v2.23.0

2.23.0 (2026-09-24)

Bug Fixes

• jail: a plain $HOME is the home directory, and is judged like ~ (70fb9c4)
• jail: a substitution that only echoes a literal is that literal (e619b80)
• jail: follow a value assigned earlier in the same command (bb906c3)
• jail: three branches that stopped early (nested eval, find's action, rsync) (fdc92e8)
• setup: quote the MCP upstream, and stop wrapping Codex's own server (25d2efe)

Features

• heal: report MCP servers an older node9 corrupted, and do not pretend to fix them (556b2bd)
• scan-repo: read a skill's supporting files, not only its SKILL.md (3b4715d)