第24章 更新日志 · Codewhale

未发布在 GitHub 上比较未发布 完整说明自上一个标签以来合并到主分支的改动。它们属于源码候选版，不属于任何已发布的包。Contributors@gaord — let undo roll back files for the turn it is undoing (#6483), stopped resume and fork from duplicating threads and sessions (#6406), and exposed user-defined provider routes to native clients (#6404).@Lstarsky0 — moved the docs/work, legal, digest and FAQ pages onto the dictionary spine (#6405, #6417, #6499, #6574), tightened the Chinese-branching ceiling to 18 (#6403), and made Fleet publish without a two-link window (#6431).@aboimpinto — restored a green Linux full-workspace test gate without loosening any test (#6581).@dajiaohuang — codewhale config set checks a known setting's value against its schema type before saving it (#6568).AddedOfficial model routing: /router (also /model router) sets up the Auto router with presets: Jev (TypeSafe's decision model, via OpenRouter or a TypeSafe key), your provider's fast tier, Off, or Custom. Each preset makes one test call before it saves, /status shows the router's choice, cost and latency, and a failing router is shown as failing (#6525).Code mode composes MCP and plugin tools and is on by default: execute_tools programs can call MCP tools, and each nested call passes the same approval gate as a direct call, pausing the program for approval when needed. Every nested call keeps its receipt, including calls that finish before a deadline, and code_mode = false turns it off. codewhale mcp list and codewhale doctor warn when a user MCP server duplicates the built-in Computer Use bundle (#6562, #6509).Fixed显示 12 / 19 条The installation page is generated from docs/INSTALL.md, so the website and the guide can no longer disagree; broken anchors and unsafe links fail the build (#6450).codewhale config set refuses a value of the wrong type for a known setting (a word for an on/off switch, text for a number, a choice outside the list) instead of saving it (#6568, thanks @dajiaohuang).A turn that stops producing output now reports itself: the turn loop records its phase and last progress, and an overdue phase surfaces instead of hanging silently until the stream idle timeout. A delegated agent's final result is never dropped when the host is busy, so a finished child no longer leaves a ghost Running row behind (#6184).Git commands run by tools never stop to ask for a password, passphrase or host-key confirmation inside the terminal, and git_fetch has a timeout (#6184).A provider response that ends cleanly with no text and no tool call is retried before the turn fails, and the failure names how many retries ran (#6310).The context meter, the point where Codewhale makes room, preflight, /context and turn receipts show one pressure number instead of disagreeing (#6407).Continuing a conversation that is already open no longer adds a second thread, and a fork keeps its own session file, so autosave on one side no longer leaves the other unloadable (#6406, thanks @gaord).Upgrading Codewhale no longer turns off the built-in Computer Use. Each build writes the built-in bundle to its own directory, so an upgrade used to present it as never reviewed and disabled. Now the review and enablement carry to the new build when its capabilities are unchanged. Changed capabilities show capabilities-changed and wait for review, and a revoked trust never carries (#6303)."Allow for this conversation" records a grant for that tool and argument class instead of switching the whole thread to Full Access, so the call you just approved is no longer failed by a Permissions change. An approval also survives a Permissions change that only widens what is allowed, grants end when a thread is archived or deleted, and web.run open grants are scoped by host. Full Access covers MCP tools that declare themselves destructive in every host, including…web.run retries a refused page once with a browser user agent, and one site's failure no longer fails the whole call or drops its search results.Hooks treat bash, Bash and exec_shell as one tool in tool_name conditions, so the documented example fires.macOS no longer reports Codewhale's ordinary heap as GPU (IOAccelerator) memory.RemovedFlags, settings and tool parameters that did nothing are gone (#6516). --output-mode is hidden. It is still accepted, prints a warning, and is ignored.The dispatcher no longer exports DEEPSEEK_* copies of its CODEWHALE_* variables. A DEEPSEEK_* variable you set yourself is still read.lane start and workflow run --runtime vm|ci are rejected before a lane is created. Older lane records for those runtimes still load.The control socket's relaunch verb is removed; it always returned an error.The speech tool drops stream. stream=true used to fail; it is now ignored, a complete audio file is written, and the result no longer carries "stream": false. The finance tool drops market, and a call that still passes it has it ignored.[context].enabled, the seam-manager keys and tui.terminal_probe_timeout_ms no longer load; old configs that carry them still start. The [workshop] docs now describe bounded spillover instead of a synthesis sub-agent.About 2,650 lines of workflow code that nothing ran are deleted: the replay executor, the review-repair loop and experimental search. The replay_diverged status they produced goes with them. The isolated Runtime Chat prompt and the legacy YOLO alias list each have one owner now (#6517).ExperienceTyping a first message with no model connected leaves a line in the transcript that says the message was not sent and opens the provider picker.First run picks a chat-capable Ollama model instead of the alphabetically first tag, and says plainly when no model is available yet.codewhale doctor leads and ends with one verdict and the next step, and gives the update command for how you actually installed Codewhale. Command-line usage and errors say codewhale.The approval card leads with a plain summary of the action, such as "Run cargo test", and shows workspace-relative paths. The footer labels its values./status warns when the session's pinned model is no longer in its provider's live model list (#6035).Error messages give one true sentence and one next step. The TUI's English copy says agent, Fleet, Permissions and Work consistently, help lists one summary per row, provider rows without a key say "needs key", /setup says what it sets up, and the pet tank rests when it is offline.ACP clients can see the Permissions setting the server started with, including Full Access and how to turn it on, but cannot select it (#6310).GET /v1/commands tells clients each command's argument shape, so they do not re-derive composer behaviour from the usage string (#6230).Fleet and agentscodewhale fleet run --check runs every validation a real run would and stops there: nothing is created, launched or spent.A queued agent says why it is waiting, for example when launches are throttled after provider rate limits, and when its time budget ends (#6277).Stopping an agent that writes files keeps and names the work it had changed, as a budget stop already did (#5529).workflow(fleet:) runs Fleets saved from the Fleet UI, and finds workspace Fleets under .codewhale/fleets.The runtime API can stop a delegated agent run from the desktop.PluginsCodewhale no longer appends plugin recommendations to your messages to the model. Suggestions appear in one place, follow one switch and one budget, and never advertise built-in plugins, generic words or plugins for another operating system./plugin dismissals lists the plugins suggestions skip, and /plugin dismissals reset [] brings them back.Tools from reviewed plugins that declare themselves read-only no longer ask for approval on every call.The bundled Computer Use plugin is 0.12.0, the published upstream release 8435692 (#6303, #5856). On macOS the agent uses its own pointer and never drives your cursor. app_script refuses shell escapes. Clicks on irreversible actions such as pay, send or delete need confirmation. Consent decisions cannot ride inside run_actions or trajectory replay, and trajectories redact secure fields. Also new: a shared-computer control lease that pauses agent input while a person drives,…The bundled first-party catalog pins marketplace revision ae3dd2255a9a266365c6125a084f511eb26bc04d. It lists Computer Use 0.12.0 and adds Codewhale for Chrome (Chromewhale) 0.3.0 as a developer preview: you load its Chrome extension unpacked, and like every catalog plugin it installs disabled and untrusted until you review it.CIFork pull requests stay under the macOS runner limit and the Actions cache stays under its cap.Release candidates and releases share one parity gate, and a release tag without a release-candidate receipt is refused.Budget ratchets block same-repository pull requests unless the pull request updates the budget with a receipt.A CodeQL advanced-setup workflow is ready for when the repository switches from default setup.