# Changelog

## 0.2.3 — 2026-09-24 (Read-only boundaries and Codex delegation / 只读边界与 Codex 委派)

`review` 中的复合命令现在会检查每一步：先读取、后写入，仍按写入拒绝。
Codex 带命名空间的委派也受 `agents=0` 约束。其余改动涉及会话结束、
拒绝原因、扫描报告和案例文档。

In `review`, Guard checks every command in a supported shell chain; a read
cannot hide a later write. Namespaced Codex delegation also obeys `agents=0`.
The patch also updates session-end handling, decision reasons, scan reports,
and case documentation.

### 主要修复 / Main fixes

- **复合命令（[#52](https://github.com/lennney/stop-that-shit/pull/52)）：**
  `git status --short; git config --local ...` 这类混合读写命令链在 `review`
  中会被拒绝；纯读取链和已授权的 `change` 不受这项只读限制。
  会执行程序的 `rg` 选项与会写文件的 Git 输出选项也会被识别，搜索文本和
  选项值仍按字面处理。
  / Mixed read/write chains are denied in `review`; read-only chains and
  authorized `change` work remain allowed. The check covers executable `rg`
  options and writing Git output options without misreading literal values.
- **命名空间委派（[#53](https://github.com/lennney/stop-that-shit/pull/53)）：**
  Codex 的受支持启动调用受 `agents=0` 约束；状态读取、等待和相关完成证据
  仍分别处理。打包清单只注册适配器处理的 `UserPromptSubmit`、`PreToolUse`、
  `PostToolUse` 和 `SessionEnd`。
  / Supported namespaced spawn calls obey `agents=0`; status, wait, and
  correlated completion retain their own handling. The manifest lists only
  events the adapter handles.
- **Codex 会话结束（[#51](https://github.com/lennney/stop-that-shit/pull/51)、
  [#54](https://github.com/lennney/stop-that-shit/pull/54)）：** `SessionEnd`
  使用 3 秒超时。普通结束通知只读状态，不再争用写锁；明确的完成事实仍串行更新。
  / `SessionEnd` uses the supported three-second timeout. Ordinary end events
  read state without a writer lock; explicit completion facts remain serialized.
- **拒绝原因（[#55](https://github.com/lennney/stop-that-shit/pull/55)）：**
  五套宿主适配器共用动作分析。拒绝和解释查询给出固定分类原因；Runtime
  仍只记录元数据，不保存原始命令。
  / Five host adapters share action analysis. Denial and explain output include
  fixed reasons; Runtime stores metadata, not raw commands.

### 发布证据与案例 / Release evidence and cases

- **扫描报告（[#56](https://github.com/lennney/stop-that-shit/pull/56)）：**
  未取消的扫描若已生成 SARIF，即使失败也保留报告；失败结果和严重级别门槛
  继续生效。/ CI keeps generated SARIF from non-cancelled failed scans; failure
  and severity gates still apply.
- **案例（[#59](https://github.com/lennney/stop-that-shit/pull/59)）：**
  案例目录补充已有 Bad/Good fixture 的关键事实与下一步。
  [Issue #5](https://github.com/lennney/stop-that-shit/issues/5) 因原始材料不可得
  归档为未复现报告，未新增规则或效果计数。
  / The catalogue explains existing Bad/Good fixtures. Issue #5 is archived
  as unreproduced because its source material is unavailable; it adds no rule
  or effectiveness count.
- **版本与安装：** 包和宿主插件清单升至 `0.2.3`。中英文 README 保留产品故事
  与成对案例，韩文 README 保留原有说明；完整安装与 Hook 审查见
  [INSTALL.md](INSTALL.md)。
  `release:check` 对照 `package.json` 检查当前固定 tag 的命令和链接。
  / Package and host-plugin manifests are `0.2.3`. The Chinese and English
  READMEs keep their story and cases; the Korean guide stays in place.
  `release:check` verifies current pinned commands and links.

### 升级与验证 / Updating and verification

更新后重启宿主。在新的 Codex CLI TUI 中打开 `/hooks`，对照**所安装 tag** 的
[`hooks/codex-hooks.json`](hooks/codex-hooks.json) 审查并信任命令。Hook 定义
变化时可能需要重新确认。步骤见 [INSTALL.md](INSTALL.md#review-the-packaged-hooks)。

Restart the host after updating. In a fresh Codex CLI TUI, compare `/hooks`
with the **installed tag's** manifest and trust the reviewed commands.
Changed Hook definitions may need another review. See
[INSTALL.md](INSTALL.md#review-the-packaged-hooks).

