Installer Hashes

Highlights

PowerToys 0.102 introduces two new mouse utilities, Mouse Button Lock and CursorHide, a quick-access shelf for Command Palette, and snip dictation in ZoomIt. This release also adds command-line tools for Advanced Paste, Light Switch, Settings, and Peek, brings tap-alone remaps and easier editing to Keyboard Manager, and moves Color Picker and Text Extractor to WinUI 3.

🖱️ Mouse Button Lock and CursorHide

Holding a mouse button down during a long drag or selection can be tiring. With Mouse Button Lock, press and hold a button for a moment, then let go. Windows keeps treating it as held, so you can continue dragging or selecting until you click any button. This is especially useful for gaming, working in professional applications that require extensive dragging and selection, and improving accessibility for users who find it difficult to hold down a mouse button for extended periods.

PR: #49279 (Thanks, @owenpkent!)

CursorHide is the second new mouse utility. It hides the mouse pointer while you type, after a period of inactivity, or both, and shows it again as soon as you move the mouse.

PR: #50271 (Thanks, @DamianEdwards!)

⚡ Command Palette gets a quick-access shelf

Compact mode in 0.101 kept Command Palette out of the way until you needed results. Now your favorite commands can be one keystroke away too. Turn on the quick-access shelf in Settings > Appearance > Compact mode to show your pins below the search box while the palette is collapsed. Press Alt+1 through Alt+9 to launch them, or Alt+Shift+number to select one without running it. Drag to reorder, right-click for more actions, and optionally show recent commands and apps next to your pins.

The shelf is just one part of a big Command Palette update:

• Settings search: Fuzzy search finds options, extensions, commands, aliases, and assigned shortcuts, then takes you straight to them.
• Keyboard-first Dock: Press Win+Alt+J to focus the dock and move between its items from the keyboard.
• Copilot key support: Choose Command Palette as the Copilot key app in Windows Settings, and press the key again to toggle the palette.
• Multiple clocks: Pin several dock clocks, each with its own time zone and format.
• Language and links: Pick an app language for Command Palette, and copy links that open a page, run a command, or jump to a specific setting.
• Polish: Sharper app icons, faster grid and gallery browsing, results that keep loading at the end of a list, and clearer nested menus.

Massive thanks to @jiripolasek for the sustained Command Palette work across this release!

PRs: #49915, #50894, and #50812

🎥 ZoomIt adds snip dictation

ZoomIt can now capture what you say along with what you snip. Turn on Snip with dictation in the ZoomIt settings, then press Space while you drag out a snip and describe what you're capturing. ZoomIt transcribes your speech on your device, and a single paste delivers both the screenshot and your text. Dictation uses the microphone selected under Record.

ZoomIt also gets smooth zoom transitions, better audio pacing in recordings, and a fix for silent recordings on multichannel and spatial-audio devices.

💻 New command-line tools

More of PowerToys can now be scripted from the terminal:

• Advanced Paste: Run built-in and custom actions without opening the UI, using files, stdin/stdout, or the clipboard. AI actions use your configured providers and policies.
• Light Switch: Check status, set or toggle the theme, and manage schedules, with JSON output.
• Settings: See which utilities are enabled, and turn them on or off even while PowerToys isn't running.
• Peek: Preview multiple files and folders from the command line.
• PowerDisplay: JSON Lines output makes results and errors easy to consume from scripts.
• On your PATH: FancyZones, Image Resizer, File Locksmith, and PowerDisplay commands now work from any terminal folder.

PRs: #50834, #50459, #50507, and #49724 (Thanks, @daverayment!)

⌨️ Keyboard Manager adds tap-alone remaps and easier editing

Keyboard Manager now supports tap-alone remaps. Tap a key by itself to trigger a different action, while the key keeps working normally in shortcuts and mouse combinations. Large remapping lists are easier to manage too, with search, modifier and app filters, and bulk deletion.

The new editor also gets a searchable key picker, so you can select any key, including media keys or keys your keyboard doesn't have, and build a full shortcut with just the mouse. Recording now only listens while the editor is in focus, and Tab moves you out of the recording field. IT admins can also deploy and export remapping profiles with DSC v3.

PRs: #49136 and #49287 (Thanks, @MasaYan24!), #51150, and #49427 (Thanks, @Gijsreyn!)

🧩 Other notable changes

• Color Picker and Text Extractor: Both move to WinUI 3, with a new overlay, editor, and magnifier for Color Picker. Your existing shortcuts and settings carry over.
• FancyZones: Scroll the mouse wheel while dragging a window to switch layouts, with an optional indicator showing the selected layout's name.
• Peek: Added read-only SQLite previews, file and subfolder counts with scanning progress for folders, a plain-text fallback, and Alt+Left/Alt+Right navigation between files.
• Screen Ruler: Measure in device-independent pixels to account for each monitor's scaling, with improved edge detection.
• Environment Variables: A new Remove duplicates action cleans up PATH while keeping the original order.
• Quick Accent: A searchable character reference in Settings lets you browse language sets and copy characters directly.
• Grab and Move: Exclude specific apps so they keep their normal modifier-key behavior.
• Shortcut Guide: Added shortcuts for Claude Desktop and Ableton Live, and made indexing more resilient to malformed manifests.
• Workspaces: Now asks for confirmation before launching an unverified app configured to run as administrator.
• Awake: Windows can now turn off the display while the PC is locked, without ending your keep-awake session.
• New+: Fixed a File Explorer memory leak and improved long-path handling.
• Settings: Added an interactive animated welcome scene, fixed a memory leak when switching pages, and kept module on/off preferences when a utility fails to load.

✨ Big thanks to the community

As always, a big thank-you to everyone who contributed — we couldn't do this release without you! Thanks @DamianEdwards, @AkazaRenn, @Meister1977, @LE0-Lin, @namdpran8, @MarcelSchm, @jiripolasek, @Subhro-ai, @AlanJie, @dhruv0703, @noraa-junker, @langningchen, @joaogabriel15, @xianhongtao, @Comma8, @TyrantRey, @mansiverma897993, @Gijsreyn, @MasaYan24, @gavinzhangth, @amanmaurya92, @owenpkent, @mikeclayton, @mvanhorn, @Arslan-TR, @thomastv, @daverayment, @cuishuang, @amail80, @4RH1T3CT0R7, @ShimizuTheLotus, @Bakorlam, @sundeep8967, @markrussinovich, @mmustafasenoglu, @loulanyue, @tit-exe, @nzcodes, @matthudson, @sanskarIN, @xThreeh, @QIU-Guanzong, @ElenaGe216, @Gavin-Yau, @eglavin, @karan5028ji, and @dotMorten for your pull requests!

We're always happy to get your feedback and contributions, whether it's a bug report, a feature idea, or a pull request. Head over to the PowerToys repo to jump in.

🔗 Useful links

• PowerToys overview
• PowerToys GitHub repository
• PowerToys installation instructions

Full release notes

Advanced Paste

• Fixed Advanced Paste crashes when converting HTML-only clipboard content to plain text, with expanded offline UI coverage in #50504
• Added a headless CLI to run built-in and saved custom actions without opening the UI, with file, stdin, or clipboard input and file, clipboard, or text-only stdout output; AI actions use providers configured in Settings and honor existing policies in #50834
• Updated the Advanced Paste CLI for System.CommandLine 2.0, preserving existing commands, aliases, output formats, and help-like option values in #51230
• Fixed the CLI root --version option to print the executable version and exit without requiring a subcommand in #51298

Alt Window Cycle

• Restored Alt Window Cycle's dark overlay design with rounded snapshot previews, corrected acrylic rendering, and smaller app icons in #50494
• Fixed Alt Window Cycle click-through behavior and missing previews while correcting the page indicator and reducing snapshot memory use in #50495

CursorHide

• Added opt-in Auto Hide Cursor under Mouse Utilities to hide the pointer while typing or after inactivity and restore it on mouse input in #50271 by @DamianEdwards
• Restored hidden cursors when affected touchpads or simulated mouse input move the pointer, instead of leaving the cursor invisible in #50803 by @AkazaRenn
• Renamed Auto Hide Cursor to CursorHide in Settings and refreshed its icon, behavior controls, and new-feature indicators in #51123

Awake

• Updated Awake to let Windows turn off the display while the workstation is locked without stopping the active keep-awake session in #49388 by @Meister1977

Color Picker

• Modernized Color Picker with a WinUI 3 picking overlay, editor, and magnifier while preserving existing color workflows in #49174 by @claude
• Kept adjusted and similar-color selections within the configured history limit, trimming older entries while keeping the selected color first in #51356

Command Palette

• Fixed PowerToys fallback settings so disabling one command no longer changes other commands in #50047 by @LE0-Lin
• Fixed Extension Gallery detection so installed Microsoft Store-only extensions are correctly marked as installed in #48746 by @namdpran8
• Added optional week-number and custom date displays to the dock clock, with correct ISO week numbering around New Year in #49093 by @claude and @MarcelSchm
• Added multiple customizable clocks with individual time zones and display formats that can be pinned for quick access in #49288 by @jiripolasek
• Updated command-parameter fields with theme-aware colors and clearer focus styling in #49751 by @jiripolasek
• Removed the redundant More button when all actions already fit in the command bar while preserving context-menu access in #49769 by @jiripolasek
• Added copyable command links for opening pages and running commands from other apps, with confirmation on first use in #49793 by @jiripolasek
• Added an opt-in quick-access shelf in collapsed compact mode for launching pinned commands without expanding the palette in #49915 by @jiripolasek
• Added optional recent-command sections to Home and the quick-access shelf for reopening recently used commands and apps in #49916 by @jiripolasek
• Added drag-and-drop reordering, pinning, and removal to organize items on the opt-in quick-access shelf in #49932 by @jiripolasek
• Added context menus and standard keyboard shortcuts to access secondary actions on the opt-in quick-access shelf in #49933 by @jiripolasek
• Added Alt+Shift+number shortcuts to select visible quick-access shelf items without running them in #49943 by @jiripolasek
• Fixed Remote Desktop searches to filter and rank saved connections instead of always showing the full list in #50043
• Enabled Enter and Space to activate focused dock items for keyboard-only use in #50044
• Improved Window Walker searches to match app names and window-title words together in any order in #50054 by @Subhro-ai
• Moved Clipboard History image previews into the details content area and improved text formatting for easier reading in #50098
• Fixed recycled list items briefly showing another item's icon while their own icon loads in #50189 by @jiripolasek
• Added file-type icon previews while exact file icons load and reused shared icons across matching files in #50192 by @jiripolasek
• Updated Adaptive Card content in place to reduce flicker in refreshing Performance Monitor graphs in #50211
• Fixed auto-sized icons in grid and gallery views so glyphs are not clipped or lost when items are recycled in #50231 by @jiripolasek
• Virtualized grid and gallery results for more efficient browsing, improved keyboard navigation, and reliable back navigation in #50233 by @jiripolasek
• Preserved search-text editing shortcuts so modified arrow keys no longer move results or accept suggestions unexpectedly in #50334 by @jiripolasek
• Fixed title and subtitle visibility settings being lost when saving newly added dock items in #50363
• Stabilized Performance Monitor dock labels with reserved widths and fixed-width digits to prevent neighboring items from shifting in #50364 by @jiripolasek
• Fixed keyboard shortcuts triggering twice when Windows inspects queued keyboard events in #50427 by @jiripolasek
• Corrected the low-level keyboard hook setting description to explain its limitations when an elevated app has focus in #50428 by @jiripolasek
• Preserved search focus and keyboard shortcuts after clicking empty space or non-focusable content in #50448 by @jiripolasek
• Prioritized visible and selected search results so their content and icons load ahead of pending off-screen items in #50469 by @jiripolasek
• Preserved dock layouts and customizations when a Miracast display reconnects with a different Windows display number in #50502 by @AlanJie
• Reduced excess spacing in compact Performance Monitor dock items while keeping changing values and localized labels aligned in #50525 by @jiripolasek
• Shortened GPU dock labels while preserving adapter distinctions and full model names in details in #50526 by @jiripolasek
• Cleared bookmark placeholder values after a successful launch so the next launch starts with empty inputs in #50629 by @dhruv0703
• Improved repeated extension-command activation so launched windows can regain focus after switching to another app in #50651 by @jiripolasek
• Added an app-language selector to use Command Palette in a preferred language after restarting it in #50680 by @jiripolasek
• Included taskbar-visible owned windows in Window Walker so apps such as LabVIEW can be found and switched to in #50693 by @Subhro-ai
• Added active-operation footer text and four-second WinGet notifications to make installation progress and outcomes easier to follow in #50713
• Added copyable links to specific settings and extension options that scroll to, focus, and highlight their destinations in #50753 by @jiripolasek
• Fixed empty dock center sections on startup and display reconnection by refreshing their visibility after loading in #50755 by @Subhro-ai
• Corrected list and grid input tracking so mouse clicks follow the configured activation behavior after keyboard navigation in #50764 by @jiripolasek
• Fixed built-in fallback defaults so eligible commands appear in global results without first opening settings in #50799 by @Subhro-ai
• Copied the primary dock layout when enabling an unconfigured secondary display while keeping subsequent edits independent in #50810
• Added a customizable Win+Alt+J shortcut to reveal and focus an enabled dock for keyboard navigation in #50812
• Improved per-monitor dock layout retention when Windows renumbers displays or monitors move between ports in #50825
• Extended the monitor-resume wait to avoid closing docks while secondary displays reconnect in #50831
• Added custom display names and stable default labels in dock settings to make monitors easier to identify after reconnecting in #50842 by @AlanJie
• Unified palette and dock context-menu shortcuts to prevent duplicate actions and support secondary commands from focused dock items in #50843 by @jiripolasek
• Added Command Palette as a selectable Copilot key app in Windows Settings for launching it from supported keyboards in #50846 by @noraa-junker
• Added submenu indicators and a Back menu item to make nested context menus easier to navigate in #50847 by @jiripolasek
• Released the dock navigation shortcut when the dock is disabled so it remains available to other apps in #50849
• Added a direct settings link to the dock navigation shortcut for easier sharing and navigation in #50851 by @jiripolasek
• Added dock settings notices that explain per-monitor enablement and position overrides and link to the monitor options in #50868 by @jiripolasek
• Fixed selection on dynamically refreshed subpages so Enter follows the updated first result without overriding a later result chosen by the user in #50938 by @jiripolasek
• Fixed missing or generic Shell icons during concurrent loading and refreshed cached icons after Windows appearance-metric changes in #51031 by @jiripolasek
• Fixed dragging packaged apps onto the dock so pinned entries launch correctly and their icons appear when loaded in #51018 by @jiripolasek
• Added visual previews for choosing full or compact layouts and separated related options into settings cards, making layout customization easier to discover in #51007 by @jiripolasek
• Restored missing file-path and list inputs in Command Palette extension forms in Native AOT builds in #50997 by @jiripolasek
• Fixed double-clicking list and grid results to run the clicked item rather than the previous selection, while ignoring empty space and separators in #50996 by @jiripolasek
• Fixed Command Palette unexpectedly reopening after launching an app so focus stays with the launched app in #50994 by @jiripolasek
• Fixed missing or fallback icons when scrolling through All apps by preserving icon loading for visible results in #50988 by @jiripolasek
• Standardized Ctrl+Shift+Enter for supported Run, Windows Terminal, PowerToys, bookmark, and file-search results so administrator actions work consistently in #50935 by @jiripolasek
• Prevented overlapping settings saves from losing newer changes, so dock pins and other preferences are retained more reliably after restarting in #51036 by @jiripolasek
• Added fuzzy search in Command Palette settings to find options, extensions, commands, aliases, and assigned shortcuts and jump to their settings in #50894 by @jiripolasek
• Fixed copying HTML and custom clipboard formats from Command Palette extensions and improved clipboard text handling in #50893 by @jiripolasek
• Fixed language mapping in Command Palette release builds to avoid an unintended fallback to English in #50889 by @jiripolasek
• Added direct activation for a running Command Palette instance so repeated Copilot key or Win+C presses toggle the palette when configured in Windows in #50872 by @jiripolasek
• Revised the dock shortcut to focus and cycle through items across enabled docks, with Shift reversing direction while the dock is focused in #50865 by @jiripolasek
• Added Alt+number shortcuts to run list results immediately by default and Alt+Shift+number to select without running, with configurable Alt+number behavior in #49947 by @jiripolasek
• Refined the opt-in quick-access shelf with show/hide menus, direct settings links, and empty-shelf guidance to make pinned and recent items easier to manage in #49988 by @jiripolasek
• Kept Settings search-result highlighting animated when page-transition animations are disabled, so navigation targets remain easy to spot in #51070 by @jiripolasek
• Improved back navigation and page cleanup so previously visited pages resume correctly without inactive pages changing the current view in #50501 by @jiripolasek
• Improved packaged-app and shortcut icons by preserving language and contrast variants, native artwork and padding, and configured icon fallbacks in lists and details in #51039 by @jiripolasek
• Replaced compact mode's vertical-position slider with a full-screen preview picker supporting drag, scroll, and keyboard controls, while reserving room for expanded search results in #51011 by @jiripolasek
• Fixed blank details panes when extensions replace a content page's details, initializing new content and detaching the previous details in #51231
• Fixed startup failures in applications launched from Command Palette by preventing them from inheriting its Windows App SDK runtime-directory override in #51235 by @jiripolasek
• Fixed Adaptive Cards updating in place in release builds and enabled custom elements to refresh without rebuilding the entire card in #51204
• Loaded additional result batches when the first list or grid page does not fill the window, so more items remain accessible without a scrollbar in #51285 by @jiripolasek
• Loaded the next result batch when keyboard navigation reaches the end of the current list, preserving selection until loading completes in #51287 by @jiripolasek
• Fixed Ctrl+Enter targeting the wrong command in context-menu submenus and delayed the initial highlight until navigation or filtering in #51290 by @jiripolasek
• Avoided repeatedly saving unchanged provider and fallback settings during startup in #51353
• Replaced the separate native keyboard service with a managed global keyboard listener, with explicit startup-error reporting and regression coverage for shortcut handling in #50981 by @jiripolasek
• Added a context menu to the dock's Home item for opening Settings and logs, reloading extensions, and quitting Command Palette in #51304
• Batched dock-band updates when loading, enabling, disabling, or removing providers to avoid repeatedly rebuilding every monitor's dock in #51362

Crop And Lock

• Fixed Crop And Lock capture alignment so cropped content matches the selected region, including on scaled displays in #49736 by @langningchen

Environment Variables

• Added a Remove duplicates action to the PATH editor that keeps the first occurrence and preserves entry order in #50585 by @joaogabriel15
• Fixed Environment Variables startup crashes with localized window titles when Windows uses the UTF-8 system code page in #50688 by @xianhongtao

FancyZones

• Fixed unintended FancyZones activation on the first window drag after Remote Desktop, wake, or unlock by refreshing the Shift-key state in #49926 by @claude and @Comma8
• Fixed Shift-based zone toggling and initial zone highlighting during window drags, with expanded FancyZones and editor UI coverage in #49985
• Added opt-in mouse-wheel layout switching while dragging a window with zones visible, plus a customizable layout-name indicator to identify the selected layout in #49291 by @claude and @TyrantRey

File Explorer add-ons

• Fixed File Explorer previews and SVG thumbnails failing to load when launched from folders with restricted access in #48602 by @mansiverma897993

General

• Fixed title-bar initialization that could crash several PowerToys windows at startup in Chinese, Japanese, and Korean environments in #50027
• Expanded installer cleanup to close additional running utilities before upgrades or uninstallations replace their files in #50106
• Expanded installer cleanup to include command-line tools and helpers so they do not keep files in use during setup in #50452
• Added PATH-accessible commands for FancyZones, Image Resizer, File Locksmith, and Power Display so their tools can run from any terminal folder in #48631 by @claude
• Fixed caption-button contrast after theme changes across PowerToys windows using shared title-bar theming in #49786 by @jiripolasek
• Fixed context-menu hosts lingering during updates or uninstallations for File Locksmith, PowerRename, Image Resizer, and New+ in #50218
• Reduced duplicated native runtime code by using Windows' built-in Universal CRT where supported, while retaining static VC++ runtime linkage and preserving New+ template behavior in #50899
• Prevented startup and read-only Settings refreshes from overwriting preferences with partially initialized or stale module states in #51115

Grab And Move

• Added per-app modifier-key exclusions to Grab And Move so selected foreground apps retain their normal modifier behavior in #50082 by @foxmsft

Image Resizer

• Honored PNG interlacing and TIFF compression settings, resized every TIFF page, preserved supported image metadata and 16-bit precision, restored JPEG XR fallback output, and rejected invalid numeric CLI unit/fit values in #51359

Keyboard Manager

• Fixed Keyboard Manager profile synchronization and saving so remapping edits and enabled states remain consistent across editor restarts in #50059
• Added DSC v3 deployment and export of Keyboard Manager remapping profiles using readable key names without requiring a PowerToys restart in #49427 by @Gijsreyn
• Added tap-alone key remappings so a key can trigger an alternate action by itself while retaining its normal keyboard and mouse combinations in #49136 by @claude and @MasaYan24
• Added search, modifier and app filters, and confirmed bulk deletion to make large Keyboard Manager remapping lists easier to manage in #49287 by @claude and @MasaYan24
• Fixed normal-elevation program shortcuts to launch in the signed-in user's normal context even when PowerToys runs as administrator in #49571 by @gavinzhangth
• Rejected remappings containing Win+L with additional modifiers so unsupported shortcuts show a validation error instead of failing silently in #49759 by @amanmaurya92
• Fixed duplicate and conflict detection while editing remappings so collisions are caught without incorrectly rejecting the current entry in #50265 by @claude and @MasaYan24
• Added searchable key selection for empty remaps in the new editor, limited recording to the foreground editor, and restored Tab navigation while recording in #51150

Light Switch

• Added a CLI to query status, set or toggle configured theme targets, and enable or disable schedules on the running Light Switch service, with JSON output for automation in #50459

Mouse Button Lock

• Added opt-in Mouse Button Lock for left, right, and middle buttons so dragging and selection can continue after a long press without continuously holding a button in #49279 by @owenpkent

Mouse Jump

• Fixed the undersized Mouse Jump preview in Settings so it fills the intended preview area without changing runtime sizing in #50489 by @mikeclayton

Mouse Pointer Crosshairs

• Added Mouse Pointer Crosshairs to Quick Access so it can be toggled from the flyout with its configured shortcut shown in the tooltip in #48592 by @mvanhorn

Mouse Without Borders

• Updated Mouse Without Borders to create received files in the signed-in user's context so they match their destination folder in #48769
• Improved handling of unexpected local settings connections in Mouse Without Borders while preserving normal configuration and pairing workflows in #50480
• Reduced the PowerToys installation footprint by removing unused Mouse Without Borders dependencies while retaining required Windows service support in #50883

New+

• Improved template creation with more robust destination-folder and long-path handling, and corrected the option to hide Windows' built-in New menu in #51142 by @Arslan-TR
• Fixed a memory leak in File Explorer when repeatedly opening New+ context menus on Windows 10 and Windows 11 in #51152 by @Arslan-TR

Peek

• Added read-only SQLite previews in Peek so database tables, columns, and sample rows can be inspected without opening a database editor in #45846 by @google-labs-jules[bot] and @thomastv
• Enhanced Peek folder previews with file and subfolder counts, scanning progress, and incomplete-result warnings in #50213 by @daverayment
• Restored keyboard interaction inside Peek previews, added Alt+Left and Alt+Right file navigation, and prevented accidental title-bar actions on startup in #50472 by @daverayment
• Added command-line previews for multiple files and folders, with improved relative-path handling and argument validation in #49724 by @daverayment
• Added plain-text previews for text files with otherwise unsupported extensions instead of showing only file information in #50020 by @eglavin and @claude

PowerDisplay

• Added JSON Lines output to the Power Display CLI so scripts can consume structured results and errors in #50433
• Added drag-and-drop and keyboard-accessible profile reordering in Power Display while keeping saved profile identities intact in #50453
• Preserved saved Power Display profile settings when monitors or capabilities are unavailable so editing a profile does not discard them in #50509

PowerRename

• Fixed image-metadata resource cleanup to avoid hangs when PowerRename components unload in #50593
• Removed unused prebuilt Boost.Regex libraries from the installation package without changing the Use Boost library option or regular-expression behavior in #51002
• Fixed EXIF GPS coordinates and XMP author/creator tokens in filename templates, including ordered lists of multiple creators in #51357

PowerToys Run

• Fixed Celsius and Fahrenheit conversions in PowerToys Run when uppercase unit names are entered with Turkish regional settings in #50414 by @cuishuang

Quick Accent

• Added a searchable character reference guide in Quick Accent Settings to browse language sets, view Unicode descriptions, and copy characters directly in #49394 by @daverayment
• Fixed Quick Accent shutdown so disabling the utility reliably stops it, with new UI coverage for accent selection and settings in #50289
• Fixed the Quick Accent toolbar remaining onscreen after a missed key release by dismissing it when focus moves to another window in #50212 by @amail80
• Restored the horizontal scrollbar for overflowing character lists so Quick Accent shows the current position without clipping the scrollbar in #50924 by @daverayment

Screen Ruler

• Added device-independent pixels as an extra Screen Ruler unit so measurements can account for each monitor's Windows display scaling in #49588
• Fixed Screen Ruler edge detection at screen boundaries and across large color differences to improve bounds measurements in #50093 by @4RH1T3CT0R7
• Fixed Screen Ruler's device-independent pixel selection so the chosen secondary unit stays selected and is applied correctly in #50696 by @daverayment

Settings

• Fixed flickering in the shortcut editor when a key is held down while recording a new hotkey in #49662 by @ShimizuTheLotus
• Animated the Settings update activity banner so it fades and slides into place when shown or dismissed in #50375
• Replaced animated welcome-page GIFs with muted, looping H.264 videos, with a PowerToys logo fallback when playback is unavailable in #51057
• Added a Settings CLI to inspect module states in text or JSON and save enable/disable changes while PowerToys is closed in #50507
• Preserved module enablement preferences when modules fail to load, saved changes for missing settings entries, and avoided settings resets caused by shutdown-time or failed-read saves in #50897 by @daverayment
• Added an interactive animated welcome scene featuring PowerToys module icons in #50873
• Fixed retained pages and view models that caused memory use to grow when navigating between Home and General settings in #51060 by @dotMorten
• Refined the Welcome animation with subtle theme-aware tile highlights, removed the top-edge gap during parallax, and softened the introductory light trails in #51367

Shortcut Guide

• Added Claude Desktop shortcuts to Shortcut Guide for quick access to chat and application commands in #49245 by @Bakorlam and @claude
• Added Ableton Live shortcuts to Shortcut Guide so playback, recording, navigation, and editing commands are easier to discover in #50100 by @sundeep8967
• Fixed Shortcut Guide taskbar indicators appearing for apps whose shortcut manifests do not request them in #50672 by @daverayment
• Improved Shortcut Guide indexing to skip malformed or unreadable shortcut manifests, keeping valid shortcuts available and preventing crashes caused by incomplete entries in #50497 by @daverayment
• Improved startup and shortcut indexing, preventing rapid-reopen crashes and initial overlay flicker while picking up PowerToys shortcut changes on the next launch in #50609 by @daverayment

Text Extractor

• Modernized Text Extractor with WinUI 3 overlays while preserving text-capture modes, shortcuts, and settings in #49431

Workspaces

• Added confirmation before Workspaces launches an unverified EXE configured to run as administrator, with options to skip it or run it once in #50508

ZoomIt

• Improved ZoomIt recording audio pacing and bounded buffering, and kept screen recording running with a warning when microphone or system-audio capture is unavailable in #50934 by @foxmsft
• Fixed silent ZoomIt recordings on multichannel and spatial-audio devices so microphone and system audio can play back correctly in #49400 by @claude and @markrussinovich
• Corrected ZoomIt's Settings help to show Ctrl+K and Ctrl+W for opening black and white sketch pads in #50689 by @mmustafasenoglu
• Added smooth ZoomIt zoom transitions that remain continuous when the zoom target changes in #50444 by @foxmsft and @markrussinovich
• Fixed Demo Type in Notepad to avoid unnecessary Space and Backspace keystrokes, with expanded ZoomIt UI coverage in #50606
• Fixed the ZoomIt DSC resource to read and update actual registry-backed settings, detect configuration drift, and notify a running ZoomIt instance to reload changes in #50551 by @Gijsreyn
• Added opt-in offline snip dictation so a screenshot and its spoken description can be transcribed and pasted together in #51286 by @MarioHewardt, @markrussinovich, and @foxmsft

