v2.13.1

node9ai released this 11 Sep 19:36

· 44 commits to main since this release

c1b9838

2.13.1 (2026-09-11)

Bug Fixes

cost: bill each Codex request once, at the model that served it (f71c543)
jail: block a credential DIRECTORY, not only the files inside it (f5fa5ed)
jail: give all five carriers of the .env rule one semantic (347e498)
jail: reach the read through wrappers, redirects and string payloads (0ebce6d)
taint: a jailed path is not an ssh command (563a485)

Assets 9