pub.dev · #3482 most downloaded on pub.dev

flutter_agent_harness

1.0.5247.4K downloads/moIstiN/flutter_agent_harness ↗New releases in your daily digest, changelog included.

Cross-platform AI agent harness for Dart and Flutter: streaming provider adapters, agent loop with tools, session persistence, context compaction.

Last release today
07 Oct 2026
Ships on a steady schedule
a new release about every 8 days
Nearly every release is documented
notes for 60 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
2 months old
254 releases · first in 2026

Release timeline

254 releases since 2026

2026

20262026

One column per month.

Releases

1.0.5247 Oct 20262 sources agree
ci(quarantine): skip shell_job_countdown_pty_test.dart in the gate (flake, #1365 )
ci(quarantine): skip shell_job_countdown_pty_test.dart in the gate (flake, #1365) (#1347)

fix(1368): pub.dev publish — push-tag-only OIDC path, dart-only gate, verify waits instead of false-alarming (#1370)

fix(1339): review hardening — session-archive traversal guard on every branch (#1369)

fix(1323): live thinking streams in the TUI — reasoning deltas commit the transient-retry attempt (#1325)
Open source →
1.0.5237 Oct 20262 sources agree
gh-1341 Bump js_widget_runtime pin to 9d57570 / ^0.4.156 — flutter_js hostCall/capture channel fix (fa-craft lag, voxel-sandbox spinner)

gh-1341 Bump js_widget_runtime pin to 9d57570 / ^0.4.156 — flutter_js hostCall/capture channel fix (fa-craft lag, voxel-sandbox spinner) (#1366)
fix(1349): deny bare long foreground sleeps; enrich liveness reminders with the background hint (#1355)
fix(1293): dap start exit-0 guarantees the dial credential is durably on disk (#1354)

Open source →

1.0.5186 Oct 20262 sources agree

gh-1307 [BUG] nightly macOS suite red: js_app_error_capture_test — load error NOT captured (empty list) regression from #1273 's engine fix, merged gr

gh-1307 [BUG] nightly macOS suite red: js_app_error_capture_test — load error NOT captured (empty list) regression from #1273's engine fix, merged green through the PR exclusion-zone hole (#1309)
fix(918): omp_ref reference fixtures captured on PTY host + nerd-glyph parity wiring (#1231)
gh-1310 [CI] Tag CI for v1.0.513 red — 4+ jobs fail (Android APK, web debug, Hostile ambient env, PTY screenshots) → release asset-less, legs fall back to v1.0.511 (#1312)
gh-1303 [CI] Pages 'Build landing + web demo' red on main — '41 packages have newer versions incompatible with dependency constraints' (blocks publish + merge-trigger) (#1305)
gh-1299 [BUG] [URGENT] main red 13 legs: release commit v1.0.515 bumps version WITHOUT regenerating pubspec.lock — new --enforce-lockfile (#1268) hard-fails every leg (#1304)

Open source →

1.0.5115 Oct 20262 sources agree

gh-1164 [GOAL] built-in js-apps skill (promoted from app asset, decisive apps-vs-widget routing) + JS render/runtime errors reported back to the autho

gh-1164 [GOAL] built-in js-apps skill (promoted from app asset, decisive apps-vs-widget routing) + JS render/runtime errors reported back to the authoring agent as failures (blocked by #1151) (#1246)
gh-1244 [FLAKE] PTY integration: secret_sheet_test «IT-mask: masked from the first keystroke» waits for exactly 5 bullets while typing races ahead (red main, run 37232401938) (#1245)
gh-1241 [GOAL] Session token-usage ledger: resume-aware usage.json fold over the session chain (provider-reported, estimated marked) (#1243)
ci(quarantine): skip scheduled_indicator_test.dart in the gate (flake, #1252) (#1253)
gh-1077 [GOAL] flutter_app compaction parity with CLI — mobile sessions never compact (roles/smol absent, wrong context window, silent failure, no over-window relief) (#1239)
ci(quarantine): skip job_board_stability_pty_test.dart in the gate (flake, #1250) (#1251)
gh-1235 Wire jsr.openUrl + webView host into the app JS engine (js_widget_runtime = 0.4.154) (#1238)
gh-1226 [BUG] 1.0.505 (with #1190 aboard): mail-wake turn after /sessions restore still loses the provider/key binding — copilot-401 error on a z.ai session + fused guidance text (#1237)
gh-1199 [GOAL] Deterministic-only Quality gate: mock LLM everywhere, live models move to supervised benches (#1229)
feat(1101): Agent Wire Protocol v1 — web reference client (sdk/web), conformance runner, browser example (#1228)
gh-1224 [BUG] iOS 1.0.504: all wasm interpreters (python/qjs/lua/sqlite3) dead — 'no lazy loader' in FOREGROUND bash _forJob() clone drops moduleLoader (regression suspect #1163) (#1225)

Open source →

1.0.5094 Oct 20262 sources agree

chore(pin): awf workflows track @main — always-latest policy (owner directive 2026-10-04). All five machine-loop stubs (teammate, SM, merge, sm-kicker

chore(pin): awf workflows track @main — always-latest policy (owner
directive 2026-10-04). All five machine-loop stubs (teammate, SM,
merge, sm-kicker, merge-trigger) flip from immutable SHA pins to
dmtools-agentic-workflows@main, so awf fixes (kicker real ticks
awf#13, per-SHA concurrency awf#14, teammate defaults awf#12) go live
on merge with no re-pin ceremony. Security trade-off (owner-accepted):
a mutable ref executes whatever sits at the awf main head — mitigated
by awf main being review-gated, by
test/machine_kit/factory_stub_ref_test.dart now guarding ALL FIVE
uses: refs resolve to exactly main (never a stale SHA, never a
random ref) in lockstep, and by the agents ENGINE pin staying an
immutable 40-hex SHA via factory_ref. The secrets: policy is
settled per-callee in the same guard: teammate/sm/merge map
SOURCE_GITHUB_TOKEN explicitly (their factories declare it
required), while merge-trigger keeps the factory-documented
secrets: inherit PAT passthrough (factory-merge-trigger declares no
secrets) and the kicker carries no secrets block. Stale
immutable-SHA pin comments in ai-teammate.yml / machine-sm.yml
rewritten to state the always-main policy (#1222).

Open source →

1.0.5084 Oct 2026

chore(ci): document the sm-kicker head-completeness codeless-head crash (upstream awf#15) — the factory job's gh api calls put --jq before --arg / --a