Development

• Skipped Settings search-index generation by default in Debug builds to avoid unnecessary build work in #49709 by @noraa-junker
• Removed redundant repository-local issue-artifact tooling to simplify contributor setup in #49860
• Corrected issue and pull-request triage to skip closed issues, preserve manual product labels, and capture release-channel details in #50052
• Updated the developer setup guide to use the current Microsoft Learn link for enabling long paths in #50102 by @loulanyue
• Updated the PowerToys 0.102 roadmap to describe planned interface modernization and productivity improvements in #50108
• Added automatic UI-test selection for changed modules so pull-request CI reuses existing build artifacts to run the relevant suites in #50220
• Restored automated issue triage by aligning workflow components and disabling automatic failure-report issues in #50320
• Made automatic module UI tests and test-selection failures block pull-request CI instead of being reported as successful in #50344
• Added New Chat for Claude to the community PowerToys Run plugin directory to help users discover the extension in #50381 by @tit-exe
• Updated community acknowledgements to recognize contributions to the redesigned Shortcut Guide in #50419 by @noraa-junker
• Updated localization submissions and downloads to include the required service identifier in #50625
• Added GoogleTranslate to the community PowerToys Run plugin directory to help users discover translation support in #50630 by @nzcodes
• Added WiX bootstrapper package attribution and license text to the installer notices in #50747
• Corrected CI test setup so standalone Image Resizer, File Locksmith, and Screen Ruler suites can exercise Settings-driven module changes in #50891
• Simplified Command Palette packaging by removing its separate Visual C++ runtime dependency and obsolete Adaptive Cards build workarounds in #50707 by @jiripolasek
• Migrated and expanded PowerRename UI tests to cover renaming, filtering, persistence, and Windows context-menu workflows in #50096
• Migrated Mouse Utilities UI tests to the new framework and added Cursor Wrap coverage for activation, edge behavior, and settings in #50230
• Added end-to-end Always On Top tests for pinning, borders, virtual desktops, exclusions, sound, and Game Mode in #50257
• Consolidated UI-test window and monitor helpers to improve visible-window capture and placement assertions in #50343
• Migrated and expanded Hosts File Editor UI tests to cover file updates, entry management, settings, and administrator workflows in #50370
• Added Workspaces UI tests for capture, editing, launching, and window placement using repeatable packaged and unpackaged app fixtures in #50470
• Updated the issue-triage setup action to a newer dependency version in #50201 by @dependabot[bot]
• Added reusable SDK settings controls for file and folder selection, string lists, and key-value lists with configurable validation in #49623 by @jiripolasek
• Added Visual Studio component requirements to the extension template so missing build prerequisites can be detected automatically in #50095
• Added SDK form-action IDs so extensions can distinguish Adaptive Card actions while retaining existing submission handlers in #50178
• Extended the SDK details pane to let extensions embed Adaptive Cards and other supported content types in #50180
• Added opt-in icon-loading diagnostics to measure cache behavior, loading phases, and UI responsiveness during development in #50181 by @jiripolasek
• Separated icon diagnostic measurements of dispatcher waiting and UI-thread execution for more accurate performance investigations in #50182 by @jiripolasek
• Corrected icon cache lifetimes and combined redundant refreshes to prevent stale cache results and unnecessary reloads in #50183 by @jiripolasek
• Prioritized active icon requests and bypassed image-loading queues for glyphs to avoid unnecessary waiting in #50184 by @jiripolasek
• Moved icon conversion into C# helpers to improve testability and make bitmap ownership and threading explicit in #50185 by @jiripolasek
• Pooled temporary icon-conversion buffers and improved failed-conversion cleanup to reduce repeated allocation work in #50186 by @jiripolasek
• Separated glyph and image caches to avoid mutual eviction and unnecessary asynchronous loading of synchronous icon sources in #50187 by @jiripolasek
• Moved app icon extraction into the shared demand-aware loader so icon work can be scheduled instead of performed eagerly in #50188 by @jiripolasek
• Added shared color-swatch and Unicode-initials icon formats so extensions can generate scalable icons without bitmap assets in #50190 by @jiripolasek
• Added plain and theme-aware SVG icon formats so extensions can supply scalable icons from files or inline content in #50191 by @jiripolasek
• Restored image and plain-text SDK documentation and aligned interface generation with the existing API declarations in #50210 by @jiripolasek
• Corrected SDK separator notifications so section-title changes are reported to the host in #50232 by @jiripolasek
• Moved reusable keyboard-hook helpers into ManagedCommon for reuse across PowerToys modules in #50254 by @noraa-junker
• Contained Time and Date item-notification failures so exceptions no longer escape the page-update path in #50390 by @jiripolasek
• Standardized window-message dispatch to keep UI updates and command accounting on the UI thread in #50392 by @jiripolasek
• Fixed SDK event delivery so one failed subscriber no longer prevents other subscribers from receiving updates in #50485 by @jiripolasek
• Coordinated item initialization and cleanup to prevent duplicate subscriptions and updates to discarded items in #50487 by @jiripolasek
• Simplified System extension interop declarations to remove generation warnings without changing the generated API in #50706 by @jiripolasek
• Extended SDK clipboard helpers with image and custom-format support and explicit write failures for background extensions in #50832
• Added Crop And Lock UI tests for live thumbnails, reparenting, cancellation, and module lifecycle across packaged and unpackaged apps in #50431
• Added Environment Variables UI tests for user-variable editing, profiles, PATH changes, and persistence with recoverable test-state cleanup in #50429
• Restricted FancyZones collection replacement while preserving layout serialization, editor bindings, and collection identity in #50726 by @matthudson
• Consolidated File Explorer preview and thumbnail wrappers into a shared provider to reduce duplicated code and output files in #50252 by @noraa-junker
• Added Runner session-end diagnostics to distinguish shutdown, sign-out, and application-restart requests during troubleshooting in #50273
• Restricted collection replacement in extension settings, Mouse Jump, and Hosts File Editor while preserving mutable contents and UI bindings in #50741 by @matthudson
• Added Keyboard Manager UI tests for search, filters, bulk deletion, and persistence to protect remapping-list workflows in #50352 by @claude and @MasaYan24
• Made Peek web-preview disposal synchronous so temporary-file cleanup finishes before disposal returns in #50636 by @claude and @sanskarIN
• Added New+ end-to-end tests and shared Explorer helpers to cover template creation and context-menu behavior across utilities in #50534
• Restricted settings and file-watcher collection replacement while preserving serialization and consistent behavior in Command Palette and PowerToys Run in #50702 by @matthudson
• Added Registry Preview UI tests for editing, saving, importing, and Explorer integration to cover release-checklist workflows in #50387
• Added Simplified Chinese translator guidance to clarify the Quick Access description of quick actions and module toggles in #50198
• Reduced unnecessary Power Display settings writes by persisting only monitor preferences edited in Settings in #50510
• Stabilized Settings certificate test fixtures so generation no longer fails when timestamps cross a validity boundary in #50580
• Refined Settings collection initialization to resolve analyzer warnings while preserving existing JSON formats in #50727 by @matthudson
• Removed a stray carriage return from Screen Ruler settings code to keep source formatting consistent in #50742 by @jiripolasek
• Simplified native PowerToys build prerequisites by removing additional MSVC runtime and ATL library requirements in #50391
• Fixed Workspaces UI-test process discovery races so newly started fixture apps can be identified reliably in #50596
• Refined Workspaces collection ownership to resolve analyzer warnings while preserving saved data and launcher bindings in #50731 by @matthudson
• Migrated Light Switch UI tests to cover theme schedules and location-based behavior, and stabilized ZoomIt recording and window-readiness tests in #50654
• Advanced automatic build versioning to the 0.102 release train so new builds carry the current release version in #51111
• Corrected developer documentation links so readers can reach the referenced Settings, PowerToys Run, and Group Policy files in #51108 by @xThreeh
• Fixed Keyboard Manager developer documentation anchors so contents lists and cross-page links reach the intended sections in #50520 by @QIU-Guanzong
• Updated PowerToys Run architecture documentation to point contributors to the current plugin-management and query-processing code in #50519 by @ElenaGe216 and @Gavin-Yau
• Updated the issue-triage workflow to use GitHub Agentic Workflows setup 0.88.4 for its automation jobs in #50514 by @dependabot[bot]
• Updated the Microsoft Store submission workflow to use Azure Login 3.0.2 for Azure sign-in in #50377 by @dependabot[bot]
• Preserved the originating page and provider context when dispatching Command Palette commands, preparing command routing for future dock flyouts without adding a new flyout in this release in #51034
• Stabilized Run page environment-variable tests by moving Shell parsing out of the page timeout while preserving directory-enumeration coverage in #51043 by @jiripolasek
• Replaced Command Palette's native Windows Run-history dependency with a managed implementation, simplifying packaging while retaining recent-command history in #50974 by @jiripolasek
• Stabilized Command Palette shortcut-navigation tests by serializing menu operations with queued updates to prevent intermittent collection-change failures in #50923 by @jiripolasek
• Prevented intermittent sample-extension packaging failures by disabling debug-symbol rewriting during Release trimming in #50917
• Stabilized Command Palette cache-rebuild tests by avoiding unrelated initialization notifications and checking retry behavior and cache reuse in #51049
• Corrected quick-access shelf test setup to prevent cleanup failures caused by an uninitialized item snapshot in #50921 by @jiripolasek
• Corrected WinRT source generation for the shared hotkey settings hook and made new CsWinRT1028 diagnostics fail the build in #51066
• Removed unused central package entries and documented retained dependency pins without changing the versions resolved by existing projects in #50880
• Moved local build logs into artifacts\logs so context-menu packaging no longer fails when trying to include open MSBuild log files in #51056
• Removed obsolete analyzer suppressions for retired template code to keep shared build diagnostics easier to maintain in #51061
• Promoted IL2081 trimming diagnostics to build errors in the shared AOT configuration while retaining explicit project-level exceptions in #51073
• Enabled nullable reference checking across File Explorer preview and thumbnail projects and their unit tests, with annotations and guards that preserve existing preview behavior in #51099
• Enabled warnings-as-errors for the shared UI-test framework after resolving its analyzer warnings and documenting narrowly scoped exceptions in #51085
• Updated Image Resizer observable models for WinRT and AOT compatibility and made the corresponding MVVM generator diagnostic fail the build while preserving settings serialization in #51067
• Corrected native build configuration warnings, removed an unused COM reference, and separated intermediate output folders without changing shipped filenames or output locations in #51090
• Preserved the Command Palette Toolkit's neutral-resource language metadata in official signed builds without changing version generation in #51179
• Refined PowerDisplay's persisted models and capability collections to address analyzer warnings while preserving saved-data compatibility in #50732 by @matthudson
• Restored SDK-generated assembly metadata in official Command Palette and Advanced Paste builds, preserving resource-language, platform, and internal-access declarations without changing the intended version values in #51098
• Advanced the Command Palette package version to 0.13 in #51232
• Updated shared CLI parsing to System.CommandLine 2.0.1, including rejection of invalid Image Resizer unit and fit values and clearer FancyZones argument errors in #50884
• Enabled stricter C++ standards conformance by default and corrected affected native declarations, while retaining explicit Keyboard Manager and installer exceptions in #51062
• Made new Windows platform-compatibility analyzer violations fail builds so unsupported API calls are caught earlier in #51063
• Updated outdated third-party launcher plugin and author links in #51126 by @karan5028ji
• Removed an obsolete Settings screenshot reference from the module project-template documentation in #51334 by @mmustafasenoglu
• Standardized spacing before comments in module UI tests in #51264
• Reused JSON serializer options in Advanced Paste UI tests in #51280
• Replaced broad message passing with explicit Command Palette control and view-model ownership to support independent navigation surfaces in #51038
• Extracted Command Palette page creation and initialization into a shared navigation service while preserving navigation behavior in #51091
• Removed the superseded Toolkit-specific neutral-language workaround while retaining shared official-build assembly metadata generation in #51291
• Made Command Palette Extension Gallery tests use deterministic synchronization to avoid intermittent ordering failures in #51340 by @foxmsft
• Kept Command Palette test page contexts alive through execution and cleanup to prevent intermittent view-model test failures in #51355 by @jiripolasek
• Aligned multiline argument formatting across module UI tests without changing test behavior in #51257
• Normalized FancyZones UI-test file endings for consistent analyzer compliance in #51258
• Split FancyZones and File Locksmith UI-test helper types into matching source files in #51259
• Ordered System using directives consistently in FancyZones UI tests in #51262
• Normalized split-argument layout in FancyZones, Advanced Paste, and Environment Variables UI tests in #51265
• Removed unnecessary parentheses from FancyZones UI tests in #51267
• Aligned initializer indentation in FancyZones and Mouse Utilities UI tests in #51268
• Removed redundant blank lines from FancyZones UI tests in #51272
• Added consent-aware command and result telemetry for the Light Switch and PowerDisplay CLIs without changing their output or exit codes in #51315
• Resolved possible-null dereference warnings in Advanced Paste and Mouse Utilities UI tests in #51274
• Made Peek UI-test formatting use explicit format providers for consistent behavior across locales in #51260
• Normalized closing-brace spacing in Peek UI tests in #51273
• Resolved nullable-argument warnings in Peek UI tests in #51275
• Aligned nullable argument types in Peek UI tests in #51276
• Used direct indexing for indexable collections in Peek UI tests in #51278
• Reused constant argument arrays in Peek UI tests in #51279
• Aligned PowerRename UI-test comment spacing with analyzer requirements in #51263
• Removed a duplicate shared-suppression source entry from the PowerRename UI-test project in #51282
• Resolved reserved-keyword naming warnings in Screen Ruler UI tests in #51277
• Aligned Settings UI-test parameter names with analyzer conventions in #51271
• Made culture-sensitive operations explicit in Workspaces UI tests in #51261
• Aligned Workspaces UI-test parameter-list formatting with analyzer requirements in #51266
• Standardized spacing between Workspaces UI-test members in #51269
• Kept cleanup exceptions out of finally clauses in Workspaces UI tests in #51281
• Placed readonly fields consistently in ZoomIt UI tests in #51270
• Reapplied stricter resource-language, identifier-naming, and MVVM diagnostics as build errors after correcting official-build metadata in #51065
• Stabilized Keyboard Manager UI tests by retrying Notepad focus and restoring the test document's active tab, with clearer failure diagnostics in #51345
• Stabilized Quick Accent UI-test scroll checks on slow agents with longer waits and clearer selection and viewport diagnostics in #51346
• Stabilized Screen Ruler UI tests by waiting for the toolbar window before creating the automation session and allowing more time for UI Automation discovery in #51343
• Stabilized ZoomIt tray-icon UI tests by retrying notification-overflow opening and reporting the exact readiness condition that failed in #51344
• Kept the pointer away from taskbar hover targets during ZoomIt tray-icon UI tests so the Windows 10 News and Interests feed cannot cover the overflow in #51395

@oh-my-pi/pi-agent-core

Fixed

• Enabled native compaction for supported Bedrock Claude models (#16343 by @anatoli-tsinovoy)

@oh-my-pi/pi-ai

Added

• Added opt-in reclaimAbovePct to auth.accountPolicies: sessions automatically moved to a lower-priority account return to the preferred one once it has that much quota left (#14237 by @will-bogusz)
• Added reachesBudgetedHost(): whether the catalog's host request budgets (inline image bytes, official image count) apply to a request, true on a model's official endpoint and on Factory Droid's own hosts (#16288 by @will-bogusz)
• Added Inception API-key login (/login inception) and INCEPTION_API_KEY environment authentication (#16439 by @eggpeat)
• Added image support for native OpenAI Decisions and Workers AI judgments, prompted vision chat, and auth-gateway System One requests; images exceeding a judgment API's documented caps (e.g. Clef's 4 images, 4 MiB each) are rejected locally (#15471 by @anatoli-tsinovoy).
• isSurvivingAssistant in providers/transform-messages: whether an assistant turn reaches a replay, malformed tool calls dropped first, so callers outside transformMessages pick the same latest turn (#15791 by @will-bogusz)
• Broker account-pool files (OMP_AUTH_BROKER_ACCOUNT_POOL_FILE) can hide whole providers and API keys: "*": false makes the file an allow-list, and an entry can be true, false, or { "accounts": [...], "apiKeys": false } (#14235 by @will-bogusz)

Changed

• cursorRawReadPath() writes a bare start line as raw:N- (file:10 → file:raw:10-), so Cursor exec reads of such a path still read from line N onward now that read takes N:raw as one line (#16438 by @will-bogusz)

Fixed

• Fixed Anthropic and Bedrock logging one warning per dropped thinking block (hundreds for one request) after a conversation change; the drop now logs one warning with the count (#16392 by @will-bogusz)
• Fixed Factory Droid Core models (Kimi, GLM, DeepSeek and others) dropping calls to tools with names over 64 characters and their results from later requests; such names now shorten to 64 characters, and shorter names are sent unchanged (#16384 by @will-bogusz)
• Fixed Devin /usage showing no data for accounts signed in with /login devin, and Devin chat sending a failing extra auth request for legacy Windsurf Enterprise keys (#13677 by @will-bogusz)
• Turns stopped for a thinking loop now keep the tokens and cost the provider had reported, the response id, the request's start time, and its time to first token and duration, instead of recording zero usage and no timing (#16437 by @will-bogusz)
• Fixed Claude requests answering a turn whose attachment is a video, PDF, HEIC or other format sent outside a JPEG/PNG/GIF/WebP image as if nothing were attached; the turn now fails with an error naming the format (#16407 by @will-bogusz)
• Fixed the repeated-tool-call guard missing a loop the model interleaves with a wait that elapses with nothing new; a wait that returns finished work still ends the repetition (#11874 by @dickyudhandika)
• Fixed Google Antigravity chat and image requests failing with false 429 quota-exhausted errors (#11849 by @jotafurtado)
• Fixed the stream loop guard never stopping a model stuck repeating punctuation or symbols (?!?!, ✓✓✓) until the output limit; such runs now trip once they repeat for 1 KB, while digit and whitespace runs such as padding and hexdumps are left alone (#14436 by @F0Rextasy)
• Fixed native remote compaction for supported Bedrock Claude models without changing ordinary Converse turns; a custom non-AWS baseUrl needs remoteCompaction.enabled: true (#16343 by @anatoli-tsinovoy)
• Fixed Anthropic compaction blocks dropping their signed tool_changes, which made the replayed block fail its signature (#16343 by @anatoli-tsinovoy)

@oh-my-pi/pi-catalog

Added

• Added native Inception support with Mercury 3, Mercury 2.5, and Mercury 2, live chat-model discovery, API-key login, reasoning controls, and Mercury 3 launch pricing while its catalog reports none; Mercury 3 waits up to 10 minutes for its first output, since high-effort reasoning streams nothing (#16439 by @eggpeat)

Changed

• Changed Devin model discovery to send legacy Windsurf Enterprise keys unprefixed in one request, dropping the Windsurf-editor retry that returned a smaller model list (#13677 by @will-bogusz)

Fixed

• Factory Droid now carries Droid's 3.5 MB inline-image budget (inline-image-byte-budget) for its hosted routes, under their 4.5 MB request limit, and the new request-body-byte-limit axis (resolveRequestBodyByteLimit) records that limit; it applies on Factory's own hosts through pi-ai's reachesBudgetedHost (#16288 by @will-bogusz)
• DeepSeek V4.1 Flash images are now priced by DeepSeek's own billing (994 tokens for a snapcompact frame) instead of a GPT or Claude rate (2,882 to 3,136), so a 25-frame archive no longer counts about 50k tokens the provider never bills and triggers compaction early (#16418 by @will-bogusz)
• Fixed Amazon Bedrock Kimi K3 (global./us.moonshotai.kimi-k3) offering Anthropic-style thinking budgets it ignores; it now offers low, high and max effort, defaulting to max (#13697 by @alblez)
• Marked supported Bedrock Claude models as eligible for native compaction (#16343 by @anatoli-tsinovoy)

@oh-my-pi/pi-coding-agent

Added

• bash tool commands now see PI_SESSION_ID and PI_SESSION_FILE, so a script can find the running session's ID and transcript path (#16442 by @johnrichardrinehart and @will-bogusz)
• Added GitLab merge request support to /review and /annotate code-review: pass an MR URL, pick one mentioned in the conversation, or choose "Review a specific PR/MR" in a GitLab checkout to list open MRs (requires glab); large MRs link per-file diffs through the new mr://<host>/<group>/<project>/<iid>/diff URLs (#16361 by @Shadorain)
• Added MCP tool progress: tools/call requests ask the server for notifications/progress when the progress can be shown, and updates appear in the running tool card and as an in-place mcp_progress status line in Eval cells, including after auto-backgrounding; request deadlines and Eval timeouts are unchanged (#16431 by @alphastorm)
• Added image attachments to single and batch eval judge()/judge_batch() calls (local paths or embedded images); image judgments skip candidates without image support and fail explicitly instead of dropping images (#15471 by @anatoli-tsinovoy)
• Added a job tree to /jobs, /jobs full and the jobs pill's sheet, in the terminal UI and over ACP: subagents' background jobs now appear nested under the task that runs them, with the busiest branches listed first; only your own jobs offer Cancel (#15854 by @H4vC)
• Added ctx.ui.getEditorComponent() so extensions can wrap the active custom editor factory instead of replacing it (#8655 by @jovi-tsx)
• omp auth-gateway serve and check can be limited to the providers and API keys the account-pool file allows, using "*": false and "apiKeys": false (#14235 by @will-bogusz)
• omp usage shows an account's reclaimAbovePct next to its priority and reserve (#14237 by @will-bogusz)

Changed

• An agent that messages another agent can now wait for the reply instead of erroring; the wait ends early, without an error, once the agent asked finishes its turn without replying or is itself waiting on the caller's result (#16445 by @will-bogusz)
• Built-in style rule reminders no longer tell the model a user-defined rule matched and it MUST comply; they ask it to check its code against the rule and its exceptions, so models rewrite code a built-in rule allows less often (#16420 by @will-bogusz)
• read of a SQLite ?q=SELECT … query now accepts &limit= and &offset= and pages the query's rows, as table reads and JSON ?q= reads already do, instead of rejecting the read (#16444 by @will-bogusz)
• Agents using the browser tool are steered to wait for the text, URL or element they need after a click or navigation instead of sleeping a fixed time, which can finish steps sooner on pages that load content after a variable delay (#16404 by @will-bogusz)
• The pinned Subagents list shows how many agents are running and the agent hub key, and previews an agent's assignment at full width instead of the first 40 characters of its prompt template (#16486 by @H4vC)

Fixed

• Fixed auto-QA reports whose tool is a URI (xd://tui: …) being filed under the wrong tool name; a one-line report without : after its tool name is now refused with the format hint (#16278 by @will-bogusz)
• Fixed agents guessing conflict://<N> ids for merge conflicts a ranged read didn't show: the warning and the not-found error now point to <path>:conflicts to register them (#16269 by @will-bogusz)
• Fixed agents opening your own Chrome through the relay (with browser.relay on) when they asked the browser tool for Chromium with app.tern: false; the tool now points them to app.relay: false (#16294 by @will-bogusz)
• Fixed %pip install in Python eval failing with "No module named pip" when the kernel's interpreter is a venv without pip, such as one made by uv venv: it now installs pip into that venv first, with ensurepip or, where that is unavailable, uv (#16300 by @will-bogusz)
• Reduced HTTP 413 failures on Factory Droid once a session's screenshots and pasted images pass Factory's 4.5 MB request limit: older inline images are now dropped to keep them under 3.5 MB, while the newest message's and newest tool result's images stay when they alone fit the limit; a custom gateway baseUrl is left alone (#16288 by @will-bogusz)
• Fixed hashline edits under an older tag overwriting the wrong line when their line numbers came from grep -n, sed -n or a :raw read: a shifted edit whose body matches the current line at those numbers, or that breaks the file's syntax, is now rejected with the current tag and lines (#16383 by @will-bogusz)
• Fixed PI_SESSION_FILE in eval cells being a relative path when omp was started with a relative --session-dir (or PI_CODING_AGENT_SESSION_DIR), so it no longer worked once code changed directory (#16442 by @will-bogusz)
• Fixed waking a parked subagent re-sending its whole conversation without the prompt cache whenever other agents had started, finished or parked meanwhile (#15523) (#16369 by @will-bogusz)
• Fixed edit accepting changes to lines nothing showed after a stale or unknown tag: a resend under the current tag from the rejection now passes the seen-line check only on the rows that rejection printed (or a retained read showed), so a line seen only through bash is no longer overwritten blind (#16422 by @will-bogusz)
• Fixed plugin settings marked secret being readable by other local users in omp-plugins.lock.json; the lockfile is now written owner-only (0600) (#12999, #16368 by @jonasboos)
• Fixed agents misreading computer.windows() results on their first call (#16299 by @will-bogusz)
• Fixed GitLab merge request reads rendering [object Promise] instead of the description (#16477 by @adi-IL)
• Fixed /restart losing the active named profile and failing to resume its session (#15742 by @sapran)
• Fixed aborted and timed-out stdio MCP requests continuing to run on the server: OMP now sends notifications/cancelled with the original request id, once and never for initialize, after settling the call and without waiting on the pipe (#16430 by @alphastorm)
• Fixed the agent restarting on its own after you stopped it with Esc whenever a background subagent or job finished; the result is recorded in the transcript and the agent waits for your next message
• Fixed Mnemopi memory completions ignoring the memory role's thinking suffix, including one inherited from tiny or smol when modelRoles.memory is unset; each retry.fallbackChains.memory entry sends its own level, and :off disables reasoning (#16378 by @alphastorm)
• Fixed MCP tools running a call twice when the server connection dropped mid-request: a stdio request already written to the server, or an HTTP or legacy SSE request whose connection reset or closed after it was sent, now fails as non-retryable with a diagnostic saying it may have run, instead of being replayed after a reconnect; requests that never left OMP, including refused connections, still reconnect and retry once (#16429 by @alphastorm)
• Fixed /move path completion jumping into a subfolder on Tab: .., ., and ~ now complete to ../, ./, and ~/ before listing their children, a trailing \ lists a folder on Windows, absolute Windows paths (C:/…) are no longer rewritten as relative paths, and the project directory is offered as ./ instead of /
• Fixed edit blaming boundary indentation when a one-row replacement only fails because its body ends with a trailing comma (e.g. the last element of a JSON array); the error now names the comma (#16423 by @will-bogusz)
• Fixed a timed-out browser selector action dropping its match count without a word when omp could not count the matches; the error now says why (#16389 by @will-bogusz)
• Fixed every session in a project without .vscode/mcp.json logging a "[VS Code] Failed to read …/.vscode/mcp.json" warning; a missing file is now skipped silently, while an unreadable or unparsable one still warns (#16434 by @will-bogusz)
• Fixed agents opening pages in your own signed-in Chrome when browser.relay is on and you asked for a throwaway browser (#16390 by @will-bogusz)
• Fixed the built-in ts-no-tiny-functions and ts-promise-with-resolvers rules reminding you about code they allow: exported functions, public class and object members, type guards, if/try/catch blocks, and never-settling new Promise(() => {}) (#16419 by @will-bogusz)
• Fixed read losing the last lines of a comma list that pairs ranges with a tail (file:1-30,-30, file:1-30,:-30), and erroring on the same list for artifact:// and other internal URLs; both parts are now read (#16435 by @will-bogusz)
• Fixed edit rejecting a placeholder tag (#AUTO, #????), a missing tag, or a header with no ops without naming the file's current tag; these now get the same reply as an unknown tag, so the retry can use that tag instead of a read (#16425 by @will-bogusz)
• Fixed read line ranges and tails (:9-11, :-50) of macOS .sample.txt reports and .cpuprofile files returning lines of the generated profile summary instead of the file, so edits from them were rejected as stale; the summary now appears only on a whole-file read, without line numbers (#16397 by @will-bogusz)
• Models whose provider strips images from requests, such as DeepSeek V4 Flash on Venice or NanoGPT, now get text compaction and text-only image handling like text-only models; snapcompact archived onto frames that reached them as [image omitted] placeholders, and history images were still processed and uploaded before being dropped (#16436 by @will-bogusz)
• Line range reads of ssh://, URLs and other in-memory resources no longer return only the line above the range when that line fills the 50KB budget; the page now starts at the requested line, and byte-limit notices state the 50KB limit instead of the bytes shown (#16391 by @will-bogusz)
• Fixed Auto-QA grievances sharing your home directory and login name with the qa.omp.sh collector; paths under your home are sent as ~/…, and the login name inside labels and paths as <user>, including reports recorded before this fix (#16409 by @will-bogusz)
• Fixed the computer tool's control.acquire prompt, left unanswered, failing the whole call with "Computer code execution timed out"; the prompt now expires shortly before the timeout and the call returns reason: "unanswered" (#16388 by @will-bogusz)
• Fixed reads whose optional leading context line exceeded the byte budget returning only the oversized-line notice or a preview of that context line and hiding the requested lines; the read now retries from the requested start without leading context (#16485 by @adi-IL).
• Fixed read path:N:raw (and :raw:N, URLs included) returning a page from line N instead of the one line N; grep on internal and web URLs now filters :N:raw to that line too, and :N-:raw still runs on from N (#16438 by @will-bogusz)
• Fixed Anthropic web search answers breaking into separate paragraphs at every citation, with sentences split mid-way and lines starting with . (#16396 by @a-glapinski)
• Fixed custom tools that import an @oh-my-pi/* package (such as @oh-my-pi/pi-natives or @oh-my-pi/pi-utils) failing to load with "Cannot find package" in the installed omp binary; they now get the host's copy, as extensions already did (#16421 by @will-bogusz)
• Fixed resuming a session selecting an abandoned branch after a late off-branch entry such as a background bash result; off-branch entries now record the active leaf they interrupted and replay restores it (#16483 by @adi-IL).
• Fixed hashline REM deleting and MV moving a file under an invented or stale tag; a bare file op now needs the file's current tag, like a line edit (#16381 by @will-bogusz)
• Fixed write deleting the leading numbers of every line in content such as hex dumps, disassembly and timestamped logs; it now removes copied read line numbers only when they count up by one, as read and grep print them (#16441 by @will-bogusz)
• Fixed auto thinking chosen for the DEFAULT role in the /model hub reverting to the model's default effort (e.g. max on Z.AI glm-5.3) on the next launch (#16370, #16398 by @alvadorn)
• Fixed Google Antigravity web search failing with false 429 quota-exhausted errors (#11849 by @jotafurtado)
• Fixed omp exiting to the shell when the model picker (Alt+P) or model hub opened after compatibility extensions loaded (#12293, #12653 by @wolfiesch)
• Fixed todo lists set over RPC set_todos disappearing when the session is reloaded, resumed, or compacted; RpcClient.setTodos() sends the command (#12590 by @anthonyrisinger)
• Fixed batch task calls silently running the default agent when a specialist such as reviewer, scout, or a custom agent was set at the top level instead of in tasks[].agent; the call is now rejected with that guidance (#12610 by @dbc-hbin)
• Fixed sessions started before an omp upgrade losing word completion and restarting the shared word-completion daemon every 30 seconds, which reloaded its model for every session on the new version; they now use the newer daemon (#15610) (#16380 by @will-bogusz)
• Fixed supported Bedrock Claude models falling back to soft instead of remote compaction (#16343 by @anatoli-tsinovoy)
• Fixed browser tab.run(fn, [url]) and browser.open("https://…") failing with a bare "expects an options object"; the errors now say to pass { args: [...] } and browser.open({ url, name }) (#16236 by @will-bogusz)
• Fixed the built-in ts-set-map, ts-import-type and ts-no-any rules reminding you about code they allow: an empty or computed Set/Map, a runtime await import(), or the word "any" in a comment (#16242 by @will-bogusz)

