Commit Graph

Select branches

Hide Pull Requests

add-opengateway-hy3-zero

add-stall-warning-hint

aimlapi-preset-fixes

anandh/stream-b-pr2-prefix-fingerprint

audit/2026-06-20-deep-audit

chore/launch-readiness-fixes

chore/remove-dead-code

ci/coderabbit-auto-approvals

claude/determined-lumiere-d7c56c

codex/pr3-plumbing

deferred-tools

docs/agents-md-rewrite

docs/awesome-agents

docs/awesome-agents-list

docs/community-discussions-wiring

docs/contributing-volume-batching

docs/normalize-before-match

docs/public-release-cleanup

docs/readme-trendshift-partners

docs/refresh-agents-guidelines

docs/source-build-sandbox-helpers

docs/vercel-oss-badge

docs/vercel-partner

esc-cancel-confirmation

feat-permission-feedback-input

feat/499-shell-completion

feat/637-btw-session

feat/971-sessions-prune

feat/acp-browser-session

feat/acp-structured-file-diffs

feat/agent-quality

feat/cheap-compaction

feat/command-output-intelligence

feat/concentrate-provider

feat/conversation-state-compaction

feat/cross-session-messaging

feat/draggable-terminal-pets

feat/exec-profiles-pr10bc

feat/exec-sandbox-deadline

feat/fast-command

feat/files-sidebar

feat/gmi-cloud-provider

feat/harness-efficiency-foundation

feat/homebrew-install-method

feat/import-agent-sessions

feat/interactive-terminal-attach

feat/longcat-provider

feat/loop-command

feat/m2-go-update-check

feat/notify-webhook

feat/npm-platform-packages

feat/npm-publish-approval

feat/npm-twigpine-scope

feat/openai-prompt-cache-key

feat/opencode-parity

feat/perf-token-wave1

feat/persisted-goals

feat/provider-management

feat/providers-models-discovery

feat/reasoning-modelsdev-catalog

feat/release-please

feat/resume-session-browser

feat/runtime-performance

feat/sandbox-execution-rework

feat/scoped-network-config

feat/simplicity-guardrail

feat/skill-bundled-files

feat/skill-invocation

feat/structural-code-query

feat/theme-catalog

feat/tui-allow-escalation

feat/tui-diff-viewer

feat/tui-ide-panels-and-fixes

feat/tui-startup-version

feat/twigpine-opengateway

feat/ui-polish

feat/unified-context-planner

feat/windows-powershell-shell

feat/windows-sandbox-identity

feat/windows-sandbox-offline-online

feat/zeromaxing-refresh

fix-alt-screen-height-fallback

fix-auth-propagation-gaps

fix-exec-output-buffer-oom

fix-macos-pooled-connection-stall

fix-model-picker-label

fix-ollama-context-window-gauge

fix-permission-selected-row

fix-queued-message-above-composer

fix-read-file-backwards-range

fix-stall-faster-abort-and-retry

fix-windows-ci-flaky-timing-tests

fix/1028-oauth-callback-servers

fix/1031-refresh-hono-lock

fix/1041-degraded-sandbox-notice

fix/1045-acp-load-read-only

fix/1048-search-metadata-redaction

fix/534-clipboard-image-paste

fix/674-provider-error-diagnostics

fix/677-scrub-daemon-token-file

fix/684-gopls-manual-opt-in

fix/721-providers-use-env-override

fix/728-windows-acl-toctou

fix/811-provider-command-timeout-bound

fix/815-deny-git-credential-stores

fix/822-mcp-check-reports-failures

fix/823-mcp-non-text-blocks

fix/825-mcp-panel-shows-failures

fix/829-resume-identity-and-panel

fix/831-advisory-locks

fix/838-seenwhole-from-ranges

fix/861-daemon-worker-group-kill

fix/870-mouse-mode-fallback

fix/936-voice-typing-collision

fix/969-redact-control-split-secrets

fix/998-mcp-tools-callable

fix/acp-desktop-interop

fix/acp-session-list

fix/agent-progress-visibility

fix/agent-runtime-resilience

fix/allow-private-network-provider-endpoints

fix/anthropic-env-gateway-url

fix/auth-login-chatgpt-routing

fix/automatic-git-repo-commands

fix/bench-oracle-answer-contamination

