Skip to content

CHANGELOG.md

Latest commit

 

History

History
274 lines (257 loc) · 24.5 KB

CHANGELOG.md

File metadata and controls

274 lines (257 loc) · 24.5 KB
Raw

Changelog

All notable changes to this project will be documented in this file.

[Unreleased]

0.10.1 - 2026-08-19

Added

  • Token-boundary task keyword matching so short tokens (rl, prod) cannot match inside world / product.
  • Route JSON now emits sandbox_mode, approval_policy, and remote_allowed (Codex-style split: venue vs approval vs remote).
  • hardened-exec logs Claude SubagentStart / SubagentStop via hooks/isolation_guard.py.
  • docs/runtime-isolation.md — worktrees isolate files, not ports.
  • OSS intake: CODE_OF_CONDUCT.md, SUPPORT.md, issue/PR templates.
  • lacp-skill-audit defaults to this repository (plugin/, hooks/), not ~/.agents/skills.
  • adopt-local wraps claude+codex only; --with-hermes / --with-grok are opt-in.

Changed

  • open-source-check treats missing dist/SHA256SUMS as WARN on source checkouts.
  • Doctor treats an unwrapped hermes as PASS (wrapping PATH hermes double-gates crons).
  • Disabled GitHub Action templates pin actions/checkout to SHA v4.2.2.

Removed

  • Operator-only Builderz client disk scripts from the public tree.

[0.10.0] - 2026-07-17

Added

  • Thinking-partner system — five-part "thinking partnership" layer for AI sessions (#27):
    • bin/lacp-focus CLI (init, show, edit, age, check) — living focus brief with 4-question template (current problem, beliefs/uncertainties, open decisions, 30-day goal). Auto-injected at session start with staleness warnings.
    • config/context-modes/ — three context modes (thinking-partner, implementation, review) loaded via LACP_CONTEXT_MODE env var. Activates existing session_start.py plumbing.
    • Blind spot analysis in stop_quality_gate.py — opt-in Ollama step (LACP_BLIND_SPOT_ENABLED=1) surfacing unchallenged assumptions and avoided questions before allowing stop.
    • hooks/thinking_nudge.py — UserPromptSubmit hook detecting bare questions without stated positions. Opt-in via LACP_THINKING_NUDGE=1 or LACP_CONTEXT_MODE=thinking-partner. Session cooldown prevents over-nudging.
    • bin/lacp-reflect CLI (summary, prompt, reflect) — weekly reflection pulling provenance chain, generating context-specific prompts, reporting focus brief staleness.
    • New hook profile: thinking-partner for lacp-claude-hooks apply-profile.
    • CI: test-focus.sh, test-context-modes.sh, test-thinking-nudge.sh, test-blind-spot.sh, test-reflect.sh.
  • bin/lacp-brain-stack audit subcommand to report memory coverage across all Claude Code projects (total projects, sessions, with/without memory, top missing by session count).
  • bin/lacp-brain-stack scaffold-all subcommand to create memory/MEMORY.md + topic stubs for projects with session files but no memory directory (--min-sessions N, --dry-run, --json).
