Skip to content

Release v0.13.0

Latest

Choose a tag to compare

@github-actions github-actions released this 19 Jul 15:37

What's Changed

Added

  • Command permission profiles (Claude/Grok-style presets): tools.command_permission_profiles in config (builtins tight, open) plus user-saved SQLite profiles. REST under /api/permissions/profiles (list, get, apply, put, delete). Synthetic apply ids: __yaml__ (clear overrides → config only), __blank__ (empty lists). Migration 004_perm_profiles. See docs/SECURITY.md
  • Migration 003_command_policy: ensure command_policy_overrides exists on DBs already at head without the table
  • agent.tool_exec done events include truncated output preview (≤1500 chars) for live clients (Felix -vv, Web UI)
  • Worker-mode broadcast forwards agent.tool_exec / agent.iteration / agent.thinking (previously only tool.call / tool.calls.flush reached live clients in split mode)
  • Dry-run tools step for custom:* modes uses the custom agent’s declared tool list (not the full profile catalog)
  • Docker Compose bind-mounts custom_agents.yaml and custom_agents.local.yaml so private agents (e.g. @felix) load on remote deploys
  • deploy-remote.sh seeds missing custom-agent YAML placeholders and syncs custom_agents.local.yaml on config-only deploys
  • Read-only gate: pure version/help probes (npm --version, node -v, …) and bare version/help subcommands allowed under read_only runs

Changed

  • Command policy store uses the chat DB (web.database_path, default data/web_chat.db)
  • Runtime override merge is a full document (empty lists clear YAML baseline; no silent fall-through)
  • config.example.yaml documents permission profiles and uses data/web_chat.db as the chat DB example

Fixed

  • Felix/Web clients not receiving tool result previews on SAQ worker runs

Full changelog: https://github.com/bulletinmybeard/agent-forge/blob/master/CHANGELOG.md