fix/bump-go-1.26.6

fix/chatgpt-oauth-model-discovery

fix/codex-forward-tool-input

fix/config-provider-command-flakes

fix/daemon-status-atomic-publication

fix/doctor-native-binary

fix/eager-tool-budget-view-image

fix/empty-turn-resilience

fix/exec-default-turn-budget

fix/exec-server-startup-race

fix/factory-test-oauth-isolation

fix/format-on-write-timeout-disclosure

fix/gemini-tool-schema-sanitize

fix/go-1.26.10

fix/go-1.26.5-govulncheck

fix/google-model-default

fix/guardrail-denial-counter-rekey

fix/help-overlay

fix/hermetic-resolver-and-header-tests

fix/hono-4.13.13

fix/issue-666-plan-stall

fix/loopback-proxy-safe-dial

fix/main-ci-red

fix/mcp-oauth-protected-resource-discovery

fix/mcp-scrub-injected-key-from-rpc-errors

fix/model-picker-title-by-name

fix/model-switch-credential-name

fix/npm-publish-wait-and-drop-bridge

fix/oauth-doctor-connectivity

fix/oauth-lock-windows-access-denied

fix/oauth-preset-login

fix/oauth-token-redirect

fix/oauth-validate-discovered-endpoints

fix/omit-prompt-cache-key-compatible

fix/openai-empty-content

fix/opencode-session-header

fix/opengateway-endpoint-and-recommended

fix/perfbench-exposes-no-write-tools

fix/prefix-approval-sandbox-disclosure

fix/preserve-user-environment

fix/refresh-shell-quote-lock

fix/remove-dead-setnotify

fix/reset-quiet-generation-clock

fix/resume-after-provider-error

fix/resume-context-stable-order

fix/retry-presend-transport

fix/safe-command-ast-interactive

fix/sandbox-enabled-config

fix/sandbox-reentrancy-autoallow

fix/scoped-permission-prompts

fix/serve-scope-symlink-skip

fix/session-lease-outlives-store

fix/specialist-resume-model

fix/staticcheck-nits

fix/stream-content-stall-timeout

fix/subagent-provider-inheritance

fix/swarm-agent-type-enum

fix/termux-android-platform

fix/tui-active-work-duration

fix/tui-mouse-api

fix/tui-permission-deadlock

fix/tui-picker-test-4ret

fix/tui-session-rename

fix/tui-sidebar-footer-availability

fix/undo-command

fix/voice-ctrl-space

fix/windows-acl-reparse-intermediate

fix/windows-denyread-world-sid

fix/windows-exec-test-flakes

fix/windows-provider-background-pid-race

fix/windows-provider-command-tests

fix/windows-restricted-sid-invariant

fix/windows-setup-marker-runtime-root

fix/windows-tool-schema-budget

fix/windows-world-sid-write-jail

fix/workspaceindex-gitsafe

fix/workspaceindex-twigpine-import

fix/write-stdin-invalid-session-guidance

fix/write-stdin-unknown-session-thrash

gnanam1990-patch-1

local/tui-selection-fixes

main

opentui

origin-sessions

perf/bench-binary-and-errored-honesty

perf/concurrent-readonly-tool-batches

perf/deterministic-completion-policy

perf/edit-tools-parity

perf/openai-optimized-session

perf/stable-prompt-prefix

perf/structured-task-state

perf/token-aware-output-budgeting

perf/tool-effect-metadata

perf/turn-trace-baseline

perf/unified-tool-outcomes

polish/per-turn-overhead-cache-new

polish/v2-smoothness

pr/mcp-oauth-skip-discovery-when-configured

providers

release-please--branches--main--components--zero

revert/accent-color-brightness

split/permission-mode-and-classifier

test/clear-fetch-disable-env

test/cli-prewarm-ordering

test/exec-image-tests-isolation

test/swarm-drain-waits-for-slot

test/tty-exec-test-root

test/tui-overlay-cwd

zenline-runtime-work

zeroline-redesign

#1

#10

#100

#1000

#1001

#1003

#1005

#1006

#1007

#1008

#1009

#101

#1010

#1010/merge

#1011

#1012

#1013

#1014

#1016

#1017

#1018

#1019

#1025

#103

#1037

#1039

#104

#1040

#1042

#1043

#1044

#1047

#1049

#105

#1051

#1052

#1053

#1054

#1055

#1058

#1059

#106

#1060

#1061

#1062

#1063

