보안 강화 & 안정성
이 릴리즈는 HTTP 훅 실행을 강화하고 프로세스 재시작 및 병렬 세션 전반에서 미묘한 문제를 야기하는 여러 결정성 버그를 수정합니다.
훅 보안
HTTP 훅은 이제 실행 전에 URL 스키마를 검증합니다 — http:와 https:만 허용됩니다. 이전에는 file://, data: 및 기타 위험한 스키마를 훅 URL을 통해 로컬 파일을 읽는 데 사용할 수 있었습니다. 비활성화 메커니즘(disabled_hooks)은 이제 커맨드 훅뿐 아니라 HTTP 훅에도 작동합니다.
결정성 ID
훅 시스템에서 생성하는 메시지 및 파트 ID는 이제 프로세스 고유 프리픽스(msg_<hex>_<counter>)를 포함하여 여러 OpenCode 프로세스가 동일한 세션 저장소에 대해 실행될 때 저장소 충돌을 제거합니다.
Hashline 편집: 이제 선택 사항
해시 앵커 편집 도구(hashline_edit)는 이제 기본적으로 비활성화되어 있습니다. 워크플로우에서 LINE#ID 참조에 의존했다면, 구성에 "hashline_edit": true를 추가하세요.
성능
읽기-이미지-크기조정 훅에 대한 이미지 치수 파싱은 이제 전체 페이로드 대신 base64 데이터의 처음 32KB만 디코딩합니다 — 큰 이미지에 대한 상당한 메모리 절감.
커뮤니티
기여자의 새로운 기능: 서브에이전트에 대한 에이전트-사용-알림 수정, glob/grep 상대 경로 해결, 중복 에이전트 항목 수정, 러시아어 README 등.
- 3db46a5 feat(hashline): change hashline_edit default from true to false
- 0dd9ac4 perf(read-image-resizer): decode only first 32KB of base64 for dimension parsing
- 1a9e7eb fix(hook-message-injector): add process-unique prefix to message/part IDs to prevent storage collisions
- 682a3c8 fix(hooks): prevent SSRF via URL scheme validation and extend disable mechanism to HTTP hooks
- a666612 @mathew-cf has signed the CLA in #2233
- a6955d7 @Chocothin has signed the CLA in #2230
- 1a25b25 @DEAN-Cherry has signed the CLA in #2227
- 9a505a3 @laciferin2024 has signed the CLA in #2222
- acc2132 Merge pull request #2212 from code-yeongyu/fix/h5-collector-ordering
- e750365 Merge pull request #2211 from code-yeongyu/fix/c2-hook-message-ids
- 73fea69 Merge pull request #2210 from code-yeongyu/fix/c1-synthetic-part-id
- d39b3aa Merge pull request #2151 from ualtinok/fix/agent-usage-reminder-subagent-exclusion
- 7c9f507 fix(context-injector): use monotonic registration order instead of timestamp for deterministic sorting
- 4d8360c fix(context-injector): use deterministic synthetic part ID for cache stability
- 6e9f273 fix(hook-message-injector): use monotonic counter for deterministic message/part IDs
- 2478b28 Merge pull request #2204 from ualtinok/fix/glob-directory-prefix
- 418cf85 fix(glob): use cwd-relative search for ripgrep to fix directory prefix patterns
- cc6ab1a feat(hooks): add read-image-resizer hook
- 74f7992 feat(agents): add Gemini tool guide and few-shot examples to system prompt
- 13d689c feat(agents): add Plan Agent dependency and strengthen Deep Parallel Delegation for non-Claude models
- 29d6062 Merge pull request #2202 from ualtinok/fix/glob-grep-relative-path
- d65ee31 Merge pull request #2208 from code-yeongyu/feat/http-hook-support
- 4dae458 style(hooks): add blank line between interpolateEnvVars and resolveHeaders
- 4740515 fix(agents): replace active polling with notification-based waiting for background tasks
- 3eb53ad fix(hooks): resolve cubic review issues
- 43dfdb2 feat(hooks): add HTTP hook handler support
- 7cec6f7 fix(tools): resolve relative paths in glob/grep against project directory
- 866bd50 @renanale has signed the CLA in #2201
- 518e3c5 Merge pull request #2161 from acamq/fix/duplicate-agent-entries
- 8512624 Merge pull request #2153 from devxoul/fix/docs-master-to-dev-branch
- bc2eaaf Merge pull request #2160 from dwnmf/add-russian-readme
- 0f73504 @mertyldrm has signed the CLA in #2184
- db32ac5 @YLRong has signed the CLA in #2176
- 2eb7994 fix(atlas): use start-work session agent for continuation gating
- 15ad944 @1noilimrev has signed the CLA in #2166
- 07542d3 Fix markdown blockquote structure in Russian README
- d6dd548 fix(agents): remove duplicate remapped agent keys
- f3cbc24 @dwnmf has signed the CLA in #2160
- b76abeb Add Russian README
- 21c249e fix(ci): pre-download baseline compile targets to avoid Bun extraction failures
- 0749a8f fix(ci): make platform publish resilient to individual build failures
- 35edcec fix(agent-usage-reminder): skip reminders for non-orchestrator subagents
- 0cc9eda replace master branch references with dev across docs, schema URLs, and tests
커뮤니티 기여자 6명에게 감사합니다:
- @devxoul:
- 문서, 스키마 URL 및 테스트 전체에서 master 브랜치 참조를 dev로 변경
- @ualtinok:
- fix(agent-usage-reminder): skip reminders for non-orchestrator subagents
- fix(tools): resolve relative paths in glob/grep against project directory
- fix(glob): use cwd-relative search for ripgrep to fix directory prefix patterns
- @dwnmf:
- 러시아어 README 추가
- 러시아어 README에서 마크다운 인용문 구조 수정
- @acamq:
- fix(agents): remove duplicate remapped agent keys
- @kdcokenny:
- Merge pull request #2160 from dwnmf/add-russian-readme
- Merge pull request #2153 from devxoul/fix/docs-master-to-dev-branch
- @KNN-07:
- Merge pull request #2161 from acamq/fix/duplicate-agent-entries