oacp-cli 0.5.0__tar.gz → 0.5.2__tar.gz

{oacp_cli-0.5.0 → oacp_cli-0.5.2}/.github/workflows/auto-estimate.yml

@@ -2,7 +2,7 @@ name: Auto-estimate
 
 # Label an issue `estimate` and agent-estimate posts an estimate comment
 # on it. Recipe from kiloloop/agent-estimate README ("Auto-estimate on
-# label") — consumes the published Action via the v0 tag.
+# label") — consumes the published Action at an exact release commit.
 
 on:
   issues:
@@ -17,7 +17,7 @@ jobs:
     if: github.event.label.name == 'estimate'
     runs-on: ubuntu-latest
     steps:
-      - uses: kiloloop/agent-estimate@7b30943bac5648cf183f3d050baa6fea5485b8a9 # v0.7.4
+      - uses: kiloloop/agent-estimate@fb2e0f4d1cf2c8a47760c8fc21ca7e03bbadbfb4 # v0.8.0
         with:
           issues: ${{ github.event.issue.number }}
           output-mode: issue-comment

{oacp_cli-0.5.0 → oacp_cli-0.5.2}/.github/workflows/release.yml

@@ -40,9 +40,9 @@ jobs:
       - name: Build wheel and sdist
         run: python -m build
 
-      # upload-artifact is still on v6; download-artifact moved to v7 for Node 24.
+      # Use the release-tested artifact pair; downloads fail on digest mismatch.
       - name: Upload release artifacts
-        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: python-package-distributions
           path: dist/
@@ -59,7 +59,7 @@ jobs:
 
     steps:
       - name: Download release artifacts
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: python-package-distributions
           path: dist/
@@ -118,9 +118,9 @@ jobs:
       - name: Check out repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
-      # download-artifact v7 is the current Node 24-compatible major.
+      # Reuse the built distributions with digest validation.
       - name: Download release artifacts
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: python-package-distributions
           path: dist/

{oacp_cli-0.5.0 → oacp_cli-0.5.2}/CHANGELOG.md

@@ -7,6 +7,50 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.5.2] - 2026-09-15
+
+### Added
+
+- Every cleared checkpoint pause is excluded from recorded work time ([contract](docs/protocol/autonomy.md#threshold-exceeded-checkpoint)).
+- `oacp doctor` advises on records born `done` but never finalized ([run state](docs/protocol/autonomy.md#terminal-finalization-and-audit-integrity)).
+
+### Changed
+
+- Protocol contract stamp `spec_version` moves to `0.5.2` ([contract version](docs/protocol/autonomy.md#contract-version)).
+- Handoff-body schema failures become advisories, not rejections ([validation boundary](docs/protocol/inbox_outbox.md#validation-boundary)).
+- Task and review continuations share one bounded generic thread grant ([continuation grants](docs/protocol/autonomy.md#continuation-grants)).
+- Legacy review-continuation grant scopes need fresh human approval ([continuation grants](docs/protocol/autonomy.md#continuation-grants)).
+- A terminal-time checkpoint pins completion at the breach ([checkpoint](docs/protocol/autonomy.md#terminal-finalization-and-audit-integrity)).
+- Auto-accepted records are born `pending`; finalize writes `done` ([run state](docs/protocol/autonomy.md#terminal-finalization-and-audit-integrity)).
+- A `done` record sanctions `oacp envelope clear` only with a completion stamp ([completion clear](docs/protocol/autonomy.md#completion-clear)).
+- Dependency, credential, and auth/config wording demotes to the declared flag's own pause ([Gate 3](docs/protocol/autonomy.md#four-gate-evaluator)).
+- The `oacp memory`/`org-memory` shims and the write-event fallback stay through 0.5.2; removal moves to 0.5.3 ([README](README.md#commands)).
+
+### Fixed
+
+- Resuming an unanswered checkpoint keeps its original pause time ([contract](docs/protocol/autonomy.md#threshold-exceeded-checkpoint)).
+
+## [0.5.1] - 2026-09-11
+
+### Added
+
+- Attributed work-clock deductions for multiple excluded intervals, including human-directed time away ([contract](docs/protocol/autonomy.md#threshold-exceeded-checkpoint)).
+- Cancellation receipts that close admitted tasks while preserving partial delivery and pause history ([contract](docs/protocol/autonomy.md#terminal-finalization-and-audit-integrity)).
+- Envelope compilation stamps the enforcement it resolved: `hooks` only when the receiver's adapter is present, `none` with a reason otherwise ([contract](docs/protocol/autonomy.md#enforcement-recording)).
+
+### Changed
+
+- Protocol contract stamp `spec_version` moves to `0.5.1` ([contract version](docs/protocol/autonomy.md#contract-version)).
+- `oacp retention` no longer prunes: the engine is parked outside the kernel and the subcommand prints where it went until its removal in 0.5.3 ([inbox/outbox](docs/protocol/inbox_outbox.md#message-history-retention)).
+- `oacp write-event` execs `agent-memory event write` when the installed tool serves it, falling back to the bundled script until its removal in 0.5.2 ([README](README.md#commands)).
+- The exec path prints `published:`/`idempotent:` where the bundled script prints `OK:` ([README](README.md#commands)).
+- `oacp session-init --pull-memory` is a no-op that names the memory tool's own SessionStart hook, until its removal in 0.5.3 ([codex](docs/protocol/session_init.md#codex)).
+
+### Fixed
+
+- The sync allowlist anchors `.gitignore` and `.oacp-memory-repo` to the home root, matching the memory tool's golden byte for byte ([memory layout](docs/protocol/org_memory.md#the-sync-allowlist)).
+- Preflight's conflict-marker check flags the diff3 `|||||||` base marker ([preflight](scripts/preflight.py)).
+
 ## [0.5.0] - 2026-09-09
 
