ccm-v0.21.0

ccm v0.21.0

ccm-v0.21.0 is the engine/CLI half of the cross-harness orchestration MVP. It ships ccm CLI 0.21.0, @ccm/engine 0.21.0, and the embedded read-only web viewer 0.19.0.

This release is designed to pair with cc-master plugin v0.20.0. When upgrading the two separately, install ccm v0.21.0 first: plugin v0.20.0 checks the new Goal Contract and structured board-path capabilities before it will arm.

Highlights

Local cross-harness workers

• ccm worker help|run discovers locally installed Claude Code, Codex, and Cursor Agent CLIs, exposes their real target help, passes target-native arguments through, and owns the session-bound child process tree through terminal settlement.
• Cursor IDE and the headless Cursor Agent are modeled as separate surfaces; only Cursor Agent is a worker target.
• Optional planning and routing contracts record task difficulty, capability/effect/permission floors, ample/tight candidate chains, fallback authority, and immutable per-attempt selection evidence.

Goal, actor, and delivery truth

• Goal Contract v1 adds revisioned goal set|confirm|amend|show|check, immutable Goal Briefs, drift checks, and explicit resume/handoff behavior.
• Agent Registry v1 adds first-class runtime actors through ccm agent create|bind|link|terminal|probe|list|show. Tasks, agents, and attempts remain distinct: a terminated process is not an accepted task.
• Declared delivery/dependency contracts distinguish a passing candidate from a change actually landed in the downstream baseline, with immutable artifact, waiver, drift, retry, and reviewed-reconciliation evidence.

Machine-wide model and quota decisions

• ccm model-policy separates provider facts, project role candidates, live admission, cost ordering, and expiring community task-affinity taste. Capability and effect floors remain hard gates; taste is only a bounded tie-break.
• Machine-wide cached quota posture covers locally supported harness surfaces. Codex uses its seven-day hard pacing window with rolling-24h advisory; Cursor uses its subscription-period signal; neither Codex nor Cursor gains account auto-switching.
• Quota reservations and native attempts use fail-closed owner/evidence boundaries. Offline provider fixtures validate contracts without claiming that every live provider canary passed on every host.

Runtime, portability, and viewer

• The runtime supply chain adds content-addressed staging, atomic activation, verified invocation, doctor, rollback, and crash recovery on supported POSIX hosts.
• Executable/path resolution and service lifecycle are explicit Linux/macOS contracts, including systemd-user and launchd serializers.
• The embedded viewer 0.19.0 adds Goal Contract, planning/routing, quota posture, Agent Registry, linked tasks, and route-aware URL/filter state. It remains localhost-only, token-gated, and read-only.

Reliability and correctness

• Retry and review gates invalidate stale attempt evidence and require a current-attempt approval before downstream release.
• Worker cancellation waits for owned descendants to settle; tests reap leaked trees.
• Persistent stores, runtime materialization, locks, statusline temporary-root detection, and clean-worktree fixtures are hardened for crash/concurrency behavior.
• Board guard closes structured/freeform path and shell-redirection bypasses while preserving normal ccm --board calls.
• Darwin invocation uses an attested final-path tier; launchd deactivation and uninstall failures remain nonzero and replayable.

Compatibility and scope

• Release binaries: Linux x64/arm64 and macOS x64/arm64. Windows release/runtime support remains deferred.
• The installer requires Node.js 22+, bash, unzip, and a SHA-256 tool; release SEA builds are pinned to Node 22.
• Existing boards remain compatible unless an opt-in contract is enabled. New contracts do not silently reinterpret legacy tasks.
• ccm worker is a local, session-bound MVP. Durable remote transport, a universal provider sandbox, Windows runtime support, and stronger isolation remain post-MVP.
• Claude Code may use its separately authorized account-pool policy. Codex and Cursor do not auto-switch accounts.

Install the paired release

After plugin v0.20.0 is published, the checksum-verifying, ccm-first install path is:

curl -fsSL https://raw.githubusercontent.com/nemori-ai/cc-master/v0.20.0/install.sh |
bash -s -- \
  --ccm-version ccm-v0.21.0 \
  --plugin-version v0.20.0 \
  --all-harnesses

The installer verifies each release's SHA256SUMS, publishes transactionally, best-effort attempts to reconcile wanted ccm services (warning and continuing on failure), and only then installs plugins for detected plugin-capable harnesses.

Details

• ccm CLI changelog
• engine changelog
• audited release notes and 63-commit ledger