v0.1.1
Hardening release driven by a full-codebase review, with every adapter change verified against the real vendor SDKs.
Fixed
- Codex approval-mode mapping was inverted: STRICT/CAUTIOUS now map to
deny_all(never escalate beyond the sandbox); DEFAULT/PERMISSIVE map toauto_review. Previously strict callers could have escalations auto-approved and permissive callers had them denied. - Antigravity MCP stdio configuration no longer crashes (required
namenow passed). - Codex honors
TurnResult.status/error— failed and interrupted turns are no longer reported as success. - Claude reports
finish_reason="max_turns"on max-turns truncation. - Strict mypy passes identically with and without vendor extras.
Changed (behavior)
- Antigravity DEFAULT posture is safer: nondestructive toolset instead of all tools + allow-all. STRICT/read-only → read-only toolset; PERMISSIVE keeps all tools.
- Previously silently-ignored task fields now raise
UnsupportedTaskInputError(codex: tool filters/budget/network; antigravity: budget/network/allow+deny combo; claude: network). - Antigravity session data moved from
/tmpto$XDG_CACHE_HOME/agent-runtime-kit(0700), overridable viadata_dir=. - Missing SDKs/credentials raise typed
AgentRuntimeUnavailableError. codexextra now requiresopenai-codex>=0.1.0b3so it installs on glibc Linux.
Added
- Real incremental streaming events for Claude; tool audits for Codex parsed from
TurnResult.items. - Dropped vendor kwargs surfaced in
AgentResult.metadata["dropped_options"]. - CI matrix (Python 3.10–3.13 × core/all-extras); publishing now gates on tests.
- Real-SDK contract tests; sdist allowlist (no internal artifacts shipped).
Full details in CHANGELOG.md.