发布日期: 2026-08-26
版本号: rust-v0.150.0

该版本更新主要包括以下改进：新增通过@提及引用其他Codex任务的功能，允许代理在终端中读取、创建或发送任务消息；增强复制命令的功能，可选择完整回复、单独代码块或引用内容；未命名的终端任务现在会自动生成描述性标题，并支持根据对话内容建议可编辑标题；Markdown链接在支持的终端中显示为可点击标签；新增快捷键绑定以循环权限模式，并在Vim模式下支持使用.重复上次编辑；引入中断钩子，可在活跃的顶层对话轮次被中断时运行命令或MCP处理器。错误修复方面：不再为不受信任的项目提供项目级AGENTS.md指令，并在权限更改后强制执行管理性拒绝读取规则；改进应用服务器诊断中的凭证编辑处理；修复远程MCP载体令牌查找和必需服务器启动问题，同时保持与旧版执行器的兼容性；解决Windows提升沙箱设置和Unicode用户路径下的启动别名问题；防止由分离进程保留终端或终端输出缓冲区引起的Unix关机挂起；修复Amazon Bedrock模型的对话压缩和多代理兼容性问题。此外，变更列表还包含了大量具体代码调整，涉及Guardian策略、执行器集成、沙箱安全、MCP服务器交互、分析追踪以及界面改进等多个方面。

更新内容 （中文）

新功能

  • 使用 @ 提及引用其他 Codex 任务，并允许代理从终端读取、创建或发送任务消息。(#40308, #40315)
  • /copy 现在提供完整回复、单独代码块和块引用的选择器。(#39997)
  • 未命名的终端任务会自动接收描述性标题，/rename 会根据对话内容建议一个可编辑的标题。(#40492, #40495)
  • 在支持的终端中，Markdown 链接显示为可点击标签，在其他地方保留可见 URL。(#40471)
  • 绑定快捷键以循环切换权限模式，并在 Vim 模式中使用 . 重复上一次编辑。(#39873, #40521)
  • 新增 Interrupt 钩子，可在活动顶层轮次被中断时运行命令或 MCP 处理程序。(#40511)

错误修复

  • 不受信任的项目不再提供项目级 AGENTS.md 指令，管理的拒绝读取规则在权限更改后仍保持有效。(#39837, #40004)
  • 改进了应用服务器诊断中的凭证编辑，包括提供商、认证刷新和证明字段。(#39993)
  • 修复了远程 MCP 令牌查找和必需服务器启动，同时保持与旧版执行器的兼容性。(#39926, #39952, #39979)
  • 修复了在 Unicode 用户路径下提升权限的 Windows 沙箱设置和启动别名。(#39971, #40570)
  • 防止因分离进程保留终端或完整终端输出缓冲区而导致的 Unix 关闭挂起。(#40460)
  • 修复了 Amazon Bedrock 模型的对话压缩和多代理兼容性。(#39804, #39825)

