You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
[0.2.72] - 2026-09-15
Fixed
GitHub CLI commands that view, clone, or fork an explicitly named repository now use that repository's installation token when run from another organization's directory. Repository overrides through GH_REPO and attached -R arguments are also honored. (CYHOST-913, #1307)
Added
Cyrus can now read the contents of Linear agent sessions with the separate get_agent_session_contents tool, including user prompts, tool results, and responses, with pagination for longer conversations. (CYPACK-1506, #1473)
New optional maxConcurrentSessions setting in ~/.cyrus/config.json caps how many agent sessions run at once across all repositories and platforms. Extra session starts wait in order for a free slot and begin automatically as running sessions finish. Omit it for the previous unlimited behavior. The value hot-reloads with the config file: raising it admits queued sessions immediately, and lowering it takes effect as running sessions finish. (#1445, #1469)
Zulip is now a supported chat platform. @mention the bot in a Zulip topic (or DM it) and Cyrus answers in that topic, with 👀/✅ reactions marking receipt and completion. Set ZULIP_SITE, ZULIP_BOT_EMAIL, ZULIP_API_KEY and ZULIP_WEBHOOK_TOKEN to enable it; see docs/ZULIP.md. (#1468)
Changed
Updated @anthropic-ai/claude-agent-sdk from 0.3.261 to 0.3.268, bringing Claude sessions to parity with Claude Code 2.1.268. The accumulated update adds browser SSE delivery/catch-up helpers, preserves shell working-directory changes across multi-turn sessions, improves message correlation for synthetic and agent-initiated turns, records custom system prompts by default, and expands host control over permission prompts, plugin reloads, context usage, and interrupted-turn recovery. Updated @anthropic-ai/sdk from ^0.124.0 to ^0.125.0, adding Managed Agents auto-mode permissions, public GitHub repository mounts, and new API types. The refreshed 31-tool Claude allowance lists remove the three MCP resource-discovery tools no longer exposed by Claude Code 2.1.268. (CYPACK-1498, CYPACK-1505, CYPACK-1510, #1463, #1471, #1474, cyrus-hosted#1063, cyrus-hosted#1073, cyrus-hosted#1077)
Updated @anthropic-ai/claude-agent-sdk from 0.3.260 to 0.3.261, adding initialization-time plugin delivery to avoid Windows launch failures with many plugins, fixing query() in runtimes without native Symbol.dispose, and bringing Claude sessions to parity with Claude Code 2.1.261. Updated @anthropic-ai/sdk from ^0.123.0 to ^0.124.0, adding expanded usage-report breakdowns, organization compliance-setting types, broader workspace-ID support, and safer agent-toolset filesystem permissions. The refreshed 31-tool Claude allowance lists are unchanged. (CYPACK-1497, #1462, cyrus-hosted#1062)
Security
Patched five newly reported Cyrus CLI dependency advisories by updating the Vitest toolchain and enforcing a safe Hono release, so pnpm audit again reports no known vulnerabilities. (CYPACK-1503, #1466)
