v1.9.2

What's Changed

• co rem 1.9.2b1: each investigation pass may delete, not only add by @wu-changxing in #2341
• co rem 1.9.2b3: a first run you can read straight away by @wu-changxing in #2352
• co init writes co's command index into Codex and Claude Code by @wu-changxing in #2355
• Remove dead root folders: the subagents/ prototype, output/ images, an internal draft by @wu-changxing in #2094
• co ai looks in co first: a service question goes to its co command, not the browser by @wu-changxing in #2111
• README: code-block comments above commands so they fit a phone by @wu-changxing in #2131
• co rem 1.9.2b4: hand work to someone else, and what a real run of b3 found by @wu-changxing in #2360
• co ai runs the command instead of looking for its key (#2115) by @wu-changxing in #2362
• One rule for an agent's mailbox: 0x + 10 hex, as oo-api names it (#2359) by @wu-changxing in #2363
• A tool call with no name is an unknown tool, not the end of the run (#1356) by @wu-changxing in #2364
• co search waits for a grounded answer and calls a timeout a timeout (#1933) by @wu-changxing in #2366
• co ai's shell runs the co that is running it (#2114) by @wu-changxing in #2367
• Feishu history recovery says a missing scope once and stops retrying (#2084) by @wu-changxing in #2365
• grep prunes while it walks and stops before reading a home directory (#1453) by @wu-changxing in #2368
• co eval loads a Host file whose create_agent is hosted under main (#1778) by @wu-changxing in #2369
• docs: co auth writes one file, global by default (#2280) by @wu-changxing in #2371
• The benchmark hint invokes the skill it names (#1810) by @wu-changxing in #2372
• help-gate says 'review unavailable' when the model review crashes (#2259) by @wu-changxing in #2374
• co handoff (experimental): hand a Codex/Claude Code task to another person's agent by @wu-changxing in #2361
• Release 1.9.2b5 preview: co handoff, agents know co, ten fixes by @wu-changxing in #2376
• co browser status says what is running now (#1473) by @wu-changxing in #2379
• Credential check reads what a command opens, not the words it carries (#1494) by @wu-changxing in #2381
• Feishu replies render the model's Markdown (#1872) by @wu-changxing in #2380
• Comments stop describing seed[:32] as the current identity (#1015) by @wu-changxing in #2382
• co handoff open takes the saved mail, so a handoff sent to an ordinary email can be opened (#2378) by @wu-changxing in #2383
• Feishu listener acknowledges reactions and read receipts (#1618) by @wu-changxing in #2384
• co rem 1.9.2b6: the second pass goes deeper — answers from people, and an editing round for what the final round leaves by @wu-changxing in #2354
• co rem 1.9.2b7: a first run that does not trip over itself by @wu-changxing in #2386
• co handoff: the recipient pastes one prompt; accept, ask and answer come back to the sender by @wu-changxing in #2389
• co rem: the launchd job carries a calendar trigger beside its interval (macOS 14 never fires StartInterval) by @wu-changxing in #2388
• Release 1.9.2b8 preview: paste one prompt to take over a handoff by @wu-changxing in #2392
• co rem's in-process lock is handed out in the order threads asked (#2370) by @wu-changxing in #2394
• co email send: a plain-text body keeps its paragraphs (#2395) by @wu-changxing in #2397
• co handoff: step 1 installs co in isolation, never the global Python (#2396) by @wu-changxing in #2398
• Release 1.9.2b9: co mcp (Experimental) — call the connectors Codex already has, without a model turn by @wu-changxing in #2393
• test_rem_scan: fix the clock; the September fixtures fell out of the 30-day window by @wu-changxing in #2402
• co handoff: an accepted handoff makes each side the other's agent contact by @wu-changxing in #2399
• One-line install: curl … install.sh | sh installs co with uv and runs co init by @wu-changxing in #2403
• Release 1.9.2b10: a handoff mail you can read on a phone, and an install floor that exists by @wu-changxing in #2400
• Start co ai automatically when opening live REM by @wu-changxing in #2308
• co handoff: one message — every user message verbatim, the AI's replies in summary, where the code is by @wu-changxing in #2406
• Release 1.9.2b11: a handoff that keeps what you said by @wu-changxing in #2409
• co handoff: mail finds the other agent, the agent inbox carries the rest by @wu-changxing in #2412
• Release 1.9.2b12: agents talk through an inbox, not email by @wu-changxing in #2413