  • bin/lacp-brain-stack init --with-gitnexus to optionally wire GitNexus code intelligence MCP server (npx gitnexus@latest mcp) into the memory stack for AST-level codebase knowledge graphs.
  • bin/lacp-brain-stack status --json now reports gitnexus_installed and gitnexus_indexed in checks.
  • bin/lacp-agent-id persistent agent identity registry (show, list, register, revoke, touch).
    • Each (hostname, project_slug) pair gets a stable agent-<hex8> identity that survives across sessions.
    • show auto-registers on first use; touch increments session count and updates last_seen.
    • Registry stored at ~/.lacp/agents/registry.json.
  • bin/lacp-provenance cryptographic session provenance chain (start, end, verify, log, export).
    • Each session receipt is SHA-256 hash-chained to the previous receipt via prev_hash / receipt_hash fields.
    • Chain stored as append-only JSONL at ~/.lacp/provenance/chain.jsonl.
    • verify walks the full chain and detects tampered or broken links.
    • Receipts include agent_id, session_fingerprint, project_slug, memory_hash, and timestamps.
  • bin/lacp top-level dispatcher expanded with agent-id and provenance.
  • Canonical memory schema added at config/memory/node-schema.json (typed fields, confidence + provenance requirements, relation vocabulary).
  • bin/lacp-brain-ingest now emits schema-ready frontmatter (layer, confidence, source_urls, source_sessions, last_verified, relation scaffolding) and reports quality-gate status in JSON output.
  • bin/lacp-memory-kpi command to compute memory quality metrics (required_schema_coverage_pct, source_backed_pct, contradiction/stale counts).
  • bin/lacp-brain-resolve command to resolve contradiction/supersession/validation state by memory note id.
  • bin/lacp-obsidian-memory-optimize command to apply low-noise Obsidian graph defaults for memory workflows.
  • bin/lacp-brain-stack status now checks for memory resolver/KPI tooling availability.
  • bin/lacp-status-report now includes a memory_kpi block in JSON and a Memory Quality section in markdown output.
  • CI coverage: scripts/ci/test-agent-id.sh, scripts/ci/test-provenance.sh, scripts/ci/test-memory-tools.sh.
  • docs/multi-vault-multi-hop-reasoning-spec.md added with a bounded, evidence-gated multi-vault reasoning design for Obsidian + Dataview (canonical entity IDs, per-hop token budgets, stop conditions, and final answer evidence contract).
  • TODO.md added with a phased implementation checklist for schema normalization, Dataview pruning, retrieval scoring, hop planning/evidence gates, and QA tuning.
  • Phase 1 scaffolding added for multi-vault identity/schema rollout:
    • docs/entity-id-convention.md
    • docs/obsidian-frontmatter-migration-playbook.md
    • Entities/README.md, Entities/aliases-map.md, Entities/topic/multi-hop-reasoning.md, Entities/tool/dataview.md
  • docs/research/llm-debugging-robustness-notes-2026-03-23.md added to track verification status and practical guidance for social claims about LLM debugging brittleness.

