2026-07-22 - 2026-10-22
Overview
11 Releases published by 1 user
Published
v0.8.0
Published
v0.7.0
Published
v0.6.0
Published
v0.5.0
Published
v0.4.0
Published
archive/i3-prerebase-0c79618
Published
archive/i3-prerebase-dc47c10
Published
archive/i3-prerebase-b92eaca
Published
v0.3.0
Published
v0.2.0
Published
v0.1.0
240 Pull requests merged by 1 user
Merged
#247 Update Gitea endpoints after server migration
Merged
#246 Qualify the role permission version upsert and wait for the second HITL card
Merged
#245 Land agent-stack audit batch-2 on main
Merged
#241 Add isolated scratch sessions (no-project general-agent chats)
Merged
#244 Land the agent stack audit batch-1 fixes on main
Merged
#243 Complete the W9 host-audit surface per the approved requirement
Merged
#242 Close the W6 review MINOR findings
Merged
#240 Port the IAM permission-management API from the abandoned iam-perm-ux branch
Merged
#239 Require the caller's conversation when creating a surface
Merged
#238 Backfill and archive three merged task cards (#212, #226, #237)
Merged
#237 Fix run-status write-ordering race in ResolveHITL (U7 multi-instance flake)
Merged
#236 Tighten A01 final reserve and add final eval label
Merged
#235 Announce final-only on every material tool result
Merged
#234 Land the project access and lifecycle role and work-state work on Backend main
Merged
#233 Announce final-only in the material checkpoint tool result
Merged
#231 W6 X1 source recheck: trusted per-source re-authorization
Merged
#232 Tighten work-checkpoint evidence guidance and allow one eval correction
Merged
#230 Raise server e2e run-terminal wait windows for slow CI
Merged
#229 Fail the paid eval fast when the route contract is not attached
Merged
#228 Add read-only role options, a member roster directory and a removed-member send refusal
Merged
#227 Run the SQLite-only FTS deadlock step only on SQLite
Merged
#226 Wait for completed projections in flaky Backend tests
Merged
#225 Point agent-squad at the O2 nested agent-native pin
Merged
#224 Attach the O2 route contract to an exactly configured model route
Merged
#223 Fix shared retrieval deadlock, run start time and interrupted-run notice
Merged
#222 IAM U5-Backend integration-tests on top of U1+U3A
Merged
#221 Replace recovery proposals with administrator one-time passwords
Merged
#220 Make TestDSNFileMode independent of the process umask
Merged
#219 IAM U1 + U3A capability-association + capability-explanation
Merged
#218 Load the super-admin config in the product composition root
Merged
#216 Fall back to system-row Tavily secret and regulations KB in knowledge_search
Merged
#217 Merge the accepted super-admin changes into main
Merged
#193 Deliver reliable sourced material checkpoints
Merged
#215 Expose the regulations provider to the chat model as built-in read-only tools
Merged
#214 Replace schema-seeded role singletons during storage migration
Merged
#213 Add Backend role policy authority for IAM U4
Merged
#209 Integrate the shared document renderer and two-trees project work
Merged
#212 Add the EXT-20 shared regulations and web evidence extension point
Merged
#210 Port the U8 SQLite active-service guard onto current main
Merged
#211 Land admin password management and interpreter path fix pinned by Dev
Merged
#208 Adopt the shared governance kit (development-governance-v2)
Merged
#207 Pass exec environment paths through the product entry
Merged
#206 Add immutable layered Python environments
Merged
#205 Keep a newly seeded model key ahead of a stale secret
Merged
#204 Keep background work usable without blocking the conversation
Merged
#203 Send current-turn images and keep vision fallbacks capable
Merged
#201 Add compiled-plugin host defaults and CLI hooks
Merged
#202 Harden OOXML gate against reference-integrity breaks
Merged
#198 Add U3 account directory, lifecycle and self-recovery
Merged
#200 Vendor four permissive popular skills into the recipe library
Merged
#199 Expose persisted run events for process review
Merged
#197 Reject structurally broken OOXML at artifact registration
Merged
#185 Serialize account recovery and session admission
Merged
#195 Enable private member work in shared projects
Merged
#194 Bump embedded core pin to TS mirror fix 5773e74
Merged
#191 Add account name passthrough and EXT-19 account search
Merged
#192 Close the account lifecycle leftovers: atomicity, bootstrap lock, redeem guard, credential delivery
Merged
#190 Seed the mock startup option into the system settings scope
Merged
#189 Close invalid sessions SSE streams at heartbeat recheck
Merged
#188 Enforce system-managed settings scope with admin system settings API
