Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: rivet-dev/secure-exec
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.3.2
Choose a base ref
...
head repository: rivet-dev/secure-exec
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.3.3
Choose a head ref
  • 3 commits
  • 9 files changed
  • 3 contributors

Commits on Jun 26, 2026

  1. Configuration menu
    Copy the full SHA
    305ef78 View commit details
    Browse the repository at this point in the history
  2. fix(agent): mount @agentclientprotocol/sdk for pi and claude adapters (

    …#135)
    
    - The pi and claude ACP adapters import `@agentclientprotocol/sdk`, but it was missing from each agent descriptor's `requires`, so it was never projected into the VM at `/root/node_modules`.
    - On runtimes whose module resolver does not fall back to the host tree, the adapter exits code 1 with "Cannot resolve module '@agentclientprotocol/sdk'" (reported against `@agentos-software/[email protected]`).
    - Add it to `requires` for both agents so it is mounted regardless of resolver/runtime version; both packages already declare it as a dependency.
    
    Co-authored-by: Claude Opus 4.8 (1M context) <[email protected]>
    NathanFlurry and claude authored Jun 26, 2026
    Configuration menu
    Copy the full SHA
    3883c2c View commit details
    Browse the repository at this point in the history
  3. fix(agent-adapters): robustness fixes to pi + claude ACP adapters

    Five verified fixes to the Pi and Claude ACP agent adapters (each with a unit
    test), found via a multi-agent review:
    - claude: tool-permission handler no longer auto-resolves on a 2s timer (was
      fail-open: ran the guest's tool without host consent); host is authoritative.
    - claude: partial tool input attributed by streaming content-block index, not
      Map insertion order.
    - claude: a dead query reader marks the session closed so the next prompt()
      fails fast instead of hanging to the ACP timeout.
    - pi: live session subscription is torn down on replace + conn.closed;
      editSnapshots cleared per turn + on cancel.
    - pi + claude: failed session/update writes are logged to stderr instead of
      silently swallowed (emit chain kept alive).
    
    Tests: registry/agent/{claude,pi}/tests/adapter.test.mjs. No auto-resolve on
    timeout remains in any adapter.
    NathanFlurry committed Jun 26, 2026
    Configuration menu
    Copy the full SHA
    ee95479 View commit details
    Browse the repository at this point in the history
Loading