Skip to content

CHANGELOG.md

Latest commit

 

History

History
111 lines (87 loc) · 10.9 KB

CHANGELOG.md

File metadata and controls

111 lines (87 loc) · 10.9 KB
Raw

Changelog

Desktop 1.4.7 / DeepAgent Core V4.0.8 - Release hardening and data governance

  • Recover the two incident sessions through the formal abandoned path with a zero-provider-invocation oracle and fork smoke on production-snapshot copies; fence pre-successor binaries via a protocol-3 database capability so older builds refuse to open databases carrying successor ownership.
  • Fix the desktop startup crash in the session_intent rebuild migration on SQLite 3.51 (node runtime) and retry transient schema-lock failures in the migration runner.
  • Stop the infinite compaction-continuation recovery loop on startup: recovery failures now land fail-closed (pending → failed) through the widened continuation state machine, serialized per session, with warning-level telemetry.
  • Add durable turn stage evidence and a pre-dispatch watchdog for hung activities; order app timelines by (time, id) so wrapped opaque IDs never reorder messages.
  • Persist encrypted remote-compaction content per session and commit remote compaction runs with an opaque blob pointer instead of a text summary, exempt from information-hole validation.
  • Land RISK-003 data governance: runtime diff-artifact capture (staged behind a flag), a legacy event canonicalizer daemon, portable aggregate snapshot bundles, and a gate-ordered maintenance drill that reclaimed hundreds of MiB on production-snapshot copies (33,168 events deleted, VACUUM 5075 → 4311 MiB).
  • Add the release-evidence manifest infrastructure and archive the 2026-08-19/20 release gates; lock REL-002 wire-budget and discovery-budget regressions; retire the legacy activity authority in favor of the durable path.
  • Align Desktop 1.4.7, DeepAgent Core V4.0.8, and GitHub Action github-v1.4.7 across package metadata, updater tags, and workflow references.

Desktop 1.4.5 / DeepAgent Core V4.0.6 - Bounded planning and runtime hardening

  • Make compaction durable through explicit run/attempt lifecycle records and Prompt Epoch authority, with bounded text-only summary retries and typed terminal failures.
  • Reject unknown context limits before unsafe dispatch and compare raw-token phases without treating missing provider metadata as a known capacity.
  • Add readiness-aware context federation and per-turn provider request/argument receipts across adapter, AI SDK, processor, and available raw-frame boundaries.
  • Enforce atomic plan admission, versioned compare-and-commit, last-known-good preservation, bounded malformed-plan attempts, durable human edits, and cursor-safe UI reconciliation.
  • Verify the compiled and installed package with the typed plan HTTP matrix and a DeepSeek malformed-recovery plus happy-path plan run.
  • Align Desktop 1.4.5, DeepAgent Core V4.0.6, GitHub Action github-v1.4.5, package metadata, updater tags, workflow references, and public release documentation.

Desktop 1.4.4 / DeepAgent Core V4.0.5 - Durable context and collaboration

  • Persist AgentExecution claims, leases, generations, resource locks, token debits, terminal metadata, and handoffs for event-driven multi-Agent work.
  • Complete the production task and pr_finalize path with canonical worktrees, SHA-bound reviews, serialized --no-ff merges, Senior Reviewer closure, resume, takeover, and cleanup fencing.
  • Connect federated context, Location-owned code/document indexes, Context Epoch selection, and durable Session continuation without bridging through an in-memory orchestration loop.
  • Unify private filesystem storage for Core, CLI, Desktop, WSL, databases, logs, caches, and temporary files under ~/.deepagent/code/ while keeping native secret values in the OS credential store.
  • Expand the DeepSeek real-LLM matrix to cover prompt-cache retention, sandboxed Python verifiers, parallel workers, complete Git/PR collaboration, V4 event runtime, strength inheritance, resume/takeover, and autonomous EVAL scoring.
  • Release Desktop 1.4.4 with application version displays, updater metadata, Desktop release tags, and GitHub Action references aligned to the published versions.

Desktop 1.4.3 / DeepAgent Core V4.0.4_r8 - Production reliability release

  • Persist the complete TaskRun lifecycle, including exact-retry admission, generation, owner/lease fencing, phase changes, terminal compare-and-set, result references, and a leased notification outbox.
  • Split structured subagent work into a normal research phase and a bounded single-turn finalizer with an isolated tool surface, per-turn reasoning policy, strict schema validation, and no empty-success fallback.
  • Preserve distinct recoverable terminal reasons for provider, schema, permission, interruption, timeout, takeover, and doom-loop failures; reject invalid tool input before execution.
  • Detect semantic no-progress from tool results, workspace snapshots, and plan state instead of relying on identical command text.
  • Contain subagent supervision failures with valid sibling controls, real terminal-state rendering, a local ErrorBoundary, persisted-mode validation, same-build quarantine, Electron cold-start coverage, and production source-map verification.
  • Regenerate the JavaScript SDK for the durable task status and delivery contracts.

