Commit Graph

Select branches

Hide Pull Requests

add-opengateway-hy3-zero

add-stall-warning-hint

aimlapi-preset-fixes

anandh/stream-b-pr2-prefix-fingerprint

audit/2026-06-20-deep-audit

chore/launch-readiness-fixes

chore/remove-dead-code

ci/coderabbit-auto-approvals

claude/determined-lumiere-d7c56c

codex/pr3-plumbing

deferred-tools

docs/agents-md-rewrite

docs/awesome-agents

docs/awesome-agents-list

docs/community-discussions-wiring

docs/contributing-volume-batching

docs/normalize-before-match

docs/public-release-cleanup

docs/readme-trendshift-partners

docs/refresh-agents-guidelines

docs/source-build-sandbox-helpers

docs/vercel-oss-badge

docs/vercel-partner

esc-cancel-confirmation

feat-permission-feedback-input

feat/499-shell-completion

feat/637-btw-session

feat/971-sessions-prune

feat/acp-browser-session

feat/acp-structured-file-diffs

feat/agent-quality

feat/cheap-compaction

feat/command-output-intelligence

feat/concentrate-provider

feat/conversation-state-compaction

feat/cross-session-messaging

feat/draggable-terminal-pets

feat/exec-profiles-pr10bc

feat/exec-sandbox-deadline

feat/fast-command

feat/files-sidebar

feat/gmi-cloud-provider

feat/harness-efficiency-foundation

feat/homebrew-install-method

feat/import-agent-sessions

feat/interactive-terminal-attach

feat/longcat-provider

feat/loop-command

feat/m2-go-update-check

feat/notify-webhook

feat/npm-platform-packages

feat/npm-publish-approval

feat/npm-twigpine-scope

feat/openai-prompt-cache-key

feat/opencode-parity

feat/perf-token-wave1

feat/persisted-goals

feat/provider-management

feat/providers-models-discovery

feat/reasoning-modelsdev-catalog

feat/release-please

feat/resume-session-browser

feat/runtime-performance

feat/sandbox-execution-rework

feat/scoped-network-config

feat/simplicity-guardrail

feat/skill-bundled-files

feat/skill-invocation

feat/structural-code-query

feat/theme-catalog

feat/tui-allow-escalation

feat/tui-diff-viewer

feat/tui-ide-panels-and-fixes

feat/tui-startup-version

feat/twigpine-opengateway

feat/ui-polish

feat/unified-context-planner

feat/windows-powershell-shell

feat/windows-sandbox-identity

feat/windows-sandbox-offline-online

feat/zeromaxing-refresh

fix-alt-screen-height-fallback

fix-auth-propagation-gaps

fix-exec-output-buffer-oom

fix-macos-pooled-connection-stall

fix-model-picker-label

fix-ollama-context-window-gauge

fix-permission-selected-row

fix-queued-message-above-composer

fix-read-file-backwards-range

fix-stall-faster-abort-and-retry

fix-windows-ci-flaky-timing-tests

fix/1028-oauth-callback-servers

fix/1031-refresh-hono-lock

fix/1041-degraded-sandbox-notice

fix/1045-acp-load-read-only

fix/1048-search-metadata-redaction

fix/534-clipboard-image-paste

fix/677-scrub-daemon-token-file

fix/684-gopls-manual-opt-in

fix/721-providers-use-env-override

fix/728-windows-acl-toctou

fix/811-provider-command-timeout-bound

fix/815-deny-git-credential-stores

fix/822-mcp-check-reports-failures

fix/823-mcp-non-text-blocks

fix/825-mcp-panel-shows-failures

fix/829-resume-identity-and-panel

fix/831-advisory-locks

fix/838-seenwhole-from-ranges

fix/861-daemon-worker-group-kill

fix/870-mouse-mode-fallback

fix/936-voice-typing-collision

fix/969-redact-control-split-secrets

fix/998-mcp-tools-callable

fix/acp-desktop-interop

fix/acp-session-list

fix/agent-progress-visibility

fix/agent-runtime-resilience

fix/allow-private-network-provider-endpoints

fix/anthropic-env-gateway-url

fix/auth-login-chatgpt-routing

fix/automatic-git-repo-commands

fix/bench-oracle-answer-contamination

fix/bump-go-1.26.6

