Alibaba Cloud Linux:ReleaseNotes

publish information

Release time: 2026-08-31

Image ID: aliyun_4_x64_20G_agentic_alibase_20260829.vhd

Update content

Agentic OS 1.3 is based on Alibaba Cloud Linux 4.0.4. Core component function updates:

• cosh-ng 0.22.2:

  • Added a native shell integration mode and Shift+Tab shell-only switching. Terminal output is attributed by card prefixes, and the Enhanced Assisted mode no longer overrides user-defined traps and shell options.

  • Transcript memory for long sessions is now bounded and run_command output is capped at 32 MB to prevent OOM. Interactive echo is reduced to sub-millisecond latency, and high-frequency idle polling is eliminated.

  • Added automatic discovery of system extensions outside package-managed directories. /hooks enable|disable now supports shell/agent layer disambiguation.

  • Fixed terminal display and input routing issues, including internal wrapper lines being displayed after approval, slash sentinel lines leaking, batch pastes being misrouted, Chinese prompts losing AI routing, slash commands not being recorded in history, and the terminal remaining in raw mode after an interruption.

  • Fixed security and audit issues, including hooks in trust mode bypassing execution through staging, approval batch race conditions, decision: null being misjudged as allowed, and precmd markers forging exit codes.

  • Fixed installation and compatibility issues, including shells left hanging after RPM uninstallation, gateway startup failures on systemd 255, false reports from dnf --dry-run, and missed detection of awk system() calls.

• agent-sec-core 0.11.1:

  • Narrowed the invisible-character injection rules so that emoji ZWJ, ZWNJ, and BOM are no longer misjudged as critical injections;

  • The skill ledger no longer reports a failure when it skips read-only system skills;

  • Fixed issues such as verify not reporting checked, passed, and failed counts or distinguishing the no-candidate case, mandatory access control for files created by the CLI, daemon.health reporting a false status, and configuration of non-loopback model service addresses.

• agentsight 0.11.2:

  • After an SSL uprobe is unregistered by the kernel, it is re-attached automatically based on its TTL without requiring a restart;

  • Supports capturing LLM traffic of Bun-built Claude Code (2.1.113 or later);

  • Fixed the inconsistency between the grouped count and the total count of interruption events.

• tokenless 0.7.14:

  • Added a unified compression entry point that merges schema, response, and TOON processing into a single subprocess call and a single size check;

  • stats summary now excludes dry runs and adds metrics such as net savings, retrieve hits, and truncation attribution (JSON schema 1.1). Truncation markers now embed a retrieve command that can be run directly;

  • Fixed issues such as duplicate compression in the Codex integration increasing the model-visible prompt and inconsistent TOON handling for small payloads.

• anolisa 0.3.8:

  • Provides prebuilt CLI archives for Linux x64/arm64 and macOS arm64;

  • Fixed raw installation incorrectly expanding ${VAR} in shell and systemd files, so the cosh-ng gateway service template can be installed properly.

• os-skills 0.6.3:

  • The RPM now declares anolisa-component(os-skills), so anolisa upgrade can still upgrade the component when the component index is unavailable.

• ws-ckpt 0.4.5:

  • Added a protected checkpoint protocol. Snapshots are fenced by storage identity, and the state can be verified after a crash;

  • Added support for containerized deployment as a Kubernetes sidecar;

  • Reduced the checkpoint latency of the loop device backend under concurrent I/O to as low as one fifth of the previous value;

  • Fixed dangling images and loop devices left behind after a failed bootstrap. An explicit error message is now printed when startup fails, instead of exiting silently;

  • config --global now verifies that the setting takes effect on the daemon. The shared volume for sidecar global configuration and the error messages for containerized scenarios have been added;

  • Fixed intermittent bootstrap failures when the loop device is in use.