@oh-my-pi/pi-mnemopi

Fixed

• Fixed background fact extraction storing only the first 5 facts of a plain-line extractor answer; it now keeps up to 20, matching JSON answers (#16377 by @alphastorm)

@oh-my-pi/pi-natives

Changed

• Reduced native Git diff allocation overhead (#16349 by @kyle-elliott)
• Reduced native memory-reranking allocations when candidate text contains repeated words (#16348 by @kyle-elliott)
• Reduced allocation overhead when collecting directory grep results, including paginated searches (#16226 by @kyle-elliott)
• Token counting for OpenAI, Qwen, DeepSeek, Kimi, GLM and Jev models is 11-30% faster on English text, code and Markdown (#16399 by @will-bogusz)

Fixed

• Fixed index.d.ts drifting from the generated bindings, so building the natives no longer leaves the checkout modified (#16306 by @will-bogusz)
• Fixed cargo test writing crash reports from panicking Rust tests into your real ~/.omp/logs: they now go to a per-user pi-natives-test-logs-<uid>/ under the OS temp dir (#16386 by @will-bogusz)
• Fixed the bash tool's rm -rf reporting No such file or directory for entries another process removed first and leaving the parent directories behind; under -f an entry already gone now counts as removed, as in GNU rm (#16433 by @will-bogusz)
• Fixed the bash tool's rg -c and rg --count-matches printing path:0 for every file without a match; zero counts are now printed only with --include-zero, as in ripgrep (#16432 by @will-bogusz)
• Fixed ln -s local://… <path> in the bash tool creating a host symlink that holds the URL text, which nothing can follow; a symlink on the host to a file-backed URL now stores the file it stands for (#16428 by @will-bogusz)
• Fixed macOS background input leaving the target app in front of yours when it came forward just as you clicked another window of your app; your app comes back with the window you clicked (#16217 by @will-bogusz)
• Fixed omp sessions on macOS adding a terminal icon to the Dock after the computer tool listed displays (#13455 by @VelizarSeleznev)

@oh-my-pi/snapcompact

Fixed

• Fixed snapcompact archive frames for Factory Droid models ignoring Factory's inline-image budget: they are now sized to half of it, like other budgeted hosts (#16288 by @will-bogusz)

@oh-my-pi/pi-tui

Added

• Added mergeLineRanges and an optional BareLineMode argument to parseLineRanges ("single" reads a lone bare N as that one line) (#16435 by @will-bogusz)

Changed

• selectorLineRanges() reads a bare N compounded with raw (17:raw, raw:17) as the single line N; parseLineRanges() takes an optional "single" mode for the same rule (#16438 by @will-bogusz)
• Collapsed wait cards show one row per finished job (or a single "waiting on N jobs" line) instead of re-printing the whole job tree on every poll; Ctrl+O shows the full tree (#16486 by @H4vC)
• Bash cards show the elapsed time while a command runs, and wall time, timeout and backgrounded job in the bottom border instead of a separate ⟨…⟩ line (#16486 by @H4vC)
• The terminal /jobs sheet shows the selected job's full command (#16486 by @H4vC)
• Grep, glob, find, IRC message, and proc:///agent:///cfg:// result rows start at the same column as other tool rows (#16486 by @H4vC)

Fixed

• Fixed Tern sessions logging TSP: terminal stopped acknowledging frames every 5 seconds for as long as the terminal stops acknowledging frames; it now warns once per stall and logs the stall's length when acknowledgements resume (#16393 by @will-bogusz)
• splitPathAndSel and splitInternalUrlSel peel comma line lists that include a tail chunk (:1-12,-15) or repeat the colon after a comma (:1-30,:-30, also beside :raw); splitPathAndSel(path, { foldListColons: false }) keeps the repeated colon in the path (#16435 by @will-bogusz)
• Generic tool cards now reveal the complete result when expanded (#15335 by @yuzu-octopus)
• Added footerMeta to OutputBlockOptions and ToolCardSnapshot to draw short facts inside a frame's bottom border (#16486 by @H4vC)
• Fixed markdown table rows shattering at narrow widths when a wide glyph sat in a one-cell column; the glyph is now clamped to its column instead of re-wrapping the row (#16479 by @adi-IL).
• Fixed charts in answers drawing as blank bands, on screen and in scrollback, when iTerm2 drew them in a background tab; inline images now carry an explicit height in rows (#16471 by @galtamam-cmyk)
• Fixed an inline image (such as a table's chart) disappearing in iTerm2 when new output pushed it past the top of the screen; it now moves to scrollback whole (#16467 by @galtamam-cmyk)
• Fixed inline images, hyperlinks, notifications and styled underlines staying off in iTerm2 sessions reached over SSH, where the forwarded LC_TERMINAL marker was ignored (#16450 by @yuzu-octopus)
• Added Eval mcp_progress status events, updated in place per call and evictable under the status-event cap, plus formatMCPProgress() and MCPToolDetails.progress for MCP progress display (#16431 by @alphastorm)

@oh-my-pi/pi-utils

Breaking Changes

• readTarEntriesFromBuffer() in @oh-my-pi/pi-utils/ar/tar now returns Promise<ArchiveIndexEntry[]> instead of ArchiveIndexEntry[]; await its result (#16394 by @will-bogusz)

Added

• Added maxStreamSize to ArchiveLimits (default 4 GB): the most a large .tar.gz or .tar.zst may decompress in one pass, so a decompression bomb fails instead of running without bound (#16394 by @will-bogusz)

Fixed

• Fixed bun test runs writing their logs into your real ~/.omp/logs: test processes now log to a per-user omp-test-logs-<uid>/ under the OS temp dir (#16386 by @will-bogusz)
• Fixed .tar.gz and .tar.zst archives that decompress past 256 MB failing to list or read with a raw Cannot create a Buffer larger than … error; a bare .gz or .zst that large now names the archive size limit (#16394 by @will-bogusz)
• Fixed frontmatter repair deleting HTML comments from document bodies and plain markdown; it now strips only leading comments ahead of the opening delimiter, so prompt bodies keep their comments (#16481 by @adi-IL).

What's Changed

• fix(mnemopi): keep up to 20 plain-line extracted facts per memory by @alphastorm in #16377
• fix(memory): forward the memory role's thinking level by @alphastorm in #16378
• perf(natives): avoid temporary vectors in directory grep by @kyle-elliott in #16226
• perf(natives): deduplicate MMR tokens before allocating owned strings by @kyle-elliott in #16348
• perf(natives): reuse the first rendered Git diff buffer by @kyle-elliott in #16349
• feat(catalog): add native Inception provider for Mercury models by @eggpeat in #16439
• fix(web): render the GitLab merge request description by @adi-IL in #16477
• fix(tui): tightened wait, bash, jobs and subagent HUD rendering by @H4vC in #16486
• fix(pi-builtins): print rg counts only for files with matches by @will-bogusz in #16432
• fix(tui): give iTerm2 inline images an explicit height so background tabs keep them by @galtamam-cmyk in #16471
• fix(utils): keep HTML comments in frontmatter bodies by @adi-IL in #16481
• fix(coding-agent): keep DEFAULT-role auto thinking on fresh launch by @alvadorn in #16398
• fix(bedrock): enable native Claude compaction for Converse models by @anatoli-tsinovoy in #16343
• fix(mcp): don't replay a tool call after its request was sent by @alphastorm in #16429
• fix(mcp): cancel aborted and timed-out stdio requests on the server by @alphastorm in #16430
• fix(write): keep content whose leading numbers do not count up by one by @will-bogusz in #16441
• fix(coding-agent): keep a newer text-predict daemon instead of shutting it down by @will-bogusz in #16380
• fix(edit): required a live tag for bare hashline MV and REM by @will-bogusz in #16381
• fix(task): reject misplaced batch agent selectors by @dbc-hbin in #12610
• feat(mcp): show tools/call progress in tool updates and eval status by @alphastorm in #16431
• fix(session): replay the active leaf after an off-branch entry by @adi-IL in #16483
• fix(coding-agent): load custom tools that import omp packages in the binary by @will-bogusz in #16421
• fix(coding-agent): point browser waits at waitFor* helpers instead of fixed sleeps by @will-bogusz in #16404
• fix(coding-agent): say computer.windows() returns plain records, not window handles by @will-bogusz in #16299
• fix(catalog): correct thinking efforts for Bedrock Moonshot Kimi K3 by @alblez in #13697
• fix(tui): keep wide-glyph table cells inside their column by @adi-IL in #16479
• fix(coding-agent): keep Anthropic web search citations inline in the answer by @a-glapinski in #16396
• Guard catches models stuck in punctuation-only loops by @F0Rextasy in #14436
• fix(read): read one line for a bare N beside :raw by @will-bogusz in #16438
• fix(rpc): persist host todo edits on the session branch by @anthonyrisinger in #12590
• fix(coding-agent): prevent model picker exits with compatibility plugins by @wolfiesch in #12653
• fix(coding-agent): preserve active profile across restart by @sapran in #15742
• fix(tui): detect iTerm2 over SSH from the forwarded LC_TERMINAL marker by @yuzu-octopus in #16450
• fix(read): keep requested lines when leading context exceeds the byte budget by @adi-IL in #16485
• fix(coding-agent): close an unanswered computer.control.acquire prompt before the call times out by @will-bogusz in #16388
• fix(coding-agent): redact home directory and login name from autoqa grievances by @will-bogusz in #16409
• fix(coding-agent): kept requested lines in in-memory range reads by @will-bogusz in #16391
• fix(coding-agent): keep the plugin runtime lockfile readable only by its owner by @jonasboos in #16368
• fix(natives): kept omp out of the macOS Dock when it touches AppKit by @VelizarSeleznev in #13455
• fix(ai): omit Antigravity requestType to avoid false 429 quota exhaustion by @jotafurtado in #11849
• fix(tui): let Ctrl+O uncap generic tool cards and drop the 64 KiB native pre-slice by @yuzu-octopus in #15335
• feat(review): support GitLab merge requests in /review and /annotate by @Shadorain in #16361
• fix(tui): commit an iTerm2 inline image to scrollback whole instead of splitting it by @galtamam-cmyk in #16467
• fix(ai): exempt tool-call turns must not reset the loop-guard counter by @dickyudhandika in #11874
• fix(edit): counted only a mismatch reply's displayed rows as seen by @will-bogusz in #16422
• fix(ai): fail Claude turns that attach media Claude cannot read by @will-bogusz in #16407
• fix(coding-agent): gate snapcompact on images the wire actually sends by @will-bogusz in #16436
• fix(utils): stream tar.gz and tar.zst archives that decompress past the in-memory limit by @will-bogusz in #16394
• fix(coding-agent): read profile line ranges from the file, not its summary by @will-bogusz in #16397
• fix(coding-agent): keep a warm-revived subagent's peer roster as it last saw it by @will-bogusz in #16369
• feat(coding-agent): expose PI_SESSION_ID and PI_SESSION_FILE to bash commands by @will-bogusz in #16442
• fix(ai): keep usage and timing on thinking-loop aborts by @will-bogusz in #16437
• perf(natives/utok): memoize short-piece merge counts per thread by @will-bogusz in #16399
• fix(ai,catalog): encode Devin credentials by shape and drop the Windsurf fallbacks by @will-bogusz in #13677
• fix(edit): refuse stale-tag remaps aimed at the current lines by @will-bogusz in #16383
• fix(catalog): price DeepSeek V4.1 Flash images by its own vision config by @will-bogusz in #16418
• fix(catalog,coding-agent): keep Factory Droid requests under its body limit by budgeting inline images by @will-bogusz in #16288
• fix(edit): answered placeholder tags, missing tags and header-only input with the current tag by @will-bogusz in #16425
• fix(coding-agent): install with %pip into venvs that have no pip by @will-bogusz in #16300
• fix(read): read tail chunks in comma line lists by @will-bogusz in #16435
• feat(read): page SQLite ?q= query rows with limit and offset by @will-bogusz in #16444
• fix(coding-agent): word built-in rule reminders as a check against the rule, not a user-defined MUST by @will-bogusz in #16420
• feat(ai): let broker account-pool files act as a provider and API-key allow-list by @will-bogusz in #14235
• feat(ai): opt-in account reclaim for accountPolicies by @will-bogusz in #14237
• fix(ai): keep Factory Droid Core calls to long-named tools in later requests by @will-bogusz in #16384
• fix(browser): tell agents how to skip a configured relay by @will-bogusz in #16294
• fix(utils,natives): keep test runs out of the real ~/.omp/logs by @will-bogusz in #16386
• fix(pi-builtins): treat entries already gone as removed under rm -f by @will-bogusz in #16433
• fix(coding-agent): fire ts-set-map, ts-import-type and ts-no-any only on code they flag by @will-bogusz in #16242
• fix(coding-agent): fire ts-no-tiny-functions and ts-promise-with-resolvers only on code they flag by @will-bogusz in #16419
• feat(coding-agent): let wait block for the reply to a message the agent sent by @will-bogusz in #16445
• fix(pi-builtins): link host paths to the file a backed URL aliases by @will-bogusz in #16428
• fix(tui): warn once per TSP ack stall instead of every 5 s by @will-bogusz in #16393
• fix(coding-agent): tell the model an open without app drives the user's Chrome while the relay is on by @will-bogusz in #16390
• fix(ai): log one warning per request for dropped thinking blocks by @will-bogusz in #16392
• fix(coding-agent): skip a missing .vscode/mcp.json without warning by @will-bogusz in #16434
• fix(coding-agent): say why a timed-out browser selector's matches could not be counted by @will-bogusz in #16389
• fix(edit): name the trailing comma when a one-row replacement only fails on it by @will-bogusz in #16423
• fix(coding-agent): name registered conflict ids when a hidden block is guessed by @will-bogusz in #16269
• fix(coding-agent): name the expected shape when browser tab.run gets an args array or open gets a URL by @will-bogusz in #16236
• fix(coding-agent): keep URIs in auto-QA report tool names by @will-bogusz in #16278
• test(natives): let the macOS release-helper wait test wait for its shell stand-in by @will-bogusz in #16405
• fix(natives): keep a macOS user's app in front with the window they clicked when the target comes forward by @will-bogusz in #16217
• chore(natives): regenerate index.d.ts from the current bindings by @will-bogusz in #16306

New Contributors

• @alvadorn made their first contribution in #16398
• @alblez made their first contribution in #13697
• @sapran made their first contribution in #15742
• @jonasboos made their first contribution in #16368
• @VelizarSeleznev made their first contribution in #13455
• @jotafurtado made their first contribution in #11849
• @dickyudhandika made their first contribution in #11874

Full Changelog: v18.12.3...v18.12.4

@oh-my-pi/pi-agent-core

Added

• AgentTool gained the optional approvalCacheTargets hook, which the always-ask-cached approval mode uses to check and record per-file grants (#16049 by @Peribunt)

Changed

• Tools with lenientArgValidation now receive unknown root arguments that their closed schema would otherwise drop, so they can reject them (#16317)

@oh-my-pi/pi-ai

Added

• Added validateToolArguments(tool, call, { keepUnknownRootKeys: true }) to keep unknown root keys that a closed schema would otherwise drop during argument repair (#16317)

Fixed

• Fixed Claude streams that a gateway cut off before message_delta failing the turn instead of being retried (#16341 by @lz-lunzi)
• Fixed Gemini pairing parallel same-name tool results with the wrong call when history stores them out of call order (sessions from before 18.4.2, SDK-built contexts) (#16259 by @will-bogusz)
• Fixed Factory Droid Gemini dropping calls to tools with names over 64 characters (most MCP tools) and their results from later requests, so the model called the tool again; such names now shorten to 64 characters (#16283 by @will-bogusz)
• Fixed Factory Droid Gemini requests failing with 400 "For schema with items, schema type should be ARRAY" when a tool parameter accepts a string or a list, as the default task tool's model field does (#16249 by @will-bogusz)
• Fixed PI_REQ_DEBUG=1 request dumps writing your API key, bearer token and response cookies to disk in plain text: credential headers now read [redacted], as in rejected-request dumps (#16293 by @will-bogusz)
• Fixed finalized signed reasoning disappearing from displayed thinking when no deltas streamed (#16227)

@oh-my-pi/pi-catalog

Changed

• MiniMax MiniMax-M3.1-Flash (the launch id) now gets the always-on low–max thinking the bundled MiniMax-M3.1-Flash-Preview rows have, and omits sampling params (temperature, top_p, top_k) it rejects (#16315 by @SaladDay)

Fixed

• Gemma 4 models on Google AI Studio (google/gemma-4-31b-it, google/gemma-4-26b-a4b-it, …) no longer fail every request with Thinking budget is not supported for this model; thinking is now toggled with thinkingLevel (on = high, off = minimal) (#16350)

@oh-my-pi/pi-coding-agent

Added

• Added the Ask and remember approval mode (tools.approvalMode: always-ask-cached, --approval-mode always-ask-cached): it also asks before file reads, and file prompts can remember the folder or the file, for this session or across sessions, through approval-cache.db (#16049 by @Peribunt)
• Added /forget-approvals to forget every file and folder approval Ask and remember has recorded (#16049 by @Peribunt)
• Extension ui.approve() hosts can render the new prompt.grants choices and answer { grant, always }; hosts that ignore them keep answering once/session/deny (#16049 by @Peribunt)
• Extension and custom tools can declare approvalCacheTargets to take part in Ask and remember grants (#16049 by @Peribunt)
• Added proc://<id>/streams for bash jobs: it lists the command's pipes, and proc://<id>/streams/<n> shows what has crossed pipe n so far, so cmd | tail -5 can be followed live without rerunning cmd
• Background job widgets are designed per job by the new widget model role (resolves like smol until you assign it): one request writes rules that read the job's output and its pipes (cmd | tail included), and every later update is computed locally with no further model calls or messages to the agent; a subagent gets a widget only once it says which output shows its progress, and a job with nothing worth charting gets none; turn them off with async.widgets: false
• Running subagents now show their current step, in their own words, on the task card; the periodic completion check also asks the subagent which output shows its progress, so the job widget knows what to chart
• The wait card shows the watched jobs as a row of tiles, each with its status, name (a subagent's in full), what it is doing, and its headline figure and live widget when it has one (a throughput chart with its target line, per-model bars, CI job status, trial progress), and a subagent's own completion estimate as a ring that turns from blue to green as it fills (hover the tile for the percentage); the HUD jobs pill shows the freshest job's headline and a mini chart, and hovering it opens a card with the running jobs as tiles; the jobs sheet shows the selected job's widget above its output, and the terminal status line appends the headline to the jobs count

Changed

• While a subagent is focused, /model, /switch, /effort, Alt+P, Ctrl+P, and Shift+Tab change that subagent's model and thinking level (session-only) instead of telling you to return to the main session; /model and Alt+M open the session-only picker there, since role assignments configure the main session

Fixed

• Fixed omp skill list omitting skills from a skills.customDirectories entry that starts with ~; such an entry now resolves against your home directory, matching the skill loader (#16347 by @yuzu-octopus)
• Fixed grep treating a ;-separated list of internal URLs (e.g. artifact://44;artifact://43) as one URI and refusing to search it; every listed resource is now searched (#14091)
• Fixed grep refusing a web URL that carries a :raw (or :conflicts) selector before the page was fetched; the selector now reaches the fetch, so :raw searches the verbatim response body (#14092)
• Fixed browser role/<role>[name="…" exact] selectors in Chromium and Tern tabs matching nothing for many names copied from observe(); a button or link with visible text is no longer matched by its title (#16252 by @will-bogusz)
• Fixed /tan clones with Mnemopi auto-recall re-sending the parent's recalled memories as an extra system-prompt block, which duplicated them and missed the parent's prompt cache (#16337)
• Fixed legacy pi extensions that import contentText from pi-ai or formatSkillsForPrompt from pi-coding-agent, such as pi-claude-bridge, failing to load (#16313 by @Jerryx333)
• Fixed legacy Pi plugins such as pi-ssh-remote crashing at session start when reading shell settings through SettingsManager (#16256)
• Fixed newly authenticated models missing from the current session's scoped /model picker and model cycle after login, including setup-wizard sign-in, without changing the active model or widening the configured scope (#16234 by @lazy1523)
• Fixed the computer tool's control.acquire returning the same { active: false } when nobody could be asked (a subagent or headless run) as when you declined; it now reports reason: "no-ui" or reason: "denied" (#16295 by @will-bogusz)
• Fixed a browser screenshot waiting past its deadline when Chrome was slow to open a DevTools session; it now stops at the deadline (#16230 by @will-bogusz)
• Fixed a parked subagent waking up with the todo tool and its instructions when messaged, though subagents are spawned without them (#16281 by @will-bogusz)
• Fixed wait failing with "Skipped due to a queued background completion" when the job it was waiting for had just finished; it now returns that job's result, and a steer, peer message or aside arriving at the same moment no longer turns a settled job or waiting peer message into that skip (#16301 by @will-bogusz)
• Fixed the second of two extension asides (pi.sendMessage(…, { deliverAs: "aside" })) sent together to an idle session being lost; it now reaches the agent after the first (#16292 by @will-bogusz)
• Fixed every idle agent woken by an agent://all broadcast answering the sender automatically, mostly to say the message was not for it; a direct message still gets the woken agent's turn back (#16312 by @will-bogusz)
• Fixed a subagent woken by an IRC message sending its waker and parent every line of text it wrote that turn run together (Checking.Answer.) instead of just its final answer (#16302 by @will-bogusz)
• Fixed a parent follow-up sent while a peer-woken subagent was running leaving the accepted agent:// result unchanged and skipping the parent's completion (#16305)
• Fixed yield reporting success while silently omitting unsupported root fields; such calls are now rejected with an error naming the fields (#16317)
• Fixed brew install and brew upgrade of omp failing with a 403 behind corporate proxies (#16264 by @debanjanbasu)
• Fixed browser timeouts in the release binary surfacing as raw errors such as Og: Navigation timeout of 7000 ms exceeded; a timed-out tab.goto or browser.open now stops the pending load and keeps the tab, as running from source did (#16266 by @will-bogusz)
• Fixed find, glob and ast_grep always refusing ssh:// paths with "ssh:// access needs exec approval; this command was approved at read": they now ask for exec approval like read and grep do (#16285 by @will-bogusz)
• Fixed a conflict://* write of per-id lines with literal values (1: foo, 2: bar) writing all of them into every conflict block and reporting success; it now fails without touching the file and points to per-block conflict://<N> writes (#16267 by @will-bogusz)
• Fixed hashline block edits (PUT N*:, CUT N*) applying over block lines a read never fully showed, such as a line cut at the column cap, which silently dropped that line's tail; they are now rejected like the equivalent explicit range (#16209)
• Fixed a resumed session's next snapcompact compaction losing the newest archived history once the archive passed 500k characters, and drawing [Session persistence truncated large content] into its frames; the archive's source text is now saved whole (#16282 by @will-bogusz)
• Fixed /compact, /new or a session switch during a running tool dropping that tool's result from the session file, so the model and a resumed session saw "No result provided" instead of what the tool returned (#16241 by @will-bogusz)
• Fixed read middle-eliding large file pages into an artifact; a page past the output spill threshold now stops at a line boundary with an exact :N continuation (#16277)
• Fixed an edit after a restart replacing a line that read or grep had shown cut at the column cap and silently dropping the rest of that line; such edits now ask for a full :raw read of the line first, while edits to lines within the cap still apply (#16171)
• Fixed Enter on an unknown slash command such as /not-a-command running a command whose description happened to match it (e.g. /loop, which then resent every later prompt after each turn); Enter now sends what you typed, including as the deny-and-steer message for a pending tool approval, unless you select a suggestion first (#16265)
• Fixed read of web pages dropping collapsed sections such as accordion and expander panels (e.g. a product page's "Item details" table); content in <template>, <noscript> and scripts stays out (#16246)
• Fixed /mcp reauth and /mcp add opening an unrelated origin-root authorization server's login page when the authorization server an MCP server advertises in its protected-resource metadata has invalid metadata; discovery now uses only the advertised servers and reports the issuer mismatch naming the server (#16339)
• Fixed auto thinking offering the judge effort levels the current model does not support, which could leave a sparse-ladder model on the wrong level; with at most one usable level under the ceiling it now skips the judge call (#16327 by @savanne-kham)
• Fixed subagents that were cancelled, interrupted, timed out, or killed refusing messages as "hard-aborted and cannot be messaged or revived": a message (or Agent Hub revive/focus) now resumes them from their transcript with full context
• Fixed interrupting a focused subagent to send it a queued message (empty Enter) sometimes ending its run as cancelled before it read the message; the subagent now answers the message and keeps working
• Fixed sessions whose first reply starts with a todo plan getting a title without its icon and code: the plan's title refresh no longer replaces the card title that is still being generated
• Fixed generated titles that come out without an icon and code (a subagent's title, a title-model fallback, a malformed card reply) staying plain: they now get a card like /rename titles do
• Fixed running the test suite adding fixture titles (PLAN, renamed session, …) to your real ~/.omp/agent/history.db

@oh-my-pi/pi-natives

Added

• Added a hiddenContent option to htmlToMarkdown: "drop" (default) omits hidden content, "reachable" keeps content the page can reveal such as collapsed sections and inactive tab panels, and "all" also keeps <template> and <noscript> content; other values throw (#16246)
• Added normalizePtyDimensions(cols, rows) to size screen emulators with the same effective dimensions as native PTY sessions (#16192 by @C-W-Z)
• Added LineMatcher, a native multi-pattern line matcher: matchLines returns a batch's matches column-wise as typed arrays (line, pattern, and the UTF-16 span of each named group in groupNames() order)
• Added PipeStreams and the streams option of Shell.run: every pipe the run opens keeps a readable copy of its newest megabyte, so a stage's output stays visible while a later stage (| tail) holds it back

Fixed

• Fixed the output minimizer altering what ssh commands print in the bash tool: remote lines were cut to 120 characters and blank lines dropped; ssh's own login and connection notices are still stripped (#16314 by @will-bogusz)
• Fixed X11 background shortcuts and typing reporting Cancelled when you stopped them right after the last key went down: the key releases now always go out and the call succeeds (#16235 by @will-bogusz)
• Fixed wrapTextWithAnsi leaving rows half-empty in Chinese and Japanese text: CJK runs now break between characters to fill each row, closing punctuation such as ，。！」 never starts a row, and opening brackets never end one (#16219)
• Fixed a cancelled or timed-out macOS computer call finishing its lookup of a sheet, popover or menu window, up to 5,000 accessibility elements, before it stopped and let the next request run (#16233 by @will-bogusz)

@oh-my-pi/pi-tui

Added

• Added IrcMessage.broadcast, set on each copy of an agent://all broadcast so recipients can tell it from a direct message (#16312 by @will-bogusz)
• AutocompleteItem.descriptionMatch marks a slash command matched only through its description; Editor Enter no longer applies such a row unless the user moved the selection onto it (#16265)
• ApprovalDialogComponent accepts grants and onGrant: grant choices above Approve Once, led by a toggle that keeps them across sessions (#16049 by @Peribunt)
• Added describeJobWidget/renderJobWidgetLines to draw a background job's widget natively and as terminal lines, describeJobTiles/renderJobTileLines to draw jobs as tiles (status, title, figure, widget), and renderSparkline (with peakBuckets/fitSparkValues) for one-row block sparklines

Fixed

• Fixed transparent images with empty top rows disappearing inside Zellij (#16346 by @Bouska)
• Fixed bash output rewritten by the output minimizer skipping the per-line column cap (tools.outputMaxColumns), so a line wider than the cap reached the model whole; the raw output stays in its artifact (#16314 by @will-bogusz)
• Fixed the composer caret drifting one cell left per pasted image or video chip in terminals that draw the chip icon as a wide emoji (JetBrains terminal); the unicode preset now uses 📷/🎬 chip icons (#16270)
• Fixed Tern hiding user text sent with /skill:<name> inside a collapsed skill card; only the loaded skill prompt is hidden (#16311)
• Fixed SIXEL charts and images overlapping following content when their top rows scroll out of the viewport (#16245 by @JustasMasiulis).

