Repository navigation
Zeroshot v10.7.1
Changes since v10.7.0.
Features
Add auto-research graph (#1144)
- Add a built-in
auto-researchgraph with ten bounded scout,
experiment, judge, and decision iterations. - Persist a research charter, ledger, retained-workspace status, and
historical findings with reversible experiment handling. - Expose the template in the CLI and UI, with optional per-iteration
push checkpoints.
Fixes
Route authority failures without repair (#1141)
- remove the privileged deployment-readiness GraphQL field while
retaining approval and required-check policy - route identity, permission, schema, and policy failures directly to
refusal/crash; reserve repair for proven Git/workspace failures - keep explicit transient outages and GitHub rate limits on bounded
retry paths
Reuse native harness authentication (#1143)
- Reuse native Codex, Claude, and Copilot login/configuration for local
runs without inventing provider credentials. - Keep Docker, direct-target, and hosted execution isolated behind
declared connections. - Preserve custom Codex gateways and Copilot provider
registries/rotating key helpers with bounded secret forwarding and
diagnostic redaction.
Preserve interrupted run submissions (#1146)
Keep Ctrl-C active across run preparation, submission, receipt output,
and observation. An interrupt before dispatch cancels cleanly; an
interrupt after dispatch waits for the authoritative receipt and then
detaches without opening a watcher or stopping the run.
Isolate ledgers and hosted workspaces (#1147)
- Validate the production SQLite ledger as a regular, non-symlink,
supervisor-owned file before opening it. - Normalize the ledger and existing SQLite sidecars to
0600without
schema or storage migration. - Restrict hosted candidate workspace roots to writer-owned
0700while
preserving verifier copies, cleanup, and recovery ownership transfer. - Add regression coverage for legacy ledger normalization, unsafe ledger
files, sidecar permissions, and cross-UID isolation.
Retry pending run history (#1148)
- Retry the explicit hosted
history_pendingresponse while run graph
data is still materializing. - Show a clear setting-up state and replace it with the graph
automatically once history is ready. - Keep retry policy at the HTTP adapter boundary and cover reads,
streams, cancellation, and generic sources.
Recover legacy summary heading (#1149)
- Recover the immutable plain
Summarysection on commit78b7baa2
when generating release notes. - Scope the alternate parser to that exact Git object so every later
squash commit still requires## Summary. - Add regression coverage for both the historical recovery and continued
fail-closed validation.
Upgrade
npm install -g @the-open-engine-company/zeroshot@10.7.1