Skip to content

What shipped

A ledger of what changed.

Every shipped release of the platform, newest first.

Audited end to endGitHub-native workflowExisting checks stay in controlCost visible per task

v4.149.0

Features

  • POST /v1/tasks/:id/redispatch re-drives a terminal coding task

v4.148.1

Bug Fixes

  • an epic whose last group lands transitions to done, by the system

v4.148.0

Features

  • zh.json part 1 — the funnel, 416 keys, unregistered
  • epic <id> prints stuck stage + last error; epics --stuck prints the funnel

Bug Fixes

  • the notification row becomes the idempotency ledger, so a redelivered job stops re-sending
  • registered env vars read through the registry, and a fail-open preflight gate
  • the session leash bounds silence, not elapsed time
  • a lost entity lock ends the session, and the leash guard loses its blind spots
  • re-plan a conversation objective whose task exhausts environmentally; the structural terminal reason wins
  • the CI lane admits before it owns, and a boot release purges the box subject

v4.147.1

Bug Fixes

  • one bounded drain, four callers

v4.147.0

Features

  • the catalog carries the CNY figures /zh will quote

v4.146.1

Bug Fixes

  • a mainland Zhipu or MiniMax key verifies against its own deployment
  • lift bun's 5s default on the fan-out s

v4.146.0

Features

  • a repo-local red-capable review check for owned repos

v4.145.0

Features

  • OG cards are generated and served per locale

v4.144.0

Features

  • the repo's own autofix runs once when every gate failure is mechanically fixable

Bug Fixes

  • correct instrument-check figures in delivery-benchmark and run-record
  • provider bodies, belt audit lines and run events leave the platform unredacted
  • a kept biome block carries the summary that settles it
  • credential-bearing egress follows announced endpoints, redirects and rebinding hosts
  • a read-only caller gets a vault-write link, runner pre-auth routes are unthrottled, release bodies skip disclosure
  • pin all 42 third-party actions to commit shas, with dependabot and a guard
  • the footer offers every other locale, not the first that differs
  • the sans stacks name a CJK family
  • sign the release manifest, and verify it before reading which binary to install
  • rotate the fleet signing key over the credential roll, and make security.md true
  • a grounding pass survives a 2xx whose body could not be read

v4.143.4

Bug Fixes

  • close the enqueue-audit gap on retry-after-throw

v4.143.3

Bug Fixes

  • one merge gate, two callers, so gh.prs.merge no longer merges past ten refusals the babysit egress enforces

v4.143.1

Bug Fixes

  • the stored policy is the parser's output, so the free-OSS auto-merge opt-in gate has never fired

v4.143.0

Features

  • the run record names the model that ANSWERED, and refuses one that contradicts what it declared

v4.142.1

Bug Fixes

  • a merged pull request records WHEN it merged, on both writers that settle it

v4.142.0

Features

  • onboarding runs an agent that proves the gate, asks for access once, and scores what it wrote
  • validate the babysit fix loop end to end
  • pace a cooling router pool at the claim gate, not by re-claiming into it
  • the benchmark page renders the absence of a result as carefully as it would render one
  • a recipe for splitting a dedicated box, and — the door a composed plan goes through
  • one ask, several repos, one ordered plan
  • the debugger, the reviewer and the scout become visible
  • a run provenance row says who funded it, not only who answered
  • the pre-registration is a state the page can render, and a run that drifts from it is refused
  • one arm recorded is a run in progress, not an artifact the page refuses
  • /pricing prices the payroll line the buyer actually has, not only other AI tools
  • the review footer names the box it ran on and prices OpenRouter models
  • a fleet PR body names the model, the box and the estimated cost of the run
  • a babysit fix round replies to and resolves the review threads it closed
  • merge waits on our own review threads, read by GraphQL, with a per-thread ladder

