chainlesschain 0.166.15 → 0.166.17

package/src/data/changelog.json

@@ -1,6 +1,32 @@
 {
   "source": "CHANGELOG.md",
   "releases": [
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.17",
+      "cliVersions": ["0.3.9", "0.166.16", "0.166.17"],
+      "date": "2026-09-02",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Added - cc CLI 0.166.17 and Session Core 0.3.9: governed Skill evolution",
+          "body": "> `chainlesschain` **0.166.16 -> 0.166.17** and\n> `@chainlesschain/session-core` **0.3.8 -> 0.3.9** (release candidate,\n> 2026-09-02).\n\n- **Evaluated promotion**: Skill candidates must carry target-matrix evidence,\n  current-revision bindings, durable promotion receipts, and revocation-aware\n  attestations before an active revision can change.\n- **Crash-safe lifecycle**: tenant-scoped candidate and release registries,\n  lease/CAS promotion, last-known-good tracking, and rollback keep concurrent\n  or interrupted mutations fail closed.\n- **Bounded improvement pilot**: the CLI can propose constrained Skill\n  improvements and wiki-informed candidates without directly rewriting or\n  activating installed Skills.\n- **Cross-runtime evidence**: CLI, Desktop, and Graph adapters share the new\n  Session Core `EvolutionRun` and Skill-invocation receipt contracts, keeping\n  evidence identity consistent across runtimes.\n- **Deterministic async hooks**: tool execution now skips `async:true`\n  `PostToolUse` hooks when no supervisor/dispatcher is available, preventing a\n  hidden background command and a Windows timing race.\n- **Release boundary**: publication requires this exact candidate commit to\n  pass every configured Linux, Windows, and macOS job in `CLI CI` and\n  `CLI Strict Sandbox`; a local test result or an older green run is not\n  release authorization."
+        }
+      ]
+    },
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.16",
+      "cliVersions": ["0.166.15", "0.166.16"],
+      "date": "2026-09-01",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.166.16: harden evidence and release gates",
+          "body": "> `chainlesschain` **0.166.15 -> 0.166.16** (release candidate,\n> 2026-09-01).\n\n- **Authenticated evidence consumption**: protected qualification and Graph\n  production consumers bind artifacts to the selected repository, workflow\n  run, and exact commit, reject stale or unsigned producer runs, and keep\n  GitHub API response bodies bounded.\n- **Cross-platform CI stability**: CLI and evidence matrices use the same\n  pinned Node.js `22.22.2` runtime, the workflow lint gate uses a pinned\n  `actionlint`, and the Windows P1 helper allows a wider outer cold-start\n  budget without weakening the verifier's exact inner timeout contract.\n- **Exact RC runtime contract**: the release-candidate audit now requires the\n  same Node.js `v22.22.2` runtime used by the workflows, and a unit assertion\n  pins that value so future workflow/verifier drift fails closed.\n- **Large-team scheduling throughput**: priority inheritance stays cached\n  across lease-only state transitions and is invalidated when priority or\n  cancellation semantics change, so the 10,000-task / 64-worker qualification\n  completes within the cross-platform budget without weakening donation or\n  dependency ordering.\n- **Audited JetBrains steady-state qualification**: the real-host gate retains\n  40–75 readiness lifecycle samples and a stable quiescence proof before the\n  governed 100-sample distribution. The `needs_input` P95 threshold remains\n  strictly below 2 seconds, and both readiness and measured cycles remain bound\n  to the exact fixture ledger.\n- **Canonical registry roots across host path aliases**: candidate and release\n  registries canonicalize an existing ancestor alias while binding the created\n  non-link leaf by filesystem identity. Leaf links and parent escapes remain\n  rejected, and marketplace upgrade tests still prohibit candidate artifact\n  fetches on every fail-closed validation path.\n- **Release and evidence boundary**: this candidate is not yet published;\n  publication still requires the exact release commit to pass the configured\n  Linux, Windows, and macOS release workflows. External P1 production rollout,\n  protected-run, and trust-root evidence remains open and is not claimed by\n  this source release."
+        }
+      ]
+    },
     {
       "productVersion": null,
       "cliVersion": "0.166.15",
@@ -10,7 +36,7 @@
       "sections": [
         {
           "heading": "Fixed - cc CLI 0.166.15: align the formal quality file-tool ceiling",
-          "body": "> `chainlesschain` **0.166.14 -> 0.166.15** (hotfix candidate, 2026-08-31).\n\n- **Formal quality startup restored**: the exact hermetic file-tool ceiling now\n  admits the same read, list, search, write, and edit tools exposed by the\n  protected single-Agent and Graph candidate harness, so all platforms can\n  advance past preflight into the real-model evaluation.\n- **One canonical tool contract**: the headless runtime and formal quality\n  producer consume one frozen tool list, while the agent-loop regression proves\n  the complete list remains inside the fail-closed exact mutation boundary.\n- **No shell or network widening**: `run_shell`, `run_code`, Git, MCP, plugin,\n  IDE, and sub-agent tools remain unavailable; writes are still limited to the\n  task's exact allowed files.\n- **Release validation required**: publish only after this exact release commit\n  passes CLI CI and CLI Strict Sandbox on Linux, Windows, and macOS and the\n  protected quality workflow completes its full matrix and OIDC aggregate."
