This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+10 more
ReleasePort's take
Light signalRelease rea-agents-1.4.0 introduces typed policy and integrity contracts to core and adds several bug‑fixes across components.
Why it matters: The high‑severity migration of legacy integrity identities in the workspace component (severity 70) requires attention for stability; CLI failures now correctly return nonzero status (severity 40).
Summary
AI summaryUpdates Bug Fixes, 1.4.0, and Tests across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | High |
migrate legacy integrity identities in workspace component migrate legacy integrity identities in workspace component Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
add typed policy and integrity contracts to core add typed policy and integrity contracts to core Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
derive MCP surface metadata in identity component derive MCP surface metadata in identity component Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
expose progress resources and availability via mcp expose progress resources and availability via mcp Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Low |
land policy, resources, and typed contracts in mcp land policy, resources, and typed contracts in mcp Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
return nonzero status for operation failures in cli return nonzero status for operation failures in cli Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
complete owned Linux shutdown in hopper complete owned Linux shutdown in hopper Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
preserve migrated revisions and valid links in mcp preserve migrated revisions and valid links in mcp Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
keep generated error docs with their owner in ci pipeline keep generated error docs with their owner in ci pipeline Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Bugfix | Medium |
preserve stacked integration changes in ci pipeline preserve stacked integration changes in ci pipeline Source: llm_adapter@2026-07-15 Confidence: high |
— |
Full changelog
1.4.0 (2026-07-14)
Features
- core: add typed policy and integrity contracts (190efca)
- identity: derive MCP surface metadata (2722722)
- mcp: expose progress resources and availability (da59299)
- mcp: land policy, resources, and typed contracts (8f79ee7)
Bug Fixes
- ci: keep generated error docs with their owner (3e60e38)
- ci: preserve stacked integration changes (cf8e5cf)
- cli: return nonzero status for operation failures (#121) (00c187e)
- cli: return nonzero status for operation failures (#122) (964620a)
- hopper: complete owned Linux shutdown (#116) (fb51874)
- mcp: preserve migrated revisions and valid links (4149472)
- preserve actionable artifact diagnostics (#119) (7385220)
- workspace: migrate legacy integrity identities (d092d4c)
Tests
- identity: defer live MCP integration proof (74db3fc)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Rea
All releases →Related context
Related tools
Earlier breaking changes
- vrea-agents-2.0.0 mcp now requires Evidence for managed reconstruction.
- vrea-agents-1.0.0 contracts APIs now return structured discriminated output shapes
- vrea-agents-0.3.0 rename identity package and CLI to REA
- vrea-0.2.0 rename identity package and CLI to REA
Beta — feedback welcome: [email protected]