feat: ship Assistant safety, subagent orchestration, and onboarding - #11
Conversation
![pullfrog[bot]](https://avatars.githubusercontent.com/in/1768019?s=60&v=4){kind=small}
There was a problem hiding this comment.
ℹ️ No critical issues — one hardening opportunity noted inline.
Reviewed changes — full PR scope across 218 files touching Assistant safety hardening, Subagent V2 orchestration, onboarding, native helpers, MCP SDK updates, and DataStore authority fences.
- Assistant schedule execution boundaries: Pins automated runs to exact provider/model/connection fingerprints; rejects project+connector scope mixing; validates MCP server identity with fingerprint-bound bindings.
- Subagent V2 approval and authority: Deterministic argument canonicalization for one-shot approval binding; capability narrowing with per-field validation; per-call outbound approval broker with authority revision gating.
- Native file mutator (
subagent-file-mutator/main.c): Pinned parent-fd,O_NOFOLLOW, exclusive-regular, and post-swap atomic verification with rollback. - Native shell runner (
subagent-shell-runner/main.c): Private tmpfs-like temp tree, binary nonce/digest framing, UTF-8 validation rejecting control/bidi, SIGTERM cleanup. DataStorefences:beforeExternalCacheCommitandbeforeWritePublishfor synchronous authority checks.- MCP tool identity: Server-ID-scoped collision-resistant naming with SHA-256 suffix.
- Onboarding: First-run provider selection flow with regression coverage.
Note: 1 inline comment(s) dropped because they did not anchor to lines inside the PR diff:
main/services/outbound-approval-v2.ts:16426(RIGHT) — file not in PR diff
DeepSeek Pro ｜ 𝕏
|
One minor hardening observation that was dropped from the inline review due to a path mismatch: The
|
1 participant
Release scope
Validation
npm test— 1,184 application tests plus native worktree and Computer Use suitesnpm run type-checknpm run lintnpm run test:branding— 24 testsnpm run test:native— 4 testsnpm run buildgit diff --checkHosted CI
GitHub Actions is queued on the macOS 26 runner pool. The integration-only rerun was independently locally validated before this draft was opened; this release PR is intentionally not being merged to
mainuntil its hosted checks report.