-
Notifications
You must be signed in to change notification settings - Fork 3.6k
v0.10.1 integration: land the ready PRs together #6672
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Changes from all commits
Commits
Show all changes
227 commits
Select commit
Hold shift + click to select a range
2f6c9bd
fix(auth): compare runtime tokens in constant time through one helper
e3a218e
fix(cli): `codewhale logout` asks before deleting every provider key
ecdc840
fix(approval): session shell grants fail closed on compound, wrapper …
d0e3158
fix(notes): keep the auto-approved note tool inside the workspace
c1d3f19
fix(approval): report an expired approval as a timeout and refund its…
294b616
fix(skills): project skills load only in a trusted workspace
9253eff
fix(commands): workspace commands need trust and never replace protec…
000ab6b
fix(security): redact tool output as it enters the transcript; doctor…
133a8a2
fix(notes): flush the appended note before reporting success
4c37623
chore(deps): bump actions/setup-python from 6 to 7
dependabot[bot] 1f07587
fix(security): mask tool metadata and compact JSON; scrub under the s…
a8755ae
fix(trust): grants key code-running options; /note stays in the works…
9666486
Merge origin/main into fix/broken-now-and-trust
8ce605a
Merge branch 'main' into dependabot/github_actions/actions/setup-pyth…
Hmbown b29ed34
Merge origin/main into fix/broken-now-and-trust
378b376
Merge pull request #6595 from Hmbown/dependabot/github_actions/action…
Hmbown 0c5dc98
Merge origin/main into fix/broken-now-and-trust; fix PR #6601 CI
cbfbcb6
fix(catalog): upstream-keyed canonical entries join offline (#6396 sl…
5be47bc
revert: drop the session-grant key and /note path changes from a8755ae00
565b8dc
revert: drop the notes path change from d0e31586a
cb268d5
revert: drop the session-grant key change from ecdc8405b
3df5c6c
Merge remote-tracking branch 'origin/main' into fix/broken-now-and-trust
f53a1aa
fix(ci): trusted runtime-contract fixture, scrub counts from the read…
2ab4abf
Merge remote-tracking branch 'origin/main' into fix/broken-now-and-trust
0be8f10
fix(catalog): Codewhale corrections hold online, not only offline (#6…
659811e
merge: #6618 and #6620 (corrections) into #6612's branch
b7e09ab
fix(catalog): reasoning controls Codewhale records hold online too (#…
989af6e
merge: #6620 reasoning corrections into #6612's branch
d333c33
fix(catalog): keep hosted DeepSeek on the reviewed price table (#6396)
45b1d5a
merge: #6620 hosted DeepSeek and grok-4.3 corrections into #6612's br…
43e3cb0
fix(catalog): keep GLM-5.3 unpriced on the Coding Plan route (#6396)
2cd1bbc
merge: #6620 GLM-5.3 hold into #6612's branch
6227825
feat(catalog): generate the offline seed from a reviewed spec and a l…
cd5e643
fix(catalog): regenerate the offline seed from Models.dev (#6396)
ac7881c
docs(config): keep model_bound paragraphs under their own section
fbd0caa
fix(pricing): GPT-5.6 Sol table matches OpenAI's current rates (#6396)
e021222
Merge origin/main into fix/broken-now-and-trust
9ddf26b
fix(tui): a fork continues when a turn lost its tool call
gaord 45017fa
test(tui): isolate full-suite approval and policy fixtures
a21fc86
fix(hooks): pass the tool exit code to Runtime API tool_call_after
e8e0d4e
fix(hooks): give hooks the exit code and status of failing bash commands
0d68bb9
runtime_api: end every server-initiated thread stream with stream.end
Hmbown 8d3c1b7
mobile: keep reconnecting through an unreachable Runtime; back off re…
Hmbown ebe0d94