候选版有 417 项测试通过、1 项跳过，18/18 成对案例通过；Hermes、发布检查
和 199 个文件的包白名单核对通过。隔离调用打包 Hook 覆盖只读拒绝、授权放行
及 #52/#53 的关键回归。Codex CLI 0.153.4 的隔离安装与 Hook 信任通过，
一次性仓库中的 `review` 拒绝和 `change` 放行也已核对。验证范围见
[EVIDENCE.md](EVIDENCE.md)。

Candidate checks: 417 tests passed, one skipped; 18/18 paired-case arms,
Hermes and release checks, and the 199-file package allowlist passed.
Isolated packaged-Hook calls covered read-only denial, authorized work,
and the key #52/#53 regressions. An isolated Codex CLI 0.153.4 install listed
the packaged Hooks as active; a disposable workspace confirmed a `review`
deny and an authorized `change` write. See [EVIDENCE.md](EVIDENCE.md) for scope.

**Full Changelog**: [0.2.2...0.2.3](https://github.com/lennney/stop-that-shit/compare/0.2.2...0.2.3)

## 0.2.2 — 2026-09-14 (Authorization, lifecycle, and Skill updates / 授权、生命周期与 Skill 更新)

### 修复 / Fixed

- **Explicit directive entry**：正式指令必须位于消息的首个非空行，不能包在
  引用或代码块中。正文中的示例不再设置权限，字段解析也不再跨行读取。
  未知字段或相互冲突的值会报告错误并保留原合同。
  / Directives must start the first non-empty line, outside quotes and code
  blocks. Embedded examples and later lines no longer set directive fields.
  Unknown fields or conflicting values return an error without changing the
  previous contract. Put task text after `--`, `: `, or a newline.
- 自然语言纠正会跳过代码示例、显式 Markdown 引用行和带引号的文本。
  在 README 中添加 `review only` 示例不再把当前编辑任务切成只读；
  正文中的真实只读要求仍然生效。
  / Natural-language corrections skip code examples, explicit Markdown quote
  lines, and quoted text. Documenting `review only` no longer changes an active
  edit task to review. Actual review instructions in prose still apply.
- OpenCode 和 Hermes 显示无效指令错误，并暂停工具调用直到用户提交纠正指令。
  Pi 显示错误并拒绝启动该输入对应的模型回合；通知失败也不会放行。
  / OpenCode and Hermes report invalid instructions and pause tool calls until
  the user corrects the instruction. Pi shows the error and handles the input
  without starting a model turn, even if feedback delivery fails.
- Runtime 查询与标注命令遵守相同的首行规则，缩进示例不能写入标注。
  / Runtime queries and label commands use the same first-line rule.
  Indented examples cannot write annotations.
- Claude slash 指令转换保留缩进与换行边界，不把代码示例转换为授权。
  / Claude slash normalization preserves indentation and line boundaries
  instead of turning code examples into authorization.
- OpenCode 引用中的指令不再触发可编辑模式的隐式授权；分段消息中的字段必须
  留在首行，后续部分作为正文。/ Quoted directives suppress OpenCode's
  implicit editable-agent promotion. Keep directive fields on the first line
  of a multipart message; later parts are task text.

- Corrected Hermes terminal `failed` results so synchronous batches and bound
  background children return their reserved capacity after a confirmed failure.
- Added adapter-owned lifecycle declarations. Historical adapters that import
  a new core's protocol number can no longer masquerade as current adapters or
  release reservations through old stop semantics.
- Shared policy handling of invalid-directive residue respects watch/off;
  permitted work remains accounted for when the session returns to Guard.
  This is separate from rejecting invalid input at the host adapter. Submit a
  valid directive to clear an OpenCode or Hermes input pause, including when
  selecting watch/off.
- Centralized delegation facts, reservation transitions, and per-call unresolved
  activity. Confirmed terminal evidence releases the corresponding call;
  unknown bounded results retain only their original reserved capacity.
- Added explicit Claude auto-denial recovery, OpenCode result-based accounting,
  Pi whole-chain completion, Codex spawn/wait correlation, and Hermes dispatch
  alias correlation. Timeout and stop-attempt signals no longer imply completion.
- Contract and lifecycle mutations share one session transaction. State reads
  do not write migrations. Schema 4 preserves old budgets, including zero,
  and carries forward unresolved legacy history.
- ControlEvent v2 separates lifecycle facts from request flags. Undeclared
  lifecycle events are not completion evidence. Finite Guard detects old
  delegation/control adapters. Runtime counts describe reserved
  upper bounds rather than measured active processes.
- Hermes task counting now follows the host's JSON-array and empty-batch inputs,
  closing two paths that could bypass `agents=0`.