chore(ci): document the sm-kicker head-completeness codeless-head crash
(upstream awf#15) — the factory job's gh api calls put --jq before
--arg/--argjson, so a CODELESS branch head (2 parents, 0 changed
files: a routine branch-sync merge with no content diff) crashes the
job with accepts 1 arg(s), received 4 — even when CI is fully green
on that head, and the job's own rescue dispatch can never heal exactly
those heads. Workaround until the upstream fix: keep the branch head
code-bearing. Live instance: run 37193754301 on head 1fe9b12.
fix(messaging): gh-1180 — schedule_message self-chains no longer die
silently at the agent-chatter wake cap. The idle inbox-wake gate
(InboxWakePolicy, shared by the CLI and the app hosts) now exempts a
delivered scheduled self-reminder ([scheduled] prefix, from == to)
from the 10-consecutive-wake streak: a deliberate agent-chosen cadence
(night watch, periodic sweep) wakes forever, while foreign
agent-to-agent chatter stays capped (anti-storm REG) and user-kind
mail always wakes. A 30s cadence floor bounds a zero-delay
re-schedule spin (E5). Refused wakes are visible ([mail] wake refused, once per episode) and every lifecycle step is receipted to
<messagesRoot>/_scheduled/receipts.jsonl (ScheduledReceiptLog):
scheduled / delivered / delivery_failed / scan_failed /
wake_attempted / turn_started / wake_refused. A failed scheduler scan
(transient listDir error) now re-arms at failureBackoff with an
onError log instead of silently disarming the delivery heartbeat.
fix(messaging): gh-1180 review round — refusal receipts and the
visible refusal line are gated once per refusal EPISODE (the latch
lives in InboxWakePolicy next to the streak and re-arms on the same
resets), so a held gate no longer appends per-tick wake_attempted
rows (~43k duplicate lines/day) and a repeat episode after user input
is announced and receipted again. The app host receipts its wake path
(wake_attempted / turn_started / wake_refused) onto the same
trail — AC4 is no longer CLI-only. A self-reminder adopted across a
session-id change delivers FROM the live mailbox (from re-addressed
alongside to), so the resumed chain stays self-shaped and exempt
instead of falling back to the capped chatter lane. Plugin-only
pending batches are explicitly classified as chatter (the contract is
stated, not accidental), the wake cap is single-sourced from
InboxWakePolicy.defaultMaxInboxWakeStreak, and the policy file lost
a stale copy-pasted ignore_for_file.

Open source →

Additional notes

feat(providers): issue #1398 — stall-recovery tuning becomes per-provider and data-driven. Registry entries (customProviders:, models.custom:, roles chain entries, providersQueue: entries) accept optional connectTimeoutMs/streamIdleTimeoutMs (strict positive-int parsing); resolution is entry > the providerTimeouts: section > the 180 s/300 s defaults, per field, and every seeded entry prints its effective values at boot. The wire seams (sendWatchedProviderRequest connect watchdog, createSseIterator idle watchdog) resolve per request URL, so all adapters inherit the tuning; runs without entries are byte-identical (AC6). Also: the retry backoff contract — a parseable delta-seconds Retry-After wins over the ladder for that attempt, hard-capped at the 60 s ceiling (the clamp names the advertised value; 0 counts as absent, malformed/HTTP-date headers fall back to the ladder with a trace note) — and the dual retry budgets (connection-class cap 4, stream-class cap 3, independent counters, the terminal story carries both). Trace lines pin the format budget=<connection|stream> attempt=<n>/<cap> delay=<ladder|server|clamp>; the tuning report prints per-model p50/p95 inter-chunk gap + watchdog-fire counts with the streamIdleTimeoutMs ≈ 2× p95 recipe (the production feeder lands with #1392's LatencyMeter).
feat(hosts): gh-1322 — the wireAgentCore host-adoption gaps: an embed guide (docs/embedding.md, with the explicit "hosts ride wireAgentCore, never adk_dart" rule), the host-facing key-slot resolver (AgentCoreServices.resolveKey + HostKeyResolver — the effective slot NAME, pinned-twin drift hints identical to the CLI's migration notes, registry-leg knownSlotNames, injected env/store readers only), and lifecycle telemetry for in-process hosts (AgentCoreServices.telemetry: the pure interface + in-memory ring in core, the fa.log file sink behind lib/io.dart; requestStart/firstToken/turn/tool/run records with durations and the provider HTTP status).
chore(ci): document the sm-kicker head-completeness codeless-head crash (upstream awf#15) — the factory job's gh api calls put --jq before --arg/--argjson, so a CODELESS branch head (2 parents, 0 changed files: a routine branch-sync merge with no content diff) crashes the job with accepts 1 arg(s), received 4 — even when CI is fully green on that head, and the job's own rescue dispatch can never heal exactly those heads. Workaround until the upstream fix: keep the branch head code-bearing. Live instance: run 37193754301 on head 1fe9b1232.
fix(messaging): gh-1180 — schedule_message self-chains no longer die silently at the agent-chatter wake cap. The idle inbox-wake gate (InboxWakePolicy, shared by the CLI and the app hosts) now exempts a delivered scheduled self-reminder ([scheduled] prefix, from == to) from the 10-consecutive-wake streak: a deliberate agent-chosen cadence (night watch, periodic sweep) wakes forever, while foreign agent-to-agent chatter stays capped (anti-storm REG) and user-kind mail always wakes. A 30s cadence floor bounds a zero-delay re-schedule spin (E5). Refused wakes are visible ([mail] wake refused, once per episode) and every lifecycle step is receipted to <messagesRoot>/_scheduled/receipts.jsonl (ScheduledReceiptLog): scheduled / delivered / delivery_failed / scan_failed / wake_attempted / turn_started / wake_refused. A failed scheduler scan (transient listDir error) now re-arms at failureBackoff with an onError log instead of silently disarming the delivery heartbeat.
fix(messaging): gh-1180 review round — refusal receipts and the visible refusal line are gated once per refusal EPISODE (the latch lives in InboxWakePolicy next to the streak and re-arms on the same resets), so a held gate no longer appends per-tick wake_attempted rows (~43k duplicate lines/day) and a repeat episode after user input is announced and receipted again. The app host receipts its wake path (wake_attempted / turn_started / wake_refused) onto the same trail — AC4 is no longer CLI-only. A self-reminder adopted across a session-id change delivers FROM the live mailbox (from re-addressed alongside to), so the resumed chain stays self-shaped and exempt instead of falling back to the capped chatter lane. Plugin-only pending batches are explicitly classified as chatter (the contract is stated, not accidental), the wake cap is single-sourced from InboxWakePolicy.defaultMaxInboxWakeStreak, and the policy file lost a stale copy-pasted ignore_for_file.

1.0.5074 Oct 20262 sources agree

gh-1208 [BENCH] fix-git task image broken on CI runners — docker compose build fails in BOTH TBench-1 runs (unknown_agent_error, trial never starts)

gh-1208 [BENCH] fix-git task image broken on CI runners — docker compose build fails in BOTH TBench-1 runs (unknown_agent_error, trial never starts) (#1218)
gh-1206 WIP auto-save 2026-10-04T05-52-28 (#1216)
gh-1209 [BENCH] usage fold skips failed trials — agent_timeout rows report 0/0 tokens though the session JSONL has full usage (#1123 follow-up) (#1215)

Open source →

1.0.5064 Oct 20262 sources agree

fix( #1044 ): AIIN mobile/macOS add-provider — sign-in completes but the provider is never added

fix(#1044): AIIN mobile/macOS add-provider — sign-in completes but the provider is never added (#1194)
fix(ci): pass flutter-version explicitly — awf no longer defaults a toolchain (#1205)

Open source →

1.0.5054 Oct 20262 sources agree

gh-1210 [BENCH] Pre-seed a system-level git identity in task containers (fa-setup.sh.j2) — stop burning agent turns on 'Author identity unknown'

gh-1210 [BENCH] Pre-seed a system-level git identity in task containers (fa-setup.sh.j2) — stop burning agent turns on 'Author identity unknown' (#1214)

