Skip to content

Avibe

v3.0.6 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 2 known CVEs

Topics

agent agent-os ai ai-agents chatops claude
+11 more
claude-code codex devtools discord-bot lark-bot llm local-first opencode slack-bot vibe-coding wechat

Affected surfaces

auth deps

ReleasePort's take

Moderate signal
editorial:auto 11d

The release makes first‑time protected Vault creation atomic under concurrent requests and fixes a private Show Page surface mount to prevent symlink escapes.

Why it matters: Severity scores of 90 (Vault) and 85 (Show Page) indicate critical security risks; address these immediately to prevent race‑condition exploits and unauthorized file access.

Summary

AI summary

Updates Highlights, 修复, and 新增 across a mixed release.

Changes in this release

Security Critical

Make first-time protected Vault establishment atomic under concurrent requests so only one initializer can create the protected Vault.

Make first-time protected Vault establishment atomic under concurrent requests so only one initializer can create the protected Vault.

Source: llm_adapter@2026-07-17

Confidence: high

Security High

Fix private Show Page /show/<id>/ surface mount and confine public symlink escapes through the Vite @fs gate.

Fix private Show Page /show/<id>/ surface mount and confine public symlink escapes through the Vite @fs gate.

Source: llm_adapter@2026-07-17

Confidence: high

Feature Medium

Add full-duplex Session output delivery and Activity recovery for background backend work.

Add full-duplex Session output delivery and Activity recovery for background backend work.

Source: llm_adapter@2026-07-17

Confidence: high

Feature Medium

Add platform‑owned Git checkpoints for Show Page workspaces including background agent turns.

Add platform‑owned Git checkpoints for Show Page workspaces including background agent turns.

Source: llm_adapter@2026-07-17

Confidence: high

Feature Medium

Add Dock‑pinned Show Page apps with App Library, mobile Apps drawer, search, hotkeys, rename and icon handling.

Add Dock‑pinned Show Page apps with App Library, mobile Apps drawer, search, hotkeys, rename and icon handling.

Source: llm_adapter@2026-07-17

Confidence: high

Feature Low

Add bounded rolling backend restarts for Claude, Codex, and OpenCode so new work waits while active turns drain.

Add bounded rolling backend restarts for Claude, Codex, and OpenCode so new work waits while active turns drain.

Source: llm_adapter@2026-07-17

Confidence: high

Feature Low

Add Files app copy support, content search, batch operations, safer move/duplicate handling and preview‑first routing.

Add Files app copy support, content search, batch operations, safer move/duplicate handling and preview‑first routing.

Source: llm_adapter@2026-07-17

Confidence: high

Feature Low

Add terminal font‑size hotkeys, mobile terminal paste, editor font‑size controls and zoom/pan image preview.

Add terminal font‑size hotkeys, mobile terminal paste, editor font‑size controls and zoom/pan image preview.

Source: llm_adapter@2026-07-17

Confidence: high

Feature Low

Initialize fresh Show Page workspaces as a minimal placeholder plus dependency‑free multi-page router with delayed nudge prompt.

Initialize fresh Show Page workspaces as a minimal placeholder plus dependency‑free multi-page router with delayed nudge prompt.

Source: granite4.1:30b@2026-07-17-audit

Confidence: low

Feature Low

Unify dependency download retry behavior and Doctor diagnostics across multiple components.

Unify dependency download retry behavior and Doctor diagnostics across multiple components.

Source: granite4.1:30b@2026-07-17-audit

Confidence: low

Feature Low

Share Show Pages inventory across the workbench with single‑flight refresh and stale‑while‑revalidate behavior.

Share Show Pages inventory across the workbench with single‑flight refresh and stale‑while‑revalidate behavior.

Source: granite4.1:30b@2026-07-17-audit

Confidence: low

Feature Low

Add Telegram native command‑menu synchronization at bot startup with English and Chinese descriptions.

Add Telegram native command‑menu synchronization at bot startup with English and Chinese descriptions.