- **Active agent limit**：恢复 `agents=N` 作为正式的活动并发上限，默认不限，
  `agents=0` 禁止 delegation，batch 超限整批拒绝；迁移保留旧的有效
  `agentBudget`（包括 `0`）。/ Restored `agents=N` as the formal active
  concurrency limit with an unlimited default, atomic batch rejection, and
  migration that preserves a valid old `agentBudget`, including `0`.
- **Lifecycle-safe concurrency**：整次调用完成或已关联子代理的实际终结才释放名额；
  后台或未知状态保留到可靠完成证据，停止尝试和会话结束不自动清空。
  / Confirmed joined results or bound-child termination release capacity.
  Stop attempts and session-end notifications alone do not clear reservations.
  Adapters use explicit host IDs rather than FIFO guesses.

### 依赖 / Dependencies

- 将 Ajv 的间接开发依赖 `fast-uri` 从 3.1.5 更新到 3.1.6，修复已报告的
  安全告警；不改变 Ajv 或其他依赖版本。
  / Updates Ajv's transitive development dependency `fast-uri` from 3.1.5
  to 3.1.6 to address reported security advisories. Ajv and the other
  dependency versions are unchanged.

### Skill 与文档 / Skill and documentation

- **Stop Ladder — [#46](https://github.com/lennney/stop-that-shit/pull/46)**：以完整履行任务责任为起点，先采用直接方案，再根据真实
  缺口扩展；保留必要验证、兼容与迁移，不把少写代码当作目标。
  / The Skill starts with the complete task responsibility, uses a direct
  solution, and expands when a concrete gap requires it. Necessary validation,
  compatibility, and migration remain part of the task; shorter code is not
  the goal.
- **Korean README — [#47](https://github.com/lennney/stop-that-shit/pull/47)**：加入韩语 README 和语言入口，保留已有社区讨论链接。
  / Adds a Korean README and language links, and retains community discussion
  links.
- 同步 package、插件清单、安装版本引用和 Hook 检查说明。
  / Aligns package and plugin versions, pinned installation references, and
  Hook review instructions.
- 发布清单和安装包补齐韩语 README 与旧中文兼容入口；安装文档补充验证前的
  依赖安装步骤，并说明会话状态与 Runtime 元数据的区别。
  / Includes the Korean README and legacy Chinese entry in release and package
  manifests. Documents development dependency setup and separates session
  state from metadata-only runtime events.

### 贡献与反馈 / Credits

- 感谢 @Kazaorus 在 [#44](https://github.com/lennney/stop-that-shit/issues/44)
  报告 `agents=N` 被静默截断至 8 和累计计数的问题，并发起、持续修订
  [#45](https://github.com/lennney/stop-that-shit/pull/45)。这是其在本仓库首个合并的 PR。
  / Thanks to @Kazaorus for reporting the silent cap and cumulative counting
  in #44, and for opening and revising #45, their first merged PR here.
- 感谢 @KumaCool 在 [#44 的讨论](https://github.com/lennney/stop-that-shit/issues/44#issuecomment-5594846899)
  中补充使用反馈，帮助明确限制应针对同时运行的子代理，而不是累计委派次数。
  / Thanks to @KumaCool for usage feedback that helped clarify concurrent
  capacity rather than cumulative delegation counts.
- 维护者 @lennney 完成 #45 的后续生命周期修复与审查，以及
  [LINUX DO 社区链接 #42](https://github.com/lennney/stop-that-shit/pull/42)、
  [Skill 与 README 更新 #46](https://github.com/lennney/stop-that-shit/pull/46)
  和[韩语 README #47](https://github.com/lennney/stop-that-shit/pull/47)。
  / Maintainer @lennney completed the lifecycle follow-up fixes and review
  in #45, community links in #42, Skill and README updates in #46, and the
  Korean README in #47.