更新日志

完整更新日志：https://github.com/openai/codex/compare/rust-v0.149.0…rust-v0.150.0

  • #39667 追踪 MCP 运行时刷新协调 @copyberry
  • #39691 使 Guardian v2 父压缩重用可配置 @copyberry
  • #39700 在不安全配置和 sed 解析时关闭失败 @copyberry
  • #39702 在多代理恢复测试中等待轮次完成事件 @copyberry
  • #39703 将全局作用域检查移入代码模式运行时 @copyberry
  • #39706 加固 Seatbelt 可写根路径绑定 @copyberry
  • #39707 移除冗余代码模式图像辅助测试 @copyberry
  • #39709 仅记录 TUI 应用事件变体，不记录其负载 @copyberry
  • #39712 减少统一执行输出缓冲区分配 @copyberry
  • #39717 通过环境变量传递 CI 工作流输入 @copyberry
  • #39719 停止在 V8 工作流中保留结账凭证 @copyberry
  • #39720 暴露浏览器设置导入的管理策略 @copyberry
  • #39722 在分析中跟踪多代理 v2 生成调用 @copyberry
  • #39726 将 WebSocket 拨号未来放入框中 @copyberry
  • #39731 避免为配置的 TUI 会话进行发布读取 @copyberry
  • #39736 移除私有执行器目录创建 @copyberry
  • #39738 遵守模型默认值中的 Guardian 运行时设置 @copyberry
  • #39741 使用模型特定的自动审查结果指令 @copyberry
  • #39744 跳过较短作曲器输入的后处理 @copyberry
  • #39746 从执行器刷新恢复的线程能力根 @copyberry
  • #39749 要求文件系统后端实现目录遍历 @copyberry
  • #39752 暴露未编译的权限配置文件选择 @copyberry
  • #39755 将管理的开发者指令添加到要求中 @copyberry
  • #39756 在执行服务器中缓存 shell 快照 @copyberry
  • #39757 在统一执行上标准化 shell 执行 @copyberry
  • #39761 添加应用服务器 MCP 事件流 @copyberry
  • #39765 在插件安装元数据中包含建议 ID @copyberry
  • #39770 刷新捆绑的模型定义 @copyberry
  • #39772 在统一执行上标准化 shell 执行 @copyberry
  • #39776 在启动或安装前验证 Codex 应用签名 @copyberry
  • #39777 在初始执行连接期间重试临时注册表失败 @copyberry
  • #39779 使工具结果遥测限制可配置 @copyberry
  • #39782 支持独立的命名函数调用输出 @copyberry
  • #39784 对发布迁移失败进行分类 @copyberry
  • #39785 支持自定义模型提供商的轮次成本遥测 @copyberry
  • #39786 支持主机接受的执行服务器 WebSockets @copyberry
  • #39790 为 zsh 分支测试设置去重 @copyberry
  • #39791 将独立工具输出作为外部上下文处理 @copyberry
  • #39792 拒绝父拥有的子代理的设置更新 @copyberry
  • #39794 在完整 Rust CI 中安装构建工具 @copyberry
  • #39795 将主机名添加到可配置的 TUI 状态行 @copyberry
  • #39797 使用线程上下文丰富线程存档分析 @copyberry
  • #39798 将 rmcp 更新至 3.1.3 @copyberry
  • #39802 优化大小写不敏感的线程历史记录匹配 @copyberry
  • #39804 为 Amazon Bedrock 模型使用多代理 V1 @copyberry
  • #39807 使用创建上下文完成保留的 PDF 上传 @copyberry
  • #39809 在核心 Windows shell 环境中保留 WINDIR @copyberry
  • #39811 将 macOS 偏好读取限制为全盘策略 @copyberry
  • #39812 避免为存在检查实例化可写根分区 @copyberry
  • #39813 延迟遗留文件系统策略投影 @copyberry
  • #39822 保留未设上限的 Guardian 分类器指令 @copyberry
  • #39825 为 Amazon Bedrock 使用响应压缩 @copyberry
  • #39827 为令牌预算会话添加历史记录和笔记工具 @copyberry
  • #39830 重命名历史记录笔记扩展配置选项 @copyberry
  • #39837 忽略不受信任项目的项目指令 @copyberry
  • #39847 在响应元数据中包含上下文窗口 ID @copyberry
  • #39852 刷新 Noise 捆绑包时重置注册表重试 @copyberry
  • #39864 限制待处理输入预览换行工作 @copyberry
  • #39870 允许通过 codex agents 进行会话配置 @copyberry
  • #39873 添加循环 TUI 权限模式的键绑定 @copyberry
  • #39876 支持连接到现有的实时呼叫 @copyberry
  • #39917 在执行服务器 shell 快照中遵守请求的 PATH @copyberry
  • #39926 在执行器环境中解析 HTTP MCP 承载令牌 @copyberry
  • #39930 跟踪远程 MCP 头环境变量 @copyberry
  • #39935 强制执行 MCP OAuth 端点的颁发者绑定 @copyberry
  • #39971 限制统一执行输出增量帧 @copyberry
  • #39940 允许本地代码模式主机启动更多时间 @copyberry
  • #39941 从选定执行器发现 HTTP MCP 服务器 @copyberry