Source: granite4.1:30b@2026-07-17-audit

Confidence: low

Feature Low

Add Cloudflare Tunnel quality monitoring and same‑tunnel route recovery for degraded remote access.

Add Cloudflare Tunnel quality monitoring and same‑tunnel route recovery for degraded remote access.

Source: granite4.1:30b@2026-07-17-audit

Confidence: low

Feature Low

Add iOS standalone PWA restoration of the last visited canonical page after cold launch.

Add iOS standalone PWA restoration of the last visited canonical page after cold launch.

Source: granite4.1:30b@2026-07-17-audit

Confidence: low

Feature Low

Add managed, verified vendored Git runtime and wire it into Avibe’s Git resolution path with fallback order.

Add managed, verified vendored Git runtime and wire it into Avibe’s Git resolution path with fallback order.

Source: granite4.1:30b@2026-07-17-audit

Confidence: low

Bugfix Medium

Fix Show Page app/Dock drag handling, iframe pointer capture, icon resolution and visual styling issues.

Fix Show Page app/Dock drag handling, iframe pointer capture, icon resolution and visual styling issues.

Source: llm_adapter@2026-07-17

Confidence: high

Bugfix Medium

Normalize terminal backend failures across Claude, Codex, and OpenCode while preserving diagnostics.

Normalize terminal backend failures across Claude, Codex, and OpenCode while preserving diagnostics.

Source: llm_adapter@2026-07-17

Confidence: high

Bugfix Medium

Surface Claude safety fallback retry notifications in Web and IM without terminating the active turn.

Surface Claude safety fallback retry notifications in Web and IM without terminating the active turn.

Source: granite4.1:30b@2026-07-17-audit

Confidence: low

Bugfix Medium

Protect dirty full‑page Editor routes from unintended unmounts.

Protect dirty full‑page Editor routes from unintended unmounts.

Source: granite4.1:30b@2026-07-17-audit

Confidence: low

Bugfix Medium

Allow 30 seconds of bounded OAuth clock skew when validating Avibe Cloud ID tokens.

Allow 30 seconds of bounded OAuth clock skew when validating Avibe Cloud ID tokens.

Source: granite4.1:30b@2026-07-17-audit

Confidence: low

Bugfix Medium

Isolate Discord connection failures so one IM transport cannot take down the aggregate IM/workbench runtime.

Isolate Discord connection failures so one IM transport cannot take down the aggregate IM/workbench runtime.

Source: granite4.1:30b@2026-07-17-audit

Confidence: low

Bugfix Medium

Preserve back navigation after iOS PWA route restoration by pushing the remembered route instead of replacing the only history entry.

Preserve back navigation after iOS PWA route restoration by pushing the remembered route instead of replacing the only history entry.

Source: granite4.1:30b@2026-07-17-audit

Confidence: low

Bugfix Medium

Guard Git Runtime release assets and recover missing or partial runtime releases from verified backups.

Guard Git Runtime release assets and recover missing or partial runtime releases from verified backups.

Source: granite4.1:30b@2026-07-17-audit

Confidence: low

Bugfix Low

Stop only affected Harness watch when its working directory disappears and notify linked Agent Session.

Stop only affected Harness watch when its working directory disappears and notify linked Agent Session.

Source: granite4.1:30b@2026-07-17-audit

Confidence: low

Bugfix Low

Repair Vaults mobile header layout and reduce pending‑request polling to a fallback only when the event bridge is disconnected.

Repair Vaults mobile header layout and reduce pending‑request polling to a fallback only when the event bridge is disconnected.

Source: granite4.1:30b@2026-07-17-audit

Confidence: low

Bugfix Low

Settle multiple Claude Activity outputs together, deliver delegated lane callbacks once, and ensure terminal Agent Run content uses final assistant text.

Settle multiple Claude Activity outputs together, deliver delegated lane callbacks once, and ensure terminal Agent Run content uses final assistant text.

Source: granite4.1:30b@2026-07-17-audit

Confidence: low

Refactor Medium

Reconcile backend runtimes once after setup/settings config saves affecting agents.* instead of route‑level restarts.