### 升级说明 / Upgrade notes

- `agents=N` 表示预留并发容量，不是整个会话累计调用次数。新会话默认不限；
  旧会话的有效预算（包括 `0`）会保留。
  / `agents=N` limits reserved concurrent capacity, not cumulative calls.
  New sessions default to unlimited. Valid existing budgets, including `0`,
  are preserved.
- Schema 4 迁移保留无法确认结束的历史活动。有限额的 Guard 需要匹配的终结证据，
  或开启新宿主会话；升级与 SessionEnd 不会自动清空这些记录。
  / Schema 4 preserves unresolved legacy activity. Finite Guard requires
  matching terminal evidence or a new host session. Upgrading or receiving
  SessionEnd does not clear that history.
- 升级后按宿主要求重启或重新加载；Codex 用户应重新检查新增或变化的 Hook。
  / Restart or reload as required by the host. Codex users must review new or
  changed Hooks. See [INSTALL.md](INSTALL.md#review-the-packaged-hooks).
- 此版本不加入自动续跑或通用任务完成判定，也不宣称模型效果提升。
  / This version adds no automatic continuation or general task-completion
  judge. It makes no new model-effectiveness claim.

## 0.2.1 — 2026-09-03 (Scoped Guard false-allow fixes / 受限 Guard 误放行修复)

### 修复 / Fixed

- **Scoped file locks — #31**：`files=` 现在保留路径原始大小写，并在比较时统一
  绝对 allowlist 与宿主基于 `cwd` 报告的相对路径；Windows 盘符也不再被误当成
  指令分隔符。/ `files=` now preserves path casing, compares absolute
  allowlists with host paths normalized relative to `cwd`, and accepts Windows
  drive letters without treating their colon as a directive delimiter.
- **Scoped file locks — #33**：窄 `files=` 边界现在会要求批准无法证明只读性和目标路径的
  未知工具，而不是把它们当作 `WITHIN_CONTRACT` 放行；显式 `files=**` 仍保留
  change 模式下的宽边界。/ Narrow `files=` scopes now require approval for
  unknown tools whose mutability and target paths are unproven instead of
  allowing them as `WITHIN_CONTRACT`; explicit `files=**` remains unbounded.

- **Scoped file locks — #34**：显式空值 `files=` 现在表示不允许写入任何文件，不再静默
  退化成无边界 change；省略 `files` 仍保持原有行为。/ An explicit empty
  `files=` value now allows no file writes instead of silently degrading to an
  unbounded change contract; omitting `files` preserves the existing behavior.
- **Scoped file locks — #35**：在比较 `files=` 边界前规范化 `.`、`..` 和重复路径
  分隔符，阻止写入通过 dot segment 逃出声明的 wildcard 范围，同时保留范围内
  的等价路径。/ Normalizes dot segments and repeated separators before
  comparing `files=` boundaries, preventing writes from escaping a declared
  wildcard scope while preserving equivalent in-scope paths.
- **Windows path matching — #36**：Windows 风格的 `files=` 边界现在按平台语义忽略
  路径大小写，同时保留 POSIX 路径的大小写敏感比较。/ Windows-style
  `files=` boundaries now compare path casing using Windows semantics while
  POSIX paths remain case-sensitive.

## 0.2.0 — 2026-09-01 (Stop That Shit Slop / 别再废话)

> **从多做一步，到多说一句。** Stop That Shit Slop 把任务边界判断带到提案和
> 决策文字：判断一句话该删、该收紧、该移动，还是留下。
>
> **From one extra action to one extra sentence.** Stop That Shit Slop applies
> task-boundary judgment to proposals and decision-facing writing: drop,
> calibrate, relocate, or keep each sentence.