Merged
#187 Harden login-key recovery flow with auth-version transactions
Merged
#186 Fall back to local artifacts when the blob store is a typed nil
Merged
#184 Open identity commands on an existing database only
Merged
#182 Fall back to AGENT_SYSTEM_DSN for identity CLI DSN delivery
Merged
#181 Add EXT-19 account lister host capability
Merged
#180 Publicize identity CLI as pkg/identity for downstream reuse
Merged
#177 Map background card failures to CardFailed with L1 body
Merged
#179 Consult resource-level authorizer on all shared read paths
Merged
#178 Add EXT-8b resource-level authorization contract
Merged
#176 Wait on CardDone and materialActive release in lifecycle test
Merged
#170 Add agent_system_identity DB marker (U1 I3)
Merged
#171 Add one-time login keys, restricted sessions, and OpenExisting
Merged
#174 Flatten surface action data into command params
Merged
#173 Guard nil confirm card in surface action dispatcher
Merged
#172 Keep auto-present reminders synchronous to avoid run races
Merged
#169 Drop runmgr import of genui to satisfy package boundaries
Merged
#168 Add Generative UI auto-present opt-in with budget and cooldown
Merged
#167 Whitelist B-class surface actions for help and intent
Merged
#166 Unwrap item-style spec wrappers, pair bare table cells, let subagents present pages
Merged
#164 Harden cross-instance HITL/cancel command paths and add disk-full rejection tests (U7)
Merged
#165 Declare admin-zone sections from compiled plugins (surface 2.9.0, WP3-I3)
Merged
#163 Add project-level surface aggregation and task-phase guidance (U6)
Merged
#162 List compiled plugins in /api/plugins (WP3-I4)
Merged
#161 Material-intake guaranteed loop: deterministic spawn, choice chain, queue, cardflow on (Dev task feature/material-intake-flow)
Merged
#160 Repair object-shaped children maps into arrays in page specs
Merged
#159 Add model identity and in-database vector top-k via pgvector (U6 slice 3)
Merged
#158 Add AdminProvider capability and HostProjectID context (EXT-18)
Merged
#157 Add same-transaction outbox, S3-compatible blobstore, and real-process acceptance (U5 remainder)
Merged
#156 Guide the model to present pages for page-like deliverables
Merged
#155 Add the surface action pipeline: ledger, guards, dispatch, submit (U5)
Merged
#154 Re-pin agent-system-core to 89f3906 to match Dev core
Merged
#153 Fall back to session cookie on stale Bearer key and report authVia
Merged
#152 Pin agent-system-core to 7a98a7e (align with Dev core)
Merged
#151 Add execution ownership leases with epoch fencing and persistent run commands (U5)
Merged
#150 Pin agent-system-core to 89f3906 (surface TS types and event union)
Merged
#149 Add the generative-ui plugin, capability gating, and surface projection
Merged
#148 Pin agent-system-core to the node-id fields merge (align with Dev core)
Merged
#147 Catch up event streams by cursor with real reconnect and periodic rescue (U6 slice 1)
Merged
#146 Pin agent-system-core to 7a98a7e (TS contract authority for node ids)
Merged
#145 Cover the surface tables in storage-migrate copy list
Merged
#144 Add the storage-migrate tool: inventory, backup, and identity-governed migration (U4)
Merged
#143 Add the Surface store, activation guard, and EXT-17 host capability
Merged
#142 Make notice redelivery iterative instead of self-recursive
Merged
#141 Add shared execution budgets and the action-authz matrix (U3 slice 2)
Merged
#140 Close request atomicity: locked message append, card versions, atomic rate limit, recovery holds (U3 slice 1)
Merged
#139 Retry transient SQLITE_BUSY at migration Begin and race on a materialized db
Merged
#138 Raise the SQLite busy timeout to 30s for serialized migrators
Merged
#137 Add the team PG tier, atomic migrations and the connection budget (U2)
Merged
#136 Remove the empty -ws shell directory after each apply
Merged
#135 Add the S0 task workspace overlay: frozen base, private upper, CAS apply
Merged
#134 Log R4 reminder injection for observable evidence
Merged
#133 Switch the R4 failure trigger to a sliding window
Merged
#132 Restrict the source tag to material reads; never tag the model's own files
Merged
#131 Add R4 escalation reminders and the structured source-id evidence ledger (E4)
Merged
#130 Add estimate-marking awareness and a second fact-check round (E3)
Merged
#129 Bump the agent-squad pin (E1 chain)
Merged
#128 Wire the dual-speed lane into the real run path: entry hint, escalating nudge, think-stripped cards
Merged
#127 Enable parallel tool execution, fix delegate truncation, sandbox deps layer (E1)
Merged
