crewhaus 0.7.0

What's new in 0.7.0

Tools a harness can run without spending a token. A CrewHaus harness could
call 22 builtin tools; it can now call 549. They read chains and ledgers, drive
git and package managers, gate a page before it publishes, operate a fleet, and
answer the hundreds of small questions a run used to spend a model call on —
almost none of them makes one, and a spec turns them on a capability group at a
time rather than a name at a time. Two of the fixes below are worth reading even if
you upgrade nothing：an SSRF classifier that compared address text, found by
auditing all ten copies of it, and a daemon status page that had been binding
the wildcard rather than loopback.

Added

• Fifty-seven new @crewhaus/tool-* packages (#453, #454, #458, #459,
#462, #463, #465, #466, #467, #469, #470, #471, #472). Each is an ordinary
builtin — it takes a typed input, does the work in-process, and returns a
result — so the work it does costs no tokens and cannot drift between runs.
Two of the 549 are the exception and say so in their own descriptions:
ImageGenerate calls a remote image model and WebSearch calls a paid
search API. Every other one is local work. Broadly:

• Pure computation, no I/O at all. Text, structured data (JSON, YAML,
TOML, CSV, XML), encoding and hashing, dates and schedules, maths and
exact money, schema validation, control flow, and tabular intake:
tool-text, tool-data, tool-encode, tool-datetime, tool-math,
tool-schema, tool-flow, tool-table.
• The working tree and the toolchain. Files and archives, processes,
git, GitHub and GitLab, SQLite, documents, HTML, packaging and lockfiles,
code intelligence, and the gates you run before a change lands —
tool-fsx, tool-proc, tool-git, tool-codehost, tool-sql,
tool-docs, tool-html, tool-pkg, tool-code, tool-verify,
tool-changeset, tool-buildperf, tool-supplychain, tool-registry,
tool-containers, tool-distribution.
• What a harness remembers and what it reports. Durable state, secrets
handling, messaging, observability and cost：tool-state, tool-secure,
tool-secrets, tool-notify, tool-obs, tool-media.
• Money and chains, reading only. ABI encoding and EIP-712 digests,
live EVM reads, token and DeFi queries, a hash-chained local ledger,
e-invoices, payment files and counterparty checks：tool-onchain, …

Full release notes »