Reconcile backend runtimes once after setup/settings config saves affecting agents.* instead of route‑level restarts.

Source: granite4.1:30b@2026-07-17-audit

Confidence: low

Refactor Low

Render Workbench Chat background‑activity status as a compact contextual pill instead of full‑width banner.

Render Workbench Chat background‑activity status as a compact contextual pill instead of full‑width banner.

Source: granite4.1:30b@2026-07-17-audit

Confidence: low

Full changelog

Highlights

  • You can now treat agent-built Show Pages like Workbench apps: pin them to the Dock, manage install/dock state in App Library, open them in windows or full-screen on mobile, find them via ⌘K, switch with Option+1-9, rename them, and use page-provided icons.
  • Show Page workspaces are more durable and self-contained: Avibe checkpoints worktrees before/after agent turns, including background callbacks, uses a verified bundled Git when needed, and starts fresh pages with a minimal multi-page scaffold plus a live placeholder.
  • Agent sessions now handle background work and runtime changes more cleanly: full-duplex outputs, recoverable activities, bounded rolling backend restarts, normalized terminal failures, and corrected Claude/Run callback settlement reduce lost, duplicated, or misleading results.
  • The Web workbench is easier to use day to day: Files gains content search, batch operations, safer copy/duplicate/move flows and preview-first routing; Editor/Terminal get persistent font controls; image previews zoom/pan; iOS PWAs reopen where you left off.

Changes

Added

  • Add full-duplex Session output delivery and Activity recovery so background backend work can report after its originating turn and survive restarts (#864, #873).
  • Add platform-owned Git checkpoints for Show Page workspaces, including background agent turns from IM, Workbench, scheduled tasks, watches, and Agent Runs (#869, #875).
  • Add a managed, verified vendored Git runtime and wire it into Avibe’s Git resolution path with vendored → system → degrade fallback (#871, #879).
  • Add bounded rolling backend restarts for Claude, Codex, and OpenCode so new work waits while active turns drain, then resumes on the refreshed runtime (#872).
  • Add Dock-pinned Show Page apps, App Library, mobile Apps drawer, app search, dock hotkeys, inline AI page rename, chat jump, page icons, icon upload/editing, and related Dock/window polish (#892, #899, #901, #902, #903, #904, #905, #906, #907, #916).
  • Add Files app copy support, content search, multi-select batch operations, mobile favorites, safer move/duplicate clash handling, and unified preview-first open routing (#885, #886, #889, #895).
  • Add terminal font-size hotkeys, mobile terminal paste, editor font-size controls, a restored editor settings popover, honest editor chrome, and zoom/pan for the shared image preview kernel (#887, #888, #893, #894).
  • Add Telegram native command-menu synchronization at bot startup with English and Chinese descriptions (#884).
  • Add Cloudflare Tunnel quality monitoring and same-tunnel route recovery for degraded remote access (#911).
  • Add iOS standalone PWA restoration of the last visited canonical page after cold launch (#925).

Changed

  • Initialize fresh Show Page workspaces as a minimal placeholder plus dependency-free multi-page router, with a delayed “nudge the agent” prompt instead of a heavy demo app (#877, #896, #900).
  • Reconcile backend runtimes once after setup/settings config saves that affect agents.*, instead of relying on route-level follow-up restarts (#926).
  • Unify dependency download retry behavior and Doctor diagnostics across Show Runtime, Git Runtime, tmux, avault, bootstrap installers, and repair targets (#913).
  • Render Workbench Chat background-activity status as a compact contextual pill instead of a full-width system banner (#910).
  • Share Show Pages inventory across the workbench with single-flight refresh and stale-while-revalidate behavior to reduce duplicate fetches and icon flicker (#929).

