Nightly Build (v0.10.4-nightly.202609020630.ee6d53f3d)
Changes since v0.10.4-nightly.202609010627.a218ec13a:
55e69b8 repo clone: route /gh/ hint through dot-only guard
0083f83 repo clone: tighten native shorthand, keep parse errors
67deac6 clarify mirror creation timeout
c53a575 stabilize descriptor leak test
ccc48c9 print mirror ID for async creates
a2e9a59 dispatch: address trail review findings
1d65df2 simplify async mirror flow
0e2565d test(checkpoint): cover migration import race
895aabc docs: session IDs are agent-provided, not universally UUIDs
d1a028e docs: full.jsonl is sanitized, not raw, in the persistence table
3aa1e2d Fix two documentation claims that contradict the code
ed07daa Stop presenting the checkpoint backends as a co-equal choice
869c162 clean: say when a scan failed instead of reporting a clean sweep
60f69bd clean: pin that .entire/tmp deletes refuse a swapped tmp directory
b2589d7 docs: unwrap hard-wrapped prose paragraphs
e5b888f codex: pin readHooksFileForMutation's contract, and say what Root is for
368f9de flock: refuse a symlinked lock path, not only an escaping one
2459dbd docs: README describes only the refs checkpoint backend
fff33b9 docs: install git-remote-entire via go install too
9f890ca docs: bring README and security-and-privacy up to date, lead with git-refs
95799fd status: return settings.FilesPresent's error instead of a bare %w wrap
57b275a agent: reject volume-relative paths in SessionStore.Name
ccc10a5 osroot: stop reporting a non-directory as a symlinked path in SharedChild
fd0cfc2 trail: don't fail worktree checkout when .gitignore can't be appended
c1383e2 codex: bound the hooks.json read for mutation before it happens
d28894a clean: don't abort clean --all when listing orphan agent temps fails
eb5b74a clean: refuse symlinked components when deleting .entire/tmp files
9738b82 agent: keep a missing .entire classifiable with os.IsNotExist
9c18f31 flock: avoid macOS's broken openat(O_CREATE) create-or-open path
8298342 Fix the four test failures the os.Root migration exposed
83677f7 Pin every path component instead of checking it and looking again
c35f757 Refuse a symlinked agent directory on read, not only on create
fadcc94 Stop opening the current directory when git will not say which repo this is
331c7b1 Refuse what os.Root only confined
33752f1 Guard that an os.Root's base is always a trusted path
8057a0e Anchor every os.Root on a trusted base
1eaccf7 Give every tree Entire writes to a single os.Root anchor
2cce0aa neutral example
6bc04e4 Drop the top-level clone command
f851121 clarify mirror request submission timeout
cd1a56d address async mirror review feedback
1836832 route mirror creation through async requests
68127e7 add local async mirror request setting
d362936 canonicalize mirror request locations
f35ce74 generate mirror request API client
fceeb0c ci(lint): shellcheck scripts/ and stop skipping env-shebang tasks
22b2d3a Refuse a planted symlink at the scaffold temp path
3df8ac6 Confine scaffold IO to the repository via os.Root
a5661bb Make legacy subagent cleanup best-effort
6ade580 Document the reachability tool's interface blind spot
6c1d3e8 Address review: inline-safe skill body, legacy cleanup on conflict, honest telemetry docs
d6f4f61 perf(checkpoint): skip ref updates for migrated checkpoints
5761c2a feat(enable): install the search skill as a real skill on every agent
79683e2 Simplify cxtool, and fix the duplication rollup's path resolution
e00eeab Fix feature-rule shadowing, and take the baseline fresh
f658c60 Add tools/complexity: deterministic per-feature complexity baseline
487385a Clone Entire-native repos by /et/ ref
1175ad6 dispatch: give the wizard's Home choice a sentinel value
ef83e69 dispatch: address code review of the token cutover
2817f30 auth: drop unused test helper and fix comment after exchange removal
f26923b auth: data-plane bearer is the account access token, not an exchange
bc96a92 dispatch: simplify the gateway bearer seam
5718cce dispatch: authenticate to the gateway with the account access token
b0bb191 dispatch: help text — the one-off route generates, it does not store
e5c18d1 dispatch: accessible wizard offers every repo, not the unplaced bucket
6d94800 dispatch: unexport normalizeJurisdiction (package-internal since the wizard picker)
bab2c55 dispatch: address second code-review pass on the wizard picker
4d7f702 dispatch: let huh own the wizard's catalogue load
544a698 dispatch: pick the jurisdiction in the wizard from repo placements
4b2bd28 dispatch: address code-review findings on jurisdiction plumbing
0757dfa dispatch: simplify jurisdiction plumbing after review
9bab476 dispatch: add --jurisdiction to route cloud dispatches to one jurisdiction's cell
05f2fca fix(strategy): log a commit trailer no session condensed into