- [Claude Cowork Reactive Compact State Machine & Tail Directive Verification] Introduce Pure One-Shot Consumption State Machine and Restrict Prompt Verification to Tail Directive (Fixes #3563, Thanks to @cubelikeplayDaniel):
- Pure One-Shot State Machine Eradicates Lifetime Immunity: Thoroughly resolved the vulnerability where Claude Desktop permanently embeds
<summary>into message 0 after initial compaction, falsely granting permanent immunity to subsequent turns up to 357k tokens / 718 messages. Refactored into an in-memory single-use flag state machine (DashSet) with zero artificial TTL, perfectly handling laptop sleep/wake scenarios while reliably triggering round 2 and round 3 compactions when context inflates again. - Tail Directive & Compaction Header Verification: Narrowed prompt text scanning in
is_compaction_requestfrom global messages to solely the active tail message (messages.last()) alongside the officialx-stainless-helper: compactionheader, completely eliminating false positives from historical summary text in message 0.
- Pure One-Shot State Machine Eradicates Lifetime Immunity: Thoroughly resolved the vulnerability where Claude Desktop permanently embeds
- [Thought-Only Stream Healing Gatekeeper] Pipeline-First Empty Response Healing Standardized with task ready Fallback:
- Automatic Non-Empty Content Gate: Safeguarded streaming responses where models output thinking blocks without accompanying visible text, automatically injecting standard fallback
"task ready"at stream termination to prevent frontend rendering breaks or client-side empty-body exceptions.
- Automatic Non-Empty Content Gate: Safeguarded streaming responses where models output thinking blocks without accompanying visible text, automatically injecting standard fallback
- [Antigravity CLI (agy) Native Token Sync & Millisecond Expiry Defense] Synchronize CLI Native Credentials & Reuse Keyring Parser (Fixes #3567, Thanks to @brushax):
- Seamless CLI Native File Credential Sync: Added cross-platform bidirectional synchronization for
~/.gemini/antigravity-cli/antigravity-oauth-token, keeping official CLI tools (agy) in perfect lockstep with gateway account rotations. - Millisecond Timestamp Protection: Fortified credential expiry parser against millisecond timestamps, preventing premature token invalidation and integer overflows.
- Seamless CLI Native File Credential Sync: Added cross-platform bidirectional synchronization for
- [Claude Cowork 自愈状态机闭环与末尾指令确权] 引入纯单次消费型自愈状态机，并限定末尾指令与专属 Header 杜绝误判 (Fixes #3563, Thanks to @cubelikeplayDaniel):
- 纯单次状态机歼灭终身免死: 彻底攻克 Claude Desktop 压缩后首条消息固化
<summary>导致后续数百轮会话被错误静态豁免、膨胀至 357k 仍不自愈的漏洞。重构为纯单次消费型状态机（DashSet），首条业务续写原子核销放行，绝不人为设限超时定时器（0 TTL），跨设备合盖休眠唤醒零误杀；后续轮次再次超限坚决返回 400 假报警，驱动客户端顺利进入第 2、第 3 轮深度自愈。 - 末尾消息与专属 Header 确权加固: 将
is_compaction_request的 Prompt 文本扫描从全局收窄为仅检测当前末尾消息（messages.last()）和专属头x-stainless-helper: compaction，彻底切断历史第 0 消息旧<summary>造成的请求属性混淆。
- 纯单次状态机歼灭终身免死: 彻底攻克 Claude Desktop 压缩后首条消息固化
- [纯思考空回复流式自愈门禁] 进站流水线实现纯思考回复智能兜底，统一正文为 task ready (Pipeline First):
- 空正文自动保全门禁: 针对特定模型在开启深度思考时仅输出思考块却缺失正文文本的边缘情况，流水线统一在流式收尾处注入中性合规兜底文本
"task ready"，彻底解决部分客户端由于正文为空产生的界面渲染中断或解析异常。
- 空正文自动保全门禁: 针对特定模型在开启深度思考时仅输出思考块却缺失正文文本的边缘情况，流水线统一在流式收尾处注入中性合规兜底文本
- [Antigravity CLI (agy) 原生凭证双向同步与毫秒级过期防御] 补齐原生凭证文件同步并复用 Keyring 解析器 (Fixes #3567, Thanks to @brushax):
- CLI 原生凭证文件全链路打通: 跨平台实时双向同步原生凭证文件
~/.gemini/antigravity-cli/antigravity-oauth-token，使官方 CLI 工具（agy）与网关账号切换完全同频。 - 毫秒级时间戳防溢出防御: 修复凭证过期时间解析逻辑，严密防范毫秒级时间戳（Unix timestamp in ms）被当作秒级处理导致的凭证提前过期或整数溢出。
- CLI 原生凭证文件全链路打通: 跨平台实时双向同步原生凭证文件
What's Changed
- fix(integration): sync agy native file credentials (~/.gemini/antigravity-cli/antigravity-oauth-token) by @brushax in #3567
Full Changelog: v4.8.6-beta.8...v4.8.6-beta.9