Skip to content

Releases: GSA-TTS/agentic-coding-quickstart

v3.1.0

Choose a tag to compare

@github-actions github-actions released this 01 Sep 20:10
1b1fb72

3.1.0 (2026-09-01)

Features

  • acq: make --clone a neutral option, emulated on msb via a managed host-side scratch clone (#423) (7003608)

Bug Fixes

  • install: prefer package managers in auto mode (#433) (831540d)
  • kits: reject block-scalar environment[] values instead of mangling them (#420) (02f8531)
  • secret: store macos secrets in keychain via stdin (#436) (20ab8c7)

v3.0.0

Choose a tag to compare

@github-actions github-actions released this 31 Aug 23:41
d6a1084

3.0.0 (2026-08-31)

⚠ BREAKING CHANGES

  • docs/QUICKSTART.md and docs/QUICKSTART_SBX.md have moved to docs/howto/acq.md and docs/howto/sbx.md. No redirect stubs are kept (this lands ahead of 3.0.0). External links to the old paths break.
  • acq: on a host with both backends installed and no explicit selection, acq now resolves to msb instead of sbx.
  • acq: opencode-web.sh is removed. Use the openchamber acq kit to run OpenCode in the browser.

Features

  • acq: add a neutral interactive-shell verb — acq shell NAME (#399) (1862b05)
  • acq: add backend-agnostic --image/ACQ_IMAGE base image override (#358) (80ae257)
  • acq: add per-verb --help for all acq-owned subcommands (#368) (90f2b4b)
  • acq: default to msb backend and remove qsbx for 3.0.0 (#266) (21f7901)
  • acq: detect stale sandboxes + acq kit check|update (#236) (#241) (f1693aa)
  • acq: fix subcommand dispatch hygiene and implement 'secret import' (#283) (5ae27c6)
  • acq: sand rough edges off first-run onboarding (PATH self-repair + auto host check) (#281) (71698d7)
  • acq: sbx↔msb backend parity, incl. live openchamber-on-msb (omnibus #234) (#233) (32f9ae0)
  • acq: scope GitHub token per-sandbox to mounted repos (#229) (b355706)
  • install: add auto-selecting curl|sh installer + streamline README (#387) (4d67551)
  • install: enable homebrew tap install (#424) (5f04294)
  • kits: add neutral volumes vocabulary (sbx v2 5.7 passthrough + msb parity) (#357) (8029d2a)
  • kits: synthesize chmod from hybrid/v1 mode fields into generated setup.install (#390) (7a5cb3c)
  • msb: collapse gateway-DNS grant to allow@dns and re-verify git-HTTPS secret substitution vs msb 0.6.9 (#318) (491c75c)
  • msb: derive default sandbox-template image from agent token (#409) (cc27fa2)
  • msb: diagnose+disambiguate msb egress failures (three signatures) (#306) (7a6d371)
  • msb: ensure an OCI engine via rootless podman (+ verify-backends fixes, sbx 0.38 floor) (#302) (8088dcc)
  • msb: forward the host ssh-agent into the guest via --vsock (#316) (e4e8317)
  • msb: mirror the sbx balanced network policy as the msb default egress (#295) (2c056cb)
  • msb: neutral ACQ_NETWORK_TIER egress selector + deprecate ACQ_MSB_BALANCED_EGRESS (#310) (2242af4)
  • msb: re-run kit startup on restart via acq start/restart (#260) (7bbc999)
  • msb: stage kit startup commands as a create-time script (#259) (3ff736b)
  • progress: TTY-aware progress feedback during long acq run phases (#290) (ab44206)
  • sbx: add actions=read scope to PAT URL (#262) (fbaa291)

Bug Fixes

  • acq: accurate git-identity guidance + workspace path pre-flight (#216) (546cc93)
  • acq: carry publishedPorts and quote allow hosts in kit-translate (#221) (a36d783)
  • acq: don't hang key rotation when sbx needs a login (#211) (#212) (bb0544d)
  • acq: enumerate keychain-linux secrets in acq secret ls (#258) (f4e1bb9)
  • acq: intercept --kit <ref> on run/create and translate it (#223) (a86d151)
  • acq: let secret rm remove any stored entry, not just built-ins (#300) (#301) (ab506ed)
  • acq: make kit fetch non-interactive; never prompt for git creds (#207) (#209) (b505336)
  • acq: make USAi key rotation backend-neutral (#218) (4a5f8e1)
  • acq: persist --kit/extra refs and restore them on start/restart (#328) (78ec68c)
  • acq: propagate host git identity to guest (#429) (68a6e59)
  • acq: run fails closed on an unresolvable target instead of silent no-op (#257) (c0b155c)
  • acq: run github-scope advisory before provision on ...
Read more

v2.0.0

Choose a tag to compare

@github-actions github-actions released this 21 Jul 18:23
21fd96a

2.0.0 (2026-07-21)

⚠ BREAKING CHANGES

  • acq: qsbx now requires sbx >= 0.35.0. sbx 0.35.x has no Linux/ARM64 build (deferred to 0.36.x), so Linux/ARM64 hosts cannot meet the floor until 0.36.x.

