v0.51.2

What's Changed

Security

• Breaking: MCP network transports (sse, streamable-http) now refuse to bind beyond loopback without an auth token and explicit --allow-remote (#2019). Previously, a server exposed to a non-loopback address (--host 0.0.0.0 or a public IP) accepted unauthenticated remote calls to privileged tools such as ouroboros_execute_seed, letting any reachable client run arbitrary agent workflows. Loopback binds and stdio transport (the default for ooo/plugin usage) are unaffected and remain credential-free.

  Credit: reported privately and responsibly by an external security researcher (lksxsj1491342590@qq.com). Thank you for the detailed writeup and PoC.

Features

• Anonymous PostHog usage telemetry with funnel instrumentation (#1908)

Bug Fixes

• Tell the default-runtime user to pass --runtime, not to reinstall (#2039)
• Make modal Esc hints truthful in the TUI (#2032)
• Make orchestrator lifecycle replay durable (#2017)
• Make SLT log panel controls truthful (#2030)
• Use Win32 heartbeat liveness checks on Windows (#2025)
• Name the predicate in the Stage 2 evaluation failure reason (#2028)
• Warn when the mechanical evaluation path is skipped during evolve (#2029)
• Resolve compatible Python for plugin flows (#2018)
• Make agent task results race-safe (#2015)
• Isolate Codex launcher environments (#1990)
• Distinguish missing evidence from verified results in verification (#2002)

Documentation

• Name the minimum version that starts as an MCP server (#2045)
• Lead the pyproject summary with what nothing else in the directory claims (#2041)
• Surface the star count on the first screen (#2036)
• Scope the hidden-assertion claim at the point it is made in zh docs (#2027)
• Align TUI operator guides with runtime contracts (#1996)
• Index the four Korean runtime guides (#2013)

Testing

• Write the cross-language pin the opencode bridge comment says exists (#2042)
• Bind documented CLI surface to the typer registry (#2022)
• Harden setup and stage synchronization deadlines (#2014)
• Stabilize xdist resource assertions in memory tests (#2005)

Maintenance

• Bump the python-minor-patch dependency group (5 updates) (#1970)

Full Changelog: v0.51.1...v0.51.2

What's Changed

• test(memory): stabilize xdist resource assertions by @Q00 in #2005
• fix(verification): distinguish missing evidence from verified results by @Q00 in #2002
• fix(mcp): isolate Codex launcher environments by @Q00 in #1990
• fix(plugin): make agent task results race-safe by @Q00 in #2015
• test: harden setup and stage synchronization deadlines by @Q00 in #2014
• feat(telemetry): anonymous PostHog usage telemetry with funnel instrumentation by @Q00 in #1908
• fix(skills): resolve compatible Python for plugin flows by @Q00 in #2018
• docs: index the four Korean runtime guides by @Q00 in #2013
• docs(tui): align operator guides with runtime contracts by @Q00 in #1996
• test(docs): bind documented CLI surface to the typer registry by @Q00 in #2022
• docs(zh): scope the hidden-assertion claim at the point it is made by @Q00 in #2027
• fix(evolve): warn when the mechanical evaluation path is skipped by @Q00 in #2029
• fix(evaluation): name the predicate in the Stage 2 failure reason by @Q00 in #2028
• fix(mcp)!: require credentials to serve MCP beyond loopback by @Q00 in #2019
• fix(windows): use Win32 heartbeat liveness checks by @bokjk in #2025
• fix(tui): make SLT log panel controls truthful by @Q00 in #2030
• chore(deps): bump the python-minor-patch group across 1 directory with 5 updates by @dependabot[bot] in #1970
• fix(orchestrator): make lifecycle replay durable by @Q00 in #2017
• fix(tui): make modal Esc hints truthful by @Q00 in #2032
• docs(readme): surface the star count on the first screen by @Q00 in #2036
• test(opencode): write the cross-language pin the bridge comment says exists by @Q00 in #2042
• fix(mcp): tell the default-runtime user to pass --runtime, not to reinstall by @Q00 in #2039
• docs(pyproject): lead the summary with what nothing else in the directory claims by @Q00 in #2041
• docs(readme): name the minimum version that starts as an MCP server by @Q00 in #2045

New Contributors

• @bokjk made their first contribution in #2025

Full Changelog: v0.51.1...v0.51.2