v1.53.0
·
8 commits
to release
since this release
1.53.0 (2026-09-04)
Features
- console: a model option carries the runtime's own name and blurb (#1773) (e270ce4)
- console: the model field is the same listbox as the two beside it (#1779) (a28364a)
- daemon: a confined session's directory is its own clone, not a worktree of the primary (#1761) (7a8e4b0), closes #1758
- daemon: a confined session's runtime HOME lives under its own directory (#1763) (c8debfc), closes #1761 #1758
- daemon: a deployment declares which model each Claude alias resolves to (#1774) (b9d8869)
- daemon: install a registry binary's vendor archive, so Antigravity probes (#1788) (0ce269f)
- daemon: launch managed ACP adapters from a daemon-owned tree, not npx into the agent HOME (#1757) (02ca9b9)
- daemon: one ACP host per session for a confined self-hosted launch (#1758) (e16f085)
- daemon: one sandbox pod per session on the pool — the host's pod is its own (§11) (#1766) (46c4860)
- daemon: security.sandboxReadRoots carves host toolchains into every sandbox (#1785) (64fff59)
- daemon: the orphan reconciler collects a session pod whose session row is gone (§11) (#1767) (eb9a7aa)
- relay: a webhook caller can key deliveries into one session per subject (#1765) (0c59666), closes #1764
- sandbox: preinstall the browser an agent-browser turn needs (#1762) (a654e2c)
- web: label session isolation by its effective boundary, not the stored flag (#1756) (e0a70cb)
Bug Fixes
- console: the model menu opens inward, not past the dialog (#1782) (876412b)
- daemon: a bundle the checkout no longer holds is a first install, not a failed restore (#1772) (12d76fa)
- daemon: a confined host's temp dir is short enough for its SRT socket (#1770) (e6edbc1), closes #1763
- daemon: a confined session can write its own HOME, but never the credential in it (#1780) (52cf502)
- daemon: a perSubject delivery continues the subject's session (#1768) (46da920)
- daemon: a recorded inode is half the proof that a skill path is ours (#1778) (b60630a)
- daemon: decide a session's pod from its own isolation, and claim none for an unknown tier (§11) (#1784) (3b814ee)
- daemon: install a vendor archive for the probe sweep, not only for an agent's first start (#1791) (d06b3d6)
- daemon: keep the confined session tier inside the sandbox git inventory (#1783) (79f1ea3)
- daemon: make Node's built-in fetch honour the sandbox proxy (#1781) (a391e86)
- daemon: move the session hook policy onto the gitconfig file channel (#1787) (43631ac)
- daemon: one rule decides whether a session is confined (#1776) (4fb8d79)
- web: an issue with no description prints none, not its XML envelope (#1760) (4c32fdb)
- web: one Cancel and shorter copy in the Linear connect wizard (#1759) (9a27498)