Changelog

• 3b677cf Merge pull request #6137 from SivanCola/fix/auto-compound-bash-approval
• 27962e7 Merge pull request #6136 from SivanCola/fix/ready-meta-reconcile
• bea5daa fix auto approval for compound bash
• 6dd0b06 Reconcile startup readiness metadata
• 96f8504 Merge pull request #6134 from SivanCola/fix/retry-startup-lease-recovery
• 2edf7fd Recover tabs after startup session lease release
• f8bef2a Merge pull request #6131 from SivanCola/fix/heartbeat-external-edit-adoption
• c92b7b5 Merge pull request #6123 from SivanCola/fix/recovery-copy-ux-and-session-data-guard
• da6edfc Honor external edits to heartbeat-tasks.json
• f2b3f40 Deduplicate recovery conflict notices
• 4b00b17 Keep heartbeat-tasks.json agent-editable
• dfbc998 Narrow the bash hint's lexical blind spots
• 8dd8666 Close case-fold and ledger gaps in the session-data guard
• 82f3927 Fix recovery-copy UX and guard agent writes to session data
• 9cbe684 Merge pull request #6128 from SivanCola/fix/stepfun-base-url
• 3a5b4d9 Merge pull request #6118 from SivanCola/ci/release-npm-freshness-check
• 1c17637 Merge pull request #6126 from SivanCola/fix/sidecar-reconcile-and-doctor-out
• ead3fec Migrate legacy StepFun preset URLs
• 2dcc7fd Merge pull request #6125 from SivanCola/refactor/session-owned-rewrite-baseline
• d23d347 ci(release): distinguish missing npm tag from an in-flight npm publish
• 85833b9 Fix StepFun preset base URLs
• 279ec45 Format session rewrite baseline field
• 7f445ea Merge pull request #6124 from SivanCola/refactor/conflict-outcome-enum
• 36c293c Merge pull request #6120 from SivanCola/fix/session-conflict-diagnostics
• 8b6fa8c docs: update npm channel docs for latest -> 1.x
• a7b5a04 Keep diagnostic sidecars out of overlong-name reconciliation and migrate them
• d2d37c4 Move the persisted-rewrite baseline into agent.Session
• 56667ad Return an explicit outcome from recoverSnapshotConflict
• 74fa880 Fix deprecated zip SetModTime and warn that doctor session bundles are unredacted
• 7a75155 Fix session conflict diagnostics and depth-cap baseline
• 92fa78c ci(release): fail a stable CLI release when npm latest lags behind
• 4facd0d Merge pull request #6114 from SivanCola/fix/new-session-resets-goal
• bc1add0 fix(desktop): validate the restored tab goal against the session sidecar
• 9d00a37 fix(control): clear the active goal on session rotation

What's Changed

• fix(control): clear the active goal on session rotation by @SivanCola in #6114
• Fix session conflict diagnostics and depth-cap baseline / 修复会话冲突诊断与深度上限基线 by @SivanCola in #6120
• Return an explicit outcome from snapshot conflict recovery / 会话冲突恢复显式返回结果类型 by @SivanCola in #6124
• Move the persisted-rewrite baseline into agent.Session / 将 rewrite 持久化基线内聚进 Session by @SivanCola in #6125
• Migrate diagnostic sidecars through overlong-name reconciliation / 超长名整理时迁移诊断 sidecar by @SivanCola in #6126
• ci(release): catch missing stable npm tags without failing in-flight publishes by @SivanCola in #6118
• Fix StepFun preset base URLs by @SivanCola in #6128
• Fix recovery-copy UX and guard agent writes to session data / 修复冲突副本体验并防护 agent 直写会话数据 by @SivanCola in #6123
• Honor external edits to heartbeat-tasks.json / 心跳任务文件的外部编辑不再丢失 by @SivanCola in #6131
• Recover startup session lease retries / 恢复启动会话锁重试 by @SivanCola in #6134
• Reconcile startup readiness metadata / 对账启动 ready 元数据 by @SivanCola in #6136
• fix auto approval for compound bash / 修复复合 bash 自动审批 by @SivanCola in #6137

