v0.2.45
There is a known issue affecting Linux users using this version due to the '- Agent subprocess credential scrubbing' changelog entry. Avoid upgrading to this version specifically if you are running 'cyrus' on Linux. The issue is caused by a Claude Code regression that we are tracking, and in the process of fixing.
Added
- Customizable repos directory — Set
CYRUS_REPOS_DIRto control where Cyrus clones repositories (CYPACK-1081) - Network egress sandboxing — Agent sessions can now route all network traffic through a local egress proxy (CYPACK-1066)
"trusted"network policy preset — Pre-populate the sandbox allow list with ~200 domains (CYPACK-1066)
Changed
- Refreshed Claude Code tool allowance lists — Updated to match latest SDK tool set (CYPACK-1067)
- Agent subprocess credential scrubbing — SDK strips auth credentials from Bash subprocesses (CYPACK-1066)
- Webhook IP provenance validation — Validates webhooks against provider IP ranges (CYPACK-1056)
Fixed
- Changelog updates no longer create duplicate entries (CYPACK-1063)
- Agent sessions no longer fail with "executable not found" in pnpm monorepos (CYPACK-1066)