# Changelog

All notable changes to Equaxis are documented here. Format follows [Keep a Changelog](https://keepachangelog.com/), versions follow [SemVer](https://semver.org/).

## [0.3.6] - 2026-08-16

### Added
- Native Node memory backend (memory.backend: "native", default): pure-JS memory core (src/memory-core.mjs) with transformers.js embeddings (all-MiniLM-L6-v2), JSON drawer store and node:sqlite knowledge graph — no Python/chromadb dependency, Linux/Arch out of the box.
- scripts/memory-json.mjs: protocol-compatible JSONL bridge over the native core; pi-web memory route and harness probe select the process by backend.
- /memory-migrate: one-command migration of legacy Python-backend memory (export → import; history and graph reused in place, idempotent).

## [0.3.5] - 2026-08-16

### Added
- Layered settings model: defaults → global (~/.equaxis/config.json) → project (.pi/equaxis.json), exposed via loadEquaxisConfigLayers and scripts/config-edit.mjs (view/set/unset with per-layer validation).
- pi-web Harness Settings tab: section tree with per-key effective value, layer provenance badge (default/global/project), inline editing and reset.

## [0.3.4] - 2026-08-16

### Changed
- Out-of-box provider selection: the shipped settings no longer pin a default provider/model or restrict enabledModels, so the model picker shows the full provider catalog and the user chooses in-session (/login or the pi-web Models panel) instead of setting env vars.
- The CLI only forwards explicitly configured defaults (no hardcoded openai-inprior fallback) and prints a hint when no provider key is found.
- Provider credential check is now a diagnostic in `equaxis --doctor`, not a startup gate — a fresh install can launch and pick a provider.

## [0.3.3] - 2026-08-16

### Changed
- Global CLI: the `equaxis` command resolves the active project config by walking up from the working directory (`.pi/equaxis.json`), falling back to the bundled template — usable from any project directory after `npm install -g equaxis-agent`.
- Pi entry point resolves through the package dependency graph (createRequire), fixing global installs; doctor accepts an explicit piEntry.

## [0.3.2] - 2026-08-14

### Added
- Restricted shell allowlist (reliability.commandAllowlist): bash calls are LOW only for known read-only commands (ls/cat/grep/git status/…); unrecognized executables and command chains default to MEDIUM so they are audited instead of silently passing as read-only. Configurable via extraCommands.
- Worktree sandbox for subagents (subagents.isolation.worktree): when enabled, subagents run in a detached git worktree under .pi/runtime/worktrees and it is force-removed afterwards; falls back to the normal cwd when not a git repository.
- AST rename post-apply verification: ast_rename accepts verify:"tsc" to run a type check after applying and report the result.
- Real adapter regression tests (tests/protocol-regression.real.test.mjs): debugpy (DAP over TCP) and typescript-language-server (LSP over stdio) are exercised against real processes; the transport gained connectProtocolSocket for TCP adapters. typescript-language-server added as a devDependency.
- (Security note) npm audit: 2 high + 1 moderate advisories remain, all inside the pinned @earendil-works/pi-coding-agent@0.83.0 nested deps (brace-expansion, undici). Fixing them requires the 0.84.x upgrade, which is deliberately deferred to keep the extension contract pin (<0.84.0); revisit during the Pi upgrade.


### Added
- Unified process cleanup protocol (`src/process-cleanup.mjs`): platform-aware process-tree kill (taskkill /T /F on Windows, process-group SIGKILL elsewhere), a registry of spawned children swept on session shutdown (`process_cleanup_swept` trace), and tracked spawning wired into subagents, protocol adapters (LSP/DAP process mode) and the Python memory bridge. Doctor reports the cleanup strategy.
- Runtime cost brake: session cost summed at turn end; warns at `reliability.costBrake.warnAtFraction` and blocks high-risk calls at `maxSessionCostUsd` until `/equaxis-budget reset` (default 2.0 USD).
- Structured high-risk approvals: approve / deny / deny-and-rephrase / approve-all-remaining-this-turn (`reliability.approval.denyRephrase`, `batchPerTurn`).
- Loop stop condition: consecutive identical tool calls within a turn are blocked (`limits.maxRepeatedCalls`, default 3).
- `/equaxis-mission` command: objective/status/turns/last-outcome persisted across turns and forks.
- Unified tool contract foundation (`src/tool-contract.mjs`): versioned ToolDescriptor/Invocation/Outcome shapes recorded in tool_result traces.
- Subagent failure spill: full output written to `.pi/runtime/subagents/artifacts/<id>-attempt<N>.out`; error carries stderr tail + path.
- pi-web harness dashboard visual refresh (cards, risk pills, eval rate colors, pulses, transitions).