  • #39952 遵守来自选定执行器的必需 MCP 服务器 @copyberry
  • #39953 支持语音感知配置和版本偏差构建 @copyberry
  • #39957 在统一执行中添加内存中的 shell 快照 @copyberry
  • #39958 停止从本地执行服务器公布 shell 快照 @copyberry
  • #39961 通过执行器 WebSockets 测试浏览器 MCP 承载令牌 @copyberry
  • #39962 保持 Guardian 审查与执行器 MCP 服务器隔离 @copyberry
  • #39967 将 pnpm 升级至 10.34.5 @copyberry
  • #39969 整合代码模式输出辅助测试 @copyberry
  • #39971 修复提升权限的 Windows 沙箱设置激活 @copyberry
  • #39975 在子代理 Guardian 审查中保留根用户授权 @copyberry
  • #39976 允许在 macOS 沙箱中查询信号量限制 @copyberry
  • #39979 保持与旧版执行器的 MCP 兼容性 @copyberry
  • #39980 为远程执行强制执行环境网络策略 @copyberry
  • #39981 绕过需要自动审查的模型的风险评分 @copyberry
  • #39985 在渲染策略后截断 Guardian 指令 @copyberry
  • #39991 在活动线程耗尽期间保持 TUI 事件顺序 @copyberry
  • #39992 在导航时保持键映射操作描述稳定 @copyberry
  • #39993 将凭证排除在应用服务器日志之外 @copyberry
  • #39994 添加 Guardian 内部会话支持 @copyberry
  • #39995 扩展浏览器和计算机使用要求 @copyberry
  • #39997 为 /copy 添加响应目标选择器 @copyberry
  • #39999 为不支持的模型隐藏快速模式状态 @copyberry
  • #40000 通过应用服务器暴露浏览器和计算机使用要求 @copyberry
  • #40004 在权限更新期间保留管理的拒绝读取规则 @copyberry
  • #40005 通过同步 Guardian 审查路由提升的命令 @copyberry
  • #40006 显式同步 Git 丰富测试 @copyberry
  • #40007 在应用服务器中实现 Amazon Bedrock 设置 @copyberry
  • #40009 运行允许列表中的执行器插件停止钩子 @copyberry
  • #40011 显式同步并发 Git 丰富测试 @copyberry
  • #40012 为 MCP 停止钩子保留执行器上下文 @copyberry
  • #40013 在异步风险评分中重用 Guardian 审查 @copyberry
  • #40015 加固远程安装插件缓存协调 @copyberry
  • #40017 追踪轮次上下文创建和实时状态检查 @copyberry
  • #40018 添加浏览器和计算机使用配置 @copyberry
  • #40020 为执行器 Stop 钩子添加端到端测试 @copyberry
  • #40021 取消 Guardian 审查及其工具调用 @copyberry
  • #40024 在统一执行中遵守细粒度沙箱批准 @copyberry
  • #40028 记录 Guardian V2 分类结果 @copyberry
  • #40031 保留严格的 MCP 自动审查结果 @copyberry
  • #40038 添加未完成根轮次挂起 @copyberry
  • #40068 报告运行时 MCP 连接状态 @copyberry
  • #40150 为 Guardian 分类器使用线程源元数据 @copyberry
  • #40161 允许执行调用者分类新线程 @copyberry
  • #40166 在显示 TUI 光标前移动光标 @copyberry
  • #40169 为补丁批准分页添加回归覆盖 @copyberry
  • #40174 在消息元数据中保留内容项种类 @copyberry
  • #40177 要求扩展提示片段的内容种类 @copyberry
  • #40179 在归档线程树时关闭恢复的后代 @copyberry
  • #40180 使用内容种类分类上下文片段 @copyberry
  • #40184 在合并的消息中保留上下文注释 @copyberry
  • #40186 将分离的内存请求识别为内存整合 @copyberry
  • #40196 使用内容种类注释用户输入和上下文片段 @copyberry
  • #40200 移除计划模式作曲器提示 @copyberry
  • #40221 区分 Guardian 审查线程和子代理 @copyberry
  • #40257 支持 cua_repl 作为基于 Node REPL 的 MCP 服务器 @copyberry
  • #40264 截断消息时保留内容元数据 @copyberry
  • #40266 过滤分支代理历史记录时保留内容注释 @copyberry
  • #40271 回滚模型切换时保留内容注释 @copyberry
  • #40273 规范化压缩的用户消息注释 @copyberry
  • #40275 对其他生成的上下文片段进行分类 @copyberry
  • #40277 省略不支持的媒体时保留注释 @copyberry
  • #40280 远程压缩期间预算保留图像 @copyberry
  • #40281 图像准备期间保留内容种类 @copyberry
  • #40292 为组装的 Codex 包添加冒烟测试 @copyberry
  • #40294 按源对内部模型上下文进行分类 @copyberry
  • #40295 在权限命名空间下对权限指令进行分类 @copyberry
  • #40296 注释 Responses Lite 基础指令 @copyberry
  • #40297 在子代理分支中保留开发者指令注释 @copyberry
  • #40301 将 Business Pro Lite 计划标记为 Business Premium @copyberry
