v0.19.28
What's changed
Completes the agent-native rebuild: the conversational agent is the sole
operating surface, and no rigid/ossified pipeline remains. Deterministic engines
survive only as the security/reproducibility floor the agent invokes (and as
opt-in auditable reports) — never a UI-fired flow or a card mid-conversation.
Changed
- No run card ever appears from a conversation. The agent's own read-only
survey/review tools (survey_account,review_bucket_config) now record runs
withorigin='agent'(migration 15) that the thread filters out — the agent
narrates the result inline instead. This removes the stray deterministic
account_discoverycard that could fire mid-chat (e.g. while analyzing an
uploaded log). - Retired the agent-autonomy toggle entirely. The agent is always a fully
autonomous read-only investigator; theassisted/autonomous_readonlysetting,
its endpoint, and its Settings UI are gone. Read-only investigation always runs;
cloud data-moving work still always requires confirmation. - The agent stays on the user's request. New instructions stop it from firing
cloud probes (credentials, account survey) for a local-file task — it analyzes
the attached file and answers, touching the cloud only when asked. - Removed the retired
new_runform handoff from next-action proposals:
investigation/diagnosis/config/account/analysis proposals route back to the
agent conversationally; only evidence import, the saved report, and a context
question get a purpose-built flow.
Fixed
- Uploading a file no longer loses it if the upload fails (the composer is
cleared only after success). - Forking a session now copies its uploaded datasets and their files on disk.
- Re-uploading the same filename reuses the dataset row instead of leaving
duplicate records pointing at one overwritten file. - A streamed turn that ends without a completion event now reconciles via the
blocking fallback instead of showing an empty next-steps list. - Empty-state "Analyze access logs" / "Inventory" chips open the file picker.
Removed
- Dead code:
agent_runtime/autonomy.py, the/settings/autonomyendpoint, the
frontendpreviewSessionAction, and stale docs/comments (README confirmation
wording, composer "two modes", the M012 "OS keychain" note, the "Phase 17
allowlist" comment).
Install
Builds are unsigned / ad-hoc (no Apple notarization, no Windows Authenticode). Verify downloads against the SHA256SUMS-*.txt files.
- macOS (arm64): open the .dmg, drag to Applications. First launch shows a Gatekeeper prompt — right-click the app → Open, or run
xattr -dr com.apple.quarantine "/Applications/Storage Agent Workbench.app". It starts in a few seconds. - Linux (x64):
sudo apt install ./storage-agent-workbench-v0.19.28-linux-x64.deb - Windows (x64): run the
-setup.exe; if SmartScreen warns, choose More info → Run anyway.
Prompt-free signed builds: see docs/signing.md.