+          "body": "> `chainlesschain` **0.166.14 -> 0.166.15**, published 2026-08-31 from exact\n> commit `22db04f55974d2e5823772c4bae5e87171fa51db` under immutable tag\n> `v-npm-0-166-15`.\n\n- **Formal quality startup restored**: the exact hermetic file-tool ceiling now\n  admits the same read, list, search, write, and edit tools exposed by the\n  protected single-Agent and Graph candidate harness, so all platforms can\n  advance past preflight into the real-model evaluation.\n- **One canonical tool contract**: the headless runtime and formal quality\n  producer consume one frozen tool list, while the agent-loop regression proves\n  the complete list remains inside the fail-closed exact mutation boundary.\n- **No shell or network widening**: `run_shell`, `run_code`, Git, MCP, plugin,\n  IDE, and sub-agent tools remain unavailable; writes are still limited to the\n  task's exact allowed files.\n- **Release and quality boundary**: the exact release commit passed CLI CI and\n  CLI Strict Sandbox on Linux, Windows, and macOS, then completed npm OIDC\n  publication and independent registry/provenance readback. The post-release\n  quality decision below does not change those artifact bytes or their evidence\n  identity.\n- **Post-release Windows evidence**: `main@458b342f5f` freezes the Windows\n  candidate latency-ratio ceiling at `1.65`; Linux, macOS, and the aggregate\n  remain at `1.5`. Exact run `33411796790`, pinned to `db53dc2da4`, passed\n  Linux, macOS, and all three platforms' functional/security metrics, but its\n  Windows ratio was `1.6379980224` against the then-current `1.6` ceiling, so\n  the run, workflow aggregate, and OIDC attestation did not succeed. The\n  offline weighted three-platform aggregate was `0.6008293973 < 1.5`.\n- **P2-3 accepted-risk closure**: after final threshold commit `917d18b055`,\n  the release owner explicitly accepted the residual risk of no rerun and no\n  final-SHA aggregate/OIDC evidence and closed P2-3. This does not rewrite the\n  failed run as successful, is not part of the `0.166.15` artifact, and is not\n  a general precedent for release gates."
         }
       ]
     },
@@ -23,7 +49,7 @@
       "sections": [
         {
           "heading": "Fixed - cc CLI 0.166.14: restore Docker-optional startup on Windows",
-          "body": "> `chainlesschain` **0.166.13 -> 0.166.14**, published 2026-08-30 from exact\n> commit `ee88125256b5de8281be0a8e57157811bb80c105` under immutable tag\n> `v-npm-0-166-14`.\n\n- **Docker remains opt-in**: a normal agent session no longer probes or\n  requires Docker unless the CLI flag, settings, or managed policy explicitly\n  selects container isolation.\n- **Windows executable lookup**: bare commands resolve through `PATHEXT`\n  before launch, so Docker Desktop's POSIX `docker` script cannot shadow\n  `docker.exe` and trigger `CreateProcessAsUser` error 193.\n- **Explicit isolation stays fail-closed**: `workspace-write`, `strict`, and\n  managed sandbox requirements still reject unavailable engines instead of\n  silently degrading.\n- **Release validation**: the exact release commit passed every configured\n  Linux, Windows, and macOS job in `CLI CI` and `CLI Strict Sandbox`, then\n  completed npm Trusted Publishing and public-registry readback. This is the\n  current public CLI baseline; later Graph/Team quality-harness commits on\n  `main` remain source-only until a newer immutable release passes the same\n  gates."
+          "body": "> `chainlesschain` **0.166.13 -> 0.166.14**, published 2026-08-30 from exact\n> commit `ee88125256b5de8281be0a8e57157811bb80c105` under immutable tag\n> `v-npm-0-166-14`.\n\n- **Docker remains opt-in**: a normal agent session no longer probes or\n  requires Docker unless the CLI flag, settings, or managed policy explicitly\n  selects container isolation.\n- **Windows executable lookup**: bare commands resolve through `PATHEXT`\n  before launch, so Docker Desktop's POSIX `docker` script cannot shadow\n  `docker.exe` and trigger `CreateProcessAsUser` error 193.\n- **Explicit isolation stays fail-closed**: `workspace-write`, `strict`, and\n  managed sandbox requirements still reject unavailable engines instead of\n  silently degrading.\n- **Release validation**: the exact release commit passed every configured\n  Linux, Windows, and macOS job in `CLI CI` and `CLI Strict Sandbox`, then\n  completed npm Trusted Publishing and public-registry readback. This was the\n  public CLI baseline and is now superseded by `0.166.15`; later source-only\n  Graph/Team quality evidence retains its own exact-commit boundary."
         }
       ]
     },