  • #40302 加固 bubblewrap 合成挂载注册表隔离 @copyberry
  • #40308 添加管理 Codex 任务的 TUI 工具 @copyberry
  • #40315 在 TUI 作曲器中添加任务提及 @copyberry
  • #40321 更新无框实时默认模型 @copyberry
  • #40343 从初始化中缓存执行器元数据 @copyberry
  • #40363 将本地环境变量转发到代理插件 MCP 服务器 @copyberry
  • #40368 为 MCP 投影使用快照会话源 @copyberry
  • #40376 在 Unix 上公布 shell 快照 v2 支持 @copyberry
  • #40381 在会话初始化期间保留沙箱错误 @copyberry
  • #40382 向扩展工具暴露调用源 @copyberry
  • #40393 使用单个令牌对 Guardian V2 风险进行分类 @copyberry
  • #40398 稳定不匹配的执行器 Stop 钩子测试 @copyberry
  • #40403 预热更多 Guardian 采样 WebSockets @copyberry
  • #40410 加强代理插件 MCP 环境覆盖测试 @copyberry
  • #40413 列出技能时遵守响应预算 @copyberry
  • #40420 将 Guardian 策略表示为上下文片段 @copyberry
  • #40422 加固 Windows 更新程序命令执行 @copyberry
  • #40423 加固 Windows 文件 URI 转换 @copyberry
  • #40431 使用异步评分器截断渲染 Guardian 审查证据 @copyberry
  • #40436 为应用内本地自动化添加管理门控 @copyberry
  • #40437 在父轮次上报告完成的子代理活动 @copyberry
  • #40438 为 Bazel Windows MSVC Rust 链接使用 rust-lld @copyberry
  • #40441 使用拒绝读取规则保留 Windows 根读取 @copyberry
  • #40443 批处理沙箱化能力根发现 @copyberry
  • #40447 重试失败的 shell 快照捕获 @copyberry
  • #40449 将对等代理完成活动路由到发起轮次 @copyberry
  • #40450 将内容项种类置于功能标志之后 @copyberry
  • #40460 防止 Unix PTY I/O 阻止运行时关闭 @copyberry
  • #40464 跨应用服务器输入强制执行子代理所有权 @copyberry
  • #40465 记录 Guardian 分类器输入截断指标 @copyberry
  • #40466 向网络代理功能配置添加凭证代理 @copyberry
  • #40471 在支持的终端中将 Markdown 链接渲染为可点击标签 @copyberry
  • #40472 向扩展添加结构化的完全批准审查 @copyberry
  • #40475 更新 Windows 沙箱 ACL 时请求读取控制 @copyberry
  • #40477 通过其父项重新加载多代理 V2 子项 @copyberry
  • #40480 添加仅计算机使用的 Guardian v2 审查范围 @copyberry
  • #40481 支持 Amazon Bedrock 的管理 AWS 访问密钥 @copyberry
  • #40484 在子环境中代理凭证别名 @copyberry
  • #40486 向轮次和工具分析添加根轮次 ID @copyberry
  • #40487 将代理角色加载提取到专用 crate @copyberry
  • #40488 将轮次成本导出为 OTEL 指标 @copyberry
  • #40489 遵守禁用的管理网络配置 @copyberry
  • #40490 在凭证代理激活时加固项目配置 @copyberry
  • #40491 读取技能资源时遵守响应预算 @copyberry
  • #40492 生成描述性的 TUI 线程标题 @copyberry
  • #40494 从 TUI 路由中隐藏临时系统线程 @copyberry
  • #40495 在 /rename 中基于对话建议线程标题 @copyberry
  • #40496 将历史记录、笔记和异步消息作为控制工具跟踪 @copyberry
  • #40497 加固内部 Guardian 会话隔离 @copyberry
  • #40498 增加应用服务器模型刷新间隔 @copyberry
  • #40499 加固启动发布迁移以防止并发更新 @copyberry
  • #40501 在统一提及中为插件技能去重 @copyberry
  • #40502 在 AGENTS.md 状态摘要中折叠主路径 @copyberry
  • #40504 按计划类型路由网络可信访问链接 @copyberry
  • #40508 在线程时间线中保留实时事件 @copyberry
  • #40509 添加保留的线程工件模型 @copyberry
  • #40511 为中断的轮次添加钩子 @copyberry
  • #40521 向 Vim 模式添加点重复 @copyberry
  • #40523 初始失败后重试提供商认证命令 @copyberry
  • #40528 在批准审查中表示终端输入 @copyberry
  • #40533 将扩展提示路由到上下文窗口元数据 @copyberry
  • #40539 将历史记录笔记提示注入上下文窗口 @copyberry
  • #40544 在图像生成分析中包含透明背景 @copyberry
  • #40551 从轮次环境派生沙箱上下文 @copyberry
  • #40554 注册转录 v2 功能标志 @copyberry
  • #40570 在 Windows 批处理别名中保留 Unicode 路径 @copyberry
  • #40585 在分析中跟踪剩余的多代理 v2 工具 @copyberry
  • #40587 为内存整合确定停止钩子范围 @copyberry
  • #40594 在 Guardian 转录中保留对话上下文 @copyberry