Full Changelog: desktop-v1.17.5...desktop-v1.17.6

Changelog

• 221a764 Merge pull request #6106 from SivanCola/fix/windows-bash-sandbox-default-off
• d2f0030 Apply user config upgrades on CLI startup
• 48812e9 Simplify bash sandbox delta render and guard GOOS test overrides
• 7ae4219 Merge pull request #6105 from SivanCola/fix/mcp-toolset-session-pinning
• 4a44266 Fix Windows bash sandbox upgrade lint
• 2551898 test(plugin): poll for the refreshed cache instead of the first loadable one
• 10eb314 Default Windows bash sandbox to off
• 808abb9 fix(plugin): pin cache-hit MCP placeholder tools for the whole session
• 4f54c51 Merge pull request #6102 from SivanCola/feat/recovery-branch-gc
• 89f52f1 fix(desktop): gate the first recovery-GC sweep on tab restore
• f50babf Merge pull request #6088 from esengine/codex/session-trash-friendly-errors
• 2f1302b feat(desktop): garbage-collect redundant recovery branches to trash
• c0fecd8 fix(desktop): satisfy session error lint
• 0645b0e Merge pull request #6096 from SivanCola/fix/cost-display-scope-cleanups
• 72f0210 fix(desktop): align ContextPanel session cache average with all-sources scope
• 69984b1 Merge pull request #6100 from esengine/codex/pr6095-extra-regression-tests
• 072cf44 Merge pull request #6097 from SivanCola/fix/winsandbox-hidden-console-lock-holder
• 9a38add Merge pull request #6094 from SivanCola/test/rebind-byte-stability
• d6f196a test(agent): cover snapshot repair edge cases
• 59df72b fix(ui): make every cost/cache readout match its labeled scope
• 72a0bf2 fix(sandbox): hide Windows sandbox consoles and fail lock waits fast
• 72382df Merge pull request #6095 from SivanCola/fix/snapshot-interrupted-tool-tail
• 1192fad test(desktop): compare rebind request against a no-rebind baseline
• 1437d5a fix(control): self-heal fork-orphaned in-flight turn markers on open
• 6db192b test: guard prompt-prefix byte stability at boot and desktop rebind level
• 7932bc1 fix(control): move the in-flight turn marker onto the recovery branch
• a1fecd3 fix(agent): keep dirty-resume saves off the append shortcut, raw-check recovery need
• a84f2ae Merge pull request #6093 from SivanCola/fix/env-probe-snapshot-byte-stability
• b96f152 Merge pull request #6092 from esengine/codex/desktop-localized-error-notices
• 09ce7df fix(agent): judge snapshot appends against the raw on-disk transcript
• 3eda534 fix(environment): persist probe snapshots so the prompt prefix stays byte-stable
• d580bb3 Localize provider extra body syntax errors
• 068f35d Localize desktop error notices
• a0337ca fix(desktop): surface actionable errors when session cleanup hits a blocked file

Changelog

• dce3b3a Merge pull request #6076 from SivanCola/chore/internalize-windows-sandbox
• e38623e Merge pull request #6077 from SivanCola/fix/new-session-running-guard
• 28d0ab8 fix(sandbox): clean up Windows helper availability checks
• 203ab34 fix(control): gate summarizeAt through the rotation gate
• bb0dd15 Merge pull request #6085 from esengine/codex/session-trash-missing-path
• 387cc22 fix(sandbox): route the Windows helper in the desktop app and fail closed without it
• 1e408f5 fix(desktop): drop partial trash copy when source vanishes mid-copy
• 252ff75 fix(control): route all session mutations through the rotation gate
• a6f96dc fix(control): close the NewSession/ClearSession rotation TOCTOU window
• c79a15d fix(desktop): make session trash tolerate missing artifacts
• 395aa3d fix(control): refuse NewSession while a turn is running
• 52cc819 Merge pull request #6082 from SivanCola/fix/recovery-chain-depth-cap
• 67bd9f1 Merge pull request #6080 from SivanCola/fix/snapshot-conflict-trigger-telemetry
• bd33d51 Merge pull request #6074 from SivanCola/fix/session-recovery-handoff-serialization
• 790d06c Merge pull request #6079 from SivanCola/ci/cache-impact-desktop-watchlist
• 5ceab67 fix(control): truncate the cancel flush under the snapshot handoff lock
• 909bea3 Merge pull request #6073 from SivanCola/fix/readiness-permission-loop
• 82a9d86 fix(agent): cap recovery chain depth and force-save at the cap
• e4afe93 fix(agent): harden readiness loop-guard pass and blocked-storm detection
• 89b7555 fix(control): serialize session swaps with the snapshot handoff
• 3b723f8 feat(control): log snapshot-conflict triggers with the revision ledger
• 4ce5764 ci(cache-impact): watch desktop session prompt swap and environment probes
• 95f592a Merge pull request #6075 from SivanCola/fix/desktop-session-cost-scope
• 5fe20eb chore: internalize Windows sandbox backend
• 4da3f3e fix(desktop): key tab usage telemetry to its session
• c69b4d9 fix(control): serialize session recovery snapshots
• 4d1998b fix(agent): stop readiness permission loops
• 3d2ed10 Merge pull request #6063 from SivanCola/fix/session-exact-append-stale-baseline
• f4591d7 fix(agent): let a same-content foreign stamp keep rewrite ownership
• 895972d fix(agent): anchor stale-baseline session saves to the persisted baseline
• 190a522 Merge pull request #6062 from esengine/codex/desktop-release-latest
• 7f94919 fix(agent): allow safe session append from stale revision baseline
• 97c7466 fix(release): keep desktop as latest release
• 0f4e3f3 Merge pull request #6056 from SivanCola/fix/desktop-meta-git-branch-async
• b922cb2 Merge pull request #6057 from esengine/codex/hydrate-performance-breadcrumbs
• 53138c7 test(desktop): close probe release channel once to fix test race
• b1c3578 fix(desktop): clear branch refresh flag even if the probe unwinds
• 345212f test: assert stale hydrate metadata is ignored
• d60c52e fix(desktop): refresh metadata git branch asynchronously