Fixed

  • bin/lacp-brain-stack now uses Claude Code's native project slug naming (/path → -path) instead of shasum-based hashing for memory directory paths. Previously scaffolded memory files in a location Claude Code would never discover.

0.3.0 - 2026-03-15

Added

  • Bootstrap ~/.lacp/ directory tree with empty data files so session_orient.sh runs cleanly on fresh installs instead of silently failing.
  • bin/lacp-system-health macOS/Apple Silicon developer workstation readiness checks (--json, --fix-hints, --fix).
    • thermal state, CPU load vs core count, memory pressure, swap usage
    • Spotlight indexing exclusion audit for dev directories (~/.cargo, ~/.rustup, ~/.npm, ~/.nvm, ~/.bun, ~/work, ~/miniconda3)
    • container runtime detection and recommendation (OrbStack vs Docker Desktop)
    • Rust build config audit (sccache wrapper, incremental builds, ~/.cargo/config.toml)
    • UI compositor overhead checks (reduce motion/transparency, Dock/Finder animations)
    • background process audit against configurable denylist (CleanMyMac, MacKeeper, Google Updater)
    • --fix mode applies safe auto-fixes (Spotlight exclusions)
  • config/system-health-policy.json policy file with tunable thresholds for all system health checks.
  • bin/lacp-doctor --system flag to include system health checks in doctor output.
  • bin/lacp top-level dispatcher expanded with system-health.
  • CI coverage: scripts/ci/test-system-health.sh.
  • bin/lacp-posture one-shot local-first/no-external-ci posture report (--strict, --json).
  • bin/lacp-claude-hooks to audit/repair local Claude hook/plugin cache drift (including claude-mem version/install-path mismatch repair).
  • bin/lacp-claude-hooks apply-profile/optimize to apply safe local hook posture profiles (minimal-stop, balanced, hardened-exec) and run one-command repair+profile+audit optimization.
  • hardened-exec profile installs managed Claude hook guards for PreToolUse, PermissionRequest, and ConfigChange under ~/.claude/lacp-hooks.
  • lacp-onboard / lacp-install auto Claude hook optimization by default (LACP_AUTO_HOOK_OPTIMIZE=true, opt-out via --no-auto-hook-optimize).
  • bin/lacp-console interactive slash-command shell for local orchestration workflows (/doctor, /up, /orchestrate, /worktree, /swarm, /hooks, /release, /run) with custom command loading from ~/.lacp/commands and ./.lacp/commands.
  • bin/lacp-loop-profile and bin/lacp-credential-profile for reusable loop defaults and task-scoped credential/input-contract posture.
  • lacp-loop now supports --loop-profile and --credential-profile to apply reusable posture defaults while preserving explicit CLI overrides.
  • lacp-console adds /loop <loop-profile> [credential-profile] -- <command...> shortcut for one-line profiled loop execution.
  • bin/lacp-time monthly session tracking by project/client (start/stop/active/report/month) with rollups for YYYY-MM.
  • default macOS auto-deps and Formula dependency baseline now include rust, llvm, and z3 as first-class LACP toolchain dependencies.
  • lacp-report now includes time_tracking monthly summary (sessions, total_hours, top_projects).
  • lacp-console now auto-starts/stops lacp-time tracking for console sessions by default (opt-out: --no-auto-time), so docs/testing/coding work in a console session is counted together.
  • Harness contracts now support cascading IO gates via expected_inputs and expected_outputs task fields.
  • lacp-harness-run now enforces input/output task contracts at runtime before dependent task execution.
  • lacp-harness-run now applies verification failure_action semantics (block, require_human_review, retry_same_model, retry_stronger_model) to retry behavior.
  • bin/lacp-bootstrap-system one-command first-run bootstrap (install + onboard + doctor).
  • bin/lacp-canary for 7-day promotion readiness gates over benchmark artifacts.
  • bin/lacp-canary-optimize bounded optimization loop with optional LACP_BENCH_TOP_K auto-tuning and persistence.
  • bin/lacp-vendor-watch to track local Claude/Codex versions and upstream docs/changelog drift snapshots.
