Changelog
- 05d7e8570ac4d85ad733e26c690c4788a0dfefab Fix Copilot summary output (#392)
- 2f27630d2652f8b3783d670651c90920a58f68f7 Recover dev build context from MCP parent (#393)
- 71ea72385194af6ee8c64ab86e905a8fd2bebb74 Reject circular verifier intent evidence (#394)
- 8b783ef12520cdd6ba65d1bd54c73be5721f1645 Rework public docs and CI workflows (#395)
- eea5f6c04bd5586cc576f9a7d272b7eb7d2995be chore(browser): remove unused Manager.ResetDiscovered (#352)
- ac14a2e529835bb8463064db195a02e5c290b30d chore(cli): claude default agent, hide agent-only wait, trim/clarify help list (#379)
- 68489a04eadf8bb6af7cf496ec4dd7c2503a5dc1 chore(cli): tidy customer-facing help — hide collect, clarify descriptions (#362)
- 8ba3251401d9c2632de02582dba93a81d8c6e69c cleanup: find/fix accept space-form flags + retire orphaned ForceHeadless (#376)
- d6bab5c6a5c3db0047c6a72ef7fad602f4cc1782 feat(agentboot): --discovery flag flips the container to discovery mode (#343)
- 5809fc34f79d7856f1d4be508974b35eed08825a feat(brain): Cartographer session definition (niro draft scope) (#336)
- 0d11f5a4f5a8ea507079a0a1507bf4b0d06a1c56 feat(brain): RunCartographer — start the discovery browse (#340)
- d3698494bcd6b01a88d20c48a0117b76dbe601d6 feat(browser): discovered_hosts tool — harvest the browse's host set (#331)
- 75df3d806242cb3e925e9ea83886dbd66f270c90 feat(browser): host:port tap for
niro draft scope(#329) - 55caf9f34deed210d5418ddf5f47fe80d750490b feat(cartographer): A5 — on-app boundary keeps the browse from wandering (#353)
- 78fa6de72cb29841fe4b55c90534a3a8fbf1dbe6 feat(ci): PR-scoped find comments via GITHUB_TOKEN + example workflow matrix (#375)
- 01bf3a5636311067a9b4fd220fae1dde95fd76c7 feat(ci): run
niro ci find|fixlocally with full CI parity (#364) - 835e75fa42abc010fb37da7287288c2cbf1a804c feat(cli): add
niro findandniro fixturnkey pentest commands (#370) - ef7c91652d7a6d87c7d02f16a3912aed30be9fbe feat(cli): default find/fix to a whole-app run when no scope is given (#377)
- 33dc8e33eac2230283d8c4c4d80565b89945826f feat(cli): niro draft scope — make draft-scope runnable end to end (#351)
- 791612e828efb2fedd59bc24e75c463aa46fd1c3 feat(cli): scope modes for find/fix — pr / range / directed (#371)
- 9b921a6cacc8bdf45d2463febdc3d16a33949cc2 feat(draft-scope): agent-decides browse end — drop the plateau heuristic (#354)
- 056c2f0fbf2087b03804bba33e73a3b945ea3355 feat(draft-scope): draft inherits the scope.yaml template verbatim (#359)
- f3241cbf9aaccc5af4c9facffa40fdc7330a1b1e feat(draft-scope): draft_scope MCP tool — map an app, write a scope draft (#356)
- 08a142170c0513e89ad443707621e31dbf2f1037 feat(draft-scope): float the target's own domain to the top of the draft (#361)
- 05c683b0385ce29f7580beed28e54b6755b6f515 feat(draft-scope): structured logging so failed runs are diagnosable (#360)
- 9496c9bdcdcffbff072b020cb43e0e6e9dbb83e3 feat(draftscope): Assemble — harvested host:port set → scope.draft.yaml (#342)
- 99b87ff73218d7d6b9e8f7c242296748f878f9d3 feat(draftscope): two-faces emitter for scope.draft.yaml (#325)
