Original release notes
Highlights
- Added support for uploading workspace files to the Web Shell composer via drag-and-drop or the @ file panel with progress tracking. (#8874)
- Implemented a diff growth brake in autofix reviews to limit source and test line increases per window using configurable budgets. (#8981)
- Confirmed Critical findings now require an executed witness with observed output, automatically demoting unverified claims to low confidence. (#9065)
- The daemon now adaptively grows live-journal caps up to 256 MiB per session to prevent data loss during long turns. (#8905)
- Fixed visual jitter in the desktop app's sidebar and ensured external URLs open reliably through the system browser. (#9073, #9069, #9111)
- Compact mode now displays model reasoning as a foldable summary, and background shell activity is tracked to prevent premature cleanup. (#9148, #9042)
Breaking Changes
No known breaking changes.
Complete Change List
Features
- Added support for uploading workspace files directly to the Web Shell composer via drag-and-drop or the @ file panel with progress tracking. (#8874) by @ytahdn
- Implemented a diff growth brake in autofix reviews to limit source and test line increases per window using configurable budgets. (#8981) by @wenshao
- The daemon now adaptively grows live-journal caps up to 256 MiB per session before truncating replay entries, using a shared memory pool to prevent data loss during long turns. (#8905) by @wenshao
- Confirmed Critical findings now require an executed witness with observed output, automatically demoting unverified claims to low confidence and hiding them from PR posts. (#9065) by @wenshao
- Review ledger markers now include the anchor commit SHA to ensure accurate incremental diff scoping across environments and prevent certification of unreviewed ranges. (#9067) by @wenshao
- Added user settings to control review attribution footers, default effort levels, and default comments, preventing repository files from overriding these policies. (#8994) by @wenshao
- Requests routed through Alibaba Cloud API Gateway domains now correctly include metadata fields for session tracing and log correlation. (#9103) by @yiliang114
- Added optional OpenTelemetry trace and span IDs to daemon logs to improve correlation and debugging capabilities for sampled requests. (#9084) by @doudouOUC
- Enabled per-agent JSONL transcripts for all workflow agent dispatches to record prompts, tool calls, and results consistently. (#8971) by @qqqys
- The /review command now identifies and reports entire classes of unbounded defects prospectively instead of listing individual instances one by one. (#9095) by @wenshao
- Main agent invocations now generate OpenTelemetry-compliant traces with stable identities and correct status semantics for success, cancellation, and errors. (#9107) by @doudouOUC
- Background shells are now tracked in activeWork, enabling explicit negotiation of shell categories and preventing premature automatic cleanup during shell activity. (#9042) by @doudouOUC
- Web Shell Channel management now supports full policy configuration, workspace binding, and a redesigned interface consistent with other management surfaces. (#8848) by @qqqys
- Added automatic escalation to maintainers when autofix diffs exceed growth budgets across multiple rounds instead of patching indefinitely. (#9104) by @wenshao
- Updated the review loop to validate feedback based on content accuracy rather than relying solely on the author's identity. (#8996) by @wenshao
- Added a guard to block cross-worktree Git mutations from model-issued commands that target directories outside the current session. (#8687) by @wenshao
- Compact mode (Ctrl+O) now displays model reasoning as a foldable "Thinking..." summary instead of hiding it entirely. (#9148) by @ytahdn
Bug Fixes
Fixed an issue in the standalone Web Shell where the first prompt could fail to submit due to session target synchronization errors. (#9038) by @ytahdn Updated the release workflow to allow automated bots to fully approve release pull requests without requiring manual human intervention. (#9056) by @yiliang114 Ensured OpenTelemetry session ownership is correctly preserved across model requests and asynchronous streams in daemon modes. (#9077) by @doudouOUC Fixed visual jitter in the desktop app's sidebar project list by reserving space for the scrollbar gutter. (#9073) by @yiliang114 Fixed a security gap where inline-level quotations could bypass layer gates, ensuring that only properly walked block-level quotes can trigger approval caps. (#9020) by @wenshao Autofix verification gates are now hermetic to runner git configurations, preventing host-level settings from poisoning subsequent test runs. (#8961) by @wenshao Fixed an issue where restricted secondary workspace rows in the web-shell displayed duplicate archive buttons, ensuring only one accessible action remains visible. (#9066) by @yiliang114 Enabled opening external URLs from Markdown links and artifacts in the desktop app by routing them through the system browser with improved error handling. (#9069) by @yiliang114 Prevented the Windows runtime terminal window from appearing during startup and aligned the reduced-motion bootstrap view for consistent visual centering. (#9064) by @yiliang114 Extended the one-time migration bridge from Electron to Tauri to support Windows and Linux, ensuring seamless updates while preserving user data. (#9079) by @yiliang114 Reduced CI test flakes caused by disk space and system load by optimizing fixture cleanup and using disk-backed temporary directories on Linux. (#8982) by @yiliang114 Improved error messages for review comments when pull request binding is missing and added tests to enforce operator-scope invariants. (#9102) by @wenshao The Windows standalone installer now uses built-in .NET hashing instead of PowerShell commands to prevent failures when verifying checksums. (#9112) by @MichaelYochpaz Automatic fixes now wait for in-flight code reviews to complete before updating branches, ensuring human feedback is incorporated without losing context. (#8899) by @yiliang114 The daemon now offers a compact conversation summary for web clients that excludes detailed subagent events to improve load times and reduce data usage. (#9057) by <a class
