v0.20.2
What's changed
Post-v0.20 review cleanup — no behavior change beyond stronger redaction.
Security
- Shared redactor now scrubs model API keys (
sk-…). Defense-in-depth: a
model key pasted into the chat or echoed in a provider error is masked
everywhere the shared redactor runs (session messages, audit logs, reports),
not just on the triage path. Aligns with security rule #15.
Removed (dead code from the v0.20 single-agent migration)
analysis/drilldown.py+ its test — the bounded-aggregate tools whose only
consumer (the deleted in-run analysis narrator) is gone.runs/analysis_report.py:agent_analysis_md+render_agent_report(the
"Agent Interpretation" / "Agent mode" report sections) and the now-empty
agent_sectionparameter on the dataset-report renderers.- Frontend dead API:
uploadDataset(run-scoped upload) andlistDatasets. next_actions.ALLOWED_ACTION_TYPESdead back-compat alias.
Changed (stale docs / comments)
docs/architecture.md:account_discoverydescription no longer claims an
"Agent mode 422 / future phase" — it's the agent'ssurvey_accounttool.CLAUDE.md: dropped the deadoptimization_reportcapability bullet.agent_runtime/__init__.py,guardrails.py,main.py: docstrings no longer
describe an "agent planner mode" (there is one conversational agent).next_actions.normalize_proposaldocstring: clarified it accepts any safe
free-form action_type (not a fixed allowlist).- Frontend
RunEvent: removed the never-emittedplan/tool_selectedtypes. - Stripped historical "(Phase NN)" provenance tags from module docstrings
(migration provenance comments kept).
Install
Builds are unsigned / ad-hoc (no Apple notarization, no Windows Authenticode). Verify downloads against the SHA256SUMS-*.txt files.
- macOS (arm64): open the .dmg, drag to Applications. First launch shows a Gatekeeper prompt — right-click the app → Open, or run
xattr -dr com.apple.quarantine "/Applications/Storage Agent Workbench.app". It starts in a few seconds. - Linux (x64):
sudo apt install ./storage-agent-workbench-v0.20.2-linux-x64.deb - Windows (x64): run the
-setup.exe; if SmartScreen warns, choose More info → Run anyway.
Prompt-free signed builds: see docs/signing.md.