Changelog · latest 5 releases
- ● v0.52.0 · 2026-07-03
background work you can read at a glance — every tool now says what it does: delegate a task in-chat, fan out parallel analysis, queue a judged deliverable, schedule an agent.
self-describing background-work tool names: delegate.task (in-chat helper), fanout.* (parallel analysis), queue.* (durable deliverable) — was agent.delegate/workflow.*/work.*
- v0.51.0 · 2026-07-02
memory that quotes you accurately: anti-distortion prompts across the whole pipeline — measured, utility +11pt, noise 8→1 (internal A/B).
anti-distortion memory prompts (measured A/B: utility +11pt, noise 8→1) + extractor hardening + --redistill-empty
- v0.50.0 · 2026-07-02
session import now skips throwaway sessions and tells you why a distill failed; one global default model.
import: skip /tmp bench junk + headless --distill with failure causes; one global default model
- v0.49.0 · 2026-07-02
security audit follow-up — 25 of 30 findings closed: gateway takeover hardening, toolpack shadow-guard, response caps.
security audit follow-up: 25/30 findings closed — gateway takeover hardening, toolpack shadow-guard, response body caps + command expiry
- v0.48.0 · 2026-07-02
whole-repo security audit: 4 high + 12 medium fixes, from readonly-mode bypass to honest cost accounting.
whole-repo security audit: 4 high + 12 medium fixes — readonly-mode bypass, forbidden-tool bypass, unicode smuggling, honest cost accounting