更新内容 （原始）

New Features

  • Reference other Codex tasks with @ mentions, and ask agents to read, create, or message tasks from the terminal. (#40308, #40315)
  • /copy now offers a picker for full responses, individual code blocks, and blockquotes. (#39997)
  • Unnamed terminal tasks receive descriptive titles automatically, and /rename suggests an editable title based on the conversation. (#40492, #40495)
  • Markdown links appear as clickable labels in supported terminals, with visible URLs retained elsewhere. (#40471)
  • Bind shortcuts to cycle permission modes, and use . in Vim mode to repeat your last edit. (#39873, #40521)
  • New Interrupt hooks can run commands or MCP handlers when an active top-level turn is interrupted. (#40511)

Bug Fixes

  • Untrusted projects no longer supply project-level AGENTS.md instructions, and managed deny-read rules remain enforced after permission changes. (#39837, #40004)
  • Improved credential redaction in app-server diagnostics, including provider, authentication refresh, and attestation fields. (#39993)
  • Fixed remote MCP bearer-token lookup and required-server startup while preserving compatibility with older executors. (#39926, #39952, #39979)
  • Fixed elevated Windows sandbox setup and launch aliases under Unicode user paths. (#39971, #40570)
  • Prevented Unix shutdown hangs caused by detached processes retaining a terminal or full terminal output buffers. (#40460)
  • Fixed conversation compaction and multi-agent compatibility for Amazon Bedrock models. (#39804, #39825)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.149.0...rust-v0.150.0

