pantograph.git, branch main

Move libpanto projects to libpantograph dependency

2026-07-07T18:15:28Z

Remove the in-repo libpanto sources and binding projects from pantograph. Consume libpantograph through the Zig package URL at code.tjp.lol/libpantograph.git, including the Lua module artifact used by CLI extensions.

expose openai_responses API style to C and Go bindings

2026-07-07T16:44:20Z

properly pass through media handling in go bindings

2026-07-06T21:18:52Z

rendering & chat fixes for panto cli

2026-07-06T19:06:23Z

- resiliency for tool ids that come back from some openai_chat providers - fixing codepoint width recognition - implement proper rendering for full markdown as seen from ai models

big cli/tui gaps project

2026-07-05T22:23:49Z

docs: todos, new "tui gaps" project, AGENTS.md modification

2026-07-04T15:01:25Z

segfault fix

2026-07-03T19:24:31Z

support pending submissions on an Agent object

2026-07-03T19:14:44Z

Stage and apply event-field overrides at tool lifecycle boundaries

2026-07-03T18:10:09Z

Stage writable event-field overrides by tool call id so they can be applied at the correct point in the turn lifecycle. Capture input overrides from tool_call_complete, capture output overrides from tool_result, and clear staged overrides defensively at turn start and shutdown. Also honor user_message text overrides when starting a turn, add the helper that applies staged overrides to the agent at dispatch boundaries, and cover the behavior with tests for staged input/output overrides.

Load extensions via unified policy, entry/activate, rocks and paths

2026-07-01T21:37:04Z

Replace the split [tools]/[extensions] config sections and the two-stage load gate with a single model: - [extensions] is now one policy resolved across all layers. Rules from every layer are kept (not clobbered) and resolved by last-match-wins after sorting by (layer, glob specificity, deny-last), so a base layer can carve one name out of an otherwise-denied group and a higher layer's broad rule still wins. Default is allow; whitelist via deny=["**"]. - Registration is deferred: a source returns an entry {name, activate} (or a list, or the sugar tool table), is always eval'd side-effect-free, and only permitted names get activate()d. Identity is the declared name, not the filename. Collapses the old pre/post-load two-stage gate. - The loader runs two passes (eval -> shadow -> filter -> activate) with precedence project>user>base and, within a layer, rocks