Upstream changes detected: ACP spec, Gemini CLI, Codex CLI (App Server Protocol), GitHub Copilot CLI, Qwen Code

[github-actions]

This issue was opened automatically by upstream-watch.yml on 2026-07-27 because at least one upstream project this plugin depends on shipped a new release.

Detected changes

ACP spec — schema-v1.19.0 → schema-v1.20.0

• Release: Schema v1.20.0 (published 2026-07-21)
• Why this matters for the plugin: Defines the JSON-RPC methods the plugin's acp-client.mjs implements. Spec changes can introduce new methods we should handle (e.g. terminal/*, session/request_permission, cursor/ask_question).

Release notes excerpt

Added

• (unstable) add tool call name (#1752)

Gemini CLI — v0.51.0 → v0.52.0

• Release: Release v0.52.0 (published 2026-07-22)
• Why this matters for the plugin: Drives plugins/multi/scripts/lib/adapters/gemini.mjs. Watch for changes to ACP handshake, model alias resolution, MCP support, or new approval modes.

Release notes excerpt

What's Changed

• Refactor: exclude transient CI configuration files from workspace context by @DavidAPierce in Refactor: exclude transient CI configuration files from workspace context google-gemini/gemini-cli#28216
• feat(caretaker-triage): add triage worker core foundational modules by @chadd28 in feat(caretaker-triage): add triage worker core foundational modules google-gemini/gemini-cli#28163
• feat(caretaker-egress): implement octokit github action handler for egress service by @chadd28 in feat(caretaker-egress): implement octokit github action handler for egress service google-gemini/gemini-cli#28303
• chore(release): bump version to 0.52.0-nightly.20260707.g27a3da3e8 by @gemini-cli-robot in chore(release): bump version to 0.52.0-nightly.20260707.g27a3da3e8 google-gemini/gemini-cli#28323
• Changelog for v0.51.0-preview.0 by @gemini-cli-robot in Changelog for v0.51.0-preview.0 google-gemini/gemini-cli#28320
• Changelog for v0.50.0 by @gemini-cli-robot in Changelog for v0.50.0 google-gemini/gemini-cli#28322
• fix(core-tools): bypass LLM correction for JSON and IPYNB files in write_file and replace by @amelidev in fix(core-tools): bypass LLM correction for JSON and IPYNB files in write_file and replace google-gemini/gemini-cli#28223
• fix(core): use unambiguous previous intent label in fallback summary by @amelidev in fix(core): use unambiguous previous intent label in fallback summary google-gemini/gemini-cli#28343
• feat(caretaker-triage): implement main worker execution loop and egress action publisher by @chadd28 in feat(caretaker-triage): implement main worker execution loop and egress action publisher google-gemini/gemini-cli#28306
• fix(privacy): show a clear message when the account has no Code Assist tier by @ompatel-aiml in fix(privacy): show a clear message when the account has no Code Assist tier google-gemini/gemini-cli#28304
• fix(core): enrich shared project quota limit errors with setup hint by @amelidev in fix(core): enrich shared project quota limit errors with setup hint google-gemini/gemini-cli#28391
• fix(a2a-server): ensure task cancellation aborts execution loop by @luisfelipe-alt in fix(a2a-server): ensure task cancellation aborts execution loop google-gemini/gemini-cli#28316
• fix(core): simplify plan mode write policy to support relative paths by @DavidAPierce in fix(core): simplify plan mode write policy to support relative paths google-gemini/gemini-cli#28398
• feat(core): Bump node google-auth-library version to 10.9.0 by @jerrylin3321 in feat(core): Bump node google-auth-library version to 10.9.0 google-gemini/gemini-cli#28385
• chore/release: bump version to 0.52.0-nightly.20260715.gfa975395b by @gemini-cli-robot in chore/release: bump version to 0.52.0-nightly.20260715.gfa975395b google-gemini/gemini-cli#28402
  Full Changelog: google-gemini/gemini-cli@v0.51.0...v0.52.0

Codex CLI (App Server Protocol) — rust-v0.144.6 → rust-v0.145.0

• Release: 0.145.0 (published 2026-07-21)
• Why this matters for the plugin: Drives plugins/multi/scripts/lib/adapters/codex.mjs and app-server.mjs. Watch for sandbox mode changes, new approval policies, or app-server protocol updates.