package/src/lib/agent-team/task-lease.js

@@ -1988,7 +1988,18 @@ export class TaskLeaseRegistry {
         patch,
         actor: patch.assignee,
       });
-      if (patch.status !== undefined) this._priorityInheritanceCache = null;
+      // Lease lifecycle changes do not alter the dependency-priority graph.
+      // In particular, a successfully completed task can only have completed
+      // ancestors because acquire() gates on every dependency. Cancelling is
+      // different: recovery may fail a blocked descendant closed, which must
+      // withdraw its donated priority from unfinished ancestors.
+      if (
+        (patch.priority !== undefined && patch.priority !== task.priority) ||
+        (patch.status === TASK_STATUS.CANCELLED &&
+          task.status !== TASK_STATUS.CANCELLED)
+      ) {
+        this._priorityInheritanceCache = null;
+      }
       return true;
     } catch {
       // ConcurrencyError (rev changed under us) — caller re-reads and retries.

package/src/lib/capability-manifest.js

@@ -81,6 +81,54 @@ export const CAPABILITY_MANIFEST = Object.freeze({
     "remote_control",
   ]),
 
+  // Static evolution declarations. Runtime evidence is deliberately kept out
+  // of this manifest so timestamps and deployment state cannot churn the
+  // canonical capability digest. `buildEvolutionStatus()` combines these
+  // declarations with explicit runtime receipts.
+  evolutionCapabilities: Object.freeze([
+    Object.freeze({
+      id: "learning-synthesis",
+      implemented: true,
+      dependencies: Object.freeze([
+        "llm",
+        "candidate-registry",
+        "independent-evaluator",
+      ]),
+      gates: Object.freeze([
+        "candidate-only-output",
+        "artifact-persisted",
+        "eval-before-promotion",
+      ]),
+      mutationScope: "candidate-only",
+    }),
+    Object.freeze({
+      id: "skill-improvement",
+      implemented: true,
+      dependencies: Object.freeze([
+        "candidate-registry",
+        "independent-evaluator",
+      ]),
+      gates: Object.freeze([
+        "candidate-only-output",
+        "active-write-denied",
+        "eval-before-promotion",
+      ]),
+      mutationScope: "candidate-only",
+    }),
+    Object.freeze({
+      id: "skill-candidate-registry",
+      implemented: true,
+      dependencies: Object.freeze(["private-storage", "hard-link-cas"]),
+      gates: Object.freeze([
+        "content-addressed-artifact",
+        "digest-bound-lineage",
+        "immutable-publication",
+        "path-and-symlink-defense",
+      ]),
+      mutationScope: "candidate-only",
+    }),
+  ]),
+
   mcpFeatures: Object.freeze([
     "config_file",
     "registry",
@@ -107,6 +155,121 @@ const manifestOr = (m) =>
   m && typeof m === "object" ? m : CAPABILITY_MANIFEST;
 const wireFeaturesOf = (m) =>
   Array.isArray(manifestOr(m).wireFeatures) ? manifestOr(m).wireFeatures : [];
+const evolutionCapabilitiesOf = (m) =>
+  Array.isArray(manifestOr(m).evolutionCapabilities)
+    ? manifestOr(m).evolutionCapabilities
+    : [];
+const EVOLUTION_EVIDENCE_DIGEST_PATTERN = /^sha256:[a-f0-9]{64}$/u;
+
+function compareCanonicalStrings(left, right) {
+  return left < right ? -1 : left > right ? 1 : 0;
+}
+
+function digestJson(value) {
+  return `sha256:${createHash("sha256")
+    .update(JSON.stringify(value))
+    .digest("hex")}`;
