Skip to content

Zeroshot v10.7.1

Choose a tag to compare

@github-actions github-actions released this 22 Sep 22:23
cac003c

Changes since v10.7.0.

Features

Add auto-research graph (#1144)

  • Add a built-in auto-research graph with ten bounded scout,
    experiment, judge, and decision iterations.
  • Persist a research charter, ledger, retained-workspace status, and
    historical findings with reversible experiment handling.
  • Expose the template in the CLI and UI, with optional per-iteration
    push checkpoints.

Fixes

Route authority failures without repair (#1141)

  • remove the privileged deployment-readiness GraphQL field while
    retaining approval and required-check policy
  • route identity, permission, schema, and policy failures directly to
    refusal/crash; reserve repair for proven Git/workspace failures
  • keep explicit transient outages and GitHub rate limits on bounded
    retry paths

Reuse native harness authentication (#1143)

  • Reuse native Codex, Claude, and Copilot login/configuration for local
    runs without inventing provider credentials.
  • Keep Docker, direct-target, and hosted execution isolated behind
    declared connections.
  • Preserve custom Codex gateways and Copilot provider
    registries/rotating key helpers with bounded secret forwarding and
    diagnostic redaction.

Preserve interrupted run submissions (#1146)

Keep Ctrl-C active across run preparation, submission, receipt output,
and observation. An interrupt before dispatch cancels cleanly; an
interrupt after dispatch waits for the authoritative receipt and then
detaches without opening a watcher or stopping the run.

Isolate ledgers and hosted workspaces (#1147)

  • Validate the production SQLite ledger as a regular, non-symlink,
    supervisor-owned file before opening it.
  • Normalize the ledger and existing SQLite sidecars to 0600 without
    schema or storage migration.
  • Restrict hosted candidate workspace roots to writer-owned 0700 while
    preserving verifier copies, cleanup, and recovery ownership transfer.
  • Add regression coverage for legacy ledger normalization, unsafe ledger
    files, sidecar permissions, and cross-UID isolation.

Retry pending run history (#1148)

  • Retry the explicit hosted history_pending response while run graph
    data is still materializing.
  • Show a clear setting-up state and replace it with the graph
    automatically once history is ready.
  • Keep retry policy at the HTTP adapter boundary and cover reads,
    streams, cancellation, and generic sources.

Recover legacy summary heading (#1149)

  • Recover the immutable plain Summary section on commit 78b7baa2
    when generating release notes.
  • Scope the alternate parser to that exact Git object so every later
    squash commit still requires ## Summary.
  • Add regression coverage for both the historical recovery and continued
    fail-closed validation.

Upgrade

npm install -g @the-open-engine-company/zeroshot@10.7.1