v0.2.71

[0.2.71] - 2026-09-04

Added

• Every agent session now explains how to attach local images and videos to GitHub issues, pull requests, and comments with GitHub CLI v2.99.0 or newer, independently of optional browser tooling. (CYPACK-1490, #1453)

Fixed

• Cloudflare tunnel startup now waits up to 120 seconds (previously 30) before giving up, so Cyrus starts reliably on hosts with slow DNS or slow first-time tunnel establishment. (#1458)
• Stopping Cyrus no longer stalls when a sandbox egress-proxy tunnel is still open or hung: open proxy connections are force-closed on shutdown, and tunnel sockets are torn down when either side closes instead of only on error. (#1458)
• Orchestrator sessions are resumed again as soon as a delegated sub-issue's session completes. Since v0.2.69 the parent-to-child link was never created for sub-issues started through Linear delegation, so orchestrators only advanced when their own scheduled wake-up fired, paying the full timer interval on every hand-off. Cyrus now links a new session to the most recent session on its parent issue, whether or not that parent session is still running, so parent-child issue relationships carry child completion results in general. (#1454)
• A child session that ends a turn with a scheduled wake-up or a background task still pending no longer resumes its parent early. Previously the parent received a non-final result and was resumed a second time when the child actually finished; the callback now waits for the result that ends the child session. (#1454)

Changed

• Updated the bundled Codex CLI and SDK from 0.144.4 to 0.153.3, enabling Codex sessions to use GPT-6 Astra via the gpt-6-astra model selector. (CYPACK-1494, #1460)
• Updated @anthropic-ai/claude-agent-sdk from 0.3.259 to 0.3.260, bringing Claude sessions to parity with Claude Code 2.1.260 plus improved remote-session latency and rate-limit reporting, stricter rewind failure handling, and clearer structured-output validation errors. @anthropic-ai/sdk remains current at ^0.123.0, and the refreshed 31-tool Claude allowance lists are unchanged. (CYPACK-1493, #1459, cyrus-hosted#1060)
• Updated @anthropic-ai/claude-agent-sdk from 0.3.258 to 0.3.259, adding multi-message reply correlation, unattended permission-prompt denial, and parity with Claude Code 2.1.259. @anthropic-ai/sdk remains current at ^0.123.0, and the refreshed 31-tool Claude allowance lists are unchanged. (CYPACK-1491, #1455, cyrus-hosted#1057)
• The orchestrator and graphite-orchestrator prompts now instruct Cyrus to delegate each sub-issue to itself when creating it. The previous guidance said the inherited assignee was enough to start the child session, which stopped being true once the explicit session-creation tools were removed in v0.2.69. (#1454)
• EdgeWorker state saves are now atomic, preventing a process interrupted during a save from leaving a truncated state file that strands in-flight sessions; empty and legacy-truncated state files also recover cleanly. Thanks @connor-tembo for the contribution. (CYPACK-1486, #1444)

Changed

• Updated @anthropic-ai/claude-agent-sdk from 0.3.252 to 0.3.258, bringing Claude sessions to parity with Claude Code 2.1.258 plus MCP resource-link and reconnection fixes. Updated @anthropic-ai/sdk from ^0.122.0 to ^0.123.0; the refreshed 31-tool Claude allowance lists are unchanged. (CYPACK-1489, #1451, cyrus-hosted#1056)
• Updated @anthropic-ai/claude-agent-sdk from 0.3.251 to 0.3.252, bringing Claude sessions to parity with Claude Code 2.1.252. @anthropic-ai/sdk remains current at ^0.122.0, and the refreshed Claude tool allowance lists are unchanged. (CYPACK-1488, #1449)
• Updated @anthropic-ai/claude-agent-sdk from 0.3.250 to 0.3.251, bringing Claude sessions to parity with Claude Code 2.1.251. @anthropic-ai/sdk remains current at ^0.122.0, and the refreshed Claude tool allowances remove the retired MCP resource-discovery tools. (CYPACK-1482, #1446)
• Updated @anthropic-ai/claude-agent-sdk from 0.3.247 to 0.3.250, adding per-server SDK-hosted MCP timeouts and parity with Claude Code 2.1.250. Updated @anthropic-ai/sdk from ^0.121.0 to ^0.122.0, and refreshed the Claude tool allowances to add agent/resource discovery tools and remove the retired onboarding-guide tool. (CYPACK-1481, #1443)

Security

• Patched eight newly reported Cyrus CLI dependency advisories so pnpm audit reports no known vulnerabilities, while replacing the redundant fast-uri override with upstream-compatible direct dependency updates. (CYPACK-1492, #1456)

Packages

cyrus-cloudflare-tunnel-client

• cyrus-cloudflare-tunnel-client@0.2.71

cyrus-mcp-tools

• cyrus-mcp-tools@0.2.71

cyrus-core

• cyrus-core@0.2.71

cyrus-claude-runner

• cyrus-claude-runner@0.2.71

cyrus-config-updater

• cyrus-config-updater@0.2.71

cyrus-linear-event-transport

• cyrus-linear-event-transport@0.2.71

cyrus-github-event-transport

• cyrus-github-event-transport@0.2.71

cyrus-gitlab-event-transport

• cyrus-gitlab-event-transport@0.2.71

cyrus-slack-event-transport

• cyrus-slack-event-transport@0.2.71

cyrus-simple-agent-runner

• cyrus-simple-agent-runner@0.2.71

cyrus-opencode-runner

• cyrus-opencode-runner@0.2.71

cyrus-codex-runner

• cyrus-codex-runner@0.2.71

cyrus-cursor-runner

• cyrus-cursor-runner@0.2.71

cyrus-gemini-runner

• cyrus-gemini-runner@0.2.71

cyrus-edge-worker

• cyrus-edge-worker@0.2.71

cyrus-ai

• cyrus-ai@0.2.71 (CYPACK-1495, #1461)