v1.18.54

Added

• Build checks its work before handing back. The Build agent now builds, runs the relevant
  tests, starts your app on this machine and tries what it changed, and ends with a Verification
  block saying what it ran and what it saw, instead of asking you to test. When it can't check
  something (a missing .env value, a service it can't start), it says exactly what and why. Pin the
  commands in a verify block (build, test, start, ready, check, max_attempts,
  timeout), or set agent.build.verify: false to turn it off; an organisation can lock both.

• Dev servers in the background. The bash tool can start a long-running command with
  background: true and return once its ready_url answers, and the new process tool reads its
  output, waits for it, stops it, or keeps it running for you. They only ever check addresses on this
  machine and warn when a server can be reached from other machines. They stop at the end of the
  turn unless kept, and in any case when the session is deleted, when Lunos exits (on macOS and
  Linux even if it is killed), and after 60 minutes.

• Background commands are in the audit log as process.start and process.stop (with the reason),
  with the command line, never the output.

• Delete sessions for good from /sessions. ctrl+d deletes the highlighted session, or the
  ones you marked with space (the footer counts them); "delete all shown" deletes everything the
  current filter or search shows. One session asks once, with Cancel as the default; several ask you
  to type their number. The confirmation says what goes (history, subagent sessions, queued
  prompts) and what stays: your project's files, and a Claude Code or Codex session's own history.
  Running sessions can be stopped and deleted, or skipped. A shared session's link is removed
  first, and with session sync on, the synced copy is deleted too unless you untick it. The Agent
  Monitor's rail has the same Delete on x.

• lunos session delete takes several ids, or --archived (with --older-than 30d and
  --project <path>), plus --stop for running sessions, --keep-cloud to keep synced copies and
  --yes for scripts. It prints what it deleted and what it skipped, and why.

• Deletes from /sessions, the Agent Monitor and lunos session delete are in the audit log as
  session.delete with where they came from, the count and the ids (never titles or content), how
  many were stopped first and how many synced copies were deleted.

• Deleting a session revokes what you shared from it on your organisation's console. Console
  shares made with lunos share or /share are now remembered with their session, listed in the
  delete confirmation and revoked first; if one can't be (signed out, console unreachable), the
  session is kept and you're told why. lunos session delete --keep-shares leaves them live. Shares
  made before this release aren't linked to their session: revoke them with lunos share list and
  lunos share revoke <id>. The audit log counts the shares revoked, never their content.

• The sandbox works in any folder, not only in a git repository. Point it at a folder of
  documents or a project without Git, and it is copied in byte for byte (Word files, PDFs and
  images included), leaving out what the folder's .gitignore lists plus node_modules, build
  output and similar. Nothing is written into the folder: when the work is done,
  lunos sandbox apply <id> writes the agent's changes back, and refuses if you changed the same
  files in the meantime. A folder that is too big, or that holds another git repository, is
  refused up front with what to do. lunos sandbox doctor now shows whether you are in a git
  repository or a plain folder, and checks that Git is installed.

Fixed

• A repository Git doesn't trust no longer looks like "not a git repository" to the sandbox. On
  Windows, Git refuses to work in a repository owned by another user, which is common on a second
  drive such as D:. The sandbox now says so, shows Git's own message, and gives the
  git config --global --add safe.directory <path> command that fixes it. Any other Git failure
  shows Git's error instead of a guess.

---

Last release: v1.18.53
Target ref: a31ce41

Core

• 54840bd Codex's diffs, plan and subagent progress in Lunos's views; context in the status line (@pminev1)
• 1f229fc tests for background on by default and the delegation reminder (@pminev1)
• 25505da subagents on by default, and a Subagents group in the sidebar (@pminev1)
• 952d2af /claude and /codex offer the tool's own sign-in when it isn't signed in (@pminev1)
• a32f32e a port held by the session's own server says so; test that a denied bash starts nothing (@pminev1)
• 6f764e0 e2e process probe only counts its own processes (@pminev1)
• d8394d2 Lunos policy on lunos external run and external_agent (@pminev1)
• ce53ec1 docs, changelog, and an e2e scenario that tells turn end from Lunos exiting (@pminev1)
• c260c3f verify config and opt-out, stop at turn end unless kept, port clash, audit events (@pminev1)
• 7d6852c background commands for dev servers, and Build finishes with proof (wip) (@pminev1)
• 8a50613 Settings › External sessions › Claude Code / Codex configuration view (@pminev1)
• efad4ec deleting a session revokes the console shares made from it (@pminev1)
• 48ac988 Lunos plugin pre-tool hooks on calls Claude Code allows without asking (@pminev1)
• 7e54dc5 Claude Code's Edit/Write render as diffs and TodoWrite as a checklist (@pminev1)
• a00d1dd tool-native approval prompt, Shift+Tab permission mode and status line in the TUI (@pminev1)
• 3ec26c2 tool-native approval choices, Lunos deny policy over the tool's mode, permission mode per session (@pminev1)
• 539a78e Delete archived keeps synced copies as before; a failed cloud delete keeps sync running (@pminev1)
• a169303 delete sessions from /sessions, the Agent Monitor and lunos session delete (@pminev1)
• 110cc37 sync release versions for v1.18.53
• 681bb02 apply after a re-handoff; folder sandboxes show in their folder (@pminev1)
• aa68991 the sandbox works in any folder, not only a git repository (@pminev1)

Community Contributors Input

Thank you to 2 community contributors:

• @pminev1:
  • the sandbox works in any folder, not only a git repository
  • apply after a re-handoff; folder sandboxes show in their folder
  • gate publish on every build succeeding; retry runner-capacity cancels once
  • release-gate also checks each job via the API, not only the needs aggregate
  • delete sessions from /sessions, the Agent Monitor and lunos session delete
  • exit in a Claude Code / Codex session closes that session, not Lunos
  • Delete archived keeps synced copies as before; a failed cloud delete keeps sync running
  • tool-native approval choices, Lunos deny policy over the tool's mode, permission mode per session
  • tool-native approval prompt, Shift+Tab permission mode and status line in the TUI
  • Claude Code's Edit/Write render as diffs and TodoWrite as a checklist
  • ! goes to the tool in an external session; docs say exactly what don't-ask-again and the policy hook cover
  • Lunos plugin pre-tool hooks on calls Claude Code allows without asking
  • deleting a session revokes the console shares made from it
  • Settings › External sessions › Claude Code / Codex configuration view
  • background commands for dev servers, and Build finishes with proof (wip)
  • verify config and opt-out, stop at turn end unless kept, port clash, audit events
  • docs, changelog, and an e2e scenario that tells turn end from Lunos exiting
  • Lunos policy on lunos external run and external_agent
  • e2e process probe only counts its own processes
  • a port held by the session's own server says so; test that a denied bash starts nothing
  • /claude and /codex offer the tool's own sign-in when it isn't signed in
  • subagents on by default, and a Subagents group in the sidebar
  • tests for background on by default and the delegation reminder
  • Codex's diffs, plan and subagent progress in Lunos's views; context in the status line
  • order subagent avatars from one source
  • Release 1.18.54: changelog section
• @pminevp: