v1.0.21

[1.0.21] - 2026-08-14

Compare 1.0.20...1.0.21.

Added

• Added CTX Fit as the primary ctx experience: free local repository
  profiling, readiness and repository-native verification discovery,
  history-derived representative tasks, bounded candidate planning, explicit
  budget authorization, repeated trials, and a deterministic "cheapest that
  reliably works" recommendation.
• Added reviewable application of a winning configuration through the
  content-addressed .ctx/fit-configuration.json sidecar. ctx run validates
  and activates the sidecar's exact pinned model, instruction bytes, and
  capability bytes; ctx fit --pr can put that same artifact in a pull
  request.
• Added the LoopFlow/custom agent-loop adapter
  (python -m ctx.adapters.loopflow) for permissioned pre-plan skill, agent,
  MCP, ctx MCP server, and user-owned model harness recommendations.

Changed

• Made the top-level ctx command lead with CTX Fit while preserving the
  existing run, resume, and sessions harness spellings and the graph-backed
  recommendation surface.
• Bound evaluation authorization to the exact candidate, task, reliability,
  trial-count, and budget plan; incomplete, one-sided, simulated, or
  cost-incomplete evidence cannot produce an applicable winner.
• Limited the documented 1.0.21 comparison claim to capability configurations
  within one coding-agent harness. Repository-native verification covers
  Python, JavaScript/TypeScript, Go, Rust, and Make under an explicit
  trusted-verifier assumption. Repository installation and final verification
  run without network access, so build backends, runtimes, and dependencies
  must already be locally available; no paid live-provider trial is claimed as
  release evidence.
• Aligned docs deploy, release publish, PR docs-check, and local preflight on
  the canonical bug-smoke, feature, dashboard, and toolbox public-docs tracker
  suite.
• Added ruff format --check to local preflight and main static CI gates for
  src, hooks, and scripts.
• Made scripts/no_mistakes_run.sh fast write local-fast lane timing evidence
  to .gate/local-fast.json by default.
• Made canonical Hugging Face sync fail when HF_TOKEN is missing while forks
  still skip safely without publishing.
• Made ctx-mcp-add stream JSONL inputs, extended Hugging Face card-only sync
  to upload README, changelog, and docs inputs, and let PR graph checks fall
  back to targeted Git LFS hydration for new graph artifact pointers.
• Tightened graph/wiki artifact packaging by omitting local generated markdown,
  redacting host-user paths from packed markdown, and restricting queue-driven
  artifact promotion to known sibling staged targets.

Fixed

• Isolated agent edits and repository verification in throwaway workspaces,
  removed ambient secret and host-write authority from the evaluated agent,
  protected the verification judge and test inputs from candidate edits, and
  made unsupported or interrupted verification inconclusive instead of
  manufacturing a successful result.
• Preserved exact current/applied configuration identity across baseline,
  treatment, recommendation, apply, and later activation, including strict
  content hashes, compare-and-swap writes, symlink refusal, and transactional
  rollback.
• Redacted runtime lifecycle free-text fields before storing local events so
  evidence, commands, summaries, triggers, reasons, and statuses do not retain
  secrets or local filesystem paths.
• Expanded MCP argv $ENVVAR placeholders only at child-process spawn time and
  rejected sensitive placeholder expansion by default, with explicit trusted
  opt-in for servers that cannot avoid argv credentials.
• Validated backup top_files overrides as top-level filenames only and added
  dry-run support to legacy backup_mirror prune --keep.
• Ran the full OS/Python pytest matrix on PRs that change CI workflows and made
  the stable required aggregate reject skipped matrix jobs for those PRs;
  POSIX-only no-mistakes shell-wrapper regressions now skip on Windows.
• Hardened ctx-mcp-enrich checkpoint and frontmatter handling so malformed
  checkpoints reset cleanly, processed slugs clear stale failures, body keys are
  not rewritten, and non-positive flush cadences fail fast.
• Tightened local preflight no-test release metadata exemptions so version and
  stats-only exceptions require matching diff hunks.
• Kept quality Stop hook checkpoints from advancing when recompute fails so
  unscored events retry on the next session end.