### Changed
- Subagent budgets default to 60s timeout / 1 retry; timeouts are terminal (never auto-retried).
- Subagent result schema validation now uses TypeBox (nested objects, arrays, enums, unions).
- Web approvals are event-driven (`fs.watch`) with bounded poll fallback.
- Evaluation fully off the runtime path: the harness writes only trace facts; offline consumers rebuild history from the trace stream.
- Audit mode counts invalid calls toward the per-turn limit.
- README: removed the Default Provider section.

## [0.3.1] - 2026-08-13

### Changed
- README: removed the Default Provider section (provider configuration lives in .pi/settings.json, .pi/extensions/provider.ts and docs/PROVIDER.md).
- Subagent budgets now default to a 60s timeout and 1 retry (subagents.budgets); a timeout is terminal and is never auto-retried, retries are reserved for transient executor failures.
- Subagent result schema validation now uses TypeBox (typebox/value) instead of the flat type/required checks — nested objects, arrays (items), enums and unions are validated with readable errors.
- Web approvals are event-driven: the harness watches the decisions directory (fs.watch) and wakes immediately on a decision, with bounded polling only as a fallback.
- New /equaxis-mission command: tracks the current objective, status, turns and last outcome across turns and forks (persisted with the session; secret-like prompts are never recorded).
- Harness now reports and drops tool calls that never delivered a tool_result before turn end (tool_pending_dropped), instead of leaking them in the pending map.
- High-risk approvals are now structured dialogs: approve / deny / deny-and-rephrase (the model is told what to avoid) / approve-all-high-risk-calls-this-turn (approval.batchPerTurn, opt-in per turn). Config: reliability.approval.denyRephrase, reliability.approval.batchPerTurn.
- Loop stop condition: the same tool call repeated consecutively within a turn is blocked (limits.maxRepeatedCalls, default 3) with a loop_stop_triggered trace event.
- Failed subagent output is spilled to .pi/runtime/subagents/artifacts/<id>-attempt<N>.out; the failure message carries the stderr tail and the artifact path for diagnosis.
- Runtime cost brake: session cost is summed from assistant usage at turn end; at reliability.costBrake.warnAtFraction the harness warns once, and at maxSessionCostUsd high-risk calls are blocked until /equaxis-budget reset. Config: reliability.costBrake (default 2.0 USD, warn at 80%).
- Audit mode now counts invalid tool calls toward the per-turn limit so repeated invalid calls cannot spin forever.
- Unified tool contract foundation (src/tool-contract.mjs): versioned ToolDescriptor / ToolInvocation / ToolOutcome shapes and policy-risk mapping; the harness builds invocations through the contract and records outcomeContract + riskMetadata in tool_result traces.

## [0.3.0] - 2026-08-13

### Added
- Web approval queue: high-risk calls in headless sessions (pi-web, subagents, `--mode json`) now wait for a decision from the pi-web Approvals panel instead of being blocked; TUI approval flow unchanged. Config: `reliability.approval.webQueue`.
- Cost aggregation: session token/cost usage (per provider/model + per session) shown in the harness dashboard Overview.
- Memory bridge self-healing: unexpected Python process exits trigger automatic restart with exponential backoff (5 attempts).
- npm package slimming: `files` allowlist; publishable at `equaxis-agent@0.3.0`.

### Changed
- Vendored pi-web fork moved into the repo (`pi-web/`) so all web dashboards survive fresh clones; `npm run setup` installs and builds it.