#1064

#1065

#1066

#1067

#1068

#107

#1070

#1070/merge

#1072

#1073

#1074

#1074/merge

#1075

#1076

#1077

#1078

#1079

#108

#1080

#1082

#1083

#1088

#1089

#109

#1090

#1091

#1092

#1093

#1094

#1095

#1096

#11

#110

#1105

#1106

#1107

#111

#1110

#1111

#1112

#1113

#1114

#1115

#1116

#1117

#112

#1120

#1124

#1126

#1127

#1128

#113

#1131

#1133

#1134

#1136

#1137

#1139

#114

#1142

#1143

#1144

#1145

#1146

#1147

#1149

#115

#1150

#1152

#1153

#1158

#1159

#116

#1160

#1161

#1165

#1166

#1166/merge

#1167

#1168

#1169

#117

#1170

#1171

#1172

#1174

#1175

#1176

#1178

#1178/merge

#1179

#118

#1180

#1181

#1182

#1183

#1184

#1185

#1186

#1187

#1188

#1189

#119

#1190

#1191

#1192

#1193

#1197

#1198

#12

#120

#1201

#1202

#1203

#1204

#1205

#1205/merge

#1206

#1206/merge

#1208

#121

#1211

#1211/merge

#1212

#1212/merge

#1213

#1213/merge

#1214

#1215

#1215/merge

#122

#123

#124

#125

#126

#127

#128

#129

#13

#130

#131

#132

#133

#134

#135

#136

#137

#138

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#15

#150

#151

#152

#153

#154

#155

#156

#157

#158

#159

#16

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#174

#175

#176

#177

#178

#179

#18

#180

#181

#182

#183

#184

#185

#186

#187

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#197

#198

#199

#2

#20

#200

#201

#202

#203

#204

#205

#206

#207

#208

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#231

#232

#233

#234

#235

#236

#237

#238

#239

#24

#240

#241

#242

#243

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#253

#254

#255

#256

#257

#258

#259

#26

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#275

#276

#277

#278

#279

#28

#280

#281

#282

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#3

#30

#300

#301

#302

#303

#304

#305

#306

#307

#308

#309

#31

#310

#311

#312

#313

#314

#315

#316

#317

#318

#319

#32

#320

#321

#322

#323

#324

#325

#326

#327

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#358

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#368

#369

#37

#370

#372

#374

#378

#379

#38

#382

#385

#386

#387

#388

#389

#39

#391

#393

#394

#395

#396

#397

#398

#399

#4

#40

#400

#402

#403

#407

#408

#41

#410

#412

#414

#417

#418

#42

#420

#421

#422

#423

#424

#426

#427

#43

#436

#437

#438

#44

#441

#442

#443

#444

#445

#448

#45

#450

#451

#452

#453

#455

#456

#457

#46

#460

#461

#462

#464

#465

#468

#47

#474

#475

#476

#477

#478

#48

#481

#482

#484

#485

#486

#487

#489

#49

#490

#491

#492

#493

#496

#497

#498

#5

#50

#500

#502

#503

#504

#504/merge

#506

#509

#51

#515

#517

#518

#519

#52

#520

#522

#524

#526

#527

#528

#529

#53

#532

#533

#535

#537

#538

#539

#54

#543

#544

#547

#548

#549

#55

#550

#553

#557

#558

#56

#560

#563

#565

#568

#57

#570

#570/merge

#571

#572

#573

#574

#575

#576

#577

#578

#58

#580

#581

#582

#585

#586

#587

#589

#59

#590

#591

#593

#594

#595

#597

#599

#6

#60

#601

#602

#603

#606

#607

#608

#609

#61

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#623

#625

#626

#627

#628

#629

#63

#630

#631

#632

#634

#635

#636

#638

#639

#64

#640

#641

#642

#643

#645

#646

#647

#648

#649

#65

#650

#653

#654

#655

#656

#658

#659

#66

#660

#661

#665

#667

#668

#669

#67

#670

#671

#672

#673

#68

#681

#682

#685

#685/merge

#686

#688

#689

#69

#690

#691

#692

#693

#694

#696

#699

#7

#70

#700

#704

#705

#706

#708

#709

#71