@oh-my-pi/pi-wire

Added

• Added min, max and dashed reference marks to bars/spark chart nodes, a tone per series column, and the common hovercard prop: a node tree Tern floats over the node while the pointer rests on it

What's Changed

• fix(tui): clip SIXEL rasters at the viewport top by @JustasMasiulis in #16245
• fix(tui): kept Enter from running description-only slash matches by @roboomp in #16268
• fix(ai): preserved finalized native reasoning without deltas by @roboomp in #16229
• fix(tui): used emoji-presentation glyphs for image and video chips by @roboomp in #16276
• fix(tui): kept skill draft visible in tern transcript by @roboomp in #16320
• fix(read): paged file reads at the spill threshold instead of eliding by @roboomp in #16280
• fix(tui-debug): support native Windows without /bin/sh by @C-W-Z in #16192
• fix(ai): redact credential headers in PI_REQ_DEBUG dumps by @will-bogusz in #16293
• fix(coding-agent): keep a running tool's result when /compact, /new or a session switch aborts it by @will-bogusz in #16241
• fix(coding-agent): persist snapcompact archive source text whole by @will-bogusz in #16282
• fix(edit): checked every block line in the hashline seen-line guard by @roboomp in #16218
• fix(coding-agent): reject conflict://* per-id blocks with literal values by @will-bogusz in #16267
• fix(coding-agent): ask exec approval for ssh:// paths in find, glob and ast_grep by @will-bogusz in #16285
• fix(natives): never cancel X11 uinput releases by @will-bogusz in #16235
• fix(mcp): restricted oauth discovery to advertised auth servers by @roboomp in #16340
• fix(ai): keep Factory Droid Gemini tool schemas valid when a parameter takes a string or a list by @will-bogusz in #16249
• fix(ai): keep Factory Droid Gemini calls to long-named tools in later requests by @will-bogusz in #16283
• fix(ai): send parallel Gemini tool results back in call order by @will-bogusz in #16259
• fix(catalog): sent thinkingLevel for gemma 4 on google ai studio by @roboomp in #16354
• fix(browser): recognize Puppeteer timeouts in release builds by @will-bogusz in #16266
• fix(ci): fall back to the GitHub release in the Homebrew formula by @debanjanbasu in #16264
• fix(coding-agent): rejected yield calls carrying fields beside data by @roboomp in #16323
• fix(task): published parent-injected wake results by @roboomp in #16307
• fix(task): relay a woken subagent's final report, not all its turn text by @will-bogusz in #16302
• fix: address review follow-ups for #16323, #16340, #16249, #16241 by @H4vC in #16362
• fix(coding-agent,tui): stop woken agents auto-replying to agent://all broadcasts by @will-bogusz in #16312
• fix(coding-agent): deliver both of two asides sent together to an idle session by @will-bogusz in #16292
• fix(coding-agent): return a just-finished job from a wait its completion notice cut short by @will-bogusz in #16301
• fix(pi-shell,tui): keep ssh remote output intact in the minimizer by @will-bogusz in #16314
• fix(natives): broke cjk runs between characters in wrapTextWithAnsi by @roboomp in #16228
• fix(coding-agent): keep todo stripped from a warm-revived subagent by @will-bogusz in #16281
• fix(natives): stop a cancelled macOS stale-ref search before it looks up the window by @will-bogusz in #16233
• fix(coding-agent): stop a browser screenshot waiting on a DevTools session past its deadline by @will-bogusz in #16230
• fix(coding-agent): tell a computer.control.acquire nobody could answer apart from a refusal by @will-bogusz in #16295
• fix(ai): classify mid-stream message_delta drops as retryable by @lz-lunzi in #16341
• fix(coding-agent): refresh scoped models after OAuth login by @lazy1523 in #16234
• fix(coding-agent): restored legacy shell settings accessors by @roboomp in #16258
• fix(coding-agent): export contentText and formatSkillsForPrompt from the legacy pi shims by @Jerryx333 in #16313
• fix(mnemopi): kept /tan clones from re-injecting the parent recall by @roboomp in #16338
• fix(coding-agent): match browser role/ exact names to the names observe() shows by @will-bogusz in #16252
• fix(coding-agent): let grep fetch a web URL that carries a :raw selector by @yuzu-octopus in #16352
• fix(coding-agent): search every resource in a semicolon list of internal URLs by @yuzu-octopus in #16353
• fix(coding-agent): expand tilde in skill list custom directories by @yuzu-octopus in #16347
• fix(tui): preserve transparent SIXEL image width in Zellij by @Bouska in #16346
• fix(coding-agent): add the legacy skills prompt template by @H4vC in #16364
• fix: address second round of review follow-ups by @H4vC in #16365
• fix(coding-agent): constrain auto-thinking choices to supported model efforts by @savanne-kham in #16327
• fix(catalog): move MiniMax M3.1 Flash rules to the launch id MiniMax-M3.1-Flash by @SaladDay in #16315
• docs(changelog): describe the auto-thinking fix by its effect by @H4vC in #16367

New Contributors

• @JustasMasiulis made their first contribution in #16245
• @debanjanbasu made their first contribution in #16264
• @lz-lunzi made their first contribution in #16341
• @lazy1523 made their first contribution in #16234
• @Jerryx333 made their first contribution in #16313
• @SaladDay made their first contribution in #16315

Full Changelog: v18.12.2...v18.12.3

Release Date: October 13, 2026
Since v0.21.0: ~24,200 commits · ~6,080 merged PRs · ~15,600 files changed · ~2,045,000 insertions · ~1,140,000 deletions · ~7,180 issues closed · ~2,520 contributors

The Threshold Release. Hermes was the god of thresholds: the doorway, the crossing, the boundary stone. v0.21.0 assembled the pantheon; v0.22.0 is about getting through the door. A fresh desktop install now opens on a guided setup chat that runs on a free trial model, so a newcomer is talking to Hermes before they own an API key. Connectors carry the agent across into the apps you already use, with no account needed to start. Local models bring it home to your own hardware with a one-click llama.cpp runtime. And the threshold itself got sturdier: tested SemVer stable releases that installs follow by default, signed desktop packages (including the Microsoft Store), and one package manager underneath everything. Around that spine: a 600-plugin catalog, the Claude 5.5 / GPT-6 model wave, password-manager sign-in for the browser, a bot screen you can take over, one backend and one gateway for every profile, and a codebase a third smaller. This is the largest window Hermes has shipped, about 2.5x the v0.21.0 cycle, and it rolls up and fully documents the v0.21.1–v0.21.7 patch releases.

✨ Highlights

• A first launch that sets itself up — Open the desktop app on a computer where you have never used Hermes and it starts a short setup chat instead of a settings screen. One card at a time it asks your name, an accent color and a layout, which apps to connect, which plugins to install, then gives a quick tour and offers up to four first tasks picked for you. It runs on a free trial model (nous/welcome, once per OS user), so it needs no key; Skip setup ends it and Settings → Run onboarding again brings it back. The agent also gained set_theme, so "make it violet, dark mode" works in any desktop chat. (#137429, #137522, #137807, #134209, #105258 — @alt-glitch, @OutThisLife, @ethernet8023, @rewbs)

• Connectors: Hermes works inside your apps — The agent can now act in hosted apps such as Linear and Notion through the Nous tool gateway: ask for an app, sign in once in your browser, and the tools are usable in the same turn. You do not need a Nous account to start; the first time you use an app, Hermes creates a free connectors-only identity. The desktop has a new Connectors page that puts hosted apps and your MCP servers in one list (it replaces the MCP tab), the same setup card appears in the TUI and CLI, and you can connect several named accounts of one app (a work and a home account) and manage them with /connectors or hermes connectors. (#106842, #111008, #119074, #135143, #135072, #135097, #135151, #135173, #137426 — @alt-glitch, @rewbs)

• Local models in one click — Hermes can now run open models entirely on your machine with nothing leaving it: no account, no API key. It installs and maintains llama.cpp with the right engine for your hardware (CPU, CUDA, Metal, Vulkan or ROCm), rates every catalog model against your GPU and RAM, and picks the highest-quality build that fits. Downloads pause and resume, the server starts and stops with Hermes, and engine updates are one click. Start from Settings → Providers → Local Models on Windows, macOS and Linux, or hermes model → Local models in a terminal. The catalog includes Qwen3.8 27B, Qwen3.8 Flash Next (with its MTP speculative head), Qwen3.6 35B-A3B and DeepSeek V4 Flash, plus any GGUF from Hugging Face. (#100667, #101823, #128768, #111423, #133111, #134116 — @jquesnelle, @ethernet8023)

• Stable release channels — Hermes now ships tested SemVer releases. Every release passes source CI, Docker, Nix, signed desktop builds and install/upgrade runs on every OS before it is published, and source installs now move from release to release by default instead of tracking every commit on main. Prefer the bleeding edge? hermes update --set-channel main, or the new channel switch in Desktop Settings → About. Moving to an older release is labelled a rollback and never happens without asking, and installer reruns keep you on the channel you chose. (#102765, #135847, #135949, #136313, #137780 — @ethernet8023, @KoNit-K)

• Signed desktop packages, the Microsoft Store, and one package manager — The desktop app is now a sealed, signed package that carries its own Python and Node and updates itself, so first launch builds nothing. Windows gets a signed MSIX (x64 and ARM64) through App Installer or the Microsoft Store; macOS gets a signed, notarized build for Apple Silicon. Underneath, a new unified package manager (hermes pm) owns every pinned, hash-checked tool and Python environment: updates build a new environment and switch only once it passes its check, so a failed or killed update can no longer leave you half-applied. (#102765, #132361, #132386, #120339, #122221 — @ethernet8023)

• The Plugin Catalog: 600 reviewed plugins — The plugin catalog launched this cycle and grew to 600 entries, each pinned to a reviewed commit and installable from Hermes Desktop or the CLI. Browse by category and star ranking with a page per plugin and per author; catalog rules keep listed plugins from patching Hermes internals or shipping unscannable binaries. Memory providers now live with their makers (Honcho, Supermemory, Hindsight, Mem0, OpenViking, Holographic), as do Home Assistant, Spotify and Langfuse: existing users are migrated automatically, and the default install got leaner. (#69446, #111415, #117808, #113381, #114732, #131267, #132476, #136436 — @itpartypattaya, @happy5318, and 400+ plugin authors)

• The Claude 5.5 and GPT-6 model wave — Claude Fable 5.1, Opus 5.5, Sonnet 5.5 and Haiku 5.5, GPT-6 Astra, Sol and Luna plus GPT-6.1 Sol, and Gemini 4 Argon are pickable on Nous Portal, OpenRouter and native routes where offered. Prior reasoning is now replayed by default on every provider that can read it, across resume, branches and compaction, so long multi-step work keeps its train of thought. And when a provider has a bad hour, Hermes waits out transient 503/529/timeouts in visible, bounded cycles instead of ending your turn. (#100577, #119304, #126842, #134759, #128248, #137955, #136358, #116353 — @kshitijk4poor, @unsupportedpastels, @100yenadmin, @mssteuer, @xxxigm)

• Sign in to websites with your password manager — The browser agent can log into sites with logins from 1Password, Bitwarden or Hermes's own encrypted vault, and the model never sees the password. If nothing is saved, you get a masked prompt in the CLI, TUI or Desktop to save it, one-time codes are filled without entering the conversation, and card and address fills at checkout need your confirmation. (#106480, #107585, #137084)

• Bot Screen: watch your bot work, take over when it needs you — A bot running on a Linux gateway can have its own desktop that Hermes Desktop streams live. When it hits a login, a 2FA prompt or a CAPTCHA, you take the screen, finish the step yourself, and hand control back while the bot carries on with your session. With a Docker, SSH or Singularity backend, the bot's screen, computer use and the browser run inside the sandbox, never on your host. (#108914, #121169, #121110)

• One backend and one gateway for every profile — Hermes now runs a single messaging gateway and a single desktop backend per machine that serve all of your profiles, instead of one process per profile. Creating a profile makes its bots live without a restart, each profile keeps its own credentials, allowlists, cron jobs and sessions, and hermes update migrates existing per-profile setups automatically. Fewer processes, no token clashes, one thing to start and stop. (#112854, #108928, #118273, #117983, #118246, #118027)

• See and steer your subagents live — Running subagents now stay visible above the composer in the CLI (F6), TUI (Ctrl+T) and Desktop with each child's task, elapsed time and live transcript, plus Steer and Stop buttons. /stop reaches background children and hands back their partial work, and delegate_task can pass screenshots and mocks to vision-capable children. (#105593, #115616, #97689)

• A model picker that knows your plans — Star your favorite models, see a subscription running low ("17% left · resets 3:00 PM") and when a rate limit lifts right in the picker, and pick reasoning effort as part of choosing a model in hermes model, /model (/model X --reasoning high) and Desktop. You switch before you hit the wall instead of after. (#126535, #133392, #133408, #110346, #113117 — @OutThisLife, @anotherchu)

• Hermes in your language, everywhere — Every user-facing string in the CLI, messaging gateway, TUI and Desktop now goes through one translation catalog with full coverage in all 16 bundled languages. New languages can ship as plugins, and any profile can override individual strings with a small YAML file. (#126296)

• Leaner in every sense — The whole codebase was simplified with zero behavior change: source went from about 1.06M to 698K lines (−34%) and gateway/run.py shrank from 34,847 lines to 5,512. Prompts got lighter too: about 19 rarely used tools now load only when the agent searches for them, roughly halving the desktop tool schema sent on every call, and another ~2.1k tokens came off the fixed prompt. Local models prefill less on every turn. (#102117, #97979, #106676, #137084 — @alt-glitch)

• Small comforts that add up — Opt-in vim keys in the CLI prompt, a git-branch field in the status bar, a bell and desktop notification when Hermes is waiting on you, Ctrl+C that clears your draft instead of killing the turn, an editable /queue, and hermes --native to let your own terminal handle TUI scrollback and search. On Desktop, a new Simple mode turns the app into a plain chat window, and errors now say what went wrong with a one-click fix. (#106412, #106434, #101284, #101320, #137065, #95999, #121035, #118587, #111601 — @saforem2, @TurgutKural, @glitchbunny0, @harshmoney123, @pierrenode, @abhinav11082001-stack, @OutThisLife)

⚠️ Upgrade notes

• Python 3.14 is the runtime for managed installs (the package manager installs it for you). KittenTTS is unavailable on 3.14. (#102765)
• Windows desktop is MSIX-only and needs Windows 11 22H2 or newer; the NSIS/MSI installers are gone. The macOS app is Apple Silicon only in default builds. (#102765, #136603)
• One gateway per machine is the default. hermes update folds per-profile gateways into the multiplexed default when nothing conflicts. (#112854)
• Chats no longer reset on an idle/daily timer. session_reset idle/daily modes are retired (configs that still set them log a warning); /new or /reset starts fresh. (#105021, #126244)
• Old sessions are pruned automatically. sessions.auto_prune now defaults to on: ended sessions inactive for 90 days are deleted at startup. Pinned and open sessions are never touched; set sessions.auto_prune: false to keep everything.
• Memory providers moved to catalog plugins (Honcho, Supermemory, Hindsight, Mem0, OpenViking, Holographic), as did Home Assistant, Spotify and Langfuse. Existing users are migrated on update or first start, with data intact. ByteRover and RetainDB remain bundled.
• Plugin authors: the old plugin compatibility import layer is gone (#126164), hermes sync (Skill Sync) was removed (#132465), and the bundled tirith scanner was removed (#133832). Several tools were renamed (todo → todo_list, cronjob → cronjob_manage, process → process_manage); the old names still work. (#97979)

🚪 Onboarding, Free Tier, Connectors & Local Models

First-run onboarding

• Guided setup chat on a fresh desktop install (see Highlights). Existing installs and remote (SSH, URL, Cloud) backends don't get it automatically; the old setup-profile flow and /initiate-setup are deleted. (#137420, #134215, #108292 — @alt-glitch, @ethernet8023, @OutThisLife)
• The agent can restyle the app — The new set_theme tool sets the accent (a swatch or any #rrggbb), light/dark/system mode and layout, or shows a picker; "make it violet" works in any desktop chat. (#137522 — @alt-glitch)

Nous free tier

• A free model for your first desktop launch — A first desktop install with no provider or Nous account gets the free nous/welcome model as a one-time trial (once per OS user), so onboarding needs no key. The CLI, TUI and gateway get no account or free model. HERMES_GUEST_ONBOARDING is gone. (#137807, #105258, #105260 — @alt-glitch)
• Sign in and keep your apps — hermes auth upgrade, or /login in any chat or messaging DM, upgrades the free identity to a full Nous account with your connected apps. (#105259, #105261 — @alt-glitch)
• Clear limits — The free rate limit ends the turn at once with the reset time; every free-tier failure has a code and a plain sentence; the app handles the account service's browser check; free-tier users see a Terms and Privacy notice. Nous accounts without credits can pick models billed to a subscription they hold and get free managed fast web search. (#134049, #111970, #133824, #117079 — @alt-glitch, @kshitijk4poor, @rewbs)

Connectors

• Hosted app connectors, the Connectors page and several accounts per app (see Highlights). Connector tools can also send your local files as attachments and save the files they return. nous.guest: false turns guest identities off; tools.connectors.enabled: false turns connectors off. (#111238, #138014 — @alt-glitch)
• One connect flow everywhere — Hosted apps and local MCP servers share one setup card (desktop dialog, TUI callout or CLI panel), and the agent can use new tools in the same turn. On desktop, manage_connections can show a browsable app directory. (#111008, #109517, #137426 — @alt-glitch)

Local models

• One-click local models (see Highlights). Also: Hugging Face GGUF downloads with pause/resume, and a one-time setup offer after onboarding on machines that can run the recommended model. (#129506 — @alt-glitch)
• Engine updates and wider GPU support — An Update now prompt updates the engine in one click. NVIDIA on Linux gets CUDA, AMD and Intel GPUs get Vulkan sized by their own memory, and every backend runs llama.cpp b11370. (#111423, #133111, #131782 — @jquesnelle, @skyecon, @mbeattietex1-star, @Belaquaa)
• Better recommendations — Only models that fit fully in GPU memory are recommended, and the 27B no longer on hardware that runs it poorly. Qwen3.8 Flash Next with its MTP head fits 128 GB machines; NVIDIA Spark recommendations are tuned. (#108429, #135438, #134116, #112107 — @jquesnelle, @RyanUnderhill)
• Your own local servers — LM Studio has a provider profile, Ollama pickers no longer flicker, a self-started llama.cpp server shows up in /model, and fallback to the desktop-managed model works. (#134320, #113129, #116679, #131795 — @kshitijk4poor, @DaxLee9988, @fangliquanflq, @Finn763, @albeight)

📦 Stable Releases, Desktop Packages & Package Manager

Stable releases & update channels

• Tested SemVer stable releases and the channel switch (see Highlights). v0.21.6 and v0.21.7 were the first through the new gate; forks stay on main, and an install ahead of the newest release waits for the next.
• Lighter update checks — one GitHub API call a day replaces git fetch every 30 minutes. (#107648)

Desktop bundles & the Microsoft Store

• Sealed, signed desktop packages (see Highlights). In a package, hermes update points to the right updater (App Installer, Store or macOS). (#134911)
• Packaged installs work end to end — the agent's terminal runs hermes, Uninstall explains OS removal, and Python-dependency plugins install inside MSIX. (#134051, #135333 — @alt-glitch)

Unified package manager

• hermes pm (see Highlights): pinned, hash-checked Python 3.14, uv, Node, ripgrep, FFmpeg, Chromium and Git/Bash on Windows, with hermes pm doctor|status|repair|gc. Contributors use source ./activate (or .ps1/.fish).
• Dependency environments are generations — new ones are checked before use, so a failed install keeps the working one; updates and hermes pm gc reclaim old ones (92 GB to 18 GB on one host). (#124968, #133808 — @JoaoMarcos44)
• Optional features install on first use — opt-in SDKs (Anthropic, Bedrock) load mid-session without a restart; security.allow_lazy_installs: false turns this off. (#122221 — @ethernet8023)
• Plugins declare Python dependencies — resolved with core across profiles; conflicts are refused, and updates disable a plugin that no longer fits. Hindsight, Honcho, Supermemory, Mem0 and Home Assistant moved to the catalog and auto-install where used. (#113851, #122103, #114569, #132469 — @ethernet8023)

Install & update

• Updates can't half-apply (see Highlights). A killed update repairs itself on the next launch. (#132361, #120339)
• Faster updates, smaller checkouts — updates rebuild only what changed (16.5 s vs 32.5 s on macOS), clones are blobless, and partial-clone .git growth is fixed. (#135092, #133016, #131679 — @kshitijk4poor, @ethernet8023, @liuhao1024, @whyyagswhy)
• Small, hash-checked installers — install.sh/install.ps1 verify pinned uv and Git, hand off to PM, log to logs/install.log, and now work on musl Linux (Alpine, Void), Windows 10 and Unicode Windows paths. (#124964, #125598, #132430 — @JoaoMarcos44, @kshitijk4poor, @Finn763, @OutThisLife)
• Failures say why — with opt-in telemetry, install, update, skill and plugin failures record a reason. (#133809)

Docker / Nix / Termux / Windows

• Docker — pinned Debian 13 base with full Chromium; stable/latest move only on a published release; baked-in extras return after a restart. (#135726, #135084 — @unsupportedpastels)
• Nix, Termux, Windows — Nix shares the pins; its desktop app gets Wayland; Termux moves to a signed APT package (pkg upgrade hermes-agent), though its docs still warn it is broken; Windows updates finish while the old runtime is in use. (#128144, #122146, #131779 — @ethernet8023, @janviernine)

CI & release engineering

• Release gates — E2E suites run on release builds, the full suite on native Windows, and SSH/Docker backends against real daemons. (#135409, #96458, #136602 — @ethernet8023)

🧠 Providers & Models

New providers

• Providers as plugins — ACP and CLI-driven providers install out of tree via hermes plugins install; --provider chatgpt picks ChatGPT Codex OAuth. (#101456, #115761 — @AlexanderPrendota, @DarRahman)
• Provider upgrades — Bedrock serves GPT-6 (1M) and enforces Claude Guardrails; Azure Foundry lists deployments; Gemini takes full JSON Schema tools; OpenCode Go routes Claude via Messages. (#133573, #107815, #115770, #98928, #134848 — @victor-kyriazakos, @JoaoMarcos44, @xxxigm, @thejpanganiban, @pandacooming)
• New knobs — agent.text_verbosity sets Responses answer length; named custom providers run on the Codex app-server. (#115880, #115905 — @Beandon13, @cosin2077)

Model catalog

• Claude 5.x — Opus 5.5 also on native Anthropic and Bedrock (1M). (#122633 — @kshitijk4poor, @didodim)
• GPT-6 — Astra/Astra Pro in standard, fast and flex; opt-in Codex -900k; /fast ultrafast for Astra and 6.1 Sol, per plan. (#103261, #119410, #136950 — @daniil-grois, @sdalonzo)
• Gemini 3.8 Flash and Gemini 4 Argon. (#101450, #137989 — @kshitijk4poor, @dgkaaks)
• More — DeepSeek V4.1 Flash, Qwen3.8-Max-0902, Grok 4.7, GLM-5.3-FlashX, Muse Spark 1.3, Solar Pro 4/Mini 4. (#107489, #100966, #118371, #117435, #101948, #131645 — @rob-maron, @am423)

Auth & subscriptions

• Profiles share OAuth logins safely — single-use grants never fork; a profile's own login is kept. (#100929, #134574 — @unsupportedpastels)
• Nous sign-in survives hourly expiry, concurrent subagents, Portal outages and edge checks. (#103526, #121488 — @kshitijk4poor, @zzragida)
• Dead logins are named once, with the hermes auth add fix; auth.adopt_external_logins: false stops borrowing Codex CLI/Claude Code logins. (#113816, #115586)
• Keys stay on their hosts — configured base_url honored everywhere; Anthropic/OpenAI keys never reach foreign hosts. (#121614, #120299 — @austinpickett, @686f6c61, @ahisblessed, @xuezhaolan, @leemove)

Routing/fallback/caching

• Outage recovery — agent.auto_recovery_cycles (default 5) bounds the wait; fallback returns to a Codex primary whose quota reopened. (#116353, #130716 — @kshitijk4poor, @xxxigm)
• No surprise billing — auto-routing never bills a provider you didn't pick; provider_routing.models pins OpenRouter per model. (#107366, #104159)
• Prompt caching — opt-in cache_ttl: auto (1h interactive, 5m subagents/cron); big sessions confirm a cache-breaking /model; compaction keeps the prefix. (#118337, #95267, #104455 — @kshitijk4poor, @JoaoMarcos44)

Reasoning

• Replay and effort — reasoning replays on every provider that reads it; effort on every picker, custom tier names; Anthropic fast mode follows the docs. (#136358, #110346, #115735, #120517 — @jquesnelle)

🏗️ Core Agent, Sessions & Memory

Agent loop & reliability

• Stalled turns recover — a watchdog (agent.turn_liveness.timeout_s, default 600 s) interrupts a no-progress turn and frees its session; repeated transcript repairs now raise one error and notice. (#99758, #99687 — @kshitijk4poor, @Finn763, @HexLab98)
• Streams fail less and report honestly — text-less dead streams retry, repetition loops are cut, and interrupted turns aren't reported as done. (#113135, #130551, #112272 — @kshitijk4poor)

Compression & context

• Compaction triggers on real token counts — provider-reported usage, not bytes/4; the protected tail is capped at 20% so small-window models compact. (#104555, #117957 — @686f6c61)
• Bad summaries can't wipe context — refusals and overloaded summary providers leave the transcript alone, and an uncommitted compaction changes nothing. (#118920, #115906, #136083 — @kshitijk4poor, @fangliquanflq, @mnajafian-nv)
• New knobs — provider-scoped compression.model_thresholds keys and auxiliary.<task>.no_progress_timeout. (#108061, #115804 — @chelsealong)

Sessions & state.db

• state.db reliability — lock timeouts name the holding process, a busy database no longer kills a turn, and sibling PID namespaces can't steal leases. (#116967, #134577, #132161 — @kshitijk4poor, @686f6c61)
• state.db stops growing — auto-prune is on by default (ended sessions over 90 days) and closes stale cron/kanban/subagent sessions; VACUUM runs only when 25% is reclaimable. (#101316, #100903 — @stepanov1975)
• Repair commands — hermes sessions set-journal-mode delete|wal, repair-profiles (crossed profiles) and repair-prompts. (#117684, #115689, #124200 — @kshitijk4poor, @JoaoMarcos44)
• Cleaner session lists — one-shot runs stay out of pickers, sessions.show_subagents lists titled subagent chats, messages get stable ids for context engines. (#113826, #122304, #126687 — @OutThisLife, @kshitijk4poor, @100yenadmin)

Memory

• Memory providers leave core safely — OpenViking and Holographic move to the plugin catalog on update or first start, data intact, or say why not. (#134350, #136436, #131269)
• Built-in memory writes land — hand-formatted MEMORY.md/USER.md accepted, refusals say what to fix, secrets scrubbed before providers see them. (#133038, #134429 — @aniruddhaadak80)

Profiles & config

• config.yaml survives bad moments — a broken file falls back to the last good copy; read errors can't wipe it. (#109463, #120343 — @Shenrui-Ma, @huklaa)
• Safer hermes config — get masks secrets (--raw opts out); set refuses typo paths and stores env-style names in .env. (#111341, #112250 — @webtecnica)
• Profiles stay separate — REST routes act on the profile they name, exports skip .ssh/.aws/.gnupg, and import-agent --sync keeps imports current. (#118275, #132201, #88855 — @kshitijk4poor, @JerryLiu369)

Languages (i18n)

• Language packs — any language can ship as a plugin (provides_locales) or a per-profile override file. (#126296)

📱 Messaging Platforms (Gateway)

