@kodax-ai/kodax 0.7.96-beta.9 → 0.7.96-rc.2

package/CHANGELOG.md

@@ -8,6 +8,42 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.7.96-rc.2] - 2026-09-12
+
+Second release candidate of the v0.7.96 line: a stale first Session Stop
+request bound to an already terminal Run is rejected atomically before a new
+Stop frontier is published. Every rc.1 contract is retained. npm publication
+remains a manual maintainer action.
+
+### Fixed
+
+- Reject first `sessions.cancel` requests bound to a terminal Run before
+  publishing a cancellation frontier, preventing delayed requests from stopping
+  successor Runs. Accepted requests retain normal and post-restart replay.
+
+---
+
+## [0.7.96-rc.1] - 2026-09-12
+
+First release candidate of the v0.7.96 line: trusted text authority is
+unified across Runtime Sessions and direct SDK entries, and provider requests
+carry live permission facts. Every beta.9 contract is retained. npm
+publication remains a manual maintainer action.
+
+### Fixed
+
+- Unify trusted text authority across Runtime Sessions and direct SDK entries.
+  Full Access now reaches native text transactions through `runKodaX`,
+  `runManagedTask`, and each `KodaXClient.send`. Auto-approved concrete text
+  calls can write their exact external target, including portable `tool_call`
+  dispatch, without granting a directory or reusing approval across operations
+  or Runs. Explicit denials and native integrity checks remain enforced.
+- Include live host permission facts in direct and managed provider requests,
+  including retries, independently of configuration defaults and prompt
+  overrides. Runtime permission capability 6 fences older daemon authority.
+
+---
+
 ## [0.7.96-beta.9] - 2026-09-12
 
 Ninth beta pre-release of the v0.7.96 line, carrying FEATURE_299 (unified

package/README.md

@@ -784,6 +784,24 @@ provider's model, REPL `/compact` clears the UI only after a durable save, and
 successful reports carry bounded `summaryRequests` plus `commitMs` per
 physical summary call.
 
+**v0.7.96-rc.2 release:** Second release candidate of the v0.7.96 line. A
+first Session Stop request bound to an already terminal `expectedRunId` is
+rejected atomically before a new Stop frontier is published — typed
+`code: 'conflict'`, `denialSource: 'stale_run'`, `retryable: false` — so a
+delayed request cannot stop successor Runs. Already accepted requests stay
+replayable, including after Runtime restart. Every rc.1 contract is retained.
+
+**v0.7.96-rc.1 release:** First release candidate of the v0.7.96 line.
+Unifies trusted text authority across Runtime Sessions and direct SDK
+entries: Full Access reaches native text transactions through `runKodaX`,
+`runManagedTask`, and each `KodaXClient.send`; auto-approved concrete text
+calls write their exact external target, including portable `tool_call`
+dispatch, without granting a directory or reusing approval across operations
+or Runs; explicit denials and native integrity checks remain enforced.
+Direct and managed provider requests carry live host permission facts,
+refreshed on retries, and runtime permission capability 6 fences older
+daemon authority.
+
 **v0.7.96-beta.9 release:** Ships FEATURE_299 — unified Stop, Full Access
 and extension execution contracts. Owned Run controls and atomic Session
 Stop work independently of file locks across direct CLI, SDK, daemon, and
@@ -860,7 +878,7 @@ requests, preserves structured Child Agent Provider failures, honors exact
 run-scoped credential verification, and omits empty `tools` arrays for strict
 vLLM gateways (Issues 329-332). npm publication remains a
 manual maintainer action. See the
-[release checklist](docs/release.md#v0796-beta9-release-preparation).
+[release checklist](docs/release.md#v0796-rc2-release-preparation).
 
 **v0.7.96-alpha.3 release:** Provider credentials are lazy, scoped,
 revocable capabilities (ADR-068). The v2 credential broker keeps Provider

package/README_CN.md

@@ -296,6 +296,19 @@ SDK 系统代码契约更新，但没有放宽 shell/sandbox 的 fail-closed 边
 `handleRuntimePermissionRequest()` 管理 SDK 权限 UI，并在 prepared Session 尾部遇到
 `data_changed` 时通过权威 delta 合并恢复；后台持久化失败会显示为诊断，不再静默丢失。
 
