Repository navigation
v1.18.46
·
0 commits
to fad4fe6119753ef10f8a2c3b7460834bdf0f6f5b
since this release
Last release: v1.18.44
Target ref: fad4fe6
Core
Improvements
f3cec5aXCOD-204: detect.ts uses the shared which helper, not Bun's (@pminev1)ab5d949XCOD-221: no keyless fallback to upstream opencode's hosted free tier (@pminev1)61c0fc4XCOD-186: stub keeps draining the worker server's output, so it never blocks on a full pipe (@pminev1)272a611XCOD-186: never send a token in the remote URL; end a worker that fails to start (@pminev1)748b238XCOD-186: lunos run --cloud and the lunos-cloud workspace adapter, against contract v1 (@pminev1)bd35268XCOD-204: show Codex's version number, not "codex-cli" (@pminev1)5f0829aXCOD-204: Codex's /review and /compact from Lunos; other commands refused clearly (@pminev1)7a672b0XCOD-204: Codex CLI from Lunos, with approvals through codex app-server (@pminev1)032e8efXCOD-185: lunos login / logout / whoami with the OIDC device flow (@pminev1)79a770bXCOD-217: Lunos logo in every README and on npm; no upstream images (@pminev1)4e95044XCOD-204: longer child timeout for the external_agent run tests (Windows CI) (@pminev1)7536f22XCOD-204: external approvals really ask, and the delegation runs end to end (@pminev1)7a14445XCOD-204: spawn works on Windows (script fakes via Bun, .cmd shims via a shell) (@pminev1)8a45354XCOD-204: external_agent tool, so a Lunos agent can hand a task to Claude Code (@pminev1)b1d093fXCOD-204: lunos external (list/run/resume/sessions/stop) driving the user's Claude Code (@pminev1)bbd0241XCOD-204: external tool detection and the policy gate (@pminev1)31a12e0XCOD-215: /settings → Agents in the TUI, on agent.. setting keys (@pminev1)e305c1eXCOD-213: reasons claim only what provider-jurisdictions.md records (@pminev1)496ac23XCOD-213: help snapshot for lunos models --recommended / --size (@pminev1)d04601cXCOD-213: filter models by Recommended and by size (@pminev1)02b6b65XCOD-212: tag models the residency policy blocks, and don't let them be chosen (@pminev1)36010d7XCOD-214: an unknown model is a warning, and the next best one is used (@pminev1)3aefa28XCOD-211: an unattended run ends after its time limit even if its step doesn't (@pminev1)5937c27XCOD-214: pick a subagent's model from the model picker (@pminev1)63fed15XCOD-211: a run that reaches a limit hands back its results and succeeds (@pminev1)bf89063XCOD-211: no step starts once spend has passed its limit (@pminev1)26f6a4aXCOD-211: a sandboxed run stops at once when interrupted (@pminev1)cae5b45XCOD-211: the step limit is enforced where steps start (@pminev1)fe0e92fXCOD-211: run agents unattended, now or on a schedule, with hard limits (@pminev1)490b8b5XCOD-210: edit agents from the CLI and the TUI's /agents, validated on save (@pminev1)a38cf36XCOD-209: lunos agent export / import with a portable agent bundle (@pminev1)65a0a53XCOD-208: accept only YAML or JSON front matter (@pminev1)1819ebeXCOD-202: say how long "always allow" lasts: the project, until restart (@pminev1)ace101eXCOD-202: keep "always allow" and --auto working under a permission lock (@pminev1)791f72cXCOD-201: audit.forward.region lets an EU-only policy forward off-host (@pminev1)dcd4608XCOD-202: a permission lock never lifts a deny or blocks truncated output (@pminev1)9a421ceXCOD-202: make permission lockable via $locked (@pminev1)bfb1f9async release versions for v1.18.44a79ecfefeat(stats): add canonical redirects and agent-readable data formats82ea3a3sync release versions for v1.18.34
Bugfixes
e9f8a21fix(opencode): add namespaced session identity headers (anomalyco#52370)9b4882dfix(opencode): ad-hoc re-sign darwin binaries after local compile (anomalyco#52183) (@ryanwyler)f66b86cfix(ci): sign macOS CLI with Developer ID
Desktop
56e114fXCOD-215: Settings → Agents in desktop and web (@pminev1)cf60427chore(XCOD-123): desktop package maintainer email is admin@axsion.net (@pminev1)
Community Contributors Input
Thank you to 5 community contributors:
- @dc85:
- docs(web): correct GPT 6.1 Sol cache pricing (anomalyco#52176)
- docs(web): add Fledge Alpha Free to Zen docs (anomalyco#52895)
- @metal-huang:
- fix(tui): use path.sep for plugin name extraction in /status dialog (anomalyco#52328)
- @ryanwyler:
- fix(opencode): ad-hoc re-sign darwin binaries after local compile (anomalyco#52183)
- @pminev1:
- XCOD-183: licensing policy (MIT stays MIT; planned paid parts in separate repos), README section, decision record
- XCOD-206: stop /settings wheel scrolling from jumping back
- XCOD-202: make permission lockable via $locked
- XCOD-202: a permission lock never lifts a deny or blocks truncated output
- XCOD-201: audit.forward.region lets an EU-only policy forward off-host
- Merge origin/dev into upstream-sync/2026-10-05
- XCOD-202: keep "always allow" and --auto working under a permission lock
- XCOD-202: say how long "always allow" lasts: the project, until restart
- XCOD-208: accept only YAML or JSON front matter
- XCOD-209: lunos agent export / import with a portable agent bundle
