Commit Graph

  • 5c9dde8061 feat(tui): show relative last-activity age in /resume rows anandh8x 2026-09-12 18:27:31 +05:30
  • f848ead1f3 feat(tui): show project, model, and size under /resume rows anandh8x 2026-09-12 18:22:42 +05:30
  • dbbc0bbd0f feat(tui): support an optional detail line on picker rows anandh8x 2026-09-12 18:21:31 +05:30
  • c1937dfac7 feat(acp): add standard session list and resume (#914) KRATOS 2026-09-12 18:18:39 +05:30
  • 90014210d2 fix(daemon): publish status files atomically (#949) KRATOS 2026-09-12 18:18:12 +05:30
  • 227fac9ef6 fix(acp): commit a completed turn as one store batch fix/acp-session-list KRATOS 2026-09-10 22:01:35 +05:30
  • 0b3ca3599c fix(daemon): address status publication review fix/daemon-status-atomic-publication KRATOS 2026-09-09 07:35:33 +05:30
  • 6e08e9c259 fix(daemon): roll back redirected socket binds KRATOS 2026-09-01 22:05:29 +05:30
  • 67d1e37580 fix(daemon): retain trusted runtime root for lifecycle KRATOS 2026-08-31 19:45:06 +05:30
  • b239788334 fix(daemon): preserve Windows status security KRATOS 2026-08-31 09:33:47 +05:30
  • 230a129630 fix(daemon): bind status ownership through cleanup KRATOS 2026-08-30 22:36:12 +05:30
  • 024ba0ee89 fix(daemon): secure runtime lifecycle boundaries KRATOS 2026-08-29 23:54:36 +05:30
  • 8ff542bb8f fix(observability): revalidate committed crash path KRATOS 2026-08-28 17:56:38 +05:30
  • 3b81dc0f1d fix(observability): preserve committed crash reports KRATOS 2026-08-28 17:17:53 +05:30
  • 8400f9086e fix(observability): atomically publish crash reports KRATOS 2026-08-28 10:04:55 +05:30
  • 48610b4aa5 fix(security): bind crash report creation to private root KRATOS 2026-08-28 09:52:40 +05:30
  • e0168d4a72 fix(observability): harden existing crash directories KRATOS 2026-08-25 07:37:25 +05:30
  • 7758ec5934 fix(daemon): use current NT directory object KRATOS 2026-08-25 07:18:49 +05:30
  • 8c23620b88 fix(daemon): open Windows security handle relatively KRATOS 2026-08-25 07:08:57 +05:30
  • 4df239b32d fix(daemon): migrate owned runtime directories safely KRATOS 2026-08-25 06:58:33 +05:30
  • ab02818d93 fix(daemon): accept current token directory owner KRATOS 2026-08-24 20:32:45 +05:30
  • d5c6f85c56 fix(daemon): validate status directory access KRATOS 2026-08-24 20:15:35 +05:30
  • 548765ef4f fix(daemon): bind status publication to directory handle KRATOS 2026-08-24 19:58:56 +05:30
  • ada465979d fix(daemon): publish status files atomically KRATOS 2026-08-24 19:14:36 +05:30
  • 9515f381ff fix(acp): preserve replay and restore identity KRATOS 2026-09-09 09:40:16 +05:30
  • fb8f1e00b7 fix(acp): restore session lifecycle boundaries KRATOS 2026-09-09 08:14:31 +05:30
  • c0bf29a8c4 fix(acp): preserve session restore invariants KRATOS 2026-09-07 13:09:21 +05:30
  • 718ffc899a test(acp): bound replay notification waits KRATOS 2026-09-02 12:30:18 +05:30
  • 386aa2585c fix(acp): persist tool activity for session replay KRATOS 2026-08-28 17:35:37 +05:30
  • 07bb5820fe fix(acp): resume the conversation a session became, and fail closed when it cannot KRATOS 2026-08-25 20:53:09 +05:30
  • 62672974f6 fix(acp): activation requires an absolute cwd in the REQUEST, not just the record KRATOS 2026-08-24 13:31:09 +05:30
  • 3447fd773e test(acp): the resume guard is asserted through both activating methods KRATOS 2026-08-20 21:09:13 +05:30
  • 9e6b732e2d fix(acp): a relative persisted workspace is omitted, not rebased KRATOS 2026-08-20 20:53:20 +05:30
  • d3406f4c3b test(acp): assert the relative entry is retained, not merely absolute KRATOS 2026-08-19 19:16:37 +05:30
  • 76e2e283c4 fix(acp): resolve every listed workspace, not only when a filter was supplied KRATOS 2026-08-19 18:40:14 +05:30
  • 7b906fca7b fix(acp): test the alias guard where the bug lives, and stop listing unusable sessions KRATOS 2026-08-18 12:39:16 +05:30
  • c41104dd67 fix(acp): compare workspaces by filesystem identity, not by spelling KRATOS 2026-08-18 00:36:53 +05:30
  • 5a3ee23e06 fix(acp): bind sessions to persisted workspaces KRATOS 2026-08-16 22:43:01 +05:30
