v1.18.55

Added

• Give every session in a project its specs, docs and links. Attach files, folders, git
  repositories, web pages and MCP resources to the project once with lunos resource add, and each
  one is either always in context (within an 8,000-token budget), searched when relevant with the
  new project_resources_search tool, or included when you mention it as @name. Shared resources
  go in the project's config for the whole team; personal ones stay on this computer. Everything is
  indexed on this computer, secrets are skipped and masked, web and MCP content is labelled as
  untrusted reference material, and web pages are fetched only when offline mode, resources.web
  and permission.webfetch allow it. The sidebar's Context section lists them, with a per-session exclude, and
  /context shows what the last turn's context was made of, in tokens. See
  Project resources.

• Projects that span several repositories. Group the repositories and folders that belong
  together, say axsion-web, axsion-api and infra, into one named project, with /projects in
  the TUI, Settings › Projects, or lunos project create|list|rename|add|remove|archive (with
  --json) from the shell. A repository is still a project of its own with no setup. Sessions count
  in the project of their folder, subagents in their parent's, and /sessions can move one to
  another project. Named projects are kept on this computer only.

• Project budgets. Give a project a budget (lunos budget set "Axsion web" 50): monthly from a
  day you choose, weekly or one total, with optional per-session and per-day caps, in EUR by default.
  Every model step counts, subagents, lunos run and scheduled agents included; a model without a
  price shows as "unknown cost", never €0. Before each turn the prompt shows its estimate against
  what's left ("est. €0.08–0.30 · €12.40 left of €50.00 (Oct)") and the sidebar shows the meter. At
  the limit Lunos warns, asks (the default: run anyway, use a cheaper model, or stop) or stops, as
  budget.on_limit says; a running step always finishes. Thresholds alert once per period. In CI and
  unattended runs, a budget stops the run with exit code 3. lunos budget status --json,
  lunos budget export (CSV) and lunos stats --project <name> --json report it. An organisation
  can set a budget in managed config that members can't raise.

Changed

• Subagents are grouped by what they need from you. The sidebar's Subagents section now holds
  three sub-sections, always in the same place: Working (running ones, the longest-running first,
  then queued ones), Waiting for action (each row shows its ask, with approve and deny), and
  Completed (failed ones first, with why, then done ones). Each has its own count and toggle, and a
  collapsed one says what it holds, as in ✕ 1 failed · ✓ 1 done. The header counts how many need
  you, and Waiting for action opens itself when a new ask arrives, even if you collapsed it. What
  you open or collapse is remembered per session, across restarts. Subagents of subagents sit under
  the one that started them. States and headers are words and symbols, not colour alone. The Agent
  Monitor and the desktop and web Sessions window use the same three sections, and in the monitor
  ↑/↓ also reach the section headers, where Enter collapses or expands one.

Fixed

• Turning the sandbox off now stays off. Switching it off in /settings used to leave it on at
  the next start whenever another config file still turned it on, and from inside a sandbox the
  change only reached the sandbox's own copy of the config. It is now saved on this computer, in
  every file that turns the sandbox on, and Lunos restarts without it; a restart that can't start
  the sandbox no longer turns it back on. The setting shows what the next start will do and which
  file decides it, and says why when your organisation or sandbox.required keeps it on. New
  lunos sandbox status and lunos sandbox off [--project|--user] do the same from the command
  line, without Docker or the TUI, so you can switch it off when Lunos can't start.

---

Last release: v1.18.54
Target ref: 53ee09d

Core

• d3c5f12 a repository can't redefine an organisation resource, and only your own config may point outside the project (@pminev1)
• fd6ebdc hash non-named project ids in cost reports, record estimate accuracy, skip lookups with no budget (@pminev1)
• 6935567 resources sit under Tools › References in /settings (@pminev1)
• 5692e8a a resource can't take an agent's @name (@pminev1)
• e44b7af the sidebar's Context section lists resources with a per-session exclude; /context shows the turn's context in tokens; @name in the @ menu (@pminev1)
• 1777bc5 budget meter and status endpoint, cost reports to the console (off by default), docs (@pminev1)
• 424d12d project budgets: accounting, estimate, warn/ask/stop on the live path, lunos budget (wip) (@pminev1)
• 85d12c0 lunos resource add|list|remove|refresh, with --json (@pminev1)
• c6e4de5 tests for secrets, links out of a folder, the untrusted wrapper, the budget, search, web gating, refresh and organisation resources (@pminev1)
• 0405857 project resources in the session's context: Always in the system prompt, Search through project_resources_search, @name on demand (@pminev1)
• 87c44d3 named projects that group several repositories or folders (@pminev1)
• dc34560 nothing inside the sandbox loosens it on this computer (@pminev1)
• f0037cc turning the sandbox off sticks (@pminev1)
• 5ee9757 sync release versions for v1.18.54

TUI

• d75d29e /settings shows and saves the sandbox on this computer (@pminev1)

Desktop

• 0af4acb section headings stay headings; a failed background subagent is failed (@pminev1)
• c2f5e6a Working, Waiting for action and Completed under Subagents (@pminev1)

Community Contributors Input

Thank you to 2 community contributors:

• @pminev1:
  • turning the sandbox off sticks
  • /settings shows and saves the sandbox on this computer
  • docs and changelog for turning the sandbox off
  • nothing inside the sandbox loosens it on this computer
  • named projects that group several repositories or folders
  • project resources in the session's context: Always in the system prompt, Search through project_resources_search, @name on demand
  • tests for secrets, links out of a folder, the untrusted wrapper, the budget, search, web gating, refresh and organisation resources
  • Working, Waiting for action and Completed under Subagents
  • section headings stay headings; a failed background subagent is failed
  • lunos resource add|list|remove|refresh, with --json
  • project budgets: accounting, estimate, warn/ask/stop on the live path, lunos budget (wip)
  • budget meter and status endpoint, cost reports to the console (off by default), docs
  • the sidebar's Context section lists resources with a per-session exclude; /context shows the turn's context in tokens; @name in the @ menu
  • docs and changelog for project resources
  • a resource can't take an agent's @name
  • resources sit under Tools › References in /settings
  • hash non-named project ids in cost reports, record estimate accuracy, skip lookups with no budget
  • a repository can't redefine an organisation resource, and only your own config may point outside the project
  • one Added section in the Unreleased changelog
  • Release 1.18.55: changelog section
• @pminevp: