triss-coworker 0.37.0 → 0.37.2

package/CHANGELOG.md

@@ -7,12 +7,78 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.37.2] — 2026-08-20
+
+### Added
+
+- **Host-agent delegation workflow guidance** — a single documented
+  one-host/one-coder workflow: the host plans and decides, sends one complete
+  task packet to one `triss coder run`, the coder investigates, implements,
+  tests, debugs, and self-verifies, and the host inspects the actual diff and
+  makes the final decision. Taught consistently in `README.md`, the full
+  cookbooks (`templates/codex-full.md`, `templates/claude-full.md`), the nano
+  templates (`templates/codex.md`, `templates/claude.md`), and the
+  authoritative `docs/reliable-delegation-contract.md`.
+
+### Changed
+
+- Coder and researcher agent templates now state the approval boundary
+  explicitly: the coder never commits, pushes, deploys, or touches anything
+  outside its checkout and reports truthfully; the researcher is a
+  research-only specialist and not a mandatory precursor to coder work.
+
+### Documentation
+
+- Scope the constant `expectation: "either"` output field and the
+  `run_files_changed` change-evidence field to the `opencode`/`crush`
+  engines in `docs/reliable-delegation-contract.md` and `docs/mcp.md`; the
+  `opencode2` beta envelope reports neither and uses `files_changed`
+  instead.
+
+### Artifact integrity (0.37.2)
+
+- `triss-dsh-provider-bundle-0.37.2.tgz` — sha256
+  `0327051792f0fe0d5431619aee7e2dee120fbbdb744b3e7f9afdd0eb958740b9`,
+  integrity
+  `sha512-BBZlA9OiA8pIp+n+GJ9RBX4+yPQpRoKjQLx8KY/5ZIlqRCMUJ5SResBEuVpPiMI9UDTnWq2rQp5JI/6TVh0Y7w==`
+  (computed with the pinned release npm 11.6.2 via `npm pack`; `npm pack`
+  output is byte-deterministic).
+- Root `triss-coworker-0.37.2.tgz` sha256 is reproducible via `npm pack` at
+  tag `v0.37.2` (the root tarball ships `CHANGELOG.md`, so its hash cannot be
+  recorded inside this file); registry verification compares the packed
+  artifact against the published tarball byte-for-byte.
+
+## [0.37.1] — 2026-08-19
+
+
+### Fixed
+
+- Propagate cancellation through the main MCP review path and fail closed
+  before invoking the provider when the request is already aborted.
+
+### Documentation
+
+- Align GLM review documentation and templates with model-sized automatic
+  token budgets and the explicit `max_tokens >= 16384` guidance.
+
+### Artifact integrity (0.37.1)
+
+- `triss-dsh-provider-bundle-0.37.1.tgz` — sha256
+  `2fc3ff982bf94982552a820da395c98c2b37638bd84ed298eafe2638e74f3683`,
+  integrity `sha512-f0CDbccY9yjxZ0b3qq2XFxaSzcrMb8vLHxRGavIIk0jp+t2m9tN3R6V9v9QVZtxfExHCW5zUeFU24mzQsA4Cig==`
+  (computed with the pinned release npm 11.6.2 via
+  `npm pack`; `npm pack` output is byte-deterministic).
+- Root `triss-coworker-0.37.1.tgz` sha256 is reproducible via
+  `npm pack` at tag `v0.37.1` (the root tarball ships `CHANGELOG.md`, so its
+  hash cannot be recorded inside this file); registry verification compares
+  the packed artifact against the published tarball byte-for-byte.
+
 ## [0.37.0] — 2026-08-18
 
 ### Added
 
-- **Reliable delegation (Release C)** — sequential sharding per
-  `docs/reliable-delegation-contract-plan.md`:
+- **Reliable delegation (sharding acceptance)** — sequential sharding per the
+  public `docs/reliable-delegation-contract.md`:
   - `--payload-mode shard` CLI + MCP shard parity: source-ordered
     whole-file shards (a file is never split across shards);
   - sequential executor with first-failure stop, cancellation
@@ -25,13 +91,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
     never completed prose or raw diff content;
   - `evidence + shard` and `shard + --stream` rejected before any model
     call;
-  - Release C synthetic acceptance (`--synthetic --release C`) and live
-    acceptance (`--live --release C`; PASS / SKIPPED_NO_CREDENTIALS /
+  - sharding synthetic acceptance (`--synthetic --suite sharding`) and live
+    acceptance (`--live --suite sharding`; PASS / SKIPPED_NO_CREDENTIALS /
     BLOCKED_ENVIRONMENT recorded separately, never upgraded to success).
 
