- [new] Early workload identity support for auth, including token exchange wiring used at login.
- [new] Thread revert request/notification path so a conversation thread can be rolled back to a prior state.
- [new] Exec path can emit events via a JSONL event processor for machine-readable run output.
- [new] Exec-server sandboxed file open handling for opening files under sandbox constraints.
- [new] Recognition for the o1 model identifier.
- [changed] TUI chat turn handling moved onto a dedicated turn runtime path.
- [changed] Rollout/security modeling updated to carry a security risk score where applicable.
- [changed] Agent control surface expanded with interrupt / list / resume style arguments for multi-agent flows.
- [removed] Skills invocation module dropped as part of skills path cleanup (invocation handling consolidated elsewhere).
Under the hood
- New
workload-identitycrate (assertion + exchange) integrated with login auth. - Exec-server gains relay protobuf/source surface and sandboxed file-open support.
- Additional API/data shapes for thread items, plugin sharing principals, compact history, model list responses, and related app/review summaries.
- Dependency and version lockfiles refreshed for
0.148.0-alpha.13.