@qvac/harness 0.3.1 → 0.3.2

package/CHANGELOG.md

@@ -8,6 +8,53 @@ While the major version is `0`, a breaking change bumps the minor version.
 
 ## [Unreleased]
 
+## [0.3.2] - 2026-09-23
+
+### Changed
+
+- A networked python run's approval prompt lists every host its source names in
+  a URL, or says it names none. On an approved run those hosts (and their `www.`
+  form) are reached without asking. Any other host is asked about through
+  `askUser` before it is resolved, and silence past a minute counts as a no. A
+  host that does not wire `askUser` refuses every unnamed host. (#109)
+
+### Fixed
+
+- A python call reached the network whenever the runtime allowed it, so an
+  auto-run read call, such as a document build that loads an image from a URL,
+  could reach the web without anyone approving it. The network now opens only to
+  a call a person approved or that skip-all allowed. (#108)
+- A timed-out python run on a host with no worker thread spun forever. It is now
+  interrupted at the deadline. (#104)
+- A timed-out python run on the worker could miss its SIGINT, which killed the
+  worker along with the interpreter's state. The interrupt is resent until the
+  run settles. (#112)
+- A python run that failed partway through a save attached the half-written
+  file. A non-zero exit now attaches nothing and reports every declared output in
+  `missingOutputs`. (#110)
+
+## [0.3.1] - 2026-09-23
+
+### Added
+
+- Python in `exec` reaches the network on Bare: `urllib`, `http.client` and
+  `requests` go through the host's guarded fetch. (#94)
+- `SkillOAuthConfig.verify`: an optional probe a skill manifest declares, so a
+  host can check a fresh token before saving it. It is carried over the wire.
+  (#105)
+- A skill operation may name `response.decode` to turn a provider response into
+  a compact shape, starting with `gmail-message`. (#69)
+
+### Fixed
+
+- A malformed `<tool_call>` left its JSON arguments in the reply. The whole span
+  is now stripped. (#100)
+- A misspelt, placeholder or repeated `skill` load returned an error the model
+  retried. It now resolves to the file that was meant, or to the already-loaded
+  body. (#101)
+- When the model reached for `pip` or a video tool on the shell path, the
+  redirect it got now names the call that works. (#71)
+
 ## [0.3.0] - 2026-09-23
 
 ### Added
@@ -193,7 +240,9 @@ Tagged but never published to npm; these changes first shipped in 0.2.12.
   and the hash-pinned Python wheels), and `prebuilds-manifest.json` naming the
   native addons it defers (#13, #15)
 
-[Unreleased]: https://github.com/tetherto/qvac-harness/compare/v0.3.0...HEAD
+[Unreleased]: https://github.com/tetherto/qvac-harness/compare/v0.3.2...HEAD
+[0.3.2]: https://github.com/tetherto/qvac-harness/compare/v0.3.1...v0.3.2
+[0.3.1]: https://github.com/tetherto/qvac-harness/compare/v0.3.0...v0.3.1
 [0.3.0]: https://github.com/tetherto/qvac-harness/compare/v0.2.12...v0.3.0
 [0.2.12]: https://github.com/tetherto/qvac-harness/compare/v0.2.11...v0.2.12
 [0.2.11]: https://github.com/tetherto/qvac-harness/compare/v0.2.10...v0.2.11