What's Changed

• fix(windows): bundle Bun 1.4.2 so the built-in MCP servers can read their own files by @FerroxLabs in #1400
• fix(npm): ship the managed OfficeCLI shims in the headless payload by @FerroxLabs in #1401
• fix(bugreport): stop publishing user-authored titles in public issue bodies by @FerroxLabs in #1402
• feat(fuigo): offer Ollama's reasoning_effort menu on BYOK models by @FerroxLabs in #1405
• fix(mcp): a per-agent publish failure is partial, not fatal by @FerroxLabs in #1403
• fix(skills): a built skill reaches the next chat turn, on one key by @FerroxLabs in #1404
• chore(release): 0.13.2 by @FerroxLabs in #1407
• fix(windows): stop start-up CLI detection blocking the main thread by @FerroxLabs in #1411
• ci(smoke): scale the exit budget with the declared smoke timeout by @FerroxLabs in #1412
• ci(smoke): raise the Windows silent-install budget to 1200s by @FerroxLabs in #1413
• fix(windows): stop paying 30s of start-up for a probe that finds nothing by @FerroxLabs in #1414
• ci(smoke): say which side is wedged when readiness times out by @FerroxLabs in #1415
• ci(smoke): date the main-thread block with a heartbeat by @FerroxLabs in #1416
• fix(smoke): a closed CDP socket is not a timeout by @FerroxLabs in #1417
• fix(smoke): a dropped transport on Browser.close is shutdown, not a fault by @FerroxLabs in #1418
• fix(smoke): give teardown a real budget and name the survivors by @FerroxLabs in #1419
• fix(smoke): make a CDP timeout say which silence it is by @FerroxLabs in #1420
• fix(smoke): stop the process monitor starving its own event loop by @FerroxLabs in #1421
• fix(win): one PowerShell per teardown, not one per child by @FerroxLabs in #1422

Full Changelog: v0.13.1...v0.13.2

What's Changed

• fix(fuigo): no false failed banner mid-run; persona via session _meta, no prompt offload by @FerroxLabs in #1384
• fix(fuigo): create new chats on Flux Reasoning, not the engine default by @FerroxLabs in #1389
• fix(acp): long tool calls no longer time out the turn; visible stop reason by @FerroxLabs in #1391
• fix(updater): wait for Squirrel.Mac before quitting to install by @FerroxLabs in #1382
• fix(integrity): restore a self-updated OfficeCLI and gate mac updates on the code seal by @FerroxLabs in #1383
• fix(windows): survive an elevated run and a missing TEMP at startup by @FerroxLabs in #1381
• fix(tide): stop the collector re-reading unrenderable panels every pass by @FerroxLabs in #1388
• fix(mcp-library): keep a fresh publication through a concurrent probe, show Connecting by @FerroxLabs in #1385
• fix(acp): wire Retry and Continue to the ACP send box by @FerroxLabs in #1386
• feat(fuigo): local and additional BYOK providers (Ollama, OpenRouter, Gemini, Azure…) by @FerroxLabs in #1387
• fix(db): stop storing provider API keys on ACP conversation rows by @FerroxLabs in #1390
• fix(fuigo): idle reaper also reaps engines started by opening a chat by @FerroxLabs in #1392
• chore(fuigo): bump 1.0.16 -> 1.0.19 by @FerroxLabs in #1395
• chore(release): 0.13.1 by @FerroxLabs in #1396
• fix(windows): one PowerShell probe at start-up, not one per agent CLI by @FerroxLabs in #1397
• ci(smoke): give the readiness window room on slow runners by @FerroxLabs in #1398
• ci(smoke): 600s readiness window, measured from windows-11-arm by @FerroxLabs in #1399