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#72

#720

#723

#724

#725

#726

#726/merge

#73

#730

#732

#734

#736

#737

#738

#739

#74

#740

#741

#744

#745

#746

#747

#748

#749

#75

#750

#751

#755

#756

#756/merge

#757

#759

#76

#760

#761

#762

#763

#764

#765

#766

#767

#768

#769

#77

#772

#773

#774

#775

#776

#778

#779

#78

#780

#781

#782

#783

#784

#786

#787

#79

#794

#795

#796

#798

#799

#8

#80

#800

#801

#802

#803

#804

#805

#807

#808

#808/merge

#809

#81

#810

#812

#813

#814

#816

#818

#82

#820

#821

#826

#827

#828

#829

#829/merge

#83

#835

#835/merge

#837

#838

#84

#842

#843

#846

#848

#849

#85

#850

#851

#852

#853

#854

#855

#857

#86

#860

#864

#865

#866

#867

#87

#872

#873

#874

#876

#877

#878

#878/merge

#879

#88

#880

#882

#883

#883/merge

#884

#885

#886

#886/merge

#887

#888

#89

#890

#891

#892

#892/merge

#893

#893/merge

#894

#894/merge

#895

#895/merge

#896

#897

#897/merge

#899

#9

#90

#900

#901

#901/merge

#902

#903

#905

#906

#908

#909

#909/merge

#91

#910

#911

#912

#912/merge

#914

#915

#916

#918

#92

#926

#927

#927/merge

#93

#930

#931

#932

#934

#935

#938

#94

#940

#941

#941/merge

#942

#943

#944

#944/merge

#945

#946

#948

#949

#95

#950

#951

#952

#953

#954

#955

#956

#957

#958

#959

#96

#960

#961

#968

#97

#970

#974

#975

#976

#977

#978

#979

#98

#980

#981

#982

#983

#984

#985

#986

#987

#987/merge

#988

#988/merge

#989

#99

#990

#991

#993

#993/merge

#994

#995

#997

#999

v0.1.0

v0.10.0

v0.11.0

v0.12.0

v0.13.0

v0.2.0

v0.3.0

v0.4.0

v0.5.0

v0.6.0

v0.7.0

v0.8.0

v0.9.0

Mono Color

• 22c9194bce fix(execution): record launch state instead of inferring it from the outcome kind Vasanthdev2004 2026-08-27 23:33:05 +05:30
• 85526b4978 fix(cli): report MCP startup disclosures from headless exec Vasanthdev2004 2026-08-27 21:28:57 +05:30
• 1ee7aa762a fix(mcp): collect startup disclosures in the serial phase, and keep them past a failed start Vasanthdev2004 2026-08-27 21:10:27 +05:30
• 4f8aa57314 fix(mcp,hooks): carry the enforcement fact to the durable consumers Vasanthdev2004 2026-08-27 15:46:26 +05:30
• 76e5e35a1c fix(execution): one launch-state decision, and disclose it on the MCP boundary Vasanthdev2004 2026-08-27 15:38:14 +05:30
• cd76c67050 fix(acp,cli): carry the enforcement notice to the consumers the projection left behind Vasanthdev2004 2026-08-26 11:34:10 +05:30
• 081aabdbc4 fix(agent): carry one canonical representation of a tool result across the projection Vasanthdev2004 2026-08-24 14:33:30 +05:30
• 0b646ad7f9 test(sandbox): pin the notice projection itself, not just its consumers Vasanthdev2004 2026-08-23 00:54:21 +05:30
• 4e2231e5de fix(plugins,hooks): carry the disclosure through every post-launch outcome Vasanthdev2004 2026-08-23 00:11:48 +05:30
• f7814819cb fix(sandbox,plugins,hooks): disclose the write-jail trade where it actually happens Vasanthdev2004 2026-08-22 13:18:44 +05:30
• 5c64cef7f6 fix(sandbox,tools): make the DenyRead disclosure reach a human, and project enforcement once Vasanthdev2004 2026-08-21 11:09:07 +05:30
• 55621d2176 fix(sandbox): disclose the DenyRead write-jail trade on the execution path Vasanthdev2004 2026-08-20 15:57:04 +05:30
• 915e1df103 test(sandbox): fail rather than skip when the DenyRead token loses the World SID Vasanthdev2004 2026-08-19 13:37:50 +05:30
• 3bfd898bfc test(sandbox): pin the remedies the unelevated ACL failure offers Vasanthdev2004 2026-08-12 16:00:42 +05:30
• c4905d296b fix(sandbox): stop advertising a sandbox override that does not exist Vasanthdev2004 2026-08-12 13:54:02 +05:30
