plugin v0.21.0-rc.0

首个 release candidate。agent-registry 生命周期指导闭环(#177+#184) + outside-in 纪律 + kimi-code 4th host adapter。配对 ccm-v0.22.0-rc.0。详见 CHANGELOG.md。

ccm-v0.22.0-rc.0

首个 ccm release candidate。web-viewer #178 缓存修复 + agent-stream #180 per-harness 适配 + agent list stale advisory + DDL 引擎(#149) + kimi model-policy。配对 plugin v0.21.0-rc.0。

v0.20.1

cc-master plugin v0.20.1

v0.20.1 is a plugin-only installer hotfix paired with the unchanged ccm-v0.21.0. It does not change ccm, @ccm/engine, or @ccm/web-viewer package versions or product behavior.

Fix

The v0.20.0 transactional publisher compared a mode-aware digest before activation, but Node.js fs.cpSync does not promise to preserve directory permissions. The released Claude Code artifact legitimately contains three owner-only (0700) attested-skill directories. On a host with umask 0002, Node.js 22/24 staged them as 0775, so checksum validation rejected the publisher's own otherwise byte-identical copy and preserved the last-known-good plugin.

The publisher now reapplies source modes to real files and, in post-order, directories before computing the staged digest. It never chmods symlinks. Existing manifest validation, safe-relative-symlink checks, fsync barriers, atomic version pointers, rollback, and failure reporting remain unchanged.

Verification

• Regression-first Node.js 22 test with a nested 0700 packaged plugin directory.
• Exact v0.20.0 Claude Code release artifact reproduced the checksum failure before the fix and publishes with identical source/endpoint digests after it.
• Full installer integrity fault matrix, source-to-dist sync, all-host package/checksum/content validation, Claude plugin validation, and local release smoke are release gates.

Upgrade

After v0.20.1 is published, retry the normal pinned installer; do not copy plugin trees manually:

curl -fsSL https://raw.githubusercontent.com/nemori-ai/cc-master/v0.20.1/install.sh | \
  bash -s -- --ccm-version ccm-v0.21.0 --plugin-version v0.20.1 --all-harnesses

Reinstalling ccm-v0.21.0 is idempotent. The installer will then transactionally publish the v0.20.1 plugin for each locally installed supported harness.

v0.20.0

cc-master plugin v0.20.0

Plugin v0.20.0 makes cross-harness orchestration the default identity of a cc-master orchestrator. A master session running in Claude Code, Codex, or Cursor is guided to reason over the machine-wide worker pool instead of treating its origin harness as the only place work can run.

This release requires ccm v0.21.0 or newer. Upgrade ccm first: the plugin checks board-init/structured-board-path-v1 and goal-contract/v1 before any fresh or resumed ARM mutation, and fails loudly without them.

What changed

One orchestrator identity across three origins

• master-orchestrator-guide now treats the orchestrator as session-portable and cross-harness from its top-level identity, worker/executor vocabulary, decision loop, dispatch, reconciliation, review, handoff, and resume guidance.
• as-master-orchestrator surfaces for Claude Code, Codex, and Cursor align on the same machine-wide worker-pool mindset and Goal Contract lifecycle.
• High-frequency guidance exposes the ccm operations needed to inspect harness inventory, target-native help, model policy, quota posture, workers, agents, and current board truth.

Unified model, quota, and pacing guidance

• All origins share one O/T1/T2/T3 role taxonomy, orchestrator-tier candidates, task-role floors, ample/tight fallback chains, live admission facts, and bounded community task-affinity taste.
• Architecture and system design prefer orchestrator-capable models; implementation normally moves one tier down when the contract is complete; review prefers a heterogeneous model family; read-only research normally moves two tiers down.
• Machine-wide cached quota posture and coordination notifications are visible from every supported origin without provider calls in hook runtime.
• Codex uses seven-day hard pacing with rolling-24h advisory. Cursor uses its subscription-period signal. Codex and Cursor do not gain account switching or automatic account rotation.

