v1.51.0

Summary

• Git URL Workspaces — Connect repositories by Git URL when this option is enabled for your installation.
• Improved Slack — Follow native plan and tool progress, stop the correct running turn, and see clearer session titles.
• Improved Webchat — Reconnect to running conversations after a page reload.

New schedules default to your local timezone.

Subscription change: New pull-request and merge-request subscriptions default to every update; existing subscriptions keep their rules.

Behavior change: Workspace and skill-source cloning now allows any valid Git origin by default. Configure an explicit origin list to restrict hosts.

Features

• adopt the host-neutral git workspace model (#1590) (c35c98f)
• chart: a features block that assembles the console flags and pins the git-url policy (#1620) (0bc2af0)
• chart: pin open-connector by release tag instead of digest (65ec9f2)
• daemon: commit staged answer segments at tool boundaries (#1594) (e705072)
• daemon: default the workspace clone-origin policy to any origin (#1619) (84ccca9)
• daemon: deliver the drain-cycle narration instead of dropping it (#1623) (9b08406)
• daemon: give every chat session the console's fallback title, and push it to Slack (#1611) (95ea273)
• daemon: keep a failed step from failing the whole Slack plan card (#1582) (5f3d06c)
• daemon: let a Slack thinking card carry its run, and drop the message repeating it (#1580) (105a9e7)
• daemon: name a Slack plan card's steps, and give a high step its code block (#1576) (c95b2b8)
• daemon: push native Slack session titles onto channel threads too (#1600) (be8e00b)
• daemon: record an operator-raised interrupt in the transcript (#1583) (8b622c4)
• daemon: shape a command-derived card title to one line of the thread panel (#1595) (e17aeba)
• daemon: stand the wake down for drain-covered settles, retire the notice (#1627) (610ba65)
• daemon: stream Slack tool-call chrome as a native plan card (#1570) (2274a20), closes 1487/#1489 #1495
• let the Codex runtime own its approval reviewer (#1592) (18cfb82)
• slack: drop the status chrome's cancel controls (#1575) (aad423b)
• slack: re-land the agent-session lifecycle and native stop on the typed 8.1 SDK (#1563) (e589358), closes #1462 #1495 #1494 #1471 #1462 #1462 #1495
• slack: target the native Stop at the displayed turn and settle the status slot to a survivor (#1571) (efa43e7), closes #1563
• web: default a new PR/MR subscription to every update (#1574) (05d0a87)
• web: gate the Git URL workspace tile behind a git-url feature flag (#1615) (951a3b1)
• web: let a schedule's times be read in either clock, the viewer's by default (#1630) (ce415b5)

Bug Fixes

• align Codex permission modes with codex-acp 1.7.0 (#1596) (b02e1f0), closes #1592
• console: accept a public repository when replacing a workspace (#1561) (ab19183)
• console: fit the workspace source picker on one row (#1562) (9af0cde)
• console: gate the platform tiles on the agent's placement (#1565) (32539b1)
• console: read an agent's model catalog through its placement (#1564) (2964615)
• control-plane: name a session's channel from the org directory when the daemon never did (#1634) (30108c9)
• control-plane: stop guessing a schedule's timezone from the server (#1631) (b6e61a8)
• daemon: carry a Codex command's real output, and de-bold the thinking bodies (#1586) (b9f06c9)
• daemon: class the shutdown drain wait by whether the work can move (#1639) (a2a4128)
• daemon: decorate a DM's plan card with the agent identity — a bare stream has no fallback (#1597) (0f31820)
• daemon: flatten agent-authored links whose target is a host path (#1626) (e9cb8fd)
• daemon: install a whole Git skill collection in a sandbox (#1559) (f0acf6d)
• daemon: keep background-task delivery out of the live foreground turn (#1588) (65ffc93)
• daemon: let the native Slack Stop cancel a turn that is still cold (#1569) (4f64bc4)
• daemon: let the retention GC reclaim review-snapshot worktrees despite scratch state (#1610) (3e1fc8d)
• daemon: migrate the attribution footer onto the drain narration (#1629) (59fabc8)
• daemon: one tool-output extractor for four platforms, honest fold caps, live de-bold (#1587) (9ad50a8)
• daemon: quiesce git in the secondary-roots fixture, which #1607 gave time to race (#1617) (dd983a1)
• daemon: split a reply where the runtime says one message ended (#1640) (b8be0d8)
• daemon: stop a Slack card taking its label from a tool payload, and keep its output (#1577) (e3926b7)
• daemon: stop the shutdown duty drain retrying a permanently closed CP client (#1579) (4623df6)
• daemon: stop the skill installer's own bundles from pinning session worktrees (#1604) (6ad272c)
• daemon: survive a runtime binary that cannot be spawned (#1558) (f834b56)
• daemon: tell a scheduled turn which clock it fired on (#1635) (7659aa6)
• protocol: name the refused origin and the operator knob in the clone-origin refusal (#1614) (989548d)
• sandbox: drop the DeepSeek web_search a pod key cannot use (#1556) (b1a8795)
• slack: close a response at post time so single-shot replies stop showing "(edited)" (#1578) (e4bdd3d)
• webchat: reattach a reloaded browser to its in-flight turn (#1539) (3878e46), closes #753
• web: give Edit agent the same 3-up placement row as Add agent (#1599) (3ce0f32)
• web: stop a superseded answer inflating the collapsed-work step count (#1593) (f9c8de6)
• web: workspace tile layout, terser modal copy, and the App-binding change signal (#1602) (3c28bdc)
• workspace: default an unstated access tier to what the target carries (#1567) (ff33de1)

Internal

• deps: refresh the dependency tree, undici 8 and the iconify v2 packs (#1572) (9f79c15)

Full Changelog: v1.50.0...v1.51.0