github-actions · Oct 19, 2026
diff --git a/.changeset/config-entry-menu.md b/.changeset/config-entry-menu.md
diff --git a/.changeset/cross-platform-robustness.md b/.changeset/cross-platform-robustness.md
diff --git a/.changeset/embedding-model-selfhost.md b/.changeset/embedding-model-selfhost.md
diff --git a/.changeset/first-party-user-agent.md b/.changeset/first-party-user-agent.md
diff --git a/.changeset/fix-stream-error-retries.md b/.changeset/fix-stream-error-retries.md
diff --git a/.changeset/mcp-uninstall-plugin-ownership.md b/.changeset/mcp-uninstall-plugin-ownership.md
diff --git a/.changeset/plan-mode-reminder-trigger.md b/.changeset/plan-mode-reminder-trigger.md
diff --git a/.changeset/runtime-hardening.md b/.changeset/runtime-hardening.md
diff --git a/.changeset/runtime-robustness-fixes.md b/.changeset/runtime-robustness-fixes.md
diff --git a/.changeset/session-header-injection.md b/.changeset/session-header-injection.md
diff --git a/.changeset/tips-offer-placement.md b/.changeset/tips-offer-placement.md
diff --git a/.changeset/todo-reconcile-before-answer.md b/.changeset/todo-reconcile-before-answer.md
diff --git a/.changeset/turn-queue-and-todo-reconcile.md b/.changeset/turn-queue-and-todo-reconcile.md
diff --git a/.changeset/wasm-embedding-engine.md b/.changeset/wasm-embedding-engine.md
diff --git a/apps/scream-code/CHANGELOG.md b/apps/scream-code/CHANGELOG.md
@@ -0,0 +1,36 @@
+# scream-code
+
+## 0.18.9
+
+### Patch Changes
+
+- [`ca795a1`](https://github.com/LIUTod/scream-code/commit/ca795a1a3e6dea6a1928e71d8bb4781ae85fa471) - Give `/config` an entry menu: a bare `/config` (or `/login`) now asks which configuration flow to enter — the shortcut provider directory, the custom DIY setup, or image generation — instead of jumping straight into the catalog. `/config diy` and `/config image` keep their direct paths, and the first-run nudge opens the same menu.
+
+- [`49a3542`](https://github.com/LIUTod/scream-code/commit/49a3542835bbdd4a6043a346b9c1ad45369e698c) - Make the agent behave consistently on macOS, Linux and Windows. The bundled ripgrep binary is now picked by probing the host libc instead of inferring it from the CPU architecture, Windows falls back to PowerShell when Git Bash is absent, and command execution resolves `.cmd`/`.bat` shims through `PATHEXT` rather than relying on a shell. Timed-out hooks and update steps terminate the whole process tree on Windows. Path safety checks understand Windows drive letters and UNC paths, the external editor no longer assumes a POSIX shell, and installing the package no longer hard-fails on platforms without a prebuilt local-embedding binary. State files are located through the shared home resolver and written atomically.
+
+- [`5290a2a`](https://github.com/LIUTod/scream-code/commit/5290a2a9d6ba94b51587fb4ad1478b335ce6924b) - Fix the embedding-model setup card reappearing on every startup on installs without a pre-existing model cache. The pinned model archive is now staged by the app itself from a first-party GitHub release with HTTP status validation and an on-disk sha256 check, instead of relying on the third-party model mirror that stopped serving anonymous downloads — its downloader never checks the response status, so a 403 error page used to be silently written into the staged archive and every subsequent extract failed. Lint ratchet baseline lowered to the new low.
+
+- [`965f7df`](https://github.com/LIUTod/scream-code/commit/965f7df148bfe9c0d39bcb2756b22ebdd8f4df9f) - Send the product user agent with requests to third-party model endpoints. The identity used to be attached only to providers configured with a session header, so most OpenAI-compatible and Anthropic endpoints saw the SDK's own library user agent instead of the product's. Device fingerprint headers remain host-scoped and are not forwarded to third-party endpoints.
+
+- [#18](https://github.com/LIUTod/scream-code/pull/18) [`2fda5b7`](https://github.com/LIUTod/scream-code/commit/2fda5b7ce50f060d09875a54f35f26e5fa7d8c58) - Recover explicit status codes from OpenAI-compatible streaming errors and classify status-less provider messages so transient failures enter the existing retry policy instead of immediately failing agent tasks.
+
+- [`0baa2ce`](https://github.com/LIUTod/scream-code/commit/0baa2ce006a5a611a2c16b1e02f163369a99108e) - Make /mcp uninstall honest for plugin-provided servers: the management panel now tags servers contributed by a plugin, refuses to "uninstall" them with a pointer to /plugin (that removal used to be undone on the next startup by the plugin hot-apply pass), and reports a real error instead of a fake success when a removed server is still listed.
+
+- [`49a3542`](https://github.com/LIUTod/scream-code/commit/49a3542835bbdd4a6043a346b9c1ad45369e698c) - Stop reading injected reminders as a fresh user message when deciding whether to repeat the plan-mode reminder: only a real user prompt resets the cadence to the full reminder, so the periodic refresh threshold holds instead of re-emitting the long reminder on every step.
+
+- [`71379e3`](https://github.com/LIUTod/scream-code/commit/71379e35d8d184f1481312d97a5d5a674fb52c16) - Harden the runtime and close two discoverability gaps:
+
+  - Dependency install scripts are denied by default (`onlyBuiltDependencies: []`), so a future dependency cannot silently run code at install time — the failure mode that once let a GPU download in an optional dependency break the vector feature.
+  - Concurrent writes to the same file are serialized (per-path queue): parallel edits from one tool batch or from sibling sub-agents can no longer lose an update, while different files still write in parallel.
+  - An abnormal exit is reported once on the next launch, pointing at `/sessions` to recover; clean exits and terminal hangups stay silent.
+  - New `/hotkeys` (keyboard shortcut reference) and `/copy` (copy the last reply to the clipboard) commands.
+
+- [`dbbf1d6`](https://github.com/LIUTod/scream-code/commit/dbbf1d6f59f0123dd263f69c2583e8bd534ca67a) - Support an optional per-provider session header that carries the stable conversation id, stamp known catalog entries when connecting, and surface an actionable config hint when a gateway reports a missing session header.
+
+- [`4d9c653`](https://github.com/LIUTod/scream-code/commit/4d9c6530bf9d10505e7649082bf7dd80912faf59) - Add a weighted offer tip to the empty-session tips carousel above the editor: the placement tip carries a clickable domain link (OSC 8) and is opened with Ctrl+F, rotations favor it at an 80% probability, and Ctrl+B still hides all tips.
+
+- [`49a3542`](https://github.com/LIUTod/scream-code/commit/49a3542835bbdd4a6043a346b9c1ad45369e698c) - Stop appending a todo reconciliation round after the final answer: the reminder is now injected before the answer is written, inside the work the turn is already doing. The TodoList suggestion now waits for the third step so short two-step tasks are no longer nudged, and the periodic todo reminder fires half as often and only while the list still has unfinished items. Goal turns no longer continue after the answer just because TodoList was not updated this turn, and a turn counts as having touched the list only when the TodoList call actually succeeded.
+
+- [`e4b54e1`](https://github.com/LIUTod/scream-code/commit/e4b54e1e13c05551755e92d8ab6798851d989933) - Buffer prompts that arrive while a turn is active so queued user input joins the steer path instead of failing as busy, and flush leftover steers at the start of the next turn.
+
+- [`641f335`](https://github.com/LIUTod/scream-code/commit/641f3353706fb03a7eeadc8860fb5b27126042f8) - Move the local embedding engine off native binaries onto a self-contained WebAssembly pipeline. Installing no longer pulls a compiler toolchain or an unused GPU runtime on Linux (and can no longer lose the whole vector feature when that download fails), the dependency tree drops its deprecated packages, and the model download now reports byte progress with stall and overall timeout guards plus verify/load phases. A cache is only considered installed when the weights and both tokenizer files are present, so a half-restored cache repairs itself instead of failing at load time. Vectors are bit-compatible with the previous engine.
diff --git a/apps/scream-code/package.json b/apps/scream-code/package.json
@@ -1,6 +1,6 @@
 {
   "name": "scream-code",
-  "version": "0.18.8",
+  "version": "0.18.9",
   "description": "A terminal-native AI agent for builders",
   "license": "MIT",
   "author": "ScreamCli",

