发布

  • fix: v3.9.9 — worktree safety, sandbox-exec detection, compression guard
    Release / Release gates (SDK + package versions) (push) Has been cancelled
    Release / Build aarch64-apple-darwin (push) Has been cancelled
    Release / Build x86_64-apple-darwin (push) Has been cancelled
    Release / Build aarch64-unknown-linux-musl (push) Has been cancelled
    Release / Build aarch64-unknown-linux-gnu (push) Has been cancelled
    Release / Build x86_64-unknown-linux-musl (push) Has been cancelled
    Release / Build x86_64-pc-windows-gnu (push) Has been cancelled
    Release / Build x86_64-unknown-linux-gnu (push) Has been cancelled
    Release / Build x86_64-pc-windows-msvc (push) Has been cancelled
    Release / Build x86_64-unknown-linux-gnu-cuda (push) Has been cancelled
    Release / Create Release (push) Has been cancelled
    Release / Attach JetBrains Plugin (push) Has been cancelled
    Release / Publish to crates.io (push) Has been cancelled
    Release / Publish to npm (push) Has been cancelled
    Release / Update Homebrew (push) Has been cancelled
    Release / Announce on Twitter (push) Has been cancelled

    frostbyte_neo 发布于 2026-07-14 12:00:27 +00:00

    Critical fixes:

    • #803: ctx_patch replace_symbol worktree mismatch detection via canonicalize()
    • #745: strip_outer_shell_invocation for sandbox-exec wrapped agent commands

    High priority:

    • #805: PreToolUse deny guard for [lean-ctx:] compression markers in Write/Edit
      payloads; fixed false-positive for Markdown links

    Medium:

    • #802: Hermes rules use marked_block::upsert instead of substring check
    • #800: Parent-env probe for CODEX_THREAD_ID forwarding when no capture exists
    • #804: tool_health hint typo (tools_disabled → disabled_tools)

    Co-authored-by: Cursor cursoragent@cursor.com

    下载附件