What's Changed

• perf: backport Windows install and cold-start speedups by @bolichen97 in #6097
• fix(desktop): backport visible Windows update progress by @bolichen97 in #6104

Full Changelog: v0.4.0-insider.12...v0.4.0-insider.13

What's Changed

• fix: keep windows gateway cold starts on the splash by @bolichen97 in #5964
• fix: backport desktop Gateway UTF-8 restarts to 0.4.0 by @bolichen97 in #5950
• fix(release): backport one-click Tailnet mobile access by @bolichen97 in #5980

Full Changelog: v0.4.0-insider.11...v0.4.0-insider.12

What's Changed

• refactor: extract shared hardened gh runner for all gh spawn paths (#342) by @bolichen97 in #2407
• feat(security): operator keystone extension for OAuth consent-endpoint allowlist (#1341) by @bolichen97 in #2402
• fix: redact model-authored tool titles on all deny surfaces (#2274) by @bolichen97 in #2389
• feat(chat): message-level pinning with pinned messages panel by @RohanK6 in #1676
• ci(review): expand Opus to correctness blocking + sync fork prompt by @iamwhatever in #2379
• feat(mcp-pool): Toggle all switch for poolable MCP servers by @chenmingwei23 in #2433
• fix(knowledge): make the three auto-ingest paths opt-in by @bolichen97 in #2448
• fix(dev-fleet): report slow actions as indeterminate, not as a fake percentage by @chenmingwei23 in #2439
• test(dashboard): make chat-pins transient-I/O test portable on Windows by @iamwhatever in #2454
• feat(voice): add a push-to-talk key for voice input by @CrysisDeu in #1608
• feat(watchdog): detect a stalled turn from outside the turn's read loop by @chenmingwei23 in #2466
• feat: receive images, voice and files on the Weixin channel by @chenmingwei23 in #2444
• fix(dev-fleet): refuse the sync when pip cannot reinstall into the live venv by @chenmingwei23 in #2445
• fix(prepare-pr): re-mirror the local review gate onto the current CI contract by @iamwhatever in #2456
• feat(voice): show info banner + mic-click modal on remote instances by @cixuuz in #2471
• refactor: centralize title hydration by @JoernZheng in #2467
• fix(test_wait_tool_early_end): scope the wait-tool fake clock to the wait loop thread by @tlobinger in #2460
• fix(terminal): complete subcommands for tools the user installed by @dwu96 in #2429
• feat: first-party fixed-argv carve-out in sandbox fail-close (#1563) by @bolichen97 in #2428
• feat: verify internal-API session claims via unix-socket peer creds (#302) by @bolichen97 in #2424
• fix: re-vet cron jobs at fire time; move SEL key to trust/ (#1881) by @bolichen97 in #2421
• build: target Node 24 LTS with a single 22+ floor everywhere (#1070) by @bolichen97 in #2415
• feat: pin tunnel sessions to daemon-verified tailnet peer (#1762) by @bolichen97 in #2411
• fix(appstore): compute app trust fields server-side (#580) by @bolichen97 in #2408
• fix: detect and audit tier downgrades in nested-sandbox passthrough (#691) by @bolichen97 in #2406
• fix: per-root hardlink-scan budgets with loud truncation (#646) by @bolichen97 in #2387
• fix: make revocation generation cover refresh tokens (#2028) by @bolichen97 in #2388
• ci: gate vendored _vendor tree behind a sha256 manifest (#492) by @bolichen97 in #2392
• fix(dashboard): restore isort-clean import order in the dashboard auth module by @iamwhatever in #2479
• feat(instances): carry the kiro-cli context so a sent session resumes by @iamwhatever in #2260
• revert: withdraw multi-account Telegram until a bot is governable (#2203) by @chenmingwei23 in #2476
• docs(autosde): forbid new work on the gateway boot path by @CrysisDeu in #2472
• docs: revise perpetual-agent RFC after a first-principles re-read by @CrysisDeu in #2506
• fix: restore leading slash on git-mangled diff header paths (#2493) by @bolichen97 in #2517
