@kendoo.agentdesk/agentdesk 0.17.1 → 0.17.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +10 -0
- package/README.md +2 -0
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -8,6 +8,16 @@ All user-facing changes to AgentDesk. Each entry is tagged:
|
|
|
8
8
|
|
|
9
9
|
Internal refactors, infrastructure changes, and architectural notes are not listed here.
|
|
10
10
|
|
|
11
|
+
## [0.17.3] — 2026-04-18
|
|
12
|
+
|
|
13
|
+
### Changed
|
|
14
|
+
- `[UI]` Guide page now has a "Tracker setup — exact steps" section per tracker (Linear, Jira, GitHub Issues). Each block shows the quick-start path (your own account) and the recommended path (dedicated AgentDesk user), with the precise URLs to open, the exact button labels to click, what to label each token, which scopes to pick, and which fields from `agentdesk init` each piece goes into.
|
|
15
|
+
|
|
16
|
+
## [0.17.2] — 2026-04-18
|
|
17
|
+
|
|
18
|
+
### Changed
|
|
19
|
+
- `[UI]` Docs and Guide pages now describe the per-session isolation and the kernel-enforced sandbox — what's blocked, what the scoped-env fallback is, and how to opt out. README's security section mirrors the same copy.
|
|
20
|
+
|
|
11
21
|
## [0.17.1] — 2026-04-18
|
|
12
22
|
|
|
13
23
|
### Added
|
package/README.md
CHANGED
|
@@ -224,6 +224,8 @@ Once running, a "Run Team" button appears on [agentdesk.live](https://agentdesk.
|
|
|
224
224
|
|
|
225
225
|
### Security
|
|
226
226
|
|
|
227
|
+
- **Per-session identity isolation** — every session runs with `HOME` / `GH_CONFIG_DIR` / `XDG_CONFIG_HOME` pointed at a private scratch dir containing only this project's tracker credentials and commit identity. `gh`, `git`, and `ssh` inside the session cannot see your global accounts, other projects' tokens, or keys elsewhere on disk.
|
|
228
|
+
- **Kernel-enforced sandbox when available** — on macOS (`sandbox-exec`) and Linux (`bwrap` / bubblewrap), sessions run with writes restricted to the project dir + scratch home + `/tmp`, and reads denied on known credential locations (`~/.ssh`, `~/.aws`, `~/.config/gh`, `~/.gitconfig`, `~/.netrc`, etc.). If the tool isn't available, sessions fall back to scoped-env isolation with a one-line notice. Opt out for debugging with `AGENTDESK_NO_SANDBOX=1`.
|
|
227
229
|
- **Outbound only** — no ports opened on your machine
|
|
228
230
|
- **Project allowlist** — only runs on projects registered via `agentdesk init`
|
|
229
231
|
- **No arbitrary commands** — only spawns Claude with a fixed set of allowed tools
|