@visual-z/xeno 0.11.9 → 0.13.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +41 -0
  2. package/package.json +9 -9
package/CHANGELOG.md CHANGED
@@ -1,5 +1,46 @@
1
1
  # xeno changelog
2
2
 
3
+ ## 0.13.0 — 2026-11-02
4
+
5
+ Computer on macOS:
6
+ - Computer now runs only on Xeno's own Swift worker. The Cua backend and its download are gone; an old `backend` setting is ignored.
7
+ - A cursor shows where the agent is acting and what it is doing, without slowing the input.
8
+ - `click` can right-click and double-click. New actions: `drag` within an app, `menu` to press a menu item by its path without opening the menu, and `launch` to start an app by name, alias or bundle ID without taking the foreground.
9
+ - `batch` sends up to 16 clicks, fills, keystrokes and scrolls in one call. It stops if focus moves away or a step hangs, so later keys do not land in the wrong place.
10
+ - Typing and scrolling report what could be read back from the app, so a result says whether the text actually arrived and the view actually moved.
11
+ - A window the agent is driving keeps updating after another window covers it.
12
+ - Element actions no longer attach a screenshot; ask for one when you need it.
13
+ - Terminals, password managers and system security apps are refused before any approval, including through an alias.
14
+ - A lease left by a crashed process no longer blocks Computer until a file is deleted by hand.
15
+ - A slow accessibility read no longer makes a window look changed and fail the next action.
16
+
17
+ Limits: `drag` cannot move windows or carry files between apps. Real large apps and multiple displays have not been fully tried.
18
+
19
+ Computer on Windows: the driver code is in the repository but not in this package and has not been run on a real machine, so Computer reports the driver as missing there. Everything else works as before.
20
+
21
+ ## 0.12.0 — 2026-10-29
22
+
23
+ Commands and processes:
24
+ - Commands started without a terminal get an empty input, so a search without a path or a program that reads input no longer hangs until it times out. Use `tty=true` for anything you need to type into.
25
+ - Waiting on a running command returns when its wait window ends, even if the command printed nothing, so a quiet build no longer holds the agent for many minutes. Ask for a longer window to wait out a long job.
26
+ - A command is stopped only when a `timeout` was given. Long builds, test runs and development servers keep running past five minutes and end when they exit, on Ctrl-C or when the session closes.
27
+ - A search that finds nothing inside a pipeline (`rg pattern | head`) is reported as "no match", not as a failure.
28
+
29
+ Reliability:
30
+ - Errors reported inside a model's response stream are retried unless they name a permanent problem such as an invalid request, missing access or an exhausted quota, so a relay hiccup no longer stops the task.
31
+ - Common argument slips are corrected before the call runs: a number written as text, `command` for `cmd`, `offset` and `limit` for a file range.
32
+ - An edit applies when the file changed since it was last read but the text being replaced is still there exactly; the result says the file had changed.
33
+ - Writing in a directory with its own AGENTS.md rules runs the first time and carries those rules with the result, instead of failing once.
34
+ - A web search with several queries succeeds when any of them does; failed queries are listed as warnings.
35
+
36
+ Checks and permissions:
37
+ - A test or build run through a pipe (`bun test | tail`) counts as verification. Requests that only changed documentation are not asked to run tests.
38
+ - File tools can reach paths outside the workspace through your permission rules, as the shell already could: reads follow the tool's rule, writes are allowed by a blanket allow, a rule naming the path or the system temp directory, and are asked about otherwise. `--yolo` now includes these paths. `.git` and `.xeno` stay unwritable everywhere.
39
+
40
+ Credentials:
41
+ - A password written in a chat message next to a word like 密码 or password is hidden from the model and filled back in when a tool uses it.
42
+ - Code, paths and CSS variables under names like `token:` are no longer mistaken for credentials.
43
+
3
44
  ## 0.11.9 — 2026-10-26
4
45
 
5
46
  Memory:
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@visual-z/xeno",
3
- "version": "0.11.9",
3
+ "version": "0.13.0",
4
4
  "license": "UNLICENSED",
5
5
  "description": "Segmented append-only agent log with pure context and handoff projections",
6
6
  "bin": {
@@ -10,14 +10,14 @@
10
10
  "postinstall": "node install.cjs"
11
11
  },
12
12
  "optionalDependencies": {
13
- "@visual-z/xeno-darwin-arm64": "0.11.9",
14
- "@visual-z/xeno-darwin-x64": "0.11.9",
15
- "@visual-z/xeno-linux-arm64": "0.11.9",
16
- "@visual-z/xeno-linux-x64": "0.11.9",
17
- "@visual-z/xeno-linux-arm64-musl": "0.11.9",
18
- "@visual-z/xeno-linux-x64-musl": "0.11.9",
19
- "@visual-z/xeno-win32-arm64": "0.11.9",
20
- "@visual-z/xeno-win32-x64": "0.11.9"
13
+ "@visual-z/xeno-darwin-arm64": "0.13.0",
14
+ "@visual-z/xeno-darwin-x64": "0.13.0",
15
+ "@visual-z/xeno-linux-arm64": "0.13.0",
16
+ "@visual-z/xeno-linux-x64": "0.13.0",
17
+ "@visual-z/xeno-linux-arm64-musl": "0.13.0",
18
+ "@visual-z/xeno-linux-x64-musl": "0.13.0",
19
+ "@visual-z/xeno-win32-arm64": "0.13.0",
20
+ "@visual-z/xeno-win32-x64": "0.13.0"
21
21
  },
22
22
  "files": [
23
23
  "bin/xeno.exe",