- XCOD-210: edit agents from the CLI and the TUI's /agents, validated on save
- XCOD-211: run agents unattended, now or on a schedule, with hard limits
- XCOD-211: the step limit is enforced where steps start
- Merge remote-tracking branch 'origin/dev' into xcod-211-agent-run
- XCOD-211: a sandboxed run stops at once when interrupted
- XCOD-211: no step starts once spend has passed its limit
- XCOD-211: a run that reaches a limit hands back its results and succeeds
- chore(XCOD-123): desktop package maintainer email is admin@axsion.net
- docs: architecture overview (runtime, packages, request flow) and review findings
- XCOD-206: turn the mouse wheel off in /settings
- XCOD-214: pick a subagent's model from the model picker
- XCOD-211: an unattended run ends after its time limit even if its step doesn't
- XCOD-214: an unknown model is a warning, and the next best one is used
- XCOD-212: tag models the residency policy blocks, and don't let them be chosen
- XCOD-212: document blocked models in the pickers
- XCOD-213: filter models by Recommended and by size
- XCOD-213: help snapshot for lunos models --recommended / --size
- XCOD-213: reasons claim only what provider-jurisdictions.md records
- XCOD-215: /settings → Agents in the TUI, on agent.. setting keys
- XCOD-215: Settings → Agents in desktop and web
- XCOD-204: external tool detection and the policy gate
- XCOD-204: lunos external (list/run/resume/sessions/stop) driving the user's Claude Code
- XCOD-204: external_agent tool, so a Lunos agent can hand a task to Claude Code
- XCOD-204: spawn works on Windows (script fakes via Bun, .cmd shims via a shell)
- XCOD-204: external approvals really ask, and the delegation runs end to end
- XCOD-204: longer child timeout for the external_agent run tests (Windows CI)
- Merge remote-tracking branch 'origin/dev' into xcod-213-to-dev
- Merge remote-tracking branch 'origin/dev' into xcod-215-settings-agents
- XCOD-175: launch pack drafts for review (Show HN, LinkedIn, EU channels, walkthrough script)
- XCOD-217: Lunos logo in every README and on npm; no upstream images
- XCOD-217: GitHub social preview card (1280x640), to upload in Settings → Social preview
- XCOD-185: lunos login / logout / whoami with the OIDC device flow
- XCOD-204: Codex CLI from Lunos, with approvals through codex app-server
- XCOD-204: Codex's /review and /compact from Lunos; other commands refused clearly
- XCOD-204: show Codex's version number, not "codex-cli"
- XCOD-185: Keycloak bundle for the Lunos Cloud identity provider
- XCOD-185: realm roles are realm-wide, not per organisation; say so
- XCOD-186: lunos run --cloud and the lunos-cloud workspace adapter, against contract v1
- XCOD-186: never send a token in the remote URL; end a worker that fails to start
- XCOD-186: stub keeps draining the worker server's output, so it never blocks on a full pipe
- XCOD-221: no keyless fallback to upstream opencode's hosted free tier
- XCOD-204: detect.ts uses the shared which helper, not Bun's
- @pminevp:
- Merge pull request #151 from AxsionDev/xcod-183-licensing-policy
- Merge pull request #152 from AxsionDev/xcod-206-settings-wheel-scroll
- Merge pull request #153 from AxsionDev/xcod-202-lock-permission
- Merge pull request #154 from AxsionDev/xcod-201-forward-region
- Merge pull request #155 from AxsionDev/upstream-sync/2026-10-05
- Merge pull request #156 from AxsionDev/xcod-202-keep-always-allow
- Merge pull request #158 from AxsionDev/xcod-208-frontmatter-no-js
- Merge pull request #157 from AxsionDev/marketplace-check/2026-10-05-37314901918
- Merge pull request #159 from AxsionDev/xcod-209-agent-bundle
- Merge pull request #160 from AxsionDev/xcod-210-agent-edit
- Merge pull request #161 from AxsionDev/xcod-209-agent-bundle
- Merge pull request #162 from AxsionDev/xcod-211-agent-run
- Merge pull request #163 from AxsionDev/xcod-211-partial-results
- Merge pull request #164 from AxsionDev/chore-land-leftovers
- Merge pull request #165 from AxsionDev/xcod-206-wheel-runaway
- Merge pull request #166 from AxsionDev/xcod-214-subagent-model-picker
- Merge pull request #167 from AxsionDev/xcod-211-windows-deadline
- Merge pull request #168 from AxsionDev/xcod-214-unknown-model-fallback
- Merge pull request #169 from AxsionDev/xcod-212-policy-blocked
- Merge pull request #170 from AxsionDev/xcod-213-model-filters
- Merge pull request #172 from AxsionDev/xcod-204-external-agents
- Merge pull request #171 from AxsionDev/xcod-215-settings-agents
- Merge pull request #173 from AxsionDev/xcod-213-to-dev
- Merge pull request #174 from AxsionDev/xcod-175-launch-drafts
- Merge pull request #175 from AxsionDev/xcod-217-readme-logo
- Merge pull request #176 from AxsionDev/xcod-185-cloud-login
- Merge pull request #177 from AxsionDev/xcod-204-codex
- Merge pull request #178 from AxsionDev/xcod-204-codex-commands
- Merge pull request #179 from AxsionDev/xcod-185-keycloak
- Merge pull request #180 from AxsionDev/xcod-186-cloud-adapter
- Merge pull request #181 from AxsionDev/xcod-221-no-keyless-upstream
- Merge pull request #182 from AxsionDev/xcod-204-node-build-fix