Skip to content

Agent Workflow 0.3.2 — Windows Session 0 compatibility

Choose a tag to compare

@ehartye ehartye released this 14 Oct 15:27
· 7 commits to main since this release
3951714

Explicit Windows MXC Session 0 compatibility for OpenSSH-launched workflows:

  • doctor and new run accept --session0-desktop shared; default desktop inheritance remains unchanged.
  • Native session enforcement and fixed same-session desktop selection preserve existing Codex, filesystem/network policy, tokens, ACLs and process ownership.
  • Saved runs retain the selection across resume/restart. Doctor and failure receipts distinguish requested/applied compatibility and preserve cleanup evidence.
  • Setup/run/mode skills explain existing authorization and measured shared UI exposure. No Codex fork is required.

Validation: 422 local tests, check, smoke, clean package installation, zero production vulnerabilities, and successful Windows PR/tag CI. Exact final package passed elevated HAL9000 OpenSSH Session 0 doctor, real read command, detached isolated write, attached live observation and cached resume. Ordinary desktop defaults passed; shared mode outside Session 0 was rejected before launch. Attached acceptance records the exact runtime/source/dependency identities.

Shared UI visibility is an accepted compatibility tradeoff, not equivalent UI isolation. Non-admin tokens, other Windows builds/accounts and arbitrary descendants outside owned jobs remain unverified.