Hooks, commands, skills, and host adapters

• Bootstrap performs the explicit ARM action and is its unique exemption; reinjection, usage pacing, coordination notification, board lint, board guard, and completion verification consume the shared ccm contracts while remaining dormant until a session is explicitly armed.
• The eight distributed skills remain the product portfolio: master-orchestrator-guide, authoring-workflows, using-ccm, slicing-goals-into-dags, dev-as-ml-loop, engineering-with-craft, pacing-and-estimation, and distilling-lessons-into-assets.
• Claude Code ships native commands, hooks, and skills; Codex ships its plugin manifest, hooks, and skills; Cursor ships host-native hooks, rules, skills, and command surfaces. Origin adapters retain only real invocation differences rather than separate model/quota worldviews.
• using-ccm is synchronized with worker, Agent Registry, Goal Contract, model policy, routing, quota, delivery evidence, and the current 82 board validation rules.

Orchestration correctness

• Goal Contract guidance treats the initial request and GitHub issue as source evidence, not an automatically confirmed goal. Revision, assurance, drift, Goal Brief, resume, and handoff behavior are explicit.
• Routed tasks keep planning, selected worker/model, fallback authority, native attempt, runtime agent, and task acceptance as separate evidence.
• Review and retry guidance rejects stale verdicts and distinguishes candidate success from integration into the baseline consumed downstream.
• The viewer guidance follows the new Goal Contract, planning/routing, Agent Registry, quota, and model-policy surfaces while preserving its read-only boundary.

Honest boundaries

• cc-master is harness-aware runtime guidance and notification injection; the acting subject remains the agent running inside its harness. ccm owns durable board/state/CLI mechanics and local worker lifecycle.
• ccm worker is local and session-bound. Durable remote transport, a universal provider sandbox, stronger isolation, and Windows runtime support remain follow-up work.
• Cursor IDE is the plugin origin surface; Cursor Agent is the headless worker surface. Installing the Cursor plugin does not turn the headless CLI into a plugin host.
• Offline provider fixtures prove contract behavior, not universal live-provider qualification.
• Cursor API-paid Fable/Sol routes require explicit paid-route permission; they are not silently selected.
• Existing boards remain compatible unless an opt-in contract is enabled.

Install or upgrade

Use the paired, pinned installer so ccm is installed and verified before the plugin:

curl -fsSL https://raw.githubusercontent.com/nemori-ai/cc-master/v0.20.0/install.sh |
bash -s -- \
  --ccm-version ccm-v0.21.0 \
  --plugin-version v0.20.0 \
  --all-harnesses

The installer verifies both release checksum manifests and installs only detected plugin-capable harnesses. Cursor Agent by itself is not a plugin-distribution target.

After installation, start a new harness process/session so the new hooks, skills, commands, and rules are loaded. In particular, resuming inside an already-running Codex process does not reload that process's plugin snapshot.

Details

• plugin changelog
• feature manual
• audited release notes and 63-commit ledger
• paired ccm-v0.21.0 release

ccm-v0.21.0

ccm v0.21.0

ccm-v0.21.0 is the engine/CLI half of the cross-harness orchestration MVP. It ships ccm CLI 0.21.0, @ccm/engine 0.21.0, and the embedded read-only web viewer 0.19.0.

This release is designed to pair with cc-master plugin v0.20.0. When upgrading the two separately, install ccm v0.21.0 first: plugin v0.20.0 checks the new Goal Contract and structured board-path capabilities before it will arm.

Highlights

Local cross-harness workers

• ccm worker help|run discovers locally installed Claude Code, Codex, and Cursor Agent CLIs, exposes their real target help, passes target-native arguments through, and owns the session-bound child process tree through terminal settlement.
• Cursor IDE and the headless Cursor Agent are modeled as separate surfaces; only Cursor Agent is a worker target.
• Optional planning and routing contracts record task difficulty, capability/effect/permission floors, ample/tight candidate chains, fallback authority, and immutable per-attempt selection evidence.

Goal, actor, and delivery truth

• Goal Contract v1 adds revisioned goal set|confirm|amend|show|check, immutable Goal Briefs, drift checks, and explicit resume/handoff behavior.
• Agent Registry v1 adds first-class runtime actors through ccm agent create|bind|link|terminal|probe|list|show. Tasks, agents, and attempts remain distinct: a terminated process is not an accepted task.
• Declared delivery/dependency contracts distinguish a passing candidate from a change actually landed in the downstream baseline, with immutable artifact, waiver, drift, retry, and reviewed-reconciliation evidence.