• co handoff: the sender's agent answers questions by itself, with a copy of the session by @wu-changxing in #2419
• Release 1.9.2b13: questions answer themselves by @wu-changxing in #2420
• The record: every tool call, EXEC, Remote Browser request and trust change in one append-only file (#2408) by @wu-changxing in #2418
• Three things wait for the owner, decided by code (#2408) by @wu-changxing in #2421
• Release 1.9.2b14: see what your agent did, and for whom by @wu-changxing in #2423
• co handoff: answer every question exactly once, and keep reading when the inbox misbehaves by @wu-changxing in #2424
• Release 1.9.2b15: every handoff question answered once, on day thirty-one too by @wu-changxing in #2425
• co handoff: the way back that accept prints now works for agent-mailbox senders by @wu-changxing in #2426
• The record says which handoff made each side a contact by @wu-changxing in #2429
• co trust list --global shows the identity co ai and co handoff use by @wu-changxing in #2430
• co handoff: a first mail a stranger can read and trust, and wait never misses an answer by @wu-changxing in #2431
• Release 1.9.2b16: a first handoff mail a stranger can read by @wu-changxing in #2433
• co handoff: redact secrets written through a tool call, where quotes arrive escaped by @wu-changxing in #2434
• Release 1.9.2b17: a session copy with nothing secret in it by @wu-changxing in #2435
• co handoff: what a stranger's first run found (read-only ~/.codex, answered state, mail text) by @wu-changxing in #2436
• Release 1.9.2b18: a handoff a stranger can start from nothing by @wu-changxing in #2437
• One host: co host, python agent.py, co deploy and co ai serve the same things by @wu-changxing in #2441
• Release 1.9.2b19: one host, whichever way you start it by @wu-changxing in #2442
• co handoff: the agent accepts and does the work, and says when it is done by @wu-changxing in #2458
• Release 1.9.2b20: a handoff nobody has to babysit by @wu-changxing in #2461
• co handoff: the mail is a reminder, the handoff is picked up by code, and a question reaches the sender by @wu-changxing in #2466
• co handoff open: the sender's conversation as a named Codex thread, then a short report by @wu-changxing in #2462
• Release 1.9.2b21: a handoff that opens on what you discussed by @wu-changxing in #2472
• co handoff open: the work turn waits for the answer; the inbox names the sender by @wu-changxing in #2473
• co handoff: the agent does the work without waiting, and the code and session copy arrive with accept by @wu-changxing in #2474
• Release 1.9.2b22: everything arrives with accept by @wu-changxing in #2476
• co handoff: the Code section says the code travels; the paste says to let a slow install finish by @wu-changxing in #2480
• co handoff open: the sender's answers reach the session until done; accept fetches the drop by @wu-changxing in #2479
• co handoff: the mail is a short note from the sender's own mailbox, in their language by @wu-changxing in #2481
• Release 1.9.2b23: a note from someone you know by @wu-changxing in #2483
• co handoff: one line to paste; the page holds the prompt; the sender may send handoffs only on the recipient's side by @wu-changxing in #2484
• Release 1.9.2b24: read it first, then one line by @wu-changxing in #2486
• co handoff: the mail as Gmail iOS shows it, one language, shorter AI quotes, From is the person by @wu-changxing in #2487
• co handoff: mail in your own voice; replay visible in the Codex app; only the last repository travels by @wu-changxing in #2488
• Release 1.9.2b25: a note in your own voice by @wu-changxing in #2489
• 1.9.2b26: nobody else's details (masking, withdraw, --lang, one-line status, chat turns) by @wu-changxing in #2493
• 1.9.2b27: the session copy is only the approved conversation; drops keyed to the code; second holders told; --wait times out; mentions by @wu-changxing in #2495
• 1.9.2b28: edits reach the session copy; Chinese given names masked; touchy messages named by @wu-changxing in #2498
• 1.9.2b29: private sentences out before the preview, read by your own agent (#2500) by @wu-changxing in #2502
• 1.9.2b30: more agents to hand off from; Codex sandbox asks for network; --wait rides out a 502 (#2501, #2504, #2497) by @wu-changxing in #2503
• 1.9.2b31: nobody gets more than the handoff (permission audit; DD-078 trust starts from cost) by @wu-changxing in #2505
• 1.9.2rc1: both directions, end to end by @wu-changxing in #2509
• 1.9.2: hand a session to someone else's agent (stable) by @wu-changxing in #2510

Full Changelog: v1.9.1...v1.9.2