v0.7.0

0.7.0

• Added /goal, which keeps a session working towards a condition you set. Each turn is judged against it, and where it does not hold the work goes back with the reason, up to ten rounds. /goal clear takes it off, and so does Ctrl-C with nothing running.
• Added every model your AWS account can reach on Bedrock, not just Claude. A provider block naming amazon-bedrock states a region and lists as many models as you like, each shown under the name you give it, alongside the three tier variables. (#202)
• Added --model and --add-dir to a one-shot run, so a script can name the model it wants and reach a directory beside the one it runs in. With no flag, a run takes the model /model recorded, the same one a session opening there would. (#95)
• Improved run for a line that only reads: where every step is a known reading command over paths you have vouched for, it runs without asking and its output comes back as text rather than quarantined. (#70)
• Changed a run nobody is watching to ignore the allow rules in your settings file, so a script that writes a file, runs a program or fetches a URL now needs --dangerously-skip-permissions to do it. The deny and ask rules still decide as they did. (#145)
• Changed permissions.additionalDirectories to ask about each directory it names as a session opens, and to open and vouch for only the ones you accept. A settings file a checkout carries no longer opens a path elsewhere on your machine with nobody asked. (#140)
• Changed hover text from a language server to come back quarantined. Nothing in an answer says which file the prose was written in, so it cannot be labelled by the file you asked about. (#154)
• Changed the repository name to bravebot, so the install script and the line the update notice prints now name github.com/brave-experiments/bravebot. A copy already installed still finds its update, through a redirect. (#133)
• Changed a processor's reply so that no word in it means leave this file alone: UNCHANGED is gone, and an answer that marks no document now writes nothing and reports which file stands as it was. A document whose whole content was that word could not be written before, because the reply was read as a verdict instead of as content. (#28)
• Fixed a crash while editing the prompt in vi mode: marking a stretch in VISUAL mode and then shortening the line, with Backspace or Ctrl-W, panicked and left the terminal unusable. Every key that shortens the line now ends the selection. (#175)
• Fixed ~/.bravebot and the files under it being readable by every account on the machine, which included your prompt history and a stored credential. A directory an older build left open is narrowed, and a language server index an earlier build wrote one level too deep is removed. (#114)
• Fixed the middle of a long command's output being lost. What run and job_output printed is kept whole now, so a capped result comes back with a reference to the rest instead of the command having to be run again. (#200)
• Fixed a deny rule being ignored by a search or a listing that reached the file from a directory above it. A file a rule covers is left out before it is opened or named. (#143)
• Fixed run not asking before a redirection feeds a file to a program, so cat < ~/.ssh/id_rsa no longer goes through on an earlier answer about cat. Such a run asks every time, and the answer cannot be remembered. (#146)
• Fixed a delegate being offered fetch_url, and being able to put a question on your screen or replace your task list. (#147)
• Fixed a write through a symlinked directory inside your working directory landing outside it, so the bytes go where the path you approved said. (#214)
• Fixed a slow endpoint being given up on after 60 seconds and asked again, when the wait for a reply to begin is allowed to be ten times that. (#158)
• Fixed a release being published without its Windows binary, which left every Windows install failing on a missing download. (#195)
• Fixed a background job being reported as ended with the last of its output still unread.
• Fixed reading an image or a PDF reaching a file outside your working directory and the directories you added. (#141)
• Fixed a file a command's output was redirected into staying recorded as trusted, so reading it back no longer returns an unvouched program's output as trusted text. (#142)