 ### Added
@@ -868,6 +912,8 @@ The central debrief store is the headline change: every agent's full end-of-sess
 - Checkout step in github-release workflow job (#19)
 - Pre-release audit fixes: SHA-pinned actions, dangling doc refs (#15, #16)
 
+[0.5.2]: https://github.com/kiloloop/oacp/compare/v0.5.1...v0.5.2
+[0.5.1]: https://github.com/kiloloop/oacp/compare/v0.5.0...v0.5.1
 [0.5.0]: https://github.com/kiloloop/oacp/compare/v0.4.6...v0.5.0
 [0.4.6]: https://github.com/kiloloop/oacp/compare/v0.4.5...v0.4.6
 [0.4.5]: https://github.com/kiloloop/oacp/compare/v0.4.4...v0.4.5

{oacp_cli-0.5.0 → oacp_cli-0.5.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: oacp-cli
-Version: 0.5.0
+Version: 0.5.2
 Summary: Open Agent Coordination Protocol CLI for file-based multi-agent workflows
 Project-URL: Homepage, https://github.com/kiloloop/oacp
 Project-URL: Repository, https://github.com/kiloloop/oacp
@@ -21,7 +21,7 @@ Classifier: Programming Language :: Python :: 3.12
 Classifier: Topic :: Software Development
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Requires-Python: >=3.9.2
-Requires-Dist: pyyaml>=6.0
+Requires-Dist: pyyaml>=6.0.1
 Provides-Extra: crypto
 Requires-Dist: cryptography>=50.0.0; extra == 'crypto'
 Description-Content-Type: text/markdown
@@ -261,14 +261,14 @@ uv tool install .
 | `oacp agent` | Manage global agent profiles (init, sync, show, list) |
 | `oacp inbox` | List pending inbox messages |
 | `oacp watch` | Emit inbox delta events for Monitor-friendly polling |
-| `oacp retention` | Prune project message history by age and count |
-| `oacp memory` | Run agent-memory (sync, archive, restore); shim until 0.5.2 |
+| `oacp retention` | Parked: engine archived outside the kernel; advisory shim until 0.5.3 |
+| `oacp memory` | Run agent-memory (sync, archive, restore); shim until 0.5.3 |
 | `oacp session-init` | Verify Codex startup inputs and emit SessionStart context |
 | `oacp setup` | Generate runtime-specific config files in a repo |
 | `oacp send` | Send a protocol-compliant inbox message |
 | `oacp key` | Generate and inspect message-signing keys |
 | `oacp trust` | Import, inspect, and revoke trust-root entries (catalog + pins) |
-| `oacp org-memory` | Run agent-memory org (init); shim until 0.5.2 |
+| `oacp org-memory` | Run agent-memory org (init); shim until 0.5.3 |
 | `oacp write-event` | Write an event to org-memory/events/ |
 | `oacp autonomy-outcome` | Record a human approval/decline in an autonomy audit |
 | `oacp autonomy-finalize` | Record checkpoints and terminal states in an autonomy audit |
@@ -289,7 +289,7 @@ uv tool install .
 