  • #39667 Trace MCP runtime refresh coordination @copyberry
  • #39691 Make Guardian v2 parent compaction reuse configurable @copyberry
  • #39700 Fail closed on unsafe config and sed parsing @copyberry
  • #39702 Wait for turn completion events in multi-agent resume tests @copyberry
  • #39703 Move the global scope check into the code-mode runtime @copyberry
  • #39706 Harden Seatbelt writable root path binding @copyberry
  • #39707 Remove redundant code mode image helper test @copyberry
  • #39709 Log TUI app event variants without their payloads @copyberry
  • #39712 Reduce unified exec output buffer allocations @copyberry
  • #39717 Pass CI workflow inputs through environment variables @copyberry
  • #39719 Stop persisting checkout credentials in V8 workflows @copyberry
  • #39720 Expose managed policy for browser settings imports @copyberry
  • #39722 Track multi-agent v2 spawn calls in analytics @copyberry
  • #39726 Box the WebSocket dial future @copyberry
  • #39731 Avoid rollout reads for configured TUI sessions @copyberry
  • #39736 Remove private executor directory creation @copyberry
  • #39738 Honor Guardian runtime settings from model defaults @copyberry
  • #39741 Use model-specific auto-review outcome instructions @copyberry
  • #39744 Skip postprocessing for short composer input @copyberry
  • #39746 Refresh resumed thread capability roots from executors @copyberry
  • #39749 Require filesystem backends to implement directory walks @copyberry
  • #39752 Expose uncompiled permission profile selection @copyberry
  • #39755 Add managed developer instructions to requirements @copyberry
  • #39756 Cache shell snapshots in the exec server @copyberry
  • #39757 Standardize shell execution on unified exec @copyberry
  • #39761 Add app-server MCP event streaming @copyberry
  • #39765 Include suggestion IDs in plugin install metadata @copyberry
  • #39770 Refresh bundled model definitions @copyberry
  • #39772 Standardize shell execution on unified exec @copyberry
  • #39776 Verify Codex app signatures before launch or install @copyberry
  • #39777 Retry transient registry failures during initial exec connection @copyberry
  • #39779 Make tool-result telemetry limits configurable @copyberry
  • #39782 Support standalone named function call outputs @copyberry
  • #39784 Classify rollout migration failures @copyberry
  • #39785 Support turn cost telemetry for custom model providers @copyberry
  • #39786 Support host-accepted exec-server WebSockets @copyberry
  • #39790 Deduplicate zsh fork test setup @copyberry
  • #39791 Handle standalone tool outputs as external context @copyberry
  • #39792 Reject settings updates for parent-owned subagents @copyberry
  • #39794 Install build tools in full Rust CI @copyberry
  • #39795 Add hostname to the configurable TUI status line @copyberry
  • #39797 Enrich thread archive analytics with thread context @copyberry
  • #39798 Update rmcp to 3.1.3 @copyberry
  • #39802 Optimize case-insensitive thread history matching @copyberry
  • #39804 Use multi-agent V1 for Amazon Bedrock models @copyberry
  • #39807 Finalize reserved PDF uploads with creation context @copyberry
  • #39809 Preserve WINDIR in core Windows shell environments @copyberry
  • #39811 Restrict macOS preference reads to full-disk policies @copyberry
  • #39812 Avoid materializing writable-root carveouts for presence checks @copyberry
  • #39813 Defer legacy filesystem policy projection @copyberry
  • #39822 Preserve uncapped Guardian classifier instructions @copyberry
  • #39825 Use Responses compaction for Amazon Bedrock @copyberry
  • #39827 Add history and notes tools for token-budget sessions @copyberry
  • #39830 Rename the history notes extension config option @copyberry
  • #39837 Ignore project instructions for untrusted projects @copyberry
  • #39847 Include context window IDs in response metadata @copyberry
  • #39852 Reset registry retries when refreshing Noise bundles @copyberry
  • #39864 Limit pending input preview wrapping work @copyberry
  • #39870 Allow session configuration with codex agents @copyberry
  • #39873 Add keybindings for cycling TUI permission modes @copyberry
  • #39876 Support attaching to existing realtime calls @copyberry
  • #39917 Honor request PATH in exec-server shell snapshots @copyberry
  • #39926 Resolve HTTP MCP bearer tokens in executor environments @copyberry
  • #39930 Track remote MCP header environment variables @copyberry
  • #39935 Enforce issuer binding for MCP OAuth endpoints @copyberry
  • #39937 Bound unified exec output delta frames @copyberry
  • #39940 Allow more time for local code-mode host startup @copyberry
  • #39941 Discover HTTP MCP servers from selected executors @copyberry
  • #39952 Honor required MCP servers from selected executors @copyberry