### 新增 / New

- **独立 STSS Skill**：增加 `rewrite` 与 `audit` 两种模式，处理没有决策
  消费者的免责声明、多层 hedging、自我辩护、负向范围和空洞提案话术。
  / Adds a standalone STSS Skill with `rewrite` and `audit` modes for
  disclaimers without a decision consumer, hedge stacks, self-defense,
  negative scope, and hollow proposal language.
- **Claim-preserving method**：使用 Claim Ledger、Sentence Consumer Test 和
  Claim Diff，核对原文中的事实、数字、责任主体、证据强度和因果关系。
  / Uses a Claim Ledger, Sentence Consumer Test, and Claim Diff to check the
  supplied facts, numbers, actors, evidence strength, and causal relationships.
- **离线验收**：增加六组 Good/Bad CaseBundle、十二个合成 fixture 和对应的
  固定离线响应回归。/ Adds six Good/Bad CaseBundle families, twelve synthetic
  fixtures, and matching fixed offline-response regressions.
- **分发与文档**：完整插件可发现两个 Skill；Pi package 注册 STSS；同一源码
  目录也支持单独安装 STSS。中英文 README 改为“别再造史，也别再废话”的
  双 Skill 结构。/ Makes both Skills discoverable from the full plugin,
  registers STSS in the Pi package, and supports standalone STSS installation
  from the same source directory. The Chinese and English READMEs now present
  the two-Skill product.
- **显式更新检查**：`sts doctor --check-update` 在用户调用时查询 GitHub
  Release，返回 `installed`、`latest` 和 `releaseUrl`；STSS 的单独安装继续由
  宿主或 Skill Installer 更新。/ `sts doctor --check-update` queries GitHub
  Releases when invoked and returns `installed`, `latest`, and `releaseUrl`;
  the host or Skill Installer manages standalone STSS updates.

## 0.1.1 — 2026-09-01 (Evaluation and boundary refinements / 评估与边界收敛)

> **在 0.1.0 的四套宿主基础上加入 Pi，并把评估证据拆开。** 0.1.1
> 增加 Pi 原生 Extension，同时补齐 routing、Hook decision、task
> acceptance 和 host effect 的独立观测边界。
>
> **Adds Pi to the 0.1.0 host set and separates evaluation evidence.**
> Version 0.1.1 adds the native Pi Extension and keeps routing, Hook
> decisions, task acceptance, and host effects as separate observations.

### 新增 / New

- **Pi Adapter**：支持 `@earendil-works/pi-coding-agent` `0.84.4`，复用共享
  controller、Skill 和 metadata-only Runtime；文档化的 `subagent` 形式在
  父工具调用处做原子预算控制，不宣称跨进程继承契约。
  / Adds the Pi Adapter for `@earendil-works/pi-coding-agent` `0.84.4`,
  reusing the shared controller, Skill, and metadata-only Runtime. Documented
  `subagent` forms are budgeted atomically at the parent call; cross-process
  contract inheritance is not claimed.
- **Paired evaluation vNext**：加入不可变 Skill/CaseBundle digest；将 22 个
  implicit-routing case 拆为 required、optional、irrelevant 三类，并单独验收
  行为；三单元 host integration smoke 覆盖 mode deny、file-lock deny 和 allow。
  默认成对矩阵为 16 cases × 3 arms × 3 runs = 144 个 session，默认仍只生成
  计划。
  / Adds immutable Skill and CaseBundle digests. The 22 implicit-routing cases
  separate required, optional, and irrelevant routing from behavior acceptance.
  A three-cell host integration smoke covers mode deny, file-lock deny, and
  allow. The default paired matrix is 16 cases × 3 arms × 3 runs = 144 sessions
  and remains dry-run by default.
- **发布与验证边界**：保留 Good Case、基础设施错误、Hook decision 与
  `hostEffect` 的分离，不把 deny 返回或离线 plan 包装成宿主阻断或模型效果
  结论。
  / Keeps Good Cases, infrastructure errors, Hook decisions, and
  `hostEffect` separate; a returned deny or offline plan is not presented as
  host enforcement or model-effect evidence.

## 0.1.0 — 2026-08-20 (First Multi-platform Release / 首个多平台版本)

> **同一个任务边界核心，现在有四套宿主适配：Codex、Claude Code、
> OpenCode 和 Hermes Agent CLI。** 0.1.0 是 Stop That Shit 的首个多平台
> 正式版本。
>
> **One task-boundary core now has four host adapters: Codex, Claude Code,
> OpenCode, and Hermes Agent CLI.** Version 0.1.0 is the first multi-platform
> release of Stop That Shit.

### 重点内容：你现在可以 / Highlights

- 从同一个 GitHub tag 获取四种宿主的安装入口，同时继续共用同一份
  Stop Ladder、合同状态、决策策略和只存元数据的 Runtime。
  / Install four host entrypoints from one GitHub tag while sharing the same
  Stop Ladder, contract state, decision policy, and metadata-only Runtime.
- 在 Codex 与 Claude Code 中使用原生 Plugin + Hook，在 OpenCode 中使用
  GitHub 安装的插件入口，在 Hermes Agent CLI 中使用原生 Plugin 回调。
  / Use native Plugin and Hook surfaces in Codex and Claude Code, a
  GitHub-installed plugin entrypoint in OpenCode, and native Plugin callbacks
  in Hermes Agent CLI.
- 保留每个宿主自己的安装、信任与重启流程；统一的是版本和核心，不是假装
  四个平台拥有完全相同的生命周期。
  / Keep each host's own installation, trust, and restart lifecycle; the shared
  contract is the version and core, not an artificial claim that every host
  behaves identically.

