返回结构化边界。alpha.7 还会在
+同一精确 prepared ticket；忙碌或不可信的 daemon 仍保持不动并返回结构化边界。本版本还会在
 交互式 REPL 启动前自愈陈旧的 Windows setup generation；当前 marker 走快速路径，只有实际恢复
 才显示持续更新的等待时间。sandbox doctor 明确属于宿主控制面：REPL 内使用 `/sandbox`，或直接
-在用户终端运行 `kodax sandbox doctor`，不能通过 sandbox-first Bash 工具调用。npm 发布仍由
-维护者手动执行。详见 [v0.7.96-alpha.7 发布清单](docs/release.md#v0796-alpha7-release-preparation)。
+在用户终端运行 `kodax sandbox doctor`，不能通过 sandbox-first Bash 工具调用。Linux x64/arm64
+native 文本权威改在摘要固定的 `manylinux_2_28` 构建器中编译，并要求所需 `GLIBC_*` 符号不超过
+2.28，恢复了受支持的私有化部署下限（Issue 328）。npm 发布仍由
+维护者手动执行。详见 [v0.7.96-beta.1 发布清单](docs/release.md#v0796-beta1-release-preparation)。
 
 **v0.7.96-alpha.3 发布**：Provider 凭据成为惰性、受限、可撤销的能力（ADR-068）。v2
 credential broker 将 Provider 密钥保留在 OS keychain，按每次 wire call、为单一封闭
@@ -957,7 +959,7 @@ kodax -p "检查这个仓库" --runtime-mode daemon
 
 KodaX 可以用 `bun --compile` 打包成单可执行文件 + 一个 `builtin/` sidecar 目录，目标机器**不需要安装 Node.js 或任何运行时**。
 
-支持目标：`win-x64`、`linux-x64`、`linux-arm64`、`darwin-x64`、`darwin-arm64`。Win7 / glibc < 2.27 的发行版 / 龙芯 LoongArch 暂不支持。
+支持目标：`win-x64`、`linux-x64`、`linux-arm64`、`darwin-x64`、`darwin-arm64`。Win7 / glibc < 2.28 的发行版 / 龙芯 LoongArch 暂不支持。
 
 本地构建：
 

package/dist/chunks/{agent-SV3OH5VR.js → agent-BWS5VN2F.js}

@@ -1,2 +1,2 @@
 // @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{Aa as f,Qa as g,Sa as h,a as c,db as i,eb as j,mb as k,ya as d,za as e}from"./chunk-UTUAC7YQ.js";import"./chunk-MXJFGVTT.js";import"./chunk-ZXNXMFXJ.js";import"./chunk-LNPTCPLR.js";import"./chunk-ZD5NDQ53.js";import"./chunk-TD2PU67Z.js";import{Ob as a,Pb as b}from"./chunk-S5USXWS2.js";import"./chunk-7CPZTMYD.js";import"./chunk-ONUPGMER.js";export{e as bucketProviderPayloadSize,g as buildAutoRepoIntelligenceContext,f as checkPromiseSignal,b as cleanupIncompleteToolCalls,h as describeTransientProviderRetry,c as emitResilienceDebug,d as estimateProviderPayloadBytes,k as runKodaX,j as saveRequiredSessionSnapshot,i as saveSessionSnapshot,a as validateAndFixToolHistory};
+import{Aa as f,Qa as g,Sa as h,a as c,db as i,eb as j,mb as k,ya as d,za as e}from"./chunk-PP74NCFQ.js";import"./chunk-MXJFGVTT.js";import"./chunk-SYC3G4NT.js";import"./chunk-LNPTCPLR.js";import"./chunk-ZD5NDQ53.js";import"./chunk-TD2PU67Z.js";import{Ob as a,Pb as b}from"./chunk-S5USXWS2.js";import"./chunk-7CPZTMYD.js";import"./chunk-ONUPGMER.js";export{e as bucketProviderPayloadSize,g as buildAutoRepoIntelligenceContext,f as checkPromiseSignal,b as cleanupIncompleteToolCalls,h as describeTransientProviderRetry,c as emitResilienceDebug,d as estimateProviderPayloadBytes,k as runKodaX,j as saveRequiredSessionSnapshot,i as saveSessionSnapshot,a as validateAndFixToolHistory};