#126 Keep the final reply clean when checks continue or the verifier is skipped
Merged
#125 Make background subagents observable as the slow lane of dual-speed tasks
Merged
#124 Let in-proc plugins register the EXT-8 resource authorizer (fix rdm.* unknown-command)
Merged
#123 Narrow the blocking gate to hard facts and add fact-consistency checks (quality P5)
Merged
#122 Wire plugin slash aliases and the intent declaration surface (G2-2)
Merged
#121 Add the working-method prompt set and demote the compose rewrite (quality P4)
Merged
#120 Open kernel workspace tools and the markdown-source build pipeline (quality P3)
Merged
#118 Align the nested agent-squad pin with the Dev top-level pointer
Merged
#119 Add the EXT-16 exec backend interface: direct status quo and bwrap sandbox
Merged
#117 Point the agent-squad pin at the nested native-pin bump (Squad #49)
Merged
#116 Decouple runmgr from cmdbus via view types in CommandSource (EXT-14 lint fix)
Merged
#115 Make the kernel transcript the authoritative cross-turn context (quality P2-I2)
Merged
#114 Implement EXT-14: commands-as-tools dispatched through the command bus
Merged
#113 Implement EXT-13/15: shared retrieval inside runs and shared project listing/conversations
Merged
#112 Keep original materials and cleared results reachable across turns (quality P2-I1)
Merged
#111 Repair the quality-gate failure chain and add the live-model eval baseline
Merged
#110 Keep DOCX tracked-change/hyperlink text and add an exec hard switch
Merged
#109 Close the EXT-8 remaining blocks: vector sharing, hostapi face, citation consistency
Merged
#108 Wire the EXT-11 scoped-host factory through the composition root
Merged
#107 Implement shared knowledge retrieval, card mirror switch, and SSE project gate (EXT-8 slice 2)
Merged
#106 Implement EXT-9 idempotent knowledge publish and revoke with the upload index switch
Merged
#105 Consult the EXT-8 resource authorizer in artifact read paths
Merged
#103 Point the nested squad pin at the a2a adapter and pin alignment
Merged
#102 Add the task-level A/B dual-run harness with demo.brief evidence (Q3 WP5)
Merged
#101 Complete the delegation task brief with output format and tool sections (Q3 WP3)
Merged
#100 Retire the legacy workflow executor and switch squad steps to agent-native (Q3 WP2)
Merged
#99 Add the WorkflowDef-to-squad compiler with host intent steps (Q3 WP1)
Merged
#98 Point the nested squad pin at the Q2 topology library completion
Merged
#97 Point the nested core pin at the TypeScript contract authority update
Merged
#96 Split usage accounting end to end, retry by default, and take the WP6 pins (N3 WP6)
Merged
#95 Wire the memory port: store-backed adapter, loop injection, migration parity (N3 WP5)
Merged
#94 Take the checkpoint closure: retention on rewind, HTTP tests, eligibility pin (N3 WP3)
Merged
#93 Wire GenAI telemetry: settings surface, service name, and agent names (N3 WP4)
Merged
#92 Give conversation runs the intent journal via JournalOnly sessions (N3 WP2)
Merged
#91 Resume gracefully-interrupted subagents and take the RunState repair pins (N3 WP1)
Merged
#90 Give subagents per-run transcripts, resume, persisted notices, and the Background request field (N2 WP5)
Merged
#89 Validate plugin and bundled skills against the open spec (N2 WP4)
Merged
#88 Point the nested native and squad pins at the MCP 2026-07-28 work
Merged
#87 Point the nested native and squad pins at the Anthropic client work
Merged
#86 Align context trimming to tool groups and take the N2 WP1 pins
Merged
#85 Point the nested squad and native pins at the CWD-clean fix
Merged
#84 Point the nested squad and native pins at the I2 cascade
Merged
#83 Wire the intent slow lane behind settings flags (I2 WP3)
Merged
#82 Point the nested agent-squad pin at the SQLite convergence
Merged
#81 Point the nested agent-squad pin at the Store and termination work
Merged
#80 Point the nested agent-squad pin at the attempt-id recovery
Merged
#79 Point the nested agent-squad pin at the superstep engine
Merged
#78 Point the nested agent-squad pin at the native-archive cascade head
Merged
#77 Point the nested pins at the eval-v2 combination
Merged
#76 Project the command types through the intent gate surface
Merged
#75 Point the nested pins at the I1 router combination
Merged
#74 Unify intent routing behind the route package and enable NFKC (I1 WP3/WP4)
Merged
#73 Point the nested agent-squad pin at the WP5 cascade head
Merged
#72 Consume the sunk gate mechanics and pin the WP5 library (N1 WP5/WP6)
Merged
#71 Validate plugin agent declarations and wire the squad ask port (N1 WP1/WP4)
Merged
