jules-orchestrator-kit 0.73.1 → 0.75.0

package/CHANGELOG.md

@@ -7,6 +7,29 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.75.0] - 2026-09-28
+
+### Added
+- **Interactive Terminal Navigation Hub (`src/ops/tui-menu.mjs`)**: Added zero-external-dependency terminal UI hub accessible via `agentctl menu`, `tui`, `ui`, or `-i`, using Node.js ESM built-ins (`readline`, ANSI cursor escape sequences). Supports arrow-key navigation, hotkey selection, command preview, contextual execution, and direct handoff to interactive wizards.
+- **Fuzzy Typo Correction & Suggestions (`bin/agentctl.mjs`)**: Implemented Levenshtein-distance suggestion engine for unrecognized CLI commands, surfacing closest matches (e.g. `agentctl dsipatch` suggests `dispatch`).
+- **Actionable Scope Diagnostics & Protected Scope Flag (`src/wizard-task.mjs`)**: Added `--allow-protected` flag to `agentctl task create` alongside detailed diagnostic breakdowns of which paths are protected (e.g. `package.json`, `.agent/protected-paths.json`) when task objectives touch sensitive repository infrastructure.
+- **Task Payload Preview on Dry-Run (`bin/agentctl.mjs`, `src/engine.mjs`)**: `agentctl dispatch --dry-run` now prints formatted task payloads, verification commands, and risk tier assignments before execution.
+- **Maintainer Approval Path for Test Changes (`.github/workflows/agent-scope-guard.yml`, `scripts/ci-scope-guard.mjs`)**: Established narrow maintainer approval protocol (`allow-p:<HEAD_SHA>`, `allow-e:<HEAD_SHA>`) allowing verified modifications to test expectations or protected paths under explicit commit-bound review.
+
+### Fixed
+- **Goal Evidence Enforcement (`src/engine.mjs`)**: Disallowed silent early termination on goal tasks lacking explicit verification evidence.
+- **Test Environment Variable Bleed (`src/engine.mjs`)**: Sanitized test execution environment to prevent PR label bypass tokens from leaking into child test runs during gate evaluation.
+
+## [0.74.0] - 2026-09-19
+
+### Added
+- **Native `agentctl.task/v1` Frontmatter Specification & Zero-Dependency Parser (`src/envelope.mjs`, `scripts/validate-envelope.mjs`)**: Added canonical YAML frontmatter envelope support for task files (`.md`) without third-party dependencies. Reconciles `scope.allow`, `scope.deny`, `verification.commands`, `invariants`, `mcp_directives`, and `flags` with 100% backward compatibility for legacy HTML comments (`<!-- JULES_TASK_ENVELOPE: ... -->`).
+- **Taxonomy Delegation Lanes (Green / Amber / Orange / Red) (`src/envelope.mjs`, `src/wizard-task.mjs`)**: Formulated formal risk lane delegation. Red tasks are rejected at validation; Orange tasks warn for external execution only; Amber tasks allow protected path changes (e.g. dependency upgrades in `package.json`, migrations, auth) under explicit plan approval (`requirePlanApproval: true`). Green tasks prevent unapproved protected scope mutations.
+- **Circuit Breaker & Verification Contract in Envelope (`src/envelope.mjs`)**: Added frontmatter declarations for `circuitBreaker` (`max_attempts`, `max_diff_lines`, `stop_if_same_failure_repeats`) and `verification` metadata (`require_nonzero_test_count`, `trusted_base`), alongside `constraints` alias support.
+- **Stack Invariant & MCP Directive Ingestion (`src/wizard-task.mjs`)**: Automatically infers runtime constraints (Zero-JS for Astro, workerd edge runtime constraints for Cloudflare Wrangler) and injects mandatory pre-execution documentation lookup directives into task instructions.
+- **Dependency Upgrade Scope Harmonization (`src/wizard-task.mjs`)**: Updated `buildGuardrailFooter` to exclude explicitly authorized paths (`opts.allowedPaths`) from forbidden path warnings, eliminating conflicting instructions for dependency upgrade workloads.
+- **Diff Payload Governor Branch Base Comparison (`src/wizard-task.mjs`)**: Calculated diff payload sizes against `git diff origin/${baseBranch}...HEAD | wc -c` instead of local uncommitted diffs.
+
 ## [0.73.1] - 2026-09-17
 
 ### Changed

package/README.md

@@ -12,11 +12,12 @@ Use the kit to describe a scoped coding task, send it to Google Jules or an
 installed Claude Code, Codex or Gemini CLI, and verify the resulting changes.
 You can also run local checks without connecting an agent provider.
 