• skillfs 0.4.2:

  • Added Kubernetes sidecar deployment, in which a privileged SkillFS container provides a FUSE view to unprivileged workloads. Workloads can also read the paths provided by skill-discover;

  • Added optional mutual HMAC-SHA256 authentication. --trusted-peer-key-file and --notify-auth-key-file protect the control socket and the notify socket across container namespaces, while the existing host authentication method remains unchanged;

  • Startup reconciliation now retries with backoff when the notify daemon fails temporarily, so hidden skills can recover automatically;

  • Fixed ENOENT failures when writing, renaming, and syncing categorized skills in flat mode.

Core component version

publish information

Release time: 2026-08-14

Image ID: aliyun_4_x64_20G_agentic_alibase_20260813.vhd

Update content

Agentic OS 1.2 is based on Alibaba Cloud Linux 4.0.4. Core component function updates:

• cosh-ng 0.16.0：

  • Added /agent one-time Agent request command,/draft Command functions merged /agentand hide /draft from help and completion

  • Fixed issues such as input wait timeout being affected by system clock adjustment, SSE event decoding not being strict, sensitive files being mistakenly written, raw mode remaining after terminal exit, temporary file paths being predictable, slash commands only prompting the first match, etc.

• agent-sec-core 0.10.1：

  • Unify the security hook switches of each Agent framework (capabilities such as code scanning, prompt word scanning, and observability can all be controlled by environment variables);

  • OpenClaw code scanning adds interception mode;

  • Prompt word scanning covers more inbound text fields;

  • The Skill ledger supports read-only analysis, including checking unpackaged skill directories, and verifying manifest signatures before loading skill packages;

  • Observation events are now filtered by session and run.

• agentsight 0.10.1：

  • Added case containment process for security events (policy handover, no-window replacement, dedicated API and Dashboard page);

  • Added system audit protocol, event storage and audit dashboard, and split the audit service into independent modules;

  • Added ActPlane risk enforcement capabilities (enforcer service, file access hardening, law enforcement dashboard);

  • Supports converting Codex running records into a unified trajectory format;

  • HTTPS raw events start reporting process information.

  • Fix the round being closed prematurely after the tool is called,pause_turn It was misjudged as an abnormal interruption, the fragmented zstd response could not be streamed and decoded, the QwenCode trace data was inaccurate, and the session was lost after cosh restart.

• tokenless 0.7.6：

  • Added OpenCode Adapter to support command rewriting, Schema compression, response compression and other capabilities;

  • Qoder Adapter migrates to the native plug-in and Hook mechanism, and the compression results can directly replace the original tool output;

  • Fixed issues such as the inability to execute rtk in a restricted PATH environment and the loss of attribution information when calling across Hooks.

  • Improve the installation and upgrade process of the old version, be compatible with /usr/local layout, RPM upgrade mode, and automatically clean up the legacy document files;

  • TOKENLESS_DATA_DIR supports using absolute directories outside the user's Home;

  • Temporarily hard-disable the Tool Ready pre-call checking, automatic repair and blocking of all Adapters to avoid incorrect judgments that prevent normal tasks. Other compression and attribution functions are not affected;

  • Fix the problem of JSON Schema Description being repeated Stash, one Retrieve can restore the original content;

  • Fixed issues such as Dry-run configuration being overwritten by environment variables and tokenless retrieve adding additional line breaks;

  • Enhance Marker scanning capabilities and complete the shared scripts required by the Codex Adapter in RPM.

• anolisa 0.2.19：

  • Improved RPM/DEB environment recognition and fixed installation failure in Debian streamlined environment.

  • Improve Adapter management: Provide re-activation prompt after update, support Qoder native plug-in, Codex Hook trust configuration and OpenClaw custom status directory.

  • Optimized integrity check: Files exceeding 2 GiB during installation are marked as degraded to avoid being misjudged as damaged.

  • anolisa list adds host platform and component availability display, and unifies the JSON response format of some legacy commands.

  • Telemetry configuration migrated from SLS_PROJECT to SLS_PROJECT_PREFIX.