• fix: attach clipboard images despite text/html and synthesize filenames (#2489) by @bolichen97 in #2520
• test(acp): stop the leaked stderr-drain task from mocked _spawn tests by @SebastianYuSun in #2509
• test(website): cover six app surfaces that had no tests at all by @CrysisDeu in #2514
• feat(cloud): durable launch jobs + owner-only API for EC2 crew setup by @iamwhatever in #2059
• feat(browser): make the built-in browser the default for chat by @iamwhatever in #2082
• fix: reject unknown tag ids on board columns instead of silent drop (#1897) by @bolichen97 in #2568
• fix: surface permanent turn-failure reasons in Telegram replies (#1831) by @bolichen97 in #2565
• refactor(i18n): run the unit-literal scan as a gate, not a vitest test by @k33bz in #2562
• fix(chat): drop the sessions sidebar's pinned Split View button by @chenmingwei23 in #2557
• fix(dev-fleet): actionable error when no trusted git resolves (#2530) by @bolichen97 in #2553
• fix: seed artifact companion composer on first open by @fanhongy in #2529
• fix: detect kiro-cli API-key auth in the readiness probe by @jtoloui in #2527
• fix(cli): match macOS framework Python in stop/restart gateway detection by @mnaameh in #2523
• fix: self-heal dangling storageState in playwright config at load time (#2491) by @bolichen97 in #2522
• feat: deep-link a notification by ts on the notifications page (#2018) by @bolichen97 in #2518
• feat(ci): summarize filed issues, per-issue and in the ship report by @CrysisDeu in #2511
• fix: match multi-word chat-history queries token-wise by @patrigao in #2508
• test(subagent): drop the Windows-tick duration floor from the turn-duration test by @SebastianYuSun in #2505
• fix(side): render the side panel through the shared chat transcript by @chenmingwei23 in #2503
• fix(dashboard): stop a hung usage fetch parking the credit pill forever by @isotope14 in #2498
• feat: stagger gateway startup after a recent loopstall crash dump by @rubencu in #2486
• fix: audit safety-override renew fail-closed before commit (#2453) by @bolichen97 in #2484
• fix: audit deactivate of an already-lapsed safety override grant (#2475) by @bolichen97 in #2483
• fix: label the prune merged-scan as scanning and drop danger styling while it runs (#2451) by @bolichen97 in #2482
• feat(knowledge): global budget, rate limit, source cap, and configurable extraction model by @iamwhatever in #2468
• fix(cloud): keep EC2 UserData dist-check free of ${...} so !Sub accepts it by @iamwhatever in #2596
• fix(preview): report a target that is this gateway instead of a blank frame by @kyleseaman in #2080
• feat(webhooks): reach inbound webhooks from Settings, not the nav rail by @kyleseaman in #2056
• fix(chat): keep link-preview favicons visible on every theme by @kyleseaman in #2593
• fix(voice): keep the draining transcript after a manual dictation stop by @CrysisDeu in #2469
• fix(markdown): stop CJK punctuation being swallowed into bare URLs by @CrysisDeu in #2171
• docs(autosde): freeze the chat session row's line count by @CrysisDeu in #2512
• ci: split Opus review into discovery and validation passes by @CrysisDeu in #2332
• fix: surface the wedged thread's stack in doctor and boot replay by @rubencu in #2490
• style: restore import order in dashboard token_auth (unblocks all PRs) by @chenmingwei23 in #2478
• fix(security): check bash operands verb-independently in the normalizer by @iamwhatever in #2603
• fix(ui): solid glass fallback when backdrop-filter is unsupported (#1817) by @bolichen97 in #2569
• fix(terminal): stop scanning PTY output on the way to the browser by @buluoray in #2152
• fix(test): make the reduced Windows scope green for frontend-only PRs...