• 93f9505b72 fix(sandbox): only warn about the DenyRead token trade on a Windows host Vasanthdev2004 2026-08-09 19:15:52 +05:30
• 6a4eff21a2 fix(sandbox): guard the Windows write-jail invariant and disclose the DenyRead trade Vasanthdev2004 2026-08-09 18:21:29 +05:30
• 7e7407beb5 test(cli): pin the isolation itself, not only what this platform writes feat/tui-allow-escalation Vasanthdev2004 2026-09-09 11:11:57 +05:30
• aff1967d2a test(cli): check each launch helper isolation on its own Vasanthdev2004 2026-09-09 11:10:17 +05:30
• a548791b09 test(cli): isolate the new launch helpers from real user state Vasanthdev2004 2026-09-09 11:09:16 +05:30
• 36f2eafefb fix(tui): record the model on an escalated run persisted usage events Vasanthdev2004 2026-09-09 11:06:36 +05:30
• bdba404984 fix(cli): forward a root --allow-escalation into exec, reject it elsewhere Vasanthdev2004 2026-09-08 10:55:39 +05:30
• 49a9a632e5 fix(cli): accept the root flags in any order Vasanthdev2004 2026-09-08 10:40:03 +05:30
• a339c7064c fix(tui): attribute usage after an escalation to the model in force Vasanthdev2004 2026-09-08 10:20:13 +05:30
• 78b8dea66f feat(tui): offer mid-run model escalation behind --allow-escalation Vasanthdev2004 2026-09-08 00:28:06 +05:30
• 221fb93041 fix(proxydial): bind the proxy exemption to the route the transport chose fix/loopback-proxy-safe-dial Vasanthdev2004 2026-09-09 11:03:14 +05:30
• ac3958f860 fix(proxydial): have the dialer ask its transport for the proxy at dial time Vasanthdev2004 2026-09-08 10:04:41 +05:30
• 63767f3e42 fix(providerhealth,tools): let the configured forward proxy through the loopback guard Vasanthdev2004andbaoyu0 2026-09-08 09:59:50 +05:30
• 2510c59269 test(tools): restore the drain guard and gate the TTY loop on the exit too fix/exec-server-startup-race Vasanthdev2004 2026-09-08 08:39:56 +05:30
• f30f550e60 fix(sandbox): protect worktree git pointers (#805) 3 people 2026-09-08 01:54:22 +02:00
• b9fc003d09 test(tools): harden the poll fix against what a poll can hide Vasanthdev2004 2026-09-07 22:06:16 +05:30
• 0c9125d5a6 docs(tools): record that exec session reads drain, so poll chunks are incremental Vasanthdev2004 2026-09-07 21:35:22 +05:30
• 902f171e31 test(tools): poll for the PTY echo instead of demanding it in one window Vasanthdev2004 2026-09-07 21:34:18 +05:30
• 516653bf84 test(tools): poll for the exec server's address instead of racing its startup Vasanthdev2004 2026-09-07 21:30:11 +05:30
• d7f047d2f6 test(sandbox): drive the lease-creation failure through the real builder Vasanthdev2004 2026-09-07 20:53:13 +05:30
• 3da7325349 fix(sandbox): publish creation ownership before the step that can fail Vasanthdev2004 2026-09-07 20:48:25 +05:30
• ec85bd5849 fix(sandbox): hold cleanup exclusivity across every mutation that needs it Vasanthdev2004 2026-09-07 20:41:18 +05:30
• 844ceafc18 test(tools,agent): make the guidance contract checkable off Windows fix/windows-tool-schema-budget Vasanthdev2004 2026-09-07 20:20:27 +05:30
• 03024756e9 fix(agent): stop the tool-schema ratchet meaning a different thing per host Vasanthdev2004 2026-09-07 19:31:50 +05:30
• aadb4a27e9 fix(specialist): keep the pinned model when a specialist is resumed (#1009) Vasanth T 2026-09-07 16:02:39 +05:30
• a6ec0435e3 feat(acp): surface safe browser tool metadata (#1000) KRATOS 2026-09-07 15:50:49 +05:30
• dba66b04fd fix(acp): address MCP review findings fix/998-mcp-tools-callable KRATOS 2026-09-07 12:58:21 +05:30
• 37d08e3833 test(sandbox): pin that a pre-existing lease file survives rollback Vasanthdev2004 2026-09-05 15:41:56 +05:30
