From f689dbe2b1a55f50473d46d170b433a4340d3a70 Mon Sep 17 00:00:00 2001 From: Divyam Talwar Date: Sat, 5 Sep 2026 14:07:58 +0530 Subject: [PATCH] build: release 0.7.0 and document the four undocumented merges Problem Four pull requests merged into main without a changelog entry between them: the semantic compatibility doctor (#9), the explainable tool-surface review (#8), the capability planner (#7), and the toolchain bump (#15). The Unreleased section described only the Astra lane, so the three most user-visible additions since 0.6.0 existed in the code and in the README but nowhere in the release record. A changelog that silently omits four merges is worse than no changelog, because it is read as complete. Approach Document all four, then cut Unreleased as 0.7.0 and bring the three declared versions into agreement. Minor rather than patch: the release adds a second native implementation lane and three read-only diagnostics. Nothing is removed and no interface breaks, so it is not a major. Each entry records what the thing refuses to do, since that is the part with value: the planner refuses hosts that would silently weaken requested effort or advisor isolation; the review turns "the digest moved" into whether the change is permission-bearing; the doctor no longer reports a marker-only or weakened adapter as healthy. The toolchain entry records why the bump was applied by hand, so the next person does not reopen the Dependabot question. Verification `bun run ci` is green: verify.sh three-role checks pass, 82 tests across 6 files, validate, sbom (now emitting orrery-0.7.0.cdx.json, 18 packaged files, 0 runtime dependencies), and release-check. `bun run tag:check -- v0.7.0` passes, so the tag and all three manifests agree. Impact The release record now matches what shipped. Ready to tag v0.7.0 once merged. --- CHANGELOG.md | 21 ++++++++++++++++++++- package.json | 2 +- plugins/orrery/.codex-plugin/plugin.json | 2 +- plugins/orrery/plugin.json | 2 +- 4 files changed, 23 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 6ccc288..69348be 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,7 +3,7 @@ All notable changes to Orrery are documented here. This project follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and Semantic Versioning. -## [Unreleased] +## [0.7.0] - 2026-09-05 ### Added @@ -16,6 +16,16 @@ All notable changes to Orrery are documented here. This project follows toward Astra, and what to do when a route turns out to be wrong. - A `verify.sh` regression test that seeds a real v0.6.0 install, upgrades it, and asserts Terra migrated, Astra was added, Sol was untouched, and `--check` passes. +- **A capability planner** (`bun run plan`). Given the guarantees you require, it + reports which hosts can actually bind them and refuses the ones that would silently + weaken requested effort or advisor isolation. A path-only portability matrix would + report every client as working; this names the ones that would quietly downgrade the + contract. +- **An explainable tool-surface review** (`bun run tools:review`). `TOOLS_DIGEST` + reports that the surface moved; this reports *what* moved and whether it is + permission-bearing — added arguments, newly stateful tools, or a dropped + `readOnlyHint`. The reviewed baseline lives in `tools/schema/tools.policy.json` and + is asserted by `validate`, so it cannot drift away from the digest it explains. ### Changed @@ -31,6 +41,15 @@ All notable changes to Orrery are documented here. This project follows - The installer accepts a set of superseded template digests rather than a single one, so both the v0.2.0 and v0.6.0 Terra files migrate instead of being refused as conflicts. +- **The compatibility doctor is now semantic** (report `schema: 2`). It parses native + role ids, requested models and effort, and advisor controls, rather than checking for + a managed marker, so a marker-only or weakened adapter file is no longer reported as + healthy. Observed declarations remain explicitly separated from live-host behaviour + it cannot prove. +- `typescript` 5.9.2 to 7.0.2 and `@types/bun` 1.3.5 to 1.4.1. The compiler is a major + version move and required no source changes. Applied by hand with a regenerated + lockfile, because Dependabot cannot update `bun.lock` and its npm pull requests can + never satisfy `bun install --frozen-lockfile`. ### Fixed diff --git a/package.json b/package.json index 991a1bf..3bed666 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "orrery-validation", - "version": "0.6.0", + "version": "0.7.0", "private": true, "type": "module", "scripts": { diff --git a/plugins/orrery/.codex-plugin/plugin.json b/plugins/orrery/.codex-plugin/plugin.json index a53cba9..f240906 100644 --- a/plugins/orrery/.codex-plugin/plugin.json +++ b/plugins/orrery/.codex-plugin/plugin.json @@ -1,6 +1,6 @@ { "name": "orrery", - "version": "0.6.0", + "version": "0.7.0", "description": "Configurable architect workflow that inherits the parent model, supports exact native roles, routes implementation to GPT-6 Astra at xhigh or GPT-5.6 Terra at high on stated risk, preserves explicit opt-in GPT-5.6 Luna app tasks through Codex app task tools, and retains fresh Sol review compatibility.", "author": { "name": "Divyam Talwar", diff --git a/plugins/orrery/plugin.json b/plugins/orrery/plugin.json index c585418..9f787a5 100644 --- a/plugins/orrery/plugin.json +++ b/plugins/orrery/plugin.json @@ -1,7 +1,7 @@ { "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json", "name": "orrery", - "version": "0.6.0", + "version": "0.7.0", "description": "Configurable cross-client architect orchestration with lazy setup, exact user-selected native roles, risk-routed Astra and Terra implementation lanes, content-addressed tool-surface consent, transactional adapter installation, and a separate explicit Codex Luna app-task lane.", "author": { "name": "Divyam Talwar",