runtime_api: optional preconditions on git stage/unstage/discard/commit
Hmbown 6c86c21
fix(runtime): threads own the restore points on their turns; undo res…
a495e1b
fix(runtime): bound undo to the turn's own tool spans; keep its resto…
dfc60b6
fix(provider): show bundled descriptors' console, docs and guidance; …
14d24fd
fix(sessions): stop orphaning sessions at their writers and repair ex…
dfb9a81
fix(sessions): keep export off the source session, reuse only full-co…
68e544c
fix(sessions): move held Runtime stores entry by entry so Windows can…
cf42682
fix(sessions): hold a Runtime store's lock through its whole set-asid…
abca3fa
fix(tui): the dock's GIT, FILES and NOTES views are real, on one git …
ff7e4e0
fix(compaction): write the handoff note in our own words and keep it …
0bea70e
fix(compaction): make the handoff header say what is actually kept
783d599
fix(catalog): Codewhale corrections hold online, not only offline (#6…
72c179e
fix(catalog): reasoning controls Codewhale records hold online too (#…
d1ac549
fix(catalog): keep hosted DeepSeek on the reviewed price table (#6396)
56941d8
fix(catalog): keep GLM-5.3 unpriced on the Coding Plan route (#6396)
3e39820
fix(tools): one recoverable size budget for tool output (#6508)
380df06
fix(tools): delete the per-tool output caps in run_tests, git and ver…
85f884d
fix(search): native search answers are no longer capped at 2-4K token…
1a59a3f
fix(verifier): keep the end of long gate output and save the whole st…
a3b5e06
docs(changelog): tool output is no longer cut off where it can't be r…
9c7a2d6
fix(search): give native search time to generate the answer it asks f…
fb7227d
test(tui): update /cache inspect budget test for the 100k wire backst…
1cdaeac
fix(audit): write Auto-Review verdicts and network audits to audit.log
9150949
feat(receipts): list what a session did, from the records it already …
c515689
wip: unfinished review fix-up (interrupted by the session usage limit)
6890e1b
fix(receipts): report blocked calls as blocked, list shell file chang…
536a137
fix(receipts): only Codewhale's own words mark a call blocked; escape…
76aeeb3
runtime: record typed artifact refs on tool-call items
Hmbown 465e485
runtime: settle each turn's workspace delta into its artifact aggregate
Hmbown 153ca69
runtime_api: read turn artifacts by reference through one shared reso…
Hmbown 392933a
docs: document turn artifacts; confine file refs without blocking the…
Hmbown 8580b0e
fix(execpolicy): judge read-only chains segment by segment and name t…
471d936
fix(fleet): one read-only shell authority with actionable, counted re…
c60ac29
fix(subagent): a queued agent that never starts says so; its work clo…
c057499
docs(fleet): read-only shell grammar, refusals and launch clock (#6015)
83eba45
fix(execpolicy): judge gh and npm view reads after a leading cd (#6015)
0c4b542
fix(subagent): save the launch-restarted deadline to the worker recor…
1ef3fdb
test(subagent): gate the readonly_shell_6015 git helper to unix (#6015)
fe925cf
test(tui): capture honest website terminal frames from a home-relativ…
049f6ba
web: render real PTY captures as live text; README image from the sam…
4814029
web: keep the whale-road look, restore the old site's strengths
9359897
docs(readme): restamp translations for the new terminal image
e22c862
refactor(rlm): delete dead run_rlm_turn / run_rlm_turn_with_root entr…
4f3f07d
fix(tui): mobile shows agent progress; sub-agent cache counts in sess…
a6222e6
fix(tui): background work tells you when it ends, and how
364f037
