v0.10.1 — post-v0.10.0 hardening and cleanup#4

Merged

lavindeep merged 29 commits into

mainfrom

v0.10.1-cleanup

Jun 27, 2026

Commits on Jun 27, 2026

fix(security): escalate git mutating verbs and option-encoded paths off auto-run
lavindeep
committed
fix(security): hard-bound command output per read
lavindeep
committed
fix(security): stop ambient proxy env from rerouting httpx traffic
lavindeep
committed
fix(security): redact key-named and JSON-shaped secrets
lavindeep
committed
fix(planner): finalize on skipped final step; pin artifact path to plan workspace
lavindeep
committed
fix(security): reject truncated Ollama streams; guard session-id read traversal
lavindeep
committed
fix(cli): guard slash/manual-shell turns and validate --resume before preload
lavindeep
committed
fix(security): hide in-workspace secrets in write/patch previews; rebuild project memory on /cwd
lavindeep
committed
fix(security): validate uddg redirect scheme, clamp max_results, floor reserved builtin names
lavindeep
committed
docs: reconcile DESIGN with the CLI interrupt and resume fixes
lavindeep
committed
Merge fix/logic-fixes-map: resolve 18 external-review logic and security findings
lavindeep
committed
refactor: remove dead code (superseded renderers, test-only wrapper, unreachable branches)
lavindeep
committed
refactor(skills): dedupe loader.py path/traversable function pairs
lavindeep
committed
refactor(tools): centralize ALL_PROFILES in tools/base.py
lavindeep
committed
refactor(persistence): drop unused FileSnapshot fields
lavindeep
committed
refactor(cli): import and constant hygiene
lavindeep
committed
refactor(runtime): hoist invariant compaction estimate; dedupe skill decisions
lavindeep
committed
refactor(llm,web): dedupe /api/show probe and collapse dead imports
lavindeep
committed
refactor(cli,persistence): single-stat recent(); drop DiffReveal.row_count
lavindeep
committed
refactor(policy): remove the self-cancelling git stash classifier pair
lavindeep
committed
Merge refactor/optimizations: behavior-preserving cleanups
lavindeep
committed
fix(security): redact prefixed secret keys in structured redaction
lavindeep
committed
test(banner): render at a width that can't trigger console-width wrap
lavindeep
committed
fix(command): hard-bound captured output to max_capture_chars
lavindeep
committed
fix(ollama): typed errors on malformed or wrong-shaped responses
lavindeep
committed
fix(web): don't flag exact-byte-limit fetches as truncated
lavindeep
committed
test(banner): assert tips against flattened right column (wrap-independent)
lavindeep
committed
fix(ollama): typed errors on malformed streaming chunk shapes
lavindeep
committed
chore(release): v0.10.1
lavindeep
committed