v0.6.0

Full Changelog: v0.5.1...v0.6.0

v0.5.1

Full Changelog: v0.5.0...v0.5.1

v0.5.0

What's Changed

• Added code navigation through a language server: jump to a definition, find references, read a hover, list the symbols in a file or the workspace, and follow a call in either direction. The server runs with your access once you allow it, and its index is cached so later sessions start fast.
• Added fetching a URL, so an agent can read a doc page or the issue behind an error. It asks before each one, and the page is quarantined: a page telling it to ignore its instructions is talking to nobody.
• Added vi editing in the prompt box, with the modes, motions, operators, text objects like ci(, and visual mode drawn as you select. Turn it on in /config; the box is otherwise unchanged.
• Added background commands, so an agent can start a server and then use it. run hands back a job name and job_output reads what it has printed since the last look.
• Added regular expressions to search. A pattern is now matched as one instead of being treated as literal text and reported as no matches.
• Added reading images. A screenshot or scanned page is now readable, though only a component with no tools looks at it.
• Added npm as a way to install: npm install -g @brave/bravebot. The binary is checked against its published checksum.
• Added /config, a panel for interface preferences, starting with vi editing.
• Added project settings: .bravebot/settings.json and settings.local.json beside your work now layer over the global file, and bravebot doctor names which file a value came from.
• Added the changed lines to what an edit reports, so an agent can see what it wrote instead of a count of replacements.
• Added a warning when a turn edited files and ran nothing, so an unbuilt diff is not mistaken for a checked one. The agent is also asked once whether any of it runs.
• Added a nudge to an agent that has read for eight rounds without writing anything, so settled work lands while the turn is still going.
• Changed the model list to the ones this agent is offered, and the default to automatic-brave-bot. automatic still resolves to it. (#129)
• Changed the prompt to state the working directory, platform, shell, whether the tree is a checkout, and the date, so an agent stops running pwd to find out.
• Improved speed on Bedrock by telling the service which part of a request it has already read, instead of paying full price for the whole conversation every round.
• Improved how much gets done per round: independent calls go out together, and a read with no line range returns the file up to a page instead of thirty lines at a time.
• Fixed quarantined command output looking like a dead end, which left agents reading files one at a time. It now says how to see the output, vouch for the command, or read the file directly.

Full Changelog: v0.4.0...v0.5.0

v0.4.0

What's Changed

• fix(config): allow gateway-only setups without Brave credentials by @aekeus in #107
• fix: report context occupancy state and track guessed budgets (#69) by @winshaurya in #110
• feat: implement session export, fork, and undo (Issues #91, #98) by @winshaurya in #112
• chore(deps): update actions/upload-artifact action to v4.6.2 by @renovate[bot] in #120
• chore(deps): update actions/download-artifact action to v4.3.0 by @renovate[bot] in #119
• chore(deps): update actions/checkout action to v7 by @renovate[bot] in #117
• chore(deps): update github artifact actions (major) by @renovate[bot] in #118
• chore(deps): update softprops/action-gh-release action to v3 by @renovate[bot] in #124
• chore(deps): update swatinem/rust-cache action to v2.9.2 by @renovate[bot] in #123
• chore(deps): pin dependencies by @renovate[bot] in #121
• release using jenkins instead of github actions by @mihaiplesa in #125

New Contributors

• @mihaiplesa made their first contribution in #125

Full Changelog: v0.1.1...v0.4.0

v0.1.1

What's Changed

• chore: Configure Renovate by @renovate[bot] in #1
• feat(tui): render markdown formatting in replies by @aekeus in #5
• Match the credit page to SafeHouse by @AliShahin in #6
• Accept -p, and quarantine what is piped into it by @aekeus in #10
• Satisfy clippy on the mouse arm and the session sort by @aekeus in #11
• feat: skills and AGENTS.md by @aekeus in #13
• feat: ask the user several questions at once by @aekeus in #19
• Render markdown tables in the transcript by @aekeus in #22
• Compaction: summarise a long conversation in the request, not the record by @aekeus in #20
• fix(cli): send trace output to stderr by @mikemikimike in #55
• Update color scheme by @aguscruiz in #58
• Add /theme with built-in palettes, custom JSON, and a centred picker by @aguscruiz in #59
• link the documentation site from the README by @bbondy in #63
• fix(agent): keep what a run printed before the limit stopped it by @aekeus in #62
• feat: plan a whole run, then execute it (--mode manifest) by @AliShahin in #60

New Contributors

• @renovate[bot] made their first contribution in #1
• @mikemikimike made their first contribution in #55
• @aguscruiz made their first contribution in #58
• @bbondy made their first contribution in #63

Full Changelog: https://github.com/brave-experiments/brave-bot/commits/v0.1.1