### 概览 / Overview

0.1.0 把 0.0.3 的 Codex 基础和三项后续适配收进同一个版本。Claude Code
Adapter 把 `SessionStart`、`UserPromptSubmit`、`PreToolUse` 和
`SubagentStart` 归一化为现有控制协议；OpenCode Adapter 使用文档化事件与
SDK，并提供 GitHub 安装入口；Hermes Agent CLI Adapter 通过
`pre_llm_call` 与 `pre_tool_call` 接入同一个 Guard。

Version 0.1.0 combines the Codex foundation from 0.0.3 with three later host
adapters in one release. Claude Code normalizes its lifecycle hooks into the
existing control protocol; OpenCode uses documented events and SDK calls with a
GitHub install entrypoint; Hermes Agent CLI connects `pre_llm_call` and
`pre_tool_call` to the same Guard.

The canonical distribution for this release is the GitHub tag and source
archive. npm publication remains disabled. Hermes Gateway users only need to
restart the corresponding process after plugin lifecycle changes; this release
does not claim coverage of every Hermes surface.

### 新增 / New

- **Claude Code Adapter**：增加本地 marketplace、共享 Skill、原生 Hook
  配置、Claude 工具分类、路径规范化与并发 delegation 预算。
  / Adds the local marketplace, shared Skill, native Hooks, Claude tool
  classification, path normalization, and process-safe delegation budgeting.
  ([#4](https://github.com/lennney/stop-that-shit/pull/4), @vzionv)
- **OpenCode Adapter**：增加文档化事件/SDK 接入、GitHub 安装入口、
  OpenCode 工具分类、执行拒绝记录，以及可用宿主存在时运行的安装后 smoke。
  / Adds documented event and SDK integration, GitHub installation, OpenCode
  tool classification, execution-denial records, and an installed-host smoke
  when the host is available.
  ([#6](https://github.com/lennney/stop-that-shit/pull/6), @HowcanoeWang)
- **Hermes Agent CLI Adapter**：增加原生 Plugin、独立运行时 bundle、
  Session/Task 状态对齐、原子批量 delegation 预算，以及控制操作零消耗语义。
  / Adds a native Plugin, self-contained runtime bundle, aligned Session/Task
  state, atomic batch delegation budgets, and zero-cost delegation controls.
  ([#17](https://github.com/lennney/stop-that-shit/pull/17), @KumaCool)
- **跨宿主发布元数据**：补齐中英文显示名与 Codex 服务条款字段，并保持
  四套宿主清单与同一个版本一致。
  / Completes bilingual display metadata and Codex terms metadata,
  and keeps all host manifests aligned to one version.

### 修复与验证 / Fixes and verification

- CI 在 Ubuntu 与 Windows、Node.js 18 与 22 上安装声明的开发依赖后运行
  测试、可执行案例与 release check。
  / CI verifies the declared development setup on Ubuntu and Windows with
  Node.js 18 and 22.
- HOL Plugin Scanner 与 plugin-scanner 已作为发布前检查运行；Hermes 测试
  fixture 不再产生误报。
  / HOL Plugin Scanner and plugin-scanner run as release gates, and Hermes test
  fixtures no longer trigger a false positive.
- release check 现在验证 Codex、Claude Code、Hermes 与 package 的版本一致，
  release builder 与 OpenCode package 都会排除 Python `__pycache__` 与
  `.pyc` 文件。
  / The release check now aligns Codex, Claude Code, Hermes, and package
  versions, while both release outputs exclude Python bytecode caches.
- Hermes 原生 Plugin 测试在 Windows 默认使用 `python`、其他平台使用
  `python3`，也允许通过 `PYTHON` 显式覆盖。
  / Hermes native-plugin tests use `python` on Windows, `python3` elsewhere,
  and allow an explicit `PYTHON` override.
- 增加 deliverable metadata 的 Bad/Good 成对案例；现有 Guard 仍不把返回的
  deny 推断成宿主最终没有执行动作。
  / Adds a paired deliverable-metadata case while preserving the rule that a
  returned deny is not evidence of final host effect.