package/dist/chunks/argument-completer-FX2NNJBF.js

@@ -0,0 +1,2 @@
+// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
+import{Ma as a,Na as b}from"./chunk-ANK3CVNG.js";import"./chunk-BVMFGZIF.js";import"./chunk-O3SCJ4HT.js";import"./chunk-HTCODR36.js";import"./chunk-JATADWL3.js";import"./chunk-PP74NCFQ.js";import"./chunk-MXJFGVTT.js";import"./chunk-LMS7Y7YR.js";import"./chunk-SYC3G4NT.js";import"./chunk-LNPTCPLR.js";import"./chunk-ZD5NDQ53.js";import"./chunk-TD2PU67Z.js";import"./chunk-S5USXWS2.js";import"./chunk-7CPZTMYD.js";import"./chunk-ONUPGMER.js";export{a as ArgumentCompleter,b as createArgumentCompleter};

package/dist/chunks/{chunk-BRZO5ZGS.js → chunk-4ELQC62D.js}

@@ -1,2 +1,2 @@
 // @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{a as K}from"./chunk-W4QOFCVD.js";import{G as T,h as p,o as g,z as x}from"./chunk-4IH2OTLC.js";import{ib as d,mb as u}from"./chunk-UTUAC7YQ.js";import{d as c}from"./chunk-ZXNXMFXJ.js";import{a as n}from"./chunk-ONUPGMER.js";function s(t){if(t.context?.trustedTextMutationHost!==void 0)return t;let e=t.context?.gitRoot??t.context?.executionCwd??process.cwd(),a=t.context?.executionCwd??e,r=K(()=>[e,a,...t.context?.workspaceSandboxRoots?.list()??[]],o=>c(o,a));return{...t,context:{...t.context,trustedTextMutationHost:r}}}n(s,"withTrustedTextMutationHost");function f(t,e){return u(s(t),e)}n(f,"runKodaX");function A(t,e){return p(s(t),e)}n(A,"startKodaX");function l(t,e){return x(s(t),e)}n(l,"runManagedTask");function y(t){let e=t.runAgent??u,a=t.createOptions;return T({...t,createOptions:n((r,o,i)=>s(a?.(r,o,i)??i),"createOptions"),runAgent:n((r,o)=>e(s(r),o),"runAgent")})}n(y,"createKodaXTaskRunner");function m(t={}){let e=d(t),a=e.substrateExecutor;return Object.freeze({...e,substrateExecutor:n(((r,o,i,O)=>{let k=i?.presetOptions??{};return a(r,o,{...i,presetOptions:s(k)},O)}),"substrateExecutor")})}n(m,"createDefaultCodingAgent");var X=class extends g{static{n(this,"KodaXClient")}constructor(e){super(s(e))}};export{s as a,f as b,A as c,l as d,y as e,m as f,X as g};
+import{a as K}from"./chunk-YQBIARR4.js";import{G as T,h as p,o as g,z as x}from"./chunk-HTCODR36.js";import{ib as d,mb as u}from"./chunk-PP74NCFQ.js";import{d as c}from"./chunk-SYC3G4NT.js";import{a as n}from"./chunk-ONUPGMER.js";function s(t){if(t.context?.trustedTextMutationHost!==void 0)return t;let e=t.context?.gitRoot??t.context?.executionCwd??process.cwd(),a=t.context?.executionCwd??e,r=K(()=>[e,a,...t.context?.workspaceSandboxRoots?.list()??[]],o=>c(o,a));return{...t,context:{...t.context,trustedTextMutationHost:r}}}n(s,"withTrustedTextMutationHost");function f(t,e){return u(s(t),e)}n(f,"runKodaX");function A(t,e){return p(s(t),e)}n(A,"startKodaX");function l(t,e){return x(s(t),e)}n(l,"runManagedTask");function y(t){let e=t.runAgent??u,a=t.createOptions;return T({...t,createOptions:n((r,o,i)=>s(a?.(r,o,i)??i),"createOptions"),runAgent:n((r,o)=>e(s(r),o),"runAgent")})}n(y,"createKodaXTaskRunner");function m(t={}){let e=d(t),a=e.substrateExecutor;return Object.freeze({...e,substrateExecutor:n(((r,o,i,O)=>{let k=i?.presetOptions??{};return a(r,o,{...i,presetOptions:s(k)},O)}),"substrateExecutor")})}n(m,"createDefaultCodingAgent");var X=class extends g{static{n(this,"KodaXClient")}constructor(e){super(s(e))}};export{s as a,f as b,A as c,l as d,y as e,m as f,X as g};