Bug Fixes

  • a fresh box enrolls correctly, and the fleet stops reading specs it no longer has
  • a repo with no commits onboards, and the onboarding wait stops being silent
  • a trailing GIT_SHA RUN per image, so a cached rebuild advances the config created
  • a stringified tool argument is repaired at both validation seams, and a rejected call is audited
  • drain the 400 the reasoning degrade discards, and correct its docblock
  • the X_OK case asks the repo tree, not os.tmpdir()
  • a customer's own key may serve any model it names, and a spent key stops pinning the account
  • the proof hero goes back to one column, and a test stops the redesign returning a third time
  • deep review resolves the repo's bin/check and grades exits by the verify partition
  • a terminal task must not leave the box holding its claim
  • the review-samples cases read the env the code reads, not an empty one
  • pace the rate-limit wall per account, type the janitor audit trail, close the claim race
  • the box runs the toolchain the repo pins, and says so when it cannot
  • run the repo's bin/setup before every team coding session
  • the team gate runs without the run's delivered repo secrets (CI parity)
  • an account is keyed by its numeric GitHub id, never its mutable login
  • the triage judge runs on the reasoning-suppressed classifier model
  • the account-identity guard stops grading paths git is told to ignore
  • every island renders the page's locale, so the Spanish catalog reaches a Spanish reader
  • the reviewer is told the file-size rule this repo enforces, not one nothing gates
  • one money convention per page, derived and authored alike
  • /proof stops scrolling sideways at 320px, in both locales
  • join deploy verdicts on the merge commit, not the branch head
  • a git CONNECT failure is transport, not auth, so a blip stops being terminal
  • a team-lane PR without PR.md gets a body composed from its manifest and gate
  • a review says each thing once — no repeated fold, no prose for zero-finding lenses, capped summaries
  • act once the PR has settled, in one combined fix round
  • the grounding pass holds the stall window over an in-flight request and counts every model step
  • a team run with a phantom declared path gets one repair round instead of losing the run
  • a biome-only red gate keeps the diagnostic header that names the failing file

Performance

  • prune excluded subtrees during the walk, and start the glob walk at the pattern's prefix

v4.141.0

Features

  • fail a PR whose repo-wide test-declaration count drops

v4.140.2

Bug Fixes

  • honour a refused output ceiling where the failing calls actually are

v4.140.1

Bug Fixes

  • root-anchor the untracked read (--full-name + doubles)
  • relax deployed-surface YELLOW for proven comments-only diffs

v4.140.0

Features

  • invite-only access, apply to allowed to signed in with seats
  • Alibaba as a provider, box add count under one enrolment lock, named org-budget refusal
  • the baseline probe row carries the duration-gap witness

Bug Fixes

  • one tree expansion in e2e-typechecked, not one per case
  • the bench's harvest and run artifacts land where git keeps them
  • the router's pool verdict outranks a member's spent wallet
  • a FAILED task keeps its box-condition errors
  • glob and grep see dot-directories, not credential dotfiles
  • the baseline-red probe runs the diff's scope, not the stashed tree's
  • re-ask once at the ceiling a provider names, instead of dying on it
  • close the credential gap dot:true opened
  • the baseline probe refuses a scope it cannot reproduce

v4.139.1

Bug Fixes

  • ensure-deps installs unconditionally — a present bin never proved a fresh tree

v4.139.0

Features

  • review-coverage eligibility read + close the three silent drop points

v4.138.7

Bug Fixes

  • a cancelled task leaves the failure-rate population

v4.138.5

Bug Fixes

  • one corpus sweep per whole-tree guard, hoisted out of the per-test ceiling

v4.138.4

Bug Fixes

  • grade each app against the release that built it, not one global sha
  • verify-live must not inherit a skip, so a roll is always settled

v4.138.3

Bug Fixes

  • dz-enroll reads the committed policy's content, so a contradictory repo refuses instead of certifying

v4.138.0

Features

  • the recipes reach merged, a bad argument teaches the fix, admins get a platform row, and every turn carries 16 KB less schema

v4.137.0

Features

  • every agent opens as one elite-engineer pilot, and the prompt cascade stops contradicting itself

v4.136.2

Performance

  • the dev box stops OOM-ing, the gate loses its 90 s tail, main stops re-testing proven trees, and releases rebuild only what changed

v4.136.1

Performance

  • the Playwright pole halves, the local gate stops waiting on a single-threaded tail, and a guard that read five sixths of the tree reads all of it

v4.136.0

Features

  • a managed repo can decline a PR, bump a manifest, sweep a quiet issue and see Dependabot's only CI signal