kendex 5.0.1

chore(release): kendex 5.0.1 — release-review hardening

Claude-Session: https://claude.ai/code/session_01FWMNuKxc5YCqqrQZFFmsxe

vstack 4.9.0

vstack report — deterministic issue routing

Adds the vstack report subcommand: it files a workflow-error issue and routes it to the correct repo based on deterministic ownership resolution (installed provenance frontmatter + the project lock's recorded source), defaulting to the LOCAL repo unless the asset is provably vstack-owned. This stops consuming repos from misfiling project-local asset problems into vanillagreencom/vstack (#771, #773).

Also ships a best-effort issues: opened CI ownership guard that labels marker-less misfiles for triage (never closes).

Pick it up with vstack update.

• #773 — vstack report + CI ownership guard (Closes #771)
• #774 — release 4.9.0
• Follow-up: #772 (identity-based provenance for agents/hooks)

vstack 4.8.0

CLI changes since v4.7.1

Features / behavior

• OpenCode mode = "primary" agents no longer inherit subagent default denies (task/question) — generated defaults become [], and refresh migrates away stale generated-shaped deny lists on primary agents (#670, community contribution by bernardobastardo (@bernardobastardo)).
• Default model migrated gpt-5.5 → gpt-5.6-sol across generated OpenCode/Codex/Pi agents (#500).

Fixes

• vstack refresh applies project-owned skill instructions to canonical .agents/skills files without lock entries (#566).
• Linear cache synced before dev reads (#602).
• Installed orch tests stay portable outside the repo (#592).
• OpenCode config trailing newline preserved (#593).
• Safe temp-dir integration-check wrapper; corrected README claim (#568).

Notes

• Skill/agent/hook content updates ship continuously via vstack refresh and are not tied to CLI releases; this release covers the Rust CLI/TUI. Since v4.7.1 the skill set gained the three-mode review gate (PR_REVIEW_GATE), reviewer nudging and check/status evidence, tiered-CI patterns, external worktree defaults, and the orch settings template — see the repo history for details.

vstack 4.7.1

What's Changed

• fix(issue-428): linear skill: issues create --parent is silently ignored (sub-issue not linked) by Brad (@bmethod) in #430
• fix(issue-431): lease worktree push after auto-rebase by Brad (@bmethod) in #432
• fix(issue-433): agent installs without hooks omit hook frontmatter by Brad (@bmethod) in #436
• fix(issue-435): Clarify skill-failure reporting for non-VStack skills by Brad (@bmethod) in #437

Full Changelog: v4.7.0...v4.7.1

vstack 4.7.0

Highlights

• Add Claude Bridge Sonnet 5 model support and update Sonnet shorthand routing.
• Make heavy Claude/Pi agents inherit the parent model by default while preserving explicit model overrides.
• Preserve managed skill symlink mirrors during refresh/reinstall flows.
• Improve Pi extension behavior for agents-tmux rate-limit handling, Codex Responses stream parity, and tool-renderer user message padding.
• Fix Nix build inputs to use Cargo.lock.

Validation

• cd cli && cargo test — pass (301 passed, 2 ignored).
• Temp vstack add --all --copy -y smoke — pass, project-scoped.
• pi-agents-tmux bun tests — pass (257 passed).
• pi-codex-minimal-tools npm run check — pass (49 passed).
• pi-claude-bridge npm run typecheck and npm run build — pass.
• pi-claude-bridge npm run test:usage was explicitly waived for this release because local keychain OAuth token extraction failed.

What's Changed

• nix run github:vanillagreencom/vstack fails to build due to outdated cargoHash by Mike Nerone (@mikenerone) in #426

New Contributors

• Mike Nerone (@mikenerone) made their first contribution in #426

Full Changelog: v4.6.1...v4.7.0

vstack 4.6.1

What's Changed

• Seed skill settings during project installs by Brad (@bmethod) in #425

Full Changelog: v4.6.0...v4.6.1

vstack 4.6.0

Highlights

• Codex agent nicknames — generated Codex agents carry name-prefixed nickname-candidates (e.g. Rust-Atlas) so the Codex app shows which agent definition launched while still identifying the subagent by name.
• Codex skill inventory — Codex agents emit a "Required Skills" instruction section pointing at .agents/skills/<name>/SKILL.md; the unsupported top-level skills TOML field is dropped (back-compat retained in vstack check).
• New workflow prompts — /gh-release, /npm-deploy, and /pi-update ship under .pi/prompts/.
• Hardening — Codex-safe orch/Linear/GitHub/reviewer workflows; pi-extension fixes (pi-agents-tmux file-lock & needs-completion snapshots, pi-claude-bridge stale-context rendering, pi-codex-minimal-tools null-content tolerance, pi-hooks nested cli/Cargo.toml pre-commit guard).