  • 17cde6452a fix(acp): preserve notification wire order KRATOS 2026-08-16 22:40:58 +05:30
  • 12f0779424 feat(acp): add standard session list and resume KRATOS 2026-08-16 22:32:09 +05:30
  • e1bd9ca221 fix(cli): match the write collision rule to the disabled-server policy Vasanthdev2004 2026-08-29 14:32:40 +05:30
  • 7e1f9abd97 fix(tui): give manager rows an identity actions can address Vasanthdev2004 2026-08-29 14:26:40 +05:30
  • bc9ec6080b fix(tui): keep the credential tails past the candidate bound Vasanthdev2004 2026-08-29 14:21:53 +05:30
  • 29193ecd16 fix(tui): bound the secret tail-repair by the text, not the credential Vasanthdev2004 2026-08-28 16:12:50 +05:30
  • ce75a4d8d4 fix(tui): age MCP failures on the active server set, not a colliding alias Vasanthdev2004 2026-08-28 16:12:50 +05:30
  • 155e4df9d3 fix(tui): tell an already-open MCP manager when background startup completes Vasanthdev2004 2026-08-27 22:16:11 +05:30
  • c022b63832 fix(mcp): check name uniqueness on the whole config, before the startup split Vasanthdev2004 2026-08-27 15:19:06 +05:30
  • e0492071af fix(mcp): bind a failure to one server and to the credentials it was observed with Vasanthdev2004 2026-08-27 15:14:19 +05:30
  • 12dc76da0f test(cli): configure a server so the skipped-server path is actually reached Vasanthdev2004 2026-08-27 14:23:54 +05:30
  • f77633cd68 fix(tui): keep the key with the value long enough to classify it Vasanthdev2004 2026-08-27 13:48:33 +05:30
  • 86eade98a8 fix(tui): close the credential boundary the MCP failure panel leaves open Vasanthdev2004 2026-08-24 19:11:36 +05:30
  • 616a2ba73e fix(tui): stop the bound manufacturing a leak, and treat a path as credential material Vasanthdev2004 2026-08-22 13:40:08 +05:30
  • db67617e90 test(tui): prove both bounds through BuildMCPViewState, not the helper Vasanthdev2004 2026-08-21 12:12:35 +05:30
  • 6797b390cc fix(tui): make the failure budget fixed, and match escaped credential forms Vasanthdev2004 2026-08-21 12:07:38 +05:30
  • a45b445821 fix(tui): redact header and endpoint credentials, bound the raw failure, and stop reusing stale startup failures Vasanthdev2004 2026-08-20 17:13:42 +05:30
  • edadf5597f fix(tui): redact credentials split by default-ignorable marks, and stored tokens of any length Vasanthdev2004 2026-08-19 13:18:33 +05:30
  • cc050df243 fix(tui): close three more ways the failure reason leaked a secret Vasanthdev2004 2026-08-12 18:25:25 +05:30
  • 64cd7e664f fix(tui): close four ways a secret reached the /mcp failure reason Vasanthdev2004 2026-08-12 17:39:32 +05:30
  • 8408096b70 fix(tui): redact configured MCP credentials out of a failed server's error Vasanthdev2004 2026-08-11 16:30:07 +05:30
  • 0d4eb20c39 fix(tui): show the MCP failure reason in the bare /mcp overlay Vasanthdev2004 2026-08-09 19:36:22 +05:30
  • c15c864226 fix(tui): bound the MCP failure reason before sanitizing it Vasanthdev2004 2026-08-05 15:26:29 +05:30
  • 88fbe5691f fix(tui): sanitize the MCP failure reason before it reaches the terminal Vasanthdev2004 2026-08-05 15:15:08 +05:30
  • bded0a53ff fix(tui): show MCP servers that failed to start in /mcp (#825) Vasanthdev2004andClaude Opus 5 2026-07-30 16:14:14 +05:30
  • 69900830a6 fix(agent): authenticate refusal provenance and separate completion from abort Vasanthdev2004 2026-08-27 15:30:47 +05:30
  • 52fb2622ba fix(agent): close out advertised tool calls by what actually happened Vasanthdev2004 2026-08-26 11:50:14 +05:30
  • 1ea3dd66f3 fix(agent): type the refusal identity and carry the halt to terminal status Vasanthdev2004 2026-08-24 18:10:28 +05:30
  • 12ebeb1ed3 fix(agent): give a marker-only refusal the same identity the guard keys on Vasanthdev2004 2026-08-22 13:52:11 +05:30
  • 5b8d15d1e3 fix(tools): give capture_artifact's configuration refusals the same provenance as the gates Vasanthdev2004 2026-08-21 11:24:56 +05:30
  • c32c66ddfb fix(agent): classify a policy refusal from provenance, never from tool output Vasanthdev2004 2026-08-20 15:51:07 +05:30
