- iOS: restore first-use Contacts, Calendar, and Reminders permission prompts and add Privacy & Access status/actions in Settings. Thanks @BunsDev.

- Canvas: return not found for malformed percent-encoded Canvas/A2UI/document asset paths and keep decoded parent traversal blocked before path normalization.

- Telegram: allow trusted local Bot API media files whose filenames start with dots instead of falling back to remote download.

- Agents: remap injected context files under dot-dot-prefixed workspace directories when a run switches to an effective sandbox workspace.

- Agents: allow dot-dot-prefixed filenames such as `..note.txt` through sandbox FS bridge, remote sandbox reads, and apply_patch summaries without mistaking the name for parent traversal.

- CLI/migrate: hide per-item source/plugin hints on non-conflicting Codex skill and plugin selection prompts, keeping the hint text reserved for rows that actually need attention. Thanks @sjf.

- Codex harness: treat high-confidence app-server OAuth refresh invalidation as a terminal auth-profile failure, stopping repeated raw token-refresh errors without turning entitlement or usage-limit payloads into re-auth prompts.

path: "/real/workspace/nested/TOOLS.md",

content: "tools",

},

{

path: "/real/workspace/..context/USER.md",

content: "dot-prefixed context",

},

{

path: "/outside/README.md",

content: "outside",

path: "/sandbox/workspace/nested/TOOLS.md",

content: "tools",

},

{

path: "/sandbox/workspace/..context/USER.md",

content: "dot-prefixed context",

},

{

path: "/outside/README.md",

content: "outside",

return !isSubagentSessionKey(sessionKey) && !isAcpSessionKey(sessionKey);

}

function isRelativePathInsideOrEqual(relativePath: string): boolean {

return (

relativePath === "" ||

(relativePath !== ".." &&

!relativePath.startsWith(`..${path.sep}`) &&

!path.isAbsolute(relativePath))

);

}

export function remapInjectedContextFilesToWorkspace(params: {

files: EmbeddedContextFile[];

sourceWorkspaceDir: string;

}

return params.files.map((file) => {

const relative = path.relative(params.sourceWorkspaceDir, file.path);

const canRemap = relative === "" || (!relative.startsWith("..") && !path.isAbsolute(relative));

const canRemap = isRelativePathInsideOrEqual(relative);

return canRemap

? {

...file,