• os-skills 0.6.2：

  • Added the ktuner kernel tuning skill, which uses a deterministic rule engine to give tuning suggestions and supports one-click application and rollback;

  • Removed legacy OpenClaw, Hermes adapter scripts;

  • anolisa-guide completes the certification recovery and tamper detection instructions for the skill ledger.

Core component version

publish information

Release time: 2026-08-04

Image ID: aliyun_4_x64_20G_agentic_alibase_20260804.vhd

Update content

Agentic OS 1.1 is based on Alibaba Cloud Linux 4.0.4. Core component function updates:

• cosh-ng 0.14.0: As the next generation implementation of Copilot Shell, the capabilities of this version have been basically aligned and fully advanced - sessions can be interrupted and resumed (/session、/resume、--resume, isolated by workspace and can be viewed across directories); access DashScope prompt cache and dynamically adjust the output upper limit according to the model, significantly reducing Token overhead; newly added MCP tools and extension platforms can access external capabilities on demand; in terms of security, it provides full-link audit logs, automatic key desensitization, dangerous command segmentation risk identification and approval must reach the final state, read-only commands are automatically released, and dangerous operations only disturb users; interactive experience completes multi-line input, ESC cancellation, batch approval and cosh doctor One-click diagnosis.

  • Since Agentic OS version 1.1, cosh-ng has become the default login entrance of the system, replacing the original copilot-shell (cosh); if you need to return to the old version, you can use cosh-switch Switch anytime.

• agent-sec-core 0.9.0: Added security plug-in support for Qoder CLI and Qwen Code, covering code and prompt word scanning, PII inspection, Skill security and observability, and adding observability and pre-tool call PII checks for the Codex security plug-in; adding prompt word injection and jailbreak detection rules for Chinese scenarios, supporting custom PII regular rules, while improving the reliability of Skill security check execution and the consistency of running versions after RPM upgrades.

• agentsight 0.9.1: New optimization analysis functions (evaluate Agent trajectories from the three dimensions of accuracy/performance/cost and provide solutions), Qoder trajectory collection and ATIF v1.7 export and sub-agent topology view, cosh-ng command line discovery rules and 6 new types of interruption types, fix the problem of Anthropic SSE parsing and cache token billing, and comprehensively improve the observable analysis capabilities.

• tokenless 0.7.3: Added Qwencode adaptation, automatically discovered and locked the current version across installation layouts, fixed cosh/cosh-ng schema silent non-compression and Qoder hook path failure issues, improved compression efficiency and environmental compatibility.

• agent-memory 0.2.6: Short word LIKE search falls back to OR matching and prioritizes strong keyword hits when there are no results in strict matching, so that prompts with dense stop words can also recall relevant memories without returning empty results.

• skillfs 0.4.0: Added read-time conversion capability, conditional compilation function enabled by default, and optional OS adaptation layer (built-in Ubuntu/Alinux rules, supporting external catalog coverage) to improve the cross-release availability of the same skill. Introducing the authenticated live-source parser and notify v2 protocol, providing standardized skill identities, event types and change paths directly in events, no longer exposing backing root details, improving security.

• anolisa 0.2.15: Added phased progress feedback for installation/uninstallation; optimized the standard structure of error prompts as "reason + repair suggestions" (--json Keep the machine parsable), improve long-term task observability and problem self-location capabilities; fix the cache parsing problem of Qoder adapter; keep cosh extension and shared hook resources independent of each other.

• ws-ckpt 0.4.2: Added telemetry switch gate control for operation and maintenance log writing, which can be started and stopped on demand; fixed the problem that the.pre-init-bak temporary backup left after the initialization process was interrupted was not automatically cleaned/restored, and the snapshot initialization is more robust in interruption scenarios.

• copilot-shell 2.8.0:Export COSH_SESSION_ID Open up cross-process and MCP session associations, fix hook timeout residual processes and cosh-switch Issues requiring re-authentication after switching have been addressed, and observability and switching consistency have been improved.

