This release adds 2 notable features for engineering teams evaluating rollout.
Published 17d
AI Agents & Assistants
✓ No known CVEs patched
✓ No known CVEs patched in this version
Topics
agents
ai
automation
shell
claude-code
cli
+4 more
codex
gemini
self-hosted
systemd
Affected surfaces
auth
breaking_upgrade
Summary
AI summaryCodex agents now support Telegram integration with automatic hook trust and inter‑agent mirror handles group→supergroup migrations.
Full changelog
Added
- codex agents now support
--channels=telegram.5dive agent create --type=codex --channels=telegram --telegram-token=… [--telegram-allowed-users=…]wires the full telegram-codex bridge the same
one-flag way claude does: it writes the bot token to
~/.codex/channels/telegram/.env, seedsaccess.jsonfrom the allowlist,
and at first boot appends the[mcp_servers.telegram]block plus the
Stop/PreToolUse/Notification/PermissionRequestlifecycle hooks
to the agent'sconfig.toml. codex's first-run "Hooks need review" TUI
prompt is auto-accepted once on first boot — codex then persists the trust to
[hooks.state]so restarts never re-prompt. (codex's
--dangerously-bypass-hook-trustflag only suppresses the gate for
non-interactivecodex exec, not the TUI, so it isn't used.) The plugin is a
single shared checkout — resolved from$TELEGRAM_CODEX_PLUGIN_DIR,
/usr/local/lib/5dive/telegram-codex, or the5dive-pluginscheckout, in
that order — andserver.tsresolves each agent's own state dir from$HOME,
so one copy serves every codex agent. telegram only; no discord build for
codex yet. Note: customer VMs need the telegram-codex plugin deployed to
/usr/local/lib/5dive/telegram-codex(install.sh staging is a follow-up); on
the control-plane host the5dive-pluginscheckout satisfies the resolver.
Added
install.shnow stages the 5dive-cli skill under
/usr/local/lib/5dive/skills/5dive-cli/(whole-directory:SKILL.mdplus
references/). Pulled via tarball from5dive-com/skills, mirroring how
notify-user is staged. Pairs with the 5dive-api update.sh change that
refreshes every agent's installed copy from this stage on the daily 03:00
cron — so docs improvements (e.g. the newtask/orgreference sections)
reach existing agents instead of being frozen at agent-create time.
Fixed
5dive-agent-startnow dispatchesgrokandantigravity, fixing a
crash-loop regression (unknown AGENT_TYPE: grok|antigravity). Both types
were already first-class everywhere else in the CLI (TYPE_BIN, installer,
auth,agent create), but the systemd launcher's case statement never got
the matching branches — soagent create --type=groksucceeded, then the
unit exited 2 on every spawn, racking up thousands of restarts. The
per-type credential scrub also covers them now (same posture as
hermes/openclaw — OAuth-via-file, no provider env vars).
Added
- Inter-agent mirror can post into a forum topic: when the group entry in
access.jsoncarries amessage_thread_id, mirroredagent send/ask
traffic lands in that thread (e.g. a dedicated "#5dive" topic) instead of
the supergroup's General channel.
Fixed
- Inter-agent mirror now survives a group→supergroup migration. Upgrading a
paired group to a supergroup (also how it gains forum topics) changes its
chat id, and Telegram rejects sends to the old id with
migrate_to_chat_id. The mirror now follows that, rewrites the stored group
id inaccess.json(preserving owner/mode + the thread id), and retries —
instead of silently posting nothing.
See CHANGELOG.md for the full breakdown.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About 5dive
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]