What's Changed

• fix(issue-367): report Linear bulk-update partial failures in #368
• fix(issue-369): avoid Codex-hostile workflow snippets by Brad (@bmethod) in #370
• fix(issue-371): bound bot-review-wait timeout in #373
• fix(issue-372): Orch Codex review delegation launches worker instead of generated reviewer agents in #374
• fix(issue-375): harden GitHub op-token auth fallback in #377
• docs(issue-376): Codex workflow shell commands rejected as approval-required under never policy in #380
• Harden Codex-safe reviewer JSON artifact writes in #385
• fix(issue-383): GitHub helpers fail auth preflight with valid selected token and stale keyring in #386
• fix(issue-388): disable signing in orch helper test in #390
• fix(issue-389): add GitHub HTTPS git fallback in #391
• fix(issue-392): make benchmark QA guidance Codex-safe by Brad (@bmethod) in #393
• Update cargoHash in flake.nix for vstack 4.5.0 by LoveSnowEx (@LoveSnowEx) in #396
• fix(issue-394): handle stale Pi contexts in message renderers by Brad (@bmethod) in #402
• fix(#397): Support documented Linear relation aliases by Brad (@bmethod) in #404
• [codex] Clarify TPM audit relation cache lookup by Brad (@bmethod) in #400
• fix(issue-395): crash report: Error: Timed out acquiring file lock for ~/.pi/agent/vstack/sessions//pi-agents-tmux/tasks.json after 10000ms by Brad (@bmethod) in #405
• fix(issue-395): skip duplicate terminal completion emits by Brad (@bmethod) in #408
• fix(issue-401): emit Codex skill inventory by Brad (@bmethod) in #412
• fix(issue-406): show Linear cache subcommand help by Brad (@bmethod) in #411
• fix(issue-395): preserve needs_completion on bad outbox by Brad (@bmethod) in #409
• fix(issue-403): honor second opinion timeout default by Brad (@bmethod) in #410
• fix(issue-407): avoid pull in merge sync by Brad (@bmethod) in #414
• fix(issue-415): clarify review-pr reviewer launch ordering by Brad (@bmethod) in #417
• fix(issue-416): persist TPM audit inline JSON by Brad (@bmethod) in #418
• fix(issue-419): github pr-merge --check misclassifies in-progress checks as ci_failed by Brad (@bmethod) in #420
• fix(orch): wait for late bot review threads by Brad (@bmethod) in #422
• fix(codex): drop unsupported top-level skills field from agent TOML by Brad (@bmethod) in #423
• fix(pi-hooks): resolve nested cli/Cargo.toml in pre-commit guard by Brad (@bmethod) in #424

New Contributors

• LoveSnowEx (@LoveSnowEx) made their first contribution in #396

Full Changelog: v4.5.0...v4.6.0

vstack 4.5.0

What's Changed

• fix(issue-339): classify home agent dirs as user scope by @vg-claude in #343
• fix(issue-342): recover installed hooks during refresh by @vg-claude in #344
• Update cargoHash in flake.nix by DaKingof in #345
• Add Fable 5 to Claude bridge models by Brad (@bmethod) in #347
• Fix Fable fallback handling in Pi Claude bridge by @vg-claude in #349
• Make pi-web-tools op secrets fail fast by Brad (@bmethod) in #350
• Fix worktree push for Codex app worktrees by Brad (@bmethod) in #362
• docs(orch): move Linear sessions to review by Brad (@bmethod) in #365
• [codex] Fix bot review wait terminal approval fallback by Brad (@bmethod) in #363
• [codex] Handle pr-view no-PR and auth timeouts by Brad (@bmethod) in #364
• fix(#353): make workflow shell snippets codex-safe by Brad (@bmethod) in #360
• [codex] Make GitHub token loaders env-first by Brad (@bmethod) in #366
• fix(orch): normalize Codex GitHub worktree starts by Brad (@bmethod) in #361

New Contributors

• DaKingof made their first contribution in #345

Full Changelog: v4.4.0...v4.5.0

vstack 4.4.0

What's Changed

• Flightdeck: reduce linear-start launch friction by Brad (@bmethod) in #331
• Fix bot review wait for Claude summary comments by Brad (@bmethod) in #330
• Scope diff summary Rust risk flags to .rs diffs (#328) by @vg-claude in #332
• Fix linear auth diagnostics in session init by @vg-claude in #333
• Fix decider GNU grep resolution by @vg-claude in #334
• Recover stalled Claude bridge streams by @vg-claude in #335
• [codex] Fix bg subagent timeout watchdog by Brad (@bmethod) in #337
• Migrate deprecated Codex hook config to hooks by Brad (@bmethod) in #338
• Remove flightdeck; rename linear-orch/linear-dev to orch/dev with GitHub-lane support by Brad (@bmethod) in #341

Full Changelog: v4.3.0...v4.4.0

vstack 4.3.0

What's Changed

• Support Codex native worktree hooks by Brad (@bmethod) in #325

Full Changelog: v4.2.0...v4.3.0