Release notes excerpt

New Features

• Added experimental paginated thread history with efficient resume, search, persisted names, sub-agent support, and memories. (#33364, #33907, #34085, #34229, #34386)
• Expanded /import to migrate Cursor and Claude Code settings, MCP servers, plugins, sessions, commands, and project-scoped memories. (#31672, #33411, #33426, #33444)
• Added experimental Amazon Bedrock login, custom endpoint and authentication support, and GPT-5.6 Sol as the default Bedrock model. (#31327, #33170, #33175, #32288, #33695)
• Added audio inputs and tool outputs, including common local audio formats, and introduced streaming realtime V3 conversations. (#33261, #33856, #33932, #34080, #34385)
• Stabilized the opt-in multi-agent V2 experience with configurable sub-agent models, reasoning levels, concurrency, restored roles, and improved agent navigation. (#33550, #33631, #33657, #33841, #34383)
• Added secure, clickable inline visualization links in the terminal UI. (#33925, #34217, #34346)

Bug Fixes

• Editing an earlier prompt or retrying a safety-buffered turn now creates a contextual branch, preserving the original conversation, attachments, and mention bindings. (#33201, #33207, #33211)
• Improved terminal responsiveness for long conversations and streamed output through incremental Markdown rendering, fewer redraws, caching, and bounded command output. (#34045, #34049, #34216, #34223, #34359)
• Prevented slow or conflicting MCP startup and authentication flows by enforcing startup timeouts, avoiding blocking OAuth discovery, serializing refreshes, and reusing tool catalogs safely. (#32229, #32781, #32825, #33184, #33297)
• Improved Windows execution and sandbox reliability, including native exec-server sandboxing, network-proxy enforcement, hidden helper consoles, and correctly quoted hook commands. (#32849, #32857, #33926, #34423)
• Fixed compact release-metadata parsing and macOS code-mode installation, with an in-process fallback when the external code-mode host is unavailable. (#31667, #31876, #31899)
• Strengthened safety and approval handling with better forced-rm detection, consistent full-access confirmation, and preserved rejection reasons across tools. (#32989, #33464, #34400)

Documentation

• Updated the bundled OpenAI Docs skill with current GPT-5.6 model resolution, prompting, and migration guidance across macOS, Linux, and Windows. (#31842, #33121)

Chores

• Migrated bundled GPT-5.4 selections and internal uses to the corresponding GPT-5.6 Terra and Luna variants. (#33173)
• Reduced startup and large-context overhead with concurrent skill/plugin discovery and more efficient remote compaction. (#31566, #33369, #33423, #34431)
• Updated the packaged ripgrep binary to 15.2.0. (#34384)

Changelog

Full Changelog: openai/codex@rust-v0.144.0...rust-v0.145.0

• #31667 fix: parse compact release metadata in installer @efrazer-oai
• #31362 core: route realtime and memories through HTTP client factory @bolinfest
• #31566 perf(skills): reuse walk inventory for host loading @jif-oai
• #31576 Bound exec-server process event reordering @jif-oai
• #31756 test(skills): assert symlinked metadata loading @jif-oai
• #31581 Resolve selected capability roots without starting executors @jif-oai
• #31789 Stop persisting RMCP service traces @jif-oai
• #31792 Summarize streamed response item logs @jif-oai

…(release notes truncated; click the link above for the full text)

GitHub Copilot CLI — v1.0.71 → v1.0.75

• Release: 1.0.75 (published 2026-07-24)
• Why this matters for the plugin: Drives plugins/multi/scripts/lib/adapters/copilot.mjs. Watch for ACP changes, slash-command additions/removals, or auth flow changes.

Release notes excerpt

2026-07-24

• Add support for Claude Opus 5

Qwen Code — v0.20.0 → v0.21.0

• Release: Release v0.21.0 (published 2026-07-24)
• Why this matters for the plugin: Drives plugins/multi/scripts/lib/adapters/qwen.mjs. Watch for ACP support changes (the --acp flag graduated from --experimental-acp recently).

Release notes excerpt

Highlights

See the complete change list below.

Breaking Changes

No known breaking changes.