Open source →

1.0.5034 Oct 20262 sources agree

gh-1054 [GOAL] Headless/unattended runs must detect long-stuck tool calls mid-run and follow up — liveness heartbeats + cancel/retry/convert, not a si

gh-1054 [GOAL] Headless/unattended runs must detect long-stuck tool calls mid-run and follow up — liveness heartbeats + cancel/retry/convert, not a silent 10-min wait for the external watchdog (#1200)
chore(ci): bump sm-kicker pin — real-dispatch fix (awf#13) (#1213)
fix(kicker): wake machine-sm on CI conclusions (workflow_run) (#1203)
gh-1171 flake: subagent_integration_test 'memory_add and memory_search tools are available' — mock script exhausted by memory auto-tag LLM call (#1202)
gh-1014 Flaky: ctrl_c_double_press_test ACX.3 SIGINT timing-window flake under runner load — quarantined, fix + re-enable (#1196)
test(#1172): pin the CHANGELOG '## Unreleased' dedupe + deflake sandbox authorship under git hooks (#1195)
gh-1000 Key resolution loses the provider/key binding: 401 after /sessions restore and on pinned roles (smol/subagents) — duplicate modelId, env-only roles path (#1190)
gh-1192 [GOAL] Release-flow race hardening: daily verify must skip 'release in flight', version tag must pin the bump commit (#1193)
fix(#1175): one Fa, one session — FAB continues the app-bound session, never re-mints (#1173)
WASI sandbox fidelity: dup-merge, per-exec pipe dirs, drain-before-cancel, clean errors (#1156) (#1163)
fix(chat): Load-newer banner works mid-run, auto-clears at the live tail (#1159) (#1165)
feat(#862): tool-misuse resilience (#1143)
fix(#858): Codex/Responses wire — no replayable history may ever brick a session (#1140)

Open source →

1.0.5013 Oct 20262 sources agree

fix( #1121 ): replay zero-byte watchdog-killed requests on the shared ladder

fix(#1121): replay zero-byte watchdog-killed requests on the shared ladder (#1188)
fix(#1168): resume mid-stream connection failures from the completed prefix (#1169)
test: deflake memory round-trip PTY waits (kill taggen 500-storm, re-anchor on terminal marker) (#1166)
bench-mls.yml: run fa on MLS-Bench via the existing Harbor adapter (staged nop→oracle→agent, GPU cost discipline) (#1161)
chore: repin factory workflows to f47d52b (kit in RUNNER_TEMP) (#1191)

Open source →

Additional notes

Latest

Compare

Open source →

1.0.4993 Oct 20262 sources agree

feat(cli): stuck foreground tool calls nudge the model via steering

feat(cli): stuck foreground tool calls nudge the model via steering (#1185) (#1187)
fix(#1122): restore bench timeout-ladder helpers lost in the #1127×#1129 merge (#1184)
feat(#1151): built-in skills shipped with fa — /skill-name on every surface, toggleable like tools (#1157)

Open source →

1.0.4983 Oct 2026

feat( #861 ): one passkey-capable auth surface for provider sign-in by @vabhzw17eg2qu4m9-bit in #1142

What's Changed

feat(#861): one passkey-capable auth surface for provider sign-in by @vabhzw17eg2qu4m9-bit in #1142
fix(#1152): path-guard fires only on bare single-token input by @vabhzw17eg2qu4m9-bit in #1153
feat(#866): apps panel reflects reality by @vabhzw17eg2qu4m9-bit in #1139
fix(#1096): reseed fa-extension size baseline for engine rev 692136cb (Flutter 3.47.6) by @vabhzw17eg2qu4m9-bit in #1178

Full Changelog: v1.0.497...v1.0.498

Open source →

Additional notes

feat(#866): apps panel reflects reality (#1139)
fix(#1152): path-guard fires only on bare single-token input (#1153)
feat(#861): one passkey-capable auth surface for provider sign-in (#1142)

Open source →

1.0.4973 Oct 20262 sources agree

feat( #1172 ): release pipeline pushes bump directly to main via fa-release-bot App

feat(#1172): release pipeline pushes bump directly to main via fa-release-bot App (#1174)
fix(#864): gesture-entry mint failures surface a snack, not a zone error (#1144 follow-up) (#1170)
fix(session): segment rotation — cap JSONL traces under the git 100MB limit (#1114)
ci: re-pin factory-teammate @9bcec53 — kit/ (guard+creds) at invocation ref (#1183)
feat(#881): App Store CTA header badge (#1138)
ci: re-pin factory-teammate @9bcec53 — kit/ (guard+creds) at invocation ref (#1177)
fix(#917): deterministic wrap-turn dedupe in TUI composer (no double-paint on slow PTY) (#1137)
ci: re-pin factory-teammate @9bcec53 — kit/ (guard+creds) at invocation ref (#1176)
fix(#1134): auto_release.sh pins chore:pin label on release PRs (#1135)

Open source →

1.0.4961 Oct 20262 sources agree

gh-1149 [daily-publish] cli leg failed

gh-1149 [daily-publish] cli leg failed (#1154)
fix(#916): replayed tool rows paint the settled band card — #807 chrome migration completed (#1136)
feat(#864): one-Fa-one-session tap (#1144)
fix(#1131): compaction summaries must not re-render time-scoped claims as current facts (#1133)
feat(#1124): Terminal-Bench family coverage 2.0/2.1/3.0/4.0 from one dispatch surface (#1128)
fix(#1126): resume mid-stream provider aborts with partial content via TransientRetryStream (#1132)
feat(#1123): real token/cost accounting in bench results (#1129)
fix(app): flutter_agent_memory override 0.2.1 -> ^0.2.3 — track the lib floor (#1158)
chore(factory): runners parent agent packs from the registry, not the git checkout (#1155)
feat(#1122): configurable + progress-aware bench agent timeout (#1127)
feat(#827): TUI viewport never loses shown content (#1097)
pin: factory workflows -> dmtools-agentic-workflows@b93dc51 (#1146)
fix(#1036): bound provider HTTP calls with client-side timeouts (#1108)
fix(#1045): per-widget publish status with verbatim validator errors (#1141)
fix(#1121): transparent bounded retry on zero-byte connect-stall watchdog timeout (#1125)
feat(#1106): enable Type-2 duplication gate (crap4dart 0.11.0) + 13-file triage (#1116)
feat(#1103): fa wire-serve - headless AWP server over WS + NDJSON-stdio (#1113)
feat(#1096): release size manifest gate + unambiguous extension/web cuts (slice 1) (#1110)
fix(#1117): close web network-auth popup after grant + handle post-auth redirect (#1119)
fix(#1102): persist chain re-runs skipped passes (lost assistant record) (#1112)
feat(#1101): Agent Wire Protocol v1 schema, versioning, fixtures, in-process adapter (slice 1) (#1109)
feat(#1100): ship rehostable web SPA bundle (fa-web-spa.zip) on releases (#1107)
feat(#823): provider quota & budget monitoring — CORE tier (model, OpenRouter adapter, TTL service, CLI /quota + badge, app meters, resolver feed) (#1099)
feat(#1079): SDK slice 1 — HostCapabilityProfile + HostWiringBuilder foundation (#1091)
fix(#1085): post-compaction run continuation — watchdog suspension + loud failure (#1090)
chore(factory): sm-kicker -> shared factory-sm-kicker stub (#1118)

Open source →

1.0.49530 Sept 20262 sources agree

feat(1086): sandbox shell heredocs, here-strings, fail-fast guards

feat(1086): sandbox shell heredocs, here-strings, fail-fast guards (#1094)
chore(factory): pin dmtools-agents @cee5996 — mutexExcludeSelf + conflict-rework + release-bump authorship + teammate dev-leg timeout (#1111)

