發布日期：2026-07-13
現在「永遠允許執行」的指令名單變得更嚴謹也更聰明了。以前只要指令名字有部分對得上，系統可能就會放行，現在預設改成必須「完全一模一樣」才算數，除非你自己加上 regex: 前綴來指定使用正規表示式（regular expression，一種用符號表示文字特徵的寫法）。同時，它也沒那麼死板了：如果你只是把原本已經允許的指令結果輸出存進檔案（像 指令 > 檔案 這樣），系統不會因為你多加了輸出轉向的寫法就把你擋下來。就像大樓警衛，以前只要名牌上有一樣的字就放人，現在預設只認全名，但如果你只是手上多拿了個要存進倉庫的箱子，他也不會故意刁難你。
切換畫面、快速復原不再卡死。現在當你在不同畫面間切換（例如打開子代理詳情或登出）時，鍵盤不會再突然完全沒反應卡死，輔助說明的面板也會正確關閉。如果你在輸入框裡打字太快並頻繁按復原（undo）或重做（redo），歷史紀錄也不會再亂掉。打上帶有斜線的特殊捷徑指令時，送出的瞬間那個斜線也不會因為畫面更新而短暫消失，你打什麼它就顯示什麼。此外，退出程式時也不會再囉嗦地印出兩行重複的提示，清爽多了；而叫代理去瀏覽網頁時，它也不會因為忘記帶上瀏覽器專用的內部提示詞而失敗。就像開車，以前切換排檔時方向盤偶爾會卡死，音響也會短暫消音，現在整台車的操控變得順暢無比。
The "Always Approve" command list is now both stricter and smarter. Previously, partial name matches might slip through, but now the default requires an exact, full-string match unless you explicitly prepend rules with regex: to use regular expressions (a pattern-matching syntax). At the same time, it's less rigid about minor additions: if you just pipe the output of an already-approved command into a file (like command > file), the system will no longer block you simply because you added redirection syntax. Like a building security guard who used to let people in if their badge had any matching words, but now strictly checks the full name — yet won't maliciously stop you just because you're holding a box destined for the warehouse.
A bunch of annoying hiccups that made navigating the terminal feel clunky have been fixed. Now, when transitioning between different views (like opening subagent details or logging out), the keyboard won't suddenly lock up and stop responding, and help overlay panels will close properly. If you type rapidly in the input box and frequently mash undo or redo, your edit history stack won't get hopelessly desynchronized anymore. When you type special slash commands, the slash prefix will no longer flicker and momentarily disappear from the screen right as you hit send; it exactly displays what you typed. Moreover, exiting the program no longer spams redundant reminder lines, making the output much cleaner, and asking agents to browse the web won't randomly fail because it forgot to load the browser-specific internal prompts. Like driving a car: shifting gears used to occasionally lock the steering wheel and briefly mute the radio, but now the entire driving experience handles flawlessly.
Improved command permission security by making "Always Approve" rule matching strict (non-regex) by default, while allowing users to explicitly opt-in to regex matching by prepending rules with `regex:`.
Improved command permission usability by relaxing redirection checks, allowing safe commands with output redirection (e.g., `tool > file`) to match without requiring strict full-command approval.Resolved bugs during UI transitions (such as opening subagent details or logging out) by introducing a unified synchronization mechanism that prevents key lockups and ensures overlay panels like the /help view are properly reset.
Fixed a bug in the CLI prompt editor where undo and redo history stacks could become desynchronized during rapid mutations by decoupling the history state into a unified, pointer-backed structure.
Fixed a bug where the CLI would temporarily render skill commands without their slash prefix during optimistic updates by deferring prefix stripping to the serialization boundary, ensuring the UI always displays exactly what the user typed.
Fixed a redundant CLI exit message by removing the "Resume in the same project" hint line, leaving only the standard resume command to simplify exit output.
Fixed a bug where browser-related prompt sections were missing from the agent's prompt registry, ensuring browser-based tasks execute reliably.