Skip to content

v0.17.0rc3

Pre-release
Pre-release

Choose a tag to compare

View all tags
@saipix saipix released this 07 Oct 05:24
v0.17.0rc3
b1eaea6

Release candidate — for testing. agento upgrade will not pick this up; pin it.

This candidate is cut from a branch rebuilt on top of the 0.16.x line. It holds everything in rc2, plus the 0.16.3–0.16.5 fixes and the changes below.

New Features

  • Toolbox capability auth — every MCP session and every /api route now needs a per-run capability token; the toolbox takes the agent_view and job from the token's row, never from the caller.
  • Native harness config passthrough — claude/settings (JSON), codex/config (TOML) and pi/settings (JSON) are deep-merged over the config Agento generates, per agent_view, so a CLI setting needs no new Agento code.
  • Cron schedule from config — a module's cron.json schedule may hold a {module/path} directive, so an operator sets the schedule with config:set.
  • agento e2e --agent-view — runs the test job as an agent_view and checks the toolbox telemetry; the credential now comes from the job's own pool, as the consumer selects it.

Bug Fixes

  • Claude Code 2.1.291 — default CLI pin moved to 2.1.291; Agento now loads only the toolbox MCP server, so a stray claude.ai connector can no longer shadow it.
  • Claude interactive run — agento run <view> and --yolo open straight at the prompt instead of exiting on the 2.1.x trust and bypass-mode dialogs.
  • Claude telemetry — toolbox calls made by subagents are counted, a background subagent's two result events are summed, and an error that comes only in errors[] is reported with its text.
  • claude/trust_level=full — now really skips permission prompts (permissions.defaultMode); the old key was ignored by the CLI.
  • claude/personality — removed: Claude Code never read the key it wrote. Use the agent_view instructions instead.
  • Stored secrets — the encryption key is now derived with scrypt and a per-value salt; existing values are re-encrypted by a data patch on setup:upgrade.
  • SSH and credential store — the SSH private key is never written to disk, and uid agent can no longer read the credential store in the cron container.
  • Config directives — fixed a regex that a crafted {…} value could make hang (ReDoS).
  • XLSX tool — a very large sheet range no longer hangs the toolbox.
  • Codex — default CLI pin moved to 0.157.0.

Docs

  • Project rules consolidated into a tracked RULES.md; rule citations and the merged security docs fixed.
  • Dev images are tagged per compose project; the secrets example is trimmed; Node built-in imports use the node: prefix; anyio bumped to 4.14.2.

Upgrade

Restart the toolbox before cron runs setup:upgrade: an old toolbox cannot read secrets that the scrypt data patch re-encrypted. agento upgrade restarts both.

agento upgrade --version 0.17.0rc3
Assets 4
Loading