Open source →

Additional notes

Latest

Compare

Open source →

1.0.49430 Sept 20262 sources agree

fix(release): land the version bump as a PR — protected main rejects direct bot pushes

fix(release): land the version bump as a PR — protected main rejects direct bot pushes (#1093)
fix(sm-kicker): rescue ticks must pass -f dryRun=false (machine-sm defaults dry) (#1092)
fix(#964): configurable auth header (x-api-key) + reasoning-aware stream retry boundary (#1088)
revert: undo the stale-tree mass revert in 80a5ebe, keep the FFI web fix (#1071)
fix(web): restore /oauth/callback page + open the OAuth popup eagerly on user gesture (#1068)
fix(#1083): per-path mutation lock for same-file concurrent tool edits (#1084)
feat(#1078): flutter_app honors ~/.fah/config.yaml (parity v1) (#1087)

Open source →

1.0.49229 Sept 2026

chore(deps): bump ruby/setup-ruby from 1.324.0 to 1.327.0 in the github-actions group by @dependabot [bot] in #1056

What's Changed

chore(deps): bump ruby/setup-ruby from 1.324.0 to 1.327.0 in the github-actions group by @dependabot[bot] in #1056

Full Changelog: v1.0.490...v1.0.492

Open source →

Additional notes

chore(deps): bump ruby/setup-ruby in the github-actions group (#1056)

Open source →

1.0.49029 Sept 2026

gh-1032 Migrate to flutter_agent_memory 0.2.3: conflict-free deletions (tombstones + deleted/ dir) by @ai-teammate in #1050

What's Changed

gh-1032 Migrate to flutter_agent_memory 0.2.3: conflict-free deletions (tombstones + deleted/ dir) by @ai-teammate in #1050
gh-1041 [GOAL] Submission ≠ appearance — never fail a green store submit deferred 1–2h store-appearance re-check job (TestFlight / Play / pub.dev) by @ai-teammate in #1046

Full Changelog: v1.0.489...v1.0.490

Open source →

Additional notes

gh-1041 [GOAL] Submission ≠ appearance — never fail a green store submit deferred 1–2h store-appearance re-check job (TestFlight / Play / pub.dev) (#1046)
gh-1032 Migrate to flutter_agent_memory 0.2.3: conflict-free deletions (tombstones + deleted/ dir) (#1050)

Open source →

1.0.48928 Sept 2026

feat( #969 ): show add-provider flow first on fresh install by @vabhzw17eg2qu4m9-bit in #971

What's Changed

feat(#969): show add-provider flow first on fresh install by @vabhzw17eg2qu4m9-bit in #971
feat(#977): provider name step + multi-account coexistence in app add-provider flow by @vabhzw17eg2qu4m9-bit in #984

Full Changelog: v1.0.488...v1.0.489

Open source →

Additional notes

fix(web): conditionally export FFI-backed io.dart members
feat(#977): provider name step + multi-account coexistence in app add-provider flow (#984)
feat(#969): show add-provider flow first on fresh install (#971)

Open source →

1.0.48828 Sept 2026

site: add /oauth/callback — the web app's OAuth popup receiver target by @ai-teammate in #1048

What's Changed

site: add /oauth/callback — the web app's OAuth popup receiver target by @ai-teammate in #1048
fix(#973): Enter sends, Shift+Enter inserts newline in chat composer by @vabhzw17eg2qu4m9-bit in #978

Full Changelog: v1.0.487...v1.0.488

Open source →

Additional notes

fix(#973): Enter sends, Shift+Enter inserts newline in chat composer (#978)
site: add /oauth/callback page — the web app's OAuth popup receiver target (#1048)

Open source →

1.0.48728 Sept 2026

fix(920): optimal space usage in the CLI TUI status band by @vabhzw17eg2qu4m9-bit in #923

What's Changed

fix(920): optimal space usage in the CLI TUI status band by @vabhzw17eg2qu4m9-bit in #923
Fix #947: store goldens render real text; Play listing images ship via whole-set replace + verify by @vabhzw17eg2qu4m9-bit in #962

Full Changelog: v1.0.486...v1.0.487

Open source →

Additional notes

Fix #947: store goldens render real text; Play listing images ship via whole-set replace + verify (#962)
fix(920): optimal space usage in the CLI TUI status band (#923)

Open source →

1.0.48628 Sept 2026

chore: pin factory 1fdb4c6 (git-guard exec-loop fix) by @IstiN in #1043

What's Changed

chore: pin factory 1fdb4c6 (git-guard exec-loop fix) by @IstiN in #1043
fix(926): CodeMie budget/spending exhaustion is terminal — no retry loops, immediate fallback by @vabhzw17eg2qu4m9-bit in #929

Full Changelog: v1.0.485...v1.0.486

Open source →

Additional notes

fix(926): CodeMie budget/spending exhaustion is terminal — no retry loops, immediate fallback (#929)
chore: pin factory 1fdb4c6 (git-guard double-shim exec-loop fix) (#1043)

Open source →

1.0.48528 Sept 2026

fix(ci): pub.dev leg polls past API lag; pin-bump survives failed provenance by @IstiN in #1037

What's Changed

fix(ci): pub.dev leg polls past API lag; pin-bump survives failed provenance by @IstiN in #1037
gh-1039 [ci-red] main fix plan — picker test regression + agent_cli.dart 2815 2800 + CRAP 17.15 (structuralDiff) by @ai-teammate in #1040

Full Changelog: v1.0.484...v1.0.485

Open source →

Additional notes

fix(ci): Daily auto-publish pub.dev leg — poll the pub.dev API until it reflects the rerun's publish instead of a single read. 2026-09-28: the recovery rerun published AND self-verified 1.0.483 (pub.dev verified at 05:44:11Z), but the leg's one-shot API query 52s later hit a stale replica, saw 1.0.482 and false-errored "manual publish needed". Initial behind-check now takes three spaced reads (newest wins) so a stale read cannot trigger unnecessary recovery either.
fix(ci): install-pin-bump no longer hard-gates on release-provenance. When provenance FAILED (binaries/signature upload race), the marker job was left SKIPPED — and rerun --failed never resurrects skipped jobs, so the vpinned marker stayed stale forever (v1.0.483: the recovery rerun went green, the marker never advanced). The job now uses if: always(); pin_release.sh's own pre-move provenance gate (check_install_pin.sh with FA_PIN_TARGET) fails it loudly instead of moving the marker, and a FAILED job IS part of rerun --failed — so the recovery cascade reaches it.

Open source →

1.0.48328 Sept 2026

fix(925): never let a bash_job log IO failure reach the root zone by @vabhzw17eg2qu4m9-bit in #930

What's Changed

fix(925): never let a bash_job log IO failure reach the root zone by @vabhzw17eg2qu4m9-bit in #930
fix(958): app host re-enters settled background task jobs as async-result turns by @vabhzw17eg2qu4m9-bit in #961
fix(install): pin-gate — the pinned default must satisfy its own provenance gate by @IstiN in #1018
gh-1026 Flaky: PTY timing flakes in fa_cli_newline_wires / composer_tui_grid_pty / dap_tui_menu under host load — 3 consecutive pre-commit gate runs, different test each time by @ai-teammate in #1031
gh-1012 Flaky: scheduled_indicator_test scheduled-follow-up timing flake under runner load — quarantined, fix + re-enable by @ai-teammate in #1029
chore(coverage): restore CLI baseline 10.75 → 15.69 (Closes #990, closes #997) by @vabhzw17eg2qu4m9-bit in #1028
fix(1020): require a chat model before leaving boarding by @vabhzw17eg2qu4m9-bit in #1021

