This release includes 2 breaking changes for platform teams planning a safe upgrade.
Published 19d
AI Agents & Assistants
✓ No known CVEs patched
✓ No known CVEs patched in this version
Affected surfaces
rce_ssrf
breaking_upgrade
Summary
AI summaryFile sandboxing restricts I/O tools to the current working directory and path output is now relative.
Full changelog
[0.2.0] - 2026-05-30
Added
- Context markers —
rik: /slash-delimited/markers provide extra context to the agent and are auto-removed after completion (no content replacement) - Marker span auto-update — line positions are recalculated after each edit, keeping multi-marker files consistent
- File sandboxing —
read_file,write_file, andlist_filestools are restricted to the current working directory and use relative paths in output - Edit tool path scoping —
edit_filecan only edit the file currently being processed;file_pathargument removed from tool schema - Marker line-range enforcement — edits near a marker are validated against Prolog-style endpoint logic (Q/P matching)
- Personality module — replaces standalone
MoodifyToolwith aMoodenum +moodifyfunction,pre_work/post_workquotes, and MOTD display - Keyboard listener — press Space during watch mode to stop the current processing loop
- RAII file reverter —
FileReverterguard automatically reverts partial edits on early return or cancellation; integrated withDropand Ctrl+C cleanup - Watch mode deduplication — tracks file content hashes to skip unchanged files, eliminating duplicate processing
- Nested bracket balancing — closing delimiters no longer require alias prefix; bracket depth is tracked atomically
Changed
- Improved tool-call logging: human-readable argument formatting for
list_files,read_file, andedit_fileinstead of raw JSON - Personality quote printing no longer uses a random delay (immediate output)
complete_marker.rsmoved fromtools/tosrc/markers.rsas a top-level module- Removed unused
CompleteMarkerToolfrom the tool registry
Fixed
edit_near_markernow correctly checks edit endpoints against each marker line rather than doing range-overlap detectiondiv_ceilpadding in personality box replaced with idiomatic Rust- Multiple clippy warnings resolved (unused imports, unnecessary casts, collapsed else-if chains,
.contains()vs.iter().any())
Breaking Changes
- Removed `file_path` argument from the `edit_file` tool schema.
- Restricted `read_file`, `write_file`, and `list_files` to operate only within the current working directory; output paths are now relative.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About rik
All releases →Beta — feedback welcome: [email protected]