fix/chatgpt-oauth-model-discovery

fix/config-provider-command-flakes

fix/daemon-status-atomic-publication

fix/doctor-native-binary

fix/eager-tool-budget-view-image

fix/empty-turn-resilience

fix/exec-default-turn-budget

fix/exec-server-startup-race

fix/factory-test-oauth-isolation

fix/format-on-write-timeout-disclosure

fix/gemini-tool-schema-sanitize

fix/go-1.26.10

fix/go-1.26.5-govulncheck

fix/google-model-default

fix/guardrail-denial-counter-rekey

fix/help-overlay

fix/hermetic-resolver-and-header-tests

fix/hono-4.13.13

fix/issue-666-plan-stall

fix/loopback-proxy-safe-dial

fix/main-ci-red

fix/mcp-oauth-protected-resource-discovery

fix/mcp-scrub-injected-key-from-rpc-errors

fix/model-picker-title-by-name

fix/model-switch-credential-name

fix/npm-publish-wait-and-drop-bridge

fix/oauth-doctor-connectivity

fix/oauth-lock-windows-access-denied

fix/oauth-preset-login

fix/oauth-token-redirect

fix/oauth-validate-discovered-endpoints

fix/omit-prompt-cache-key-compatible

fix/openai-empty-content

fix/opencode-session-header

fix/opengateway-endpoint-and-recommended

fix/perfbench-exposes-no-write-tools

fix/prefix-approval-sandbox-disclosure

fix/preserve-user-environment

fix/refresh-shell-quote-lock

fix/remove-dead-setnotify

fix/reset-quiet-generation-clock

fix/resume-after-provider-error

fix/resume-context-stable-order

fix/retry-presend-transport

fix/safe-command-ast-interactive

fix/sandbox-enabled-config

fix/sandbox-reentrancy-autoallow

fix/scoped-permission-prompts

fix/serve-scope-symlink-skip

fix/session-lease-outlives-store

fix/specialist-resume-model

fix/staticcheck-nits

fix/stream-content-stall-timeout

fix/subagent-provider-inheritance

fix/swarm-agent-type-enum

fix/termux-android-platform

fix/tui-active-work-duration

fix/tui-mouse-api

fix/tui-permission-deadlock

fix/tui-picker-test-4ret

fix/tui-session-rename

fix/tui-sidebar-footer-availability

fix/undo-command

fix/voice-ctrl-space

fix/windows-acl-reparse-intermediate

fix/windows-denyread-world-sid

fix/windows-exec-test-flakes

fix/windows-provider-background-pid-race

fix/windows-provider-command-tests

fix/windows-restricted-sid-invariant

fix/windows-setup-marker-runtime-root

fix/windows-tool-schema-budget

fix/windows-world-sid-write-jail

fix/workspaceindex-gitsafe

fix/workspaceindex-twigpine-import

fix/write-stdin-invalid-session-guidance

fix/write-stdin-unknown-session-thrash

gnanam1990-patch-1

local/tui-selection-fixes

main

opentui

origin-sessions

perf/bench-binary-and-errored-honesty

perf/concurrent-readonly-tool-batches

perf/deterministic-completion-policy

perf/edit-tools-parity

perf/openai-optimized-session

perf/stable-prompt-prefix

perf/structured-task-state

perf/token-aware-output-budgeting

perf/tool-effect-metadata

perf/turn-trace-baseline

perf/unified-tool-outcomes

polish/per-turn-overhead-cache-new

polish/v2-smoothness

pr/mcp-oauth-skip-discovery-when-configured

providers

release-please--branches--main--components--zero

revert/accent-color-brightness

split/permission-mode-and-classifier

test/clear-fetch-disable-env

test/cli-prewarm-ordering

test/exec-image-tests-isolation

test/swarm-drain-waits-for-slot

test/tty-exec-test-root

test/tui-overlay-cwd

zenline-runtime-work

zeroline-redesign

#1

#10

#100

#1000

#1001

#1003

#1005

#1006

#1007

#1008

#1009

#101

#1010

#1010/merge

#1011

#1012

#1013

#1014

#1016

#1017

#1018

#1019

#1025

#103

#1037

#1039

#104

#1040

#1042

#1043

#1044

#1047

#1049

#105

#1051

#1052

#1053

#1054

#1055

#1058

#1059

#106

#1060

#1061

#1062

#1063

#1064

#1065

#1066

#1067

#1068