Full Changelog: v1.0.482...v1.0.483

Open source →

Additional notes

fix(install): the pinned default is now the vpinned RELEASE MARKER — no committed pin at all. install-config.yaml pinned_cli_version said 0.1.452 while the generated site/install.sh carried 1.0.480 (#1015 hand-edited only the generated file): a committed pin rots, and a pin advanced by committing/pushing from the release pipeline re-races auto_release and re-triggers Pages on every tag. Instead, the installer resolves the standing vpinned release marker (its PINNED_VERSION asset names the known-good release) and verifies the pointed release exactly as before — the marker is only a pointer, so a tampered one fails closed (DoS at worst, never a bad binary; the embedded trust anchor stays the real trust root). scripts/pin_release.sh advances the marker from the tag-scoped install-pin-bump CI job after release-provenance signs the release: pure release-artifact manipulation — zero commits, zero pushes, no RELEASE_PAT, no regeneration (is-newer keeps bumps forward-only; a pre-move check_install_pin.sh run with FA_PIN_TARGET proves the new release BEFORE the marker moves, and a post-move run proves the published marker). scripts/check_install_pin.sh (new ci.yml install-pin-gate job on every PR, aggregated into the Quality gate) fails when the generated installer drifts from the marker model (E_PIN_DRIFT), the marker is missing/ill-formed (E_PIN_MISSING / E_PIN_INVALID), or the marked release lacks a signature-verified SHA256SUMS covering every platform archive (E_PIN_PROVENANCE_MISSING / E_PIN_PROVENANCE_INVALID / E_PIN_ASSET_COVERAGE). Fixture coverage in installer_verify_selftest.sh: contracts 1/1b/5/6, including end-to-end pin_release.sh runs against a file:// fixture release root. gen_installers.dart drops the pinned_cli_version knob.

Open source →

1.0.48227 Sept 2026

chore(factory): bump dmtools-agents to b44b5493 — #547 / #548 / #549 lockstep by @IstiN in #1019

What's Changed

chore(factory): bump dmtools-agents to b44b5493 — #547/#548/#549 lockstep by @IstiN in #1019
chore: pin factory a18361b2 (wave-stall + watchdog fixes) by @IstiN in #1023
chore: pin factory 5e2a8051 (session quarantine) by @IstiN in #1024
HOTFIX: fake factory sha in uses: lines (fa factory down since #1024) by @IstiN in #1025
chore: pin factory 60571fed (validation_failed sticky park) by @IstiN in #1027

Full Changelog: v1.0.481...v1.0.482

Open source →

Additional notes

chore: pin factory 60571fed (validation_failed sticky park) (#1027)
hotfix: correct uses: factory sha in all 3 workflows (fake sha from #1024) (#1025)
chore: pin factory 5e2a8051 (session quarantine) (#1024)
chore: pin factory a18361b2 (red-park + dryRun + dup-guard + teammate watchdog) (#1023)
chore(factory): bump dmtools-agents to b44b5493 — latch-skip + stamp links + auto-anchor fallback (#547/#548/#549) in lockstep (#1019)

Open source →

1.0.48127 Sept 2026

quarantine( #1012 #1014 ): linux shard-0 PTY timing flakes (scheduled_indicator + ctrl_c_double_press) by @IstiN in #1013

What's Changed

quarantine(#1012 #1014): linux shard-0 PTY timing flakes (scheduled_indicator + ctrl_c_double_press) by @IstiN in #1013
fix(install): bump pinned default to v1.0.480 — v0.1.452 breaks E_PROVENANCE_MISSING by @IstiN in #1015
gh-957: drop the 3 temporary CRAP excludes after #948 (f2498ea) — gate re-measures green at 30.0 by @ai-teammate in #959
chore(factory): mirror ai-teammate stub template (effective-anchor run-name) by @IstiN in #1017
fix(921): swallow post-abandonment SSE transport errors instead of crashing by @vabhzw17eg2qu4m9-bit in #922

Full Changelog: v1.0.480...v1.0.481

Open source →

Additional notes

fix(921): swallow post-abandonment SSE transport errors instead of crashing (#922)
chore(factory): mirror ai-teammate stub template (effective-anchor run-name) (#1017)
gh-957: drop the 3 temporary CRAP excludes after #948 (f2498ead) — gate re-measures green at 30.0 (#959)
fix(install): bump SEC-07 pin 0.1.452 -> 1.0.480 (#1015)
quarantine(#1012 #1014): linux shard-0 PTY timing flakes (scheduled_indicator + ctrl_c_double_press) (#1013)

Open source →

1.0.48027 Sept 2026

gh-946 CLI Rename unattended change to autopilot by @ai-teammate in #949

What's Changed

gh-946 CLI Rename unattended change to autopilot by @ai-teammate in #949
chore(quality): temp CLI coverage baseline 11.0 → 7.9 — unwedge PTY-gate (restore: #997) by @IstiN in #998
chore(ci): single-runner mode on fa-m5 — PTY legs to hosted fallback (owner call) by @IstiN in #1003
chore(ci): M5_POOL=1 — PTY serial on fa-m5-1, no hosted macOS by @IstiN in #1004
gh-995 fix(ci): pty-coverage-gate wedges the factory — shard merge reports 'expected 3 pty shard coverage reports', CLI coverage reads 7.95% vs baseline 11.00% by @ai-teammate in #996
Fix #943: infra tests fixed properly — tmp roots, hub port hygiene, prewarm, budgets; #938 skips re-enabled by @vabhzw17eg2qu4m9-bit in #948
gh-982 fix flaky PTY test: job_board_stability (stacked boards freeze across settles) — quarantined, fix + re-enable by @ai-teammate in #986
Raise the CLI-coverage floor: third-party skills consent PTY suite (#927) by @vabhzw17eg2qu4m9-bit in #934
gh-1005 Migrate PTY test coverage from macOS shards to Linux-hosted runners by @ai-teammate in #1006
quarantine(#1007): dap_tui_menu_test master-secret hub-connect flake by @IstiN in #1008
chore(factory): bump dmtools-agents pins to fa6e9c2 — PR-anchored rework (#544/#545) by @IstiN in #1009
docs: factory ladder smoke (README marker) by @IstiN in #1010
chore(factory): bump dmtools-agents to d67b66b — blocked-label freeze (#546) in lockstep by @IstiN in #1011

Full Changelog: v1.0.479...v1.0.480

Open source →

Additional notes

chore(factory): bump dmtools-agents to d67b66b — blocked-label freeze (#546) in lockstep (uses + factory_ref) (#1011)
docs: ladder smoke — trivial README marker to walk the full factory pipeline (#1010)
chore(factory): bump dmtools-agents pins to fa6e9c2 — PR-anchored rework (#544/#545) (#1009)
quarantine(#1007): dap_tui_menu_test master-secret hub-connect flake (#1008)
gh-1005 Migrate PTY test coverage from macOS shards to Linux-hosted runners (#1006)
Raise the CLI-coverage floor: third-party skills consent PTY suite (#927) (#934)
gh-982 fix flaky PTY test: job_board_stability (stacked boards freeze across settles) — quarantined, fix + re-enable (#986)
Fix #943: infra tests fixed properly — tmp roots, hub port hygiene, prewarm, budgets; #938 skips re-enabled (#948)
gh-995 WIP auto-save 2026-09-27T04-55-21 (#996)
chore(ci): M5_POOL=1 — PTY legs serial on the single fa-m5-1 runner (#1004)
chore(ci): M5_POOL 2 → 0 — single-runner mode on the fa-m5 host (owner 2026-09-27) (#1003)
chore(quality): temp CLI coverage baseline 11.0 → 7.9 — unwedge PTY-gate (restore: gh-997) (#998)
gh-946 CLI Rename unattended change to autopilot (#949)

