1.0.0-alpha.24

What's Changed

• Release @lousho/build-ai-agent 1.0.0-alpha.19, create-lousho-a… by @LinuxDevil in #411
• fix(shell): exact-match allow rules, cmd.exe % and ^ operators, name the shell by @LinuxDevil in #412
• fix(registry): make receipt-enforced approval non-overridable from the agent directory by @LinuxDevil in #413
• fix(errors): classify local-runtime overflow, name connection failures, keep unparsed error bodies by @LinuxDevil in #415
• fix(handoffs): no mid-conversation system message; keep memory after a handoff by @LinuxDevil in #416
• fix(context): warn on unknown context window and count tools in the compaction estimate by @LinuxDevil in #418
• fix(mcp): forward abort signal and timeout to callTool; stop sending text results twice by @LinuxDevil in #419
• fix(agent-dir): forward every createAgent() override from loadAgentDir/resolveAgentDir by @LinuxDevil in #420
• fix(providers): per-call fallback state and no silent file-part drops (A9) by @LinuxDevil in #422
• fix(output): accept optional fields on strict structured-output endpoints by @LinuxDevil in #414
• fix(schedules): report unfinished prompt turns, awaitable stop(), keepAlive, export fireSchedule by @LinuxDevil in #417
• fix(mcp): sanitize tool names, per-server include/exclude, approval sees args by @LinuxDevil in #426
• fix(cli): make lousho add work by default, check flags before the manifest by @LinuxDevil in #427
• fix(context): retry rejected summaries, count the summarizer call, stub pruned results by @LinuxDevil in #425
• fix(server): scope approvals and sessions to their caller, redact errors (audit A1) by @LinuxDevil in #423
• fix(registry): coding-kit can't rewrite its own config; per-turn loop guard; drop git diff by @LinuxDevil in #428
• feat(providers): OpenAIProvider api: 'chat' for OpenAI-compatible servers; lousho doctor --ping by @LinuxDevil in #431
• fix(evals): lousho eval time limits, reports on vitest failures, collision-safe cassettes by @LinuxDevil in #424
• fix(mcp): coded start failures with exit code and stderr; ready() reconnects after close() by @LinuxDevil in #432
• fix(flows): gate toolCall steps like agent tool calls; enforce flow inputs by @LinuxDevil in #421
• fix(execution): reject unparseable tool-call JSON and suggest the closest tool name by @LinuxDevil in #429
• fix(registry): enforce a kit's install receipt on its sub-agent directories by @LinuxDevil in #435
• fix(flows): cancel flows with a signal; unique ids for steps without one by @LinuxDevil in #436
• fix(output): read near-miss JSON without a repair call, detect schema echoes, flag repaired objects by @LinuxDevil in #434
• fix(testing): replay keeps reasoning and full usage; robust judge scores; tool order by @LinuxDevil in #437
• fix(tracing): send({ parentSpanId }), execute_tool error message, approvals.get on malformed ids by @LinuxDevil in #430
• fix: audit-found durability, security and compatibility bugs by @LinuxDevil in #438
• fix(providers): one retry layer, retry streams that fail before output, provider fetch option (C2) by @LinuxDevil in #439
• fix(server): a client disconnect no longer drops a session turn (audit B4) by @LinuxDevil in #440
• fix(execution): checkpoint every settled tool result by toolCallId by @LinuxDevil in #441
• feat(output): output { schema, promptSchema: false } sends the schema only on responseFormat by @LinuxDevil in #442
• feat(agent): createAgent({ modelSettings }) and omit unset sampling keys by @LinuxDevil in #433
• test(providers): skip the ollama fetch test when its peer is absent by @LinuxDevil in #443
• test(audit): harness fixes + live revalidation matrix (alpha.19) by @LinuxDevil in #444
• feat(execution): forced no-tools answer call at maxSteps with output set (audit D3) by @LinuxDevil in #445
• docs(audit): record D3 forced-answer live verification by @LinuxDevil in #446
• fix(mcp): keep object schemas with a sibling oneOf/anyOf (Eve TOOLS-F4) by @LinuxDevil in #447
• fix(flows): per-iteration forEach scope so parallel loops don't share {{item}} (Eve DUR-F1) by @LinuxDevil in #448
• fix(execution): isolate onEvent listener errors from the run (Eve CORE-F2) by @LinuxDevil in #449
• fix(channels): webhookChannel auth works on Fetch hosts (Eve E17 / F2) by @LinuxDevil in #451
• fix(providers): use OpenRouter's reported cost for usage.costUsd and maxCostUsd (Eve PROV-F3) by @LinuxDevil in #450
• fix(tools): shell allow string patterns see through quotes, $ and braces (Eve TOOLS-F1) by @LinuxDevil in #452
• fix(examples): ops-pipeline demo ports, setup docs, smoke test (Eve DUI-F6) by @LinuxDevil in #453
• fix(channels): githubChannel ignores /approve for a non-pending approval (Eve E17 / F5) by @LinuxDevil in #456
• fix(storage): keep Uint8Array bytes across SQLite approvals and KV checkpoints/approvals (Eve DUR-F5) by @LinuxDevil in #454
• fix(models): normalize . vs - in model ids and tighten snapshot matching (Eve PROV-F3) by @LinuxDevil in #459
• fix(channels): no sign-in links in Telegram/Teams groups (Eve TOOLS-F3) by @LinuxDevil in #458
• fix(tracing): default redactContent to true so content stays off spans (Eve MA-F4) by @LinuxDevil in #457
• fix(oauth): token redaction gaps and concurrent refresh race (Eve TOOLS-F2, TOOLS-F16) by @LinuxDevil in #455
• fix(flows): abort parallel siblings on failure; add FlowExecutionResult.usage (Eve DUR-F12 / MA-F11) by @LinuxDevil in #461
• ci(examples): add typecheck:examples and fix strict errors (Eve DUI-F16) by @LinuxDevil in #462
• fix(ui): remote mode sends a per-chat sessionId (Eve CORE-F1) by @LinuxDevil in #464
• fix(session): queue concurrent send({ sessionId }) runs (Eve DUR-F2) by @LinuxDevil in #463
• fix(oauth): namespace token owner by authenticator (Eve TOOLS-F15) by @LinuxDevil in #465
• fix(tracing): roll background sub-agent cost up to the lead span and listTraces (Eve MA-F2) by @LinuxDevil in #466
• fix(execution): strict structured output for oneOf, root unions, records and tuples (Eve PROV-F1, PROV-F2) by @LinuxDevil in #467
• fix(triggers): cap WebhookTriggerAdapter body at 1 MB, 413, no error echo (Eve DUR-F18) by @LinuxDevil in #468
• fix(cli): --version, fresh top-level usage, correct command name in chat/acp errors (Eve CLI-F8/F9/F10) by @LinuxDevil in #469
• fix(providers): cap Retry-After at backoff.maxMs (Eve PROV-F5) by @LinuxDevil in #471
• fix(channels): channel sessions default to the agent's session store (Eve EVE-0, F1) by @LinuxDevil in #472
• fix(acp): answer -32600 for a non-object JSON line instead of crashing (Eve TOOLS-F14) by @LinuxDevil in #473
• fix(mcp): validate Host and Origin on the serveMcp HTTP transport (Eve TOOLS-F5) by @LinuxDevil in #460
• fix(cli): lousho mcp accepts agent directories, no raw EISDIR (Eve CLI-F2) by @LinuxDevil in #479
• fix(session): re-read the transcript on every session call (Eve DUR-F3) by @LinuxDevil in #476
• fix(agentDir): run sub-agent directories through the native sub-agent runtime (Eve MA-F5) by @LinuxDevil in #478
• fix(errors): quota-exceeded category for insufficient_quota and 402 (Eve PROV-F6) by...