+}
+
+/**
+ * Static evolution capability definitions. Arrays are copied so consumers
+ * cannot mutate the canonical manifest through the projection.
+ */
+export function toEvolutionCapabilityDefinitions(m = CAPABILITY_MANIFEST) {
+  return evolutionCapabilitiesOf(m).map((capability) => ({
+    id: String(capability.id || ""),
+    implemented: capability.implemented === true,
+    dependencies: [...(capability.dependencies || [])],
+    gates: [...(capability.gates || [])],
+    mutationScope: String(capability.mutationScope || "none"),
+  }));
+}
+
+/**
+ * Combine immutable declarations with explicit runtime evidence. Missing or
+ * inconsistent evidence always degrades availability; it can never turn a
+ * declaration on implicitly. `lastEvidence` is an opaque bounded receipt id or
+ * digest, not a timestamp stored in the static manifest.
+ *
+ * @param {{manifest?:object,evidence?:Record<string,object>}} options
+ */
+export function buildEvolutionStatus({
+  manifest = CAPABILITY_MANIFEST,
+  evidence = {},
+} = {}) {
+  const definitions = toEvolutionCapabilityDefinitions(manifest);
+  const safeEvidence =
+    evidence && typeof evidence === "object" && !Array.isArray(evidence)
+      ? evidence
+      : {};
+  const capabilities = definitions.map((definition) => {
+    const observed =
+      Object.hasOwn(safeEvidence, definition.id) &&
+      safeEvidence[definition.id] &&
+      typeof safeEvidence[definition.id] === "object" &&
+      !Array.isArray(safeEvidence[definition.id])
+        ? safeEvidence[definition.id]
+        : {};
+    const implemented = definition.implemented === true;
+    const lastEvidence =
+      Object.hasOwn(observed, "lastEvidence") &&
+      typeof observed.lastEvidence === "string" &&
+      EVOLUTION_EVIDENCE_DIGEST_PATTERN.test(observed.lastEvidence.trim())
+        ? observed.lastEvidence.trim()
+        : null;
+    const wired =
+      implemented &&
+      Object.hasOwn(observed, "wired") &&
+      observed.wired === true;
+    const verified =
+      implemented &&
+      Object.hasOwn(observed, "verified") &&
+      observed.verified === true &&
+      lastEvidence !== null;
+    const defaultEnabled =
+      implemented &&
+      wired &&
+      verified &&
+      Object.hasOwn(observed, "defaultEnabled") &&
+      observed.defaultEnabled === true;
+    const evidenceState = {
+      wired,
+      verified,
+      defaultEnabled,
+      lastEvidence,
+    };
+    const state = !implemented
+      ? "unavailable"
+      : !wired
+        ? "not-wired"
+        : !verified
+          ? "unverified"
+          : defaultEnabled
+            ? "available"
+            : "available-disabled";
+    return {
+      ...definition,
+      ...evidenceState,
+      state,
+      evidenceDigest: digestJson({ id: definition.id, ...evidenceState }),
+    };
+  });
+  const evidenceProjection = capabilities
+    .map((capability) => ({
+      id: capability.id,
+      wired: capability.wired,
+      verified: capability.verified,
+      defaultEnabled: capability.defaultEnabled,
+      lastEvidence: capability.lastEvidence,
+    }))
+    .sort((left, right) => compareCanonicalStrings(left.id, right.id));
+  return {
+    schemaVersion: 1,
+    manifestDigest: capabilityDigest(manifest),
+    evidenceDigest: digestJson(evidenceProjection),
+    capabilities,
+  };
+}
 
