Release Notes
Added
load plan — validate, render, and review an agent-written development
plan. An agent (with the embedded loadout-plan-preview skill) writes a
structured plan.json; load plan check [--json] [--lenient] validates it
with JSON-pointer diagnostics; load plan render [FILE] [--out] [--no-open]
renders a self-contained plan.html — inline dependency graph, task cards,
element-anchored commenting, a "Copy feedback" button — and opens it in your
browser; load plan schema prints the schema reference; load plan clean
removes the rendered page and any feedback file (a plain load clean sweeps
them too). Rendering is deterministic (same plan.json + same loadout
version → byte-identical HTML) and fully self-contained — no CDN, no
external fetches. See docs/concepts.md.
The page is built to be reviewed: an agent-authored executive summary with
key points and out-of-scope (meta.summary_md / key_points /
out_of_scope), a computed ask banner and per-phase rollup table, blocking
questions surfaced first, phases collapsed behind labeled ordinals with
expand-all, a phase-level dependency graph, per-task reviewed checkboxes,
and a 16-icon vocabulary (icon on phases/tasks, vendored Lucide) — set in
embedded Inter (vendored, OFL). Reviewer comments are plain text plus one
"Blocks approval" checkbox; "Copy feedback" emits a loadout.plan-feedback/1
document whose verdict is request_changes iff any comment blocks.- Per-skill install/remove toggles — Studio: per-skill install/remove toggles
on the skills card (previously the card only offered install-all; the CLI's
load skill install/remove <id> already supported single skills).
Fixed
load doctor could hang forever probing an agent CLI. Doctor checked
each agent's launch CLI with an unbounded --version run; GitHub Copilot's
version check can leave a background updater holding the output pipe, which
blocked doctor indefinitely. Agent probes now get the same hard deadline as
script probes (3s): a wedged CLI degrades to a "probe timed out" warning.
The shared probe runner also bounds its output reads (not just the child's
exit) and kills the probe's whole process group on expiry, so lingering
update-checker grandchildren are reaped instead of orphaned — this protects
refresh/render environment probes too.- Duplicate "changed outside loadout" warnings on
refresh --agent all.
The out-of-band script-change warning printed once per agent resolving the
same fragment; it now prints once per changed script per run.
- A trust store written by a newer loadout is refused, not misread. After
a downgrade, a trust store with a higher schema version is now treated like
a corrupt store — loud warning, record refused, load trust --rebuild
recovers — instead of reinterpreting entries whose meaning may have changed.
Security
- Studio's markdown rendering now de-links unsafe URL schemes. Fragment
and loadout guidance previews in load studio previously escaped raw HTML
but did not check link destinations — a [text](javascript:…) link in
guidance markdown rendered as a real, clickable <a href="javascript:…">.
Studio now shares the same sanitizing markdown renderer introduced for
load plan (src/markdown.rs): link destinations are limited to
http(s):, mailto:, in-page #fragments, and scheme-less relative
paths; anything else is de-linked to plain text, checked case-insensitively
after stripping control/whitespace characters. Images never fetch — a safe
destination renders as a link, not <img>.
Install loadout 0.14.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/elleryfamilia/loadout/releases/download/v0.14.0/loadout-installer.sh | sh
Download loadout 0.14.0
