@poncho-ai/harness 0.34.1 → 0.36.0

package/CHANGELOG.md

@@ -1,5 +1,42 @@
 # @poncho-ai/harness
 
+## 0.36.0
+
+### Minor Changes
+
+- feat: unified conversation_recall tool, subagent recall access, fix subagent streaming
+  - Consolidate `conversation_recall` into a single tool with three modes: keyword search, date-range listing, and full conversation fetch by ID.
+  - Give subagents access to conversation recall via shared `buildRecallParams` helper.
+  - Fix subagent streaming: variable scoping bug preventing poll start, race condition in `processSubagentCallback` losing concurrent results, and spawn detection race causing `pendingSubagents` flag to be missed.
+  - Simplify subagent result polling to avoid duplicate messages from polling-to-SSE handoff.
+
+- feat: VFS file tools and vfs:// lazy resolution
+  - Add `read_file`, `edit_file`, and `write_file` tools for the virtual filesystem, registered alongside `bash`.
+  - `read_file` returns images and PDFs as lightweight `vfs://` references resolved to actual bytes only at model-request time, keeping conversation history small.
+  - `edit_file` uses targeted `old_str`/`new_str` replacement for efficient edits to large files.
+  - `write_file` creates or overwrites files with automatic parent directory creation.
+  - Add `vfs://` scheme resolution in `convertMessage` for user messages, tool results, and rich media items.
+  - Extend `extractMediaFromToolOutput` to handle PDFs alongside images.
+
+## 0.35.0
+
+### Minor Changes
+
+- [`83d3c5f`](https://github.com/cesr/poncho-ai/commit/83d3c5f841fe84965d1f9fec6dfc5d8832e4489a) Thanks [@cesr](https://github.com/cesr)! - feat: add multi-tenancy with JWT-based tenant scoping
+
+  Deploy one agent, serve many tenants with fully isolated conversations, memory, reminders, and secrets. Tenancy activates automatically when a valid JWT is received — no config changes needed.
+  - **Auth**: `createTenantToken()` in client SDK, `poncho auth create-token` CLI, or any HS256 JWT library.
+  - **Isolation**: conversations, memory, reminders, and todos scoped per tenant.
+  - **Per-tenant secrets**: encrypted secret overrides for MCP auth tokens, manageable via CLI (`poncho secrets`), API, and web UI settings panel.
+  - **MCP**: per-tenant token resolution with deferred discovery for servers without a default env var.
+  - **Web UI**: `?token=` tenant access, settings cog for secret management, dark mode support.
+  - **Backward compatible**: existing single-user deployments work unchanged.
+
+### Patch Changes
+
+- Updated dependencies [[`83d3c5f`](https://github.com/cesr/poncho-ai/commit/83d3c5f841fe84965d1f9fec6dfc5d8832e4489a)]:
+  - @poncho-ai/sdk@1.8.0
+
 ## 0.34.1
 
 ### Patch Changes

package/dist/chunk-MCKGQKYU.js

@@ -0,0 +1,15 @@
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x)(function(x) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x + '" is not supported');
+});
+var __commonJS = (cb, mod) => function __require2() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
+
+export {
+  __require,
+  __commonJS
+};