Skip to content

v1.18.46

Choose a tag to compare

@github-actions github-actions released this 09 Oct 12:35
· 0 commits to fad4fe6119753ef10f8a2c3b7460834bdf0f6f5b since this release

Last release: v1.18.44
Target ref: fad4fe6

Core

Improvements

  • f3cec5a XCOD-204: detect.ts uses the shared which helper, not Bun's (@pminev1)
  • ab5d949 XCOD-221: no keyless fallback to upstream opencode's hosted free tier (@pminev1)
  • 61c0fc4 XCOD-186: stub keeps draining the worker server's output, so it never blocks on a full pipe (@pminev1)
  • 272a611 XCOD-186: never send a token in the remote URL; end a worker that fails to start (@pminev1)
  • 748b238 XCOD-186: lunos run --cloud and the lunos-cloud workspace adapter, against contract v1 (@pminev1)
  • bd35268 XCOD-204: show Codex's version number, not "codex-cli" (@pminev1)
  • 5f0829a XCOD-204: Codex's /review and /compact from Lunos; other commands refused clearly (@pminev1)
  • 7a672b0 XCOD-204: Codex CLI from Lunos, with approvals through codex app-server (@pminev1)
  • 032e8ef XCOD-185: lunos login / logout / whoami with the OIDC device flow (@pminev1)
  • 79a770b XCOD-217: Lunos logo in every README and on npm; no upstream images (@pminev1)
  • 4e95044 XCOD-204: longer child timeout for the external_agent run tests (Windows CI) (@pminev1)
  • 7536f22 XCOD-204: external approvals really ask, and the delegation runs end to end (@pminev1)
  • 7a14445 XCOD-204: spawn works on Windows (script fakes via Bun, .cmd shims via a shell) (@pminev1)
  • 8a45354 XCOD-204: external_agent tool, so a Lunos agent can hand a task to Claude Code (@pminev1)
  • b1d093f XCOD-204: lunos external (list/run/resume/sessions/stop) driving the user's Claude Code (@pminev1)
  • bbd0241 XCOD-204: external tool detection and the policy gate (@pminev1)
  • 31a12e0 XCOD-215: /settings → Agents in the TUI, on agent.. setting keys (@pminev1)
  • e305c1e XCOD-213: reasons claim only what provider-jurisdictions.md records (@pminev1)
  • 496ac23 XCOD-213: help snapshot for lunos models --recommended / --size (@pminev1)
  • d04601c XCOD-213: filter models by Recommended and by size (@pminev1)
  • 02b6b65 XCOD-212: tag models the residency policy blocks, and don't let them be chosen (@pminev1)
  • 36010d7 XCOD-214: an unknown model is a warning, and the next best one is used (@pminev1)
  • 3aefa28 XCOD-211: an unattended run ends after its time limit even if its step doesn't (@pminev1)
  • 5937c27 XCOD-214: pick a subagent's model from the model picker (@pminev1)
  • 63fed15 XCOD-211: a run that reaches a limit hands back its results and succeeds (@pminev1)
  • bf89063 XCOD-211: no step starts once spend has passed its limit (@pminev1)
  • 26f6a4a XCOD-211: a sandboxed run stops at once when interrupted (@pminev1)
  • cae5b45 XCOD-211: the step limit is enforced where steps start (@pminev1)
  • fe0e92f XCOD-211: run agents unattended, now or on a schedule, with hard limits (@pminev1)
  • 490b8b5 XCOD-210: edit agents from the CLI and the TUI's /agents, validated on save (@pminev1)
  • a38cf36 XCOD-209: lunos agent export / import with a portable agent bundle (@pminev1)
  • 65a0a53 XCOD-208: accept only YAML or JSON front matter (@pminev1)
  • 1819ebe XCOD-202: say how long "always allow" lasts: the project, until restart (@pminev1)
  • ace101e XCOD-202: keep "always allow" and --auto working under a permission lock (@pminev1)
  • 791f72c XCOD-201: audit.forward.region lets an EU-only policy forward off-host (@pminev1)
  • dcd4608 XCOD-202: a permission lock never lifts a deny or blocks truncated output (@pminev1)
  • 9a421ce XCOD-202: make permission lockable via $locked (@pminev1)
  • bfb1f9a sync release versions for v1.18.44
  • a79ecfe feat(stats): add canonical redirects and agent-readable data formats
  • 82ea3a3 sync release versions for v1.18.34

Bugfixes

  • e9f8a21 fix(opencode): add namespaced session identity headers (anomalyco#52370)
  • 9b4882d fix(opencode): ad-hoc re-sign darwin binaries after local compile (anomalyco#52183) (@ryanwyler)
  • f66b86c fix(ci): sign macOS CLI with Developer ID

Desktop

Community Contributors Input

Thank you to 5 community contributors:

  • @dc85:
  • @metal-huang:
    • fix(tui): use path.sep for plugin name extraction in /status dialog (anomalyco#52328)
  • @ryanwyler:
    • fix(opencode): ad-hoc re-sign darwin binaries after local compile (anomalyco#52183)
  • @pminev1:
    • XCOD-183: licensing policy (MIT stays MIT; planned paid parts in separate repos), README section, decision record
    • XCOD-206: stop /settings wheel scrolling from jumping back
    • XCOD-202: make permission lockable via $locked
    • XCOD-202: a permission lock never lifts a deny or blocks truncated output
    • XCOD-201: audit.forward.region lets an EU-only policy forward off-host
    • Merge origin/dev into upstream-sync/2026-10-05
    • XCOD-202: keep "always allow" and --auto working under a permission lock
    • XCOD-202: say how long "always allow" lasts: the project, until restart
    • XCOD-208: accept only YAML or JSON front matter
    • XCOD-209: lunos agent export / import with a portable agent bundle
    • XCOD-210: edit agents from the CLI and the TUI's /agents, validated on save
    • XCOD-211: run agents unattended, now or on a schedule, with hard limits
    • XCOD-211: the step limit is enforced where steps start
    • Merge remote-tracking branch 'origin/dev' into xcod-211-agent-run
    • XCOD-211: a sandboxed run stops at once when interrupted
    • XCOD-211: no step starts once spend has passed its limit
    • XCOD-211: a run that reaches a limit hands back its results and succeeds
    • chore(XCOD-123): desktop package maintainer email is admin@axsion.net
    • docs: architecture overview (runtime, packages, request flow) and review findings
    • XCOD-206: turn the mouse wheel off in /settings
    • XCOD-214: pick a subagent's model from the model picker
    • XCOD-211: an unattended run ends after its time limit even if its step doesn't
    • XCOD-214: an unknown model is a warning, and the next best one is used
    • XCOD-212: tag models the residency policy blocks, and don't let them be chosen
    • XCOD-212: document blocked models in the pickers
    • XCOD-213: filter models by Recommended and by size
    • XCOD-213: help snapshot for lunos models --recommended / --size
    • XCOD-213: reasons claim only what provider-jurisdictions.md records
    • XCOD-215: /settings → Agents in the TUI, on agent.. setting keys
    • XCOD-215: Settings → Agents in desktop and web
    • XCOD-204: external tool detection and the policy gate
    • XCOD-204: lunos external (list/run/resume/sessions/stop) driving the user's Claude Code
    • XCOD-204: external_agent tool, so a Lunos agent can hand a task to Claude Code
    • XCOD-204: spawn works on Windows (script fakes via Bun, .cmd shims via a shell)
    • XCOD-204: external approvals really ask, and the delegation runs end to end
    • XCOD-204: longer child timeout for the external_agent run tests (Windows CI)
    • Merge remote-tracking branch 'origin/dev' into xcod-213-to-dev
    • Merge remote-tracking branch 'origin/dev' into xcod-215-settings-agents
    • XCOD-175: launch pack drafts for review (Show HN, LinkedIn, EU channels, walkthrough script)
    • XCOD-217: Lunos logo in every README and on npm; no upstream images
    • XCOD-217: GitHub social preview card (1280x640), to upload in Settings → Social preview
    • XCOD-185: lunos login / logout / whoami with the OIDC device flow
    • XCOD-204: Codex CLI from Lunos, with approvals through codex app-server
    • XCOD-204: Codex's /review and /compact from Lunos; other commands refused clearly
    • XCOD-204: show Codex's version number, not "codex-cli"
    • XCOD-185: Keycloak bundle for the Lunos Cloud identity provider
    • XCOD-185: realm roles are realm-wide, not per organisation; say so
    • XCOD-186: lunos run --cloud and the lunos-cloud workspace adapter, against contract v1
    • XCOD-186: never send a token in the remote URL; end a worker that fails to start
    • XCOD-186: stub keeps draining the worker server's output, so it never blocks on a full pipe
    • XCOD-221: no keyless fallback to upstream opencode's hosted free tier
    • XCOD-204: detect.ts uses the shared which helper, not Bun's
  • @pminevp:
    • Merge pull request #151 from AxsionDev/xcod-183-licensing-policy
    • Merge pull request #152 from AxsionDev/xcod-206-settings-wheel-scroll
    • Merge pull request #153 from AxsionDev/xcod-202-lock-permission
    • Merge pull request #154 from AxsionDev/xcod-201-forward-region
    • Merge pull request #155 from AxsionDev/upstream-sync/2026-10-05
    • Merge pull request #156 from AxsionDev/xcod-202-keep-always-allow
    • Merge pull request #158 from AxsionDev/xcod-208-frontmatter-no-js
    • Merge pull request #157 from AxsionDev/marketplace-check/2026-10-05-37314901918
    • Merge pull request #159 from AxsionDev/xcod-209-agent-bundle
    • Merge pull request #160 from AxsionDev/xcod-210-agent-edit
    • Merge pull request #161 from AxsionDev/xcod-209-agent-bundle
    • Merge pull request #162 from AxsionDev/xcod-211-agent-run
    • Merge pull request #163 from AxsionDev/xcod-211-partial-results
    • Merge pull request #164 from AxsionDev/chore-land-leftovers
    • Merge pull request #165 from AxsionDev/xcod-206-wheel-runaway
    • Merge pull request #166 from AxsionDev/xcod-214-subagent-model-picker
    • Merge pull request #167 from AxsionDev/xcod-211-windows-deadline
    • Merge pull request #168 from AxsionDev/xcod-214-unknown-model-fallback
    • Merge pull request #169 from AxsionDev/xcod-212-policy-blocked
    • Merge pull request #170 from AxsionDev/xcod-213-model-filters
    • Merge pull request #172 from AxsionDev/xcod-204-external-agents
    • Merge pull request #171 from AxsionDev/xcod-215-settings-agents
    • Merge pull request #173 from AxsionDev/xcod-213-to-dev
    • Merge pull request #174 from AxsionDev/xcod-175-launch-drafts
    • Merge pull request #175 from AxsionDev/xcod-217-readme-logo
    • Merge pull request #176 from AxsionDev/xcod-185-cloud-login
    • Merge pull request #177 from AxsionDev/xcod-204-codex
    • Merge pull request #178 from AxsionDev/xcod-204-codex-commands
    • Merge pull request #179 from AxsionDev/xcod-185-keycloak
    • Merge pull request #180 from AxsionDev/xcod-186-cloud-adapter
    • Merge pull request #181 from AxsionDev/xcod-221-no-keyless-upstream
    • Merge pull request #182 from AxsionDev/xcod-204-node-build-fix