  • 8eeb739f75 test(agent): drive the uncategorized refusal paths through Run Vasanthdev2004 2026-08-12 16:33:35 +05:30
  • 20de29b19c fix(agent): do not classify successful tool output as a policy refusal Vasanthdev2004 2026-08-12 16:29:34 +05:30
  • d266534576 fix(agent): stop the halt answer claiming a pattern the counters do not track Vasanthdev2004 2026-08-11 19:21:15 +05:30
  • 8ca25510e1 fix(agent): count uncategorized policy refusals in the halt guard Vasanthdev2004 2026-08-11 16:37:18 +05:30
  • 9cdbf625b5 fix(agent): count denials as failures and report the bound that tripped Vasanthdev2004 2026-08-04 19:10:34 +05:30
  • d4e89ce5d3 fix(agent): stop a denied tool looping past the repeated-failure halt Vasanthdev2004 2026-08-04 14:39:55 +05:30
  • 4d3f5dc8cd fix(sandbox): clone is repository creation too, and the dual-role tests stay on test-owned roots Vasanthdev2004 2026-09-12 12:04:32 +05:30
  • 72515e0c7f fix(sandbox): a lease is only a lease while its name still resolves to it Vasanthdev2004 2026-09-12 11:58:51 +05:30
  • 32c3527794 fix(sandbox): keep framework builds under the network gate Vasanthdev2004 2026-09-12 11:47:34 +05:30
  • e54e5af6d7 fix(tools): separate unverified patch writes KRATOS 2026-09-12 11:22:34 +05:30
  • eb3bbb2f12 fix(sandbox): drop the Windows denyRead trade notice now that denyRead is refused Vasanthdev2004 2026-09-12 10:23:34 +05:30
  • 8bebff712c Merge origin/main into fix/windows-setup-marker-runtime-root Vasanthdev2004 2026-09-12 10:09:29 +05:30
  • 76d607ecdc Merge origin/main into feat/windows-sandbox-identity Vasanthdev2004 2026-09-12 10:03:10 +05:30
  • 9e09d0a7e6 Merge remote-tracking branch 'origin/main' into fix/windows-restricted-sid-invariant Vasanthdev2004 2026-09-12 10:15:56 +05:30
  • 677b3f0c4f fix(sandbox): a flagged invocation classifies like its unflagged self at any arity KRATOS 2026-08-24 14:28:31 +05:30
  • b75e7cb2b7 fix(tui,sandbox): cancel the offer on a streaming partial, and derive the network fallback from the analyzer Vasanthdev2004 2026-08-21 11:42:34 +05:30
  • 1cc95f39f3 fix(sandbox,tui,cli): close the unparseable network gap and the deferred-input arm Vasanthdev2004 2026-08-20 16:12:41 +05:30
  • 714ce649bc fix(tui): cancel the full-auto offer when the terminal loses focus Vasanthdev2004 2026-08-19 13:29:19 +05:30
  • 54613e4ff9 fix(sandbox,cli,tui): keep serving commands gated, and accept the canonical mode Vasanthdev2004 2026-08-11 16:58:06 +05:30
  • 30459e167b test(tui): move the plan-mode guard onto advancePermissionMode Vasanthdev2004 2026-08-10 09:33:51 +05:30
  • 874db9ff34 fix: make the full-auto rename reach the values that travel as data Vasanthdev2004 2026-08-09 18:01:47 +05:30
  • f608752821 fix: keep the old permission-mode constant names as deprecated aliases Vasanthdev2004 2026-08-08 23:54:05 +05:30
  • dbdd281d59 refactor: rename the unsafe permission mode to full-auto Vasanthdev2004 2026-08-08 23:37:37 +05:30
  • eda9f3051c fix(sandbox): stop classifying local dev servers as network egress Vasanthdev2004 2026-08-08 23:11:36 +05:30
  • 1bcb2bfadd feat(tui): put unsafe mode in the shift+tab cycle behind a confirm key Vasanthdev2004 2026-08-08 22:45:21 +05:30
  • c4fff2b1de test(sandbox): give the cross-platform anchor tests native paths fix/windows-acl-reparse-intermediate Vasanthdev2004 2026-09-09 22:18:09 +05:30
  • 38c1e333b1 test(sandbox): check the plan anchoring on every platform, out-of-root case included Vasanthdev2004 2026-09-09 21:55:31 +05:30
  • 28360a2dff fix(sandbox): anchor only the carveouts that are under the root, and put the DACL back Vasanthdev2004 2026-09-09 21:54:07 +05:30
  • ad78725568 fix(sandbox): reject the reparse ancestor itself before materializing Vasanthdev2004 2026-09-09 15:21:23 +05:30
  • a9aa37e267 fix(sandbox): keep a derived ACL target inside the write root it came from Vasanthdev2004 2026-09-09 15:18:43 +05:30
  • 2b08339aee fix(tools): finalize structured diff evidence KRATOS 2026-09-07 12:17:28 +05:30