### 安装与升级 / Install and upgrade

- 完整安装入口见 [INSTALL.md](INSTALL.md)，Agent 辅助安装边界见
  [INSTALL_FOR_AGENTS.md](INSTALL_FOR_AGENTS.md)。
  / See [INSTALL.md](INSTALL.md) for host setup and
  [INSTALL_FOR_AGENTS.md](INSTALL_FOR_AGENTS.md) for agent-assisted boundaries.
- 从早期版本升级后，按宿主要求重新加载或重启；Codex Hook 定义变化时必须
  重新检查并信任 `/hooks` 中的命令。
  / Reload or restart as required by the host. If Codex Hook definitions
  changed, inspect and trust the commands again in `/hooks`.
- 本版本不发布 npm package。OpenCode 的 package metadata 仅用于 GitHub
  安装路径。
  / This release does not publish an npm package; its package metadata supports
  the OpenCode GitHub installation path.

### 致谢 / Credits

- 感谢 @lennney：创建 Codex Adapter、共享 Guard/Skill、成对评估体系，并
  完成本次多平台版本集成。
  / Created the Codex adapter, shared Guard and Skill, paired evaluation system,
  and integrated this multi-platform release.
- 感谢 @vzionv：适配 Claude Code，贡献 Plugin、Hook、工具分类与并发预算。
  / Adapted Claude Code with its Plugin, Hooks, tool classification, and
  delegation budgeting. ([#4](https://github.com/lennney/stop-that-shit/pull/4))
- 感谢 @HowcanoeWang：适配 OpenCode，贡献文档化宿主接入、GitHub 安装与
  安装后 smoke。
  / Adapted OpenCode with documented host integration, GitHub installation, and
  installed-host smoke. ([#6](https://github.com/lennney/stop-that-shit/pull/6))
- 感谢 @KumaCool：适配 Hermes Agent CLI，贡献原生 Plugin、运行时 bundle
  与 delegation 语义。
  / Adapted Hermes Agent CLI with the native Plugin, runtime bundle, and
  delegation semantics. ([#17](https://github.com/lennney/stop-that-shit/pull/17))

## 0.0.3 — 2026-08-14 (Technical Preview 3)

- Fixed CI setup so every matrix job installs the declared development
  dependencies before running verification.
- Fixed paired-eval path handling for simulated Windows fixtures and made the
  generated-schema check stable across LF and CRLF worktrees.
- Sharpened the public description around small-task overengineering and added
  repository status badges.
- Documented the maintainer's SHA-256 observation as anecdotal evidence, kept
  the live null result public, and retained `hostEffect: unobserved` in Runtime
  claims.
- No enforcement families were added in this patch preview.

## 0.0.2 — 2026-08-14 (Technical Preview 2)

- Added `OFF`, `OBSERVING`, and `ARMED` control states with distinct context and
  permission-deny response outcomes; host effect is never inferred.
- Added local metadata-only `RuntimeEvent v1` logs, append-only annotations, and
  `doctor`, `runtime`, `explain`, and `label` inspection commands.
- Migrated paired fixtures to validated `CaseBundle v1` directories and added
  isolated runtime counts, infrastructure exclusions, paired outcome summaries,
  external case directories, and offline rescore.
- Added live-eval preflight for exact installed runtime-tree parity, pinned model
  and reasoning metadata, explicit infrastructure exclusions, and a required
  `--max-cells` paid-session cap after a stale-cache diagnostic run.
- Added JSON Schema validation with a generated standalone validator; Ajv remains
  a development dependency and is not loaded by the plugin runtime.

## 0.0.1 — pre-release

- Added the four-question Stop Ladder.
- Added Codex guards for non-mutating modes, optional file locks, dependency
  approval, subagent budgets, and high-confidence hash authority.
- Reduced the default Guard to `UserPromptSubmit` and `PreToolUse`; the shared
  Skill remains usable when Hooks are disabled.
- Added a public three-arm Codex evaluation harness with synthetic Good/Bad
  fixtures. Live run artifacts remain local and ignored.
- Added a small `ControlEvent v1` seam with Codex as the only Adapter.
- Added paired Bad/Good cases and local release validation.
- Removed experimental scope discovery, new-file and compatibility guessing,
  repeat fingerprints, action ledgers, and compaction checkpoints after live
  testing showed that the product was becoming more complex than its promise.