diff --git a/packages/agent-core/CHANGELOG.md b/packages/agent-core/CHANGELOG.md
@@ -0,0 +1,13 @@
+# @scream-code/agent-core
+
+## 0.18.9
+
+### Patch Changes
+
+- [`6867cde`](https://github.com/LIUTod/scream-code/commit/6867cde2fb1dd7b8951d12a3f4d9316a4aad3b8a) - Fix three runtime robustness gaps: the per-step tool-call block index no longer leaks one Map entry per step; approval timeouts clear their rejection timer when the response arrives first; and a provider-wrapped context-overflow error now fails fast instead of burning the full retry budget (compaction handles it). Session deletion no longer reports success when the directory could not be removed (new `session.delete_failed` error code), and session index/state writes all go through the shared atomic write. Tool name sets are centralized in one catalog module.
+
+- Updated dependencies []:
+  - @scream-code/jian@0.18.9
+  - @scream-code/knowledge@0.18.9
+  - @scream-code/ltod@0.18.9
+  - @scream-code/memory@0.18.9
diff --git a/packages/agent-core/package.json b/packages/agent-core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@scream-code/agent-core",
-  "version": "0.18.8",
+  "version": "0.18.9",
   "private": true,
   "description": "The unified agent engine for Scream",
   "license": "MIT",