v1.0.0-alpha.19

What's Changed

• feat: decide() — OpenAI Decisions API client by @LinuxDevil in #409
• Release @lousho/build-ai-agent 1.0.0-alpha.18, create-lousho-a… by @LinuxDevil in #410

Full Changelog: v1.0.0-alpha.18...v1.0.0-alpha.19

v1.0.0-alpha.18

What's Changed

• feat: claudeProject() loader, prompting catalog, waves/phases/coding-agent/connectors/hostinger examples by @LinuxDevil in #407
• chore: release @lousho/build-ai-agent 1.0.0-alpha.15, create-lousho-a… by @LinuxDevil in #408

Full Changelog: v1.0.0-alpha.15...v1.0.0-alpha.18

v1.0.0-alpha.15

What's Changed

• chore: release @lousho/build-ai-agent 1.0.0-alpha.10, create-lousho-a… by @LinuxDevil in #404
• Lousho × Pi harnesses: native kits, pi provider, piAgent + coding-pi production kit by @LinuxDevil in #405
• fix: TS2352 cast in engine:'pi' loader test by @LinuxDevil in #406

Full Changelog: v1.0.0-alpha.10...v1.0.0-alpha.15

v1.0.0-alpha.9

What's Changed

• Fix TypeScript build errors and add npm publishing configuration by @LinuxDevil with @Copilot in #1
• LOU-A: Security & correctness fixes by @LinuxDevil in #2
• LOU-B: Engineering foundations by @LinuxDevil in #3
• LOU-C: Human-in-the-loop & durable execution by @LinuxDevil in #4
• LOU-D: Multi-agent delegation by @LinuxDevil in #5
• LOU-E: Observability, tracing & guardrails by @LinuxDevil in #6
• LOU-F: MCP, sandboxing & provider expansion by @LinuxDevil in #7
• LOU-G: Evals harness by @LinuxDevil in #8
• LOU-H: DX — zero-config, CLI scaffold & playground by @LinuxDevil in #9
• LOU-I: Deploy portability & documentation by @LinuxDevil in #10
• LOU-J: Cross-harness spec & flagship pipeline by @LinuxDevil in #11
• LOU-K1: export MCP client on public API surface by @LinuxDevil in #12
• LOU-K5: restore checkpointing for the remainder of a run after resumeAfterApproval() by @LinuxDevil in #13
• LOU-K4: ship a bundled, opt-in OpenTelemetry TraceExporter by @LinuxDevil in #14
• LOU-K3: support a real LLM provider on Cloudflare Worker deploy target by @LinuxDevil in #15
• LOU-K2: opt built-in I/O tools into the sandbox seam by @LinuxDevil in #16
• LOU-L: Agent Forge app shell & data model by @LinuxDevil in #17
• LOU-M: real ReactFlow canvas for the agent graph editor by @LinuxDevil in #18
• LOU-N: runtime control server for Agent Forge (run/stop/status/approve) by @LinuxDevil in #19
• LOU-O: debug & observability console by @LinuxDevil in #20
• LOU-P: chat with agents by @LinuxDevil in #21
• LOU-Q: agent hooks (pre/post) with sandboxed hook execution by @LinuxDevil in #22
• LOU-S: packaging & distribution (loushy studio ships in the npm package) by @LinuxDevil in #24
• LOU-R: settings & config (secrets store, deploy, profiles) by @LinuxDevil in #23
• LOU-T1: business-state attachment on checkpoints by @LinuxDevil in #25
• LOU-T2: durable checkpoint store for the Cloudflare Worker deploy target by @LinuxDevil in #26
• LOU-T3: real branching on the Agent Forge canvas (router nodes -> FlowExecutor) by @LinuxDevil in #27
• LOU-T4: unified provider-call failure compaction (Factor 9) by @LinuxDevil in #28
• LOU-T5: real trigger registry (closes Factor 11) by @LinuxDevil in #29
• Add fallow gate and clear all findings (health 63 C -> 97 A) by @LinuxDevil in #30
• LOU-U1: honor the configured model (no hard-coded gpt-4) by @LinuxDevil in #31
• LOU-U4: validate tool arguments against the tool schema before executing by @LinuxDevil in #32
• LOU-U2: keep assistant tool-call turns in provider message conversion by @LinuxDevil in #33
• LOU-U3: remove eval() from FlowExecutor by @LinuxDevil in #34
• LOU-U10, LOU-U11: fix Agent Forge stop/run resume and run Forge suites in CI by @LinuxDevil in #35
• Fix tool-failure payload regression on main; ignore agent worktrees by @LinuxDevil in #38