Core component version

publish information

Release time: 2026-07-20

Update content

Agentic OS 1.0.1 only releases components and does not update images. How to update component referencesHow to upgrade components on the Agentic OS image

Component feature updates:

• Copilot Shell Optimize authentication loading prompts and shell error guidance to bring a smoother and more reliable interactive experience.

• AgentSight Added dashboard token authentication and conversation scoring, repaired Codex SSL/SSE capture and convergence health/metric interfaces, retained user configurations in schema migration and illegal JSON scenarios, corrected SSL attribution and strengthened lock fault tolerance, making observations more secure and accurate.

• Tokenless New tokenless_retrieve MCP services, Qoder adaptation and reversible compression are fully covered, and all adapter contract statements (including CI verification) are simultaneously completed. The test coverage rate is increased to 90%, and compression optimization and adaptation distribution are more transparent and reliable.

• AgentSecCore Added new anti-reading rules for sensitive files with Agent credentials, supporting OpenClaw cross-version compatibility, making security protection deployment more robust.

• skillfs Added Hermes nested skill layout compatibility,validate --json Output the problem skill source path, and fix the recording accuracy of SLS ops logs when the pipeline is closed/paniced early, making skill management and observability more reliable.

• agent-memory Repair the capture, recall and indexing of automatic memory (OpenClaw normalization, observe post-synchronization reconstruction, BM25 OR rollback, install.sh authorization), and strengthen hint desensitization, installation permissions and security boundaries to make long-term memory more reliable, accurate and safe.

• anolisa Comprehensively strengthens RPM life cycle management (upgrade check/application, interrupted installation repair, concurrency safety, accurate status and dry-run JSON repair), and supports Tokenless multi-frame adapter and progress, stderr output optimization, and component management is more stable and transparent.

Core component version

publish information

Release time: 2026-07-06

Image ID: aliyun_4_x64_20G_agentic_alibase_20260704.vhd

Update content

Agentic OS 1.0 is based on Alibaba Cloud Linux 4.0.3.0. Core component function updates:

• Copilot Shell This update enhances the flexibility of Hook management and supports batch enabling or disabling; optimizes the model authentication display, and improves the keyboard interaction experience, bringing a more stable, intuitive and easy-to-use interaction experience;

  • Early adopter experience: cosh-ng is now launched as the next-generation upgraded version of Copilot Shell. Use the cosh-switch command to switch. For details, refer to:How to use the upgraded cosh。

• OS Skills Added Agentic OS manual skills, optimized OpenClaw installation skills, and provided model endpoint pre-checking and startup guidance to ensure smoother and more stable environment construction;

• AgentSight Launched a security observability dashboard; added Codex CLI adaptation to optimize the ability to capture complex interactions such as Claude Code; at the same time, greatly optimized memory performance to bring a more accurate, efficient and stable AI security observation experience;

• Tokenless Added new adaptation to Qwen Code and introduced compression function dry running comparison mode, which can more intuitively evaluate the optimization effect and reduce token waste by 30% in mainstream Agent scenarios;

• AgentSecCore Add security integration to Codex, introduce daemon processes to achieve real-time and complete security monitoring and performance enhancement, and provide you with deeper file system-based Skill security protection and observability support;

• ws-ckpt Added plug-in installation/uninstallation commands, rollback preview and scheduled snapshot functions to optimize the snapshot generation experience and bring a more standardized, efficient and controllable version management experience;

  • Incompatible changes: The snapshot identification parameters are uniformly adjusted to -s/--snapshot (the original -i is converted to a hidden alias)

• skillfs Introducing an intelligent skill activation mechanism that can dynamically display, hide or roll back skills according to security policies to block risks from the source; at the same time, the compatibility of the installation process is optimized to ensure that new skills only take effect after passing security scans, creating an indestructible skills operating environment;