fix(tui): keep the sub-agent idle clock out of serialized listings
da2e8b4
fix(tui): no false quiet, no double notice, no stale task holding it
ff10c26
fix(snapshot): hash the work-tree file by a path Git for Windows can …
7a5d88e
fix(runtime_web): register turn.artifacts; wait for the event in the …
11ed3a2
Merge remote-tracking branch 'origin/main' into fix/broken-now-and-trust
708c6f1
Merge remote-tracking branch 'origin/main' into fix/runtime-hook-exit…
bd41838
Merge remote-tracking branch 'origin/fix/6396-catalog-corrections' in…
821849f
fix(tui): every Ctrl+T press changes the effective thinking tier (#6650)
77eb570
Merge branch 'main' into fix/fork-rebuild-lost-tool-call
Hmbown 19a4f8a
Merge branch 'main' into fix/6665-linux-full-gate
Hmbown 0184909
fix(tui): scrolling a long transcript no longer re-flattens its tail …
4a3bd8a
fix(tui): hide the composer caret while another view covers it (#6545)
0afa6c7
test(runtime): build the undo fixture's legacy credentials with with_…
95823d2
fix(approval): scope session shell grants to the command they were gi…
ead5f74
fix(tasks): delegated tasks and automations run with no more authorit…
1c6d71d
test(sessions): build the reconcile fixture's credentials with with_l…
b757b52
test(fleet): build the scout fixtures' credentials with with_legacy_root
89ff627
fix(tui): start model-run child processes from the scrubbed environment
e7deca4
fix(receipts): keep the runtime -> UI ratchet flat
67d84ee
Merge PR #6643 (fix/aicraft-descriptor-6616) into integrate/0.10.1
d02061c
Merge PR #6638 (fix/6565-mobile-cache) into integrate/0.10.1
490f4fc
Merge PR #6636 (fix/6565-dock-views) into integrate/0.10.1
54a11b5
Merge PR #6622 (feat/original-compaction-handoff) into integrate/0.10.1
6ee7926
Merge PR #6620 (fix/6396-catalog-corrections) into integrate/0.10.1
737e8b9
Merge PR #6612 (ms2-6396-seed-regen) into integrate/0.10.1
c2539e6
Merge PR #6619 (fix/6508-one-tool-output-budget) into integrate/0.10.1
2727c5d
Merge PR #6613 (site/whale-road-merge) into integrate/0.10.1
b753aa5
Merge PR #6611 (ms-6511-rlm-dead-entry) into integrate/0.10.1
6f9dc5d
fix(approval): tighten shell family grants, stored automation authori…
a12cbc6
docs(runtime-api): describe the narrower shell grant rule and delegat…
52b1c10
fix(tui): scrub env for git, language servers and runtimes; keep buil…
60a2c98
fix(runtime): address stream-end client review findings
0431788
fix(tui): preserve background completion receipts and privacy
0a948e4
fix(runtime): harden git write precondition fingerprints
e49285d
fix(tui): gate inline repl fences like code_execution
6b40549
fix(shell): kill managed background shells when the TUI dies (#6654)
9b926b7
fix(trust): mask configured secrets in runtime receipts, honest docto…
74ec2e4
fix(tui): admit repl fences through the code_execution planning path
f489f74
fix(shell): stop a background shell's whole process group when the TU…
b7abbe2
fix(execpolicy): fail closed on run-time command words and tighten pr…
4d084eb
fix(tui): harden MCP server approvals, shell denial and tool-call retry
9e3ab34
test(tui): follow #6612's GLM-5.3 effort ladder in the Auto dispatch …
3a9e4d8
fix(runtime): harden browser sessions and tool trust boundaries
c013203
fix: preserve state and report audit failures
0b76063
fix(execpolicy): close remaining gaps in shell parsing for deny rules
b25ff32
fix(tui): replay MCP tool calls only on a typed session refusal
a85ad10
fix(subagent): keep sub-agent worktrees under their root and harden w…
7fa8d44
fix(workflow): refuse fleet and router names that leave their directory