• LOU-U12: send a structured error to the model when a tool throws by @LinuxDevil in #37
• Fix contract test after LOU-U12 changed the tool-error shape by @LinuxDevil in #41
• LOU-U5, LOU-U6: README/docs accuracy and correct Node engines by @LinuxDevil in #36
• LOU-X1: defineTool with inferred types by @LinuxDevil in #39
• LOU-D5: scripted mockModel for deterministic agent tests by @LinuxDevil in #40
• LOU-V1: cancel a run with an AbortSignal by @LinuxDevil in #42
• docs: ticket status after waves 1-2 by @LinuxDevil in #43
• LOU-Y2: skills (progressive disclosure of instructions) by @LinuxDevil in #44
• LOU-W1: token estimation and a model registry (context window + pricing) by @LinuxDevil in #45
• LOU-Z1, LOU-Z2: robust MCP schema conversion and result handling by @LinuxDevil in #46
• LOU-D13: Trigger hardening: webhook authentication and real cron expressions by @LinuxDevil in #47
• LOU-U13, LOU-U16: bind flow placeholders as values; flow and adapter types match the runtime by @LinuxDevil in #48
• Restore LOU-Y2 skills (accidentally deleted by #46) by @LinuxDevil in #53
• LOU-D1: five-line hello world by @LinuxDevil in #50
• LOU-V3: run a turn's tool calls in parallel (toolConcurrency) by @LinuxDevil in #49
• LOU-Z3: expose an agent (and its tools) as an MCP server by @LinuxDevil in #52
• LOU-D18, LOU-X7: verify Slack request signatures; built-in todo tools by @LinuxDevil in #55
• LOU-D12: llms.txt, llms-full.txt and docs shipped in the npm package by @LinuxDevil in #51
• ci: run type tests (LOU-U18); ticket status after wave 3 by @LinuxDevil in #56
• LOU-D4: loushy doctor first-run diagnostic by @LinuxDevil in #54
• LOU-D9: OpenTelemetry GenAI semantic conventions and traced flows by @LinuxDevil in #57
• LOU-X6: workspace tools (file system and shell) over pluggable providers by @LinuxDevil in #58
• LOU-W4, LOU-W7: sessions for createAgent; AGENTS.md auto-loading by @LinuxDevil in #59
• LOU-D10, LOU-D19: lazy provider loading (importing the SDK never loads or requires a provider peer) by @LinuxDevil in #60
• LOU-D3: loushy init scaffolds a runnable project in one command by @LinuxDevil in #61
• LOU-V2: typed, versioned event stream (agent.stream()) by @LinuxDevil in #64
• LOU-D7, LOU-D8: trajectory evals and the loushy eval command by @LinuxDevil in #63
• LOU-W5: SQLite store for sessions, checkpoints and approvals by @LinuxDevil in #65
• LOU-Y5: filesystem agent loader (loadAgentDir) by @LinuxDevil in #66
• LOU-D6: record/replay provider for deterministic tests against real model behavior by @LinuxDevil in #67
• LOU-V5: usage and cost accounting on every run by @LinuxDevil in #62
• docs: remove stray merge-conflict markers from README by @LinuxDevil in #69
• Fix Agent Forge server after usage accounting (#62) by @LinuxDevil in #70
• LOU-Y1, LOU-Y3: sub-agents inherit the parent runtime; subagents option with a task tool by @LinuxDevil in #71
• LOU-U7, LOU-U8, LOU-U9: durable execution gaps (approval mid-batch, resume with new input, checkpoint after each LLM turn) by @LinuxDevil in #68
• [EPIC-U][LOU-U17] Sandboxed HTTP honors cancellation by @LinuxDevil in #72
• [EPIC-D][LOU-D21] createAgent agents can pause for approval and resume by @LinuxDevil in #75
• [EPIC-V][LOU-V7.1] Provider retry policy and model fallback wrappers by @LinuxDevil in #74
• [EPIC-D][LOU-D20] mcpServers is a first-class, validated AgentSpec field by @LinuxDevil in #73
• [EPIC-U][LOU-U22] Resumed sub-agent that pauses again keeps the session awaiting approval by @LinuxDevil in #77
• [EPIC-V][LOU-V8] AgentSession.stream() streams a session turn and persists it on done by @LinuxDevil in #78
• [EPIC-D][LOU-D34] AgentType is optional and deprecated by @Li...