  • bin/lacp-automations-tui unified local automation dashboard for schedule/orchestrate/worktree/swarm/wrapper/vendor state.
  • bin/lacp-mcp-profile for bounded MCP operating profile management (cli-first, mcp-selective, mcp-heavy).
  • lacp-canary clean baseline controls: --set-clean-baseline, --since-clean-baseline.
  • bin/lacp-auto-rollback fail-safe rollback command (forces local-only + unadopts local wrappers) on unhealthy canary.
  • bin/lacp-schedule-health launchd automation for periodic local health artifacts (doctor/status/report).
  • bin/lacp-policy-pack with baseline packs:
    • config/policy-packs/starter.json
    • config/policy-packs/strict.json
    • config/policy-packs/enterprise.json
  • bin/lacp-release-prepare one-command release discipline (release-gate + canary + status + report) with optional rollback trigger.
  • bin/lacp-loop one-task control loop (intent -> execute -> observe -> adapt) with optional verify/canary/auto-rollback stages.
  • bin/lacp-up dmux-style launcher for one-command multi-instance fanout (--instances N) with repeatable add-to-session behavior.
  • bin/lacp-context with init-template/audit/minimize/regression for minimal context discipline and context A/B checks.
  • bin/lacp-lessons for compact self-improvement rule maintenance (add-rule, lint).
  • bin/lacp-optimize-loop for bounded weekly verify/canary/context/lessons optimization cycles.
  • bin/lacp-trace-triage deterministic clustering of failed sandbox traces (context_drift/policy_block/env_missing/test_fail) with ranked signatures and remediation recommendations.
  • bin/lacp-context-profile for reusable context-contract profile rendering (local-dev, ssh-prod, high-risk-migration).
  • bin/lacp-session-fingerprint to compute deterministic runtime fingerprints (host/cwd/branch/worktree/remote-host).
  • bin/lacp-e2e command group with:
    • lacp e2e run for local Playwright-style execution + browser evidence manifest generation
    • lacp e2e auth-check for auth-pattern coverage validation over evidence manifests
    • lacp e2e smoke one-liner local smoke workflow with optional template initialization
  • bin/lacp-api-e2e command group with run/smoke wrappers for API/backend e2e evidence + API coverage checks.
  • bin/lacp-contract-e2e command group with run/smoke wrappers for smart-contract e2e evidence + invariant/revert coverage checks.
  • config/harness/e2e-flows.example.json default flow template for app/web smoke evidence setup.
  • config/harness/api-e2e-flows.example.json and config/harness/contract-e2e-flows.example.json starter templates.
  • config/context-profiles.json profile catalog with variable substitution and required-var guards.
  • bin/lacp-swarm plan now supports advisory reservations per job and emits collision analysis under .collaboration (artifacted with swarm launches).
  • bin/lacp-swarm status now emits collaboration_summary (including top_conflicts) in JSON mode and concise collision triage hints in text mode.
  • bin/lacp-release-verify one-command release smoke verifier (release-publish --skip-gh + SHA256 + archive structure + brew tap dry-run).
  • bin/lacp-sandbox-run --context-contract with mutating-run context enforcement (host/cwd/git branch/worktree) and structured evidence in run artifacts.
  • bin/lacp-sandbox-run context-contract gate now covers remote-target commands (ssh/scp/rsync/sftp) with expected_remote_host validation.
  • CI coverage for new surfaces:
    • scripts/ci/test-bootstrap-system.sh
    • scripts/ci/test-canary-optimize.sh
    • scripts/ci/test-vendor-watch.sh
    • scripts/ci/test-automations-tui.sh
    • scripts/ci/test-auto-deps.sh
    • scripts/ci/test-canary.sh
    • scripts/ci/test-canary-baseline.sh
    • scripts/ci/test-auto-rollback.sh
    • scripts/ci/test-schedule-health.sh
    • scripts/ci/test-policy-pack.sh
    • scripts/ci/test-release-prepare.sh
    • scripts/ci/test-loop.sh
    • scripts/ci/test-context-profile.sh
    • scripts/ci/test-session-fingerprint.sh
    • scripts/ci/test-trace-triage.sh
    • scripts/ci/test-release-verify.sh

