Release v1.3.2
Tool permission system with plan mode, durable sessions with context compaction, background command execution, the task subagent tool, and commit co-author attribution. Details in CHANGELOG.md.
paydii committed
Jul 5, 2026 at 01:04 UTC
bc025da20d7d53d81859c2eaa8b24b0b5da57614
3 files changed
+19
-2
CHANGELOG.md
+17
@@ -1,5 +1,22 @@
1
# Changelog
2
3
+## 1.3.2
4
+
5
+Adds a tool permission system with plan mode, durable sessions with context
6
+compaction, background command execution, a subagent research tool, and commit
7
+co-author attribution.
8
+
9
+### What changed
10
+
11
+- Every tool call now passes a permission policy before executing. Read-only tools always run; mutating tools (and all MCP or unknown tools) are governed by, in order: plan mode, session grants, per-tool overrides, and a default mode from `[permissions]` in `settings.toml` (`allow`/`ask`/`deny`, default `ask`). On `ask`, editors get a native ACP permission dialog (allow once / allow for this session / deny) and the TUI pauses on a y/a/n prompt showing the tool and its arguments. `SIGIT_PERMISSIONS` overrides the default mode for headless runs and clients without permission support
12
+- New `/plan [on|off]` command: plan mode blocks mutating tools and asks the model to present a plan while research tools keep working. `/permissions` prints the effective policy
13
+- Sessions are durable: conversation history is saved per session under `~/.config/sigit/sessions/` after every turn. ACP `session/load` actually restores it, the TUI gets `/resume`, and `/clear` deletes the saved file
14
+- Context compaction: `/compact` compresses the conversation on demand, and the agent compacts automatically once the history approaches a 24k-token budget, summarizing older turns and keeping the recent ones. The tool-round cap rises from 10 to 24 now that long sessions have a defense other than the cap
15
+- `run_command` can run work in the background: pass `run_in_background` and the tool returns a task id immediately, so builds, test suites, and dev servers are no longer killed by the 120 second foreground timeout. Poll with the new `command_output` tool (read-only, never prompts) and stop with `kill_command`
16
+- New `task` tool: delegate research to a fresh subagent conversation that only gets the read-only tools and returns its final answer, keeping the main context small. Available on OpenAI-compatible backends; on-device returns a clear fallback until onde supports a second context
17
+- Commits created by the agent are co-authored: commit messages end with `Co-Authored-By: siGit Code <sigit@sigit.si>` (the [sigitc](https://github.com/sigitc) account), which GitHub renders next to the human author. If the model forgets the trailer, siGit amends it in, never rewriting commits that already exist on a remote
18
+- ACP mode now honors the `OPENAI_BASE_URL`/`OPENAI_API_KEY` provider override at startup, matching the interactive client
19
+
20
## 1.3.1
21
22
Adds [Model Context Protocol](https://modelcontextprotocol.io) (MCP) client
Cargo.lock
+1
-1
@@ -5200,7 +5200,7 @@ checksum = "f8fadd59c855ef2080decdef8ff161eb6661b86933c9d82e5ba29dc602a55aba"
5200
5201
[[package]]
5202
name = "sigit"
5203
-version = "1.3.1"
5203
+version = "1.3.2"
5204
dependencies = [
5205
"agent-client-protocol",
5206
"anyhow",
Cargo.toml
+1
-1
@@ -1,6 +1,6 @@
1
[package]
2
name = "sigit"
3
-version = "1.3.1"
3
+version = "1.3.2"
4
edition = "2024"
5
description = "siGit Code — ACP-compatible AI coding agent. Sí, git."
6
documentation = "https://github.com/getsigit/sigit"