v1.0.0-alpha.10

What's Changed

• docs: regenerate llms.txt (fixes CI docs:llms:check) by @LinuxDevil in #382
• plan: Epic S backlog-sweep tickets by @LinuxDevil in #383
• openApiTools: optional pinned-DNS private-address check (#291) by @LinuxDevil in #384
• packaging: slim the npm tarball and make pack-smoke measure the published tarball by @LinuxDevil in #385
• feat(agentDir): enforce registry permission manifest at load and run time by @LinuxDevil in #386
• channels: bind restarted click decisions to the checkpointed session; approvals.get() reads the durable store by @LinuxDevil in #388
• feat(deploy): cloudflare-worker agent directories gain sub-agents, schedules, channels, memory and projectInstructions by @LinuxDevil in #392
• fix: coded SDKError for manifest-refused sandbox calls by @LinuxDevil in #395
• chore: make fallow health gate green (breaks provider import cycle, closes LOU-R27) by @LinuxDevil in #398
• feat!: move flows, integrations and utilities out of the package root (A1) by @LinuxDevil in #387
• feat!: remove AgentType, its registry and unused donor-era types (A2a) by @LinuxDevil in #390
• feat!: remove legacy onEvent and ExecutionEvent adapter (A2b) by @LinuxDevil in #391
• feat!: remove createDelegateTool in favor of the subagents option (A2c) by @LinuxDevil in #396
• feat!: move the executor API to ./executor, drop ./core (A3) by @LinuxDevil in #397
• feat!: rename the patch guardrails to patch checks (A5) by @LinuxDevil in #399
• fix: peers matrix - evalModule platform node for @vercel/oidc by @LinuxDevil in #400
• feat: @lousho/build-ai-agent/worker entry for hand-written Workers (#289) by @LinuxDevil in #393
• ci: NODE_OPTIONS heap for build steps by @LinuxDevil in #401
• fix(types): stop published declarations importing optional peers; type-check tests in CI by @LinuxDevil in #394
• ci: NODE_OPTIONS for e2e-studio build by @LinuxDevil in #403
• feat(release): 1.0.0-rc.0 — API reports in CI, upgrade guide, version by @LinuxDevil in #402
• feat(cli): default static registry for lousho add out of the box (M7b, #230) by @LinuxDevil in #389

Full Changelog: v1.0.0-alpha.9...v1.0.0-alpha.10