Complete Change List

Features

• feat(web-shell): add workspace selector button with add/switch dropdown in composer toolbar (#7390) by @water-in-stone
• feat(web-shell): show subagent sessions in detail panel (#7380) by @ytahdn
• feat(web-shell): add rendered file previews (#7467) by @ytahdn
• feat(core): add memory recall delivery telemetry (#7393) by @ZijianZhang989
• feat(core): keep completed background agents resident (#7426) by @DragonnZhang
• feat(serve): support forced MCP reconnects (#7488) by @BZ-D
• feat(prompts): allow overriding core identity via QWEN_SYSTEM_IDENTITY_MD (#7478) by @zjgzx1988
• feat(autofix): stop a PR that fails to push for N rounds in a row (#7482) by @wenshao
• feat(core): restore background agent roster (#7459) by @DragonnZhang
• feat(cli): support custom skill directories via settings (#7395) by @qwen-code-dev-bot
• feat(cli): preserve semantic text when copying VP selections (#7286) by @chiga0
• feat(web-shell): add selective Shadow DOM isolation (#7551) by @ytahdn
• feat(web-shell): add renderChatHeader slot for custom session header (#7553) by @yuanyuanAli
• feat(serve): add workspace-level generation (#7552) by @ytahdn
• feat(serve): persist workspace channel configuration (#7514) by @qqqys
• feat(core): propagate trusted daemon invocation context (#7279) by @callmeYe
• feat(cli): post the review body bilingually when the PR description is Chinese (#7564) by @wenshao
• feat(autofix): auto-rerun a check that died on infrastructure, once (#7562) by @wenshao
• feat(core): Align GenAI telemetry with ARMS (#7536) by @doudouOUC
• feat(web-shell): add workspace agent management (#7572) by @ytahdn
• feat(autofix): update a stale base when the gate rejects a behind-main fix (#7595) by @wenshao
• feat(sdk-java): Add daemon transport (#7463) by @doudouOUC
• feat(autofix): auto-update a PR red only from a stale, since-fixed base (#7554) by @wenshao

…(release notes truncated; click the link above for the full text)

Also worth checking (manual — Copilot, please research these too)

• Cursor agent CLI — changelog: https://cursor.com/changelog · forum (bug reports): https://forum.cursor.com/c/bug-report/6
  • Drives plugins/multi/scripts/lib/adapters/cursor.mjs. The plugin currently works around the 2026.04.17-787b533 ACP regression (see maybeWarnAboutCursorVersion and ensureCursorAllowlist). When Cursor ships a fix, both workarounds can likely be simplified or removed.

Plugin files most likely to need updates

• plugins/multi/scripts/lib/acp-client.mjs (shared ACP JSON-RPC client; buildAutoApproveRequestHandler)
• plugins/multi/scripts/lib/acp-terminals.mjs (client-side terminal services)
• plugins/multi/scripts/lib/mcp-servers.mjs (MCP wiring for ACP session/new)
• plugins/multi/scripts/lib/adapters/{codex,gemini,cursor,copilot,qwen}.mjs (per-CLI adapters)
• plugins/multi/scripts/multi-cli-companion.mjs (companion runtime + dispatch)

What I'd like you to do, @copilot

1. Read the linked release notes for each detected change above, plus the manual-reference changelogs.
2. Compare what changed against the relevant adapter / shared code in this repo. Look specifically for:
   • New ACP methods we should handle in acp-client.mjs's buildAutoApproveRequestHandler
   • Renamed / deprecated CLI flags or model IDs hardcoded in any adapter
   • New CLI capabilities that obsolete a workaround we currently ship (e.g., the Cursor 2026.04.17 regression workaround in cursor.mjs — check if a newer Cursor release fixes it, and if so, propose removing maybeWarnAboutCursorVersion and the allowlist-injection or scoping it tighter)
   • Breaking changes that would silently break the plugin
3. For each change that warrants action, open a focused PR against master with the minimal fix. Reference the upstream release / commit / forum thread in the PR description.
4. If a detected change does NOT need any plugin update, reply on this issue with a short note saying "no plugin updates needed for X — reason: …" and close it.
5. If something is ambiguous (you can't tell from release notes whether the plugin is affected), ask in a comment rather than guessing.

You may use ACP_TRACE=1 and the rest of the diagnostic patterns documented in plugins/multi/skills/customize/SKILL.md if you want to verify behavior empirically.

---

State tracked in .github/upstream-state.json — bumped by this same workflow. If you want to suppress a noisy upstream from this watch, edit .github/scripts/upstream-watch.mjs.