#70 Point the nested agent-squad pin at the cascaded N1 combination
Merged
#69 Wire the permission ask port to HITL and adopt the Policy object (N1 WP2/WP3)
Merged
#68 Skip wide sparse columns without dropping later xlsx sheets
Merged
#67 Expose builtin document parsing through the host handle
Merged
#66 Merge EXT-1 inproc plugin command handler into main
Merged
#62 Make boolean column reads and writes work on both storage tiers
Merged
#65 Bind archived filter as bool in ListTasks
Merged
#64 Bind booleans as bool for the postgres dialect in auth and conversations
Merged
#63 Store secrets apart from settings and guard open listeners
Merged
#61 Expand dotted setting keys and mask secret pools
Merged
#60 Run tool scripts through the shared host and keep orchestration off
Merged
#59 Rewind tracked files and fall back before the first token
Merged
#58 Gate tools by session mode and show confirmation details
Merged
#57 Send an SSE retry interval and replay after overflow
Merged
#56 Cap tool results by character and gate stale file writes
Merged
#55 Retry direct model calls before the first delta
Merged
#54 Replay an open run from its first event
Merged
#53 Recover interrupted runs and commit terminal state once
Merged
#52 Wire the squad native adapter
Merged
#51 Pin the three agent libraries to their R2 heads
Merged
#50 Align library pins with the stack repair commits
Merged
#49 Compose a separate final reply after the work loop
Merged
#48 Stream tool progress and drop hard agent limits
Merged
#47 Execute intent, planned, and script workflows
Merged
#46 Let subagents run in the background and be reviewed
Merged
#45 Run subagents through a depth-one tool loop
Merged
#44 Check final replies before the direct run stops
Merged
#43 Run direct chat through the native turn loop
Merged
#42 Replay tool calls natively and tighten the deliverable gate
Merged
#41 Add the public extension surface and platform services
Merged
#40 Upgrade Agent-Native and Agent-Squad dependencies
Merged
#39 Add the deliverable quality system and a squad entry
Merged
#38 Add professional standards for every agent deliverable
Merged
#37 Record tool time and reject false file claims
Merged
#36 Complete the B10 assembly: MCP config, subagent bridge, explicit roles, and skill-borne recipes
Merged
#35 Wire the agent-native kernel factory into squad runs and pin full-agent deps
Merged
#34 Reject pseudo-binary Office writes and index extracted text
Merged
#33 Add run_shell and run_python interpreter executors
Merged
#32 Return deliverable generation to the agent and fix the artifact-card root cause
Merged
#31 Generate styled Word deliverables and pin artifact cards in chat
Merged
#30 Land project inbox: aggregation, archive-to-project, project SSE (CF3)
Merged
#29 Unify artifact context backfill and facade cards (CF-A)
Merged
#28 Add streaming card tools (card_begin/card_append/card_commit)
Merged
#26 Add url-preview endpoint and gated sandboxed fs tool family
Merged
#25 Bump x/crypto to v0.56.0 to clear module-level advisories
Merged
#24 Add submit_card explicit routing with card-as-authority and context backfill (CF1)
Merged
#23 Bump pgx and x/text past reachable security advisories
Merged
#22 Validate object ids in the local blobstore to block path traversal
Merged
#21 Agent-System-Backend: review fixes for chat-process-split-r1 (symlink, live interleaving, artifact process)
Merged
#20 Record Gitea access facts in AGENTS.md
Merged
#19 Add download semantics and extension MIME fallback to artifact content
Merged
#18 Add layered cross-session reading with gated peer tools
Merged
#17 Admin-issued accounts with forced first-login password change (R2)
Merged
#16 feature/tavily-search-tool
Merged
#14 feature/prompt-catalog-coverage
Merged
#15 Task list APIs with pin/archive flags and /api/me (R1)
Merged
#13 feature/prompt-library
Merged
#12 feature/chat-live-quality: live streaming bubble, markdown spacing, document-task quality
Merged
#11 Load plugin workspace declarations and expose GET /api/workspaces (T4)
Merged
#10 Add cmdbus: registry-driven command dispatch with audit and inline confirm (T3)
Merged
#9 Return persisted receipt message from card action
Merged
#8 Add inbox activity cards: cardsvc, store, events, API and producers
Merged
#7 Bump nested provider pins: core contracts T1, agent-command v0
Merged
#6 Wire Agent-Command as nested dependency
Merged
#4 Add the startup configuration pipe with file and env layers plus explain
Merged
#2 Serialize empty store lists as JSON arrays and advance the core pin
Merged
#1 Adopt the task-startup gate and commit format in AGENTS.md