Full Changelog: v0.13.0...v0.13.1

What's Changed

• Fuigo is the engine: remove Wayland Core and Wayland Nano, bundle Fuigo 1.0.14 by @FerroxLabs in #1367
• fix(fuigo): first chat stalls on Fuigo's 25 KB prompt offload by @FerroxLabs in #1371
• chore(fuigo): bump 1.0.15 -> 1.0.16 and stop the ~/.agents/skills scan by @FerroxLabs in #1372
• ci(windows): retry only the Azure signing crash, not every build failure by @FerroxLabs in #1321
• feat(fuigo): process budgets, workspace sandbox policy, BYOK providers by @FerroxLabs in #1373
• fix(masterclass): stop Fuigo dropping Wayland-published connectors by @FerroxLabs in #1374
• chore(release): 0.13.0 by @FerroxLabs in #1369
• ci(release): preflight no longer references the deleted Core engine tag by @FerroxLabs in #1378
• ci(release): poll protected observer runs every 60 s, not 3 s by @FerroxLabs in #1379

Full Changelog: v0.12.18...v0.13.0

What's Changed

• fix(desktop): restore bundled TC-TIDE workflow by @FerroxLabs in #1340

Full Changelog: v0.12.15...v0.12.16

What's Changed

• fix(release): survive an empty bun audit instead of dying on JSON.parse (v0.12.14) by @FerroxLabs in #1313

Full Changelog: v0.12.13...v0.12.14

What's Changed

• fix(release): bind target-gate evidence by resolved path, not raw string (v0.12.13) by @FerroxLabs in #1312

Full Changelog: v0.12.12...v0.12.13

What's Changed

• Clear the new severe advisories, and stop the CLI probes outliving the app by @FerroxLabs in #1122
• chore: bump desktop to 0.12.4 by @FerroxLabs in #1123

Full Changelog: v0.12.3...v0.12.4

What's Changed

• Desktop: land Milestones A, B and D by @FerroxLabs in #925
• Desktop 0.12.0: Wayland Nano, Cockpit shell, Core v0.13.0 by @FerroxLabs in #956
• Pin Wayland Nano to the stable 0.1.0 release by @FerroxLabs in #957
• feat(acp): consume nano typed errors (data.nanoError) end to end by @FerroxLabs in #958
• fix(release): break the capability-seal deadlock that blocked every release by @FerroxLabs in #959
• feat(wnano): bundle the attested Wayland Nano v0.1.1 runtime + 0.12.0 changelog by @FerroxLabs in #960
• fix(build): stop OfficeCLI self-updating over the pinned release binary by @FerroxLabs in #961
• fix(build): accept linux musl sharp natives and guard OfficeCLI mutation by @FerroxLabs in #963
• fix(build): make the release smoke pass on every platform by @FerroxLabs in #965
• fix(build): portable ps environment form and ignore signal-cli build outputs by @FerroxLabs in #966
• fix(build): treat Browser.close as a request, not as shutdown evidence by @FerroxLabs in #967
• fix(build): ask the macOS app to quit instead of assuming windows closing does by @FerroxLabs in #968
• fix(build): declare that Windows ARM64 bundles no bun runtime by @FerroxLabs in #969
• ci: fetch Apple's notary log for a rejected submission by @FerroxLabs in #971
• fix(smoke): budget the Windows silent install for ARM64 emulation by @FerroxLabs in #972
• fix(macos): Developer ID sign staged runtimes so the app can notarize by @FerroxLabs in #974
• test(bun): accept a genuinely absent runtime on targets bun does not publish by @FerroxLabs in #975