• agent-memory Introducing a hybrid semantic search and automatic memory consolidation mechanism to accurately extract key facts and intelligently sort them over time; support multi-agent memory isolation, privacy desensitization and anti-injection protection to ensure data sovereignty and security; provide cross-session task persistence, memory import and export, and user portrait synthesis capabilities, allowing Agents to have a more coherent, profound and secure long-term memory and personalized interactive experience;

• anolisa Achieve unified life cycle management of RPM and native components, support automatic dependency resolution, one-click deployment of sandbox environment and seamless integration of OpenClaw/Hermes adapter; greatly simplify the installation, update and maintenance process, and provide a more stable, transparent and efficient Agentic OS component management experience.

Core component version

publish information

Release time: 2026-06-15

Image ID: aliyun_4_x64_20G_agentic_alibase_20260612.vhd

Update content

Agentic OS 0.6 is based on Alibaba Cloud Linux 4.0.3.0. Core component function updates:

• Copilot Shell interface issues have been fixed to provide a better user experience;

• OS Skills optimizes OpenClaw's non-interactive setup process and dependency pre-checking mechanism, bringing a smoother and more stable installation and configuration experience;

• AgentSight provides automatic detection and killing capabilities for Agent infinite loops and memory overflows, comprehensively strengthening operational stability and data privacy security; it also supports QwenCode skill discovery, dynamic hot loading of SLS log paths, and more refined Trace content control, and optimizes database performance and multiple underlying compatibility fixes to provide a more efficient, secure, and controllable observable experience;

• Tokenless adds Claude Code, Qoder and Codex adapter plug-ins, introduces a three-layer compression strategy to optimize data processing efficiency; and enhances the JSON output support of the stats command to provide you with a more compatible, efficient and secure token saving service;

• AgentSecCore strengthens its own anti-tampering protection and effectively intercepts malicious disabling or uninstallation of security plug-ins; it unifies the prompt word scanning alert format to provide more structured risk information;

• ws-ckpt supports workspace-based policy customization coverage to enhance the flexibility of the Hermes/OpenClaw plug-in; it optimizes the initialization and rollback mechanism to eliminate the risk of deadlock and ensure a more stable and secure system operation.

Core component version

publish information

Release time: 2026-05-29

Image ID: aliyun_4_x64_20G_agentic_alibase_20260529.vhd

Update content

Agentic OS 0.5 is based on Alibaba Cloud Linux 4.0.3.0. Core component function updates:

• Copilot Shell model authentication access supports Bailian Token Plan;

• AgentSight supports user-defined collection configurations (HTTP/HTTPS rules, etc.) to reduce running memory usage;

• Tokenless adds support for Hermes Agent;

• AgentSecCore adds automatic detection and alerts for sensitive information input by users, strengthens Skill malicious script scanning to ensure safe use, supports observable monitoring of security events during Agent operation, and provides Hermes Agent one-click deployment scripts to achieve quick access;

• ws-ckpt supports OpenClaw and Hermes Agent, providing session-level automatic snapshots; it also optimizes file change recognition to ensure that move or link operations are accurately displayed as renames rather than false positive deletions; and a forced confirmation mechanism is added when deleting snapshots containing associated skills to effectively prevent accidental deletions.

Core component version

publish information

Release time: 2026-05-15

Image ID: aliyun_4_x64_20G_agentic_alibase_20260515.vhd

Update content

Agentic OS 0.4 is based on Alibaba Cloud Linux 4.0.3. Core component function updates:

• Copilot Shell introduces an automatic memory background extraction system to optimize memory usage and make it more stable for long periods of time;

• AgentSight adds new skill indicator analysis and Hermes Agent identification capabilities, and improves SSL detection and event reporting links;

• Tokenless optimizes installation and deployment and compresses statistics links, and adds a Tool-Ready tool ready environment pre-check function;

• AgentSecCore adds a new Chinese prompt word injection detection benchmark to strengthen security protection, and optimizes Copilot Shell first-time boot to solve plug-in conflicts and bring a smoother and safer interactive experience;

• ws-ckpt adds an automatic cleaning mechanism and configuration hot reloading capabilities, and fixes core issues such as state recovery and mirror configuration;

• SkillFS supports writing and creating skill directories, and the log time is changed to the local time zone.

