Updates the bundled agent runtimes and hardens remote connections and file transfers.
- Codex CLI 0.155.1 (from 0.153.2).
- Claude Code 2.1.278 and Agent SDK 0.3.278 (from 2.1.260 / 0.3.260), synchronized across the desktop bundle, Node sidecar, and managed runtime catalog. Claude Code supports
AGENTS.mdas the default fallback when a project has noCLAUDE.md; provider restrictions and/configbehavior follow Anthropic's release notes. - Enforce deadlines for remote handshakes and login, including clients sending partial frames or pings, so unauthenticated sockets release their connection slots.
- Resolve symlink/junction targets before checking sensitive paths for file transfers.
- Limit decompressed remote messages to 64 MiB and close connections sending invalid frames.
- Add an external Windows diagnostic script for sustained high memory use or native window hangs, with bounded log tails and thread minidumps.
Validated locally with TypeScript/build checks, sidecar and Codex regression tests, runtime packaging checks, 512 Rust tests, 3 headless remote integration tests, and a real Codex 0.155.1 app-server initialization.
Full Changelog: v3.2.11-pre.2...v3.2.11-pre.3