Changelog

• d582387 Merge pull request #6036 from SivanCola/fix/global-topic-index-repair
• aabf833 Merge pull request #6041 from SivanCola/fix/rebuild-recovery-path-continuity
• 2d1b53d skip tombstoned topics when reusing indexed blank topics
• 4ed24c6 fix(acp): resolve session ids to the recovery transcript after restart
• cf9afb9 fix(acp): move session transcript and lease with snapshot recovery
• 7378f0f fix(session): continue on recovery path when pre-rebuild snapshot conflicts
• 1aebd4f prune deleted topic titles on scan saves and hide tombstoned topics in tree
• 9f43d13 Merge pull request #6037 from SivanCola/fix/unique-trash-conflict
• 22608aa repair only missing topic indexes and close delete tombstone race
• b9beebd fix(desktop): preserve conflicting trash sessions
• 082e188 Merge pull request #5719 from GTC2080/GTC/fix-5717-tui-cjk-repaint
• e155699 Merge pull request #6039 from SivanCola/fix/npm-dist-tag-stable-promotion
• 1f46e71 Merge pull request #6038 from SivanCola/fix/desktop-updater-ua-github-fallback
• 8d4cfad Merge pull request #6040 from SivanCola/ci/release-public-smoke
• 7af507b fix(desktop): identify updater traffic and add a GitHub manifest fallback
• 6bb5e61 ci(release): smoke the public update paths after publishing
• adadf64 fix(npm): promote stable publishes to the latest dist-tag
• d61dc91 Merge pull request #6034 from SivanCola/feature/session-lease-cli-acp-serve
• d1a3cc9 fix(ci): bound windows lease tests
• 97bc448 fix desktop global topic index repair
• 9c7c87e Merge pull request #6035 from SivanCola/fix/nested-tool-compass-icon
• 1e7a441 fix(desktop): refine nested tool count icon
• 3211ad6 Merge pull request #6032 from SivanCola/fix/windows-sandbox-escape-prompt
• 4f3bfa9 Add Windows sandbox escape approvals
• 1aac234 fix(serve): serialize session-path-changing handlers on one binding mutex
• caaead1 feat(cli/acp/serve): take session leases when binding sessions for writing
• c146456 fix(cli): repaint wide-character input on Windows

What's Changed

• Localize desktop error notices by @SivanCola in #6092
• fix(environment): persist probe snapshots so the prompt prefix stays byte-stable by @SivanCola in #6093
• fix(agent): stop load-time repairs from masquerading as snapshot conflicts by @SivanCola in #6095
• test: guard prompt-prefix byte stability at boot and desktop rebind level by @SivanCola in #6094
• fix(sandbox): hide Windows sandbox consoles and fail lock waits fast by @SivanCola in #6097
• test(agent): cover snapshot repair edge cases by @SivanCola in #6100
• fix(ui): make every cost/cache readout match its labeled scope by @SivanCola in #6096
• fix(desktop): surface actionable errors when session cleanup hits a blocked file by @SivanCola in #6088
• feat(desktop): garbage-collect redundant recovery branches to trash by @SivanCola in #6102
• fix(plugin): pin cache-hit MCP placeholder tools for the whole session by @SivanCola in #6105
• Default Windows bash sandbox to off / Windows Bash 沙箱默认关闭 by @SivanCola in #6106