 **`oacp doctor`**: `--fix` (auto-fix safe issues), `--json`, `-o/--output`
 
-**`oacp memory`** / **`oacp org-memory`**: exec shims for [agent-memory](https://github.com/kiloloop/agent-memory) (`pip install agent-memory-cli`): argv passes through, `--oacp-dir` becomes `--home`, `oacp memory init` runs `agent-memory enable`. Kept through 0.5.1, removed in 0.5.2; call `agent-memory` directly.
+**`oacp memory`** / **`oacp org-memory`**: exec shims for [agent-memory](https://github.com/kiloloop/agent-memory) (`pip install agent-memory-cli`): argv passes through, `--oacp-dir` becomes `--home`, `oacp memory init` runs `agent-memory enable`. Kept through 0.5.2, removed in 0.5.3; call `agent-memory` directly.
 
 </details>
 

{oacp_cli-0.5.0 → oacp_cli-0.5.2}/README.md

@@ -233,14 +233,14 @@ uv tool install .
 | `oacp agent` | Manage global agent profiles (init, sync, show, list) |
 | `oacp inbox` | List pending inbox messages |
 | `oacp watch` | Emit inbox delta events for Monitor-friendly polling |
-| `oacp retention` | Prune project message history by age and count |
-| `oacp memory` | Run agent-memory (sync, archive, restore); shim until 0.5.2 |
+| `oacp retention` | Parked: engine archived outside the kernel; advisory shim until 0.5.3 |
+| `oacp memory` | Run agent-memory (sync, archive, restore); shim until 0.5.3 |
 | `oacp session-init` | Verify Codex startup inputs and emit SessionStart context |
 | `oacp setup` | Generate runtime-specific config files in a repo |
 | `oacp send` | Send a protocol-compliant inbox message |
 | `oacp key` | Generate and inspect message-signing keys |
 | `oacp trust` | Import, inspect, and revoke trust-root entries (catalog + pins) |
-| `oacp org-memory` | Run agent-memory org (init); shim until 0.5.2 |
+| `oacp org-memory` | Run agent-memory org (init); shim until 0.5.3 |
 | `oacp write-event` | Write an event to org-memory/events/ |
 | `oacp autonomy-outcome` | Record a human approval/decline in an autonomy audit |
 | `oacp autonomy-finalize` | Record checkpoints and terminal states in an autonomy audit |
@@ -261,7 +261,7 @@ uv tool install .
 
 **`oacp doctor`**: `--fix` (auto-fix safe issues), `--json`, `-o/--output`
 
-**`oacp memory`** / **`oacp org-memory`**: exec shims for [agent-memory](https://github.com/kiloloop/agent-memory) (`pip install agent-memory-cli`): argv passes through, `--oacp-dir` becomes `--home`, `oacp memory init` runs `agent-memory enable`. Kept through 0.5.1, removed in 0.5.2; call `agent-memory` directly.
+**`oacp memory`** / **`oacp org-memory`**: exec shims for [agent-memory](https://github.com/kiloloop/agent-memory) (`pip install agent-memory-cli`): argv passes through, `--oacp-dir` becomes `--home`, `oacp memory init` runs `agent-memory enable`. Kept through 0.5.2, removed in 0.5.3; call `agent-memory` directly.
 
 </details>