  • #39953 Support voice-aware configuration and version-skew builds @copyberry
  • #39957 Add in-memory shell snapshots to unified exec @copyberry
  • #39958 Stop advertising shell snapshots from local exec servers @copyberry
  • #39961 Test browser MCP bearer tokens over executor WebSockets @copyberry
  • #39962 Keep Guardian reviews isolated from executor MCP servers @copyberry
  • #39967 Upgrade pnpm to 10.34.5 @copyberry
  • #39969 Consolidate code mode output helper tests @copyberry
  • #39971 Fix elevated Windows sandbox setup activation @copyberry
  • #39975 Preserve root user authorization in subagent Guardian reviews @copyberry
  • #39976 Allow semaphore limit queries in the macOS sandbox @copyberry
  • #39979 Preserve MCP compatibility with older executors @copyberry
  • #39980 Enforce environment network policies for remote execution @copyberry
  • #39981 Bypass risk scoring for models that require automatic review @copyberry
  • #39985 Truncate Guardian instructions after rendering the policy @copyberry
  • #39991 Preserve TUI event ordering during active-thread draining @copyberry
  • #39992 Keep keymap action descriptions stable while navigating @copyberry
  • #39993 Keep credentials out of app-server logs @copyberry
  • #39994 Add Guardian internal session support @copyberry
  • #39995 Expand browser and computer use requirements @copyberry
  • #39997 Add a response target picker to /copy @copyberry
  • #39999 Hide Fast mode status for unsupported models @copyberry
  • #40000 Expose browser and computer-use requirements through app-server @copyberry
  • #40004 Preserve managed deny-read rules across permission updates @copyberry
  • #40005 Route escalated commands through synchronous Guardian review @copyberry
  • #40006 Synchronize Git enrichment tests explicitly @copyberry
  • #40007 Implement Amazon Bedrock setup in the app server @copyberry
  • #40009 Run allowlisted executor plugin stop hooks @copyberry
  • #40011 Synchronize concurrent Git enrichment test explicitly @copyberry
  • #40012 Preserve executor context for MCP stop hooks @copyberry
  • #40013 Reuse Guardian reviews in async risk scoring @copyberry
  • #40015 Harden remote installed plugin cache reconciliation @copyberry
  • #40017 Trace turn context creation and realtime state checks @copyberry
  • #40018 Add browser and computer use configuration @copyberry
  • #40020 Add end-to-end tests for executor Stop hooks @copyberry
  • #40021 Cancel Guardian reviews with their tool calls @copyberry
  • #40024 Honor granular sandbox approvals in unified exec @copyberry
  • #40028 Log Guardian V2 classification results @copyberry
  • #40031 Preserve strict MCP auto-review outcomes @copyberry
  • #40038 Add unfinished root turn suspension @copyberry
  • #40068 Report runtime MCP connection status @copyberry
  • #40150 Use thread source metadata for Guardian classifiers @copyberry
  • #40161 Allow exec callers to classify new threads @copyberry
  • #40166 Move the TUI cursor before showing it @copyberry
  • #40169 Add regression coverage for patch approval paging @copyberry
  • #40174 Preserve content item kinds in message metadata @copyberry
  • #40177 Require content kinds for extension prompt fragments @copyberry
  • #40179 Shut down resumed descendants when archiving thread trees @copyberry
  • #40180 Classify contextual fragments with content kinds @copyberry
  • #40184 Preserve context annotations in merged messages @copyberry
  • #40186 Identify detached memory requests as memory consolidation @copyberry
  • #40196 Annotate user input and contextual fragments with content kinds @copyberry
  • #40200 Remove the Plan mode composer nudge @copyberry
  • #40221 Distinguish Guardian review threads from subagents @copyberry
  • #40257 Support cua_repl as a Node REPL-backed MCP server @copyberry
  • #40264 Preserve content metadata when truncating messages @copyberry
  • #40266 Preserve content annotations when filtering forked agent history @copyberry
  • #40271 Preserve content annotations when rolling back model switches @copyberry
  • #40273 Normalize compacted user message annotations @copyberry
  • #40275 Classify additional generated context fragments @copyberry
  • #40277 Preserve annotations when omitting unsupported media @copyberry
  • #40280 Budget retained images during remote compaction @copyberry
  • #40281 Preserve content kinds during image preparation @copyberry
  • #40292 Add smoke tests for assembled Codex packages @copyberry
  • #40294 Classify internal model context by source @copyberry
  • #40295 Classify permission instructions under the permissions namespace @copyberry
  • #40296 Annotate Responses Lite base instructions @copyberry
  • #40297 Preserve developer instruction annotations in subagent forks @copyberry
  • #40301 Label Business Pro Lite plans as Business Premium @copyberry
