commit log
- Document local mine repository authority dea0e9a Jaime Fournier
- fixes 68dcb3f Jaime Fournier
- Fix OpenAI tool-call history compatibility 48d283e Jaime Fournier
- prevent collect-safe FFI movable-pointer bugs 2834f91 Jaime Fournier
- fix GC-unsafe __collect_safe FFI bindings (agent-worker segfault) c9464ed Jaime Fournier
- Preserve task context during compaction 911bcb9 Jaime Fournier
- build: keep dev FFI environment out of binary build 7d74ebf Jaime Fournier
- Merge remote-tracking branch 'origin/master' 64487e6 Jaime Fournier
- updates cd1da57 Jaime Fournier
- Mark loop director plan implemented b86340f Jaime Fournier
- Implement loop director escalation 8d9b7b9 Jaime Fournier
- build: register static FFI symbols in jcode ad8bc01 Jaime Fournier
- build: repair portable platform artifacts 9586691 Jaime Fournier
- vendor: migrate locked dependencies to Forgejo 8549c0b Jaime Fournier
- docs: remove jerboa-emacs restriction 80fb0c8 Jaime Fournier
- Remove GitHub workflow metadata 312f602 Jaime Fournier
- jpkg: add package lock 8cd5815 Jaime Fournier
- fix ds4 cf7fda2 Jaime Fournier
- updates from kimi3 93ec56e Jaime Fournier
- docs: OpenRouter routing, security controls, tool guards 53d2ece Jaime Fournier
- perf: token estimation memoization + tool catalog cache 2bd0e4f Jaime Fournier
- updates e90bbd5 Jaime Fournier
- security: secret egress redaction in tool results 70f1a9d Jaime Fournier
- tools: loop kill-switch — warn at 3 identical calls, block at 5 2603532 Jaime Fournier
- tools: runtime tool ACL — /tool off/on commands (session-only) a3bfa9a Jaime Fournier
- provider: OpenRouter auto-router support + .ss write guard + /security 3c08e48 Jaime Fournier
- new AGENTS.md ced05b0 Jaime Fournier
- docs: note ~/.local/bin/jerboa path in AGENTS.md ff0055b Jaime Fournier
- security: fix P3.1 shell injection issues 139917c Jaime Fournier
- Add vendoring policy to AGENTS.md 4a038fd Jaime Fournier
- Unify AGENTS.md with canonical jerboa version be28486 Jaime Fournier
- Fix alibaba display-name, default-model, and models list (provider-kind returns openai) aa89d8f Jaime Fournier
- Add alibaba provider support (OpenAI-compatible MaaS) + fix {file:} token resolution 6be6eaf Jaime Fournier
- config: resolve {file:path} references in provider api_key values 84dca8c Jaime Fournier
- ci: set umask 022 in package/verify tasks too (jerbuild creates group-writable cache dirs during pkg operations) 9d05574 Jaime Fournier
- ci: set umask 022 to prevent group-writable cache dirs (sr.ht default umask creates 0775 dirs) 7dbf630 Jaime Fournier
- security: close hooks RCE left open by config-trust rollout (P0 RCE) b7a0c2c Jaime Fournier
- tui: remove centering, just inset text with margins 7a81539 Jaime Fournier
- tui: center message layout; add harness fuzzer f73c64f Jaime Fournier
- ci: add JERBOA_CC_OPT=-O0 (OOM fix) and mkdir -p ~/.cache 52ece5c Jaime Fournier
- security: close plugin-gate bypass via project-config opt-in (P0 RCE) 8c1fcfa Jaime Fournier
- ci: chmod go-w ~/.cache before pkg commands (sr.ht cache is group-writable) 776e74b Jaime Fournier
- security: close 3 bypasses found reviewing the P0 fixes 02b8982 Jaime Fournier
- Build with JERBOA_NATIVE_FEATURES=tls (smaller, avoids OOM) 9ad3740 Jaime Fournier
- Add rustup + CHEZ_CONFIGURE_EXTRA to build-jerboa (fix missing rust install) 49dcf3a Jaime Fournier
- security: fetch SSRF blocklist + scheme allowlist + CRLF/body caps (P0) 562eb9c Jaime Fournier
- security: scrub secret env from child processes + validate hex (P0) cc98947 Jaime Fournier
- security: proxy loopback-only bind + token auth + request caps (P0) 6ed7a3c Jaime Fournier
- security: fix mentions command injection and @file credential leak (P0) b2d9ec9 Jaime Fournier
- security: disable workspace-local plugin autoload by default (P0 RCE) 37ce5bb Jaime Fournier