Full Changelog: v0.4.0-insider.10...v0.4.0-insider.11

What's Changed

• refactor: extract shared hardened gh runner for all gh spawn paths (#342) by @bolichen97 in #2407
• feat(security): operator keystone extension for OAuth consent-endpoint allowlist (#1341) by @bolichen97 in #2402
• fix: redact model-authored tool titles on all deny surfaces (#2274) by @bolichen97 in #2389
• feat(chat): message-level pinning with pinned messages panel by @RohanK6 in #1676
• ci(review): expand Opus to correctness blocking + sync fork prompt by @iamwhatever in #2379
• feat(mcp-pool): Toggle all switch for poolable MCP servers by @chenmingwei23 in #2433
• fix(knowledge): make the three auto-ingest paths opt-in by @bolichen97 in #2448
• fix(dev-fleet): report slow actions as indeterminate, not as a fake percentage by @chenmingwei23 in #2439
• test(dashboard): make chat-pins transient-I/O test portable on Windows by @iamwhatever in #2454
• feat(voice): add a push-to-talk key for voice input by @CrysisDeu in #1608
• feat(watchdog): detect a stalled turn from outside the turn's read loop by @chenmingwei23 in #2466
• feat: receive images, voice and files on the Weixin channel by @chenmingwei23 in #2444
• fix(dev-fleet): refuse the sync when pip cannot reinstall into the live venv by @chenmingwei23 in #2445
• fix(prepare-pr): re-mirror the local review gate onto the current CI contract by @iamwhatever in #2456
• feat(voice): show info banner + mic-click modal on remote instances by @cixuuz in #2471
• refactor: centralize title hydration by @JoernZheng in #2467
• fix(test_wait_tool_early_end): scope the wait-tool fake clock to the wait loop thread by @tlobinger in #2460
• fix(terminal): complete subcommands for tools the user installed by @dwu96 in #2429
• feat: first-party fixed-argv carve-out in sandbox fail-close (#1563) by @bolichen97 in #2428
• feat: verify internal-API session claims via unix-socket peer creds (#302) by @bolichen97 in #2424
• fix: re-vet cron jobs at fire time; move SEL key to trust/ (#1881) by @bolichen97 in #2421
• build: target Node 24 LTS with a single 22+ floor everywhere (#1070) by @bolichen97 in #2415
• feat: pin tunnel sessions to daemon-verified tailnet peer (#1762) by @bolichen97 in #2411
• fix(appstore): compute app trust fields server-side (#580) by @bolichen97 in #2408
• fix: detect and audit tier downgrades in nested-sandbox passthrough (#691) by @bolichen97 in #2406
• fix: per-root hardlink-scan budgets with loud truncation (#646) by @bolichen97 in #2387
• fix: make revocation generation cover refresh tokens (#2028) by @bolichen97 in #2388
• ci: gate vendored _vendor tree behind a sha256 manifest (#492) by @bolichen97 in #2392
• fix(dashboard): restore isort-clean import order in the dashboard auth module by @iamwhatever in #2479
• feat(instances): carry the kiro-cli context so a sent session resumes by @iamwhatever in #2260
• revert: withdraw multi-account Telegram until a bot is governable (#2203) by @chenmingwei23 in #2476
• docs(autosde): forbid new work on the gateway boot path by @CrysisDeu in #2472
• docs: revise perpetual-agent RFC after a first-principles re-read by @CrysisDeu in #2506
• fix: restore leading slash on git-mangled diff header paths (#2493) by @bolichen97 in #2517
• fix: attach clipboard images despite text/html and synthesize filenames (#2489) by @bolichen97 in #2520
• test(acp): stop the leaked stderr-drain task from mocked _spawn tests by @SebastianYuSun in #2509
