0.1.77

Tag: rust-v0.1.77
npm: https://www.npmjs.com/package/@hasna/codewith/v/0.1.77
Compare: rust-v0.1.76...rust-v0.1.77

Release headlined by multi-agent orchestration upgrades: the parent agent is
now auto-notified when a sub-agent completes (wake-if-idle, with an honest wait
and follow-up guidance), spawn_agent can pick any model, provider, and
reasoning effort per sub-agent, and a running goal can be paused and resumed. It
is paired with TUI polish — per-reset expiry in the banked-reset menu and a
status line that wraps across up to three rows — plus fixes for friendly agent
names in the tree path, compaction on over-window history, platform-independent
fleet_comms hash checks, and ref-scoped release concurrency.

Added

• Core: auto-notify the parent agent when a sub-agent completes (wake-if-idle),
  with an honest wait and follow-up guidance. (#364)
• Core: let spawn_agent choose any model, provider, and reasoning effort for
  sub-agents. (#385)
• Goal: pause and resume a running goal (model-callable and via the /goal
  command). (#384)
• TUI: show the expiry for each banked reset in the interactive menu. (#382)
• TUI: wrap the status line across up to 3 rows before truncating. (#386)

Fixed

• TUI/Core: give spawned agents friendly names in the tree path (root/name
  instead of root/uuid). (#387)
• Core: don't let compaction fail on over-window history; chunk and truncate
  before summarizing. (#383)
• Hooks: make fleet_comms trusted-hash checks platform-independent to fix a
  red Windows Bazel build. (#381)
• CI/Release: ref-scope the rust-release concurrency group so re-tags and
  releases don't cancel each other. (#380)

0.1.76

Tag: rust-v0.1.76
npm: https://www.npmjs.com/package/@hasna/codewith/v/0.1.76
Compare: rust-v0.1.75...rust-v0.1.76

Maintenance release focused on multi-agent messaging and process reliability:
inter-agent messages now deliver over chat-wire providers with mailbox-full
surfaced back to the sender, monitor event injection is reliable with no
mid-turn drops, and per-session app-servers are reaped when their owning TUI
exits. It also stops a false-positive weekly-limit cascade across auth profiles
and renders the goal indicator truly inline in the statusline.

Fixed

• Core/API: deliver inter-agent messages on chat-wire providers and surface a
  mailbox-full error back to the sender. (#377)
• TUI: render the goal indicator truly inline in the statusline row (·
  separated), including the active goal plan. (#373)
• Core: make monitor event injection reliable with a queue and wake-if-idle so
  events are not dropped mid-turn. (#376)
• App server: terminate the per-session app-server when its owning TUI exits so
  no orphan processes are left behind. (#372)
• Auth: stop a false-positive weekly-limit cascade across auth profiles. (#374)

0.1.75

Tag: rust-v0.1.75
npm: https://www.npmjs.com/package/@hasna/codewith/v/0.1.75
Compare: rust-v0.1.74...rust-v0.1.75

Release headlined by two new model providers — Google Gemini (with Gemini 3.6
Flash and 3.5 Flash-Lite) and xAI Grok 4.5 — paired with multi-agent TUI and
session-resume fixes: the Spawned cell now renders the agent path instead of a
raw, duplicated thread id, wait_agent cell spam collapses into a single
compact completed-agents cell, and resuming a session reloads the running
sub-agent subtree.

Added

• Models: added a Google Gemini provider with the latest Gemini models (Gemini
  3.6 Flash and Gemini 3.5 Flash-Lite). (#367)
• Models: added xAI Grok 4.5 to the known-provider model catalog. (#368)

Fixed

• TUI: render the agent path in the Spawned cell instead of a raw, duplicated
  thread id. (#371)
• TUI: stop wait_agent cell spam; keep a single compact completed-agents
  cell. (#366)
• Core: reload the running sub-agent subtree on session resume. (#370)

0.1.74

Tag: rust-v0.1.74
npm: https://www.npmjs.com/package/@hasna/codewith/v/0.1.74
Compare: rust-v0.1.73...rust-v0.1.74

Release headlined by TUI polish and goal-planning ergonomics: a hierarchical
agent-tree path (root/agent/sub-agent) replaces raw thread UUIDs in the
statusline, the login flow becomes a provider → auth-method chooser with
profile-picker fixes, and the automatic goal-plan caps grow larger and
configurable. It is paired with faster session resume, an inline goal-pursuit
statusline indicator, an external-agent child-thread fork fix, and Codewith's
own announcements and tips in place of OpenAI product marketing.