#107

#1070

#1070/merge

#1072

#1073

#1074

#1074/merge

#1075

#1076

#1077

#1078

#1079

#108

#1080

#1082

#1083

#1088

#1089

#109

#1090

#1091

#1092

#1093

#1094

#1095

#1096

#11

#110

#1105

#1106

#1107

#111

#1110

#1111

#1112

#1113

#1114

#1115

#1116

#1117

#112

#1120

#1124

#1126

#1127

#1128

#113

#1131

#1133

#1134

#1136

#1137

#1139

#114

#1142

#1143

#1144

#1145

#1146

#1147

#1149

#115

#1150

#1152

#1153

#1158

#1159

#1159/merge

#116

#1160

#1161

#1165

#1166

#1166/merge

#1167

#1168

#1169

#117

#1170

#1171

#1172

#1174

#1175

#1176

#1178

#1178/merge

#1179

#118

#1180

#1181

#1182

#1183

#1184

#1185

#1186

#1187

#1188

#1189

#119

#1190

#1191

#1192

#1193

#1197

#1197/merge

#1198

#12

#120

#1201

#1201/merge

#1202

#1203

#1204

#1205

#1205/merge

#1206

#1206/merge

#1208

#121

#1211

#1211/merge

#122

#123

#124

#125

#126

#127

#128

#129

#13

#130

#131

#132

#133

#134

#135

#136

#137

#138

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#15

#150

#151

#152

#153

#154

#155

#156

#157

#158

#159

#16

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#174

#175

#176

#177

#178

#179

#18

#180

#181

#182

#183

#184

#185

#186

#187

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#197

#198

#199

#2

#20

#200

#201

#202

#203

#204

#205

#206

#207

#208

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#231

#232

#233

#234

#235

#236

#237

#238

#239

#24

#240

#241

#242

#243

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#253

#254

#255

#256

#257

#258

#259

#26

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#275

#276

#277

#278

#279

#28

#280

#281

#282

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#3

#30

#300

#301

#302

#303

#304

#305

#306

#307

#308

#309

#31

#310

#311

#312

#313

#314

#315

#316

#317

#318

#319

#32

#320

#321

#322

#323

#324

#325

#326

#327

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#358

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#368

#369

#37

#370

#372

#374

#378

#379

#38

#382

#385

#386

#387

#388

#389

#39

#391

#393

#394

#395

#396

#397

#398

#399

#4

#40

#400

#402

#403

#407

#408

#41

#410

#412

#414

#417

#418

#42

#420

#421

#422

#423

#424

#426

#427

#43

#436

#437

#438

#44

#441

#442

#443

#444

#445

#448

#45

#450

#451

#452

#453

#455

#456

#457

#46

#460

#461

#462

#464

#465

#468

#47

#474

#475

#476

#477

#478

#48

#481

#482

#484

#485

#486

#487

#489

#49

#490

#491

#492

#493

#496

#497

#498

#5

#50

#500

#502

#503

#504

#504/merge

#506

#509

#51

#515

#517

#518

#519

#52

#520

#522

#524

#526

#527

#528

#529

#53

#532

#533

#535

#537

#538

#539

#54

#543

#544

#547

#548

#549

#55

#550

#553

#557

#558

#56

#560

#563

#565

#568

#57

#570

#570/merge

#571

#572

#573

#574

#575

#576

#577

#578

#58

#580

#581

#582

#585

#586

#587

#589

#59

#590

#591

#593

#594

#595

#597

#599

#6

#60

#601

#602

#603

#606

#607

#608

#609

#61

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#623

#625

#626

#627

#628

#629

#63

#630

#631

#632

#634

#635

#636

#638

#639

#64

#640

#641

#642

#643

#645

#646

#647

#648

#649

#65

#650

#653

#654

#655

#656

#658

#659

#66

#660

#661

#665

#667

#668

#669

#67

#670

#671

#672

#673

#68

#681

#682

#685

#685/merge

#686

#688

#689

#69

#690

#691

#692

#693

#694

#696

#699

#7

#70

#700

#704

#705

#706

#708

#709

#71

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#72