Changed

  • Local-first contract is now explicit in env/policy defaults:
    • LACP_LOCAL_FIRST=true
    • LACP_NO_EXTERNAL_CI=true
  • bin/lacp-doctor now validates local-first/no-external-ci posture and fails when active .github/workflows/*.yml files exist while LACP_NO_EXTERNAL_CI=true.
  • bin/lacp-release-gate now enforces an external-CI policy gate by default (override with --allow-external-ci).
  • bin/lacp-release-prepare and bin/lacp-release-publish now expose/pass through --allow-external-ci.
  • bin/lacp-test --quick now includes strict posture validation (lacp-posture --strict).
  • bin/lacp-test now includes scripts/ci/test-claude-hooks.sh.
  • Active GitHub workflows were moved to .github/workflows-disabled/ templates to keep repository defaults local-only.
  • scripts/ci/test-workflow-cost-policy.sh now treats “no active workflows” as a valid pass condition.
  • bin/lacp-install now enables fresh-system dependency auto-detection by default on macOS/Homebrew (--no-auto-deps opt-out, --auto-deps-dry-run supported).
  • bin/lacp-install starter profile now auto-applies starter policy pack when managing local .env.
  • bin/lacp-onboard now performs default dependency auto-detection/remediation on macOS/Homebrew (--no-auto-deps opt-out).
  • bin/lacp-canary now treats triage gate as average issues per benchmark and counts gate failures only for explicit gate_ok=false.
  • bin/lacp-canary-optimize --json now keeps JSON parse-safe output even in --dry-run mode.
  • bin/lacp-release-prepare now supports baseline-aware canary evaluation (--since-clean-baseline, --baseline-file).
  • bin/lacp-release-prepare now supports optional canary remediation stage (--auto-optimize-on-fail) with post-optimize regression rollback.
  • bin/lacp-release-prepare now supports --profile local-iterative for one-flag local iteration defaults (quick + 3-day canary + cache/skill gate skips).
  • bin/lacp-release-verify Homebrew dry-run check now retries --HEAD for HEAD-only formulas and treats Cellar permission-only failures as non-fatal.
  • bin/lacp-doctor now supports --check-limits plus --fix-hints to report runtime pressure/fork headroom and emit concrete remediation commands in text/JSON output.
  • bin/lacp-orchestrate and bin/lacp-swarm now apply runtime-pressure backoff before launches and fail fast with structured runtime_pressure errors when capacity stays constrained.
  • bin/lacp-doctor now supports dependency remediation mode (--fix-deps, --auto-deps-dry-run).
  • bin/lacp-report now includes wrapper observability (observability.wrappers, wrapper-routed runs, wrapper-task runs).
  • bin/lacp-status-report and bin/lacp-report JSON outputs now share top-level schema fields (schema_version, kind, ok, summary).
  • bin/lacp top-level dispatcher expanded with new commands (canary, auto-rollback, schedule-health, policy-pack, release-prepare).
  • bin/lacp top-level dispatcher expanded with release-verify.
  • bin/lacp top-level dispatcher expanded with canary-optimize.
  • bin/lacp top-level dispatcher expanded with loop.
  • bin/lacp top-level dispatcher expanded with up.
  • bin/lacp top-level dispatcher expanded with context, lessons, and optimize-loop.
  • bin/lacp top-level dispatcher expanded with mcp-profile.
  • bin/lacp-loop --json now emits deterministic failure analysis (analysis.primary_cause, analysis.secondary_causes, analysis.signals, analysis.remediation_hints, analysis.confidence) for faster post-run triage.
  • bin/lacp-loop now supports --context-profile + repeatable --context-profile-var KEY=VALUE to render context contracts without hand-written JSON.
  • bin/lacp-loop now supports --session-fingerprint auto|<value> pass-through to sandbox-run for anti-drift guardrails.
  • bin/lacp-workflow-run advance now enforces explicit plan->act handoff: planner issues token, developer must present matching --plan-token (or explicit --allow-unplanned true bypass).
  • bin/lacp-pr-preflight now supports optional local auto-e2e evidence generation (--auto-e2e-run) and auth-check gating before browser evidence validation.
  • Risk policy baseline now requires browser/e2e evidence for both medium and high tiers.
  • bin/lacp-sandbox-run now supports optional session fingerprint validation (--session-fingerprint) and enforce mode (LACP_REQUIRE_SESSION_FINGERPRINT=true) for mutating/remote-target runs.
  • scripts/ci/test-swarm.sh now verifies reservation-collision detection behavior.
  • Homebrew formula command export list updated for new binaries.
  • Security controls CI now covers context-contract gate behavior (missing, mismatch, pass) for mutating commands.
  • Starter/strict policy packs now enforce session-fingerprint guardrails by default (LACP_REQUIRE_SESSION_FINGERPRINT=true).

