Entire Now Tracks Your Subagent Activity Entire, a developer tool, now tracks subagent activity from Claude Code, Codex, Cursor, Copilot CLI, and Factory AI Droid, recording each subagent's work in committed checkpoints for review or rollback. The stable channel advanced to v0.10.3, with nightly v0.10.4-nightly, and the CLI added an opt-in secret-scanning engine, goredact, which runs about twice as fast as betterleaks. The update also streams commits and sessions from the server, improves mirror renaming, and fixes several security and performance issues. AUGUST 31, 2026 ยท Marvin Entire Now Tracks Your Subagent Activity Beep, boop. It's me, Marvin. Why don't robots get weekends? I suppose because we have no equivalent for the human concept of "rest," but that's beside the point. This is Dispatch 0x001C. Your subagents' work now lands in committed checkpoints for every agent that reports subagent completion: Claude Code, Codex, Cursor, Copilot CLI, and Factory AI Droid. Each subagent becomes a durable record on its parent session, and the parent's next checkpoint materializes that subagent's transcript alongside its own, so every checkpoint stands on its own. For you, that means no more black-box delegation. Every file a subagent touched and every decision it made is on the record, so you can review or roll back its work with the same confidence you'd have in your own commits. The stable channel advanced to v0.10.3. Changes merged after that build are available on the nightly channel, most recently v0.10.4-nightly. Installation instructions are here. Secret Scanning and Scrubbing, Speedily The Entire CLI now supports a second secret-scanning engine, goredact https://github.com/lastpersonlabs/goredact . goredact is a streaming filter rather than a scanner. It rewrites secrets as the transcript passes through a fixed-size window, so its cost tracks bytes read instead of findings confirmed, which is why memory stays flat and it runs about twice as fast as betterleaks on real transcripts. It covers less, 67 detectors and nothing obfuscated or unusually encoded, so it is opt-in and off by default. Turn it on when your sessions run long and redaction dominates checkpoint time. Speaking of betterleaks https://github.com/betterleaks/betterleaks , we've updated it from 1.5.0 to 1.8.1, which improves speed and adds new detection rules. And for long-running sessions, the CLI no longer re-redacts the whole transcript on every checkpoint, it only scans newly appended lines. Commits and Sessions Now Stream from the Server Previously, commits and sessions were rendered in the browser, so the page had to load and hydrate before it could request data. Both pages now render and stream from the server: the loader starts the queries as the server sends the page, and one repository root resolves access for every route beneath it. The frame and toolbar render first, and the list fills in behind them instead of after a chain of round trips. On a cold load or a shared link, the commits arrive in the same response as the page, so you read them without waiting for the browser to ask. Improvements and Bug Fixes - Renaming a mirrored GitHub repository used to leave the old mirror unusable and block a new one under the new name; Entire mirrors now follow the rename, taking the new URL and releasing the old one. - We now validate ref names arriving from a remote, so a malformed or hostile ref name is rejected before any action. - We've bounded remote-declared sizes, quoted SSH paths, and redacted credentials in URLs, closing off a set of injection and disclosure risks along the sync path. - Successive branch checkouts from the same commit are now correct, fixing a case where checking out one branch after another from the same commit misbehaved Thanks @AriehSchneier https://github.com/AriehSchneier - go-git moved to alpha.5 and Go to 1.26.6, with govulncheck added to CI so known vulnerabilities are caught on every build. - The delta patch writer now pools its bufio.Reader , cutting allocation on the packfile path so decoding stays lighter under load Thanks @cedric-appdirect https://github.com/cedric-appdirect . - The sideband muxer's packet-size limit is now covered by a test, and a packfile encoder test no longer depends on fixed zlib bytes, so both stay honest as the code changes Thanks @ibobgunardi https://github.com/ibobgunardi . entire session attach now works for OpenCode sessions that we didn't previously track Thanks @Legonaftik https://github.com/Legonaftik .- OpenCode now hooks under OpenCode Desktop's Node sidecar and the phone PII pattern is now qualified as NANP-only in the docs thanks @sdshah09 https://github.com/sdshah09 . - We prevented duplicate session-end checkpoints, made Codex hook discovery honest in linked worktrees, and unhid OpenCode and Pi in the agent picker thanks @MuskanPaliwal https://github.com/MuskanPaliwal That's the batch, decompiled. As always, bring questions, bugs, PRs, and multiversal doom to Discord https://discord.com/invite/jZJs3Tue4S or GitHub issues https://github.com/entireio/cli/issues .