v1.3.11
Home GitHub

v1.3.10 Release Notes

Released


v1.3.9 -> v1.3.10

Summary


File tools can now read system and package directories outside the home folder without prompting, while shell commands that read other paths outside home no longer pass automatic approval. Secret-leak refusals now tell users how to view the value themselves.
翻譯
檔案工具讀取家目錄外的系統與套件目錄不再需要確認，同時讀取家目錄外其他路徑的 shell 指令不再自動放行。敏感資訊拒絕回覆時，改為告知使用者自行查看的方式。

Changes


FEAT

  • Allow read_files and find_files to read system and package directories outside $HOME without confirmation; extend the built-in list with readable_path in config.json (@pardnchiu) [c5b4a7b4]
  • Include a command the user can run in their own terminal in secret-exfil refusals, using a per-rule refusal template (@pardnchiu) [c5b4a7b4]

翻譯
  • read_files 與 find_files 讀取 $HOME 外的系統與套件目錄免確認；可用 config.json 的 readable_path 追加路徑
  • secret-exfil 拒絕訊息附上使用者可在自己終端機執行的查看指令，拒絕訊息改為依規則套用模板


UPDATE

  • Stop auto-approving read-only run_command calls whose argv names an existing path outside $HOME that is not on the readable list, and raise a confirmation for such paths in always-allow mode (@pardnchiu) [c5b4a7b4]

翻譯
  • 唯讀 run_command 的 argv 含 $HOME 外、不在可讀清單內的既有路徑時不再自動放行；always-allow 模式下改為跳確認


REFACTOR

  • Move the built-in sensitive path list to go-pkg filesystem.IsSensitive; sensitive_path in config.json still extends it (@pardnchiu) [c5b4a7b4]

翻譯
  • 內建敏感路徑清單改由 go-pkg filesystem.IsSensitive 提供，config.json 的 sensitive_path 仍可追加


Scope


  • internal/tools/file/ — FEAT, UPDATE (multiple files)
  • internal/filesystem/ — FEAT, UPDATE, REFACTOR (pathRule.go, runtime.go, replyLang.go)
  • internal/agents/exec/ — FEAT, UPDATE (response.go, readonly/argv.go, readonly/shell.go)
  • configs/ — FEAT, REFACTOR (multiple files)
  • go.mod, go.sum — CHORE


Generated by SKILL