 /**
  * The negotiable wire feature keys, in canonical declared order — the value
@@ -233,6 +396,13 @@ export function capabilityDigest(m = CAPABILITY_MANIFEST) {
       ])
       .sort((a, b) => (a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0)),
     runtime: [...(mm.runtimeFeatures || [])].sort(),
+    evolution: toEvolutionCapabilityDefinitions(mm)
+      .map((capability) => ({
+        ...capability,
+        dependencies: [...capability.dependencies].sort(),
+        gates: [...capability.gates].sort(),
+      }))
+      .sort((a, b) => compareCanonicalStrings(a.id, b.id)),
     mcp: [...(mm.mcpFeatures || [])].sort(),
     sandbox: [...(mm.sandboxEngines || [])].sort(),
     permissionModes: [...(mm.permissionModes || [])].sort(),
@@ -303,7 +473,10 @@ export function renderProtocolDoc(m = CAPABILITY_MANIFEST) {
  * @returns {{protocolChange:{from:number,to:number}|null,
  *            addedWireFeatures:string[], removedWireFeatures:string[],
  *            changedWireFeatures:Array<{feature:string, from:object, to:object}>,
- *            addedRuntimeFeatures:string[], removedRuntimeFeatures:string[]}}
+ *            addedRuntimeFeatures:string[], removedRuntimeFeatures:string[],
+ *            addedEvolutionCapabilities:string[],
+ *            removedEvolutionCapabilities:string[],
+ *            changedEvolutionCapabilities:Array<{capability:string, from:object, to:object}>}}
  */
 export function diffCapabilities(prev, next = CAPABILITY_MANIFEST) {
   const wireMap = (m) => {
@@ -318,6 +491,18 @@ export function diffCapabilities(prev, next = CAPABILITY_MANIFEST) {
     return out;
   };
   const runtimeSet = (m) => new Set(manifestOr(m).runtimeFeatures || []);
+  const evolutionMap = (m) =>
+    new Map(
+      toEvolutionCapabilityDefinitions(m).map((capability) => [
+        capability.id,
+        {
+          implemented: capability.implemented,
+          dependencies: [...capability.dependencies].sort(),
+          gates: [...capability.gates].sort(),
+          mutationScope: capability.mutationScope,
+        },
+      ]),
+    );
 
   const p = wireMap(prev);
   const n = wireMap(next);
@@ -342,6 +527,29 @@ export function diffCapabilities(prev, next = CAPABILITY_MANIFEST) {
   const addedRuntimeFeatures = [...nr].filter((k) => !pr.has(k)).sort();
   const removedRuntimeFeatures = [...pr].filter((k) => !nr.has(k)).sort();
 
+  const pe = evolutionMap(prev);
+  const ne = evolutionMap(next);
+  const addedEvolutionCapabilities = [...ne.keys()]
+    .filter((key) => !pe.has(key))
+    .sort();
+  const removedEvolutionCapabilities = [...pe.keys()]
+    .filter((key) => !ne.has(key))
+    .sort();
+  const changedEvolutionCapabilities = [];
+  for (const [key, nextDefinition] of ne) {
+    const previousDefinition = pe.get(key);
+    if (
+      previousDefinition &&
+      JSON.stringify(previousDefinition) !== JSON.stringify(nextDefinition)
+    ) {
+      changedEvolutionCapabilities.push({
+        capability: key,
+        from: previousDefinition,
+        to: nextDefinition,
+      });
+    }
+  }
+
   const pVer = Number(manifestOr(prev).protocolVersion) || 1;
   const nVer = Number(manifestOr(next).protocolVersion) || 1;
   const protocolChange = pVer === nVer ? null : { from: pVer, to: nVer };
@@ -353,5 +561,8 @@ export function diffCapabilities(prev, next = CAPABILITY_MANIFEST) {
     changedWireFeatures,
     addedRuntimeFeatures,
     removedRuntimeFeatures,
+    addedEvolutionCapabilities,
+    removedEvolutionCapabilities,
+    changedEvolutionCapabilities,
   };
 }