Emil
4039f7c8f3
- web.ts: outbound downloads resolve DNS once, validate the address, and connect to the validated IP directly, closing the DNS-rebinding TOCTOU window; malformed SearXNG result URLs are skipped instead of failing the whole search; web cache is bounded (evicts oldest past 500 entries). - experiment.ts: reviewer must not be a descendant of the experiment author (tool-level lineage check on top of the author-id check); stdout/stderr buffers capped at 512 KB. - Confirmed Pi's extension tool registry is per-extension-instance, so reload re-registration is safe; no change needed there. - Adds a lineage-independence test (39 tests passing, tsc clean).
53 lines
2.7 KiB
Markdown
53 lines
2.7 KiB
Markdown
# Changelog
|
|
|
|
## Unreleased
|
|
|
|
- Fixed the research loop and agent tree getting permanently stuck after
|
|
`research_control stop`: `start` now restarts a stopped/completed run in the
|
|
same session (`AgentTree.restart` revives the run, archives old branches, and
|
|
resets the root), `ResearchLoop.start` resets iteration counters, and goal
|
|
changes are allowed after stop/completion.
|
|
- Cancelled/failed/archived children no longer count toward the per-agent child
|
|
limit, and archived agents are ignored by the duplicate-task guard.
|
|
- `cancel()` no longer overwrites an already recorded agent result.
|
|
- Added a per-agent execution timeout (`agent_timeout_seconds`, default 1800)
|
|
so a hung agent session fails instead of blocking `wait` forever.
|
|
- Full-text search now prefix-matches tokens (tolerates Russian/English
|
|
inflections without stemming) and safely handles punctuation and FTS5
|
|
metacharacters instead of throwing or returning false negatives.
|
|
- Hardened the web gateway against SSRF TOCTOU: outbound downloads now resolve
|
|
DNS once, validate the address, and connect to the validated IP directly
|
|
(pinned resolution), so DNS rebinding cannot redirect the connection to a
|
|
private target; malformed search results no longer break the whole query;
|
|
the web cache is bounded (oldest entries evicted past 500 files).
|
|
- Experiment review is now truly independent: the reviewer must not be a
|
|
descendant of the experiment author (in addition to not being the author).
|
|
- Experiment stdout/stderr are capped at 512 KB so runaway container output
|
|
cannot exhaust memory or disk.
|
|
- Verified that Pi's extension tool registry is per-extension-instance, so
|
|
reload re-registration is safe (no fix required).
|
|
|
|
## 0.1.1 — 2026-07-31
|
|
|
|
- Added GitHub CI, CodeQL, Dependabot, contribution/security templates, and the
|
|
local release checklist.
|
|
- Updated the development toolchain to ESLint 10 and aligned the minimum Node.js
|
|
version with Pi 0.83 (`22.19+`).
|
|
- Added the official `ModelRegistry` compatibility path for Pi 0.78 while
|
|
retaining shared `ModelRuntime` behavior on Pi 0.83+.
|
|
- Added `agent_end` continuation fallback for Pi versions predating
|
|
`agent_settled`.
|
|
- Improved startup diagnostics and verified `/team` through Pi 0.78 RPC mode.
|
|
- Fixed Redis container capabilities and verified a live Firecrawl v2 scrape.
|
|
|
|
## 0.1.0 — 2026-07-31
|
|
|
|
- Initial Pi extension package.
|
|
- Recursive persistent AgentSessions and dynamic Markdown agent factory.
|
|
- Tree limits, replication, messaging, cancellation, recovery, and `/team`.
|
|
- Markdown/SQLite research memory and source provenance.
|
|
- Local SearXNG/Firecrawl gateway with SSRF controls and cache.
|
|
- Explicit bounded research loop.
|
|
- Docker-only reproducible experiment runner.
|
|
- Unit, integration, and extension smoke tests.
|