d87f4c3
fix(tools): apply the read guards to pandoc_convert and image_ocr
433bae9
fix(computer-use): keep capture output paths in the recordings directory
68d1377
docs(changelog): note path containment hardening for v0.10.1
92a44ba
fix(skills): validate registry keys before using them as cache direct…
309f329
fix(tasks): stop idle workers polling the shared task store (#6573)
453171a
fix(tasks): fingerprint only the task queue for idle claims (#6573)
442397c
fix(tools): name the pandoc version --sandbox needs and pin the flag …
7eddbe5
fix(computer-use): one recordings directory and backend-level capture…
9226111
fix(tui): dedupe the Ctrl+T ladder by the tier receipts report
a10ef1c
fix(tui): repaint the scroll hint in place while a reply streams (#6652)
6fae324
fix: harden project config, repository reads, fetch refspecs and down…
e449c21
fix: keep blame, working-tree reads and fetch tags from running repo …
1bc01b6
chore(ci): lock in dead-code budget at 260 (was 273)
6ac8a66
fix(tui): correct git, cache, restored output and file activity
3cf3358
fix(tui): clear clippy -D warnings on background digest branch
97b3cd9
fix(tui): drop eprintln! skip messages from env-scrub tests (clippy)
bc102d0
test(runtime): prove unbound threads keep one engine session id (#6659)
fad53fa
fix(runtime): preserve browser recovery and SSH compatibility
94a3c69
fix(runtime): satisfy clippy cloned_ref_to_slice_refs in git precondi…
31376a4
test(tui): build repl-fence auto-review policy via config, not tui::
0a27090
fix(subagent): compare worktree paths in one form on Windows
d94d261
test(commands): count /receipts in the debug group ownership pin
03f22c1
fix(tui): correct trust scope and legacy credential cleanup
1702eec
fix(tui): scope /undo to the paths the undone step changed (#6644)
97ca2b6
fix(tui): scope completion receipts to fresh background work
b36eb3c
chore(scrub): record session_secret_scrub's blocking fs sites in the …
f96f2dd
fix(tui): preserve tool output and complete cache and file accounting
7dc1c4f
fix: complete logout revocation and enforce audit safeguards
29faeaa
fix(tui): /undo waits for the post-turn snapshot and skips non-regula…
34ef01a
merge: stack turn artifacts on #6645's thread snapshot ownership
8b8f187
fix(runtime): keep git status best-effort with fail-closed guards
f16a5f6
Merge PR #6645 (fix/6621-thread-snapshot-ownership) into integrate/0.…
751d44a
Merge PR #6682 (fix/6644-tui-undo-path-scoped) into integrate/0.10.1
01b1eee
Merge PR #6660 (feat/turn-artifacts) into integrate/0.10.1
763c675
Merge PR #6640 (fix/6144-session-orphans) into integrate/0.10.1
11081ba
Merge PR #6649 (fix/runtime-stream-end) into integrate/0.10.1
0ce7fda
Merge PR #6648 (feat/git-write-preconditions) into integrate/0.10.1
5523643
Merge PR #6637 (fix/6015-readonly-shell) into integrate/0.10.1
53e13fe
Merge PR #6635 (fix/6565-background-digest) into integrate/0.10.1
68a84a3
Merge PR #6601 (fix/broken-now-and-trust) into integrate/0.10.1
8e6d434
Merge PR #6591 (feat/session-receipts) into integrate/0.10.1
d1abb9f
Merge PR #6656 (fix/runtime-hook-exit-code) into integrate/0.10.1
a0d3243
Merge PR #6667 (fix/6650-ctrl-t-effort-cycle) into integrate/0.10.1
b284f17
Merge PR #6668 (fix/6652-transcript-scroll-cost) into integrate/0.10.1
f5afce8
Merge PR #6669 (fix/6545-hidden-composer-cursor) into integrate/0.10.1
b733ba3
Merge PR #6670 (fix/task-and-grant-approval-scope) into integrate/0.10.1
967023c
Merge PR #6671 (fix/child-env-scrub) into integrate/0.10.1
4066dfe
