Releases · link-assistant/agent

17 Jun 15:07

js-v0.24.0

fa08b0b

[js] 0.24.0 Latest

Latest

Add a native, enforceable permission system, ported from OpenCode and fully controllable over JSON with no TUI (issue #271).

Hard layer. --read-only (env LINK_ASSISTANT_AGENT_READ_ONLY) disables every filesystem-mutating and shell tool — bash, edit, write, multiedit, patch — so the agent can only read, search and plan. The restriction is enforced at tool resolution and also when tools are invoked indirectly via the batch tool, so it cannot be bypassed. --disable-tools bash,write,edit (env LINK_ASSISTANT_AGENT_DISABLE_TOOLS) disables an explicit set of tools. This makes agent-commander's uniform --read-only flag enforceable for the agent tool, on par with the other supported tools.

Fine-grained layer. --permission-mode <auto|plan|readonly|ask> (env LINK_ASSISTANT_AGENT_PERMISSION_MODE) plus an OpenCode-compatible --permission '<json>' override (env LINK_ASSISTANT_AGENT_PERMISSION). The default mode is auto (full autonomy, never asks), so existing behavior is unchanged and the full-auto path has zero added overhead.

plan denies edits, allows read-only shell commands, and asks before anything else.
readonly denies all mutations (never asks).
ask requests approval before every mutating tool.
--permission accepts the OpenCode {edit, bash, webfetch} shape (where bash is a string or a {glob: action} map) and is merged on top of the mode.

Approvals are exchanged purely as JSON: the agent emits a permission_request event on stdout and the consumer replies with a permission_response frame (once / always / reject) on stdin, in both text and stream-json input modes. See docs/permissions.md for the full protocol and docs/case-studies/issue-271 for the design rationale and prior-art survey. The same policy/mode/override semantics, CLI flags, and JSON schemas are mirrored in the Rust implementation.

Related Pull Request: #272

Assets 2

01 May 10:46

github-actions

js-v0.23.0

d8a759a

[js] 0.23.0

Add Claude-compatible --input-format stream-json stdin frames and --output-format stream-json alias with user-prompt replay acknowledgements.

Related Pull Request: #269

Assets 2

25 Apr 12:39

github-actions

js-v0.22.10

ef2ff4a

[js] 0.22.10

Set opencode/minimax-m2.5-free as the default model again, update OpenCode Zen free model docs, and add a live Zen free-model fallback for models.dev lag.

Related Pull Request: #267

Assets 2

24 Apr 08:07

github-actions

js-v0.22.9

63eb4a6

[js] 0.22.9

Classify provider stream status errors and usage-shape failures as retryable provider errors.

Related Pull Request: #265

Assets 2

14 Apr 07:58

github-actions

js-v0.22.8

7ae7f8c

[js] 0.22.8

fix(ci): add recovery for missing Rust GitHub releases and improve crates.io publish resilience

Related Pull Request: #263

Assets 2

14 Apr 07:59

github-actions

rust-v0.9.2

e68be6d

[rust] 0.9.2

Fixed

Use CARGO_TOKEN (organization-level secret) as fallback when CARGO_REGISTRY_TOKEN is not set, fixing crates.io publishing in CI/CD

Fixed

Fixed git push race condition in Rust CI/CD auto-release that caused non-fast-forward rejection when JS CI pushed concurrently
Added fetch/rebase before commit and push retry with pull --rebase (up to 3 attempts)
Added shared concurrency group (release-main) across Rust and JS release jobs to serialize pushes to main

Assets 2