-- **Reliable delegation (Release B)** — bounded single review, exact PR
-  diff acquisition, and the issue trust boundary per
-  `docs/reliable-delegation-contract-plan.md`:
+- **Reliable delegation (review acceptance)** — bounded single review, exact PR
+  diff acquisition, and the issue trust boundary per the public
+  `docs/reliable-delegation-contract.md`:
   - reloadable review limits (`TRISS_REVIEW_SINGLE_MAX_BYTES`,
     `TRISS_REVIEW_SHARD_MAX_BYTES`, `TRISS_REVIEW_TOTAL_MAX_BYTES`,
     `TRISS_REVIEW_MAX_SHARDS`) with atomic validation and full-default
@@ -98,7 +164,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   (`usage_source: "opencode2"`, terminal-error precedence, no fabricated
   zeros), namespaces sessions per engine, and rides the shared opencode-v1
   configuration backend for `coder model set` / rollback. See
-  docs/opencode2.md and docs/opencode2-engine-plan.md.
+  docs/engines/opencode2.md and docs/opencode2-engine-plan.md.
 
 ### Security (opencode2 engine beta)
 
@@ -126,7 +192,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   canonical parser (comments and trailing commas no longer abort the run),
   and `parseOpenCodeDocument` drops trailing commas followed by comments.
 
-### Fixed (review rounds 4–6)
+### Fixed
 
 - Dual legacy/native config forms (`provider`+`providers`,
   `plugin`+`plugins`, `permission`+`permissions`) reject — the pinned build
@@ -152,7 +218,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   rejects BEFORE any credential/config write with actionable guidance; a
   fresh V2 init warns that the shared deny-everything policy removes the
   allowlisted commands from plain V1 runs (documented in
-  docs/opencode2.md, including two new troubleshooting rows).
+  docs/engines/opencode2.md, including two new troubleshooting rows).
 - Model inspection tolerates unrelated hostile config shapes (a non-string
   plugin reference, unreadable directories) — the post-commit audit of a
   successful `coder model set` no longer rolls back over them; `coder
@@ -185,12 +251,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 
-- **Reliable delegation (Release A)** — coder envelope v2 orchestration per
-  `docs/reliable-delegation-contract-plan.md`:
+- **Reliable delegation (session acceptance)** — coder envelope v2 orchestration
+  per the public `docs/reliable-delegation-contract.md`:
   - envelope fields `session_slug`, `result_retention`, `result_id`, and
     `execution_capabilities` (eight honest `enforced|best_effort|unavailable`
     values + `effective_isolation`) on every safe envelope
-    (`docs/reliable-delegation-release-a.md`);
+    (`docs/reliable-delegation-contract.md`);
   - v2 session CLI: `triss coder session list`, `triss coder session clean
     <slug> --engine <opencode|crush>` (per-engine store only, legacy
     `.triss/sessions.json` never touched);
@@ -205,7 +271,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
     phase-aware manifest machine, completion-marker hashing);
   - credential proxy (loopback one-run token) on both engines — the real
     provider key never reaches the engine environment; every run requires
-    the proxy (Release A rejects runs when it is unavailable);
+    the proxy (session acceptance rejects runs when it is unavailable);
   - pure provider error classifier with stable public codes
     (`TRISS_PROVIDER_AUTH/POLICY/RATE/TIMEOUT/NOT_FOUND/CONNECTION/UNKNOWN/
     CONFLICT/EMPTY`);
@@ -738,7 +804,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   tools (which now light up on `ZHIPU_API_KEY` **or** `OPENCODE_API_KEY`). (#12)
 - `--allow-unsafe-bash` on `triss coder init` — explicit opt-in to proceed when
   an existing `opencode.json` has no deny-first bash policy. (#12)
-- New `docs/opencode-zen.md` deep-dive (auth, live catalogue, precedence, setup
+- New `docs/engines/opencode-zen.md` deep-dive (auth, live catalogue, precedence, setup
   gates, privacy, MCP, verification). (#12)
 
 ### Changed
@@ -781,9 +847,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   npm version. (#10)
 - New `docs/glm-clients.md` — a single reference for how Triss talks to
   GLM (both engines, key/endpoint routing, model selection, usage modes,
-  and the safety model), and `docs/crush-issues.md` /
-  `docs/crush-restrict-issues.md` capturing the crush maintainer bug
-  reports. (#10)
+  and the safety model), plus two Crush maintainer bug reports. (#10)
 
 ### Changed
 
@@ -1202,7 +1266,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Fixed
 
-- Documentation-audit fixes (P0 + P1 from `triss` self-audit).
+- Documentation-audit security and correctness fixes from a `triss` self-audit.
 
 ## [0.12.0] — 2026-05-07
 
@@ -1353,7 +1417,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Initial release of `triss-coworker`.
 
-[Unreleased]: https://github.com/ayleen/triss-coworker/compare/v0.34.0...HEAD
+[Unreleased]: https://github.com/ayleen/triss-coworker/compare/v0.37.1...HEAD
+[0.37.1]: https://github.com/ayleen/triss-coworker/compare/v0.37.0...v0.37.1
 [0.34.0]: https://github.com/ayleen/triss-coworker/compare/v0.33.0...v0.34.0
 [0.33.0]: https://github.com/ayleen/triss-coworker/compare/v0.32.0...v0.33.0
 [0.32.0]: https://github.com/ayleen/triss-coworker/compare/v0.31.1...v0.32.0