• test(website): cover six app surfaces that had no tests at all by @CrysisDeu in #2514
• feat(cloud): durable launch jobs + owner-only API for EC2 crew setup by @iamwhatever in #2059
• feat(browser): make the built-in browser the default for chat by @iamwhatever in #2082
• fix: reject unknown tag ids on board columns instead of silent drop (#1897) by @bolichen97 in #2568
• fix: surface permanent turn-failure reasons in Telegram replies (#1831) by @bolichen97 in #2565
• refactor(i18n): run the unit-literal scan as a gate, not a vitest test by @k33bz in #2562
• fix(chat): drop the sessions sidebar's pinned Split View button by @chenmingwei23 in #2557
• fix(dev-fleet): actionable error when no trusted git resolves (#2530) by @bolichen97 in #2553
• fix: seed artifact companion composer on first open by @fanhongy in #2529
• fix: detect kiro-cli API-key auth in the readiness probe by @jtoloui in #2527
• fix(cli): match macOS framework Python in stop/restart gateway detection by @mnaameh in #2523
• fix: self-heal dangling storageState in playwright config at load time (#2491) by @bolichen97 in #2522
• feat: deep-link a notification by ts on the notifications page (#2018) by @bolichen97 in #2518
• feat(ci): summarize filed issues, per-issue and in the ship report by @CrysisDeu in #2511
• fix: match multi-word chat-history queries token-wise by @patrigao in #2508
• test(subagent): drop the Windows-tick duration floor from the turn-duration test by @SebastianYuSun in #2505
• fix(side): render the side panel through the shared chat transcript by @chenmingwei23 in #2503
• fix(dashboard): stop a hung usage fetch parking the credit pill forever by @isotope14 in #2498
• feat: stagger gateway startup after a recent loopstall crash dump by @rubencu in #2486
• fix: audit safety-override renew fail-closed before commit (#2453) by @bolichen97 in #2484
• fix: audit deactivate of an already-lapsed safety override grant (#2475) by @bolichen97 in #2483
• fix: label the prune merged-scan as scanning and drop danger styling while it runs (#2451) by @bolichen97 in #2482
• feat(knowledge): global budget, rate limit, source cap, and configurable extraction model by @iamwhatever in #2468
• fix(cloud): keep EC2 UserData dist-check free of ${...} so !Sub accepts it by @iamwhatever in #2596
• fix(preview): report a target that is this gateway instead of a blank frame by @kyleseaman in #2080
• feat(webhooks): reach inbound webhooks from Settings, not the nav rail by @kyleseaman in #2056
• fix(chat): keep link-preview favicons visible on every theme by @kyleseaman in #2593
• fix(voice): keep the draining transcript after a manual dictation stop by @CrysisDeu in #2469
• fix(markdown): stop CJK punctuation being swallowed into bare URLs by @CrysisDeu in #2171
• docs(autosde): freeze the chat session row's line count by @CrysisDeu in #2512
• ci: split Opus review into discovery and validation passes by @CrysisDeu in #2332
• fix: surface the wedged thread's stack in doctor and boot replay by @rubencu in #2490
• style: restore import order in dashboard token_auth (unblocks all PRs) by @chenmingwei23 in #2478
• fix(security): check bash operands verb-independently in the normalizer by @iamwhatever in #2603
• fix(ui): solid glass fallback when backdrop-filter is unsupported (#1817) by @bolichen97 in #2569
• fix(terminal): stop scanning PTY output on the way to the browser by @buluoray in #2152
• fix(test): make the reduced Windows scope green for frontend-only PRs...