-**Dispatch and verification are separate.** Dispatch sends the task; `gate` runs
-configured checks on changes. `gate --fix` can request automated repairs. Provider
-output and passing checks still need review before merging.
+**Dispatch, verification and repair are explicit.** Dispatch sends the task;
+`gate` runs configured checks without mutating the working tree. Use
+`agentctl repair` explicitly for repair workflows. Provider output and passing
+checks still need review before merging.
 
-The current release is **v0.73.1**, a pre-1.0 release. A long-term stability policy is a
+The current release is **v0.75.0**, a pre-1.0 release. A long-term stability policy is a
 [v1.0 goal](https://github.com/FullThrottle83/jules-orchestrator-kit/blob/main/ROADMAP_V1.md).
 
 ## Quickstart
@@ -32,9 +33,16 @@ npx jules-orchestrator-kit init
 ```
 
 The wizard detects the project and asks about provider and verification settings.
-Use `init --yes` to accept defaults. It creates `.agent/config.yml`, agent
-instructions, role prompts and project contract files. Inspect the generated
-configuration and diff, especially the test command and protected paths.
+Use `init --yes` to accept defaults. By default it writes only the canonical
+`.agent/config.yml` plus runtime-state entries in `.gitignore` when they are
+missing. Inspect the generated configuration and diff, especially the test
+command and protected paths. Use `init --dry-run` to preview the exact writes
+without changing the repository.
+
+The historical full scaffold (AGENTS.md, specialist prompts, rules, workflows and
+contract templates) remains available through `agentctl init --force` and the
+legacy `jules-init` entry point during the 0.x migration window; it is no longer
+default-owned by `agentctl init`.
 
 ```bash
 git diff
@@ -43,9 +51,9 @@ git status --short
 
 Stage the generated files you reviewed, then commit them. The committed
 configuration establishes the trusted base policy used by verification. On an
-already initialized repository, back up and review `.agent/config.yml` and
-`.agent/jules.yml` before rerunning `init`; the wizard can regenerate those
-manifests. Avoid `--force` unless replacement of generated files is intended.
+already initialized repository, back up and review `.agent/config.yml` before
+rerunning `init`. Existing legacy `.agent/jules.yml` files are left untouched
+by the default path. `--force` deliberately opts back into the legacy full scaffold.
 
 ### 2. Check provider readiness
 
@@ -107,7 +115,7 @@ For direct `agentctl` commands, install globally with
 | Create a scoped task | `agentctl task create` |
 | Preview queued work | `agentctl queue --dry-run` |
 | Check changes locally | `agentctl gate` |
-| Verify and request repairs | `agentctl gate --fix` |
+| Start an explicit repair workflow | `agentctl repair --input "<failure>" --task` |
 | Diagnose setup | `agentctl doctor` |
 | Inspect a command's flags | `agentctl help <command>` |
 
@@ -166,7 +174,7 @@ npm run package-integrity
 npm run guard-reach
 ```
 
-The recorded baseline is **1530 unit tests across 204 suites**. Doc-sync compares
+The recorded baseline is **1650 unit tests across 210 suites**. Doc-sync compares
 that count with an actual run. Counts do not establish correctness for every
 provider or project. See
 [contributing](https://github.com/FullThrottle83/jules-orchestrator-kit/blob/main/CONTRIBUTING.md)
@@ -186,19 +194,12 @@ for the review process.
 First identify which files setup created and which files already belonged to your
 project. For shared files, remove only the kit's additions using Git history.
 
-For a repository where **all listed paths belong exclusively to the kit**, remove
-the tracked scaffold and runtime state as follows. Adapt this list first if any
-path contains your own instructions, configuration or queued work:
-
-```bash
-git rm -rf --ignore-unmatch .agent AGENTS.md SPEC.md CONSTRAINTS.md DESIGN.md \
-  .github/workflows/agent-gate.yml .gitlab-ci.agent-gate.yml .cursor/rules/jules.mdc
-rm -rf .agent .agentctl
-npm uninstall -g jules-orchestrator-kit
-```
+For the default minimal setup, remove `.agent/config.yml` and the kit's
+runtime-state block from `.gitignore`. Repositories that previously used the
+legacy full scaffold may also contain AGENTS.md, prompts, rules, workflows and
+contract files; remove those only after confirming ownership.
 
-Remove the kit's appended `.gitignore` block while preserving other entries.
-See the uninstall guide for the complete inventory.
+See the uninstall guide for the complete inventory and legacy cleanup steps.
 
 ## Limitations and attribution