Fixed

  • Surface Claude safety fallback retry notifications in Web and IM without terminating the active turn (#861).
  • Stop only the affected Harness watch when its saved working directory disappears, and notify the linked Agent Session (#868).
  • Protect dirty full-page Editor routes from sidebar, mobile navigation, imperative navigation, and browser/OS Back unmounts (#870).
  • Normalize terminal backend failures across Claude, Codex, and OpenCode while preserving diagnostics, retry behavior, and idempotent Run completion (#878).
  • Allow 30 seconds of bounded OAuth clock skew when validating Avibe Cloud ID tokens (#883).
  • Repair Vaults mobile header layout and reduce pending-request polling to a fallback only when the event bridge is disconnected (#890, #928).
  • Isolate Discord connection failures so one IM transport cannot take down the aggregate IM/workbench runtime (#914).
  • Settle multiple Claude Activity outputs together, deliver delegated lane callbacks once, and ensure terminal Agent Run content uses the turn’s final assistant text rather than a tool label (#912, #919, #923).
  • Preserve back navigation after iOS PWA route restoration by pushing the remembered route instead of replacing the only history entry (#927).
  • Fix Show Page app/Dock drag handling, iframe pointer capture, icon resolution through Vite publicDir, minimized-window icons, tile styling, and related visual details (#909, #917, #921).
  • Guard Git Runtime release assets and recover missing or partial runtime releases from verified backups (#930).

Security

  • Make first-time protected Vault establishment atomic under concurrent requests so only one initializer can create the protected Vault (#863).
  • Fix the private Show Page /show/<id>/ surface mount and confine public symlink escapes through the Vite @fs gate (#880).

Full Changelog: https://github.com/avibe-bot/avibe/compare/v3.0.5...v3.0.6


亮点

  • 现在可以把 Agent 生成的 Show Page 当成 Workbench 里的应用来用:固定到 Dock,在 App Library 管理安装和停靠,桌面窗口化、移动端全屏打开,用 ⌘K 搜索、Option+1-9 切换,还能改名并使用页面自己的图标。
  • Show Page 工作区更可靠,也更少依赖宿主环境:Avibe 会在 Agent 回合前后为工作树打 Git checkpoint,覆盖后台回调;需要时使用校验过的内置 Git;新页面则从最小多页脚手架和实时占位页开始。
  • Agent Session 对后台任务和运行时切换的处理更稳:支持全双工输出、Activity 恢复、有界滚动重启、统一终态错误处理,并修正 Claude/Run 回调结算,减少结果丢失、重复或被工具标签误覆盖的情况。
  • Web Workbench 的日常体验更顺手:Files 支持内容搜索、批量操作、更安全的复制/移动/重复和预览优先打开;Editor/Terminal 有持久字体大小控制;图片预览可缩放拖拽;iOS PWA 冷启动会回到上次页面。

变更

新增

  • 支持全双工 Session 输出和 Activity 恢复,后台任务可以在原回合结束后继续回报,并在重启后恢复结算 (#864, #873)。
  • 为 Show Page 工作区加入平台托管的 Git checkpoint,覆盖 IM、Workbench、定时任务、watch、Agent Run 等后台回合 (#869, #875)。
  • 加入托管且可校验的内置 Git Runtime,并接入 Avibe 的 Git 解析链路,按内置 → 系统 → 降级的顺序回退 (#871, #879)。
  • 为 Claude、Codex、OpenCode 加入有界滚动重启:已有回合先排空,新任务等待,刷新后的 runtime 就绪后再恢复 (#872)。
  • 支持将 Show Page 固定为 Dock 应用,并加入 App Library、移动端 Apps 抽屉、应用搜索、Dock 快捷键、AI 页面重命名、跳转聊天、页面图标、图标上传/编辑以及 Dock/窗口细节优化 (#892, #899, #901, #902, #903, #904, #905, #906, #907, #916)。
  • Files 应用新增复制能力、内容搜索、多选批量操作、移动端收藏、更安全的移动/重复冲突处理,以及统一的预览优先打开逻辑 (#885, #886, #889, #895)。
  • Terminal 新增字体快捷键和移动端粘贴键;Editor 新增字体大小控制、设置弹层和更真实的界面状态;共享图片预览支持缩放与拖拽 (#887, #888, #893, #894)。
  • Telegram Bot 启动时自动同步原生命令菜单,并注册英文和中文命令说明 (#884)。
  • 远程访问新增 Cloudflare Tunnel 质量监测,并可在链路退化时用同一 tunnel 做路由恢复 (#911)。
  • iOS 独立 PWA 冷启动时可恢复到上次访问的规范页面 (#925)。