Features

  • acq: add msb backend and neutral hybrid/v1 kit translation (#202) (f993250)
  • acq: add pluggable-backend acq wrapper (sbx driver) and deprecate qsbx (#201) (fbd57be)

Bug Fixes

  • sbx: recover sandboxes with orphaned USAi placeholders (#196) (58f58f9)

v1.0.1

Choose a tag to compare

@github-actions github-actions released this 08 Jul 15:47
7f3d818

1.0.1 (2026-07-08)

Bug Fixes

  • sbx: align qsbx docs/verify with v1.5.0 usai-provider global-config merge (#194) (e1622f6)

v1.0.0

Choose a tag to compare

@github-actions github-actions released this 07 Jul 22:35
112fded

1.0.0 (2026-07-07)

⚠ BREAKING CHANGES

  • sbx: the agentic-coding-playbook git submodule is removed. Existing clones should run git submodule deinit -f agentic-coding-playbook after pulling. The playbook is now delivered into sandboxes by the playbook kit, not the submodule.

Features

  • sbx: bump patterns kit ref to v1.5.0 release (#193) (f6f57d5)
  • sbx: deliver USAi config and the playbook as sbx mixin kits (#184) (88f121a)

Bug Fixes

  • docs: Remove duplicate <details> tag that breaks rendering of README (#192) (809154b)

v0.11.0

Choose a tag to compare

@github-actions github-actions released this 01 Jul 17:34
db1de9c

0.11.0 (2026-07-01)

Features

  • opencode: reduce read/inspection approval fatigue in permissions (#179) (e840ae4)

Bug Fixes

  • docs: harden Docker install (no curl|sudo sh) (#187) (1706af3)
  • qsbx: repair stale usai placeholders (#182) (4b3c7e0)

v0.10.1

Choose a tag to compare

@github-actions github-actions released this 26 Jun 22:03
8c7612c

0.10.1 (2026-06-26)

Bug Fixes

  • correct CODING_PRACTICES.md link (#176) (3beba66)
  • qsbx: consolidate duplicate USAi secrets and attach by --name (#159) (039013f)

v0.10.0

Choose a tag to compare

@github-actions github-actions released this 15 Jun 17:20
bc48adb

0.10.0 (2026-06-12)

Features

  • add key rotation script (6503fc8)
  • Better rotation script. (33c22a1)
  • qsbx: validate USAi key and offer rotation before attach (#143) (14c4cc5), closes #140
  • sync: automate USAI model sync for opencode templates (26e777b), closes #117 #118 #119
  • template: add comprehensive commented examples for OpenCode config (#123) (0ed5771)
  • template: add headers for agentic traffic identification (#125) (a54f7e6)

Bug Fixes

  • Apply suggestion from @mogul (edeba92)
  • ci: add permissions block to release workflow (#129) (27b019e)
  • ci: correct action SHA pins for usai-model-sync workflow (1579774)
  • ci: track package-lock.json for reproducible CI builds (59762bd)
  • ci: update markdownlint-cli2-action SHA to v23.2.0 (#135) (3b38acb)
  • clarify rotation steps (4e6255f)
  • clarify rotation steps (934497d)
  • Formatting, typos (ef65361)
  • opencode PR suggestion bugs (9ce4664)
  • prettier, formatting, and fix link to guidance (dec8d11)
  • sync: improve API error messages for debugging (2bcf082)
  • Use QS_SBX var (ad17ad7)
  • web: run opencode web detached via sbx exec (#147) (70cf626)

v0.9.0

Choose a tag to compare

@github-actions github-actions released this 29 May 18:19
8ef1600

0.9.0 (2026-05-29)

Features

Bug Fixes

  • reconcile files used in init-project and update makefile to current standards (#82) (5e2f529)

v0.8.1

Choose a tag to compare

@wz-gsa wz-gsa released this 28 May 21:07
5d64c11

0.8.1 (2026-05-28)

Bug Fixes

  • ci: correct workflow formatting and trigger CI (#78) (eeb08c7)
  • ci: remove GITHUB_TOKEN secret from pr-lint workflow (#78) (eeb08c7)
  • ci: remove GITHUB_TOKEN secret from release workflow (#79) (0bbb485)
  • docs: remove GPT-5.x max_tokens vestigial documentation (#77) (b03c8c3)
  • pre-commit: enhance pre-commit hook coverage and add markdownlint-cli2 (#76) (a7a0e48)