Repository navigation
Kintsugi v0.3.9
Kintsugi v0.3.9
Editable per-Agent plans
Open Plan from the Work-view launcher. The pane follows the selected Agent; each Agent, including native subagents and CLI Agents, has its own persistent Markdown checklist. Plans survive refresh, new sessions and compaction.
The user and Agent share the same plan contract: read, write, structured update, item patches, exact edits and reset. At most one item can be in progress. Live changes preserve unsaved drafts; revision checks prevent stale browser saves, and drafts survive Agent switches, pane closure and page reloads. Saving never starts work. Submit to model explicitly sends the saved plan through that Agent's composer without consuming its existing draft.
Checklist semantics are adapted from Rui Carmo's MIT-licensed PiClaw Plan Sidebar. Attribution and licence text are retained in the adapted source. The native adapter reads the current plan as transient request context rather than changing provider caching defaults.
Instance credential catalogue
Settings → Credentials stores encrypted, write-only values with explicit template grants. Agents can discover only their granted descriptions, allowed destinations and opaque placeholders through list_credentials. Rotation, disabling and revocation apply to subsequent proxy requests, including requests using cached hooks.
New catalogue entries permit exact DNS hosts over HTTPS on port 443. URL-path substitution requires its own explicit permission; query-string substitution and plaintext shell injection remain unavailable. Existing global and template secrets retain their current behaviour. The catalogue adds stale-form protection, bounded management audit metadata and last proxy-use timestamps. Its encryption key remains a separate file in the same app data volume, not an external vault.
Committed history and output search
The native search_history tool uses SQLite FTS5 over the current workspace's committed messages and completed tool output. It supports Agent/branch filters, phrases, prefixes and Boolean queries, with bounded excerpts and native source references. Hidden thinking, system instructions, live partial output and uncommitted sidecars are excluded.
Saved bash logs are indexed lazily while accessible, up to an 8 MiB prefix per file and eight files per search. Coverage reports pending files and index limits. Searching never starts a parked workspace. The derived index is rebuildable and detects journal rollback at its saved boundary.
Verification and operation
- Final local verification: 2,462 tests passed, 39 skipped, zero failures across 335 files. Frozen installs, lint/types, the System bundle and actionlint passed.
- Domain, native-Harness and authenticated MCP checks cover per-Agent isolation, persistence, validation, revision conflicts and tool execution.
- Manual Plan acceptance passed 21 checks; composer acceptance passed 89/89 checks in six explicitly partial, no-inference Chrome scenarios.
- Desktop/mobile visual review, browser save handling and a networkless saved-output fixture passed. Production-provider inference, CLI terminal delivery and physical mobile keyboards were not live-qualified by these checks.
- No new runtime dependency, application environment variable, System operation or compatibility counter. System capability stays 3, app minimum 0, network-policy reader 2 and resource-policy reader 1.
- Existing network exclusions, custom registries/sources, explicit pins, paired rollback and telemetry are preserved. Concurrent resource edits are not included.
Publication advances latest after native AMD64/ARM64 verification; channel updates are not atomic. stable is not promoted. No existing installation is updated or restarted.
Before downgrading, stop active native tool calls and back up app data, including projects.json and project-secrets.key together. Image rollback does not restore settings or journals. Older apps can discard newer credential-catalogue fields when rewriting template settings.