Full Changelog: v0.11.18...v0.12.0

What's Changed

• fix/714 by @FerroxLabs in #758
• fix(ijfw): scan project workspaces at launch instead of cwd '/' (#716) by @FerroxLabs in #757
• fix: make Cmd+Z undo pasted text in chat composer (#669) by @FerroxLabs in #766
• fix: sync team conversation cache so send box shows active model (#736) by @FerroxLabs in #772
• chore: add CODEOWNERS by @FerroxLabs in #753
• fix(projects): surface distinct draft-generation failure classes (#682) by @FerroxLabs in #771
• fix: settle rejected remote draft invocations instead of hanging (#684) by @FerroxLabs in #773
• fix/721 by @FerroxLabs in #769
• fix: unblock knowledge draft route from secure-config gate (#683) by @FerroxLabs in #767
• fix(skills): read packed skill bodies in agentProfileMerge (#502) by @FerroxLabs in #768
• fix: navigate to remaining tab when closing the active chat tab (#678) by @FerroxLabs in #765
• fix: map wcore engine stderr to real host log levels (#717) by @FerroxLabs in #763
• fix(wcore): surface engine mcp_failed events instead of dropping (#713) by @FerroxLabs in #760
• fix: skip absent non-default locale rule/skill files silently (#719) by @FerroxLabs in #761
• fix(extensions): remove stale pre-#275 bundled copies shadowing asar (#718) by @FerroxLabs in #764
• fix(context): usage indicator max from registry catalog (#733) by @FerroxLabs in #776
• fix/755 by @FerroxLabs in #770
• fix(updater): explain Windows silent-noop update failures (UAC) (#492) by @FerroxLabs in #782
• test: give the #721 garbage-child settle loop a 30s budget by @FerroxLabs in #775
• test(e2e): realign team-create spec to v0.6.2.1 UI + reachability (#780) by @FerroxLabs in #784
• fix/700 by @FerroxLabs in #778
• fix(team): unstick codex add + claude fire in team leader flows by @FerroxLabs in #785
• fix: log single-instance forwarding at info, not warn (#720) by @FerroxLabs in #759
• fix(scroll): future-proof nested-scroller detection via composedPath (#777) by @FerroxLabs in #788
• fix(tabs): navigate on close-left/right when the active tab is closed (#762) by @FerroxLabs in #790
• fix(memory): wrap score-tooltip icon so hover can't blank the app (#751) by @FerroxLabs in #791
• fix(team): raise + make configurable the Teams inactivity watchdog (#747) by @FerroxLabs in #789
• fix(memory): contain detail-panel render errors with error boundaries by @FerroxLabs in #794
• fix(team): deliver leader mailbox messages that arrive during its wake by @FerroxLabs in #796
• fix(models): keep embedding models out of chat/workflow picker (#740) by @FerroxLabs in #797
• fix(acp): collapse adapter respawn-storm banners + name corrupt install by @FerroxLabs in #798
• fix(wcore): halt a stalled turn with an idle watchdog (#746) by @FerroxLabs in #803
• fix(acp): persist allow-always approvals across restart (#672) by @FerroxLabs in #799
• fix(context): size ACP context meter from the real model window (#733) by @FerroxLabs in #800
• feat/app gate smoke by @FerroxLabs in #804
• fix(providers): classify bge models as embeddings by @arc-web in #742
• fix(guid): stop leaking unresolved agent ids into the chat placeholder by @FerroxLabs in #779
• fix(context): resize the meter on model switch, size the sonnet slot by @FerroxLabs in #809
• fix(security): trust a CGNAT peer only if it arrived over the tailnet by @FerroxLabs in #811
• fix(test): stop the #721 spawn-test racing a fake clock against real IO by @FerroxLabs in #813
• ci: label the superseded-run red so it stops reading as a test failure by @FerroxLabs in #805
• fix(787): key team finalize dedup by turn to survive re-wake by @FerroxLabs in #815
• fix(diag): stop over-redacting lowercase identifiers in Doctor report (#701) by @ShadowsTT in #702
• test(787): assert synthesized finish stamps producing turnId by @FerroxLabs in #820