- 751cdb5f123d802dd2e4e6305622d409f819eb97 feat(firewall,dnsresolver): DiscoveryMode egress for
niro draft scope(#326) - b134a03f17986e7694c8b851fe3ed0e2a44d1e9c feat(forge): add GitLab driver and CI provider at GitHub parity (#389)
- e32ccd2a0da3d24ace876c2d2e382856901a7242 feat(orchestrator): AgentClient.DiscoveredHosts — host-side harvest/poll (#345)
- 09e8ed0c55ebb64781727e4186ea3406e6ffa15d feat(orchestrator): RunDiscover — wire the end-to-end draft-scope run (#348)
- 453fa5c36dd5661e504dc7f4c079f08d16f1e6dc feat(orchestrator): runBrowseLoop — plateau/timeout/partial coordination (#346)
- 3420c826e4d5500167cda60d80e62b8fc6ed9ce1 feat(orchestrator): skip dev-only drafts from the Vector fan-out (#339)
- bb2bd0fdb228a6d59ad71c384b6f8e39996e4f6d feat(orchestrator): withhold dev-only findings from caller-facing surfaces (#341)
- 24dac14dcbf2752549297f5a6e5925f44e5e152a feat(prompts): activate dev-posture classification for the reasoners (#344)
- 209002a1819de1c9719ef9d314c95b4574f301b1 feat(testcase): Vector + Counsel dev-posture correction path (#332)
- afb2798f2f2db30a750b3c4c357c8f52ddee672c feat(testcase): drafting setter for holds_only_in_dev (#330)
- a29dbbf72f1948d8ea030df8eaf64b508f3edf99 feat(testcase): holds_only_in_dev column — the dev-posture foundation (#327)
- 57cbdaf26e27111fcbf4dd89b97ee46ec2172cdb fix(cartographer): #336 review follow-ups — curl rebuttal, per-run reset, coverage controller (#338)
- dd6164f56baa33a42129b2683d3f0325c6a7f0f5 fix(cli): drop the stale "falls back to NIRO_* env" help heading (#382)
- e39ae8ab5b935e5847af59bb3d7b32e4a87b4670 fix(draft-scope): close opaque-URL leak and symlink escape (round-5 hardening) (#357)
- 5cbe4e40bfc0a56d7c30da29ddcf2da7ca616e07 fix(recipes): prune accepted/FP finding dirs to TP-only bundles (#334)
- 37a3d6b3a5a0fd3ed9cb82c91c0b560d6c453046 refactor(cli): retire
niro ci, sweep call-sites to find/fix (#372) - 79ead5bafe29a9ccfe18410d616aae3dbb0ce70d refactor(cli): retire the
niro pentestcommand (#373) - 873dc848092c60966cfa8945876cf4e071bce462 refactor(cli): trim the env surface — 5 NIRO_* vars become flag-only (#381)
- d8a9f1620f621bf319f1cf856c22ce9c5de7a476 refactor(e2e): mirror the CI model — one self-contained script per target (#368)
- ed155da96d246d5adb061121c956103c7cc54156 refactor(env): NIRO_DEV_ prefix for developer-set env vars (#386)
- 40cbe779b8528339ad59626e77fc8012d7a32a36 refactor(env): NIRO_PROGRESS_FILE → NIRO_INTERNAL_PROGRESS_FILE, cut the override (#388)
- a8a216ae8d955b7b7cca4c9736b58cbb5d86334d refactor(env): prefix niro-originated scope vars with NIRO_INTERNAL_ (#384)
- ba2f621141ca4db5f82f96c17da7f8c933b06b0f refactor: cut NIRO_MODEL and NIRO_CODEX_BINARY — agents own their model and binary (#383)
- 9e85896cd850cdcfd577a6b17855901b4ceb86ed test(agentboot): cover DNS/hosts boot parsing; extract pure helpers (#380)
- af9d71579f4d0f438d5aae27ee2f91ac9c451a45 test(draft-scope): discovery-container e2e — open egress + host harvest (#358)