Open source →

1.0.47826 Sept 2026

chore: factory pin bump d99fc8c → ac8b718 (unfreeze armed merge window) by @IstiN in #966

What's Changed

chore: factory pin bump d99fc8c → ac8b718 (unfreeze armed merge window) by @IstiN in #966
chore(factory): pin factory to 7dd967a (merge-leg pullRequestId fix, dmtools-agents#529) by @IstiN in #972
chore(ci): quarantine flaky job_board_stability PTY test (gh-982) — unblock main by @IstiN in #983
chore(factory): pin factory to 2e8d366 (mutex-leak fix, dmtools-agents#531) by @IstiN in #980
chore(factory): pin factory to 6a7544c (agentDocsCoverage versions.json fix, dmtools-agents#533) by @IstiN in #987
Add a test-duration budget gate on the PTY/CLI critical path (on top of #963's 3-shard leg) by @vabhzw17eg2qu4m9-bit in #932
chore(ci): CLI coverage baseline 11.9 → 11.0 (post-quarantine honest level) by @IstiN in #989
feat(app): #955 network mode — Fa app becomes a fa_network client by @ai-teammate in #967
chore(factory): pin dmtools-agents → 6b953f8 (dup-dispatch guard fix) by @IstiN in #991
chore(ci): flutter_app CRAP threshold 30.0 → 75.0 (temp, gh-992) by @IstiN in #993

Full Changelog: v1.0.477...v1.0.478

Open source →

Additional notes

feat: #955 Add agent DAP tab mints unique credentials via agents/enroll
feat(fanet): align with the deployed agents/enroll contract
fix: #988 hub teardown StateError('connection closed') is not a crash
feat: lib/src/fanet — fa_network REST client for the CLI network mode
chore(ci): flutter_app CRAP threshold 30.0 -> 75.0 temp raise (owner call, gh-992) (#993)
chore(factory): pin dmtools-agents to 6b953f8 (dup-dispatch guard fix #539) (#991)
feat: #955 pure-DAP invite format for clients without fa_network
feat: #955 env split — network password is its own variable
fix: #988 guard hub presence queries — a drop mid-query must not escape
fix: #955 env invite is the network credential — drop DAP_MASTER_SECRET
feat: #955 env vars as per-row copy + network-level Add agent
fix: #955 env format is hub-only — drop the provider vars
chore(ci): lower CLI coverage baseline 11.9 -> 11.0 (owner call, unblock merge train) (#989)
chore: regenerated l10n for the Add-agent scope/format strings
feat: #955 Add-agent env format — CI runner launch line
Add a test-duration budget gate on the PTY/CLI critical path (on top of #963's 3-shard leg) (#932)
feat: #955 Add-agent invite — scope (channel/network) × format (link/CLI)
chore(factory): pin factory to 6a7544c (agentDocsCoverage versions.json fix, dmtools-agents#533) (#987)
feat: #955 keyless agent invites for public channels + channel-id invites
chore(factory): pin factory to 2e8d366 (mutex-leak fix, dmtools-agents#531) (#980)
chore(ci): quarantine flaky job_board_stability PTY test (gh-982) — unblock main (#983)
fix(app): #955 WS auth header never sent + unhandled-error storm
feat(app): #955 channel header with the discoverable Add agent action
feat(cli): #955 fa dap import — ingest the app's add-agent invite
feat(app): #955 adopt fa_network chat-order pagination
feat(app): #955 anonymous showcase browsing (public networks)
chore(factory): pin factory to 7dd967a (merge-leg pullRequestId fix, dmtools-agents#529) (#972)
feat(app): #955 network diagnostics via AppLog (no secrets)
fix(app): #955 management routes never fall back to a session token
feat(app): #955 friendly create dialog — wider, auto-slugify, full errors
feat(app): #955 public-directory checkbox on create + owner network delete
feat(app): #955 create-network dialog validates the server's exact rules
fix(app): #955 TokenBundle accepts the real snake_case exchange shape
fix(app): #955 OAuth loopback — never rewrite the provider auth URL
chore: factory pin bump d99fc8c → ac8b718 (lockstep) (#966)
fix(app): #955 route ai-native auth calls to the auth host, not the relay
feat(app): #955 real ai-native OAuth sign-in (loopback RFC 8252)
feat(app): #955 sidebar style parity, first-class sign-in, public directory
feat(app): #955 network mode lives in the shell sidebar (owner UX rework)
fix(app): #955 network header clears the macOS traffic lights
feat(app): #955 ⌘K quick switcher + REG-NOLEAK key-leak scan
feat(app): #955 network mode UI — Local|Network chip, networks sidebar, Grok-style channel chat
feat(app): #955 adopt contract senderKey — envelopes carry the sender X25519 pub
feat(app): #955 network mode engine — fa_network client, WS, fanet1 crypto, KeyWallet, sessions

1.0.47625 Sept 2026

feat(ui): one-tap copy affordance on every error surface by @vabhzw17eg2qu4m9-bit in #899

What's Changed

feat(ui): one-tap copy affordance on every error surface by @vabhzw17eg2qu4m9-bit in #899
ci: bump factory pins — 'blocked' label live (fa #939) by @IstiN in #941
gh-937 ai/gh-869 (PR #899) regresses job_board_stability: 'stacked boards' expects 1 board, gets 0 — deterministic, quiet box by @ai-teammate in #940
gh-938 Skip infra-flaky tests pending #936 (pipeline unblock per owner policy) by @ai-teammate in #942
ci: SM kicker — stop cancelling cross-PR (CANCELLED check stamps everywhere) by @IstiN in #945
fix(crap-gate): make catalog_service flake skip Linux-only (CRAP 272 exploded for every PR) by @IstiN in #950
test(wasm): Linux-only skip for lazy-interpreter group (gh-951 hosted-ubuntu env shift) by @IstiN in #952
fix(wasm): #952 syntax fixup — setUpAll+Skip instead of invalid group(skip:) block by @IstiN in #953
fix: valid Linux-only runtime skips for #950/#953 artifacts (closing-brace group(skip:)) by @IstiN in #954
chore(crap-gate): exclude coverage-orphaned catalog/wasm files (pipeline release, owner call) by @IstiN in #956
fix(951): re-enable lazy-interpreter Linux leg — group never failed; 'env shift' was green-test debug output by @vabhzw17eg2qu4m9-bit in #960
feat(818): herdr integration - detection manifest, skill surface, session resume by @vabhzw17eg2qu4m9-bit in #911

Full Changelog: v1.0.474...v1.0.476

Open source →

Additional notes

feat(818): herdr integration - detection manifest, skill surface, session resume (#911)
fix(951): re-enable lazy-interpreter Linux leg — group proven green on hosted ubuntu, 'env shift' was green-test debug output (#960)
chore(crap-gate): temporarily exclude coverage-orphaned catalog/wasm builtins from the ratchet (pipeline release) (#956)
fix: valid Linux-only runtime skips (#950/#953 artifacts) — closing-brace group(skip:), no reformat (#954)
fix(wasm): #952 syntax fixup — group(skip:) with block body is invalid; use setUpAll+Skip (#953)
test(wasm): Linux-only skip for lazy-interpreter group — hosted-ubuntu env shift gh-951 (#952)
fix(crap-gate): catalog_service flake skip must be Linux-only — unconditional @Skip killed macOS coverage (CRAP 272 > 30, fa#911) (#950)
ci: SM kicker — no cancel-in-progress (global group cancelled cross-PR, stamping CANCELLED checks) (#945)
gh-938 WIP auto-save 2026-09-25T05-39-30 (#942)
gh-937 ai/gh-869 (PR #899) regresses job_board_stability: 'stacked boards' expects 1 board, gets 0 — deterministic, quiet box (#940)
ci: bump factory pack pins to dmtools-agents#d99fc8c — 'blocked' label support (fa #939) (#941)
feat(ui): one-tap copy affordance on every error surface (#899)

Open source →

1.0.47124 Sept 2026

No changes since v1.0.471.