#720

#723

#724

#725

#726

#726/merge

#73

#730

#732

#734

#736

#737

#738

#739

#74

#740

#741

#744

#745

#746

#747

#748

#749

#75

#750

#751

#755

#756

#756/merge

#757

#759

#76

#760

#761

#762

#763

#764

#765

#766

#767

#768

#769

#77

#772

#773

#774

#775

#776

#778

#779

#78

#780

#781

#782

#783

#784

#786

#787

#79

#794

#795

#796

#798

#799

#8

#80

#800

#801

#802

#803

#804

#805

#807

#808

#808/merge

#809

#81

#810

#812

#813

#814

#816

#818

#82

#820

#821

#826

#827

#828

#829

#829/merge

#83

#835

#835/merge

#837

#838

#84

#842

#843

#846

#848

#849

#85

#850

#851

#852

#853

#854

#855

#857

#86

#860

#864

#865

#866

#866/merge

#867

#87

#872

#873

#874

#876

#877

#878

#878/merge

#879

#88

#880

#882

#882/merge

#883

#883/merge

#884

#885

#886

#886/merge

#887

#888

#89

#890

#891

#892

#892/merge

#893

#893/merge

#894

#894/merge

#895

#895/merge

#896

#897

#897/merge

#899

#9

#90

#900

#901

#901/merge

#902

#903

#905

#906

#908

#909

#909/merge

#91

#910

#911

#912

#912/merge

#914

#915

#916

#918

#92

#926

#927

#927/merge

#93

#930

#931

#932

#934

#935

#938

#94

#940

#941

#941/merge

#942

#943

#944

#944/merge

#945

#946

#948

#949

#95

#950

#951

#952

#953

#954

#955

#956

#957

#958

#959

#96

#960

#961

#968

#97

#970

#974

#975

#976

#977

#978

#979

#98

#980

#981

#982

#983

#984

#985

#986

#987

#987/merge

#988

#988/merge

#989

#99

#990

#991

#993

#993/merge

#994

#995

#997

#999

v0.1.0

v0.10.0

v0.11.0

v0.12.0

v0.13.0

v0.2.0

v0.3.0

v0.4.0

v0.5.0

v0.6.0

v0.7.0

v0.8.0

v0.9.0

Mono Color

• 6a1b4562d0 fix(sandbox): reject protected metadata names that escape the write root Vasanthdev2004 2026-08-08 15:50:09 +05:30
• 011c4dad15 fix(sandbox): bind windows ACL materialization and rollback to handles Vasanthdev2004 2026-08-08 15:13:58 +05:30
• c2cf7b8f3a fix(sandbox): keep the git rename guard tests portable Vasanthdev2004 2026-08-08 14:43:14 +05:30
• 2d5e1f7885 feat(sandbox): handle-relative directory create and delete on Windows Vasanthdev2004 2026-08-07 23:57:42 +05:30
• bcae716a07 fix(sandbox): stop a principal replacing .git to shed its carveouts Vasanthdev2004 2026-08-07 13:18:00 +05:30
• 7f45a7cd54 test(sandbox): compare ACL record paths the way the plans do Vasanthdev2004 2026-08-03 17:57:43 +05:30
• cae96b2830 fix(sandbox): revoke principal ACEs on roots that left the policy Vasanthdev2004 2026-08-03 17:16:40 +05:30
• f18e645c8b fix(sandbox): carry the principal opt-in through the setup protocol Vasanthdev2004 2026-08-03 11:36:23 +05:30
• 949ee3d761 fix(sandbox): keep the principal inside the Windows write jail Vasanthdev2004 2026-08-01 21:01:26 +05:30
• 97c8c98068 fix(sandbox): reject reparse ancestors before creating an ACL target Vasanthdev2004 2026-08-01 17:49:33 +05:30
• 7070993ef9 fix(sandbox): surface a failed stale-secret cleanup after rotation Vasanthdev2004 2026-07-31 23:14:54 +05:30
• d685d83df6 fix(sandbox): stop teardown creating a directory while naming one Vasanthdev2004andClaude Opus 5 2026-07-31 12:18:23 +05:30
• 7e996fa4fd fix(sandbox): close the delete-through-parent, junction-ancestor and rollback gaps Vasanthdev2004andClaude Opus 5 2026-07-31 12:14:14 +05:30
• 6b54ac0814 test(sandbox): assert the ancestor walk, not the old all-or-nothing contract Vasanthdev2004andClaude Opus 5 2026-07-30 23:45:10 +05:30
• 8d42270e30 fix(sandbox): resolve through path segments that do not exist yet Vasanthdev2004andClaude Opus 5 2026-07-30 23:33:56 +05:30