V4.0.4 - Contract-gap closure (engine-decoupled)

  • Fix Plan Gate deadlock: stale-plan latch now warns (never hard-blocks) on tool execution, aligned with codex exec-policy philosophy. A mutating tool on a stale plan receives a reminder but always runs.
  • Fix goal-loop scorer false positives: extractValidationResults now scopes extraction to declared validation commands only (toolCallId→command mapping), with latest-wins per command. Diagnostic bash calls no longer poison the score.
  • Fix cancel/loop test flake: maxRetries:0 in the test provider config prevents AI SDK exponential-backoff retries against the intentionally-dead test URL; per-test budgets raised from 3 s to 15 s.
  • Release Desktop 1.4.2 with DeepAgent Core V4.0.4.
  • Publishing truth: fix quick-start command (deepagent-code run), comment out unpublished npm install, unify domain to deepagent.ltd, replace lessweb/anomalyco org handles, update SECURITY.md supported-version line and M-CRED status, update CHANGELOG.

V4.0.3 - Upstream kernel alignment (AppNode foundation)

  • AppNode foundation: additive node export layer aligning with upstream opencode V2 session architecture.
  • DocumentStore concurrency-safe durable body (F30-1): atomic CAS writes, version conflicts, recovery.
  • Plan single source of truth (I33-1): goal path and tool path write one plan document; DocumentStore is the authority.
  • safeGit hardening (I33-5): --no-ext-diff --no-textconv added to all read-path git calls; hook execution disabled via core.hooksPath=/dev/null; clean/smudge/process filters never invoked on read-only paths.

V4.1 - Steering + plan hot-edit

  • Steering foundation (S1.1): absorb mid-turn user input at the next turn boundary without aborting the current turn.
  • Goal plan hot-edit (S1.2): update plan steps while a goal loop is running; orphan-doc bug fixed (upsert-by-description → updateWithProvenance by-id).
  • Cache regression fix: DeepAgent gateway no longer bakes per-round volatile state (round number, budget, previous results) into the system prefix, preserving prompt cache across intra-turn calls.
  • Subagent panel and session fork lineage: forks use metadata.forkedFrom; depth cap 3; derived-from banner and folder-tree nesting.

V4.0 - Event-driven paradigm

  • Event-driven Agent OS: durable events, priority routing, backpressure, worker claims, leases, handoffs, retries, dead-letter recovery.
  • Consumer-driven goals: goal.tick.requested claims and executes one idempotent tick, records facts, schedules next tick when goal remains eligible.
  • V4.0-beta closeout: producer-starvation fix, security fails-closed, half-wired consumers wired. Autonomous path live in production.
  • V4.0.1 long-task design: soft-landing compression (P0), World State responsibility separation (P1), budget hot-swap without restart (P2), idempotent + per-model output (P3). Four feature flags. Fully verified.
  • Plan gate P0+P1: plan-stale signals all degrade to warn; U9 per-step binding retains hard block with grace release.
  • CLI ↔ GUI parity: full legacy server surface mounted on new CLI daemon; sessionClient wrapper seam.
  • Config data-root unification: global config moved from ~/.config/deepagent-code to ~/.deepagent/code/config.jsonc (claude/codex style).
  • Zero-config provider: add third-party provider with URL + key; protocol auto-detect; model discovery from /models.

V3.9 - Repo/Wiki + Expert Panel + Goal Loop

  • Repo and Wiki integration: session archive, wiki-backed knowledge, cross-session search.
  • Expert Panel: chat-button convenes a panel of domain experts; panel.consult tool.
  • Goal Loop: goal_driver.ts drives multi-step autonomous goals; goal-tick event pipeline.
  • AST code-graph: tree-sitter based symbol graph for semantic navigation.
  • Subagent plan permissions: plan-write capability gating per subagent.
  • Adversarial review wave: 20-file fix commit; flag-gating, budget-ceiling, anonymization, leaf-calls, sealed-leak all fixed; Arbiter + security boundary verified.
  • Cache hit regression root cause: volatile per-round state in system prefix → fixed by moving it out of the cached prefix.

V3.8 - V4.0 pre-release foundation

  • Session-internal scheduler: all sub-agent execution driven via SessionPrompt.Service; no-op stack replaced.
  • Context wiring: full context assembly pipeline connected end-to-end.
  • Sub-agent strength levels: permission presets per agent mode.
  • Mode redesign: codex-aligned auto/loop/design modes; flag kill-switch; permission presets.
  • Server mode connection: desktop→Server Edition gateway; wire contract; client code map.

V3.5 - M-CRED secure secret storage

  • Secrets stored in OS-backed secret storage: macOS Keychain (production), Linux Secret Service and Windows Credential Manager stubs with 0600-file fallback.
  • MCP credential values no longer persist in plain-text configuration; only variable names or references travel through config.
  • Credential migration: existing stored secrets migrated to the new store on first launch.
  • PTY and terminal fixes: stale-worktree redirect, terminal split circular-tree bug.
  • Archived sessions: restore, unarchive, delete operations.
  • Stale worktree redirect: same-repo clones share one project row; fromDirectory now returns live clone dir.

V3.4.1 - Public release hardening

  • Switch project license to AGPL-3.0-or-later.
  • Preserve upstream MIT attribution in NOTICE.
  • Consolidate official README maintenance to English and Simplified Chinese.
  • Add source-availability and security disclosures for AGPL network use.
  • Document V3.4.1 MCP credential-storage limitation and V3.5 M-CRED direction.
  • Add full-history secret-scan baseline with reviewed gitleaks findings.
  • Rebrand package metadata, URLs, UI strings, WSL paths, and generated references from upstream naming to DeepAgent Code naming.
  • Remove upstream-named built-in plugin dependencies from the default plugin set.
  • Align English and Simplified Chinese app i18n keys.