What's Changed

• fix(sandbox): delegate Windows Kiro spawns internally (#5620) by @bolichen97 in #5653

Full Changelog: v0.4.0-insider.7...v0.4.0-insider.8

What's Changed

• revert: restore the native Windows installer flow (#5489) by @bolichen97 in #5508

Full Changelog: v0.4.0-insider.6...v0.4.0-insider.7

What's Changed

• feat: redesign the Windows installer experience (#5103) by @bolichen97 in #5354
• feat(cli): group the top-level help and lead with gateway/service/doctor (#5159) by @bolichen97 in #5353
• fix: complete the Windows installer flow (#5402) by @bolichen97 in #5467

Full Changelog: v0.4.0-insider.5...v0.4.0-insider.6

What's Changed

• cherry-pick(#5039): stop a leaked record factory reddening the full suite by @bolichen97 in #5058
• chore(release): stamp release/0.4.0 as 0.4.0-rc.5 for the insider.5 cut by @bolichen97 in #5061

Full Changelog: v0.4.0-insider.4...v0.4.0-insider.5

What's Changed

• refactor: extract shared hardened gh runner for all gh spawn paths (#342) by @bolichen97 in #2407
• feat(security): operator keystone extension for OAuth consent-endpoint allowlist (#1341) by @bolichen97 in #2402
• fix: redact model-authored tool titles on all deny surfaces (#2274) by @bolichen97 in #2389
• feat(chat): message-level pinning with pinned messages panel by @RohanK6 in #1676
• ci(review): expand Opus to correctness blocking + sync fork prompt by @iamwhatever in #2379
• feat(mcp-pool): Toggle all switch for poolable MCP servers by @chenmingwei23 in #2433
• fix(knowledge): make the three auto-ingest paths opt-in by @bolichen97 in #2448
• fix(dev-fleet): report slow actions as indeterminate, not as a fake percentage by @chenmingwei23 in #2439
• test(dashboard): make chat-pins transient-I/O test portable on Windows by @iamwhatever in #2454
• feat(voice): add a push-to-talk key for voice input by @CrysisDeu in #1608
• feat(watchdog): detect a stalled turn from outside the turn's read loop by @chenmingwei23 in #2466
• feat: receive images, voice and files on the Weixin channel by @chenmingwei23 in #2444
• fix(dev-fleet): refuse the sync when pip cannot reinstall into the live venv by @chenmingwei23 in #2445
• fix(prepare-pr): re-mirror the local review gate onto the current CI contract by @iamwhatever in #2456
• feat(voice): show info banner + mic-click modal on remote instances by @cixuuz in #2471
• refactor: centralize title hydration by @JoernZheng in #2467
• fix(test_wait_tool_early_end): scope the wait-tool fake clock to the wait loop thread by @tlobinger in #2460
• fix(terminal): complete subcommands for tools the user installed by @dwu96 in #2429
• feat: first-party fixed-argv carve-out in sandbox fail-close (#1563) by @bolichen97 in #2428
• feat: verify internal-API session claims via unix-socket peer creds (#302) by @bolichen97 in #2424
• fix: re-vet cron jobs at fire time; move SEL key to trust/ (#1881) by @bolichen97 in #2421
• build: target Node 24 LTS with a single 22+ floor everywhere (#1070) by @bolichen97 in #2415
• feat: pin tunnel sessions to daemon-verified tailnet peer (#1762) by @bolichen97 in #2411
• fix(appstore): compute app trust fields server-side (#580) by @bolichen97 in #2408
• fix: detect and audit tier downgrades in nested-sandbox passthrough (#691) by @bolichen97 in #2406
• fix: per-root hardlink-scan budgets with loud truncation (#646) by @bolichen97 in #2387
• fix: make revocation generation cover refresh tokens (#2028) by @bolichen97 in #2388
• ci: gate vendored _vendor tree behind a sha256 manifest (#492) by @bolichen97 in #2392
• fix(dashboard): restore isort-clean import order in the dashboard auth module by @iamwhatever in #2479
• feat(instances): carry the kiro-cli context so a sent session resumes by @iamwhatever in #2260
• revert: withdraw multi-account Telegram until a bot is governable (#2203) by @chenmingwei23 in #2476
• docs(autosde): forbid new work on the gateway boot path by @CrysisDeu in #2472