• 0b5950e882 fix(sandbox): normalize the cache root too, not just the workspace root Vasanthdev2004andClaude Opus 5 2026-07-30 23:27:19 +05:30
• c6921d4145 fix(sandbox): canonicalize the workspace root on both sides, not just setup Vasanthdev2004andClaude Opus 5 2026-07-30 23:13:32 +05:30
• 227f4ed6ef fix(sandbox): revoke ACEs on teardown and key setup off the resolved root Vasanthdev2004andClaude Opus 5 2026-07-30 22:51:11 +05:30
• 8a84471dc9 fix(sandbox): revoke stale principal ACEs before re-applying the plan Vasanthdev2004andClaude Opus 5 2026-07-30 22:44:37 +05:30
• 6ff26014d5 fix(sandbox): re-check principal privilege when minting a command token Vasanthdev2004andClaude Opus 5 2026-07-30 22:38:18 +05:30
• 700e749e30 fix(sandbox): materialize .git/config as a file, not a directory Vasanthdev2004andClaude Opus 5 2026-07-30 22:04:32 +05:30
• 73fc1c07ae fix(sandbox): refuse to adopt a principal in a privileged group Vasanthdev2004 2026-07-30 11:24:49 +05:30
• f0bc1a3821 fix(sandbox): grant the principal the runtime tree commands write to Vasanthdev2004 2026-07-30 11:08:58 +05:30
• 2175366d4e fix(sandbox): keep an adopted principal's logon rights on rollback Vasanthdev2004 2026-07-29 20:05:17 +05:30
• fd27716dfc fix(sandbox): stop setup destroying a principal it did not create Vasanthdev2004 2026-07-29 13:50:34 +05:30
• 206046bc04 fix(sandbox): grant delete to the principal and keep rollback able to find it Vasanthdev2004 2026-07-28 21:31:50 +05:30
• e8a0642c58 test(sandbox): check the ACE type before decoding its trustee Vasanthdev2004 2026-07-28 12:24:24 +05:30
• 17d5674d61 fix(sandbox): drop the stored secret whenever provisioning fails Vasanthdev2004 2026-07-27 14:24:30 +05:30
• 17879dc480 fix(sandbox): refuse a squatted account name and clean up partial provisioning Vasanthdev2004 2026-07-27 13:35:30 +05:30
• a527ffc040 fix(sandbox): revoke logon rights before deleting a principal Vasanthdev2004 2026-07-27 09:29:28 +05:30
• 07f6492528 fix(sandbox): reset the password when the account already exists Vasanthdev2004 2026-07-27 09:16:24 +05:30
• 949e104844 fix(sandbox): surface a squatted principal name instead of falling back Vasanthdev2004 2026-07-27 09:03:13 +05:30
• 0b8fcf4b1e feat(sandbox): encrypt the stored principal password to the invoking user Vasanthdev2004 2026-07-26 23:43:43 +05:30
• 3e238cc5ea fix(sandbox): keep the restricted token when the network is denied Vasanthdev2004 2026-07-26 23:43:35 +05:30
• 645976d215 feat(sandbox): provision a sandbox principal during elevated setup Vasanthdev2004 2026-07-26 23:35:41 +05:30
• 273bdede2a test(sandbox): cover the logon-rights and token-minting half Vasanthdev2004 2026-07-26 23:33:08 +05:30
• 8dbe818934 test(sandbox): name the per-shell env syntax in the provisioning skip Vasanthdev2004 2026-07-26 23:24:58 +05:30
• ea7c04cdbb feat(sandbox): use a sandbox principal for Windows command execution Vasanthdev2004 2026-07-26 23:13:04 +05:30
• 17aa51b530 feat(sandbox): add Windows sandbox principals Vasanthdev2004 2026-07-26 23:07:09 +05:30
• 789bd389aa fix(sessions): name the value shapes a projected argument may keep, and scope the ambiguous aliases Vasanthdev2004 2026-09-11 10:10:54 +05:30
• a67ea8735a fix(sessions): project a tool call's top-level fields instead of patching one Vasanthdev2004 2026-09-09 11:50:04 +05:30
• e27174f6f4 fix(sessions): scrub credentials out of retained tool-call values Vasanthdev2004 2026-09-09 11:17:15 +05:30
• c35412bd01 fix(sessions): keep a tool call's identity and drop its payload in resume context Vasanthdev2004 2026-09-08 08:48:27 +05:30
• dab4691b21 test(sessions): pin the whole of every tool line, not a search for one string Vasanthdev2004 2026-09-07 20:23:05 +05:30