## [Unreleased]

### Added
- Release gate: release runs npm pack --dry-run --json and fails when the tarball is missing .pi/equaxis.json, .pi/extensions/contracts.json or .pi/settings.json, or when harbor_eval/jobs/ or harbor_eval/reports/ runtime data leaks into the package.
- setup installs the vendored extension tree (.pi/extensions/vendor/my-pi-setup) dependencies when missing.
- Vendored extension tree is tracked in git (nested .git/node_modules removed); npm files now ship the .pi/ runtime files (config, schema, settings, extensions).
- Productization: MIT license, npm pack-able package manifest, CI workflow, one-command setup script.

### Changed
- Memory starts lazily: the Python bridge is no longer spawned at session start; it starts on first memory tool use, an explicit /memory command, or when autoRecall is enabled at agent start. Dream consolidation on shutdown defaults to off (memory.dream.onShutdown).
- Evaluation is fully off the runtime path: the reliability harness no longer imports or persists an EvalLoop; tool outcomes are written to the trace stream only (eval_outcome_recorded). Offline consumers (equaxis eval snapshot/export-harbor, runtime dashboard, harness snapshot) rebuild full history from the trace stream (including rotated archives) merged with the offline ledger, deduped by traceId.
- Runtime profiles are now real: runtime.profile (raw/minimal/standard/full) selects which extensions load; standard (default) = governance core + local engineering tools; memory/skills/subagents/web-crawler/pi-web/vendor extensions require full or an explicit extensions.enabled entry. Profile is recorded in the session_start trace, and reported by doctor and the runtime dashboard.
- Memory reliability: `/memory-export` and `/memory-repair` commands, doctor checks for memory store integrity and embedding readiness.
- Explicit embedding model wiring (Chroma `embedding_function` derived from `long_term.embedding_model`).
- Subagent engine integration test exercising the DAG runtime + persistence end to end.
- pi-web fork: memory atlas with editing, harness dashboard (overview/events/failures/files/eval/harbor), Obsidian-style knowledge graph.
- pi-web harness dashboard visual refresh: rounded panel with blurred backdrop and accent top bar, card-style metrics with hover lift and status dots, risk-level pill badges, health progress bar, color-coded eval success rates (ok/warn/bad pills), risk-bordered event rows, tab count badges, pulsing pending-approval indicator, spinner loading states, sticky eval table header with zebra rows, and subtle transitions throughout.

### Fixed
- pi-web launch on Windows: the `/pi-web` command wrapped the server in `cmd /c "set ... && ..."`, whose nested quotes Node escapes as `\"` and cmd misparses — the server never started and the command timed out with "did not become ready". `launchPiWeb` now spawns the launcher directly with the agent/session dirs passed through the spawn `env` option (works on every platform, no shell quoting).
- Eval telemetry disconnect: reliability harness now persists `EvalLoop` events; dashboards derive full history from the trace stream (`eval_outcome_recorded`).
- `EvalLoop.decision()` records now survive restarts (`decisions` restored from the event log).
- `snapshot()` exposes `unknowns` so `successes + failures + unknowns === attempts`.
- Harbor export tolerates malformed lines and numbers attempts per logical task (pass@N correctness).
- Subagent snapshots restore non-terminal tasks as `failed` with a reason instead of dropping them (no orphaned dependents).
- `selectRelevantSkills` now honors `requiredNames`; doctor requires `skills.ts` and `subagent-engine.ts`.
- Windows `fs.readdirSync` returning empty for user-profile dirs: session listing uses `fs.promises.readdir`.
- Portable config: `externalEditRoots` supports the `<workspace>` token; LSP command no longer carries a machine-specific path.
- Memory `.cursor` corruption is repaired and `_read_int`/`_next_cursor` self-heal.

## [0.2.0] - 2026-08-13

Initial public-shaped release of the governed agent runtime: reliability harness, unified config, memory system with dream consolidation, eval loop, subagent DAG, pi-web dashboards, extension contract system.