FyAgent v0.4.13

FyAgent v0.4.13

This is a transitional pre-release. It collects changes after 0.4.10 and builds on the 0.4.12 fixes on top of the CC Switch 4.0.4 base. 0.4.10 remains the latest stable release.

Behavior change: confirm the skills update-all list

• Updating all skills now shows the list of skills to be updated before you confirm and start the update.

Fixes

• Windows auto-launch. Checking the auto-launch status is now read-only and no longer deletes the startup entry in the Windows Run registry key.
• Credentials. Remaining managed-auth token copies are zeroized in memory, including copies created when reading back Codex credentials. Short credentials no longer cause public provider names, model names, local addresses or usage addresses to be rejected just because they contain the same text; credentials in unknown extension fields are still rejected.
• Bulk assignment. Readback compares the set of targets instead of object key order, avoiding false mismatches. After a failed write, the extra convergence read whose result was discarded is removed.
• Prompts. Import failures now report definite reasons. Managed prompt payloads accept extra native metadata while still validating required and optional fields, and an unreachable home directory error is removed from path resolution.
• OpenCode configuration. Configuration path resolution is unified, and model reads, backups and writes reuse the same checked path. Path resolution errors are reported through provider, proxy recovery and managed-auth operations without crashing.
• MCP diagnostics. Local protocol diagnostics provide Inspector configuration and commands for initialization and tool discovery without running server commands or changing assignments. Copied configuration masks credentials, with stronger redaction for personal access tokens and sensitive names in URL queries, fragments, command-line arguments and headers. Add credentials only on your own machine before running diagnostics. The desktop content security policy is tightened.
• Codex models. Configured third-party catalog models stay visible, and the Moark preset lists all five models.
• Grok sessions. The session import settling window is now 60 seconds, separate from the unchanged ten-minute proxy deduplication window.
• Tray refresh. After a mode is saved, a failed tray refresh is logged and retried once; a refresh failure does not turn the successful save into a failure.
• CI and docs. Upstream source checks use a validated, pinned source manifest instead of depending on documentation wording, and changes to that manifest are covered by CI policy checks. Documentation checks are aligned and regression coverage is expanded.

Verification scope

• Full CI runs were completed on the fork for the fix branches and the combined release branch. Verification used unsigned test builds; no manual acceptance on real Windows or macOS machines is claimed. The macOS installer is Developer ID signed and notarized. The Windows installers are not code-signed, so Windows SmartScreen may show a warning; click "More info", then "Run anyway".

Usage notes

FyAgent must remain running for local subscription forwarding. If you reach FyAgent from another device on the local network, set the access key first.

See the changelog and Chinese notes.