• 23b1e5f92f test(sessions): scope the outcome assertion to the tool_result lines Vasanthdev2004 2026-09-07 19:10:14 +05:30
• 1e52a3625d fix(sessions): carry the tool outcome, not the tool output Vasanthdev2004 2026-09-07 19:08:29 +05:30
• 139cffa6c3 fix(sessions): carry an interrupted turn's work into the resume prompt Vasanthdev2004 2026-09-07 14:51:46 +05:30
• 1e4db7c664 fix: let the configured forward proxy through the loopback guard (#1025) Vasanth Tandbaoyu0 2026-09-10 21:50:26 +05:30
• f9092668a8 fix(agent): stop the tool-schema ratchet meaning a different thing per host (#1017) Vasanth T 2026-09-10 21:43:58 +05:30
• 9371890bf4 fix(tools): put the written bytes back when the formatter fails fix/format-on-write-timeout-disclosure Vasanthdev2004 2026-09-10 21:26:22 +05:30
• 7f5e5af7bb fix(acp): make configured MCP tools callable (#1003) KRATOS 2026-09-10 20:17:26 +05:30
• 94695aaad7 fix(tools): say when format-on-write ran out of time Vasanthdev2004 2026-09-09 22:49:08 +05:30
• 44e96c8c72 test(cli): skip the serve-scope symlink test when the platform refuses the link fix/serve-scope-symlink-skip Vasanthdev2004 2026-09-09 22:36:59 +05:30
• f984082c82 test(sandbox): pin the retraction, and the fallback when it cannot be written Vasanthdev2004 2026-09-09 11:24:28 +05:30
• 33f62e7f94 fix(sandbox,execution): let a failed resume revoke the launch it published Vasanthdev2004 2026-09-09 11:23:19 +05:30
• 8535e4a6b1 fix(sandbox): unwind the launch report when the suspended child cannot resume Vasanthdev2004 2026-09-08 08:44:16 +05:30
• 6bce7d3883 fix(agent,hooks): give afterTool the same typed-notice contract as beforeTool Vasanthdev2004 2026-09-07 22:40:41 +05:30
• 3b7c741480 fix(agent): keep a beforeTool enforcement notice typed through the result Vasanthdev2004 2026-09-07 21:11:14 +05:30
• b11a8a6231 test(sandbox): fail the deny_read disclosure tests when the producer disappears Vasanthdev2004 2026-09-07 21:02:10 +05:30
• 105e955fa6 test(mcp): pin the StartupNotices launch gate at the carrier Vasanthdev2004 2026-09-05 15:07:02 +05:30
• 67de11f0ad fix(mcp): gate the success-path disclosure on the launch decision too Vasanthdev2004 2026-09-05 15:04:07 +05:30
• 2f8dc76666 fix(execution,mcp,sandbox): settle the launch decision before caching a no Vasanthdev2004 2026-09-05 15:00:52 +05:30
• 886567fe19 docs(agent): record why the notice delivery path needs no rebudget Vasanthdev2004 2026-09-04 13:12:40 +05:30
• b16971f5c3 fix(mcp): gate the initialization-error disclosure on the confirmed child Vasanthdev2004 2026-09-04 13:03:13 +05:30
• 03ee13e480 fix(execution): observe the adapter's launch while the process is still running Vasanthdev2004 2026-09-04 12:57:50 +05:30
• b69ff6733d docs(hooks): state the property the notice accumulation actually holds Vasanthdev2004 2026-09-04 12:52:55 +05:30
• 4ccdab8f08 fix(agent,hooks): deliver only the beforeTool enforcement notice, on every exit Vasanthdev2004 2026-09-04 12:49:06 +05:30
• 600bbc4c44 fix(agent): drop the deprecated runtime.GOROOT fallback from the hook regression Vasanthdev2004 2026-09-03 13:05:17 +05:30
• b8d344d48c fix(agent): deliver a successful beforeTool hook's output to the model Vasanthdev2004 2026-09-03 12:53:26 +05:30
• 2176c98271 fix(cli): give the late MCP disclosure and startup output one owner of stderr Vasanthdev2004 2026-09-03 12:49:17 +05:30
• 0ae48e400d fix(execution,sandbox,mcp,tools): one launch fact, applied by every launcher Vasanthdev2004 2026-09-03 12:43:59 +05:30
• 47d6ab7015 fix(execution,sandbox): confirm the restricted child launched, not the Windows helper Vasanthdev2004 2026-09-02 20:25:38 +05:30
