feat: Agent phase-0 enhancements + review/login hardening - #89

Merged

elkaix merged 67 commits into

mainfrom

feat/agent-phase0-enhancements

Jun 9, 2026

Commits on Jun 8, 2026

feat(agent): land Phase 0 agent-design enhancements
elkaix
committed
377e450
feat(security): wrap shell + web-search output as untrusted data
elkaix
committed
4009efc
feat(security): scope session approval per-command + destructive backstop
elkaix
committed
85b5477
feat(security): strip invisible unicode from untrusted tool output
elkaix
committed
8be32da
feat(security): de-duplicate identical concurrent approval prompts
elkaix
committed
95c1ee5
feat(security): protect pythinker config surface from edits + injection
elkaix
committed
512480a
fix(ui): hide <untrusted_data> wrapper from tool-output display
elkaix
committed
792f1c5
fix(tests): restore green pyright + format gate on security tests
elkaix
committed
67a4240
feat(security): wrap Grep content output as untrusted data
elkaix
committed
127b3bb
docs(agent): add remaining-work execution plan + gap analysis
elkaix
committed
67a0901
feat(reliability): yield to user on degenerate stuck loops (obs-eval-5)
elkaix
committed
d8bc283
docs(agent): log progress — injdef-2-grep + obs-eval-5 done
elkaix
committed
58369d6
feat(tools): suggest closest tool name on unknown tool call
elkaix
committed
c5d7c1c
feat(reliability): graceful max-steps handoff summary (sysprompt-2)
elkaix
committed
df1a172
feat(context): graduated stale-tool-output pruning before compaction (ctxmgmt-2)
elkaix
committed
e6204fe
fix(security): harden approval gates and config-surface classification
elkaix
committed
0c2ad89
feat(tools): add Progress checkpoint tool to the default agent
elkaix
committed
ebd1408
feat(soul): add model-keyed protocol-defense injection provider
elkaix
committed
af8afbf
docs(agent): log sysprompt-1 + uxsteer-1 done; 6/22, 16 remaining
elkaix
committed
0d732d0
test(backfill): lock plan verification clause + LLM cache-token counters
elkaix
committed
92b862d
feat(memory): add opt-in durable-memory profile (memory-2)
elkaix
committed
6daa6b7
feat(skills): surface bundled-resource manifest when a skill is loaded (skills-1)
elkaix
committed
1fa5e24
docs(agent): log backfill + memory-2 + skills-1; 8/22 done, 14 remaining
elkaix
committed
88735be
feat(subagents): roll child token/cost spend up to the orchestrator (subagent-2)
elkaix
committed
eafba2c
feat(skills): add agent-creator and customize-pythinker builtin skills (mode-1, skills-2)
elkaix
committed
27d7fe2
docs(agent): log subagent-2 + mode-1 + skills-2; 11/22 done, 11 remaining
elkaix
committed
e039243
feat(tools): spill truncated tool output to disk with recovery hint (tooldesc-2/ctxmgmt-1)
elkaix
committed
b655f32
docs(agent): log tooldesc-2/ctxmgmt-1 done; obs-eval-1 in review; 12/22
elkaix
committed
3591b08
test(subagents): set usage=None in __init__-bypassing compaction harnesses
elkaix
committed
3f1f300
feat(telemetry): connect the trace tree + GenAI semconv on spans (obs-eval-1)
elkaix
committed
3343df1
docs(agent): log obs-eval-1 done; 13/22, 9 remaining
elkaix
committed
a804ab3
feat(mcp): expose MCP resources and prompts via read-only tools (mcpext-1)
elkaix
committed
4a8424e
docs(agent): log mcpext-1 done; 14/22, 8 remaining
elkaix
committed
9cf1b41
refactor(mcp): robust binary-content size + failed-server read test (mcpext-1 review)
elkaix
committed
d0af862
fix(test): silence reportArgumentType on duck-typed approval-key test
elkaix
committed
d578e76
feat(mcp): docker --rm hygiene + isolated client-close on teardown (mcpext-3)
elkaix
committed
b41edf9
docs(agent): log mcpext-3 done; 15/22, 7 remaining
elkaix
committed
60980d2
feat(mcp): discover project-scoped .pythinker/mcp.json layered over global (mcpext-2)
elkaix
committed
5983725
docs(agent): log mcpext-2(c) done; 16 commits, 6 items remaining
elkaix
committed
b639730
docs(agent): capture recall-subsystem orientation for memory-1/memory-3 resumption
elkaix
committed
2d049d7

Commits on Jun 9, 2026