v1.1.4
v1.1.4 (2026-07-02)
Bug Fixes
-
agent-wiki: Address CodeRabbit review on the split-down diff (
3e26154) -
agent-wiki: Address PR review findings (
3e26154) -
agent-wiki: Address review feedback from visahak (
3e26154) -
agent-wiki: Harness --out-root tolerant of absolute paths (
3e26154) -
ci: Harden check-vulnerabilities permissions and credential handling (#277,
2cae2fc) -
ci: Make CVE scan informational only, never block PRs (#277,
2cae2fc) -
ci: Move CVE scan to separate workflow to fix permission conflict (#282,
c91bdd0) -
ci: Only block PRs on critical CVEs, create issues for high+critical (#277,
2cae2fc) -
deps: Bump litellm to >=1.84.0 to resolve 7 CVEs (#277,
2cae2fc) -
e2e: Drop bob provenance assertion that can never produce influence events (#271,
92b52f9) -
e2e: Scan all session-2 trajectories with Path.stem matching (#271,
92b52f9) -
explorations: Make CI green for the agent-wiki exploration (
3e26154) -
frontend: Bump react-router-dom to ^7.15.0 to clear Mend CVEs (#267,
6de3712) -
platform-integrations: Address CodeRabbit review on PR #266 (#266,
6f2bfc0) -
platform-integrations: Forbid native-memory-store inspection in adapt-memory skill (#266,
6f2bfc0) -
platform-integrations: Guard non-dict chat JSON in Bob session-id + provenance locators (#266,
6f2bfc0) -
platform-integrations: Harden provenance locators against decoy/glob/traversal inputs (#266,
6f2bfc0) -
platform-integrations: Make codex/bob recall an imperative first action (#266,
6f2bfc0) -
platform-integrations: Scope Claude-only doctor skill out of codex/bob plugins (#266,
6f2bfc0) -
platform-integrations: Scope the adapt-memory skill to mirror-only (no side work) (#266,
6f2bfc0) -
platform-integrations: Unify codex/bob self-directed memory onto the .evolve/entities store (#266,
6f2bfc0) -
sandbox: Suppress detect-secrets false positive in justfile (#271,
92b52f9)
Features
-
ci: Add automated CVE scanning with pip-audit and Dependabot (#277,
2cae2fc) -
platform-integrations: Adapt-memory auto-locates the saved native memory (no path-hunting) (#266,
6f2bfc0) -
platform-integrations: Auto-allowlist the recall-audit command for Bob (#266,
6f2bfc0) -
platform-integrations: Automate provenance matching with native-transcript awareness (#266,
6f2bfc0) -
platform-integrations: Build recall+learn out of the Claude plugin (native memory owns them) (#266,
6f2bfc0) -
platform-integrations: Close Bob provenance via a session-id bridge (#266,
6f2bfc0) -
platform-integrations: Detect silently-disabled Claude EVOLVE.md import (#266,
6f2bfc0) -
platform-integrations: Locate native Codex session transcripts in provenance (#266,
6f2bfc0) -
platform-integrations: Make uninstall reverse legacy pre-redesign artifacts (#266,
6f2bfc0) -
platform-integrations: Native-memory adapter + thin Claude EVOLVE.md via CLAUDE.md @import (#266,
6f2bfc0) -
platform-integrations: Ship adapt_memory to stable path + auto-allowlist evolve scripts (no permission prompts) (#266,
6f2bfc0) -
platform-integrations: Stable native-to-entity id linkage for provenance (#266,
6f2bfc0) -
sandbox: Add bob CLI sandbox image and e2e test (#271,
92b52f9)
Detailed Changes: v1.1.3...v1.1.4