Full Changelog: desktop-v1.17.4...desktop-v1.17.5

What's Changed

• Add Windows sandbox escape approvals by @SivanCola in #6032
• fix(desktop): refine nested tool count icon / 优化嵌套工具计数图标 by @SivanCola in #6035
• Take session leases in CLI, ACP, and serve / CLI、ACP、serve 写绑定会话时接入会话租约 by @SivanCola in #6034
• ci(release): smoke the public update paths after publishing by @SivanCola in #6040
• fix(desktop): identify updater traffic and add a GitHub manifest fallback by @SivanCola in #6038
• fix(npm): promote stable publishes to the latest dist-tag by @SivanCola in #6039
• fix(cli): repaint wide-character input on Windows by @GTC2080 in #5719
• fix(desktop): preserve conflicting trash sessions by @SivanCola in #6037
• Continue on recovery path when pre-rebuild snapshot conflicts / 重建前快照冲突时沿恢复分支继续写入 by @SivanCola in #6041
• fix desktop Global topic index repair by @SivanCola in #6036
• test: Assert stale hydrate metadata is ignored by @SivanCola in #6057
• Avoid blocking metadata hydration on git branch probes / 避免 git 分支探测阻塞元信息刷新 by @SivanCola in #6056
• fix(release): keep desktop as repository latest by @SivanCola in #6062
• Fix session append recovery conflicts / 修复会话追加误入冲突副本 by @SivanCola in #6063
• fix(desktop): key tab usage telemetry to its session so 会话费用 stops accumulating across sessions by @SivanCola in #6075
• Stop readiness permission loops / 阻止 readiness 权限循环 by @SivanCola in #6073
• ci(cache-impact): watch desktop session prompt swap and environment probes by @SivanCola in #6079
• Serialize session recovery snapshots / 串行化会话恢复快照 by @SivanCola in #6074
• feat(control): log snapshot-conflict triggers with the revision ledger by @SivanCola in #6080
• fix(agent): cap recovery chain depth and force-save at the cap by @SivanCola in #6082
• fix(desktop): make session trash tolerate missing artifacts by @SivanCola in #6085
• fix(control): refuse NewSession while a turn is running by @SivanCola in #6077
• Internalize Windows sandbox backend / 内置 Windows 沙箱后端 by @SivanCola in #6076

Full Changelog: desktop-v1.17.1...desktop-v1.17.4

What's Changed

• Add Windows sandbox escape approvals by @SivanCola in #6032
• fix(desktop): refine nested tool count icon / 优化嵌套工具计数图标 by @SivanCola in #6035
• Take session leases in CLI, ACP, and serve / CLI、ACP、serve 写绑定会话时接入会话租约 by @SivanCola in #6034
• ci(release): smoke the public update paths after publishing by @SivanCola in #6040
• fix(desktop): identify updater traffic and add a GitHub manifest fallback by @SivanCola in #6038
• fix(npm): promote stable publishes to the latest dist-tag by @SivanCola in #6039
• fix(cli): repaint wide-character input on Windows by @GTC2080 in #5719
• fix(desktop): preserve conflicting trash sessions by @SivanCola in #6037
• Continue on recovery path when pre-rebuild snapshot conflicts / 重建前快照冲突时沿恢复分支继续写入 by @SivanCola in #6041
• fix desktop Global topic index repair by @SivanCola in #6036