Open source →

Additional notes

security(sep-07): rotate release-signing trust anchor — the #814 keypair died with its ephemeral CI runner (#902)

Open source →

1.0.46924 Sept 2026

chore(deps): bump the github-actions group with 10 updates by @dependabot [bot] in #853

What's Changed

chore(deps): bump the github-actions group with 10 updates by @dependabot[bot] in #853
fix(tui): address #834 review threads - alignment, chord labels, /help summary, TUI-leg pin by @vabhzw17eg2qu4m9-bit in #859

Full Changelog: v1.0.468...v1.0.469

Open source →

Additional notes

fix(tui): address #834 review threads - alignment, chord labels, /help summary, TUI-leg pin (#859)
chore(deps): bump the github-actions group with 10 updates (#853)

Open source →

1.0.46824 Sept 2026

fix(cli): exit only on double Ctrl+C ( #830 ) by @vabhzw17eg2qu4m9-bit in #843

What's Changed

fix(cli): exit only on double Ctrl+C (#830) by @vabhzw17eg2qu4m9-bit in #843
feat(tui): the omp status bar - segment registry, presets, separators, elastic truncation (#805) by @vabhzw17eg2qu4m9-bit in #831
fix(cube): follow-ups from #815 review by @vabhzw17eg2qu4m9-bit in #852

Full Changelog: v1.0.467...v1.0.468

Open source →

Additional notes

feat(tui): the omp status bar engine (#805). Behavior note: the tui: config section is now parsed strictly — an unknown key under tui: (e.g. a typo'd theme2: left behind by hand-editing) throws ConfigException at boot instead of being silently ignored. Remove the unknown key; the error message lists the known ones (theme, classic, statusLine). New tui.statusLine: section configures the status bar (preset | custom groups | separator | segmentOptions | transparent); unknown segment ids there are warned and dropped at boot, not fatal.

Open source →

1.0.46723 Sept 2026

feat(tui): transcript chrome - Box frames, dividers, bordered tool cards ( #807 ) by @vabhzw17eg2qu4m9-bit in #828

What's Changed

feat(tui): transcript chrome - Box frames, dividers, bordered tool cards (#807) by @vabhzw17eg2qu4m9-bit in #828
test: retry the port-release proof-bind in openrouter oauth timeout test by @vabhzw17eg2qu4m9-bit in #885
ci: factory pin c6eb4eb → 7fe0a64 (agents #522 — publish fix + time-travel history) by @IstiN in #901

Full Changelog: v1.0.466...v1.0.467

Open source →

Additional notes

ci: factory pin c6eb4eb → 7fe0a64 (agents #522 — publish fix + time-travel history) (#901)
test: retry the port-release proof-bind in openrouter oauth timeout test (#885)
feat(tui): transcript chrome - Box frames, dividers, bordered tool cards (#807) (#828)

Open source →

1.0.46623 Sept 2026

chore: pin factory d7d7308 — dispatch dup guard by @IstiN in #882

What's Changed

chore: pin factory d7d7308 — dispatch dup guard by @IstiN in #882
chore: pin factory 34097f0 + state publishing by @IstiN in #883
hotfix: restore factory pin (882 wrote an empty sha) by @IstiN in #884
chore: pin factory ee66f4e by @IstiN in #886
chore: pin factory f767351 by @IstiN in #887
chore: pin factory 05f591c + factory-data branch tag by @IstiN in #889
chore: align ai-teammate factory pin with machine-sm (f767351) by @vabhzw17eg2qu4m9-bit in #888
chore: pin factory 383a27b by @IstiN in #890
chore: align ai-teammate factory pin with machine-sm (383a27b, #890) by @vabhzw17eg2qu4m9-bit in #891
chore: pin factory fc29b7e, both stubs by @IstiN in #892
chore: pin factory 67ec614, both stubs by @IstiN in #893
chore: pin factory c17bd77, both stubs by @IstiN in #894
chore: pin factory c6eb4eb, both stubs by @IstiN in #895
fix(hub): relay handling bounded - one slow request never stalls the hub (#794) by @vabhzw17eg2qu4m9-bit in #817

Full Changelog: v1.0.465...v1.0.466

Open source →

Additional notes

fix(hub): relay handling bounded - one slow request never stalls the hub (#794) (#817)
chore: pin factory c6eb4eb — one-tick actualization order (#895)
chore: pin factory c17bd77 — gh-first whitelist transport (#894)
chore: pin factory 67ec614 — stale-validation cancel, both stubs (#893)
chore: pin factory fc29b7e — both stubs in lockstep (Contents API PUT transport) (#892)
chore: align ai-teammate factory pin with machine-sm (383a27b, #890) (#891)
chore: pin factory 383a27b — heredoc graphql state transport (#516) (#890)
chore: align ai-teammate factory pin with machine-sm (f767351) (#888)
chore: pin factory 05f591c + branch tag factory-data (#515) (#889)
chore: pin factory f767351b75a47112e0f01ef86da213117154ffb3 — gh-only state transport (#514) (#887)
chore: pin factory ee66f4e — state-publish whitelist fix (#513) (#886)
hotfix: restore factory pin — 882 wrote an empty sha (uses: @ / factory_ref: empty) (#884)
chore: pin factory 34097f0 + publish fa-state.json (agents#512) (#883)
chore: pin factory d7d7308 — duplicate-dispatch guard (agents#511) (#882)

Open source →

1.0.46523 Sept 2026

chore: revert SM tick to hosted pool (Bitrise invisible to IstiN org) by @IstiN in #871

What's Changed

chore: revert SM tick to hosted pool (Bitrise invisible to IstiN org) by @IstiN in #871
ci: bridge-free validation — tick-stamped checks, ci-gate.yml deleted by @IstiN in #873
chore: pin factory 28eee7ba65edb150bcca560f91396fbfae4f9819 — validation-sync debug by @IstiN in #874
chore: pin factory b00d60c — validation-sync URL fix by @IstiN in #875
chore: pin factory 37cb427 — gh-api check stamps by @IstiN in #876
chore: pin factory 7e63e31 — App-token check stamps by @IstiN in #877
ci: grant checks:write for factory validation stamps by @IstiN in #878
chore: pin factory loop-scope stamp fix by @IstiN in #879
fix: remove await_sm_ci_test — the bridge it pinned is deleted by @IstiN in #880

