From c268fcf10664219366762596bf50911e88b0d228 Mon Sep 17 00:00:00 2001 From: github-actions Date: Wed, 28 Oct 2026 19:35:18 +0000 Subject: [PATCH 1/2] 0.4.0 --- CHANGELOG.md | 15 ++++++++++++++- package.json | 2 +- 2 files changed, 15 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 4dc9724..f588f88 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,8 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +## [0.4.0] + +### Uncategorized + +- chore(deps)!: patch critical and high vulnerabilities and drop Node 20 ([#33](https://github.com/MetaMask/agent-runner/pull/33)) +- chore(deps): upgrade @anthropic-ai/claude-agent-sdk to ^0.3.310 ([#31](https://github.com/MetaMask/agent-runner/pull/31)) + ### Added +- feat: add optional pi agent SDK support - Optional pi Agent SDK adapter for isolated LiteLLM runs, Docker execution, structured judging, cancellation, and turn limits. - Provider-specific runner option types with backwards-compatible Claude defaults. @@ -21,6 +29,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ### Fixed +- fix: propagate Langfuse trace names ([#32](https://github.com/MetaMask/agent-runner/pull/32)) +- fix: address pi adapter review findings +- fix: make coverage deterministic and harden bridge message validation +- fix: address PR #28 review findings - Scrub exact environment values of at least eight characters whose names match recognized sensitive fragments from pi messages and errors, Docker bridge execution errors, and judge inputs. Pi message telemetry receives scrubbed output; arbitrary names, short or encoded values, and task prompt telemetry are not covered by this heuristic. - Share sensitive-name fragments with key-based redaction, including wallet SRPs, mnemonics, and passphrases; preserve system error fields and aggregate causes when scrubbing. - Preserve explicitly mapped pi Docker working directories instead of replacing them with the container default. @@ -78,7 +90,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - fix: cleanup unused publish docs ([#8](https://github.com/MetaMask/agent-runner/pull/8)) -[Unreleased]: https://github.com/MetaMask/agent-runner/compare/v0.3.1...HEAD +[Unreleased]: https://github.com/MetaMask/agent-runner/compare/v0.4.0...HEAD +[0.4.0]: https://github.com/MetaMask/agent-runner/compare/v0.3.1...v0.4.0 [0.3.1]: https://github.com/MetaMask/agent-runner/compare/v0.3.0...v0.3.1 [0.3.0]: https://github.com/MetaMask/agent-runner/compare/v0.2.0...v0.3.0 [0.2.0]: https://github.com/MetaMask/agent-runner/compare/v0.1.0...v0.2.0 diff --git a/package.json b/package.json index 32acbb0..32b977d 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@metamask/agent-runner", - "version": "0.3.1", + "version": "0.4.0", "description": "Reusable Claude Agent SDK runner with Langfuse telemetry lifecycle support.", "homepage": "https://github.com/MetaMask/agent-runner#readme", "bugs": { From afaaa051ed3952147a690f43f84ba8dc2ab29b95 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jo=C3=A3o=20Tavares?= Date: Wed, 28 Oct 2026 21:56:09 +0000 Subject: [PATCH 2/2] Update CHANGELOG for version 0.4.0 Updated changelog to reflect changes in version 0.4.0, including added features, changes, and fixes. --- CHANGELOG.md | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index f588f88..d0be114 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -9,11 +9,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [0.4.0] -### Uncategorized - -- chore(deps)!: patch critical and high vulnerabilities and drop Node 20 ([#33](https://github.com/MetaMask/agent-runner/pull/33)) -- chore(deps): upgrade @anthropic-ai/claude-agent-sdk to ^0.3.310 ([#31](https://github.com/MetaMask/agent-runner/pull/31)) - ### Added - feat: add optional pi agent SDK support @@ -22,6 +17,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ### Changed +- chore: upgrade @anthropic-ai/claude-agent-sdk to ^0.3.310 ([#31](https://github.com/MetaMask/agent-runner/pull/31)) - Apply the `on-success` Docker cleanup policy uniformly: adapters keep the container unless the run completed with a successful result. - **Breaking for custom Claude-backed adapters:** the runner no longer injects `settingSources: []`. Add `defaultOptions: { settingSources: [] }` to custom adapters to preserve SDK-settings isolation. The built-in Claude adapter keeps this default. - Reject judge `queryOptions` for non-Claude adapters without `runStructured()` instead of forwarding provider-native options to the legacy Claude judge. Use a separate Claude runner for customized Claude judging. @@ -29,6 +25,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ### Fixed +- chore: patch critical and high vulnerabilities and drop Node 20 ([#33](https://github.com/MetaMask/agent-runner/pull/33)) - fix: propagate Langfuse trace names ([#32](https://github.com/MetaMask/agent-runner/pull/32)) - fix: address pi adapter review findings - fix: make coverage deterministic and harden bridge message validation