Fx v0.0.5 Release Notes — What's New

Breaking Changes

Host command execution: Run approved captured, background, and monitor commands as ordinary host subprocesses, and retire sandbox configuration, status fields, and commands
Interactive provider switching: Move provider selection to /setup and remove the /provider slash command while keeping the top-level fx provider command

New Features

Codex subscriptions: Sign in with an eligible subscription through fx login codex, then use authenticated Codex models for interactive sessions, fx ask, native ACP, images, subagents, and automatic reviews
Grok subscriptions: Sign in with an eligible Grok subscription through fx login grok, then use authenticated xAI models, effort levels, images, local tools, persistent sessions, and automatic reviews
Workspace status line: Opt in to the active workspace path and Git branch through /settings, /statusline workspace, or statusLine.workspace
fx-native workspace skills: Discover project skills from .fx/skills before other workspace and compatibility roots
External skill authorities: Allow symlinked skills under explicitly trusted external directories through FX_SKILL_SYMLINK_AUTHORITIES

Improvements

Provider setup: Activate a catalog-valid model after subscription login, reauthenticate logged-out providers through /setup, and show Codex authorization as a clickable terminal link
Provider model catalogs: Show provider-advertised models, context windows, and effort levels in /model and the status line
Session listings: Show saved session names, readable UTC timestamps, language names, and singular turn counts while preserving the existing JSON fields
Session cache reads: Keep session listings and latest-session resume responsive while another session defers cache publication
Terminal tab titles: Label interactive tabs with the session or workspace and active model, keep them current across rename, resume, and model changes, and clear them on exit
Terminal activity: Keep each command or shell attached to its terminal activity row through completion, distinguish graceful close from force close, and hide no-op cd . && prefixes
Terminal action arguments: Advertise only the fields relevant to the selected action and limit unsaved fx ask sessions to terminal.exec
Auto mode reads: Run routine read-only commands and hardened Git inspection directly without automatic review
Automatic denial recovery: Return destructive actions to the agent for replanning and finish repeated no-progress denials as normal assistant output instead of opening a permission prompt
One-off subagents: Keep active one-off subagents visible, deliver one final result, and retire them after completion while leaving persistent subagents reusable
Startup preferences: Show saved reasoning effort and Fast mode immediately while model capabilities load
Dev build identity: Add the commit and [dev] marker to dev-channel welcome headers without changing stable release headers
MCP reload feedback: Replace internal health details with concise server availability and recovery guidance
Help layout: Keep command descriptions close to command names on wide terminals
Native binary size: Reduce the macOS arm64 release footprint while preserving existing behavior
Stable upgrades: Restore forward-only version ordering across manual, automatic, and Ctrl+G upgrades

Bug Fixes

Oversized images: Normalize large macOS image snapshots without changing the originals and reject attachments locally when a bounded snapshot cannot be prepared
Corrupt memory stores: Report malformed, oversized, or unreadable stores and preserve their original bytes instead of overwriting them
Non-regular file reads: Reject FIFOs and other non-regular read_file targets before they can block
Malformed tool loops: End a turn after three consecutive malformed-only tool batches and reset recovery after a valid batch
Terminal null placeholders: Treat textual "null" values as absent for unused terminal fields while preserving real command text that contains the word
Terminal keyboard input: Ignore unknown completed escape sequences and handle Ghostty kitty Escape reports with Caps Lock, Num Lock, and event suffixes
Credential fallback: Continue to a stored API key when saved fx login credentials cannot load or refresh while keeping the login failure available for diagnostics
Vision recovery: Retry replay-safe requests once after a post-Vision assistant-prefill rejection
Thinking status: Keep the Thinking indicator and elapsed timer visible while automatic command review runs
Terminal helper compatibility: Reject unsupported start, signal, and force-close requests from stale terminal helpers without losing unrelated sessions
WASM project context: Skip unavailable local project-instruction probes in browser hosts while preserving host-supplied context
Idle terminal traffic: Stop polling the terminal theme while idle and continue retinting after supported theme notifications

Security

Command approval patterns: Restrict wildcard command allows to static shell words and keep destructive shell commands and file deletion outside automatic review
macOS login storage: Store native fx login sessions in Keychain with verified migration, refresh, restart, and logout behavior
MCP configuration writes: Save ~/.fx/mcp.json atomically with private permissions, reject linked targets, and preserve the previous configuration when a write fails
MCP session retirement: Keep retired HTTP session IDs alive until in-flight requests drain
Provider response limits: Reject oversized Codex and Grok catalogs, streams, tool data, and replay state while keeping later input usable
ACP permission validation: Validate permission input before writing JSON-RPC frames