Added

• TUI: render a hierarchical agent-tree path (root/agent/sub-agent) in place
  of raw thread UUIDs. (#356)
• TUI/CLI: replaced the login flow with a provider → auth-method chooser and
  fixed the profile picker. (#362)
• Goal: made the per-node goal-plan objective cap configurable (default ~600
  words). (#365)

Changed

• Branding: replaced OpenAI product-marketing announcements and tips with
  Codewith's own. (#359)

Fixed

• TUI: render the goal indicator inline in the statusline row (· separated)
  with a distinct color from the session name. (#357)
• TUI: clear the composer input after an unrecognized slash command. (#358)
• TUI: fixed an external-agent child-thread fork that failed with "no rollout
  found" during TUI bootstrap. (#360)
• Goal: raised the default automatic goal-plan cap from 12 to 48 nodes. (#363)

Performance

• App server / rollout / TUI: sped up session resume. (#361)

0.1.73

Tag: rust-v0.1.73
npm: https://www.npmjs.com/package/@hasna/codewith/v/0.1.73
Compare: rust-v0.1.72...rust-v0.1.73

Release headlined by an opt-in keep-going / auto-resume mode: a new
/keep-going slash command and a [keep_going] config section let a turn keep
working toward the active goal and auto-resume instead of stopping early. It
ships alongside a /privacy-filter readiness check, a cluster of app-server,
TUI, and usage correctness fixes, and nine Dependabot dependency bumps
(including the rust-toolchain 1.97.0 to 1.97.1 update).

Added

• Keep-going: added an opt-in keep-going / auto-resume mode — a /keep-going
  slash command and a [keep_going] config section that let a turn keep
  working toward the active goal and auto-resume instead of stopping early.
  (#353)
• Privacy filter: added a /privacy-filter readiness check and an opt-in
  config toggle. (#138)

Fixed

• App server: hardened additionalContext boundaries. (#178)
• Diagnostics: made diagnostic truncation UTF-8 safe. (#228)
• App server: backported app-server/protocol nullability and legacy-client
  fixes, and refreshed the schema fixtures. (#279)
• TUI: repaired the thread-routing stack. (#211)
• Usage: recorded prompt cache-write tokens and exact per-response usage.
  (#330)

Dependencies

• Rust toolchain: bumped from 1.97.0 to 1.97.1, keeping the release workflow in
  sync. (#343)
• CI: bumped actions/setup-node from 6.3.0 to 7.0.0. (#344)
• CI: bumped astral-sh/setup-uv from 8.3.1 to 8.3.2. (#345)
• CI: bumped taiki-e/install-action from 2.82.10 to 2.83.2. (#346)
• CI: bumped softprops/action-gh-release from 3.0.1 to 3.0.2. (#347)
• Rust: bumped regex from 1.12.3 to 1.13.0. (#348)
• Rust: bumped age from 0.11.2 to 0.12.1. (#349)
• Rust: kept cpal at 0.15.3; the 0.18.1 bump (#350) was reverted because cpal
  0.18 changed SampleRate from a tuple struct to a type alias, breaking the
  macOS-gated audio code. Migrating audio_device.rs to the cpal 0.18 API is a
  deferred follow-up.
• Rust: bumped axum from 0.8.8 to 0.8.9. (#351)
• Rust: bumped ctor from 1.0.7 to 1.0.10. (#352)

0.1.72

Tag: rust-v0.1.72
npm: https://www.npmjs.com/package/@hasna/codewith/v/0.1.72
Compare: rust-v0.1.71...rust-v0.1.72

Release headlined by a fix that restores the model's ability to spawn
subagents: the upstream #23144 deferral is reverted for this fork so the
multi-agent spawn tools are visible to the model again. It is paired with two
statusline improvements — the goal-pursuit indicator now renders inline (locked
on) and a toggleable active-agent (Main [default]) segment — plus an upstream
hardening and correctness cluster and four feature merges (subagent auth
profiles, OpenRouter preflight, rollout alias cleanup, and macOS remote
control).