• 0504fa790c fix(sandbox,cli): carry the lease creation ledger into setup compensation Vasanthdev2004 2026-09-05 15:41:28 +05:30
• ec86c77abc fix(sandbox): create the POSIX runtime tail through a no-follow boundary Vasanthdev2004 2026-09-05 15:28:34 +05:30
• bd031f0ec1 test(sandbox): record what the unprivileged reparse case cannot show Vasanthdev2004 2026-09-05 15:22:41 +05:30
• aaf681dec6 fix(sandbox): make both lease holders verify the same ordinary file Vasanthdev2004 2026-09-05 15:21:41 +05:30
• c4e7d8165a test(specialist): guard the fresh call site as well fix/specialist-resume-model Vasanthdev2004 2026-09-04 20:27:42 +05:30
• 7c66a504fa test(specialist): cover the resume call site, not just its builder Vasanthdev2004 2026-09-04 20:24:54 +05:30
• dab86d9adc fix(specialist): keep the pinned model when a specialist is resumed Vasanthdev2004 2026-09-04 20:22:31 +05:30
• b314301ff0 fix(sandbox): keep a recorded fallback authoritative across a TEMP change Vasanthdev2004 2026-09-04 14:47:38 +05:30
• 4315bec802 fix(sandbox): bind the stamp snapshot and the ACL apply to one object Vasanthdev2004 2026-09-04 14:44:22 +05:30
• ea56072536 test(sandbox): reproduce the lease junction race, not a pre-planted junction Vasanthdev2004 2026-09-04 14:40:03 +05:30
• 00573812b2 fix(sandbox): acquire the setup lease through the handle boundary too Vasanthdev2004 2026-09-04 14:38:17 +05:30
• 33d81a6a2b fix(acp): reject unsafe browser title text feat/acp-browser-session KRATOS 2026-09-03 18:59:41 +05:30
• 759133cdd3 test(sandbox): keep the SID helper from colliding with #886 fix/windows-denyread-world-sid Vasanthdev2004 2026-09-03 18:19:59 +05:30
• cf40b8680b fix(sandbox): take Everyone out of the restricted-SID list Vasanthdev2004 2026-09-03 18:17:48 +05:30
• 88dc53dd98 fix(sandbox): check the runtime root still carries its grant, not just its pathname Vasanthdev2004 2026-09-03 13:57:05 +05:30
• b203ad1201 fix(sandbox): validate runtime candidates before the elevated create, not after Vasanthdev2004 2026-09-03 13:52:44 +05:30
• e81ed96af3 fix(sandbox,cli): plan the grant and its guard together, and state the tier boundary Vasanthdev2004 2026-09-03 13:45:34 +05:30
• bcbdd65c18 fix(sandbox,doctor): fix the boundary each carried fact crosses Vasanthdev2004 2026-09-03 13:19:34 +05:30
• 9abf27e1d2 fix(acp): namespace browser metadata KRATOS 2026-09-02 13:35:28 +05:30
• 185619e056 fix(acp): register configured MCP tools per turn KRATOS 2026-09-02 13:33:39 +05:30
• 31da8a9abf fix(sandbox): resolve the temp dir physically before proving the fallback anchor Vasanthdev2004 2026-09-02 12:56:38 +05:30
• 8af05997e1 fix(sandbox): root the fallback runtime tree beneath a validated private anchor Vasanthdev2004 2026-09-02 12:36:42 +05:30
• fcedabf2ed fix(doctor): ask whether a command would still select the recorded root Vasanthdev2004 2026-09-02 12:21:40 +05:30
• 427e7161ee fix(sandbox): create the owned runtime tail from retained handles Vasanthdev2004 2026-09-02 12:20:37 +05:30
• 9a289b9c07 fix(sandbox): prove the runtime create and stamp records before mutating Vasanthdev2004 2026-08-31 14:46:43 +05:30
• b3c0ac91cf fix(sandbox): assemble rollback records from one object, not one name Vasanthdev2004 2026-08-29 14:13:24 +05:30
• 7fb33c381a fix(sandbox): carry the stamp reader across the elevation boundary Vasanthdev2004 2026-08-29 14:03:38 +05:30
• e7c23b3b92 fix(sandbox): treat only proven absence as a verified removal Vasanthdev2004 2026-08-29 13:50:11 +05:30
• c879333290 fix(sandbox): keep repair write when the reader is a repair identity Vasanthdev2004 2026-08-28 13:57:41 +05:30
• fbd6b47c64 test(sandbox): fail the rollback fixture on identity, not on a stale path Vasanthdev2004 2026-08-28 13:47:13 +05:30
