### 亮点
- **技能**:显式选择技能时,现在会将 SKILL.md 内容注入到对话轮次中;技能在每个会话中仅加载一次,并在文件无法读取时发出警告 (#7763)。
- **配置 API**:config/read 现已完全类型化;配置写入保留注释和顺序;模型变为可选以匹配实际配置 (#7658, #7789, #7769)。
- **TUI/UX**:日志文件移除 ANSI 控制码;为选项选择和记录查看器添加 vim 风格导航;记录连续性修复;斜杠命令弹窗不再因无效输入而触发;实验性 tui2 前端置于功能标志后 (#7836, #7784, #7550, #7363, #7704, #7793)。
- **执行与沙盒**:Shell 快照、重构的统一执行事件、提升的沙盒权限(sendmsg/recvmsg)、更清晰的速率限制警告、改进的请求 ID 日志记录,以及更安全的权限提升 (#7641, #7775, #7788, #7779, #7795, #7830, #7750)。
- **平台/认证/构建**:MCP 会话内登录、远程分支评审支持、Windows 签名切换、ConPty 集成、Nix 哈希修复,以及更安全的发布护栏 (#7751, #7813, #7757/#7804/#7806, #7656, #7762, #7834)。
- **杂项修复**:不支持的镜像优雅报错、绝对配置路径、并行测试稳定性、移除重复的特性规范、实验性模型的提示词/工具,以及更多 (#7478, #7796, #7589, #7818, #7826, #7823, #7765)。
### 已合并的 PR
- #7836 在 TUI 日志文件中禁用 ANSI 控制码
- #7834 当另一个发布正在进行时尝试推送发布现在会报错
- #7830 移除 conversation_id 并恢复请求 ID 日志记录
- #7826 修复:不稳定的测试 3
- #7823 修复:移除重复的并行 FeatureSpec
- #7818 修复:不稳定的测试 2
- #7817 修复:升级 @modelcontextprotocol/sdk 到 ^1.24.0
- #7813 特性:当本地跟踪时,使用远程分支进行评审
- #7807 日常维护:禁用受信任签名的 pkg 缓存命中
- #7806 还原 "还原 "特性:使用 Azure 受信任签名为 Windows 代码签名""
- #7804 还原 "特性:使用 Azure 受信任签名为 Windows 代码签名"
- #7799 移除实验性 "命令风险评估" 功能
- #7797 解析 rg | head 搜索
- #7796 修复:引入 AbsolutePathBuf 并解析 config.toml 中的相对路径
- #7795 将速率限制警告表示为剩余百分比
- #7793 特性(tui2):添加功能标志控制的 tui2 前端
- #7789 [应用服务器] 在配置写入时保留注释和顺序
- #7788 提升的沙盒 1
- #7787 修复 execpolicy.md 中的更多拼写错误
- #7784 为 CLI 选项选择添加 vim 风格导航
- #7779 在 Linux 沙盒中允许 sendmsg/recvmsg 系统调用
- #7775 日常维护:重构统一执行事件
- #7769 使配置中的模型变为可选
- #7765 为实验性模型使用 codex-max 提示词/工具
- #7763 当显式提及时注入 SKILL.md
- #7762 修复 rmcp 和 filedescriptor 的 Nix cargo 输出哈希
- #7757 还原 "还原 "特性:使用 Azure 受信任签名为 Windows 代码签名""
- #7756 集成 ConPtySystem
- #7751 特性:支持 MCP 会话内登录
- #7750 重构 with_escalated_permissions 以使用 SandboxPermissions
- #7704 修复:防止斜杠命令弹窗因无效输入而激活
- #7658 [应用服务器-协议] 为配置添加类型
- #7641 特性:shell 快照
- #7589 日常维护:启用并行 tc
- #7550 为记录查看器添加 vim 导航键
- #7478 修复:对于不支持的镜像优雅报错退出
- #7363 修复记录查看器的页面连续性
- #7779 在 Linux 沙盒中允许 sendmsg/recvmsg 系统调用(已列出;确保单一条目)
- #7788 提升的沙盒 1(已列出)
- #7784 为 CLI 选项选择添加 vim 风格导航(已列出)
- #7807/7806/7804 Windows 签名切换(已在上面分组)
### Highlights
- Skills: Explicit skill selections now inject SKILL.md content into the turn; skills load once per session and warn if a file
can’t be read (#7763).