Gateway core & multiplexing

• One gateway serves every profile — hermes gateway status explains any boot-guard refusal, hermes gateway migrate --multiplex migrates by hand, webhook platforms serve each profile at /p/<profile>/, hermes -p X gateway stop|start parks one profile, and gateway.standalone: true is a temporary opt-out. (#112854, #108952, #119774, #119680 — @victor-kyriazakos)
• Profiles stay isolated — clones skip bot tokens unless --clone-channels; profile_routes can route by sender. (#109502, #115642 — @italodsfernandes)
• Sessions and commands — /login signs free-tier users in from a DM; idle/daily session_reset is retired, so only /new and /reset start fresh; /branch opens a sibling thread on Discord, Telegram, Slack and Matrix (--here keeps the old behavior); decline mode sends unauthorized DMs one polite refusal; an opt-in served_model footer names the model that answered. (#105261, #126244, #117450, #88028, #115925 — @alt-glitch, @kshitijk4poor, @anpicasso)
• Files and plugins — MEDIA: files from ssh/Modal/Daytona sandboxes reach the user; plugins can claim messages via post_gateway_admission. (#103600, #133157 — @kshitijk4poor, @tokou)

Messaging platforms

• Telegram — opt-in bots_require_mention stops bot reply loops, extra.drop_pending_on_cold_boot: false keeps messages sent while offline, CJK can opt in to rich messages. (#106534, #116134, #111831 — @kshitijk4poor, @kokhlo, @justcarlosm, @wang2)
• Discord — setup verifies the token, links the Message Content Intent and allowlists you; free-response channels can auto-thread. (#132456, #116168 — @kshitijk4poor, @FunJim)
• Slack — Block Kit /model picker; status/titles use the Agent Sessions API. (#103436, #101477 — @kshitijk4poor, @sohomsahaun)
• WhatsApp — native mentions via hermes send --mention, no 5 s batching delay, paired sessions on every profile. (#115253, #117104, #132518 — @kshitijk4poor, @unsupportedpastels, @Diaspar4u)
• Signal, Matrix, Email, QQ Bot — Signal tables render monospace; Matrix LaTeX typesets in Element (Labs math setting); Email refuses spoofed senders and now requires an authserv_id pin (mail drops until set); QQ Bot send_message delivers media. (#106538, #106515, #132663, #131927 — @chelsealong, @romanovzky, @kshitijk4poor, @OutThisLife, @cadezhou)

Webhooks & API server

• Webhooks — opt-in coalesce folds event bursts into one run, cron_job routes fire cron jobs on events, Standard Webhooks signatures verify, opt-in mirror_to_session gives replies context. (#92066, #95262, #104183, #120825 — @HwangJohn, @Potrock)
• API server — reasoning streams to OpenAI-compatible clients; stream approvals are answerable. (#115797, #121769 — @kshitijk4poor, @liuhao1024)

Relay & Bot Chat

• Bot Mode rooms — edit members, Reply to @handle, 200-message history, sender-aware bot DMs with an ALLOW_BOTS loop guard. (#113384, #107520 — @erosika, @69k4xmdfm2-blip)
• Relay — connector checks send_message targets; NeMo Relay tracing at 0.10.0 tags spans with the working directory. (#99220, #135787, #108345 — @benbarclay, @mnajafian-nv, @afourniernv, @KoNit-K)

🖥️ Desktop App

Workspace & layout

• Simple / Advanced mode — Simple hides developer panes; Advanced stays the default. (#118587 — @OutThisLife)
• Windows and tabs — Titlebar tabs; profiles open in their own window or as startup default. (#107099, #113176 — @OutThisLife)
• Sidebar — Group by gateway/profile, reuse Cloud instances, drag New session onto a pane. (#105813, #70571 — @abundantbeing)
• Import sessions — Continue another coding agent's transcript in Hermes. (#104229 — @Adolanium)
• Goal / Loop / Heartbeat cards — Live pause/resume/stop above the composer. (#104246 — @jerrygooch)
• Launch options — Start on a fresh chat; opt-in tray minimize and Cmd+Option / Ctrl+Alt HUD tap. (#101304, #118441, #118446 — @jinglun010-cpu, @OutThisLife)

Chat & composer

• Pickers and input — Reasoning-effort pill; add a model by slug; 3,000+ char pastes attach as .txt; opt-in macOS window-screenshot shortcut. (#109907, #120693, #108901, #113349 — @OutThisLife)
• Actionable errors — Cards name the problem and fix; usage-limit cards show reset time and can schedule a retry. (#111601, #116288)
• Transcript — Stable approval queue; hideable code diffs. (#107073, #116569 — @OutThisLife)
• Browser comment mode — Pin page elements with notes; crops, selectors and styles go to the composer. (#100083 — @Adolanium)

Settings & plugins

• Settings — Ordered subpages searchable from ⌘K; Chat Font (e.g. OpenDyslexic); Russian, French, German, Spanish. (#117127, #111226, #100429 — @OutThisLife, @warment, @FASTCHIP)
• Models — Per-task auxiliary reasoning effort; Custom Endpoints pick an API mode. (#110435, #115851 — @higgs1729, @SacrEllfarch)
• Plugins — One row per plugin; composer and settings APIs. (#107314, #120907 — @OutThisLife, @Heybinshao)

Bot Mode

• Bot Screen — Linux-gateway bots stream a desktop you can take over for logins or 2FA. Off by default; needs host packages. (#108914)
• Group chats — Reorder rooms; compress a member's hidden history. (#105909, #117015)

Performance & platforms

• One backend — Desktop attaches to the running backend, which serves every profile. (#118246)
• Platforms — Faster Windows startup; Linux runs without sudo and under WSLg/Wayland. (#111002, #100136, #113247 — @codeJRV, @kvnloo, @austinpickett)

Models, chat & workspace

• Model picker knows your plans — Star Favorites; provider rows show when a rate limit lifts and a "17% left · resets 3:00 PM" chip before you hit it. Also opt-in per-model pricing with cached-read rates, an Ultrafast speed tier and keys to step reasoning effort. (#126535, #133392, #133408, #126651, #132445, #125800 — @OutThisLife, @kshitijk4poor, @anotherchu)
• Safer rewinds and honest stops — Regenerate or edit asks before archiving more than one later turn; Stop shows the partial reply the session saves. (#133748, #121597 — @kshitijk4poor)
• Reading and layout — Chat Text Size separate from UI Scale; theme typography; lightbox zoom/pan; compression count in the context meter; context-aware right-click. (#128975, #125904, #127247, #126653, #131215 — @OutThisLife, @unsupportedpastels, @dskwe)
• Workspace and sessions — Sessions follow the agent's git worktree and branch; Review pane scopes work. Browse SSH workspaces, drag sessions onto projects, search logs, see and clear Kanban blocks. (#128428, #127200, #99538, #126543, #126658, #125647 — @ethernet8023, @OutThisLife, @nateEc)
• Preview and voice — Preview opens public web pages; YouTube plays via a local player. Non-streaming TTS speaks from the first sentence; quiet-audio STT hallucinations are filtered. (#130393, #130975, #121685, #127275 — @xxxigm, @OutThisLife, @kshitijk4poor, @embwl0x)

Plugins, updates & the app

• Settings ▸ Plugins and a bigger SDK — Every plugin gets a settings page (agent plugins from their config schema). Desktop plugins can run app actions by id, speak via the pet, add Appearance controls and reorder sidebar nav. (#133182, #136417, #135504, #120912, #120922 — @tobenwarrior)
• Updates you can steer — Source installs pick Stable or Every commit in Settings › About; the updates dialog names the channel. The app warns when older than its backend. (#135949, #136313, #122911 — @OutThisLife)
• App polish — "While working" keep-awake mode, macOS 26 layered icon, sharper MSIX icons, opt-in shared-metrics consent strip. (#128984, #122976, #131669, #125074 — @kshitijk4poor, @jonpol01, @ethernet8023)

⌨️ CLI, TUI & Dashboard

CLI

• Vim keys, git branch and bell — display.vim_mode, git_branch status field, display.bell_on_prompt (bell plus OSC 9 notification); all off by default. (#106412, #106434, #101284, #101320 — @saforem2, @TurgutKural, @glitchbunny0, @harshmoney123)
• Friendlier keys — Ctrl+T opens the subagent monitor; a mid-turn multi-line paste is one message. (#105879, #109146)
• Scriptable commands — hermes usage --json (quota, no session); hermes worktree --json/--older-than; kanban edit --title/--body/--priority; -t picks MCP servers to start. (#115899, #95257, #117632, #101634 — @himanusia, @kshitijk4poor, @SelfParody)
• Also — hermes -z exits non-zero on failure; -m custom:<name>:<model> reaches that provider; the footer no longer collapses to "Window too small". (#113234, #115293, #117439 — @kshitijk4poor)

TUI

• Native terminal mode — --native or display.tui_native (opt-in). (#121035 — @OutThisLife)
• Running-turn control — double-Esc interrupts, push-to-talk cuts speech, the live dock (CLI too) shows /goal and queued prompts. (#125803 — @OutThisLife)
• Typing fixes — Shift+letter on extended-key terminals, macOS Ctrl+D, Wayland image paste, steady idle redraws. (#90674, #116851, #116824, #87907 — @francip, @fangliquanflq)
• Reconnects and attachments — attached TUIs rejoin their session; attachments.storage: workspace stages files a sandboxed agent can read. (#112227, #125816 — @OutThisLife)

Dashboard

• Chat on more devices — screen readers, iPad touch-scroll, no doubled mobile-keyboard characters; a second tab gets its own terminal. (#133960, #134181, #116978, #117061 — @austinpickett)
• Errors, sessions, analytics — errors are a sentence and fix button, not raw JSON; title search, a live switcher, per-API-call analytics. (#111602, #133981, #134100, #133991 — @austinpickett)
• Self-hosting — reverse-proxy subpaths, password sign-in beside OAuth, non-expiring remote sessions. (#133903, #107018, #110061 — @austinpickett, @Doud-FR)

Slash commands

• Reasoning effort in every picker — hermes model, aux models and /model add an effort step; /model X --reasoning high works too. (#110346)
• Editable /queue — list, edit, move or remove prompts; /s = /steer. (#95999, #125803 — @abhinav11082001-stack, @OutThisLife)
• /context per file — shows each instruction file as loaded, truncated or shadowed. (#91272)

🔧 Tools, MCP & Browser

Tools & tool search

• Rare tools load on demand — computer_use, session_search, image_generate, cron and Desktop GUI tools sit behind tool_search by default (desktop schemas 13,367→6,883 tokens; defer: [] opts out); todo/cronjob/process become todo_list/cronjob_manage/process_manage (aliases kept). (#97979 — @alt-glitch)
• Prompt cache holds all session — the tool list is frozen per session across TUI, -q --resume and gateway hops. (#120289)
• Loop guardrails — unattended gateway/cron sessions hard-stop tool loops; 5 identical replays halt any tool. (#100967 — @plcunha, @benbenlijie)
• Smarter file and web tools — read_file shows SQLite schemas and flags merge conflicts, search_files runs ripgrep directly (5–6x faster), keyless web_search fails over between free vendors. (#115974, #104502, #134048 — @kshitijk4poor, @alt-glitch)

MCP

• Device-code login — hermes mcp login <server> --flow device for headless terminals. (#104891 — @wjorgensen)
• Sturdier OAuth — refresh tokens are never erased, double-spent or sent to another issuer; RFC 9207, Google-hosted and WAF-fronted servers log in; gateways never open browser tabs. (#106185, #111186 — @kshitijk4poor, @anhtahaylove)
• More servers connect — SSE-only servers fall back, strict servers connect (sampling.tools opt-in), and the catalog adds official n8n and Asana V2. (#106432, #131891, #116048 — @aieng-abdullah, @OutThisLife, @nikkoxgonzales, @alt-glitch)
• Startup and results — boot connects ≤ mcp.discovery_concurrency (4) servers at once; vision models see MCP images; dead stdio servers respawn without replaying a call. (#117956, #133815, #106546 — @Halldrix, @sarahwu185, @100yenadmin)

Browser & computer use

• Vault and sandboxed screen — password-manager sign-in also fills cards and addresses after you confirm; hermes-sandbox:desktop is the new default image (existing sandboxes kept). (#106480, #121169)
• browser_exec works out of the box — drives bundled Chromium (also the cloud fallback) and opens localhost via a sidecar. (#102986 — @shadus)
• Also: a CDP seam for plugins; unchanged computer_use screens are not resent. (#133552, #98954 — @web3blind)

Terminal & code execution

• Long commands stop blocking — foreground timeouts over 600 s become background jobs, heartbeat=N sends progress, and the live-work dock lists them. (#103529)
• Sandboxes — results flag a recreated environment; SSH paths resolve remotely. (#107093, #122657 — @kshitijk4poor, @xxxigm)
• LSP — custom servers via lsp.servers and lsp.package_manager; never runs a cloned repo's own interpreter or SDK. (#115714, #126239 — @ZHCHJ888, @kshitijk4poor, @jonpol01)

Media (image/video/voice)

• New models — GPT Image 2.5, Kling Image v3; video: Kling 3.0, Kling O3, LTX 2.5, Wan 3.0, MiniMax H3 Max Turbo, Gemini Omni Flash 1.1. (#105988)
• Live dictation — opt-in stt.streaming shows words as you speak (CLI, TUI, Desktop); long recordings transcribe on all cloud providers. (#133853, #133825 — @TimeLord2010, @Julientalbot, @kokhlo)
• Voice conversations — opt-in voice.voice_chat_mode: gpt-live gives Desktop full-duplex voice; auxiliary.voice_chat runs spoken turns on a faster model; TTS starts sooner. (#108137, #133986, #115846 — @liuhao1024)

🧩 Plugins, Skills & the Plugin Catalog

Plugin Catalog

• Plugin and author pages — /docs/plugins shelves plugins under Memory, Desktop, Platforms, Web, Tools, Voice, Automation and Models. Pages show the description, a disclosure callout, screenshots, the README from the pinned commit, an Open in Hermes Desktop button and a copyable install command. (#111415, #111547, #117808)
• Easier-to-read cards — a version label sits next to the pinned commit (1.2.0 @ ad3f352b) on the website, CLI and Desktop; cards gained banner images, a uniform size and light mode. (#113381, #125065, #124001 — @kshitijk4poor, @xxxigm)
• Known-issue warnings — listings can declare known issues, which hermes plugins install and the dashboard show on install. (#124058 — @happy5318)
• Listing rules — Desktop plugins must stay within SDK slots, 11 plugins that patched internals were delisted (installed copies keep working), and the submission guide matches what CI enforces. (#115579, #130860, #131048)

New in the Catalog

All 600 listings are new this cycle.

• Moved out of core — besides the five memory providers, Holographic has a new community maintainer; Home Assistant, Spotify, Langfuse and TouchDesigner are now official catalog plugins. (#114732, #136196, #132476, #137130 — @itpartypattaya)
• Official — Blender Lab, Snyk, NVIDIA App and NVIDIA Broadcast (Windows only), Telegram Business, Memory Wiki. (#119365, #109084 — @alt-glitch)
• Memory (65) — Cognee, LanceDB, ReMe, Memoria, HydraDB, Mnemosyne, YantrikDB, BetterDB. Web and search (34) — Apify, Parallel, Linkup, SerpApi, You.com, TinyFish, Oxylabs. Model providers (48) — JetBrains Junie, Telnyx, NetMind, Groq, Chutes, Kiro, Opper, AIHubMix. Platforms (32) — Inline, Microsoft 365, Rocket.Chat, VK, Zalo, iMessage, Sendblue. Voice (18) — Speechify, Deepgram, Fish Audio, Gemini Live. Desktop panes (140) — Telegram Client, Quota, Orbit, Kanban Gantt, Monitoring Dashboard. Tools (180) — GitHub App, Coder, Devin, NetBox, Financial Datasets, MetaMask, Tempo MPP, DaVinci Resolve, vidIQ, Govee, SwitchBot, Japanese e-Gov data. (#112292, #118231, #118512, #114202 — @siillee, @georgeatparallel, @AlexanderPrendota and many more)

Plugin system

• Model providers as plugins — out-of-tree providers show in model pickers, log in via hermes auth (built-in OAuth PKCE) and refresh tokens. (#116552 — @ericmaddox, @ZenMux-1)
• Per-profile plugin host (opt-in) — plugins.isolation: host runs third-party plugins in a per-profile process with only that profile's secrets. (#126911)
• New plugin APIs — hooks for interrupted turns, auxiliary LLM calls and human-input prompts; plugins can start gateway sessions, add Automation Blueprints and aux model slots, ship the computer-use driver and make Codex-signed requests. (#118909 — @zrmnelson, @JonZal, @hsy5571615, @webtecnica)
• Desktop plugin SDK — config_schema settings render as a form in Capabilities → Plugins; plugins get a skills/toolsets/profiles bridge and model-pill/menu slots. (#118917 — @LeonSGP43, @tobenwarrior)
• Install, pin, update — private repos install with your git credentials, Desktop pins a plugin to a commit, updates keep user data, and plugin skills run as /plugin:skill. (#106981, #107321, #133175 — @JoaoMarcos44, @pnpwin, @ctaylor86)
• Sturdier loader and scanner — hung imports are skipped after plugins.load_timeout_seconds (10s), guard hooks fail closed, and prose, fixtures and regex literals no longer block installs; plugin deps follow the plugin's security policy. (#118915, #115954)
• Moved out of core — Spotify and Langfuse became official plugins (auto-migrated); tirith was removed, its key checks built in. (#135389, #133832)
• New plugins — reMarkable, hermes-pii, hermes-stt-enhance (catalog); Meta muse-image (bundled). (#117191, #132154, #134418, #100959 — @cygnostik, @lukefx, @dmmeteo, @mreso)

Skills

• New optional skills — pr-lens (animated PR diagrams), system-atlas, anatomy (isometric explainers), mono-color (ink-print images), dream-loop (3D concept-art loops), scrollcraft (scroll pages), auteur (cinematic web), ip-as-logo (mascots), ai-presenter-video, live-dashboard (self-updating pages), dynamic-workflow (fan-out campaigns), reddit-reading, rss-feeds. (#109306, #103821)
• Skills Hub — the index builds again with about 480 science skills; search also finds unindexed skills. (#109178)
• skills.auto_load and skills.create_dir — pin skills into every session; choose where agent-made skills go. (#92048, #100377 — @ctaylor86, @ArcherQAQ, @giwaov, @Frosti7)
• Better self-improvement — learnings and corrections go into the task's skill; background review can improve any skill; skills added mid-chat reach the next message. (#102107)
• Lighter curator — no longer blocks the CLI prompt; one install fell from 1.9 GB to about 200 MB; unused skills archive at 30 days (was 90). (#115862)
• Skills Guard — blocked installs in a 421-skill sample fell from 83 to 68; inline shell is limited to non-community skills. (#135595 — @Awshesh12, @liuhao1024, @FlashWayne)

⏰ Cron, Kanban & Delegation

Cron

• Jobs follow your main model — Unpinned jobs use the model configured at fire time; pinned locks one. (#113679)
• Self-healing schedules — A fire that never reached the model (e.g. after wake) re-runs after 5, 15 and 30 minutes, a provider "retry after" window parks the job quietly, and a slot missed during a restart fires once. (#108731, #115843)
• Quieter alerts — One alert per incident plus a reminder every cron.failure_repeat_alert_hours; failure_deliver reroutes or mutes failure notices; an agent can fail its run with [CRON_FAILURE]. (#114807, #101373, #113155) — @victor-kyriazakos
• New job options — --paused creates a job unarmed; --interpreter runs scripts on your own venv. (#104984, #125392) — @M1racleShih
• Profiles and delivery — A multiplexed gateway runs each profile's jobs with that profile's env and secrets; delivery needs positive evidence, output is secret-redacted everywhere, and late or satellite runs are labelled. (#118027, #100908, #112830) — @yoniebans

Kanban

• Workers ride out provider trouble — Failed turns retry in place with context; rate limits or 5xx requeue instead of burning retries. (#112318, #112500) — @EvgenyMettsler, @dmelkk-secondbrain
• A board that explains itself — Cards show the worker's last output on failure; dispatch says why a card is held. (#112618) — @chelsealong
• Workflow and tooling — One workflow definition drives columns; workers get kanban_schedule; kanban create --body-file; Desktop follows gateway switches. (#134340, #130455, #116791, #119054) — @benbarclay, @unsupportedpastels, @fangliquanflq

Delegation & multi-agent

• Live subagents, images and /stop (see Highlights). (#105593)
• Fan-outs lose less — Failed children surface at once, an owner crash keeps finished work, children can hand processes to the parent, and per-task completions are opt-in. (#103549, #116707, #105125)
• Child routing — delegation.fallback_providers gives children their own chain; child_timeout_seconds measures inactivity. (#105347, #117606) — @ayushnangia
• /goal — Consistent on CLI, Desktop and messaging; the judge waits on subagents; /goal pause for now no longer overwrites the goal; gates run in the session workspace. (#104833, #132251, #125453) — @jayzhou2309

🔒 Security, Privacy & Codebase

Security & privacy

• v0.21.6 security fixes — dashboard sign-in hardening (spoofed X-Forwarded-For, size caps, loopback-only login codes); automatic git skips repo filter programs; the email allowlist resists display-name spoofing. (#133367, #130685, #130661, #125212) — @unsupportedpastels, @kshitijk4poor, @Froraut, @jonpol01, @keeltrace
• Secrets stay put — child processes don't inherit adapter/dashboard secrets; remote execute_code keeps its token out of argv; profile exports skip credential stores; keys never reach foreign hosts on refresh/fallback. (#125755, #124262, #130525, #120299) — @kshitijk4poor, @jonpol01, @beardthelion, @leemove
• Sharper redaction — debug share redacts before truncating; file reads and terminal output mask .env/config secrets; hermes config get masks unless --raw; memory hand-offs are scrubbed; plain token= lines stay visible. (#132270, #111422, #111341, #134429, #100564) — @kshitijk4poor, @Froraut, @shehjaddev, @webtecnica, @aniruddhaadak80, @fangliquanflq
• Owner-only files at rest — credentials, state.db, snapshots, browser profiles, media caches, any umask. (#109509, #127229) — @JoaoMarcos44, @rohitsabu, @OutThisLife
• Wider guards — more fetches pass the SSRF guard (security.fake_ip_ranges for fake-ip proxies); cloud-metadata fetches, zsh/dash pipe-to-shell and deno eval need approval; approvals.deny works in sandboxes; built-in rules replace bundled tirith. (#114887, #113156, #116726, #103649, #133832) — @beardthelion, @AYin-Z, @fangliquanflq
• Holes closed — the MCP OAuth callback stops reflecting HTML; webhook, SMS and WhatsApp Cloud inbound reject blank signing secrets. (#92612, #133257) — @memosr, @ahadvice
• Opt-in shared metrics — daily usage stats reach Nous only with consent; both telemetry.shared_metrics switches default off, each profile asks once, Enter = "No thanks". (#95278) — @benbarclay

Codebase & performance

• Leaner prompts and tools — ~2.1k fewer prompt tokens a request, on-demand vault tools, one-round-trip file probes, hermes -w no longer repacks each launch. (#137084, #101599) — @yaojiejia

Other

• Safer backups — hermes backup keeps the newest 3, flags incomplete archives; hermes import refuses damaged ones. (#106455, #121498) — @buihongduc132, @kshitijk4poor
• Also — KEY_2… env vars join credential pools; one-screen hermes status; opt-in display.suppress_warning_notifications; Desktop Bots roster sections; only Hermes' own node/npm/uv are used; Xiaomi MiMo v2.6. (#112390, #131034, #114370, #101290, #125589, #118502) — @PhoeniXAbhisheK, @victor-kyriazakos, @fortun8te, @rob-maron
• For contributors — CODEOWNERS replaces the label gate; E2E (incl. native Windows) runs only on release builds; stable releases skip macOS Intel/Termux by default. (#131726, #136603) — @ethernet8023

🐛 Notable Bug Fixes

Onboarding, connectors & local models

• Managed llama-server no longer crashes on Windows with 0xC0000374 and no longer inherits your credentials (#116923)
• Windows local-model servers are contained and orphans recovered safely; two backends booting together start one router (#111038, #117600 — @jquesnelle, @chelsealong)

Install, update & packaging

• Docker agents no longer lose their built-in API server, messaging and MCP dependencies after a restart. (#135726 — @unsupportedpastels)
• A hermes update killed mid-pull no longer breaks every entry point. (#120339)

Providers & models

• A rate-limited Claude model no longer benches the whole credential for every other Claude model. (#113171 — @KoNit-K)
• Codex app-server sessions now get SOUL.md and the Hermes system prompt. (#115759 — @JonthanaHanh, @ooiuuii, @Momentum96)

Agent loop, sessions & memory

• A chat whose session row was deleted recreates it instead of silently dropping every later turn (#124117 — @kshitijk4poor, @strzhao)
• Messages flushed at gateway shutdown are recovered into their session (#114225 — @kshitijk4poor, @spfcraze, @yoyodine-industries, @briandevans)

Gateway & platforms

• Telegram no longer stalls under flood control or stays connected but deaf on a wedged dispatcher. (#116987, #132162 — @kshitijk4poor)
• Slack native streaming stops posting answers twice. (#121762 — @kshitijk4poor, @ms-elbdev)

Desktop

• Replies no longer show twice, garble or vanish after resume, steer, a chat switch or reconnect (#118890, #120290, #121061 — @BearHuddleston)
• Pressing Enter answers the clarify card on screen, not a background chat's (#76472 — @briandevans)
• Duplicate or vanishing replies after refresh, session switch or reused tool-call ids (#131758, #128003, #130553 — @OutThisLife, @alt-glitch, @kshitijk4poor)
• "This device" backends no longer idle-killed after an hour; new chats run on the gateway you picked (#134942, #132538 — @unsupportedpastels)

CLI, TUI & dashboard

• Dashboard saves no longer overwrite secrets with their masked preview (#121250 — @kshitijk4poor)
• Resizing the CLI no longer re-appends the conversation to scrollback (#120321 — @Jackal991)

Tools, MCP & browser

• A parked OAuth MCP server no longer replays its dead refresh token on every new session, a storm that could trip a rate-limit ban (#137502).
• computer_use element clicks work again on cua-driver 0.21+; only pixel clicks worked before (#111313 — @jeffjhunter).