Merge PR #6673 (fix/repl-fence-gate) into integrate/0.10.1
1999f63
Merge PR #6674 (fix/6654-background-shell-parent-death) into integrat…
aa5f726
Merge PR #6675 (fix/shell-policy-parsing) into integrate/0.10.1
bab13c1
Merge PR #6676 (fix/mcp-server-approval-and-replay) into integrate/0.…
79fe720
Merge PR #6677 (fix/6573-task-store-idle-spin) into integrate/0.10.1
863f501
Merge PR #6678 (fix/path-containment) into integrate/0.10.1
e0f0e87
Merge PR #6679 (fix/project-config-and-fetch-hardening) into integrat…
7b33fd8
fix(rlm): bound recursive turns by the child wall-clock budget
a7a3e3b
Merge PR #6680 (fix/audit-quick-wins) into integrate/0.10.1
c7834fa
fix(runtime): expose replay progress and enforce SDK type checks
c48b50f
Merge PR #6681 (fix/runtime-surface-hardening) into integrate/0.10.1
2d63c86
Merge PR #6664 (fix/fork-rebuild-lost-tool-call) into integrate/0.10.1
89a456b
Merge PR #6666 (fix/6665-linux-full-gate) into integrate/0.10.1
9ded781
fix(tui): confine workspace context, note and anchor file access
983bcf2
fix(integrate): compile and gate fixes after the round-2 merges
68a8c93
fix(integrate): address Codex review of the round-2 merge resolutions
25d27d8
fix: address catalog and TUI review regressions
705fe81
Merge PR #6649 (fix/runtime-stream-end) into integrate/0.10.1
4e63e64
Merge PR #6684 (fix/6511-rlm-wall-clock) into integrate/0.10.1
1db50bc
fix(tui): keep longer reasoning labels in the footer
e60e38f
Merge PR #6685 (fix/confined-workspace-reads) into integrate/0.10.1
b6e14bd
Merge PR #6686 (fix/footer-xhigh-label) into integrate/0.10.1
f1c7f69
fix(tui): keep configured routes during first-run discovery
f45d1df
Merge PR #6687 (fix/first-run-keeps-configured-provider) into integra…
eba1d7a
fix(tui): keep first-launch discovery for generated configs; honor en…
2a843ad
fix(tools): fit the Git and revert_turn schema text back under budget
ebcbe8a
ci: classify docs/zh_hans/FLEET.md as a Rust input
e4c94c8
chore(scripts): name the catalog field scrubber for what it strips
de522ec
fix(tui): acknowledge configured first-run routes
2412a6e
fix(pricing): price OpenRouter turns from the lake and declared rates
d0b42c2
fix(exec): read the prompt from --prompt-file or stdin (#6688)
1394c29
fix(provider): keep a root default model with the provider that owns it
002bbe9
docs(changelog): link the provider-switch fix to its PR
77c1523
Merge PR #6694 (fix/first-run-configured-route-skips-picker) into int…
79d9815
fix(pricing): keep the OpenRouter roster when one row is bad
eb48db7
fix(provider): clear the shadowed legacy root model with the root def…
9a775fb
fix(exec): keep a positional `-` prompt literal; test the exec dispat…
3a4b961
Merge PR #6691 (fix/6690-openrouter-session-cost) into integrate/0.10.1
da90fd2
Merge PR #6692 (fix/6688-exec-prompt-stdin) into integrate/0.10.1
aaaadfe
Merge PR #6693 (fix/provider-switch-keeps-configured-model) into inte…
3ce6721
fix(tui): clear launch missing-key state when a provider switch lands…
776e3fe
Merge PR #6696 (fix/first-run-configured-route-e2e) into integrate/0.…
fa7ec4c
fix(tui): skip ambiguous OpenRouter rows; align first-run test with #…
2ea4858
test(fleet): read the documented SSH worker example with CRLF normalized
File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🔍 Changelog entries land before the merge
The repository workflow reserves changelog edits for
mainafter merging. This integration carries both changelogs; confirm the release process explicitly permits that exception.Was this helpful? React with 👍 or 👎 to provide feedback.