v1.2.3

Agent Flow 1.2.3: unattended runs stop less, and cost fewer tokens

Run AI coding agents unattended without letting them go loose: one implements, another reviews, a third tests, a guard blocks what they must never touch, and you only see what needs you.

Headline

• review_paths: agents can now add a line to your CI or test list (a new test, a new step) without stopping the run. The pull request opens as a draft that waits for you, and an edited or deleted line, or a line that reaches secrets, goes back to the agent. Protected paths stay hard.
• Lean mode (pipeline.lean, on at lite): the Implementer and Reviewer aim for the smallest correct change. Deliberate shortcuts are marked lean: in the code, and agent-flow debt lists them.
• Fewer tokens: skill descriptions 3,285 → 1,969 characters, the orchestrator skill 15.2 KB → 3.9 KB, terse role output, and doctor warns when a context file is heavy.

New

• agent-flow uninstall takes out only what install wrote (preview first, --yes to apply).
• agent-flow brief and statusline: a session briefing and a status badge for Claude Code, Codex and Cursor.
• agent-flow mcp: a read-only, zero-dependency MCP server.
• pipeline.isolate_roles: stops a globally installed plugin from adding context to a role.
• More install targets: cline, kiro, qoder, swival, factory, commandcode (instruction-tier, not run live here).

Fixed

• Re-running install stacked duplicate guard hooks for Codex, Cursor and Gemini.
• install --harness claude overwrote a user's own hook with agent-flow and guard in its name.
• The guard could hang on hook input that never arrives; it now waits 10 s and refuses where protection is on.
• A huge role output could hang report validation.
• Unreadable CI diffs counted as "nothing added"; they are now a violation.
• The MCP server's input buffer was unbounded; piped output could be cut short.

Tested: 494 tests against real git repositories, passing on Windows, macOS and Linux, Node 20 and 22.

Full details: CHANGELOG.md and docs/LEAN.md.