Plugins & skills

• hermes plugins list and the dashboard Plugins page make at most one live catalog request instead of waiting through one timeout per installed plugin. (#114811)
• On treeless source checkouts the plugin inventory no longer takes 40–80 seconds, which was longer than the Desktop request timeout. (#125716 — @liuhao1024)
• Enabling a plugin from Desktop, the TUI or the dashboard no longer strips the core tools. (#135048)
• A platform whose plugin failed to load at startup is flagged in hermes status and comes back without a restart. (#130613, #133289) — @kshitijk4poor

Cron, Kanban & delegation

• Gateway /goal gate add no longer lets a non-admin reach the host shell (#101499)
• Automatic git in Kanban, worktree cleanup and subagents no longer runs a cloned repo's hooks or filters (#130661)

Security & misc

• Qwen models behind Alibaba's content guardrail end the turn with the safety notice instead of retrying for four minutes. (#136425)
• Detected password managers can be switched on from Settings again; the toggle was a no-op. (#109558) — @kokhlo

↩️ Reverted in this window (not shipping)

• Collective Wisdom V1 (an in-tree org skill marketplace) was merged and then removed; there is no wisdom code in this release. (#94266 — @shannonsands)
• The Desktop card-style Skills/Plugins catalog browser and its website "Install in Hermes" links were reverted three times; Desktop browses capabilities as list tabs with the embedded catalog picker. (#119381, #131252)
• Approval and clarify prompts that wait until answered were reverted; approvals.timeout still applies. (#130167)
• Parallel group-chat rounds in Bot Mode were reverted; rooms run serially. (#101112, #101139)
• Full isolation of named profiles from the root auth.json was reverted after Desktop bots lost their shared login; profiles keep their own login when they have one. (#113425, #118373, #134574)
• hermes cron resnap and creation-time model snapshots were replaced by cron following your main model (pinned locks a job to one model). (#106496, #113679)
• The Classic default skin palette and a tirith catalog plugin were reverted. (#130015, #133838)

👥 Contributors

Core Team (Nous Research)

• @teknium1 — release direction, salvage campaigns across every subsystem, and ~2,800 merged PRs
• @kshitijk4poor (806 PRs) — providers and reasoning replay, compaction, state.db, free tier, multiplex parity, and hundreds of salvages
• @OutThisLife (679 PRs) — the desktop app: model picker, Settings ▸ Plugins, workspace, Bot Mode UI, connector cards
• @alt-glitch (175 PRs) — first-run onboarding, the Nous free tier, connectors, tool search, machine facts
• @austinpickett (160 PRs) — dashboard chat, desktop SSH/remote, Bot Mode and recovery fixes
• @ethernet8023 (96 PRs) — the unified package manager, signed desktop bundles, stable release pipeline, local-model engines
• @unsupportedpastels (60 PRs) — CLI/TUI interrupt and admission handling, cron reliability, Discord voice, Docker extras
• @jquesnelle (22 PRs) — local models: the managed llama.cpp runtime, recommendations and engine pins
• @helix4u (20 PRs) — desktop interrupt, terminal and session fixes, installer ordering
• @benbarclay, @victor-kyriazakos, @rewbs, @yoniebans, @rob-maron, @c2h5oh, @notwitcheer, @shannonsands — relay and dashboard auth, Slack and Bedrock, managed search and connector tokens, install E2E, model catalogs, CI and linting, docs

Top Community Contributors (by merged PR count)

• @Adolanium (44 PRs) — performance fixes, the in-app browser comment tool, session import, and a run of catalog plugins
• @apoapostolov (29), @TakeshiTGAL (22), @100yenadmin (19), @olric3015 (18), @aydnOktay (12), @cygnostik (12), @anpicasso (12), @itpartypattaya (11), @jacobhausler (9) — the plugin catalog's biggest authors: reasoning and composer tools, Japanese government data, plan mode and boardstate, stream-speed and ledgers, desk tools, reMarkable and desktop realms, Kiro and approvals, hermes-dreaming and holographic, workflows and Beads
• @Finn763 (14), @liuhao1024 (13), @xxxigm (12), @dskwe (10), @KoNit-K (8), @chelsealong (8), @686f6c61 (7) — desktop, Windows, SSH and Linux reliability, local-runtime memory pricing, Bot Screen paste, model catalog fixes
• @jonpol01 (13 PRs) — compaction correctness and exact-bytes file patching

All Contributors

Thank you to every one of the ~2,520 people who contributed code, co-authored fixes, or had their work salvaged into this release:

@0301chris @08085 @0bull @0disoft @0genlab @0x7s0lt1 @0xalydev @0xble @0xbyt4 @0xdany @0xDevNinja @0xGr1mm
@0xharryriddle @0xmosta @0xNyk @0xWhiteMage @0z1-ghb @100yenadmin @1052326311 @10ishq @122393594-ty @123456hyu
@123mikeyd @1960697431 @1RB @2025hcsmile2010-hue @29206394 @333Alden333 @33hodl @3DPrintPioneers @3L0935
@3ssiri @4adwentures @4dlt @52216165 @5uck1ess @686f6c61 @69k4xmdfm2-blip @6ylqq @895252509 @a-yeyang
@a1398394385 @a692570 @aadilghani1 @aaronlab @aashizpoudel @Abd0r @abderbj @abhibansal-sg @AbhijatSaxena
@Abnertheforeman @abualnassr @Abuarchiv @abundantbeing @acarsondave @acedatacloud-dev @acjsec @acsezen
@actualrat1984 @adamcap926 @adamking77 @adamkrawczyk @adammatski1972 @AdamPlatin123 @adanaleycio
@adarshdigievo @adavyas @addamsE @addelh @adecubed @adikpb @adleapnet @Adolanium @AdrianBinDC @adriansotomora
@adurham @adybag14-cyber @aean0x @aeonsong @aerbaser @afifai @afourniernv @afurm @Agantila @agarg21
@agentdynamic @agentlinker @aglowinthefield @agt-user @ahadvice @ahamSel @ahisblessed @ahmed-3li @AhmetArif0
@Ahmett101 @ahrazzle @ahtishamdilawar @ai-ag2026 @AIalliAI @aieng-abdullah @aimable100 @Aio777 @airo7 @AJ
@ajaynomics @ajbmachon @ajensenwaud @ajspig @ajzrva-sys @ak2k @AKAZIK-py @akivavh @Akloenx123 @akshan-main
@akugone @Al3xand3r1987 @alaamohanad169-ship-it @AlanBurningsuit @alanfwilliams @alanwilhelm @albeight
@albert748 @albertodepaola @AlchemistChaos @aldoeliacim @aleesposito85 @alelpoan @alessandrolamberti
@alex-heritier @alex107ivanov @AlexanderBFoley @AlexanderPrendota @alexandreroumieu-codeapprentice
@AlexFucuson9 @AlexGabbia @alexgunsberg @AlexMnrs @AlexTu2 @alexwill87 @AlexxRussell @alfred-amanda
@alfred-smith-0 @aliasocracy @Alicorn-Max-S @aliilhami @alimbaydoun @alireza78a @alissongalindo
@AllenRobinHubert @alloevil @AlphaPerseii3000 @alrcatraz @AlsayedHoota @alt-glitch @AltenLi @alvarobiano
@alvarosanchez @am423 @aman-merchant @amanning3390 @amansk @ambition0802 @amekala @ameobius @amethystani
@AMIK-coorporations @amir-ag @amitcse @aml1973 @an420eth @anablancovicente @analista @anatolijlaptev1991-ctrl
@AndreasHiltner @andreausderhood @andrewhomeyer @andrewhosf @andrewkangkr @andrewmadson-pplx @AndrewMoryakov
@andrexibiza @Andy @andynguyendk @andyst-dev @andyylin @angel12 @angelos @anhtahaylove @aniruddhaadak80
@ankinow @AnnasMazhar @annguyenNous @anombyte93 @anoopmehendale-cue @anotherchu @anpicasso @anuiit
@anuvratrastogi @ap08960695 @AP3X-Dev @apexscaleai @apoapostolov @appletechie @aqilaziz @arasovic @arcabotai
@ArcanePivot @arceus77-7 @Archerouyang @ArcherQAQ @ArecaNon @ARegalado1 @Arguably1341 @arimu1 @arlai-mk
@armandokun @arminanton @aron-intframe @arrry-hydraDB @arrufat @ascetx @asdlem @asheriif @ashishpatel26
@ashmoonori-afk @AshuJoshi @asimons81 @askclaw-vesper @aslater3 @asorry75 @aspire488 @AsterJisu @astraltrekkin
@AStrnbrg @atbrace @atmaksri @atostivint @Atroci @ats3v @atul-trycoral @Aum08Desai @aurel282
@aurorabotticus-svg @auroracapital @austinlaw076 @austinpickett @Automata-intelligentsia @Avery @awizemann
@Awshesh12 @AxDSan @axiom-agent-ai @aydnOktay @AYin-Z @ayushmanpadhi @ayushnangia @AzurePii @B0on @b13kjack
@b2089766906-droid @baau @baauzi @babatorik @bablobanov @babyblueviper1 @back1992 @Backroads4Me @badiyee85
@badkangaroo @bakhtiersizhaev @baleian @banditburai @baofuen @Baophan00 @Bardioc1977 @barnicskolaci
@bartcollet @Bartok9 @basilnas @BatataBF @bayrakdarerdem @BB-light @bb873 @bbasketballer75 @bblicke1
@Beandon13 @bear0328 @beardthelion @BearHuddleston @bedirhancode @beibi9966 @Belaquaa @benawad @benbarclay
@benbenlijie @benegessarit @benjamin-rousseau-shift @benjaminbrumbaugh @BenKalsky @bennybuoy @bennyhodl
@bennytimz @benperry6 @beplee @Bergmann89 @bergusdz @berkantay @berthelius @bgrablin @BGwill-OUTLOOK @bheji07
@bighamx @BigKelLearns @Bihruze @bill3wits @binhnt92 @bionicbutterfly13 @Biotrioo @bird @bixycler @BkashJEE
@BlackishGreen33 @BlakeB254 @blakehermes9 @bloodcarter @BlueBirdBack @bluefateludi @bmcfiv @bmtrnavsky @bo.fu
@bobaba76 @bogerman1 @BonesGit @Bonorinoa @BoredSexyJordan @bounce12340 @BowmanStephen @bradestes @Brammiebram
@brantzh6 @bravohenry @brendanjryan @BrethofAI @brian717 @briancaffey @briandevans @BrianFranco @briepala
@BrierAinz @Brixyy @BROCCOLO1D @BrokeSkill @brucexu-eth @BrunoBza @bryanneva @bsdnn @btorresgil
@buddhaholic420 @buihongduc132 @BullishMomentum56 @bwoliveira @byjaps @byungsker @C-Est-Dept @c-pompa
@c0d1ngHUB @c0debyeric @c0mrade @c2h5oh @c3115644151 @ca-shrimp @cadezhou @Caelier @caentzminger @callsamik
@calvinnwq @cameronbergh @camilb @capthvnsen @carlosapgomes @carlotestor @carrion256 @Carry00 @caseyanthony
@catapreta @caya8205-2 @ccbbccbb @ccook1963 @cdanis @cdb-lumen @cdbartholomew @cdepuy @cdnsteve @ce-dric
@cedanoagent @certaindaniel @cervantesh @CES4751 @Cesar-Azeredo @cez0060405 @cg2aigc @chadhouser @Chadmc9889
@chaithanyak42 @ChanPark03 @charan-rathore @CharlesMcquade @Charlesmpc @CharlieKerfoot @CharZhou @ChasLui
@chelsealong @chenfeijiang95-ui @chengoak @chenhm @chenlichao @chenzeyan54-commits @cherrish333013 @cherryb16
@Chinmayrawat15 @chntllh @choaticpixels @Christopher-Schulze @christopherrobin88 @chrisworksai @chrisyoung2005
@chuenlye @chugiacan @chukirk-svg @Chukwuebuka-2003 @churnast @ciabata-git @CipherFrame @cipry0200 @CIRWEL
@cj52973 @Ckarey007 @ckomma @ckorhonen @clarkvines @claudioorjunior @claudiumio @claudlos @clayduncan
@ClintonEmok @Clippy @Cloeille @cloim @Clubheader @clyu168 @cmcejas @cmyyy @cnfi @cnkang @codebuff-team
@codeJRV @codeshipsingh @codexbt @Cody292 @Codyinked @coe0718 @cola-runner @CoLaOnline @ColdSlither @ColDSnit
@ColrWei @ComicBit @Commander @connns @Contentment003111 @convernaticspeter @Cortana @CortonKwok-GGD
@cosin2077 @Cossackx @cotghw @Cr4ckMe @CraigRichardsonRMPM @crazyief @crazywriter1 @crdesign8 @creeklava-svg
@cresslank @criptogus @cruzanstx @cruzlxyz @CryptoByz @CryptoDombili @cryptoyasenka @cspears32 @csreyes
@cswrld-net @ctaylor86 @cucurigoo @CupaJ12 @cuppett @cutepawss @cuuush @cuyua9 @cxxCoolStar @Cyber-Yichen
@cybertecla @cygnostik @cypres0099 @cyrkstudios @d31tcjg @d8joseph @Da7-Tech @daailouivan @dacheah @Dadmin88
@daedalus-opus @dafka007 @dagardner-nv @Dagulf795 @dajiaohuang @dalebetz @dalzio @DanBennettUK @dandacompany
@DaneelV3 @Danielmuzology @daniil-grois @danilofalcao @dankkush @danrudy33 @danspicytaco @dante32683 @daresan
@dariorapisardi @DarRahman @dasgltd @datanerdie @DatTheMaster @David-0x221Eight @david-bowiegxw @davidgut1982
@davidkarban @DavidMetcalfe @davidneyravyr @davidvv @davidxyuan @DaxLee9988 @dborodchuk @dborosev @dchenk
@deadczarvc @Deadtrix21 @deankerr @deas @deathxdefeat @DebadityaHait @Decent9967 @DECK6 @decofe @DECRUX9812
@deinte @delacaola @delltrak @deniqlab @DenisAraujo68 @denisqq @derekm @DeseretSaint @despotak @DESXIE
@DevAgarwal2 @devarticle @developersdigest @DevEverything01 @devorun @devsart95 @devseunggwan @DevvGwardo
@devwdave @Dezooyi @dgkaaks @dgpcboy @dhabibi @DhivinX @dhruv-kejriwal-mccain @Dhruv7201 @dhruvkej9 @Diaspar4u
@didida9527 @didodim @diegomarino @dieutx @diffen77 @Digitally-Challenged @dillweed @dimitrysuen @dirtyren
@djbclark @djennewe @djmango @djsanchezsuarez @djstunami @dkbjornn @dlcsouza @dlgrv @dlkakbs @dlshumway
@dmabry @dmahan93 @dmater01 @dmelkk-secondbrain @dmetcalfe @dmf01614-source @dmspark @dmyou @DoGMaTiiC
@DojoGenesis @Dolverin @domenicomassafra @DomGrieco @dominikamann @dominiquevidja @doncazper @dongxu0413
@doniocode @donovan-yohan @donramon77 @DonShelly @doojiang @doresa0 @doryani-ai @dot @Doud-FR @dparikh79
@dpersek @dpiers1 @dplush @DragonLi-Mi @DragonnZhang @draix @dreamfarer-space @DreamyMoonMouse @dredozubov
@DresvyanskiyDenis @drew-dot-com @drewTuzson @Drexuxux @drichar @drkpxl @dromai @dschnurbusch @dskwe
@dsr-restyn @Dusk1e @dusterbloom @duu261 @dwb1991 @dyiapanis @dynamite-bud @dzianisv @ea-s21 @Eapwrk
@eason2026 @easyvibecoding @eazye19 @echo931 @echohn @EdderTalmor @eddiewang @Edizzier @edosulai @edrethardo
@eduardo @EdwardIrby @efe-arv @Efistoffeles @egerev @egilewski @ehz0ah @eisene @Eji4h @ekkoitac @el-analista
@elashera @elbukott1 @eliasburlison @elisam0 @ellannjohnson @elmatadorgh @eloklam @eloktev @EloquentBrush0x
@elphamale @Elshayib @elvin-du @emadalsaba @eman062000 @EmanueleCornaggia @embwl0x @EmelyanenkoK @eminboydak
@eminogrande @emirsaffar-collab @emonty @emozilla @EmpireOperating @EMT5320 @Enchanted0911 @ennheng
@Enough1122 @entropidelic @entropy-0x @enwaiax @enzo-adami @eranbes @erenkarakus @erhnysr @eric-senyao
@ericmaddox @ErnestHysa @erosika @esketids @ether-btc @ethernet8023 @etrisnanto @euisuh @evan @evan-bradford
@EvanZhu0721 @eventh0riz0n @everm1nd @Everson-s8 @EvgenyMettsler @EvilDrag0n @EvilRan @Ex8-ca @ExitMaster
@Expri-commits @eyeonall @eynaudg @f3rs3n @F4TB0Yz @fabiantax @fabioaito @fabiomotta0311 @fabiosiqueira
@fahdad @faikwo @faisfamilytravel @FalconOrtiz @falkoro @fancyboi999 @fangliquanflq @FASTCHIP @fastfinge
@Fatmylin @fatwang2 @fazerluga-creator @fcarucci @fcavalcantirj @FeiyouG @felixdae @Felixkw12 @Feranmi10
@ferminquant @fernandezbaptiste @Fernandrewm @FestoneX @FEUAZUR @Finn763 @firefly @FirmamentalSpring
@FlashWayne @FldBudin @flow-digital-ny @fluxkapacitor @flyer103 @flyingdoubleG @flyinhigh @fmercurio @foma
@foma-agent @foras910521-lab @forrestzhang107 @fortona-space @fortun8te @forumevi @forztf @fotedev @foxion37
@francip @franco314 @frankiethull @frankmendes1979 @fred0m @frendo @frizikk @frohsinnllc @Froraut @Frowtek
@frozen @fsaad1984 @ft-ioxcs @fujinice @FunJim @funkyotc @Futahua @g3org3yo @GabboAlarcon @gabbyong
@gabrielpaesland @gamewocao @Ganesh0690 @gaoanze888 @garadice @gas @Gateton @GauravPatil2515 @gauravsaxena1997
@gavasques @Gavin-Qiao @gbarany @gchablemeneses-web @geniok1980 @geoffreybutler94 @georgeatparallel
@georgejieh @gercamjr @gfriesen1 @ggascoigne @ggoldani @gh-dispatch @giggling-ginger @gilfoyle @girayk
@Git-on-my-level @gitabtion @gitcommit90 @GitmanIII @giwaov @gkd2323c @glasserai @glaw1300 @glesperance
@glitchbunny0 @globalvet2025 @gls774 @Glucksberg @gmoranxyz @gnanam1990 @gnanirahulnutakki @GoBeromsu
@godlin-gh @GodsBoy @Goitonthefloor @gokay-ai @gokhanyildirimlar @goku94123 @GoldenLoaf24h @gongyi
@gonzoblasco @googio @Gosuj @GottZ @gqwesleywang @Grey0202 @GrgaPalcic @Gridzilla @grimmjoww578 @grinco
@GroveMinting @gsy324 @GTHell @guanla-zz @GuardianZ71 @guberm @Guerilla-ops @gumclaw @gustavosmendes @gustbr
@gutslabs @gvago @h4ck200711 @haileymarshall @HaisamAbbas @haizaar @Halldrix @Han @hanamizuki @hansnow
@hanyu1212 @HanYunChenLuo @hanzckernel @happy5318 @hardwork9047 @hariNEzuMI928 @harjothkhara
@harrisonmedmedmetrics @harrylabsj @harryvgiunta @Harshkamdar67 @harshmoney123 @hassan-kamel @hassanhaidry
@haydster7 @hbizi @hcnimi @hdy2001 @HearthCore @heathley @hehehe0803 @hejuntt1014 @helingjun @helix4u
@HeLLGURD @hellofrommorgan @hellohanchen @hengm3467 @HenkDz @Henry-GGS @Hermes @Hermsi1337 @hernanda-git
@het0814 @HexLab98 @Heybinshao @HeyClos @heyf @heyhudson @hhhonzik @HiddenPuppy @higgs1729 @himanusia @Himess
@hinablue @Hinotoi-agent @Hiren @holny @HoneyTyagii @honor2030 @Hotragn @houko @hrnbld @hsy5571616 @hteo1337
@huangxun375-stack @huangyoje @huanshan5195 @hueilau @huklaa @HumphreySun98 @huntermonk @HwangJohn @Hygaard
@Hypn0sis @i-Hun @iacker @iainlane @iamagenius00 @iamfoz @iamlukethedev @iamwongeeeee @iap @IAvecilla
@ibhagwan @ibm2024 @iborazzi @ifastcc @ifrederico @igparkernz-coder @ikelvingo @ildunari @Imagineer99 @imgali
@Imgaojp @imgyf @imzacksong @InB4DevOps @inchargeautomation-lab @indigokarasu @indranilbanerjee
@infinitycrew39 @injaneity @insecurejezza @intelac @IntrepidBytes @ipriyaaanshu @IRONICBo @iRonin @irresi
@isaachuangGMICLOUD @isair @ishangodawatta @ishanparihar @ishardo @isheng-eqi @ishuowang @ismoilh
@isoenthusiast @israellot @IT-dreamer @italodsfernandes @itnkr @itpartypattaya @itsflownium @itskaism
@iveywest @Ivyleaguelawyer @izumi0uu @Izzy-Gottz @j-nolan @J0hnLawMississippi @Jaaneek @JabberELF @jacdevos
@Jack @Jackal991 @jackey8616 @JackHunzicker @jackjin1997 @JackLee992 @JackTheGit @jackulau @jacob3712
@jacobhausler @Jah-yee @jahazielhernandezbaubap @jahfaliabdulrahman-dev @Jaiminp007 @jakewvincent
@jakobbjelver @jakobdylanc @james47kjv @jangomango76 @JanHranicky @janviernine @jasm001 @jasonHav @jasonQin6
@jasonwu-ai @jatingodnani @jayzhou2309 @jbbottoms @jcjc81 @jcorrego @jcperdomoybarra @JE4NVRG
@jeeves-assistant @Jeffgithub0029 @jeffjhunter @jeffrobodie-glitch @jefuriiij @JeliTron @jerilynzheng
@jerrygooch @jerryhjones @JerryLiu369 @jervaise @jethac @jexbow @JezzaHehn @jflemieux @jfuenmayor @JiaDe-Wu
@Jiahui-Gu @jiangkoumo @jiangtaoliu-source @jimjsong @JimLiu @jimmyjohansson84 @jinglun010-cpu @jinlingzi-cmd
@jinliyl @JinUltimate1995 @JithendraNara @JiuYue0820 @jkobject @jmiguellucas @jmmaloney4 @jnbn @jneeee
@JoaoMarcos44 @joe-rodgers @joe050860 @joelbrilliant @JoelJJohnson @JoelMTaylor @Joeywrz @johnkattenhorn
@Johnny-xuan @johnnykor82 @johnsonAyo @jollyroger1480 @jon-nielsen @jonameijers @JonathanFeller @jondgilbert
@jonh-dev @jonotonfoto @jonpol01 @JonthanaHanh @JonZal @jooray @jordan-thirkle @jordimas
@joseph-mccarey-architect @josephsellers @JoshSnider @joshuadow @journeydan @JPeetz @jplew @jrcrittenden
@jroest @jslee-gif @jtstothard @JuaniLezcano @JulianCruzet @julio-cloudvisor @juliorobertoalvarez @Junass1
@jupiterx0910 @justascesnauskas @justcarlosm @justinsharpe @JustinUssuri @Justlrnal4 @jwilson411 @jxfjosh
@kagura-agent @Kailigithub @kaiomp @kaishi00 @kalice-vi @kallidean @kama-dev @Kame696 @KarateWilly @karmeleon
@Kartik @kaveone @kavioavio @kawanoii @KCAYAAI @kchuang1015 @KeaneYan @keanhartling @keeltrace @keenvc
@keepcalmqqf @keepConcentration @keiranhaax @kelsia14 @kelvmg @kendrickkester @Kenmege @kentimsit @keppy
@kernel-t1 @kerrz2020 @Kerubi-5 @Kesuek @Kev-fs @KevinMeinon @Kewe63 @KeyArgo @keyuyuan @kfchow-ai @KIAgent01
@kidrauhl123 @kilhyeonjun @Kiloris @Kimchi @Kingdomwarrior23 @kingpin44 @kingrubic @Kinkoolino-Hermes
@KiraKatana @kirkins @KiruyaMomochi @KIvanow @kiwipaulrob @kiwiwyl @kiyo-e @kleros109 @KnowBotDev @kohjunhao
@kohoj @kokhlo @Kolektori @koltyj @Komzpa @KoNit-K @konsisumer @Korkyzer @kosazoltan @kouyichi @krapwoo
@kriscolab @kristianvast @krunkosaurus @Kryptonator @kshitijk4poor @kstawiski @ksze @kuangmi-bit @kuehnberger
@kufufu9 @kumaxs @kuntao2011 @kvnloo @kweiner @kyan12 @kylecap9 @kyoto-aircon @kyssta-exe @kyzcreig
@l37525778-coder @L4XB @labyrinth-analytics @Lakescape @lakshyaag-tavily @lanyusea @LaPhilosophie @LarHope
@larrypang @lars-hagen @laulopezreal @LavyaTandel @lawcheck @lawyer112 @lazyants @Lazzdaycod @leakedd
@Leathal1 @leavedrop @Lee-Si-Yoon @leegunwoo98 @leemove @leepoweii @leewaiho @Legion-is-life @LehaoLin @Lei-k
@lekt9 @leomcamilo @leon7609 @LeonardoLGDS @LeonSGP43 @leoprodz @lepetitprince716-prog @lepkov @lesterlxt
@lesterppo @lesyuk @levest28 @lEWFkRAD @lewis4x4 @lexgenius @lfaus @lgy1027 @li-lizhe @liamsmith86 @libre-7
@lidises @lifeFedorovAlexey @LifeJiggy @lightcloud00 @lightx @lihengming @lijinxiao1982 @LikelyLucid
@lilShawtty-byte @linfeng961 @LINGJIAKUN @linxule @Lion-Leporidae @LionGateOS @lipebez @LironTTG
@LisandroNahuelH @littlewwwhite @liuhao1024 @Liuzikaii @liuzinann @liyoungc @lkevincc0 @llbn @lll @locker95
@lofibrainwav @LoicHmh @Lokee86 @Lokeshm24 @loongfay @loongzhao @loqimean @LordMelkor @lorencato23
@lorenzozanee @lost9999 @Louis-Anson @louiswalsh @loulanyue @LovePlayCode @loveRhythm1990 @Lqg97 @lsshawn
@luandiasrj @lubosxyz @Lubrsy706 @lucasfdale @lucaskvasirr @LucidPaths @luckystar2026 @lucvan @luinbytes
@lukefx @Luna161 @luojiesi @LuwenOosten @luxiaolu4827 @luxles @luyao618 @lvabarajithan @LVT382009 @ly6751
@lyswty @Lyti4 @lzmuhioin @m1k3s0 @M1racleShih @Mabolla @macd2 @Machbub @MacroAnarchy @Madkyotiger
@madpower2000 @Maero47 @Magaav @magicbluesmoke @MaheshBhushan @MaheshtheDev @mahgoub @maksir @malaiwah
@manateelazycat @ManniBr @mannnrachman @manny3 @manuelschipper @maoleidiss @mapu-og @Marc @marcolivierlavoie
@MarcosAlves90 @Marcus112-CS @marcusds @mario841859784 @mariomondev @Markgatcha @marko-niskala @markoub
@MarkTro1969 @MarkVLK @martinp09 @martinramos002-bot @MartyLake @mashenchina-max @Mat-London @matantsevs
@matebenyovszky @math0r-be @mathiashuque @MatthewHines @MattMaximo @MaxFreedomPollard @maximalang @MaximCrabbe
@maximilliangrand @MaxKerkula @maxmilian @maxpetrusenko @maxpetrusenkoagent @maxshafransky-a11y @maxtrigify
@MaxyMoos @maymuneth @MazenMkhinini @mazzanfar @mbeattietex1-star @MBK-fr @MCarlomagno @McClean @McHermes
@mcleay @mcpeezy @mdenil @mearls0501 @mechkw @mehmetkr-31 @mekenthompson @memosr @memtomem @Mengchee118
@mengtanx @mengyuyuan @menhguin @MestreY0d4-Uninter @metamindedu @metamon-p @metricano @mettin4 @meviusisback
@mfurkanakinci @mfwagner @mha33 @mheals @Mi55ed @miadisabelle @Mibayy @micah-c02 @michaelversluis
@michaelzelbel @MicroWearld @miguelchaves997-creator @mijanx @mikeest1972 @MikeGibbsOnyx @MilaArtyNew @milkoor
@minchang @minh-alpon @minhngoc25a @Minksgo @mira-solari @miregal89 @MiseHinoha @misschloedupont @misterdas
@mjshorty @mkrb84 @MLcogTech @mmcallister8 @mmcclean-aws @mmchuangyt-ai @mmilutinovic371 @mnajafian-nv
@mnbf9rca @MNIK-YH @mochamgx @mochiNJ @moeadham @Moep90 @MohamadKanso @mohamedorigami-jpg @moisesvalero
@mojomast @moken627-hub @mollusk @Momentum96 @MongLong0214 @MonkeyLeeT @Montbra @Moodtuner997 @moonlight-lupin
@mooserini @mor44-AI @Morad37 @morajabi @MorAlekss @mormio @morolab @moxian @mr-3mm3 @mr-magaia @MrAbsaroka
@MrAtkeens @mrcharlesiv @mrchen0709 @mreso @MrSimonC @mrwanstudio @ms-alan @ms-elbdev @mssteuer @mudrii
@MuhammadUsamaMX @muhifni @Muno459 @murenovich @Mushisushi28 @MustafaKara7 @mwdearing @mxyhi @mykeura
@mzkarami @mzyas @n-leezy @n-WN @nabilaameena @Nagisa-3000 @Nami4D @NaMinhyeok @NanamiMio @nankingjing
@nanobro @napoleonmm83 @natebransc @nateEc @naterchrdsn @Navlem @nca7777 @Ne0teric @Nea74 @NealZhouPanda
@nebneo @Neboy72 @necoweb3 @neerazz @negm17111995 @neil771 @nekwo @nemofq @Neomail2 @neron82
@networthexplained @NexVeridian @nftpoetrist @ngelik @NgThachThanh @nicbj96 @nicecuprani @Nick @nickseelert
@nickzhu0977 @nicoechaniz @nicolasdmolina @nicoloboschi @nidhi-singh02 @nightq @nikkoxgonzales @niklaskie
@NikolaRHristov @nikolay-bratanov @NikolayGusev-astra @nikshepsvn @NingCiQiu @ningfangbin @Ninja @ninjmnky
@Ninso112 @nitishagar @niudakok @nmediaie @NMTZ-z @nnnet @nocoo @nocturnum91 @noestelar @nolanchic @Noor-Sol
@Noshkoto @nosleepcassette @nosliwhtes @NotGovernor @NoTimeforInfinity @notkisk @notwitcheer @NousResearch
@NPFernando @nrmjeremy @ns-fusion @nthrow @null-runner @nv-cho @nv-kasikritc @nv-pberard @NYTEMODEONLY @nyx573
@o3u6x @obierlaire @obtitus @octo-patch @Octopus @Octopustank @ocuclaw @oferlaor @officialasishkumar
@oheckmann74 @ohMyJason @ohmyskyhigh @okaris @oliver-mee @oliverhees @oliviaaaa7788 @olopez25 @olric3015
@oluwadareab12 @olympusbuildz @omar2535 @OmarB97 @omegazheng @omerkaz @omerlefaruk @omert11 @omid-io @OmniaZ1
@OMOX563 @OmX @Only-Code-A @onuraycicek @ooiuuii @OOOOOAO @ooovenenoso @openclawcash @oppih @opriz @orangercat
@orcunulutas @original4422 @osadchiis @oswaldb22 @oswaldvalois @ottosulin @ourines @ous50 @ousiaresearch
@outdog-hwh @outpoints @outsourc-e @OutThisLife @overtoneblue @oxkenshin @oxngon @OYLFLMH @p-andhika
@pandacooming @paoloantinori @Paperclip @paraddox @Paramon @Parker-Fawcett @parsifal295 @pasmud
@patrykkopycinski @PaTTeeL @paultaki @pcaruba @pdmartins @pdonizete @PeaceMaker-best @pecalbezyshodnost-hue
@peetteerr @pefontana @penginman @penwyp @Per0-1 @perng @perqin @PeterFile @peteromallet @PeterTaras @Petra
@petrichor-op @peyton.lu @pgregg88 @phantomthedog @PhilipAD @philmossman @phippsbot-byte @phoebsie
@PhoeniXAbhisheK @phpoh @phuongvm @pierrenode @pincente @pinguarmy @PINKIIILQWQ @pintadoai @Pinutss
@PIR8-Software @piskooooo @pittosporum-seu @PixelAlchemist4 @pju-hoge @plarche-ux @PLASMA-FR @plcunha
@plluviera @Pluviobyte @pmaho @pminervini @pnascimento9596 @pnpwin @poijygfdyy @polkn @polnikale @Polybulle
@PolyphonyRequiem @poponline63 @portavales @Potrock @POWERFULMOVES @Poxel2 @ppazosp @pprism13 @pradeep7127
@praggybuilds @Prasanna28Devadiga @PRATHAMESH75 @praxis1244-consulting @predatorheard-byte @PRELVAS94
@preyevates @Prithvi1994 @privacydied @ProDrifterDK @professorpalmer @ProgramCaiCai @promptclickrun
@protas-box @psam-717 @psionic73 @ptichalouf @purzbeats @Pusch97 @PuvaanRaaj @pxdsgnco @pxls-kaneko @pyr0ken
@qd @qdivan @QDung210 @QifengKuang @qinghuanandejiangshi @qingshan89 @quangphucqp @quocanh261997 @quotumorg
@quqi1599 @qWaitCrypto @qwertyuiop97 @Qwinty @r00tedbrain-backup @r266-tech @r3x443 @raaaas @raajkumars
@rahlquist @rain-sk @rain610 @rainbowgore @raitoxlol @rajitkhanna @Raleighite @ramarivera @ramseshk @randimt
@rapsealk @rarf @rasitakyol @raulbcs @rayblennerhassett-byte @rayjun @raymondyan-zhijie @rayn1314 @rborkow
@rc-int @rcarrata @rchcorp @rcktmonk @re-ITRT @Realmagnum @Realtyxxx @Reaper-Forge @red4711 @redhelix @RegardV
@reinhold-ph @RelaxJonh @remi-td @RemyFevry @ReqX @rerdi92 @revaraver @rewbs @RFingAdam @RGerrish @Rhaphaello
@RHODIZSECURITY @rhushabhvaghela @riandradiva18 @Riccardo-Vecchi @richardcmckinney @ricki-io @RickyYii @RikETS
@rikkarth @Ringo6107 @rio-jeong @ritvikgautam @Rival @rivercrab26 @rjshrjndrn @rkfshakti @rlaope @Rmohid
@rob-maron @RobbertC5 @robbyczgw-cla @RobbyMo81 @robbyslmt @robchristiansen13 @robertaustinbell @roberttidball
@robinradx @Roblmvp @Rockey011 @rockminster @rocks737 @rod-nxtlevel @rodboev @Rodkillah @rodricksz4h5
@rodrigogs @RohiRIK @RohithPariki @rohitsabu @roli-lpci @romanovzky @Rook-CodeVolt @RootZ3n @roqianjas @roraag
@royalaid @RoySRose @rpridal @rrevenanttt @rroverin @rs545837 @rsayar @rshi0212 @rtcopenclawgh @ruangraung
@rudironsoni @rudrakshchahal @rudycelekli @ruizanthony @runninwithitmarketing @RunzhouLi @ruochu88s
@ruslanvasylev @Ruzzgar @rweddle @ryangu00 @ryantuc @RyanUnderhill @ryrenz @RyTsYdUp @s-jag @s905060
@SacrEllfarch @saforem2 @sagitario-jpn @SaguaroDev @sahibzada-allahyar @Sahil-SS9 @Sahilvishnaliya
@sahlbergalfred4-lgtm @saiteja-madha @sakhnenkoff @Sakujakira @salch-cred @salehelsayed @SaM13997 @samalone
@sambouli @samfoy @samplesabotage @samrusani @Samuek9 @samuelpatro @sanastasiou @SandroHub013 @Sanjays2402
@saotu @sarahwu185 @sarayd @sarbai @sarthak-707 @sarvesh1327 @sasan1200 @Sasni @sasquatch9818
@satirojordi-boop @SayHell0W0rld @sbe27 @ScaleLeanChris @schrodienieur @schwinguin @scottaki @scottgl9
@scottlowry @scroasdale @scross01 @sdalonzo @sdyckjq-lab @sealca @SeashoreShi @season179 @seb-almeida
@Sebuska29190 @secsson @see-k @SelfParody @seluvia @semirkabir @Sensie-agents @serefyarar @sergeikabuldzhanov
@Sergey0515 @sergioperezcheco @sgaofen @sgarrand @sgtworkman @Sha01in @shaase-ctrl @shadus @shafdev
@shagghiesuperstar @shali10 @shane9coy @shannonsands @shashwatgokhe @shaun0927 @shauryajain21 @shawnpana
@shehjaddev @shellybotmoyer @Shenrui-Ma @sherman-yang @Shimakaze514 @shivasymbl @shl0ms @shoesroom13
@shorehefei-ship-it @Shotflame @shreyanshj10 @shuanzhi @Shy7777 @SiaoZeng @siillee @silentpr0 @SilverNine
@simbam99 @SimoKiihamaki @simpolism @sinh2024 @Sisyphus @sitkarev @sjahlstrom @sjiangtao2024 @sjungwon03 @sk
@skappafrost @skyc1e @skyeconcontracting-ctrl @skyer-flyyy @skyeyesec333 @skylarbpayne @slash1andy @Slobaka
@sloik @Slopez2023 @sly321-pixel @SmallNew2003 @SmelterLabs @smfworks @smtony @snipecoder @SNooZyy2
@snowdchike @socrates1024 @soddy022 @sohomsahaun @soichiyo @Soju06 @Solitud1nem @solovision24
@someoneexistsontheinternet @somewheresy @sonderhq @songshikang0111 @Sonnenwerk @Sora-bluesky @sorenisanerd
@soroush5 @soyami @soyelmismo @soymarketing @soynchux @spanishflu-est1918 @spfcraze @spideystreet
@spiky02plateau @spranab @sprmn24 @SquabbyZ @squevo @sroecker @srojk34 @ssep4u @ssiweifnag @SsSs
@stablegenius49 @StanleyStetson @stantheman0128 @starship-s @startakovsky @SteelPh0enix @StefanIsMe
@stefanpieter @StellarisW @stepanov1975 @stephan @Steve-prog001 @steveafrost @stevehsu0524 @steveonjava
@stods21 @StodsEcho5 @Stoltemberg @StreamOfRon @stremtec @strzhao @Studio729 @Subway2023 @successionbio
@sudhirpatil @sudoingx @suhas-svg @sujeet111 @SulthanZahran1 @sum117 @sunsakis @sunwz1115 @superafun
@superb-cation @supere989 @Superfly73 @superlowburn @superposition @supotato-ipj @supplefrog @Svector-anu
@sweetcornna @sxuff @sy0u1ti @sycamoregroupltd @sylvainCDA @sylvesterkaczmarek @Synero @synscott @szcharlesji
@szicely @SZWzz @szymonclawd @szzhoujiarui-sketch @t1mdurden @T910317 @tachyon-r @tainguyenphat74 @TakeshiTGAL
@TalOrbach @Tamaz-sujashvili @tancou @tangtaizong666 @tank321 @TaoMasterCoder @tarkilhk @TartarusLabs
@tauros1983 @taxbax @taylorwtf @tcconnally @teakesdev @teamster22 @teddychenfeiyang-png @Teknium @temalo
@ten-ltw @ten82e @tensorbit89-netizen @teo-nex @terminamike666 @Test @teyrebaz33 @TFOjojo @tfournet
@th3sull1van @thanhan-a17 @tharanee-bit @thatssoheil @the-cybersapien @the-repeter @The-x-35 @the3asic
@TheAirick @TheAngryPit @thebergerking91 @thebizfixer @TheBlueHouse75 @thedavidweng @thefiredev-cloud
@TheGardenGallery @thegoodguysla @thegreatesthoneybee @thejpanganiban @TheNeuralVault @theone139344
@thepetenetwork @ThereWasAYang @TheSmokeDev @TheStreamCode @thetasigmaio @thinkingsheep @thomasscottbeck-sudo
@ThyFriendlyFox @tian0cai @tianma-if @tianyu-liu @ticketclosed-wontfix @tigercraft4 @Tigrannnnnnn @tim404x
@TimeLord2010 @timknip @timmycheng @timoteo7 @timrichardson @timsmykov @tinetwork @tjboudreaux @tjp2021
@tk-pkm111 @tkaufmann @tkwong @tmaarcxs @tmchow @tmielika @to-na @toannhu96 @tobenwarrior @tokou @tomatau
@tomekdot @Tomenatore @tomkubik @tommulkins @Tommy00748 @tomqiaozc @tony-simons-aiowa @Tormen28 @Tosko4
@Totoro-qaq @tpte @trac3r726 @Tranquil-Flow @tranquilflow @treatux @trevorgordon981 @trevornk @Treytucker05
@trippyogi @Triquetra @trnorga @Trounaldo @TroyMitchell911 @truenorth-lj @trwpang @tsemana @tsubasakong
@tsuk1nose @Tsuki-hash @tt-a1i @tuancookiez-hub @TUARAN @tudorpastorglencore @tugrulguner @tupe12334
@TurgayAcar49 @TurgutKural @turingcat @tutan0558 @TutkuEroglu @tw2818 @twe-cloud @twidtwid @twotnguyen @txhno
@tylerbrevard @tylman @tymrtn @tynamite @ubxty @Udjin79 @Ufonik88 @UfukNode @ugoenyioha @UltraInstinct0x
@umi008 @UnathiCodex @underthestars-zhy @UniversePeak @unmodeled-tyler @unsupportedpastels @usvimal
@uttkarsh-26 @uzairchhapra @uzaylisak @uzunkuyruk @vadimcomanescu @vaibhavarora14 @valda @valentt @valerdoskin
@vbcherepanov @vectorcmd @vectorcontext @vectorforge22 @VencentSoliman @Versun @vet402 @vgarlu @VGFreakXBL
@victor-kyriazakos @victorftrdba @victorGPT @victorjmilagres @VictorTran1023 @VictorYXL @vikyw89 @vilkasdev
@virattt @virtaava @Vissirexa @vitobotta @vjpixel @vKongv @vladzablotski-adaption @Vocllum @vollegrewar
@vominh1919 @VrtxOmega @vsd2807 @Vsemagush @vshulcz @vykhovanets @w-up @wa1939 @WadydX @walidboulanouar @wang2
@wangs1203 @wangtaotaotao95 @wanliqin @warabe1122 @warmheartrobot @waroffchange @WAXLYY @wdelarme @wdon
@web3blind @webdevfrancisco @webdevtodayjason @webtecnica @webtoolbox @Weidows @weidzhou @weltmaister
@Wenfengcheng @wesleysimplicio @westkite1201 @whirmill @WhiteWorld @whoisdhana @whyyagswhy @WideLee
@will-lynas @willardgmoore @willfrombr @Willhong @williamtwomey @willy-scr @wilsen0 @wliu-dev @wnuuee1
@woaini30050 @wodesiku @WolframRavenwolf @WolftacDigital @woota @wooyongbin3-cpu @woriwka-ai @worlldz
@woshicby @wpengpeng168 @wukangcheng1994 @WuKongAI-CMU @wuli666 @WuTianyi123 @wuwuzhijing @wxy-nlp @Wysie
@WYSTAF @wz-heng @wzslr321 @x1am1 @x7peeps @xiajiahang @xiaodu55 @XiaoXiao0221 @xiaoxinova @xiaoyaner0201
@xielevi @xinbenlv @Xingkai98 @Xipong @Xixiartemis @xjsns346 @xkam7ar @xmhuangzhijun-hue @Xowiek @xoy8n @xpk84
@xraysight @xrbs00 @XtremXpert @xuezhaolan @xushibo @Xuxyyy @xuyuann @xxxigm @xy200303 @xy952666680 @xz-dev
@y0shua1ee @Yabuku-xD @yagna @yahuo @yaleman @YanSte @yaojiejia @yaozhen @yashiels @yatesjalex @yavarb @ydmw74
@yehuosi @yellowdog01 @ygd58 @Yicheng-Mark @yingliang-zhang @yinkev @YLChen-007 @ymat19 @ymybxx @yoannes
@YonganZhang @Yongcheng123 @yongli-abc @yoniebans @yotamleo @youcefcherid @Youssef @youssefea @youtiaowei
@yoyodine-industries @ypwcharles @yu-xin-c @YUAN @yuanchenglu @yubingz @yuchenwang3 @yuexiongHNU
@yuga-hashimoto @YuhGuan @Yun. @yungchentang @yunke98888-gif @yunze7373 @YuShu @YusukeOshima-5564 @YuYigeng
@yuzilongleif-collab @ywatanabe1989 @yy28 @yyovil @yyq4193 @yyzquwu @yzy806806 @z0zero @z23 @zaclanzon
@zagiscoming @zakiyys @zakolenko @zanzipanzi @zapabob @zay @zaze-oO @zccyman @zebadee2kk @Zechereh @zeejaytan
@zengzheqing @zenplace-system @ZenSchema @Zeraphim @zerone0x @ZeroOttantotto @Zeus-Deus @zhangxicen @zhao0112
@ZHCHJ888 @ZHJay @zhongwater123 @zhongyueming1121 @Zhou-Ruichen @zhouhe-xydt @Zhuzewen2023 @ZidoCode
@zihaofeng2001 @zilvinasu @zindar @ZishiW @ziwon @zjc-enigma @zmlgit @zohuyhieuzo03 @zoser69 @zqy1-1
@zrmnelson @zsuroy @ZT-Toolkit @zufeyan @zwcf5200 @zxcasongs @zxdvd @zyz619963502zyz @zzpigpinggai @zzragida
@zzz163519