Added

• Statusline: added a toggleable active-agent (Main [default]) statusline
  segment. (#341)
• MCP: preserve encrypted content and custom-tool namespaces in tool outputs.
  (#316)
• Unified exec: bound output collection and parallelize write_stdin. (#327)
• Models: respect per-model reasoning-summary parameter support. (#331)
• Workflows: added explicit user approval for gated workflow steps. (#296)
• Workflows: added a thread workflow delete RPC and wired /workflow delete.
  (#300)
• Core: select an auth profile for subagent spawn. (#126)
• OpenRouter: preflight the workflow branch auth before running. (#130)
• macOS: wire remote-control status and machine registry management. (#181)

Fixed

• Multi-agent: restored the model's ability to spawn subagents by reverting the
  upstream #23144 deferral for this fork; the spawn tools are visible to the
  model again. (#339)
• Statusline: render the goal-pursuit indicator inline in the statusline (locked
  on). (#340)
• TUI: ported upstream streaming, status, and reasoning UX correctness fixes.
  (#328)
• MCP: retry transient streamable-HTTP init and tools-list, and enforce a
  startup timeout. (#321)
• Compact: retry previous-model remote compaction with the selected model.
  (#329)
• Core: fork full-history subagents from ephemeral parents. (#298)
• Rollout: removed deprecated conversation-list aliases. (#160)

Security

• Exec server: bound untrusted JSON-RPC input (DoS hardening). (#319)
• Network proxy: keep the MITM CA private signer in memory only. (#324)
• Exec policy: harden forced-rm detection and migrate legacy allow rules.
  (#325)

Performance

• Build: added a tiered validation harness to cut PR-drain wall time. (#288)

0.1.71

Tag: rust-v0.1.71
npm: https://www.npmjs.com/package/@hasna/codewith/v/0.1.71
Compare: rust-v0.1.70...rust-v0.1.71

Release headlined by a fix for banked usage-limit resets not surfacing in
/usage, plus usage credit and spend-control visibility, several upstream
adopts, and macOS durable agent attach.

Added

• Usage: /usage now surfaces the account credit balance and the spend-control
  limit, and the usage auto-recovery configuration is documented. (#333)
• MCP: MCP client quality-of-life improvements and an rmcp 1.8.0 bump. (#314)
• Prompts: adopted upstream system-prompt improvements, merged with the fork's
  customizations. (#332)
• Core: ported upstream "core small" adopts (shell-snapshot PATH handling,
  retry logging, and dead-code cleanup). (#320)
• macOS: wired durable agent attach/control and pending interactions. (#132)

Fixed

• Usage: banked usage-limit resets now surface as available in /usage. (#336)
• Usage: banked usage-limit resets stay visible when the reset-credit ledger
  refresh degrades, instead of disappearing. (#337)
• Background agent: runs now fail on silent turn errors, and migration-skew
  guidance is clarified. (#283)

Security

• App server: reject remote images at ingress (SSRF hardening). (#317)

Performance

• TUI: cache flex heights per frame and finalized markdown renders. (#326)

Docs

• App server: aligned the v2 guidance with the split protocol modules. (#150)

0.1.70

Tag: rust-v0.1.70
npm: https://www.npmjs.com/package/@hasna/codewith/v/0.1.70
Compare: rust-v0.1.69...rust-v0.1.70

Feature release delivering the unified Infinity Agent tool-policy and
attestation layer.

