vstack 4.6.0

Highlights

• Codex agent nicknames — generated Codex agents carry name-prefixed nickname-candidates (e.g. Rust-Atlas) so the Codex app shows which agent definition launched while still identifying the subagent by name.
• Codex skill inventory — Codex agents emit a "Required Skills" instruction section pointing at .agents/skills/<name>/SKILL.md; the unsupported top-level skills TOML field is dropped (back-compat retained in vstack check).
• New workflow prompts — /gh-release, /npm-deploy, and /pi-update ship under .pi/prompts/.
• Hardening — Codex-safe orch/Linear/GitHub/reviewer workflows; pi-extension fixes (pi-agents-tmux file-lock & needs-completion snapshots, pi-claude-bridge stale-context rendering, pi-codex-minimal-tools null-content tolerance, pi-hooks nested cli/Cargo.toml pre-commit guard).

What's Changed

• fix(issue-367): report Linear bulk-update partial failures in #368
• fix(issue-369): avoid Codex-hostile workflow snippets by Brad (@bmethod) in #370
• fix(issue-371): bound bot-review-wait timeout in #373
• fix(issue-372): Orch Codex review delegation launches worker instead of generated reviewer agents in #374
• fix(issue-375): harden GitHub op-token auth fallback in #377
• docs(issue-376): Codex workflow shell commands rejected as approval-required under never policy in #380
• Harden Codex-safe reviewer JSON artifact writes in #385
• fix(issue-383): GitHub helpers fail auth preflight with valid selected token and stale keyring in #386
• fix(issue-388): disable signing in orch helper test in #390
• fix(issue-389): add GitHub HTTPS git fallback in #391
• fix(issue-392): make benchmark QA guidance Codex-safe by Brad (@bmethod) in #393
• Update cargoHash in flake.nix for vstack 4.5.0 by LoveSnowEx (@LoveSnowEx) in #396
• fix(issue-394): handle stale Pi contexts in message renderers by Brad (@bmethod) in #402
• fix(#397): Support documented Linear relation aliases by Brad (@bmethod) in #404
• [codex] Clarify TPM audit relation cache lookup by Brad (@bmethod) in #400
• fix(issue-395): crash report: Error: Timed out acquiring file lock for ~/.pi/agent/vstack/sessions//pi-agents-tmux/tasks.json after 10000ms by Brad (@bmethod) in #405
• fix(issue-395): skip duplicate terminal completion emits by Brad (@bmethod) in #408
• fix(issue-401): emit Codex skill inventory by Brad (@bmethod) in #412
• fix(issue-406): show Linear cache subcommand help by Brad (@bmethod) in #411
• fix(issue-395): preserve needs_completion on bad outbox by Brad (@bmethod) in #409
• fix(issue-403): honor second opinion timeout default by Brad (@bmethod) in #410
• fix(issue-407): avoid pull in merge sync by Brad (@bmethod) in #414
• fix(issue-415): clarify review-pr reviewer launch ordering by Brad (@bmethod) in #417
• fix(issue-416): persist TPM audit inline JSON by Brad (@bmethod) in #418
• fix(issue-419): github pr-merge --check misclassifies in-progress checks as ci_failed by Brad (@bmethod) in #420
• fix(orch): wait for late bot review threads by Brad (@bmethod) in #422
• fix(codex): drop unsupported top-level skills field from agent TOML by Brad (@bmethod) in #423
• fix(pi-hooks): resolve nested cli/Cargo.toml in pre-commit guard by Brad (@bmethod) in #424

New Contributors

• LoveSnowEx (@LoveSnowEx) made their first contribution in #396

Full Changelog: v4.5.0...v4.6.0