Also: @Leanolf (Leanolf+212960991), @ayushnangia (55181294+ayushnangia), @DavidMetcalfe (dmetcalfe+hermes), benoit.lavenier, Adrian Scott, Ahmed Khaled, Alberto Leal, Alex Ferrari, Andrei Ignat, Animesh Mishra, Bosco Barros, Chris DePuy, d4rk pr10r, Daniel van Strien, Dave Bunn, Dogila Developer, Eduardo Christopher López Acevedo, George Shalhoub, Hermes Agent / OpenAI Codex / gpt-6-sol, Isaac Dobson, JP Lew, Konrad Czarski-Bonanaty, Lars van der Zande, leo yang, Lucas Nicolas, Magnus Ahmad, Marco Rutsch, Mark Sheppard, Martin Gontovnikas, Matt McFarland, Michał Dziwisz, namhyuk kim, Nikolas de Hor, Nils (Norya), Paul Bergeron, Paulo Henrique, Robert Montelongo, Sebastian Bochna, Siddharth Balyan, Teo , Timo Karp, Val Alexander, wave-2 worker D, Wes Hermes, Yannick Stephan, Yash Jain, Your Name, Ömer Faruk Okumuş, 史官.

Full Changelog: v2026.8.31...v0.22.0

This release rolls up and fully documents the v0.21.1–v0.21.7 patch releases (Sep 7 – Oct 11), whose notes were deferred to this minor.

Release Date: October 14, 2026

This is a patch release, with a handful of fixes for the Windows Store, plugin updates, and more.

✨ Features

• Agent): add nemotron super 3.5 default parameters (c59d2994) — @elisam0
• Cli): add curated model list at the top in the model picker list (e6835fd3) — @elisam0
• Plugin-catalog): add hermes-lang-ko — Korean Desktop language pack (e5f49b6a) — @dandacompany
• Plugin-catalog: add hermes-lang-pt-br (Brazilian Portuguese language pack) (0169e80c) — @StudioCodeAI
• Plugin-catalog: add teamorouter (TeamoRouter model providers) (ef223406) — @2867297362mjb-sketch
• Plugin-catalog): add author-feed (5f6d6836) — @TakeshiTGAL
• Plugin-catalog): bump aux-ledger to 1.4.0 (6048066e) — @olric3015
• Plugin-catalog): add the wait-ledger catalog card (77cb58e5) — @olric3015
• Plugin-catalog): add wait-ledger (97e65322) — @olric3015
• Community plugin: lightningai + lightningai-rate-limit (07515466) — @dinosauria123
• Catalog: add Hermes AAC 0.1.0 at reviewed exact source pin (7c9adda8) — @TREE-Ind
• Plugin-catalog): add openinvest (b6e86101) — @longsizhuo
• Catalog: add hermes-agent-mixer (v0.2.0 @ 04c4e13) (2e7e3859) — @Sahil-SS9
• Plugins): move Kumiho Memory to memory catalog shelf (46f95e08) — @kaveone
• Add canonical group attachment controls (4673f17c)
• Consume event-bound hosted files through canonical admissions (e87bd098)
• Connect Desktop groups to canonical driver controls (3c2c9d47)
• Transport hosted producers through authenticated owner sockets (51189b05)
• Retain hosted room work evidence across authority changes (0af2c714)
• Route hosted room workers through session authority (bd22e0f9)
• Wire canonical hosted group controls (fa2179bb)
• Gateway): resolve --resume <title> and -c <title> [--create-if-missing] in the authority (11a83ad4)
• Retain terminal identity tombstones during history retirement (ba435291)
• Route native CLI and ACP actions through prepared controls (27b0f7f2)
• Publish real prepared compression in the mutation receipt transaction (b6540276)
• Prepare and atomically publish local model changes (7e7fa7c6)
• Commit independent local branch policy and route atomically (f98eaec1)
• Project managed tool progress without private arguments or results (61ccd894)
• Bridge managed worker approvals clarification and stop (a0b5118f)
• Launch admission-owned tool workers from the ordinary daemon (510e32be)
• Enforce safe defaults at bare agent construction (1eeac867)
• Suppress rules skills and memory readers in private safe workers (25cda66a)
• Bypass plugin providers and hook execution in safe workers (33921e6f)
• Bind immutable private worker config before runtime imports (4cc3f420)
• Expose verified canonical ACP editor MCP attachment (1bda56a1)
• Rebind exact editor MCP credentials on canonical ACP resume (5bfa2f2c)
• Borrow editor MCP configurations with frozen session manifests (394f00f6)
• Isolate execution-owned MCP registry overlays (96e4d296)
• Commit local reset targets with runtime mutation receipts (821137c3)
• Expose profile-scoped Bot relay mailbox RPCs on the authority (792aa35a)
• Migrate queued Bot mailbox identities without replaying claims (af49e2fc)
• Send local Bot DMs to the discovered canonical authority (47ba694e)
• Admit identified Bot Chat relay deliveries through session authority (998df8cc)
• Reserve exact owner-started admission worker claims (fbdfd46d)
• Expose authenticated owner mutation snapshots (d6331c48)
• Freeze ACP tool policy and bind execution-owned edit consent (e2f5cfc6)
• Reserve hosted API identities through the authority (6b278ca4)
• Admit API runs before acknowledging execution (f2d9cea3)
• Run bound API turns on the shared cached agent (dea4f0c5)
• Restore server-bound API session identities (76532ae1)
• Retain claim-fenced structured admission results (262e0ebf)
• Compose worker compression lifecycle and delegation persistence (6c57ad37)
• Publish committed worker completions through authenticated owner bridge (d94ccc2d)
• Fence delegation receipts with shared worker sequence and epoch (be85ca24)
• Route registered worker delegation writes through durable outbox (1ee6545f)
• Add execution-bound delegation ledger operations (8128e88f)
• Persist worker titles activity and route sidecars with receipts (235e4f12)
• Add assignment-fenced worker constructor and finalization handlers (b7de5a8e)
• Atomically compact and advance worker transcript assignments (c2e77eba)
• Preserve worker history and cache lineage identities (e63e1101)
• Add receipted worker compression guards and leases (d51afe4c)
• Route REST imports and deletion through mutation receipts (2cdd103d)
• Route REST sidebar edits through the shared authority (eb329d21)
• Coordinate shared mutations and publish committed revisions (eb42a002)
• Reuse transactional rewind with generation and receipt fences (6777ffa4)
• Import session histories atomically with retry receipts (b9194595)
• Fence destructive deletion without erasing runtime obligations (e5249c9a)
• Commit sidebar edits with canonical mutation receipts (0b1b8e0f)
• Project execution-owned approvals to ACP viewers (97a24c10)
• Attach ACP transport to canonical session execution (8dd92a30)
• Persist assigned worker prompt context and usage anchors (c6540cb9)
• Admit local automation through owner durable FIFO (1642b339)
• Queue due gateway heartbeat ticks through canonical admission (ab44af2c)
• Admit trusted gateway completions to the durable session FIFO (7cd1b000)
• Fence worker terminal receipt after sequenced durable writes (21a48aea)
• Authenticate live worker persistence and explicit restart adoption (9d7d7e2a)
• Receipt worker main and auxiliary usage in canonical transactions (9d896c49)
• Atomically receipt structured worker transcripts and turn leases (2abe47de)
• Dispatch bound local slash commands through gateway handlers (b0377e92)
• Share authenticated canonical slash discovery with legacy catalogs (fcf50e03)
• Authenticate native HTTP through private daemon grants (75764b2a)
• Commit local creation policy and restore cold authority routes (aa2624ba)
• Attach Desktop local launches to canonical gateway (9c40ddcf)
• Bind Ink sessions and controls to canonical authority envelopes (a2d9e258)
• Attach Ink local transport through canonical gateway bootstrap (08f628f9)
• Route normal classic and one-shot launch through the gateway (35510459)
• Add transport-only classic gateway client and option validation (6ed03be9)
• Apply local launch policy through real gateway turns (080c5da6)
• Define frozen local session launch policy (81ed9712)
• Route revision-checked session metadata through gateway (17ddbe44)
• Expose scoped local session metadata and document compatibility (52c354ff)
• Create gateway-owned local sessions through authenticated controls (42967cdd)
• Recheck native Discord membership before durable admission and claim (cc0cd5c9)
• Boot authenticated session authority in ordinary gateway (c3bf62eb)
• Share live clarification controls across attached viewers (9c474378)
• Stream canonical gateway execution events to shared observers (40d9b4c7)
• Reauthorize multiplex native connector provenance (244bff73)
• Share generation-fenced approvals across gateway viewers (5e2afdae)
• Retain native media and context before durable admission (ef447482)
• Replay authority events from atomic subscription watermarks (d24dc3fa)
• Recover committed native text without replaying unknown turns (78646003)
• Execute attached websocket turns on the messaging live agent (47fbfd4c)
• Add revision-fenced runtime rename and archive receipts (5878e565)
• Fence typed worker persistence with atomic replay receipts (7cc69d29)
• Import drained legacy admissions atomically with unknown recovery (124dfa7c)
• Centralize durable session admissions in canonical storage (0695b12b)
• Keep declined gateway wizard starts unmanaged (7500930d)
• Require explicit consent for gateway service setup (16d6b7da)
• Restrict runtime bootstrap peers and bound native pipe I/O (d3ccac14)
• Compose the existing API into the gateway event loop (bac47874)
• Distinguish unavailable gateway owners from absent runtimes (e903841c)

🔧 Improvements

• Profiles): build the seed routing view once; expand enabled too (311155fa) — @kshitijk4poor
• Update nemotron super 3.5 name (3224993a) — @elisam0
• Hermes_cli): update nemotron 3.5 name (108ae4e7) — @elisam0
• Catalog: re-pin showly to the build without the upstream self-update check (6462f64a) — @slchris
• Catalog: update Model Router to v0.4.3 native preferences (6a097ee9) — @metamindedu
• Keep native MCP revision scoped to frozen tool settings (53d17f1c)
• Cron bot-chat delivery has no local CLI fallback lane (5d87060e)
• Retire bot execution discovery from viewer notification pollers (c8ae25cd)
• Make default ACP construction authority-only (c423a431)
• Remove obsolete updater sidecar deletion path (58895653)
• Remove retired local serve launch imports (5702f9df)
• Extract ordinary gateway bootstrap lifecycle (3c0f1e01)
• Freeze shared session authority interface contract (1af74c27)
• Extract TUI session registry and agent factory seams (a38ca908)
• Separate gateway agent acquisition from native progress (0f3a4fb2)
• Extract gateway turn preparation and persistence phases (6e8de80a)
• Move gateway service wizard into setup sibling (f0b35a98)
• Extract gateway setup service orchestration (02d0307c)
• Remove extracted runner initialization bodies (4b1379fb)
• Extract gateway bootstrap and writable initialization phases (0c287340)
• Extract standalone web application lifespan (f38f2444)

