v0.19.1

Review finished work from the Inbox, and a tighter permission set for agents without YOLO.

New

• Review card: when a worker hands a task back with its branch, the Inbox shows a Review item: branch and target, commits ahead, changed files, the last commit message, what the worker said is done/left and about tests, and a "View diff". Merge runs on that pc only (git merge --no-ff into the branch the worker started from, never a push); it refuses when the main checkout is not clean or not on that branch, when a merge/rebase of yours is in progress, when the branch adds a file that already exists on disk (e.g. an ignored .env), when the repository's git config changed since the worker started, or when the branch touches .gitattributes/.gitmodules/.lfsconfig; a conflict is aborted ("merge by hand"). Reject keeps the branch and can send the task back to the agent on that same pc with your reason ([Agent@pc, ID-fix]).

Security

• Agents without YOLO (workers and chats) could run git log/git diff with --output=<file> and write anywhere. Claude now gets only fixed forms of git diff/git log without asking; agy no longer gets them without asking; Codex was already confined by its sandbox.

Image: ghcr.io/to0wnn/knowledge:0.19.1