• fix(787): consume engine per-turn turn_id on the ACP signal finish by @FerroxLabs in #822
• feat(settings): add core extensions management by @sazora in #481
• fix(extensions): refuse cleartext http settings-tab entryUrl by @FerroxLabs in #823
• fix(webui): deny remote peers writing webui.desktop.* config (#819) by @FerroxLabs in #825
• fix(acp): recover from a mid-run error instead of halting the agent by @FerroxLabs in #814
• fix(webui): announce every LAN bind and get consent before exposing it by @FerroxLabs in #821
• fix(acp): stop false "no YOLO mode" warning for claude backend by @FerroxLabs in #831
• fix(extensions): gate cleartext-http entryUrl in native hooks (#824) by @FerroxLabs in #832
• fix(context): size unknown models conservatively, not 1M (#807) by @FerroxLabs in #833
• fix(webserver): loopback isn't operator behind a declared proxy by @FerroxLabs in #829
• feat(security): warn once when an undeclared proxy fronts the app by @FerroxLabs in #834
• fix(profiles): never run a named profile on the default profile's data by @FerroxLabs in #828
• fix(updater): match app theme in the updater extension + add feedback by @FerroxLabs in #839
• feat(about): auto-check for updates on open and show status inline by @FerroxLabs in #835
• feat(permissions): per-workspace Chat/Cowork trust axis (#671) by @FerroxLabs in #841
• fix(startup): reconcile chat turns interrupted by a crash on launch by @FerroxLabs in #840
• fix(ijfw): correct the manual install command shown in settings by @FerroxLabs in #846
• feat(cron): guard high-frequency new-conversation jobs + overlap skip by @FerroxLabs in #845
• feat(assistants): export an assistant as a credential-redacted SKILL.md by @FerroxLabs in #848
• feat(notifications): notify on task completion, sound optional (#579) by @FerroxLabs in #843
• fix(projects): drop timeline filters that can never match anything (#180) by @FerroxLabs in #844
• feat(agents): seed Hermes profiles as selectable preset assistants by @FerroxLabs in #851
• fix(ijfw): spawn a real JS runtime, not the fused app binary (#706) by @FerroxLabs in #850
• feat(workflows): credential-redacted portable export (#512) by @FerroxLabs in #855
• fix(ui): status badges use success green, never the brand accent (#729) by @FerroxLabs in #837
• fix(notify): quiet-hours default, per-chat focus, redact, i18n (#579) by @FerroxLabs in #854
• fix(mcp): resolve npx at session injection on Windows (#827) by @FerroxLabs in #858
• fix(win): Hermes hooks/unbuffered + OpenClaw IPv4/shim on Windows (#756) by @FerroxLabs in #856
• fix(workflow): persist mobile Steps-rail toggle preference (#116) by @FerroxLabs in #852
• fix(providers): guide ChatGPT OAuth on headless hosts instead of hanging by @FerroxLabs in #849
• chore(engine): pin wayland-core to v0.12.25 (#754) by @FerroxLabs in #861
• fix(windows): clean protocol + start-on-boot registry on uninstall by @FerroxLabs in #860
• fix(routing): keep native models off Flux in team/workflow spawns by @FerroxLabs in https://github....

What's Changed

• Security: Potential Command Injection in build-skill-pack.ts via process.argv by @tomaioo in #707
• fix(ci): repair pre-existing unit-test rot on main by @FerroxLabs in #728
• fix(secrets): vault passphrase provisioning for isolated-profile engine spawns by @FerroxLabs in #725
• fix(cost-meter): per-run usage deltas via computeUsageDelta (kills cumulative double-summing) by @FerroxLabs in #724
• fix: SkillGuard tags normalization (#712) + blockmap release chain for differential updates (#715) by @FerroxLabs in #726
• fix(skills): progress events + batching + timeout for library scan (1900+ skills no longer looks hung) by @FerroxLabs in #732
• chore: bump to 0.11.17, bundle wayland-core v0.12.24 by @FerroxLabs in #735

New Contributors

• @tomaioo made their first contribution in #707

Full Changelog: v0.11.16...v0.11.17