v1.4.30

Safer file copy and worker worktrees; --effort without --model; archive/unarchive; archived-thread lookup; listener retry when the queue was full; tighter redaction; usage pricing closer to T3.

• Official face at the start of first setup (v1.4.30 avatar URL with v1.4.29 fallback + sha256 check).
• New paused routine offered at setup: T3 Tots weekly update (Sundays 10:00 AM) — applies Update T3 Tots when behind; quiet when current. Enabling it is the standing yes for Tots self-update only.
• Distinct from Out-of-date check (Wednesdays), which only reports T3 Code / AI / dev tools.

v1.4.29

The bot never approves a safety prompt on its own.

• Accept needs --user-approved. Without it, t3ctl answer exits NEEDS_USER_APPROVAL and sends nothing.
• While you are away, delegated mode declines the prompt and redirects the thread: do not retry or work around the check, keep uncommitted work, and take a safer path or skip that step. The report lists what was declined.
• The regex classifier is removed. Cards and pending show the safety check's own reason.
• Standing approvals are removed. They matched prompt text the model writes, so a saved command could approve a different one.
• Thread runtime mode is unchanged. The default stays full access, the same as T3.

v1.4.28

Tools unchanged from v1.4.27.

• Official face at assets/avatar.png. New Grok Bot first setup downloads it from this tag and calls UpdateAvatar. If that fails, setup still succeeds and they can set a picture later.
• The template card uses a geometric mark. First setup sets the official face when the download works.

v1.4.27

Tools unchanged from v1.4.26.

• update T3 Tots now syncs helper scripts and live t3-* skills from one release (sha256-verified), with one yes for box + computers + skills.
• t3-getting-started lists "update T3 Tots" under Things to try.
• t3-update's description notes that phrase is t3-install-tools, not t3-update.

v1.4.26

Public launch. Public-ready README; oversight modes + required pstack in getting-started; skills synced; VERSION and install-tools pin at v1.4.26. Tool binaries unchanged from v1.4.25.

v1.4.25

Should-fixes from v1.4.24 review

Push dest main/master now uses the same colon/slash joins as fetch, and a qenc :// after main/master counts as a word boundary again.

• Encoded push joins ($'HEAD\x3amain', refs/heads$'\x2fmain', …) score high
• Trailing-boundary regression ($'main\x3afeature', :main$'\x3a'feature) score high again
• Safe cases unchanged; nits left alone

T3TOTS_NO_PRIVATE_WORDS=1 bash scripts/check.sh passed.

v1.4.24

Should-fixes from v1.4.23 review

riskOf now runs dest main/master through the same qflag/qflex/qenc joins used for colon/plus/delete specs. After a fetch colon, refs/heads/ is qflex'd too.

• Quote/backslash/brace breaks on fetch colon-specs (:m''ain, :refs/heads/m''ain, feature:m''ain, :m\ain, $':m'{ain,}) score high
• Quote/escape/brace breaks on push to main/master (m''ain, $'\x6dain', HEAD:m''ain, m{''ain,}) score high
• Literals and safe cases unchanged; nits left alone

T3TOTS_NO_PRIVATE_WORDS=1 bash scripts/check.sh passed.

v1.4.23

Fixes (from v1.4.22 review)

1. qenc octal value+256 — bash low-8-bits forms like \453 (+), \472 (:), \546 (f) now score like in-range octal.
2. DEL_SPEC backslash-colon — \:gone and quoted variants are high.
3. Encoded fetch :main — ANSI-C / qenc spellings of leading-colon main/master are high.
4. /i qcls other case — encoded -D / -M / -R / -P are high.
5. Leading-colon fetch — git fetch origin :gone is no longer READ_ONLY/low.
6. Brace expansion — --{force,} / {-rf,} / {:gone,} and related forms are high.

v1.4.22

Fixes (from v1.4.21 review)

1. qflag word-boundary lookahead — the template lost \ from the next-word class, so unique prefixes (--fo, --h, --f, …) scored high when the next letter was an ANSI-C escape while bash still joined it ($'--fo\x{6c}low-tags' → argv --follow-tags). The class now keeps a real backslash (and protectU's sentinel).
2. PLUS_SPEC / DEL_SPEC through qhex — literal + / : missed ANSI-C spellings, so git fetch origin $'\x{2b}main' was low and git push origin $'\x{3a}gone' was normal. Brace/unbraced hex, unicode, and unclosed forms of + (0x2b) and : (0x3a) now score high.

Plain --follow-tags / --quiet / --no-force, plain +main / :gone, and real force flags stay correct.

v1.4.21

Should-fix (from v1.4.20 review)

• Unclosed \x{…}: bash reads hex after \x{ until } or a non-hex byte; } is optional. $'\x{12dp' / $'\x{12d'f etc. now score high. $'\x{2df}' stays byte 0xdf (off high).
• Under-width \U under /i: rewrite \U before matching so the 4-digit \u arm cannot fold onto \U. $'\U002df' stays off high (U+02DF).

Tests

New cases lock the unclosed \x{…} miss table and under-width \U002d… off-high. Prior v1.4.19–v1.4.20 cases still pass. T3TOTS_NO_PRIVATE_WORDS=1 bash scripts/check.sh → ALL CHECKS PASSED.