  • #40302 Harden bubblewrap synthetic mount registry isolation @copyberry
  • #40308 Add TUI tools for managing Codex tasks @copyberry
  • #40315 Add task mentions to the TUI composer @copyberry
  • #40321 Update the frameless realtime default model @copyberry
  • #40343 Cache executor metadata from initialization @copyberry
  • #40363 Forward local env vars to Agent Plugin MCP servers @copyberry
  • #40368 Use snapshot session sources for MCP projection @copyberry
  • #40376 Advertise shell snapshot v2 support on Unix @copyberry
  • #40381 Preserve sandbox errors during session initialization @copyberry
  • #40382 Expose invocation sources to extension tools @copyberry
  • #40393 Classify Guardian V2 risk with a single token @copyberry
  • #40398 Stabilize the mismatched executor Stop hook test @copyberry
  • #40403 Prewarm more Guardian sampling WebSockets @copyberry
  • #40410 Strengthen Agent Plugin MCP environment overlay tests @copyberry
  • #40413 Honor response budgets when listing skills @copyberry
  • #40420 Represent Guardian policy as a contextual fragment @copyberry
  • #40422 Harden Windows updater command execution @copyberry
  • #40423 Harden Windows file URI conversion @copyberry
  • #40431 Render Guardian review evidence with async scorer truncation @copyberry
  • #40436 Add a managed gate for in-app local automation @copyberry
  • #40437 Report completed sub-agent activity on parent turns @copyberry
  • #40438 Use rust-lld for Bazel Windows MSVC Rust links @copyberry
  • #40441 Preserve Windows root reads with deny-read rules @copyberry
  • #40443 Batch sandboxed capability root discovery @copyberry
  • #40447 Retry failed shell snapshot captures @copyberry
  • #40449 Route peer agent completion activity to the initiating turn @copyberry
  • #40450 Gate content item kinds behind a feature flag @copyberry
  • #40460 Prevent Unix PTY I/O from blocking runtime shutdown @copyberry
  • #40464 Enforce subagent ownership across app-server inputs @copyberry
  • #40465 Record Guardian classifier input truncation metrics @copyberry
  • #40466 Add credential brokering to network proxy feature config @copyberry
  • #40471 Render Markdown links as clickable labels in supported terminals @copyberry
  • #40472 Add structured full approval reviews to extensions @copyberry
  • #40475 Request read control when updating Windows sandbox ACLs @copyberry
  • #40477 Reload Multi-Agent V2 children through their parent @copyberry
  • #40480 Add a computer-use-only Guardian v2 review scope @copyberry
  • #40481 Support managed AWS access keys for Amazon Bedrock @copyberry
  • #40484 Broker credential aliases in child environments @copyberry
  • #40486 Add root turn IDs to turn and tool analytics @copyberry
  • #40487 Extract agent role loading into a dedicated crate @copyberry
  • #40488 Export turn cost as an OTEL metric @copyberry
  • #40489 Honor disabled managed network configuration @copyberry
  • #40490 Harden project config when credential brokering is active @copyberry
  • #40491 Honor response budgets when reading skill resources @copyberry
  • #40492 Generate descriptive TUI thread titles @copyberry
  • #40494 Hide ephemeral system threads from TUI routing @copyberry
  • #40495 Suggest conversation-based thread titles in /rename @copyberry
  • #40496 Track history, notes, and async messages as control tools @copyberry
  • #40497 Harden internal Guardian session isolation @copyberry
  • #40498 Increase the app-server model refresh interval @copyberry
  • #40499 Harden startup rollout migration against concurrent updates @copyberry
  • #40501 Deduplicate plugin skills in unified mentions @copyberry
  • #40502 Collapse home paths in AGENTS.md status summaries @copyberry
  • #40504 Route cyber Trusted Access links by plan type @copyberry
  • #40508 Persist realtime events in the thread timeline @copyberry
  • #40509 Add persisted thread artifact models @copyberry
  • #40511 Add hooks for interrupted turns @copyberry
  • #40521 Add dot-repeat to Vim mode @copyberry
  • #40523 Retry provider auth commands after initial failures @copyberry
  • #40528 Represent terminal input in approval reviews @copyberry
  • #40533 Route extension hints into context-window metadata @copyberry
  • #40539 Inject history notes hints into context windows @copyberry
  • #40544 Include transparent background in image generation analytics @copyberry
  • #40551 Derive sandbox contexts from turn environments @copyberry
  • #40554 Register the transcript v2 feature flag @copyberry
  • #40570 Preserve Unicode paths in Windows batch aliases @copyberry
  • #40585 Track remaining multi-agent v2 tools in analytics @copyberry
  • #40587 Scope stop hooks for memory consolidation @copyberry
  • #40594 Preserve conversation context in Guardian transcripts @copyberry

下载链接