Core component version

publish information

Release time：2026-05-07

Image ID：aliyun_4_x64_20G_agentic_alibase_20260507.vhd

Update content

Agentic OS 0.3 is based on Alibaba Cloud Linux 4.0.3. Core component function updates:

• Copilot Shell introduces a new interactive Skills TUI panel, configurable status bar, session export function, focusing on Hook function improvements and problem fixes;

• The AgentSight panel has added Token saving and Agent interruption/stuck detection capabilities, providing more accurate Agent health monitoring capabilities;

• AgentSecCore introduces three new security scanning capabilities: multi-layer prompt injection and jailbreak detection, static code security analysis, and Skill supply chain integrity management to establish an observable infrastructure for security events;

• OS Skills adds Hermes Agent installation and ClawHub skill management capabilities;

• The Tokenless optimization component introduces compression effect statistics function and adds TOON (Token-Oriented Object Notation) format encoding support;

• Added Agent Workspace Checkpoint component (ws-ckpt) to provide millisecond-level snapshot and rollback capabilities for Agent workspace.

Core component version

Known issues

The OpenClaw plug-ins provided by Tokenless and AgentSecCore only support versions 2026.04.23 and earlier. For versions after 2026.04.23, please manually add the activation.onCapabilities configuration after the plug-in is installed.

• Tokenless plug-in configuration is located at: ~/.openclaw/extensions/tokenless/openclaw.plugin.json

• Agent-Sec-Core plug-in configuration is located at: ~/.openclaw/extensions/agent-sec/openclaw.plugin.json

{
  "id": "xxx",
  "name": "xxx",
  "version": "x.y.z",
  // ... Other original configurations...
  "activation": {
    "onCapabilities": ["hook"]
  }
}

publish information

Release time：2026-04-15

Image ID：aliyun_4_x64_20G_agentic_alibase_20260416.vhd

Update content

Agentic OS 0.2 is based on Alibaba Cloud Linux 4.0.3. Core component function updates:

• The initial available memory of small-sized instances (2C2G) is increased by 20%~30%, the number of concurrent OpenClaw sessions is increased by 200+%, and the Agent cold start time is significantly reduced;

• The Copilot Shell authentication interface has been fully upgraded, with built-in quick configuration for multiple model providers. Aliyun authentication supports one-click authorization of RAM roles;

• AgentSight adds a new visual panel to provide Agent real-time health monitoring, offline alarms, stuck process restart capabilities, and supports session and conversation-level Token consumption analysis and Agent trajectory analysis;

• AgentSecCore supports Skill integrity automatic verification (signature verification);

• OS Skills built-in skill "sysom-diagnosis" supports complete system diagnostic capabilities;

• A new Tokenless optimization component is added, which reduces the Token consumption of the context window and improves operating efficiency through three core strategies: pattern compression, response compression, and command rewriting.

Core component version

publish information

Release time：2026-03-30

Image ID：aliyun_4_x64_20G_agentic_20260329.vhd

Update content

Agentic OS 0.1 is based on Alibaba Cloud Linux 4.0.2. Compared with the standard image, the Agentic OS image has the following modifications:

• Copilot Shell is preinstalled and replaced with the user's default login shell. Provide system-level native AI capabilities;

• OS Skills pre-installed. Provide common system capabilities such as deployment, operation and maintenance, and diagnosis;

• Commonly used toolset pre-installed. Expand Agent capabilities;

• Pre-installed Python 3.11, NodeJS 22;

• Integrated Dragon Shield security components;

• Integrated AgentSecCore Agent security component;

• Integrate SysAK observability capabilities to support token consumption analysis and behavior audit functions in the time dimension.

Core component version