hao-code v1.18.59

Tighten the existing sandbox Glob bounded-result wording so it stays explicit without implying an unknown total count. No new tools, protocols, or public SDK APIs.

hao-code v1.18.58

Polish existing SDK behavior without adding new tools or protocols. Extract read-receipt batch promotion, align sandbox Glob/search result wording with host tools, standardize sandbox search failure prefixes, and refresh README/SDK documentation with regression coverage.

v1.18.57

v1.18.57

• Preserve native OpenAI Chat rate-limit headers across retry and credential-pool backoff paths.
• Select recent sessions with bounded JSONL header reads and filesystem recency while preserving cwd matching.
• Clarify MCP polling/roots lifecycle, sandbox boundaries, AgentRun write safety, and HITL resume snapshots.
• Split retry, snapshot, parallel IPC, Skill scope, Session JSONL, interrupt lifecycle, and background Bash bookkeeping into internal helpers without changing the public SDK surface.
• Add regression coverage for provider, credential-pool, session, and AgentRun contracts.

v1.18.56

Cross-backend sandbox contract polish.

• Bound AgentRun Glob/Grep traversal and result windows, with path-level glob matching and residual-difference metadata.
• Added mid-run abort polling for Tokimo and AgentRun, with normalized abort, timeout, and output-limit result semantics.
• Aligned Native output capture with the 100,000-byte sandbox contract and refreshed README/SDK documentation.
• Added regression coverage for search limits, path matching, aborts, and output caps.

v1.18.54

本版本聚焦现有功能的资源与协议边界收口：

• Provider、MCP、AgentRun 和沙箱错误响应只保留有界前缀，避免错误体导致无界内存增长。
• Provider/MCP SSE 行和多行事件增加大小上限；MCP stdio 拒绝带换行的超大帧。
• Grep PHP fallback、Glob 字面量模式、CredentialPool 和 StructuredResult 增加边界校验。
• 增加对应的 Provider、MCP、沙箱、搜索和 SDK 回归测试。

v1.18.53

Fixes

• Preserve quoted Bash command arguments on Windows by passing the working-directory wrapper as one script to the process supervisor.
• Validate and normalize inputs before parallel and streaming-early tool execution, failing closed on invalid or context-sensitive inputs.
• Bound unterminated MCP SSE lines and event metadata before buffering.

Validation

• composer validate --strict
• composer audit --format=plain
• composer run lint
• composer test
• php scripts/sdk-bc-check.php --verify
• GitHub Actions main and tag tests (including Windows compatibility)

v1.18.52

v1.18.52

• Clean up forked tool process trees and IPC files when callbacks fail, with bounded descendant termination.
• Make host Grep/Glob honor repository ancestor and nested .gitignore rules without losing traversal limits.
• Classify normalized tool inputs fail closed when permission prompts may run, and preserve read-receipt/worktree/Git/Bash/MCP safeguards.
• Add regression coverage for search parity, callback cleanup, process-tree cancellation, and parallel safety classification.

Validated with composer validate --strict, composer audit --format=plain, composer run lint, composer test, and the SDK public API snapshot verifier.

v1.18.51

Full Changelog: v1.18.50...v1.18.51

v1.18.50

Full Changelog: v1.18.49...v1.18.50

v1.18.49

Full Changelog: v1.18.48...v1.18.49