@nyex/nyex 1.0.11 → 1.2.0

package/README.md

@@ -2,7 +2,7 @@
 
 NYEX is a terminal-first Agentic-AI execution runtime built for real software delivery. It enforces identity-gated access, routes work deterministically across roles and providers, and keeps execution observable through trace-first diagnostics and safety guardrails so teams can ship faster without losing control of runtime behavior.
 
-> **Defaults (v1.0.10)**
+> **Defaults (v1.2.0)**
 > - **Strict Cloud Mode: ON** (cloud failures do **not** silently fall back to local)
 > - **Local Mode: OFF** (the local proxy never starts unless you explicitly enable it)
 
@@ -72,18 +72,29 @@ You can change models/providers via:
 
 If no providers are connected after NYEX login, the onboarding flow will prompt you to connect one.
 
-### NYEX 1.0.10
-NYEX 1.0.10 is a hotfix release focused on trust and integrity surfaces after 1.0.9:
-- summary rendering integrity
-- visible-but-muted silenced output
-- footer RoleHits reconciliation from canonical trace attempts
-- improved `/trace` readability
+### NYEX 1.2.0
+NYEX 1.2.0 is a feature release that includes runtime trust and product-surface hardening:
+- plain `nyex` startup stays TUI-first with in-app auth gate flow
+- live layout/render compaction and transcript/live fidelity fixes in the main conversation surface
+- runtime tool-call integrity hardening to prevent orphan `call_id` output failures
+- footer planner/tool telemetry now reflects live execution truth
+- default final surface is canonical raw result followed by evaluator output
+- release-prep validation evidence is generated locally via:
+  - `scripts/qa/tui-validation-harness.ps1`
+  - `artifacts/tui-validation/report.md`
+
+Mainline updates after 1.2.0 (current `origin/main` pre-release line):
+- live command output rendering is append-only (history-first) to reduce blank-space artifacts in `Ran ...` cards
+- main completed view stays raw-result-first and no longer shows evaluator headline rows
+- evaluator evidence remains available in transcript/debug surfaces
 
 ### Version
-- Package: `@nyex/nyex@1.0.10`
+- Package: `@nyex/nyex@1.2.0`
 
-### Core Features
+### Core Features
 - Deterministic multi-role orchestration (`primary`, `planner`, `tool_exec`, `summarizer`, `validator`).
+- Planner-first decomposition for long/multi-step prompts before compaction fallback.
+- Structured planner artifact checklist contract for execution-ready handoff.
 - Attempt-based observability with trace-first diagnostics (`/trace`, `/status`, `/doctor`, `/signals explain`).
 - Validator safety invariants: pre-final only and no-tools.
 - Canonical tool descriptors and lifecycle-normalized tool execution outcomes.
@@ -94,14 +105,17 @@ NYEX 1.0.10 is a hotfix release focused on trust and integrity surfaces after 1.
 - Local persistent memory support with session-aware context continuity.
 - Session persistence and explicit resume flows (`nyex resume <session-id>`) with clearer invalid-id handling.
 - Refresh-token-backed auth/session reliability with silent refresh on startup/resume.
-- Strict Cloud Mode defaults with deterministic fallback behavior and explicit local-mode opt-in.
+- Strict Cloud Mode defaults with deterministic fallback behavior and explicit local-mode opt-in.
+- Entitlement-first access gate: productive use requires `active_entitlement`; blocked access states stay diagnostics-only until resolved.
 
 ### Recent updates
-- 1.0.10 hotfix integrity pass:
-  - summary surface first-line/clipping fixes
-  - muted-but-visible silenced command output
-  - footer RoleHits sync from canonical trace attempts
-  - `/trace` surface readability cleanup
+- post-1.2.0 mainline (unreleased):
+  - planner-first decomposition strengthened over compaction-first behavior
+  - planner artifact contract/checklist schema enforced for structured planning output
+- 1.2.0 runtime/product hardening pass:
+  - plain startup now remains in TUI with in-app auth gate behavior
+  - raw result + evaluator finalization replaces summary-first finalization default
+  - footer planner/tool counters now track live visible execution events
 - 1.0.9 foundation:
   - canonical tool descriptors + normalized lifecycle/result/error contracts
   - descriptor-driven permission tightening and clear `permission_denied` outcomes
@@ -163,6 +177,30 @@ nyex auth login
 
 Then retry.
 
+### Windows install fails with `EPERM` / `TAR_ENTRY_ERROR` on `nyex.exe`
+This usually means antivirus (Norton/Defender) quarantined or locked the binary during npm extraction.
+
+Recommended recovery:
+```powershell
+npm uninstall -g @nyex/nyex @nyex/nyex-win32-x64-msvc
+npm cache clean --force
+npm i -g @nyex/nyex
+```
+
+If the error repeats:
+- add allow rules for your npm global install directory and `nyex.exe`
+- rerun install after restoring the file from AV quarantine
+- verify with `nyex --version`
+
+Verify Windows signature:
+```powershell
+$nyex = (Get-Command nyex).Source
+Get-AuthenticodeSignature -LiteralPath $nyex | Format-List Status,SignerCertificate,TimeStamperCertificate
+```
+
+Release trust note:
+- public NYEX Windows packages are staged from CA-issued, RFC3161-timestamped Authenticode signatures only.
+
 ### Provider not connected
 Use `/providers` to connect (OpenAI/Gemini/Claude). NYEX won’t dispatch to a disconnected provider.
 
@@ -197,3 +235,4 @@ See repository license.
 
 
 Digilabs Company Australia © NYEX AI Platform. All rights reserved. AIC Pty Ltd (ACN 082 378 256)
+

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nyex/nyex",
-  "version": "1.0.11",
+  "version": "1.2.0",
   "description": "Nyex CLI (private beta)",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://nyex.ai",
@@ -18,7 +18,7 @@
     "nyex": "bin/nyex.js"
   },
   "optionalDependencies": {
-    "@nyex/nyex-win32-x64-msvc": "1.0.11"
+    "@nyex/nyex-win32-x64-msvc": "1.2.0"
   },
   "engines": {
     "node": ">=18"