Full Changelog: desktop-v1.17.1...desktop-v1.17.3

Changelog

• 075b961 Merge pull request #6030 from SivanCola/fix/lease-experience-cleanup
• 8ea1c49 Merge pull request #6023 from SivanCola/fix/desktop-lease-key-canonicalization
• cce4bfa fix(desktop): release replaced-tab resources when session clear loses the swap
• 8ab68bf Merge pull request #6025 from SivanCola/fix/session-meta-cas-hardening
• 6fae377 Merge pull request #6029 from SivanCola/fix/replacefile-no-torn-fallback
• 5ac17b5 fix(desktop): supersede in-flight startup build on provider removal and session clear
• 4065a62 Merge pull request #5937 from SivanCola/feature/windows-native-sandbox
• c33c372 fix(desktop): self-heal lease metadata damage, sanitize surfaced errors, retire lock sidecars
• 1054c18 Bump windows-sandbox for run-local residue markers
• bfe416b fix(desktop): supersede in-flight startup build on settings rebuild
• 728d4af fix(session): heal stale meta ledger on same-content saves
• df18187 Merge pull request #6004 from HaoyueQin/feat/isolated-runtime-config-override
• 7ea789d docs: sync isolated home Chinese path guide
• 34a337a fix(fileutil): never fall back to a torn in-place copy on transient rename failures
• 1cc80b8 Merge remote-tracking branch 'origin/main-v2' into pr6004-isolated-runtime-config-override
• 4c6dc74 fix: keep implicit legacy migration out of isolated homes
• 7e2d115 Merge pull request #6024 from SivanCola/feature/task-contract-credentials-path
• a8e9421 Bump windows-sandbox to survive marker PID reuse
• 88598c8 docs: clarify state root paths
• e6d5745 fix(session): harden the CAS meta ledger against torn reads and lost updates
• 98a1fb2 feat: add task contracts and stabilize credential path
• aa503bc fix(desktop): unify session runtime keys with lease canonicalization
• 98166cb Merge pull request #6001 from HUQIANTAO/fix/disable-summ-from-on-last-turn
• bd045b0 Bump windows-sandbox to harden the residue sweep
• 0bf3c44 Fix last summary turn detection
• faaa43d test(boot): update legacy session migration test for REASONIX_HOME isolation
• a238ace feat: support REASONIX_HOME for fully isolated runtime environments
• ab25819 fix(desktop): disable "Summarize after this" on the last message
• 5c18d06 Merge pull request #5997 from esengine/fix/desktop-release-not-latest
• 36c9a44 fix(ci): keep the repository-wide latest badge on the CLI release
• b9612ef Merge pull request #5995 from esengine/fix/release-smoke-via-r2-api
• 9d1925e fix(ci): smoke release pointers via authenticated R2 S3 API
• 39bfc0b Bump windows-sandbox to never mutate system executable dirs
• 2ecc3bb Bump windows-sandbox for per-root lock thread pinning
• ece9c41 Bump windows-sandbox with ACL lifecycle hardening
• 1071bc4 Fix Windows sandbox wait env var
• 52f1b75 Test Windows sandbox helper integration
• f541bd3 Bump Windows sandbox test coverage dependency
• a7582e3 Add native Windows sandbox helper

Changelog

• f4ef59f Merge pull request #5976 from SivanCola/fix/session-recovery-event-log-cleanup
• 7bb7290 Hold session locks across trash/delete and fix lint
• 07794a0 Merge pull request #5971 from SivanCola/fix/effort-switch-notices
• bc18992 Merge pull request #5968 from SivanCola/fix/session-lease-race
• b942018 Merge remote-tracking branch 'origin/main-v2' into fix/session-recovery-event-log-cleanup
• 080e0d1 Merge pull request #5983 from SivanCola/fix/bash-sandbox-unavailable-guidance
• f9b2c3a bump build generation before snapshotting ctrl in session rebind
• 2c9f2c7 Merge pull request #5977 from SivanCola/fix/session-recovery-cascade
• 89c3958 fix: explain unavailable bash sandbox recovery
• f022171 Harden session event log persistence and recovery cleanup
• 5311e0c fix: open lock handle with DELETE access and commit overlong renames atomically
• 6159661 fix superseded build cleanup releasing the replacement build's resources
• 963b43c fix: delete held lock files via handle disposition on Windows
• e549459 fix: close rewrite-persistence races and migrate overlong session names
• 56ce1d0 fix desktop runtime data races and serialize rebind swaps
• 0f7f43e fix: prevent cascading session recovery
• 564afe1 Fix session recovery persistence cleanup
• 666a947 fix(desktop): surface effort switch blockers
• 06bbd21 fix desktop session lease race
• 118e7f9 fix(registry): reject whole-repo source when publishing a skill (#5962)
• e509626 Merge pull request #5952 from SivanCola/fix/defer-settings-rebuild-on-lease
• f5fb4c5 fix(crash-report): stabilize community review table and add one-click copy (#5959)
• ebdfe03 Merge origin/main-v2 into fix/defer-settings-rebuild-on-lease
• e4272b8 Auto-retry deferred settings rebuild and serialize controller swaps
• 4cf882e Fix deferred settings rebuild after persistence