🐛 Bug Fixes

• Compression): fallback summaries, multiline setup notes and parallel loads keep skill markers right (297552a9)
• Compression): a slash-skill body's example paths stay out of the anchor index (d6020828)
• Compression): small and slash-invoked skills keep their reload marker across compaction (71e815de)
• Desktop): update notes keep full text, re-read merged PRs per check, respect custom branches (f2a93db9)
• Mcp): preserve server deadlines through outer tool execution (f30020ed)
• Plugins): honor portable per-server call deadlines (fcc170b7)
• Agent): rewrite split tool ids before Mistral sees them (b33ed359) — @xxxigm
• Profiles): align model seed with provider resolution (5fee8d77) — @helix4u
• Profiles): inherit canonical and legacy custom endpoints (2d3e75aa) — @helix4u
• Drop the VPN/proxy advice from the CDN-block message (300228d2)
• Catalog): re-pin Agent Mixer after maintainer review (4297a692) — @Sahil-SS9
• Pin Activity v0.2.1 public credential routes (3dac1f07) — @hassan-kamel
• Plugin-catalog): update switchbot-control to d0e6f77 (c4bf61b1) — @TakeshiTGAL
• Doctor): clarify Docker npm audit remediation (e21caa27) — @KoNit-K
• Deps): bump the WhatsApp bridge lock past its npm-audit findings (231cb757) — @ethernet8023
• Tui): retain native legacy history in canonical session picker (2171365a) — @unsupportedpastels
• Tui): the banner shows main's 8-character session label for a canonical id (2c979900)
• Gateway): a local process completion persists as a process_complete card (ff770cb7)
• Runtime): persist diagnostic automation category through replay (bdac7911) — David Dudok de Wit
• Gateway): retire bot receipt tasks with authority (d50b2eda) — @Lokee86
• Gateway): persist operator provenance for native recovery (c51049aa) — @Lokee86
• Cli): preserve blocking controls in finite output (954638ed) — @Lokee86
• Gateway): isolate malformed bot receipt schemas (4be62f9c) — @Lokee86
• Acp): clean up deferred cancellation lifetime (89dac620) — @Lokee86
• Gateway): close remaining unified-runtime review gaps (83cdc63a) — @Lokee86
• Gateway): isolate bot receipts and keep headless cron no-spawn (cdf36315) — @Lokee86
• Gateway): recover mixed local queues and retire failed hot serves (f4fd982b) — @Lokee86
• Gateway): terminate replay gaps and retain ACP cancels (37662b16) — @Lokee86
• Gateway): route local ticket bootstrap through control owner (996d9beb) — @Lokee86
• Desktop): a transcript reconcile skips a runtime mid-switch to another session (09aafcea)
• Gateway/stream): a failed overflow head send no longer spins the event loop (f0d9bd2f)
• Gateway): profile on our own home is stripped only for the closed session verbs (2c5b0af5)
• Gateway): gateway ensure starts on a systemd host whose user bus is unreachable (82db702f)
• Desktop): a session routed onto a new socket re-attaches before it submits (307dac20)
• Desktop): a registry-connection hover prewarms that connection's gateway (main #89756 port) (#89756)
• Bot-relay): a relayed dm targets only live profiles (#99392 on the authority door) (#99392)
• Gateway_chat): one-shot refuses an unknown-blocked session; stream-json always closes with a result (08b6ebd0)
• Tui_gateway): projects RPCs answer from the scan cache when a profile's state.db was never initialized (372ec7fc)
• Cron): Bot Chat delivery creates the missing Bot Chat instead of failing the run (364a0e22)
• Seed-copy compensation discards the row without the retirement fence (44212c5a)
• Gateway): exact mutation retries repair the runtime projection (X11, reported by @Xipong) (c1ee9286)
• Desktop): preserve accepted input and clarify persistent-work Quit (f8e234ed) — @dokterdok
• Desktop): drop pool-limit notification wiring main added after the pool subsystem was removed (c3632fcc)
• Runtime): owner scope is multiplex-only; foreign LOCAL sources fail closed; primary = launch home (a37550b9)
• Type session creation identity with merged onboarding options (0948ffc9)
• Preserve main lifecycle and discovery behavior after extraction (b186879a)
• Preserve webhook delivery profile and snapshot scoped home (8fe3d198)
• Retain per-admission bot and API authors (61f75a77)
• Recover mixed-clock sessions and compose runtime test listeners (9e747d7f)
• Preserve hosted image admission and execution across owners (2672b820)
• Gateway): restore hosted image attachments natively (bdfe8a50)
• Desktop): preserve profile target during reconnect (ddf8bec7)
• Restore durable hosted group sends before enabling input (d3162155)
• Translate canonical hosted group controls in all desktop locales (29e27af5)
• Desktop): journal canonical group sends before admission (3d1cb4e0)
• Integrate hosted attachment admission hooks (c094d91e)
• Transfer hosted input bytes through task-scoped owner attestation (519e1101)
• Bind hosted owner transport to exact destination home (9035ef9a)
• Minimize retained webhook destinations and preserve legacy receipts (c6456808)
• Capture peer ACK evidence and trim unused file catalog helpers (c86dd71b)
• Publish hosted file shares with cursor-fenced retries (49e27d8b)
• Run hosted rooms through independently owned profile daemons (53a260ac)
• Fence hosted discard and prevent unknown retry generations (3cde0092)
• Explicitly discard exact hosted unknown executions (864c34f3)
• Preserve hosted room ownership during service shutdown (bfa8022d)
• Durably recover webhook destinations (d207fd64)
• Recover native admissions after ordinary adapter startup (70659676)
• Carry finite execution policy through canonical admission (9edd28e6)
• Join finite gateway chat delegations in the admitted turn (5977ef75)
• Resolve managed Node in native ticket probes (ee9030bd)
• Preserve manual compression settings and session identity (9fa0b6aa)
• Prevent duplicate cron alerts after durable delivery handoff (47e3bb25)
• Preserve cron delivery silence and incident acknowledgements (0c7f676e)
• Bound canonical cron owner store acquisition (61759b57)
• Restore canonical desktop image thumbnails safely (4d5db820)
• Restore prepared desktop image drafts after restart (5034ee3a)
• Route lost prompt discard to its session owner (566872a8)
• Preserve newer replies across delayed redirect receipts (ac30b57a)
• Retry transient desktop busy policy reads (82098e63)
• Keep desktop streams intact when corrections are refused (3c886973)
• Connect recovery and owner projection routes (cfa5c152)
• Discover private gateway sockets across native temp roots (de66df14)
• Expose owner-scoped ancillary session reads (61ace21a)
• Stage canonical remote images in the authorized owner cache (baaa4464)
• Project native config and model inventory from canonical owner (1064971e)
• Preserve Kanban board discovery and unknown owner attempts (90e2b2eb)
• Reconcile canonical cron receipts into durable delivery (c1172b1a)
• Preserve admitted images and async usage in managed workers (4abbb3f9)
• Share static-token session ownership across HTTP and WebSocket (56e344e5)
• Connect canonical cutover repairs across owner and clients (c8f8d9ae)
• Restore scoped canonical busy and correction controls (daa01697)
• Isolate authenticated gateway owners by provider and issuer (6b8a6d4c)
• Bootstrap Windows desktop tickets through validated Python pipes (f8ba25a9)
• Submit Desktop images through canonical admissions (c93382c0)
• Preserve desktop busy correction intent on rejection (b3cca0f3)
• Keep canonical RPC refusals out of Desktop resume recovery (9ba2582b)
• Keep unbound Ink drafts instead of claiming memory-only admission (07588b5e)
• Honor non-idempotent canonical busy control acknowledgements (01e4829c)
• Stage clipboard images on the Ink client host (179a8473)
• Scope Ink config hydration and prompt model mutations (798c3926)
• Retain disconnected Ink input and canonical control receipts (1a5bae9b)
• Stage and retain canonical Ink image submissions (33622c04)
• Route Ink session controls through canonical authority (bf0b25a9)
• Preserve Kanban execution PID and durable worker outcomes (d4fd07d2)
• Route claimed Kanban tasks through trusted owner admission (5aeba055)
• Admit agent cron runs through the canonical owner (cdbe8c35)
• Forward A2A profile tasks through session authority (4e3a6bdb)
• Project ACP cancellation and failed admissions accurately (03c0efc8)
• Preserve API content identity history and terminal outcomes (f48d0956)
• Fence legacy history claims and follow Bot reset targets (f88f8615)
• Adopt legacy local history through trusted session owner (cb748e7a)
• Record physical admission assignment before later compression (7b9dc454)
• Classify managed worker errors and verify compression restart (4bbbb90f)
• Preserve worker compression admission identity (588c609c)
• Refresh worker row identities after compression (e19f05ff)
• Preserve managed transcript lineage and settle after worker finish (ec0ebf80)
• Cli): keep Termux startup hints out of gateway policy (31dc5078)
• Service suffix follows main profile-root rule; drop in-process cli.main tests (0ea5a879)
• Canonical delivery feeds attachment results to record_delivery; log failed turns (19ca1e85)
• Managed worker outbox directory is a portable spelling of the execution id (4a08032d)
• Owner verifies managed worker identity through interpreter trampolines (e8fbefb2)
• Refuse /v1/runs on a natively owned session with a bounded 409 (809fec15)
• Commit execution results with terminal settlement (43348a03)
• Replay canonical relay envelopes until terminal reply acknowledgement (8dfd7add)
• Keep bot relay discovery and outbox in sender profile (437e3d85)
• Isolate desktop bot relay sender and target profile routes (4f75b6aa)
• Recover bot mailbox receipts and migrate queued inputs at owner startup (76a60441)
• Recover bot replies from exact committed admission results (a5ea5b21)
• Retain identified desktop bot deliveries until settlement (e1734e7d)
• Pause managed admission followers when the owned worker is lost (e6077ecc)
• Prevent scoped secret rehydration in bypass workers (1ff3d877)
• Preserve hosted API source during peer persistence (06a9516c)
• Return explicit unknown execution on API crash retries (f26c5c43)
• Recover committed API queue when its adapter reconnects (8ef9fbe8)
• Resolve API prompts through canonical pending controls (f35358a6)
• Preserve pre-editor credential identity and native control coverage (8e3b3a0c)
• Defer editor MCP schema changes until a new session (be748101)
• Bind imported history control in its receipt transaction (f40dc17b)
• Prevent import from reusing retired runtime identities (0a55e373)
• Retire local physical lineage and cache affinity on deletion (a1d47945)
• Authorize cold history mutations without execution rebinding (529fb127)
• Retire native session routes with deletion receipts (10b155bf)
• Retire the legacy Bot mailbox producer and inference drain (ee09dad4)
• Retain immutable Bot relay reply receipts on exact retry (391517b7)
• Refuse Bot delivery instead of starting a competing runtime (03f5d843)
• Migrate worker rotation automation inside owner publication (6fce9f77)
• Bind registered worker ledger before agent discovery (56586998)
• Release original worker turn lease after rotation (ce8b1171)
• Preserve REST mutation success response shape (c1882a69)
• Require exclusive maintenance for legacy bulk session writes (7323773c)
• Fence persisted bot visibility without activating profiles (7fab399a)
• Retain dashboard mutation identity across uncertain replies (20dd6813)
• Prepare desktop session edits from owner snapshots (c01a625c)
• Preserve import validation with real authority fixtures (83b87b01)
• Reject coerced session mutation counters and flags (927ca964)
• Anchor V4A editor approval paths to session cwd (490453f7)
• List canonical ACP sessions under their frozen workspace (3c79ac4e)
• Resolve ACP edit previews against execution cwd (85ce5418)
• Project canonical editor diffs and frozen cwd to ACP (45aee742)
• Release ACP transport without client MCP discovery (92d97ba8)
• Steer API runs through the current authority claim (a69efa90)
• Fence API run cancellation to its durable admission (f67f19fb)
• Replay durable API results across HTTP delivery modes (cbcad6fb)
• Retain recoverable worker title conflicts as durable outcomes (b7d14c75)
• Preserve worker compression pre-publication flush annotations (dbe08962)
• Retain worker compression cleanup authority after rotation (36d5b639)
• Accept real worker compression handoff markers (e98a036a)
• Preserve live delegate tasks during parent deletion (b0f792ac)
• Fence ACP controls and expose the read-only catalog (d304b025)
• Keep ACP session catalog read-only (b117521c)
• Bind API storage to its selected runtime authority (c812ec71)
• Preserve webhook duplicate responses with real route admission fixtures (253f9b5e)
• Fence webhook finalization by admitted session and generation (ca2211f0)
• Durably admit authenticated Graph notifications before acknowledgement (e8e17493)
• Retain relay deliveries until canonical admission commits (e75bc52f)
• Acknowledge webhooks only after durable native admission (9d9e4789)
• Restore worker compressor guards before agent construction (84ccae21)
• Refuse unregistered child and cron persistence in compute workers (2ee0725c)
• Keep registered compute imports out of owner delegation recovery (7eecdcf2)
• Retain distinct repeated watch notices in local consumers (0c42619c)
• Refund legacy notification claims refused by admission (d5b332ed)
• Give watch events stable owner-bound automation identities (135730d1)
• Validate gateway launch options before first-run config checks (bec94623)
• Restore first-run guidance before gateway admission (351b8eb4)
• Retain partial-update diagnostics at canonical CLI launch (a6376f0e)
• Preserve runtime authority across updater snapshot restores (8a8a1372)
• Refuse unowned automation without spending sibling retry budgets (d6635ffe)
• Retain completion batch siblings across durable handoff retries (0307a33f)
• Keep named launch keys and endpoints separate from profile defaults (219ed58f)
• Redact and recover credential-bearing terminal projections (478d9b73)
• Resolve configured local routes from frozen provider policy (e02cc03a)
• Retain startup consent on top-level one-shot launches (ecb0afa6)
• Enforce startup cost and data consent before gateway admission (4dcf234d)
• Retry local creation without binding replacement credentials (12899b65)
• Recover frozen local config credentials from their profile source (f1da7833)
• Keep configured credentials out of frozen policy receipts (2f6fb46b)
• Keep explicit local launch keys in authority memory only (32d512fb)
• Freeze local CLI reasoning and execution launch options (d0954a9e)
• Preflight canonical epoch before restoring profile snapshot files (610a97ea)
• Retain explicit verified deletion after read-only export migration (23456236)
• Recover fresh and historical session row layouts by identity (9c681b2d)
• Explain safe transcript salvage when canonical restore is refused (c559236f)
• Preserve structured Unicode through worker payload and receipt encoding (f56e660e)
• Pause workers on outbox I/O failure and preserve local lease waits (23b54921)
• Freeze retry journals and retain exclusive worker outbox ownership (a8c163af)
• Attenuate worker reconnect tickets to execution operations (e7cd5f93)
• Install relay trust only after provenance verification (90f107f2)
• Keep relay reader live during canonical busy delivery (4485fb73)
• Admit relay inputs with verified connector provenance (8fe258cc)
• Keep retained process lineage lookup read-only (bf9cf5c2)
• Retain corruption restore for non-runtime SQLite stores (ad354c28)
• Preflight all restore destinations and preserve import warning parity (f1b4f6e3)
• Preserve runtime epoch floors across older backup restores (7fd8082e)
• Fence canonical recovery output and report excluded runtime state (43f62e7a)
• Exclude restore and import with canonical runtime ownership (4dce8f7e)
• Keep dashboard session browsing read-only (af4599c1)
• Preserve loop liveness witnesses for long gateway homes (ae92d198)
• Retain newer composer scope across delayed queue acknowledgements (4b39a5fd)
• Keep native steer fallback on canonical queue admission (35255f5c)
• Admit native busy slash kickoffs through canonical submit (6bef46ea)
• Reconcile queue input IDs with canonical admission identities (a877aa6e)
• Preserve active turn ownership during canonical queue admission (a131bf4a)
• Route native composer Queue through existing admission submit (4ce95d5f)
• Authenticate native desktop file downloads per attempt (28741ef8)
• Scope stable execution identity to canonical local sources (c3aa2e5c)
• Reject foreign local receipts inside lineage publication (1ffba2ac)
• Retain local admission ownership across transcript rotation (42ee0d34)
• Publish shared queue changes to attached viewers (fb02973f)
• Retain public queued input identity in shared snapshots (37332c17)
• Expose profile-bound setup readiness on canonical sessions (971c3c95)
• Normalize canonical prompts before named desktop listeners (9a2a30a6)
• Fence canonical desktop RPC metadata edits with revision receipts (ce3037dc)
• Bind desktop create retries to the explicit draft intent (c69bb4db)
• Retain desktop update and profile gates before canonical ensure (a7821f63)
• Adapt desktop native sessions to canonical identities and controls (d1546a54)
• Authenticate native desktop HTTP with fresh private tickets (dd8b9f38)
• Preserve native HTTP profile selectors across JSON contracts (eaad737e)
• Retain source-free authority control projections (3546eb41)
• Preflight durable local policy before claiming queued work (d98dd743)
• Publish canonical Ink readiness only after discovery (653889ef)
• Hydrate canonical Ink history independently of live events (971ff7f3)
• Carry native ticket through WebSocket subprotocol negotiation (7fe8c72c)
• Correlate canonical Ink receipts with prepared input identities (3dfb7d50)
• Scope one-shot output to its admitted turn and retain direct query aliases (17155e73)
• Preserve gateway toolset policy and reject resume source overrides (6feaafcc)
• Reject fresh session registration while gateway drains (a67637cc)
• Separate clarification permission from execution control (66bc2861)
• Stamp authenticated legacy clients before shared session admission (4be08ae5)
• Preserve scoped bootstrap grants in shared session connections (b699e0e9)
• Keep forged local profiles out of messaging authorization fallback (d379d6cc)
• Retain queued inputs when shutdown crosses authorization awaits (733dde1c)
• Reload transport role policy after Discord membership awaits (43ae9e9a)
• Retain native trust fields for validation when freezing ingress (53aadf44)
• Fence native authorization yields against identity and FIFO changes (6ef8b38d)
• Report malformed installed plists without leaking parser failures (1b55d964)
• Resolve installed names from the requested profile root (258049b3)
• Reject unbound launch wrappers and nonregular service definitions (1dd6268b)
• Preserve task XML encoding and document service binding refusals (7b904f95)
• Bind loaded launchd jobs and scheduled task XML before start (1ce0d11e)
• Verify effective systemd profile and account before ensure starts (efadac8d)
• Stop bootstrap background workers after listener failure (6716636f)
• Withdraw gateway readiness when the session listener exits (57ec2718)
• Keep readiness and cleanup fenced across runtime shutdown (82ff0592)
• Retain browser authentication and withdraw native ingress on drain (5da456be)
• Export sessions without mutating canonical storage (ae82c1a2)
• Keep native segment sentinels out of canonical text deltas (caae4af5)
• Keep launcher YOLO out of shared gateway policy (628d702c)
• Align profile reservations with bootstrap permissions (87ba34fd)
• Reject FIFO gateway metadata without blocking discovery (5b0f0276)
• Bind fresh ordinary admissions while preserving exact legacy retries (e5f39ada)
• Preserve ordinary native retry fingerprints through callback migration (6083e9ed)
• Refuse unrouted profile claims in native callback snapshots (99c923bc)
• Preserve authority ownership through scoped adapter callbacks (42ce26af)
• Retain trusted ordinary native callback provenance (1d4dab77)
• Omit retired approvals from gateway attach snapshots (e7ee1d67)
• Deny controls after gateway execution settlement (a064afdd)
• Reject approval publication from retired gateway workers (295bc0f5)
• Retain legacy session writers during reader migration (82dfb85d)
• Keep session lists and statistics read-only (1a1ad945)
• Resolve terminal breadcrumbs without opening a session writer (73238088)
• Share read-only insights reporting with interactive CLI (9cd5d6dd)
• Generate CLI insights without initializing session storage (680937a6)
• Keep resume lookup and TUI exit metadata read-only (617be2da)
• Keep status session inspection read-only (ca77b197)
• Bind shared authority when starting gateway API (11958d46)
• Refuse redirected native media publication (e924cf98)
• Preserve legacy native text admission retries (ca226b68)
• Rotate authority replay epoch on concurrent eviction (a9de35d2)
• Isolate authority execution from slow observers (aab36dc6)
• Keep authority subscriptions stable across repeated resume (8c889765)
• Admit busy messaging text into the canonical durable FIFO (eae6194b)
• Preserve surrogate request identity while sanitizing worker text (bb90f4b8)
• Replay committed worker receipts after terminal settlement (203b3f4f)
• Retain transcript closure guard for worker appends (71f835b6)
• Revoke workers when resolving unknown admissions (d7089f75)
• Align runtime mutation receipts with canonical wire contract (e6b1dc06)
• Fence ancestor revisions when runtime titles transfer (62aef795)
• Fence worker persistence when its admission settles (e3bfe640)
• Transfer admitted claims atomically during worker adoption (341aed41)
• Preserve legacy execution generations through admission import (c45d2e5c)
• Restore Ink pending inputs after cold durable resume (34fb13a1)
• Preserve Ink slash attachments and reconcile stale images (dbc7ffa8)
• Reconcile Ink replay receipts with current execution (8a589010)
• Settle desktop receipts on recovered runtime and tidy composed probes (1ad31afa)
• Retire desktop Stop for newer owner executions and fence old output (926d097d)
• Settle terminal desktop admission receipts without stopping live turns (d89a90e1)
• Fence same-call desktop legacy admission retries (41b017f1)
• Never resend ambiguous Ink legacy admissions (5681c7d4)
• Emit structured CLI parse failures only once (1d4d2b2d)
• Bound gateway probes and structure ensure parser errors (ad1099d6)
• Discover the gateway private fallback socket directory (c804d40b)
• Retain runtime locks while scheduler threads survive cleanup (954d5e99)
• Retain gateway ownership through exit-state persistence (d465ad0d)
• Reserve all gateway profiles before writable initialization (c941b0e6)
• Keep standalone session search read-only (0e7c0588)

📚 Documentation

• Agent): use the released model name Nemotron 3.5 Super VL (79651b71) — @j-nolan
• Env): add NVIDIA NIM to .env example (3dd96101) — @elisam0
• Providers): use a non-cloud example key for local NIM (da463310) — @rroverin
• Rollback section the downgrade refusals link to; regenerate the command-parity table (97ec76fa)
• Gateway): describe the messaging pause notice and /reset escape (6cdf7815)
• Explain ambiguous legacy A2A recovery boundary (22a8154f)
• Cli): classic chat resolves --resume <title> and -c <title> --create-if-missing at the gateway; bare -c stays refused (c6c4161c)
• Gateway): document prompt.submit attachments and the ACP media path (e3d60eed)
• Desktop): gateway-owned queue and the Discard control for a turn lost during restart (101be7d7)
• Explicit /model rewrites the system prompt Model line once (single cache-prefix miss) (ef813b35)
• /new rebinds only the invoking view of a shared session (6be1de8d)
• API runs and X-Hermes-Session-Id cannot bind a session owned by another surface (409 permission_denied) (789caca2)
• Dashboard session delete fences, tombstones, and offline-only bulk maintenance (46c50515)
• Explain canonical editor MCP ownership and cold reattachment (fcc978bd)
• Distinguish canonical Bot admission from retired UI ownership (2d22a7cd)
• Record worker lifecycle hooks proofs and remaining integration gates (3dae322e)
• Record isolated worker inference proof and remaining migration gates (b762d80c)
• Distinguish admission recovery from producer replay proof (bc3bcaff)
• Delimit verified worker substrate coverage and rollout blockers (f22754e8)
• Inventory exact worker persistence consumers before substrate (0e30eb6a)
• Define stable local lineage and paused fork recovery (757f19f4)
• Define native HTTP trust and primary-profile scope (a8a6b02c)
• Document local crash recovery contract and replay limits (375fce55)
• Describe settled Ink recovery and native lifecycle probes (2dc2e740)
• Define Desktop gateway ownership and private ticket boundary (f0ff6c57)
• Distinguish native policy proof from remaining classic CLI parity (256cab2b)
• Publish supported local creation policy and recovery boundary (0400a5ef)
• Explain gateway ensure readiness and service consent (a272e8df)

🧪 Tests

• Relay): the OpenAI-stream e2e no longer self-deadlocks when the stream is buffered (6e84ce66)
• Gateway): the authority stream probe waits for the idle session.info (56b9691c)
• Gateway): align SSE prepare cleanup with retained streams (c0230ca5) — @Lokee86
• Desktop-core): capture the Electron PID before quit for the orphan census message (2cf48e0c)
• Gateway): the unserve runner stub carries the reservation our release step shrinks (5fdb477b)
• Cold-profile archive/unarchive through one multiplexing gateway is an acceptance case (dfbb9142)
• Seed-compensation fake uses discard_unadmitted_session; hosted auth probe waits are load-tolerant (cc1eab12)
• Gateway): managed-worker first-inference wait tolerates a saturated 40-worker runner (57c95771)
• Tui): slash-attachment composer assertions wait for the journaled clear (d5950d72)
• Patch origin API probe in banner ancestry fixtures (cdf4eda7)
• Migrate authored bot fixtures to canonical transport (37d7834e)
• Verify webhook receipt observation and composed HTTP startup (a5a0da66)
• Exercise authenticated hosted room Stop and approval (7a6b2961)
• Use system Python for the stdlib-only ticket bridge (3394ef4c)
• Preserve Kanban policy and cron cleanup owner invariants (e1b6f10b)
• Align Kanban scope fixtures with owner worker client (ea2342d4)
• Observe relay completion and cron guard at owner seams (625bb379)
• Drain durable cron failure deliveries before asserting sends (9b753d3b)
• Migrate cron guards and context fixtures through owner execution (7080a488)
• Restore cron owner configuration and session invariants (c08349cf)
• Exercise cron provider and workdir paths through owner (9fde59d3)
• Migrate cron lifecycle invariants to canonical owner execution (e4a2d476)
• Retain queued input identity after session list loading (2671381d)
• Exercise native Electron gateway HTTP and WebSocket tickets (45c6c8de)
• Verify busy acknowledgements and document Ink recovery limits (59a90b4d)
• Cover canonical Ink image composer and startup handoff (65635634)
• Verify native legacy resume and compression cutover (90052b33)
• Prove admission-backed automatic compression retry (3ec0ea59)
• Gate the Discord role probe on the real distribution, not the conftest mock (19feada0)
• Acp): live editor image prompt reaches the loopback model as an image_url part (993a63f0)
• Native suite finds the managed worker by owner ancestry, not bare ppid (venv trampoline) (9e335738)
• Trampoline reap check waits for the owner's bounded close instead of racing the terminal commit (cc2cdbe2)
• Desktop): move the token download-transport invariant beside the extracted function (ff662b6b)
• Exercise safe identity suppression through real prompt assembly (cccb516c)
• Verify reserved admission claims through worker handlers (107af6fc)
• Isolate and reap owned Kanban systemd scopes (3776709d)
• Prove rotated worker survives owner kill and adoption (8459b140)
• Prove fresh ACP handoff and cold canonical restoration (56f62381)
• Verify per-admission API usage on the ordinary daemon (35d9eb2f)
• Prove shared API FIFO on the ordinary daemon (e721121f)
• Prove registered worker terminal execution without canonical SQLite opens (e31b96bc)
• Exercise worker lifecycle and stale callbacks through ordinary owner (5038cf75)
• Verify worker rotation claim and lost-ack replay over daemon (17cf264f)
• Verify native ACP approval and wrong-profile refusal (d157534a)
• Verify local automation stays nonhuman and cache stable (ef071dd3)
• Prove local completion recovery after owner kill (9afff7e9)
• Follow canonical CLI launch in startup guard fixtures (34b9aad1)
• State): keep FTS migration fixtures on historical versions (21baec51)
• Document recovery limits and verify consented gateway launches (ddc1b0a1)
• Refuse unauthenticated credential launch over ordinary daemon websocket (9b0d7861)
• Deny credential-bearing creation to restricted principals (2d2fdff9)
• Verify frozen CLI iteration limits through actual tool rounds (cc37de8b)
• Prove concurrent CLI launch wire and restart credential isolation (84e86a87)
• Own canonical daemon in completed-process CLI integration (6c8f0fd8)
• Keep simulated HEAD updates off the live runtime fleet (7b8fdfa8)
• Seed owner database for dashboard parameter validation (2af3bfd4)
• Initialize owner store for dashboard refresh success (a1811942)
• Isolate service ordering fixture home (3b42e697)
• Seed gateway status through real read-only storage (6af1ac81)
• Exercise CLI exports against real read-only session storage (96782704)
• Prove pending worker usage survives real owner outage and adoption (58bcc3ec)
• Verify live relay replacement and websocket revocation fences (89567476)
• Reject relay trust installation from an invalid seal (80d677d2)
• Reproduce relay busy ingress blocking outbound acknowledgements (73bf2c66)
• Reproduce authenticated relay native admission rejection (0bbe3740)
• Preserve destination lock identity after offline import (ef1fe3de)
• Verify separate-output recovery against active daemon source (cc96119b)
• Expose epoch reuse and service revival after refused import (dbb1e531)
• Reproduce live restore deleting active authority admissions (3a0111ee)
• Align search fixture with owner-initialized session stores (e2a853ba)
• Cover encoded socket limits with direct control paths (34407c9e)
• Reproduce missing loop witnesses in long-home daemons (36649795)
• Configure a restorable model for token session creation (bcf39bfb)
• Verify ordinary daemon replay and release fixture stores (e8f57b7f)
• Supply real session stores to gateway authority fixtures (e3d23087)
• Verify ordinary daemon slash actor isolation and handler scope (3cdf25cb)
• Verify native download boundaries and document transport scope (c8620011)
• Prove local rotation and reset across cold daemon restarts (af3f2dfe)
• Compare discovery on real legacy serve and canonical daemon sockets (5d1d1ee0)
• Reproduce missing canonical command discovery over ordinary daemon WS (659632c3)
• Scope private Unix ticket fixture to supported native hosts (ca3e4b64)
• Keep native protocol fixtures within their runtime type boundary (da98497c)
• Verify canonical receipts retire the native private-file journal (5bd5a8d6)
• Verify native HTTP selectors against real sibling profiles (f6ef1ea4)
• Prove cold local recovery through separate authenticated daemons (041d9ee7)
• Exercise native Stop through the Python Ink launcher (c75e0cdd)
• Verify native Ink Stop acknowledgement and fresh follow-up (d0ad8324)
• Exercise fresh Ink launch through the real Python launcher (8b727f4a)
• Verify actual native clarification answer on model wire (cc4ad0d1)
• Require native Ink reconnect to render settled history (eecaba42)
• Initialize replay fixture with explicit runtime admission state (014b3ea4)
• Retain native reconnect output for intermittent Ink failure (f454485d)
• Verify native CLI cwd execution against the policy-enabled daemon (db2bdf31)
• Prove native gateway approvals survive CLI detach and invalid choice (a0c361ae)
• Prove concurrent local policy isolation on provider wire (15052599)
• Verify metadata retries through ordinary gateway sockets (0d5d548f)
• Execute fresh sessions through ordinary gateway startup (ae19a6e0)
• Prove fresh local clarify survives complete viewer detachment (1044867b)
• Preserve Discord direct pairing and scoped DM grants (144c86c7)
• Retain startup exit contracts with real authority stores (a126b4cc)
• Verify excluded observer prefix against canonical replay (cacd4d22)
• Retain live gateway bootstrap readiness probe (29167522)
• Exercise shared approvals through production API startup (118b34ac)
• Verify native runtime ownership and execution-time secret refresh (234f1278)
• Exercise approval rendering through initialized turn runners (76efc227)
• Verify CLI readers alongside an active SQLite writer (ee23996c)
• Retain real CLI reader A/B harness (bcc03ee8)
• Preserve insights cleanup coverage with absent-store fast path (eae783bc)
• Exercise shared turns through production API startup (0cfe5a2f)
• Retain authority backpressure execution receipt (47ce83d6)
• Retain real-process read-only search A/B probe (551ccfca)
• Require complete shared gateway acceptance receipt coverage (d853d145)
• Retain gateway source invariants across sibling extractions (e1df5d12)
• Follow production methods across gateway turn extraction (04cef1e9)
• Reap truncation fixture worker before restoring bindings (d6d8af93)
• Trace borrowed SQLite readers in search projection invariant (fa572cbe)
• Verify runtime schema upgrades and genuine SQLite full rollback (1769e803)
• Reproduce Ink receipt-only retry busy latch (1c144c98)
• Reproduce desktop receipt stop and legacy timeout races (02e0ab74)
• Verify gateway service consent across import and setup (4ecf5975)
• Make unreserved profile snapshots explicit in multiplex fixtures (a72ed0a5)