Machine-wide model and quota decisions

• ccm model-policy separates provider facts, project role candidates, live admission, cost ordering, and expiring community task-affinity taste. Capability and effect floors remain hard gates; taste is only a bounded tie-break.
• Machine-wide cached quota posture covers locally supported harness surfaces. Codex uses its seven-day hard pacing window with rolling-24h advisory; Cursor uses its subscription-period signal; neither Codex nor Cursor gains account auto-switching.
• Quota reservations and native attempts use fail-closed owner/evidence boundaries. Offline provider fixtures validate contracts without claiming that every live provider canary passed on every host.

Runtime, portability, and viewer

• The runtime supply chain adds content-addressed staging, atomic activation, verified invocation, doctor, rollback, and crash recovery on supported POSIX hosts.
• Executable/path resolution and service lifecycle are explicit Linux/macOS contracts, including systemd-user and launchd serializers.
• The embedded viewer 0.19.0 adds Goal Contract, planning/routing, quota posture, Agent Registry, linked tasks, and route-aware URL/filter state. It remains localhost-only, token-gated, and read-only.

Reliability and correctness

• Retry and review gates invalidate stale attempt evidence and require a current-attempt approval before downstream release.
• Worker cancellation waits for owned descendants to settle; tests reap leaked trees.
• Persistent stores, runtime materialization, locks, statusline temporary-root detection, and clean-worktree fixtures are hardened for crash/concurrency behavior.
• Board guard closes structured/freeform path and shell-redirection bypasses while preserving normal ccm --board calls.
• Darwin invocation uses an attested final-path tier; launchd deactivation and uninstall failures remain nonzero and replayable.

Compatibility and scope

• Release binaries: Linux x64/arm64 and macOS x64/arm64. Windows release/runtime support remains deferred.
• The installer requires Node.js 22+, bash, unzip, and a SHA-256 tool; release SEA builds are pinned to Node 22.
• Existing boards remain compatible unless an opt-in contract is enabled. New contracts do not silently reinterpret legacy tasks.
• ccm worker is a local, session-bound MVP. Durable remote transport, a universal provider sandbox, Windows runtime support, and stronger isolation remain post-MVP.
• Claude Code may use its separately authorized account-pool policy. Codex and Cursor do not auto-switch accounts.

Install the paired release

After plugin v0.20.0 is published, the checksum-verifying, ccm-first install path is:

curl -fsSL https://raw.githubusercontent.com/nemori-ai/cc-master/v0.20.0/install.sh |
bash -s -- \
  --ccm-version ccm-v0.21.0 \
  --plugin-version v0.20.0 \
  --all-harnesses

The installer verifies each release's SHA256SUMS, publishes transactionally, best-effort attempts to reconcile wanted ccm services (warning and continuing on failure), and only then installs plugins for detected plugin-capable harnesses.

Details

• ccm CLI changelog
• engine changelog
• audited release notes and 63-commit ledger

v0.19.0

Plugin v0.19.0 (with ccm-v0.20.0)

Highlights

• Mission-control web-viewer lands in ccm web-viewer / ccm viewer (five-zone shell, rank-band DAG, DecisionCard, board extras).
• GPT-5.6 model-tier guidance for Cursor / Codex pacing-and-estimation adapters.

See CHANGELOG.md [0.19.0] for details. Install pins: --plugin-version v0.19.0 --ccm-version ccm-v0.20.0.

ccm-v0.20.0

ccm v0.20.0

Mission-control web-viewer migration (visual port + board extras + rank-band layout), ccm viewer alias, and related server read-model additions (insights / board_extras / /decisions.json / real /peers.json).

Ships alongside plugin v0.19.0. See ccm/apps/cli/CHANGELOG.md 0.20.0.

v0.18.1

chore(release): bump plugin v0.18.1 and ccm v0.19.1 (#80)

Patch release for biome lint hotfix (#79); sync README pins, changelogs,
plugin dist manifests, and regenerated web-viewer asset version stamp.

Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Cursor <cursoragent@cursor.com>

v0.18.0

feat: multi-orchestrator arbiter inbox + web-viewer co-lifecycle (v0.…

v0.17.3

Cursor bootstrap slash trigger

修复 Cursor beforeSubmitPrompt 传入原始 /as-master-orchestrator 时 bootstrap 静默 no-op。

Fixed

• Cursor bootstrap slash matching — bootstrap-board-core 现识别 Cursor host-native /as-master-orchestrator（及 /cc-master-as-master-orchestrator）前缀；此前仅匹配 cc-master:… 与 HTML sentinel，导致真机 slash 命令永不 ARM。

Full changelog: CHANGELOG.md#0173--2026-07-09