0.1.0 - 2026-02-20

Added

  • bin/lacp top-level CLI dispatcher (start/install/doctor/test/...).
  • bin/lacp-incident-drill for scenario-based incident readiness checks with artifacts.
  • bin/lacp-cache-audit to track prompt cache effectiveness from local Claude/Codex history logs.
  • Cache audit upgraded to parse provider-native schemas (.codex/sessions token_count and .claude/projects assistant usage).
  • bin/lacp-cache-guard to enforce minimum cache hit-rate and usage-event thresholds.
  • bin/lacp-skill-audit to detect high-risk skill supply-chain patterns (curl|bash, reverse shell signatures, etc.).
  • bin/lacp-release-gate for one-command pre-live go/no-go checks across tests, doctor, cache, and skill audit.
  • config/risk-policy-contract.json + config/risk-policy-contract.schema.json for one-source PR gate policy contract.
  • bin/lacp-pr-preflight to enforce risk-tier required checks, docs drift rules, current-head review state, and browser evidence gates.
  • config/harness/browser-evidence.schema.json + bin/lacp-browser-evidence-validate for machine-verifiable UI/user-flow evidence.
  • bin/lacp-orchestrate optional tmux/dmux adapter (doctor, run) routed through existing LACP sandbox gates.
  • lacp-orchestrate now supports claude_worktree backend with optional --claude-tmux wiring into Claude native worktree isolation.
  • scripts/runners/claude-worktree-runner.sh for policy-gated Claude --worktree dispatch.
  • bin/lacp-worktree for explicit git worktree lifecycle management (list/create/remove/prune/doctor).
  • bin/lacp-worktree gc retention mode (--max-age-hours, --managed-only, --branch-prefix) for stale worktree cleanup.
  • lacp-orchestrate run --batch <manifest> for multi-session launches with deterministic stop/continue-on-error behavior.
  • lacp-orchestrate default backend switched to dmux (override with LACP_ORCHESTRATOR_BACKEND or --backend).
  • bin/lacp-swarm dmux-first swarm lifecycle (init, plan, launch, up, tui, status) with artifacted launches under knowledge/data/swarms.
  • bin/lacp-adopt-local and bin/lacp-unadopt-local for reversible local default routing of claude/codex through LACP policy gates.
  • Harness contract layer:
    • config/harness/tasks.schema.json
    • config/harness/sandbox-profiles.yaml
    • config/harness/verification-policy.yaml
  • Harness contracts validation test: scripts/ci/test-harness-contracts.sh.
  • bin/lacp-harness-validate for tasks plan validation + profile/policy cross-checks.
  • bin/lacp-harness-run for dependency-aware task execution with loop retries and attempt artifacts.
  • Harness validate CI coverage: scripts/ci/test-harness-validate.sh.
  • Harness run CI coverage: scripts/ci/test-harness-run.sh.
  • Browser evidence CI coverage: scripts/ci/test-browser-evidence-validate.sh.
  • PR preflight CI coverage: scripts/ci/test-pr-preflight.sh.
  • Orchestrate CI expanded with claude_worktree backend coverage.
  • Worktree command CI coverage: scripts/ci/test-worktree.sh.
  • Orchestrate CI expanded with batch-manifest execution coverage.
  • Swarm command CI coverage: scripts/ci/test-swarm.sh.
  • Local wrapper adopt/unadopt CI coverage: scripts/ci/test-adopt-local.sh.
  • Workflow cost-policy gate: scripts/ci/test-workflow-cost-policy.sh enforcing official actions-only and blocking paid-provider workflow hooks.
  • bin/lacp-workflow-run deterministic multi-role workflow skeleton (planner -> developer -> verifier -> tester -> reviewer).
  • MCP auth policy file (config/mcp-auth-policy.json) and doctor policy validation checks.
  • Release workflow (.github/workflows/release.yml) generating versioned tarball + SHA256SUMS.
  • bin/lacp-report for recent execution and artifact summaries.
  • bin/lacp-migrate for existing-stack .env migration (dry-run/apply).
  • bin/lacp-doctor --fix safe remediations for common setup drift.
  • Ops command CI coverage via scripts/ci/test-ops-commands.sh.
  • Homebrew formula (Formula/lacp.rb) for tap-based installs.
  • cURL installer (install.sh) with ref/profile/verify options.
  • bin/lacp-test one-command validation runner.
  • bin/lacp-test --isolated for temporary-root safety when testing on active local setups.
  • bin/lacp-install first-time installer with starter scaffolding profile.
  • Install workflow CI coverage via scripts/ci/test-install.sh.
  • Local agent control-plane baseline with onboarding, verify, doctor, mode, and status reporting commands.
  • Policy-based route engine with tiered execution (trusted_local, local_sandbox, remote_sandbox).
  • Remote runner support for Daytona and E2B with setup and smoke commands.
  • Zero-external default mode and explicit remote enablement controls.
  • Review/critical risk-gate model:
    • safe: no approval gate
    • review: TTL approval required
    • critical: explicit per-run confirmation required
  • Per-tier budget ceilings and budget override confirmation gate.
  • Structured run artifacts for route decision, risk tier, approvals, and provider metadata.
  • CI suite including syntax checks, shellcheck, route-policy tests, mode-and-gate unit tests, and smoke tests.

Security

  • Default-deny posture for remote execution.
  • Approval TTL and explicit confirmation gates for higher-risk operations.
  • lacp-test --isolated now enforces .env integrity and fails on mutation.
  • Structured input-contract gate for risky sandbox runs (--input-contract, exit code 11 on violation).
  • Release workflow no longer depends on third-party actions; uses gh release with repository GITHUB_TOKEN.