v0.9.17

Highlights

• Project conventions (AGENTS.md) actually reach the model now. A wiring bug in prompt context preparation sent only file paths where the template promised file contents — user-level and project-level AGENTS.md instructions were silently invisible to the agent. Contents are now injected as designed, for the main agent and subagents alike.
• Command output keeps its true tail. For outputs over ~50KB, the truncation builder froze the "tail" mid-stream and silently dropped the real end — usually where build and test errors live. The tail ring buffer now rotates through the entire stream, and truncated-byte counts are accurate.
• More reliable compaction. After a full compaction, the recent tool results it deliberately preserved were immediately replaced with placeholders by a stale micro-compaction cutoff — the model went blind to its own recent work. The cutoff now resets when a compaction applies.
• Goal drives are stoppable again. Resuming a paused/blocked goal left the session with no active turn: cancellation was a no-op, and steer/RPC/cron could start a concurrent turn writing to the same context. The drive now re-establishes the active turn.
• Safer plan reviews and memory. A session-scoped approval can no longer skip review of a new plan body; deleted memories no longer leak ghost keywords into new ones through the FTS index; /dream merges keep memos in their project when all originals agree; dream session counting no longer inflates via subagents.
• TUI modal fixes. Approval/question panels no longer leave the agent waiting forever when the /tasks browser owns the screen, and dialogs they covered are properly restored afterwards (the activity pane no longer stays hidden).

Compatibility notes

• Plan review is no longer skipped by session-scoped approvals. Every new plan body asks for review (matching the TUI's existing semantics); the SDK session-scope path now behaves the same.
• The permission model is unchanged. The README now documents that auto mode's sensitive/git-control/outside-cwd checks cover file tools only — Bash, MCP, and user tools are approved without those checks (as before).
• Node.js >=22.19.0 remains required. This release is distributed through npm; no native executable artifacts are included.

Verification

• Full workspace suite: 5,124 tests passed, 41 skipped, and 2 todo across 406 passing test files.
• Typecheck, build, lint (0 errors), Sherif, and package lint passed through the publish gate chain.
• 15 new contract-level regression tests, each verified to fail (or hang) against the pre-fix code.

Full Changelog: v0.9.16...v0.9.17