Added

• Policy: unified the Infinity Agent tool policy and attestation onto a single
  fail-closed enforcement path. A signed (ed25519) VerifiedToolPolicy
  envelope is now the single source of truth for the infinity-agent tool
  policy: the tool router plans only the exact signed allowlist,
  dispatch-time rechecks reject any tool not authorized by the verified process
  policy, and construction fails closed when no policy is bound or the system
  trust key is missing. Consolidates the previous duplicate ToolsPolicy enum
  onto the single ToolPolicy enum (ConfigRequirements gains
  allowed_tool_policies + infinity_agent_trust_key), derives the
  auth-capsule capability document from the enforced allowlist, and — under the
  Infinity Agent policy — disables auth-profile auto-switch, usage self-heal,
  session recap, optional features, external instructions, history, and
  telemetry, forbids named auth profiles, and constrains MCP bridges to signed,
  credential-free HTTPS sources. (#307)

0.1.69

Tag: rust-v0.1.69
npm: https://www.npmjs.com/package/@hasna/codewith/v/0.1.69
Compare: rust-v0.1.68...rust-v0.1.69

Release rolling up the features, fixes, and test/CI work merged since 0.1.68:
a Kimi (Moonshot) subscription provider, an external-agent ACP adapter seam,
documented OpenAI context windows, mailbox-dispatcher hardening, a read-only
auth-profile crash fix, goal-plan resume, and assorted protocol/state fixes,
plus a clean rustfmt pass to keep CI green.

Added

• Model providers: added a Kimi (Moonshot) subscription login provider. (#297)
• External agents: a common ACP (Agent Client Protocol) adapter seam so
  external-agent vendors share a single integration surface. (#285)
• State: backfill managed worktree path keys. (#266)

Fixed

• App server: the mailbox dispatcher now acknowledges mailbox claims before
  waking and hardens dispatcher ownership, preventing duplicate or lost claim
  handling. (#280)
• Models: OpenAI API models now report their documented context windows instead
  of a stale fallback (for example the GPT-4.1 family's 1,047,576 window and the
  current GPT-5.x windows). (#281)
• Login: auth-profile directory setup now tolerates a read-only CODEWITH_HOME
  by classifying read-only and permission-denied filesystem errors, so
  preflight/health runners no longer crash on immutable homes. (#284)
• Goal plans: deferred goal-plan nodes now resume after an independent node
  completes instead of stalling. (#289)
• Protocol: preserve the originating HTTP status for UnexpectedStatus turn
  errors. (#276)
• Schedules: derive a schedule's last_completed_at from completed runs only.
  (#277)
• merge-pr: made preflight checks robust across gh CLI versions. (#275)
• Core: repaired a broken feedback_tags doctest in util.rs. (#292)
• Formatting: reapplied cargo fmt (imports_granularity=Item) across code
  merged since 0.1.68 so the cargo fmt --check and just fmt-check CI gates
  pass. (#308)

Tests

• Model providers: added cross-provider integration coverage. (#293)
• SDK/CI: added bun and npm install smoke tests for the TypeScript SDK. (#287)

CI / Docs

• CI: added a PR-drain sandbox template for E2B. (#270)
• CI: pin the workspace root in the apply_patch move-traversal test for the
  Bazel sandbox. (#282)
• CI: removed unsupported v8 rust-toolchain inputs. (#240)
• Docs: documented building codex-rs on remote sandboxes (Blacksmith) instead of
  locally. (#305)
• Docs: added an open-codewith runtime development skill. (#269)

0.1.68

Tag: rust-v0.1.68
npm: https://www.npmjs.com/package/@hasna/codewith/v/0.1.68
Compare: rust-v0.1.67...rust-v0.1.68

Hotfix release fixing a standalone image-generation runtime 400 and restoring a
clean workspace compile.

Fixed

• Image generation: moved the standalone imagegen tool off the Responses-API
  reserved image_gen namespace to the non-reserved images namespace (new
  wire name images.imagegen, code-mode name images__imagegen). This fixes a
  runtime 400 Function 'image_gen.imagegen' is reserved for use by this model
  error while keeping image_gen in the reserved-namespace allowlists.
• thread-manager-sample: added the missing tools_policy field to Config,
  restoring a clean workspace compile.