Skip to content

Agent Sessions

v3.6.2 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 3mo Developer Productivity
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 2 known CVEs

Topics

agentic-workflow ai ai-coding-agents anthropic claude-code codex
+14 more
codex-cli copilot-cli cursor-agent developer-tools hermes-agent local-first macos openai openclaw opencode session-history session-management transcript-search usage-tracking

Affected surfaces

auth rbac

Summary

AI summary

Session list hierarchy correctly nests older Codex role subagent sessions after gaps, and transcript rendering reduces memory spikes.

Full changelog

Added

  • OpenCode: Renamed session titles (set via /rename) are now persisted as custom session titles, matching Claude and Codex behavior.

Fixed

  • Session list hierarchy now nests older Codex role subagent sessions that record only source.subagent when a same-workspace parent can be inferred, even after multi-hour gaps.
  • Resume launch AppleScript now receives commands via osascript argv instead of source interpolation, reducing script-injection surface.
  • Transcript rendering now uses a bounded transcript cache and preloads Whole Session Raw/Pretty content outside body to reduce memory spikes and UI stutter on large sessions.
  • Claude OAuth shared cache writes now apply restrictive POSIX permissions on cache directory and files.
  • IndexDB bootstrap now configures busy_timeout and runs schema/bootstrap migration steps inside a single transaction for safer concurrent startup.

Security Fixes

  • Resume launch AppleScript now receives commands via `osascript` argv, reducing script‑injection surface
  • Claude OAuth shared cache writes apply restrictive POSIX permissions on cache directory and files
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Agent Sessions

Get notified when new releases ship.

Sign up free

About Agent Sessions

Local-first macOS app to browse, search, analyze, and resume supported AI coding-agent session history across Codex, Claude Code, OpenCode, Cursor Agent, Hermes, OpenClaw, Copilot CLI, and more.

All releases →

Related context

Beta — feedback welcome: [email protected]