- Config API: config/read is fully typed; config writes preserve comments/order; model is optional to match real configs (#7658,
#7789, #7769).
- TUI/UX: Log files drop ANSI codes; vim navigation for option selection and transcript pager; transcript continuity fix; slash-
command popup no longer triggers on invalid input; experimental tui2 frontend behind a flag (#7836, #7784, #7550, #7363,
#7704, #7793).
- Exec & sandbox: Shell snapshotting, reworked unified-exec events, elevated sandbox allowances (sendmsg/recvmsg), clearer rate-
limit warnings, better request-id logging, and safer escalations (#7641, #7775, #7788, #7779, #7795, #7830, #7750).
- Platform/auth/build: MCP in-session login, remote-branch review support, Windows signing toggles, ConPty vendoring, Nix hash
fixes, and safer release guardrails (#7751, #7813, #7757/#7804/#7806, #7656, #7762, #7834).
- Misc fixes: Unsupported images error cleanly, absolute config paths, parallel test stability, duplicated feature spec removal,
experimental-model prompt/tools, and more (#7478, #7796, #7589, #7818, #7826, #7823, #7765).
### PRs Merged
- #7836 Disable ansi codes in TUI log file
- #7834 Error when trying to push a release while another release is in progress
- #7830 Remove conversation_id and bring back request ID logging
- #7826 fix: flaky tests 3
- #7823 fix: remove duplicated parallel FeatureSpec
- #7818 fix: flaky test 2
- #7817 fix: Upgrade @modelcontextprotocol/sdk to ^1.24.0
- #7813 feat: use remote branch for review is local trails
- #7807 chore: disable trusted signing pkg cache hit
- #7806 Revert "Revert "feat: windows codesign with Azure trusted signing""
- #7804 Revert "feat: windows codesign with Azure trusted signing"
- #7799 Removed experimental "command risk assessment" feature
- #7797 parse rg | head a search
- #7796 fix: introduce AbsolutePathBuf and resolve relative paths in config.toml
- #7795 Express rate limit warning as % remaining
- #7793 feat(tui2): add feature-flagged tui2 frontend
- #7789 [app-server] Preserve comments & order in config writes
- #7788 Elevated Sandbox 1
- #7787 fix more typos in execpolicy.md
- #7784 Add vim-style navigation for CLI option selection
- #7779 allow sendmsg/recvmsg syscalls in Linux sandbox
- #7775 chore: rework unified exec events
- #7769 make model optional in config
- #7765 Use codex-max prompt/tools for experimental models
- #7763 Inject SKILL.md when it’s explicitly mentioned
- #7762 Fix Nix cargo output hashes for rmcp and filedescriptor
- #7757 Revert "Revert "feat: windows codesign with Azure trusted signing""
- #7756 Vendor ConPtySystem
- #7751 feat: support mcp in-session login
- #7750 refactor with_escalated_permissions to use SandboxPermissions
- #7704 fix: Prevent slash command popup from activating on invalid inputs
- #7658 [app-server-protocol] Add types for config
- #7641 feat: shell snapshotting
- #7589 chore: enable parallel tc
- #7550 Add vim navigation keys to transcript pager
- #7478 Fix: gracefully error out for unsupported images
- #7363 Fix transcript pager page continuity
- #7779 allow sendmsg/recvmsg syscalls in Linux sandbox (already listed; ensure single entry)
- #7788 Elevated Sandbox 1 (already listed)
- #7784 Add vim-style navigation for CLI option selection (already listed)
- #7807/7806/7804 Windows signing toggles (grouped above)