调整

  • 新建 Show Page 工作区改为最小占位页加无依赖多页路由,长时间未生成时再显示可复制的提醒,不再塞入厚重 demo (#877, #896, #900)。
  • 保存 setup/settings 中影响 agents.* 的配置后,只通过统一入口协调一次后端 runtime 刷新,不再由页面各自补重启 (#926)。
  • 统一 Show Runtime、Git Runtime、tmux、avault、各类 bootstrap 安装器的下载重试策略和 Doctor 诊断/修复入口 (#913)。
  • Workbench Chat 的后台活动状态改成紧凑的上下文 pill,不再显示成整行系统横幅 (#910)。
  • Show Pages 清单改为 Workbench 级共享存储,合并并发刷新并使用 stale-while-revalidate,减少重复请求和图标闪烁 (#929)。

修复

  • Claude 安全 fallback 重试会在 Web 和 IM 中显示非终止通知,并保持关联到当前回合 (#861)。
  • Harness watch 的保存工作目录消失时,只停止受影响的 watch,并通知关联的 Agent Session (#868)。
  • 全页 Editor 有未保存内容时,侧边栏、移动端导航、代码导航调用和浏览器/系统返回都会先确认 (#870)。
  • 统一 Claude、Codex、OpenCode 的终态后端失败处理,同时保留诊断、重试语义和幂等 Run 完成逻辑 (#878)。
  • Avibe Cloud ID token 校验允许 30 秒有界时钟偏差,避免轻微时间差导致有效登录被拒 (#883)。
  • 修复 Vaults 移动端头部布局,并且只有事件桥断开时才退回轮询待处理请求 (#890, #928)。
  • 隔离 Discord 连接失败,单个 IM 传输异常不会拖垮整体 IM/workbench runtime (#914)。
  • 修复 Claude 多个 Activity 输出的批量结算、委托 lane 回调重复投递,以及终态 Agent Run 内容被工具标签覆盖的问题 (#912, #919, #923)。
  • iOS PWA 恢复页面时保留返回栈,不再替换掉唯一的历史记录 (#927)。
  • 修复 Show Page 应用/Dock 拖拽、iframe 指针捕获、Vite publicDir 图标解析、最小化窗口图标、tile 样式等细节 (#909, #917, #921)。
  • 为 Git Runtime 发布资产增加守护检查,并可从已校验备份恢复缺失或不完整的 runtime release (#930)。

安全

  • 首次建立受保护 Vault 时改为并发原子操作,确保只有一个初始化者能完成创建 (#863)。
  • 修复私有 Show Page /show/<id>/ 挂载问题,并通过 Vite @fs gate 约束 public symlink 逃逸 (#880)。

Full Changelog: https://github.com/avibe-bot/avibe/compare/v3.0.5...v3.0.6

Security Fixes

  • CVE‑AVIBE‑2025‑001: Atomic protected Vault establishment prevents concurrent creation races (#863)
  • CVE‑AVIBE‑2025‑002: Fixed private Show Page `/show/ /` mount and confined public symlink escapes via Vite `@fs` gate (#880)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Avibe

Get notified when new releases ship.

Sign up free

About Avibe

All releases →

Related context

Earlier breaking changes

  • v3.0.5 Removed protected Vault password factor path; now Passkey‑only for setup/unlock.
  • v3.0.5 Changed `vibe agent run --session-id` to target existing sessions and reject mutation flags.
  • v3.0.5 Replaced `vibe vault request --skill` with JSON spec via `--spec`/`--spec-json`.
  • v3.0.5 Removed `vibe vault set`; Vault creation now requires browser‑side sealing instead of plaintext values.

Beta — feedback welcome: [email protected]