What's Changed
- [1/9] Harden code-execution command allowlists by @hi-michael-li in #62
- Preserve collision-safe output paths by @hi-michael-li in #63
- Block private destinations in web fetch by @hi-michael-li in #64
- Honor SDK retry configuration by @hi-michael-li in #65
- Run finish tools last within a turn by @hi-michael-li in #67
- Give each Agent its own default tool instances by @hi-michael-li in #76
- Separate context and output token budgets by @hi-michael-li in #70
- Check allowlisted commands against the parsed argv by @hi-michael-li in #80
- v0.2.0: Block-based assistant messages by @keatingw in #60
- chore: add 7 day exclusion rule for package installs by @declanjackson in #81
New Contributors
- @hi-michael-li made their first contribution in #62
Full Changelog: v0.1.12...v0.2.0
Contributors
keatingw, declanjackson, and hi-michael-li