Highlights

• Shareable live preview with screenshot review. Previews go beyond a local pane: a running dev server's pages can be shared through a tunnel, and reviewers can select a region on a screenshot, annotate it, and submit review notes back into the conversation. Owner chat and attachment uploads work inside the preview, and you can switch the active preview from the chat header.
• Agent-as-API matured. The Local Agent API now has a per-agent opt-in switch (off by default), stateful conversations, honors a requested permission mode on fresh sessions, and surfaces tool activity and plans on a dedicated reasoning channel. A direct-profile gate keeps these routes on managed profiles; the API key is persisted and only rotated on request.
• Web session reliability. The dashboard now detects a restarted daemon (through a header ping and websocket probe) and recovers, drives transcript replay from explicit server-side replay_start/replay_done brackets instead of a timer, and adds /reload to rebuild a session view from the agent's own record.
• Built-in VibeAround agent from npm. The built-in va-agent now installs from npm like the other ACP adapters and can be launched and resumed from web chat; every terminal launch of a built-in agent opens the TUI.
• Consistent sessions across surfaces. A native session now belongs to exactly one open thread, so continuing the same session from Web, an IM channel, and elsewhere no longer cross-links separate conversations after a restart. The desktop UI's per-agent default workspace now actually governs where new routes land.
• Cancellation works everywhere. CLI Ctrl+C and the TUI's "esc to interrupt" now genuinely cancel the running turn instead of just dropping the client or clearing the draft.

Fixes

• Cross-surface conversations no longer bleed into each other after a daemon cold restart (one native session ↔ one thread).
• First TUI session now opens in the intended workspace instead of falling into im/tui.
• /session --list keeps sessions from agents you switched away from, tagged by agent; a codex install whose history lives in JSONL is no longer hidden by an empty state DB.
• A re-paired browser tab no longer silently stops receiving live updates after a daemon restart.
• Web profile labels are resolved live instead of trusting stale persisted values.
• Cloudflare tunnel token is passed via the TUNNEL_TOKEN environment variable instead of the process command line (removes a local ps exposure).
• Numerous preview lifecycle, owner-access, tunneled-caching, and region-capture fixes; migration and API-bridge robustness fixes.

Compatibility

• Local Agent API opt-in. The agent-as-API routes are off by default. Enable per agent under settings (local_agent_api.agents), and use a managed profile — the direct profile is gated on these routes.
• Built-in agent installs from npm. va-agent is pinned in agents.json and launched with node; it is not bundled into the app. VIBEAROUND_VA_AGENT_PATH still overrides with a local build.
• Replay change. Route history was retired; resume now carries an explicit replay wish and session/load replays are delivered only to the requesting connection. Existing sessions continue to work.
• macOS 12+ / Apple Silicon; Windows 10/11 x64; Linux x64.

Packages

• macOS Apple Silicon DMG: signed, notarized, verified.
• Windows x64 Setup EXE, MSI, portable ZIP: built by CI.
• Linux x64 AppImage and deb: built by CI.

Known Limitations

• Calling the Local Agent API for the claude agent with a managed (non-Anthropic) profile can stall instead of returning promptly; codex is unaffected. Tracked in #304.
• Text attachments uploaded in Web chat are not yet read by the agent. Tracked in #304.