Skip to content

open-codeasier v0.3.3

Choose a tag to compare

View all tags
@codeasier codeasier released this 09 Sep 10:44
· 8 commits to main since this release
v0.3.3
c3cc962
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

[0.3.3] - 2026-09-09

Changed

  • Store cross-review run manifests at ~/.open-codeasier/cross-review and snapshot worktrees at ~/.open-codeasier/cross-review/.worktrees/<runID>/worktree. Override the parent directory with OPEN_CODEASIER_STATE_HOME. The previous XDG_STATE_HOME / macOS Application Support / %LOCALAPPDATA% / ~/.local/state write locations are no longer used; those roots are still scanned so existing runs are not orphaned, and released manifests (no live snapshot worktree) are moved to the new root. Parent-session judging needs a one-time external_directory allow rule for ~/.open-codeasier/cross-review/**.

Fixed

  • Catch /cross-review-audit up with the current cross-review protocol. The payload now carries cross_review_config previews, start arguments (target, hasEvidenceDir, reviewModelCount, judgeModel), status results (readyToFinalize, actionRequired roles, stray-timeoutAction warning), rejected-call errors, adapterGatherer, snapshot, finalStatus, and per-role timing, timeout, retry, and bounded error fields, so timeout decisions, adapter failures, and evidence provenance can be graded instead of inferred.
  • Stop grading a failed PR adapter as a broken evidence contract: a new adapter.gather check reports the adapter error and run.evidence_contract is insufficient-evidence when no reviewer was dispatched, including a legacy blocking persist that omitted adapterGatherer.
  • Stop failing role.prompt.tools_deny for prompts dispatched before cross_review_config or cross_review_audit joined READ_ONLY_TOOLS. The check fails only when a write tool is absent or any deny key is enabled, and names absent primary-session-gated keys in its detail.
  • Add role.session.directory, which verifies that snapshot-run role sessions are bound to the snapshot worktree, and read role sessions through the run and caller directories when the worktree no longer answers.

Full Changelog: v0.3.2...v0.3.3

Assets 2
Loading