• 591874f1f8 fix(mcp,cli): hand late launch disclosures to the output owner, not a retained callback Vasanthdev2004 2026-09-02 20:17:04 +05:30
• b619016f08 fix(mcp,tui): deliver the launch fact once, and persist one payload shape Vasanthdev2004 2026-09-02 12:17:03 +05:30
• 60a1452eeb fix(mcp): keep the launch fact alive past the registration bound Vasanthdev2004 2026-08-31 14:29:08 +05:30
• 98fdb3e8e5 fix(tui): let the typed notice own the card's disclosure Vasanthdev2004 2026-08-31 14:25:30 +05:30
• fc06cc6aaa fix(mcp): synchronize the timeout with a start that is still completing Vasanthdev2004 2026-08-29 12:03:28 +05:30
• b44d56f2b2 fix(tools): carry bash's real launch state into the shared outcome Vasanthdev2004 2026-08-29 11:47:26 +05:30
• 6bf5a86b7f fix(mcp): keep the launch disclosure when registration times out Vasanthdev2004 2026-08-28 10:27:52 +05:30
• e2ac98b906 test(sandbox): fail when the current-user SID prerequisite cannot be read Vasanthdev2004 2026-08-28 10:23:02 +05:30
• b60359e2d6 fix(tools): measure the model output the enforcement notices are part of Vasanthdev2004 2026-08-28 10:22:58 +05:30
• f889b7e3b3 fix(tui): show the enforcement disclosure in cards and after resume Vasanthdev2004 2026-08-28 01:37:00 +05:30
• e0e8db306e fix(sandbox): gate the DenyRead diagnostic on the resolved plan Vasanthdev2004 2026-08-28 01:29:36 +05:30
• f62ae776c9 fix(tools): derive command notices from applied execution state, not the plan Vasanthdev2004 2026-08-28 00:28:21 +05:30
• 427df5fdb9 fix(mcp): carry the launch disclosure through an initialize failure Vasanthdev2004 2026-08-28 00:00:11 +05:30
• 22c9194bce fix(execution): record launch state instead of inferring it from the outcome kind Vasanthdev2004 2026-08-27 23:33:05 +05:30
• 85526b4978 fix(cli): report MCP startup disclosures from headless exec Vasanthdev2004 2026-08-27 21:28:57 +05:30
• 1ee7aa762a fix(mcp): collect startup disclosures in the serial phase, and keep them past a failed start Vasanthdev2004 2026-08-27 21:10:27 +05:30
• 4f8aa57314 fix(mcp,hooks): carry the enforcement fact to the durable consumers Vasanthdev2004 2026-08-27 15:46:26 +05:30
• 76e5e35a1c fix(execution): one launch-state decision, and disclose it on the MCP boundary Vasanthdev2004 2026-08-27 15:38:14 +05:30
• cd76c67050 fix(acp,cli): carry the enforcement notice to the consumers the projection left behind Vasanthdev2004 2026-08-26 11:34:10 +05:30
• 081aabdbc4 fix(agent): carry one canonical representation of a tool result across the projection Vasanthdev2004 2026-08-24 14:33:30 +05:30
• 0b646ad7f9 test(sandbox): pin the notice projection itself, not just its consumers Vasanthdev2004 2026-08-23 00:54:21 +05:30
• 4e2231e5de fix(plugins,hooks): carry the disclosure through every post-launch outcome Vasanthdev2004 2026-08-23 00:11:48 +05:30
• f7814819cb fix(sandbox,plugins,hooks): disclose the write-jail trade where it actually happens Vasanthdev2004 2026-08-22 13:18:44 +05:30
• 5c64cef7f6 fix(sandbox,tools): make the DenyRead disclosure reach a human, and project enforcement once Vasanthdev2004 2026-08-21 11:09:07 +05:30
• 55621d2176 fix(sandbox): disclose the DenyRead write-jail trade on the execution path Vasanthdev2004 2026-08-20 15:57:04 +05:30
• 915e1df103 test(sandbox): fail rather than skip when the DenyRead token loses the World SID Vasanthdev2004 2026-08-19 13:37:50 +05:30
• 3bfd898bfc test(sandbox): pin the remedies the unelevated ACL failure offers Vasanthdev2004 2026-08-12 16:00:42 +05:30
• c4905d296b fix(sandbox): stop advertising a sandbox override that does not exist Vasanthdev2004 2026-08-12 13:54:02 +05:30