@seanyao/roll 4.707.1 → 4.710.2

package/CHANGELOG.md

@@ -2,6 +2,45 @@
 
 ## Unreleased
 
+## v4.710.2 — 2026-07-10
+
+### 稳定性
+- 修好 roll-capture 在无界面环境(CI、无人值守 loop、非图形终端)下明明已安装却被误报"未安装"的问题——安装检测本是纯文件检查、不依赖图形界面,之前被连同权限探测一起跳过了(FIX-1241) `[loop-engine]`
+
+## v4.710.1 — 2026-07-10
+
+### 稳定性
+- 验收契约在 cycle 开始就冻结下来:交付时按这份冻结的标准判定,谁在中途改动验收标准或私自加上"免截图",都会被检测出来并告警——不再能悄悄放宽自己的验收门槛(US-EVID-020、US-EVID-021) `[acceptance-evidence]`
+- 有验收标准却没声明任何取证方式的卡,在建卡阶段就被挡进待办队列并提醒补上(软拦,绝不卡住整个循环),不用等它跑完才发现交不出证据(US-EVID-022) `[acceptance-evidence]`
+- 截图/命令输出/物理截屏这类"抓取来的证据"改由框架自己绑定,builder 不再手填路径;抓取失败会明确报出来,不再悄悄变成一份空验收(US-EVID-023) `[acceptance-evidence]`
+- 验收清单指向的证据文件在磁盘上找不到时,现在也会自动补跑一次去补齐,补住"清单在、证据文件不在"这类反复交不出的死角(US-EVID-024) `[acceptance-evidence]`
+- 收紧免截图豁免:豁免是建卡时定死的,builder 中途加的不算数;而且"免截图 ≠ 免证据"——没写明替代证据(命令输出或指名测试)的豁免,建卡校验会直接挡下(US-EVID-025) `[acceptance-evidence]`
+- 彻底修好循环把工作分支泄漏到共享目录的老问题:每个 cycle 用独立的分离工作区、失败时兜底打包保留、无主的残留分支自动回收(US-LOOP-094、US-LOOP-095、US-LOOP-096、US-LOOP-097) `[loop-engine]`
+- 给分支治理加了一条端到端验证:跑完整一轮后主仓不会残留循环分支、远程分支合并后立即清除,不再只靠推理(US-LOOP-098) `[loop-engine]`
+
+### 可观测
+- 新增"免截图豁免率"味道信号,以及对存量豁免的只读审计,便于看清验收豁免有没有被滥用(US-EVID-026、US-EVID-027) `[acceptance-evidence]`
+
+### 交付方法
+- roll-build 交付契约固化三条"边造边验"的做法:写测试和写实现由不同 agent 分开做、还带一轮互相攻破;代码评审交给独立的另一个 agent 出结构化结论;每条验收标准一变绿就地采证(US-SKILL-031、US-SKILL-032、US-SKILL-033) `[skill-ecosystem]`
+
+## v4.708.2 — 2026-07-08
+
+### 新功能
+- `roll worktree audit` — 先盘清哪些 worktree 可回收、哪些要保留(US-LOOP-093) `[loop-engine]`
+  <!-- evidence: .roll/features/loop-engine/US-LOOP-093/latest/US-LOOP-093-report.html -->
+
+## v4.708.1 — 2026-07-08
+
+### 稳定性
+- 用户项目自主发布不再卡在空验收报告或复检超时,会按真实证据继续推进(FIX-1233、FIX-1234) `[loop-engine]`
+- codex 恢复参与派工,隔离不再剥掉登录凭据(FIX-1235) `[loop-engine]`
+  <!-- evidence: .roll/features/loop-engine/FIX-1235/latest/FIX-1235-report.html -->
+- loop 发现 agent 写回主仓会立即硬停并隔离现场,不再暂停后继续污染主仓(FIX-1236) `[loop-engine]`
+  <!-- evidence: .roll/features/loop-engine/FIX-1236/latest/FIX-1236-report.html -->
+- `loop now --cards` 不再启动旧版全局 runner,本地安全修复不会被绕过(FIX-1239) `[loop-engine]`
+- 交付对账不再丢 PR 信息,已合并卡不会反复制造未提交变更(FIX-1240) `[loop-engine]`
+
 ## v4.707.1 — 2026-07-07
 
 ### 稳定性

package/README.md

@@ -123,7 +123,9 @@ profiles, evidence, Evaluator, and release gates:
 - **autonomous** — `roll loop on` installs the scheduler; eligible Stories may
   be picked within the existing pause, budget, route, evidence, Evaluator, and
   release gates. `roll loop pause` / `roll loop off` return control to guided
-  operation; `roll loop resume` / `roll loop on` switch back explicitly.
+  operation; `roll loop off --all` is the machine-wide emergency stop for every
+  local `com.roll.*` LaunchAgent; `roll loop resume` / `roll loop on` switch
+  back explicitly.
 - **Attest and evidence are story-scoped**. A Story is accepted through its own Acceptance Review Page (`latest/<id>-review.html`), AC map, and screenshots/test artifacts. `latest/<id>-report.html` remains a legacy alias for one release cycle.
 
 Agent bindings are declared in two files: `~/.roll/agents.yaml` for Machine Scope
@@ -213,11 +215,11 @@ with `roll loop resume` when ready.
 | `roll backlog [sync\|block\|defer\|lint\|…]` | View, manage, lint, and sync pending tasks |
 | `roll config [lang\|prices\|tune\|…]` | Read/write configuration, model prices, and suggest-only tuning |
 | `roll design [--from-file <path>] [--agent <name>] [--verbose\|--raw]` | Launch `$roll-design` with bounded live progress, handoff, and an optional `roll loop go --review auto` continuation when new Todo cards are created |
-| `roll doctor [skills\|tools\|language]` | Diagnose install health, skills, tools, permissions, and language drift |
+| `roll doctor [skills\|tools\|language\|repair-protection]` | Diagnose install health, skills, tools, permissions, language drift, and stale main-checkout write protection |
 | `roll help [--lang en\|zh] [name]` | View built-in Charter / guide docs; `roll --help` prints CLI usage |
 | `roll idea "<one-sentence description>"` | Capture and classify a new backlog card |
 | `roll init` | Diagnose this directory and route setup/onboarding |
-| `roll loop <on\|off\|go\|watch\|runs\|cycles\|cycle\|alert\|…>` | Run, observe, and maintain the autonomous executor |
+| `roll loop <on\|off [--all]\|go\|watch\|runs\|cycles\|cycle\|alert\|…>` | Run, observe, stop, and maintain the autonomous executor |
 | `roll next` | Continue init/onboard with one best next command |
 | `roll north [--json] [--no-color]` | North-star terminal panel for autonomy, delivery rate, fix tax, and attribution errors |
 | `roll release [--dry-run\|--showcase]` | Release planning/flow plus golden-path showcase support |