+**v0.7.96-rc.2 发布**：v0.7.96 线第二个发布候选。绑定到已终态 `expectedRunId`
+的首次 Session Stop 请求会在发布新 Stop frontier 之前被原子拒绝——类型为
+`code: 'conflict'`、`denialSource: 'stale_run'`、`retryable: false`——迟到的
+请求因此无法停止后继 Run。已受理的请求保持可重放，包括 Runtime 重启之后。
+所有 rc.1 契约全部保留。
+
+**v0.7.96-rc.1 发布**：v0.7.96 线首个发布候选。统一 Runtime Session 与直接
+SDK 入口的可信文本授权：Full Access 通过 `runKodaX`、`runManagedTask` 与每个
+`KodaXClient.send` 覆盖原生文本事务；自动批准的具体文本调用可写入其确切外部
+目标（包括可移植的 `tool_call` 分发），但不授予目录权限，也不会跨操作或跨 Run
+复用批准；显式拒绝与原生完整性校验继续生效。直接与托管 provider 请求携带实时
+宿主权限事实并在重试时刷新，runtime 权限 capability 6 阻止旧 daemon 提供该授权。
+
 **v0.7.96-beta.9 发布**：交付 FEATURE_299——统一 Stop、Full Access 与扩展
 执行契约。owned Run 控制与原子 Session Stop 不依赖文件锁，跨直接 CLI、SDK、
 daemon 与 ACP 宿主在单一"受理 vs 确认"Stop 契约下工作。Full Access 直接在
@@ -369,8 +382,7 @@ native 文本权威改在摘要固定的 `manylinux_2_28` 构建器中编译，
 scope 在 SDK、Agent 摘要、CLI 与 Runtime Worker 请求间共享，保留结构化的 Child Agent Provider
 失败信息，精确遵循 run-scoped 凭据校验，并为严格 vLLM 网关省略空 `tools` 数组（Issues 329-332）。
 npm 发布仍由
-npm 发布仍由
-维护者手动执行。详见 [v0.7.96-beta.9 发布清单](docs/release.md#v0796-beta9-release-preparation)。
+维护者手动执行。详见 [v0.7.96-rc.2 发布清单](docs/release.md#v0796-rc2-release-preparation)。
 
 **v0.7.96-alpha.3 发布**：Provider 凭据成为惰性、受限、可撤销的能力（ADR-068）。v2
 credential broker 将 Provider 密钥保留在 OS keychain，按每次 wire call、为单一封闭

package/dist/chunks/{agent-4LNAAVUB.js → agent-EBOX3NOV.js}

@@ -1,2 +1,2 @@
 // @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
-import{Ka as g,Ma as h,a as c,ga as d,ha as e,ia as f,kb as i,lb as j,tb as k}from"./chunk-7QJ4JHJE.js";import"./chunk-JA2DY4EC.js";import"./chunk-ESDWXMTG.js";import"./chunk-5Z7OAIPW.js";import"./chunk-NYKZ6Z2Q.js";import{Ob as a,Pb as b}from"./chunk-P472TI5T.js";import"./chunk-WXBRPZMI.js";import"./chunk-V7ZTP5SV.js";import"./chunk-ONUPGMER.js";export{e as bucketProviderPayloadSize,g as buildAutoRepoIntelligenceContext,f as checkPromiseSignal,b as cleanupIncompleteToolCalls,h as describeTransientProviderRetry,c as emitResilienceDebug,d as estimateProviderPayloadBytes,k as runKodaX,j as saveRequiredSessionSnapshot,i as saveSessionSnapshot,a as validateAndFixToolHistory};
+import{La as g,Na as h,a as c,ha as d,ia as e,ja as f,lb as i,mb as j,ub as k}from"./chunk-IZ3BEFCD.js";import"./chunk-JA2DY4EC.js";import"./chunk-CROQTAT6.js";import"./chunk-5Z7OAIPW.js";import"./chunk-NYKZ6Z2Q.js";import{Ob as a,Pb as b}from"./chunk-P472TI5T.js";import"./chunk-WXBRPZMI.js";import"./chunk-V7ZTP5SV.js";import"./chunk-ONUPGMER.js";export{e as bucketProviderPayloadSize,g as buildAutoRepoIntelligenceContext,f as checkPromiseSignal,b as cleanupIncompleteToolCalls,h as describeTransientProviderRetry,c as emitResilienceDebug,d as estimateProviderPayloadBytes,k as runKodaX,j as saveRequiredSessionSnapshot,i as saveSessionSnapshot,a as validateAndFixToolHistory};

package/dist/chunks/argument-completer-ME7YTGFN.js

@@ -0,0 +1,2 @@
+// @kodax-ai/kodax — bundled distribution. See docs/ADR.md ADR-022 + ADR-024.
+import{Ma as a,Na as b}from"./chunk-N4WUGXCZ.js";import"./chunk-NMC5557J.js";import"./chunk-74UJ5IFX.js";import"./chunk-344XMEVT.js";import"./chunk-HTOYIHJV.js";import"./chunk-FB5D5H2H.js";import"./chunk-IZ3BEFCD.js";import"./chunk-JA2DY4EC.js";import"./chunk-CROQTAT6.js";import"./chunk-5Z7OAIPW.js";import"./chunk-NYKZ6Z2Q.js";import"./chunk-P472TI5T.js";import"./chunk-WXBRPZMI.js";import"./chunk-V7ZTP5SV.js";import"./chunk-ONUPGMER.js";export{a as ArgumentCompleter,b as createArgumentCompleter};