Files

T

Emil b53687c2b9 fix: keep pause/resume in sync between loop and tree; close read_artifact symlink escape

- research_control pause/resume now validate the loop state before touching
  the tree, so pausing a stopped loop can no longer leave the tree 'paused'
  while the loop is not (spawn would fail until a restart).
- read_artifact confinement resolves symlinks (realpath) before checking the
  project boundary, preventing symlink-based file leaks.
- Adds confinement tests (42 tests passing, tsc clean).

2026-07-31 23:09:20 +03:00

3.1 KiB

Raw Blame History

Changelog

Unreleased

Fixed the research loop and agent tree getting permanently stuck after research_control stop: start now restarts a stopped/completed run in the same session (AgentTree.restart revives the run, archives old branches, and resets the root), ResearchLoop.start resets iteration counters, and goal changes are allowed after stop/completion.
Cancelled/failed/archived children no longer count toward the per-agent child limit, and archived agents are ignored by the duplicate-task guard.
cancel() no longer overwrites an already recorded agent result.
Added a per-agent execution timeout (agent_timeout_seconds, default 1800) so a hung agent session fails instead of blocking wait forever.
Full-text search now prefix-matches tokens (tolerates Russian/English inflections without stemming) and safely handles punctuation and FTS5 metacharacters instead of throwing or returning false negatives.
Hardened the web gateway against SSRF TOCTOU: outbound downloads now resolve DNS once, validate the address, and connect to the validated IP directly (pinned resolution), so DNS rebinding cannot redirect the connection to a private target; malformed search results no longer break the whole query; the web cache is bounded (oldest entries evicted past 500 files).
Experiment review is now truly independent: the reviewer must not be a descendant of the experiment author (in addition to not being the author).
Experiment stdout/stderr are capped at 512 KB so runaway container output cannot exhaust memory or disk.
Verified that Pi's extension tool registry is per-extension-instance, so reload re-registration is safe (no fix required).
research_control pause/resume no longer desync the agent tree from the loop: pausing a non-running loop now errors instead of silently marking the tree as paused, and resume requires the loop to actually be paused.
read_artifact now resolves symlinks before the confinement check, so a symlink inside the project cannot leak files from outside it.

0.1.1 — 2026-07-31

Added GitHub CI, CodeQL, Dependabot, contribution/security templates, and the local release checklist.
Updated the development toolchain to ESLint 10 and aligned the minimum Node.js version with Pi 0.83 (22.19+).
Added the official ModelRegistry compatibility path for Pi 0.78 while retaining shared ModelRuntime behavior on Pi 0.83+.
Added agent_end continuation fallback for Pi versions predating agent_settled.
Improved startup diagnostics and verified /team through Pi 0.78 RPC mode.
Fixed Redis container capabilities and verified a live Firecrawl v2 scrape.

0.1.0 — 2026-07-31

Initial Pi extension package.
Recursive persistent AgentSessions and dynamic Markdown agent factory.
Tree limits, replication, messaging, cancellation, recovery, and /team.
Markdown/SQLite research memory and source provenance.
Local SearXNG/Firecrawl gateway with SSRF controls and cache.
Explicit bounded research loop.
Docker-only reproducible experiment runner.
Unit, integration, and extension smoke tests.

3.1 KiB Raw Blame History

Changelog

Unreleased

0.1.1 — 2026-07-31

0.1.0 — 2026-07-31

3.1 KiB

Raw Blame History