• 8b63915ff1 fix(sandbox): mutate compensation targets through the verified handle Vasanthdev2004 2026-08-28 13:05:21 +05:30
• da85c67244 fix(sandbox): refuse compensation it cannot bind to this run's object Vasanthdev2004 2026-08-28 12:47:16 +05:30
• 5737cb3c8f fix(sandbox): grant the stamp to the identity that validates it Vasanthdev2004 2026-08-28 12:38:09 +05:30
• 4b2e10ad68 test(sandbox): give the lease tests the runtime root shape production uses Vasanthdev2004 2026-08-27 22:21:26 +05:30
• ddd236f045 fix(sandbox): hold the runtime lease through setup, and bind compensation to the object Vasanthdev2004 2026-08-27 22:04:56 +05:30
• 25075d0a09 fix(sandbox): one sandbox-home authority, and keep the tests out of the real cache Vasanthdev2004 2026-08-27 21:56:18 +05:30
• 9f34f4ab3e fix(sandbox): put the grant attestation on the launch gate, not in the marker Vasanthdev2004 2026-08-27 16:23:52 +05:30
• c965339908 fix(sandbox): attest the grant on both tiers, and roll back through one handle Vasanthdev2004 2026-08-27 16:00:41 +05:30
• fb96d065c0 fix(sandbox): attest the effective grant, not the presence of the SID Vasanthdev2004 2026-08-27 12:25:18 +05:30
• c73e47a025 fix(sandbox): recognise the user-scoped fallback as an owned runtime tail Vasanthdev2004 2026-08-27 12:21:36 +05:30
• 29795b49b1 fix(sandbox): make rollback prove it holds the object it changed Vasanthdev2004 2026-08-26 12:49:29 +05:30
• 072d3fe260 fix(sandbox): attest the object before trusting the applied-plan marker Vasanthdev2004 2026-08-26 12:19:15 +05:30
• b45b38d247 fix(sandbox): put the user boundary above every private fallback component Vasanthdev2004 2026-08-26 12:16:08 +05:30
• bff135a60e test(sandbox): compare the DACL's entries, not the descriptor's SDDL Vasanthdev2004 2026-08-24 17:36:32 +05:30
• e280f0ebdd fix(sandbox): make the ACL and its stamp one transaction, and fail setup without a runtime root Vasanthdev2004 2026-08-24 14:43:26 +05:30
• 63322d059e fix(sandbox): stop the sandbox rewriting the attestation about itself Vasanthdev2004 2026-08-23 01:03:39 +05:30
• b1166032f3 fix(sandbox): stamp the runtime tree through the handle that carries the ACE Vasanthdev2004 2026-08-22 13:02:17 +05:30
• 725967f85b fix(sandbox): stop building the runtime tree through a path other users can name Vasanthdev2004 2026-08-21 13:14:21 +05:30
• 62a835c2e0 fix(sandbox): record the runtime root, open it by handle, roll back completely Vasanthdev2004 2026-08-21 12:30:41 +05:30
• e3a65bca32 fix(sandbox): make the selected runtime root a setup-to-command contract, and refuse to provision through a link Vasanthdev2004 2026-08-20 17:37:41 +05:30
• 5fc455b726 fix(sandbox): roll back runtime roots a failed setup created, and keep the provisioning tests in owned storage Vasanthdev2004 2026-08-20 16:19:16 +05:30
• 1811e7b775 fix(sandbox): retry the final-path buffer whenever the size is not a success value Vasanthdev2004 2026-08-19 12:59:07 +05:30
• 851bf7b054 test(sandbox): alias the cache by its real spelling, not a stacked case alias Vasanthdev2004 2026-08-14 13:42:44 +05:30
• 3d5cdefbc9 fix(sandbox): decide runtime-root containment on physical paths, not spellings Vasanthdev2004 2026-08-14 13:35:07 +05:30
• b57d3e4abf test(sandbox): assert the case-folding contract only where it exists Vasanthdev2004 2026-08-14 12:48:54 +05:30
• d64cc67f9d fix(sandbox): name both plan hashes when the setup marker mismatches Vasanthdev2004 2026-08-14 12:40:12 +05:30
• 1b4f880cb6 test(sandbox): decide the alias skip by filesystem identity, not by the function under test Vasanthdev2004 2026-08-14 12:40:11 +05:30