diff --git a/packages/config/CHANGELOG.md b/packages/config/CHANGELOG.md
@@ -0,0 +1,3 @@
+# @scream-code/config
+
+## 0.18.9
diff --git a/packages/config/package.json b/packages/config/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@scream-code/config",
-  "version": "0.18.8",
+  "version": "0.18.9",
   "private": true,
   "description": "Platform configuration and model management for Scream Code",
   "license": "MIT",

diff --git a/packages/evals/CHANGELOG.md b/packages/evals/CHANGELOG.md
@@ -0,0 +1,3 @@
+# @scream-code/evals
+
+## 0.18.9
diff --git a/packages/evals/package.json b/packages/evals/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@scream-code/evals",
-  "version": "0.18.8",
+  "version": "0.18.9",
   "private": true,
   "type": "module",
   "scripts": {

diff --git a/packages/jian/CHANGELOG.md b/packages/jian/CHANGELOG.md
@@ -0,0 +1,3 @@
+# @scream-code/jian
+
+## 0.18.9
diff --git a/packages/jian/package.json b/packages/jian/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@scream-code/jian",
-  "version": "0.18.8",
+  "version": "0.18.9",
   "private": true,
   "description": "Execution environment abstraction for AI agent applications",
   "license": "MIT",

diff --git a/packages/knowledge/CHANGELOG.md b/packages/knowledge/CHANGELOG.md
@@ -0,0 +1,8 @@
+# @scream-code/knowledge
+
+## 0.18.9
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @scream-code/memory@0.18.9
diff --git a/packages/knowledge/package.json b/packages/knowledge/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@scream-code/knowledge",
-  "version": "0.18.8",
+  "version": "0.18.9",
   "private": true,
   "description": "Local knowledge base library for scream-code agent retrieval",
   "license": "MIT",

diff --git a/packages/ltod/CHANGELOG.md b/packages/ltod/CHANGELOG.md
@@ -0,0 +1,3 @@
+# @scream-code/ltod
+
+## 0.18.9
diff --git a/packages/ltod/package.json b/packages/ltod/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@scream-code/ltod",
-  "version": "0.18.8",
+  "version": "0.18.9",
   "private": true,
   "description": "The LLM abstraction layer for modern AI agent applications",
   "license": "MIT",

diff --git a/packages/memory/CHANGELOG.md b/packages/memory/CHANGELOG.md
@@ -0,0 +1,3 @@
+# @scream-code/memory
+
+## 0.18.9
diff --git a/packages/memory/package.json b/packages/memory/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@scream-code/memory",
-  "version": "0.18.8",
+  "version": "0.18.9",
   "private": true,
   "description": "Persistent memory memo store for cross-session knowledge sharing",
   "license": "MIT",

diff --git a/packages/node-sdk/CHANGELOG.md b/packages/node-sdk/CHANGELOG.md
@@ -0,0 +1,3 @@
+# @scream-code/scream-code-sdk
+
+## 0.18.9
diff --git a/packages/node-sdk/package.json b/packages/node-sdk/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@scream-code/scream-code-sdk",
-  "version": "0.18.8",
+  "version": "0.18.9",
   "private": true,
   "description": "TypeScript SDK for the Scream Code Agent",
   "license": "MIT",