loadout-ai 0.7.0 → 0.9.0

package/CHANGELOG.md

@@ -1,6 +1,153 @@
 # Changelog
 
-## Unreleased
+## 0.9.0 - 2026-09-03
+
+### Removed
+
+- Model routing (`loadout route`, policy files, model-config routing). The
+  feature was too subjective and prices rotted within weeks. Handoff and the
+  factual coordination protocol replace model-selection advice.
+
+### Changed
+
+- Moved handoff code from `src/core/routing/` to `src/core/delegation/`, and
+  model/credential configuration to `src/core/agents/`. API-access parsing
+  remains in `src/core/routing/access.ts` because it still governs setup choices.
+- Renamed the `loadout-router` first-party skill to `loadout-handoff`, stripped
+  model advice, and focused it on delegation and factual project coordination.
+- All JSON HTTP responses are now streamed through a bounded reader with
+  per-endpoint byte caps and timeouts. Oversized or timed-out responses
+  are rejected before parsing.
+- Release workflow runs `verify:full` (includes coverage) instead of `verify`.
+- npm description and keywords aligned with the project's actual scope.
+
+### Fixed
+
+- Validated every handoff log entry against a strict Zod schema at parse time.
+  Schema-invalid lines are reported as corrupt without hiding valid neighbors.
+- Tracking an existing provider session no longer submits an implicit snapshot
+  turn when automatic delivery is disabled. Provider quota is now spent only by
+  an explicit start/send operation or the opt-in bridge.
+- Coordination tests now exercise Windows with platform-appropriate permission
+  assertions and launch the MCP test process through Node rather than a POSIX
+  package shim.
+
+### Added
+
+- Bounded Claude Code ↔ Codex design rooms via `loadout coord discuss`. The two
+  providers alternate proposal and critique turns on one technical question,
+  then record a linked public transcript, final decision, alternatives, and
+  unresolved disagreement. Fresh and explicit existing sessions are supported.
+- Discussion safety controls: exact preflight turn accounting, 1-8 rounds, a
+  hard paid-turn budget, a bounded per-turn timeout, sequential reply IDs,
+  no-edit/no-tool prompts, singleton bridge ownership, kill-switch checks, and
+  visible failure without silent provider retries.
+
+- Live coordination module (`loadout coordinate`) with typed events for
+  contracts, file ownership, decisions, progress updates, and acknowledgements.
+  Events use monotonic sequence numbers and cursor-based reads so reconnecting
+  agents never miss a message.
+- `loadout serve` starts an MCP server exposing the same coordination tools
+  so both Claude Code and Codex can connect to a shared project coordinator.
+  The MCP runtime is packaged and smoke-tested as a normal dependency.
+- Provider-session bridge commands backed by Claude Code's print-mode CLI and
+  the official Codex SDK. The bridge resumes explicit session IDs and delivers
+  relevant events as follow-up turns at safe boundaries; it does not claim
+  mid-turn injection or shared private context.
+- Bridge safeguards: one process per project, concurrent cross-provider
+  delivery, passive updates, an automatic-turn cap, untrusted-data framing,
+  owner-only session state, and provider responses that are displayed but not
+  persisted.
+- `loadout daemon start` runs a local HTTP coordination server with REST API,
+  SSE push subscriptions, and a live web dashboard showing contracts, file
+  ownership, agent activity, and real-time event feed.
+- Automatic secret redaction — API keys, tokens, passwords, JWTs, and other
+  credentials are stripped from coordination events at the canonical storage
+  boundary before CLI, MCP, or HTTP writes are persisted.
+- Log retention and compaction (`loadout coord compact`) — configurable max
+  events and max age, atomic log rewrite with archived backup.
+- Live file watcher (`loadout coord watch`) detects new coordination events
+  via `fs.watch` with sub-second latency, no daemon required.
+- `loadout coord status` shows a colored terminal overview of ownership,
+  contracts, and acknowledgement state.
+- Conflict preview (`loadout coord conflicts`) — before an agent writes, shows
+  what the other agent changed in the same files with git diffs.
+- Contract diffing (`loadout coord diff`) — auto-generates a structured delta
+  when a contract revision bumps, showing exactly what changed.
+- Coordination replay (`loadout coord replay`) — plays back the full
+  coordination timeline as a formatted narrative story.
+
+## 0.8.0 - 2026-09-02
+
+### Security
+
+- Reject a remote registry bundle whose `digest` is not a SHA-256 hex string,
+  and verify the resolved cache path stays under the cache root, before any
+  recursive delete. A crafted digest could previously escape the cache and
+  delete an arbitrary user-accessible directory.
+- Fail closed in the safety scanner. Files that are oversized, unreadable, or
+  too deeply nested are reported as a blocking `uninspectable` finding instead
+  of being skipped silently, so an unreviewable file can no longer produce a
+  clean report.
+- Apply a timeout, byte cap, and file cap to every repository fetch by default
+  rather than only when a caller opts in, and bound registry responses by time
+  and decoded size.
+
+### Fixed
+
+- Parse the handoff log line by line. A single truncated write previously made
+  the whole inbox appear empty; good lines now survive and the corrupt line is
+  reported.
+- Settle handoff tasks on `error` and `cancel` as well as `done`, via an
+  explicit `resolves` field, so a failed task no longer stays pending forever.
+- Migrate handoff instruction blocks already written into `CLAUDE.md` and
+  `AGENTS.md` that still name retired commands.
+- Report installed skills as a count of skills rather than a sum of every
+  nested file, which overstated 44 skills as 584 items.
+
+### Changed
+
+- Generate shell completions from the Commander command tree so they cannot
+  advertise commands the CLI does not register.
+- Rebuild `loadout route` around a routing policy the user owns
+  (`~/.loadout/routing.json`, three buckets) instead of a fixed phase-to-tier
+  table, and narrow the model catalog to the current Claude and GPT-5.6 tiers.
+- Collapse handoff to a single command that sets itself up on first use.
+
+### Added
+
+- `scripts/check-documented-commands.mjs` in the evidence gate: documentation
+  may no longer reference a command the CLI does not have.
+
+## 0.7.0 - 2026-08-31
+
+### Added
+
+- First-party skills (`loadout skills list|install|remove`) shipping
+  `loadout-router` and `loadout-curator`, so Loadout is usable from inside an
+  agent conversation rather than only from a terminal.
+
+### Changed
+
+- Retire 15 redundant or dead-end commands, taking the surface from 66 to 26.
+- Group the 86 flat modules in `src/core` into eight domains.
+- Drop "Boost" from the mode names and explain that Maximum stays disabled.
+
+## 0.6.0 - 2026-08-31
+
+### Added
+
+- `loadout route`, recommending a model tier for a task with real pricing.
+- `loadout handoff`, a shared task log between Claude Code and Codex.
+
+### Changed
+
+- Rewrite `loadout doctor` output around a health grade and actionable next
+  steps rather than a per-component dump.
+
+### Fixed
+
+- Resolve `LOADOUT_VERSION` from both source and built layouts.
 
 ## 0.5.9 - 2026-07-21