• docs: revise perpetual-agent RFC after a first-principles re-read by @CrysisDeu in #2506
• fix: restore leading slash on git-mangled diff header paths (#2493) by @bolichen97 in #2517
• fix: attach clipboard images despite text/html and synthesize filenames (#2489) by @bolichen97 in #2520
• test(acp): stop the leaked stderr-drain task from mocked _spawn tests by @SebastianYuSun in #2509
• test(website): cover six app surfaces that had no tests at all by @CrysisDeu in #2514
• feat(cloud): durable launch jobs + owner-only API for EC2 crew setup by @iamwhatever in #2059
• feat(browser): make the built-in browser the default for chat by @iamwhatever in #2082
• fix: reject unknown tag ids on board columns instead of silent drop (#1897) by @bolichen97 in #2568
• fix: surface permanent turn-failure reasons in Telegram replies (#1831) by @bolichen97 in #2565
• refactor(i18n): run the unit-literal scan as a gate, not a vitest test by @k33bz in #2562
• fix(chat): drop the sessions sidebar's pinned Split View button by @chenmingwei23 in #2557
• fix(dev-fleet): actionable error when no trusted git resolves (#2530) by @bolichen97 in #2553
• fix: seed artifact companion composer on first open by @fanhongy in #2529
• fix: detect kiro-cli API-key auth in the readiness probe by @jtoloui in #2527
• fix(cli): match macOS framework Python in stop/restart gateway detection by @mnaameh in #2523
• fix: self-heal dangling storageState in playwright config at load time (#2491) by @bolichen97 in #2522
• feat: deep-link a notification by ts on the notifications page (#2018) by @bolichen97 in #2518
• feat(ci): summarize filed issues, per-issue and in the ship report by @CrysisDeu in #2511
• fix: match multi-word chat-history queries token-wise by @patrigao in #2508
• test(subagent): drop the Windows-tick duration floor from the turn-duration test by @SebastianYuSun in #2505
• fix(side): render the side panel through the shared chat transcript by @chenmingwei23 in #2503
• fix(dashboard): stop a hung usage fetch parking the credit pill forever by @isotope14 in #2498
• feat: stagger gateway startup after a recent loopstall crash dump by @rubencu in #2486
• fix: audit safety-override renew fail-closed before commit (#2453) by @bolichen97 in #2484
• fix: audit deactivate of an already-lapsed safety override grant (#2475) by @bolichen97 in #2483
• fix: label the prune merged-scan as scanning and drop danger styling while it runs (#2451) by @bolichen97 in #2482
• feat(knowledge): global budget, rate limit, source cap, and configurable extraction model by @iamwhatever in #2468
• fix(cloud): keep EC2 UserData dist-check free of ${...} so !Sub accepts it by @iamwhatever in #2596
• fix(preview): report a target that is this gateway instead of a blank frame by @kyleseaman in #2080
• feat(webhooks): reach inbound webhooks from Settings, not the nav rail by @kyleseaman in #2056
• fix(chat): keep link-preview favicons visible on every theme by @kyleseaman in #2593
• fix(voice): keep the draining transcript after a manual dictation stop by @CrysisDeu in #2469
• fix(markdown): stop CJK punctuation being swallowed into bare URLs by @CrysisDeu in #2171
• docs(autosde): freeze the chat session row's line count by @CrysisDeu in #2512
• ci: split Opus review into discovery and validation passes by @CrysisDeu in #2332
• fix: surface the wedged thread's stack in doctor and boot replay by @rubencu in #2490
• style: restore import order in dashboard token_auth (unblocks all PRs) by @chenmingwei23 in #2478
• fix(security): check bash operands verb-independently in the normalizer by @iamwhatever in #2603
• fix(ui): solid glass fallback when backdrop-filter is unsupported (#1817) by @bolichen97 in #2569
• fix(terminal): stop scanning PTY output on the way to the browser by @buluoray in #2152
• fix(test): make the reduced Windows scope green for frontend-only PRs...