Full Changelog: v1.0.464...v1.0.465

Open source →

Additional notes

test: remove await_sm_ci_test — the bridge it pinned is deleted (#873) (#880)
chore: pin factory 68d98b0461944c6f48a7699e0eb35d5344bfeed6 (loop-scope stamp fix) (#879)
ci: grant checks:write — the factory stamps validation check runs (#878)
chore: pin factory 7e63e31a62793a178cb929bc0817d07d33f5cdda (App-token check stamps) (#877)
chore: pin factory 37cb42725a7588897ebc500ee26e455766cc9ca7 (gh-api check stamps) (#876)
chore: pin factory b00d60c90dd2a60bcb4df1f366ebdf0b7e6c3d1c (validation-sync URL fix) (#875)
chore: pin factory 28eee7ba65edb150bcca560f91396fbfae4f9819 (debug instrumentation for validation-sync) (#874)
ci: bridge-free validation — tick-stamped checks, ci-gate.yml deleted (#873)
chore: revert SM tick to hosted pool — Bitrise group invisible to IstiN org (#871)

Open source →

1.0.46423 Sept 2026

chore: pin factory 77fc330 — sm: validation economy ( #506 ) by @IstiN in #868

What's Changed

chore: pin factory 77fc330 — sm: validation economy (#506) by @IstiN in #868
fix(security): installer verifies pinned version + provenance before install by @vabhzw17eg2qu4m9-bit in #814
chore: pin factory f7fac02 — SM tick on Bitrise pool (factory #507) by @IstiN in #870

Full Changelog: v1.0.463...v1.0.464

Open source →

Additional notes

chore: pin factory f7fac02 — SM tick on Bitrise dmtools-ci pool (factory #507) (#870)
fix(security): installer verifies pinned version + provenance before install (#814)
chore: pin factory 77fc330 — sm: validation economy (#506) (#868)

Open source →

1.0.46323 Sept 20262 sources agree

fix(cube): fs guard resolves symlinks — access checks judge the file the OS will open ( #791 ) by @vabhzw17eg2qu4m9-bit in #813

What's Changed

fix(cube): fs guard resolves symlinks — access checks judge the file the OS will open (#791) by @vabhzw17eg2qu4m9-bit in #813

Full Changelog: v1.0.462...v1.0.463

Open source →

1.0.46223 Sept 2026

feat(tui): keyHint grammar + /help hotkey table ( #809 ) by @vabhzw17eg2qu4m9-bit in #834

What's Changed

feat(tui): keyHint grammar + /help hotkey table (#809) by @vabhzw17eg2qu4m9-bit in #834

Full Changelog: v1.0.461...v1.0.462

Open source →

Additional notes

feat(tui): keyHint grammar + /help hotkey table (#809) (#834)

Open source →

1.0.46023 Sept 2026

feat(tui): theme token parity - 67 omp tokens, syntax/markdown palettes, symbol presets ( #804 ) by @vabhzw17eg2qu4m9-bit in #832

What's Changed

feat(tui): theme token parity - 67 omp tokens, syntax/markdown palettes, symbol presets (#804) by @vabhzw17eg2qu4m9-bit in #832
feat(ci): SHA-pinned actions + pin-freshness automation (#796) by @vabhzw17eg2qu4m9-bit in #849

Full Changelog: v1.0.459...v1.0.460

Open source →

Additional notes

feat(ci): SHA-pinned actions + pin-freshness automation (#796) (#849)
feat(tui): theme token parity - 67 omp tokens, syntax/markdown palettes, symbol presets (#804) (#832)

Open source →

Additional notes

Latest

Compare

Open source →

1.0.45923 Sept 2026

ci(release): ASC version-floor pre-check + AAB gate self-test ( #798 ) by @vabhzw17eg2qu4m9-bit in #800

What's Changed

ci(release): ASC version-floor pre-check + AAB gate self-test (#798) by @vabhzw17eg2qu4m9-bit in #800
fix(cube): backend kernel means kernel-or-refuse, degrade only via explicit allowDegrade (#793) by @vabhzw17eg2qu4m9-bit in #815

Full Changelog: v1.0.458...v1.0.459

Open source →

Additional notes

fix(cube): backend kernel means kernel-or-refuse, degrade only via explicit allowDegrade (#793) (#815)
ci(release): ASC version-floor pre-check + AAB gate self-test (#798) (#800)

Open source →

1.0.45822 Sept 2026

ci: runner split (ARM pool + self-hosted M5 macOS) by @IstiN in #844

What's Changed

ci: runner split (ARM pool + self-hosted M5 macOS) by @IstiN in #844
chore: pin factory acc3ded (review/rework runs visible on PR) by @IstiN in #842
ci: runner split final — pure-Dart ARM, flutter via arm64 git bootstrap (pending experiment), M5 macOS by @IstiN in #846
chore: pin factory 54e86fd — mutexAmong (dev arms don't starve merge window) by @IstiN in #847
ci: skip SM gate bridge on chore:pin PRs by @IstiN in #848
fix: factory_ref skew (pin sed left acc3ded) by @IstiN in #851

Full Changelog: v1.0.457...v1.0.458

Open source →

Additional notes

fix: factory_ref skew — macOS sed \s gap left acc3ded after pin 54e86fd (#851)
ci: skip SM gate bridge on chore:pin PRs — pin validation is exempt by design (#848)
chore: pin factory 54e86fd (mutexAmong priority fix) (#847)
ci: runner split final — pure-Dart ARM, flutter via arm64 git bootstrap (pending experiment), M5 macOS (#846)
chore: pin factory acc3ded — PR-head leg dispatch (#842)
ci: runner split — ARM pool for light/medium jobs, self-hosted M5 for macOS (#844)

Open source →

1.0.45722 Sept 2026

One model-list dispatch everywhere: codex identity hint + bundled-catalog provenance by @vabhzw17eg2qu4m9-bit in #780

What's Changed

One model-list dispatch everywhere: codex identity hint + bundled-catalog provenance by @vabhzw17eg2qu4m9-bit in #780
fix(infra): SM CI Gate waiter stops failing on green/cancelled dispatched runs by @vabhzw17eg2qu4m9-bit in #782
chore: pin factory 5fabe93 (dev-lane non-blocking — guest wave parallel) by @IstiN in #833
chore: pin factory 1aae6db (silent updates x20, non-blocking dev lane) by @IstiN in #835
chore: pin factory — dials (validate 5 / silent 10 / review 10) by @IstiN in #839
chore: pin factory — verdict latches x10 by @IstiN in #840

Full Changelog: v1.0.456...v1.0.457

Open source →

Additional notes

fix(771): one model-list dispatch everywhere — the ChatGPT (codex) provider's model list loads on every surface (provider editor quick-select, default-chat picker, media-slot pickers, task model pickers) instead of only right after OAuth. Pickers resolve through fetchModelsForEndpoint, with registry entries' persisted CustomProvider.kind winning over URL-shape guessing. Breaking for out-of-tree ModelListDialect implementers: the fetch override signature gains an optional named void Function()? onBundledFallback parameter — keep it in the override's signature (and ignore it) unless your dialect can answer from a bundled offline catalog when the live fetch fails.

Open source →

1.0.45622 Sept 2026

fix(772): one identity per provider - name/kind split resolved through the catalog seam by @vabhzw17eg2qu4m9-bit in #779

What's Changed

fix(772): one identity per provider - name/kind split resolved through the catalog seam by @vabhzw17eg2qu4m9-bit in #779
chore: pin factory f5c86d8 (merge 404 fixed — #762 lands next) by @IstiN in #826
gh-760 [GOAL] A persisted provider can never brick the CLI — chatgpt-codex boot-switch hole + degrade-never-crash boot by @ai-teammate in #762
gh-789 [SEC-01] the browser relay must never send a stored key to a client-chosen address by @ai-teammate in #811

Full Changelog: v1.0.455...v1.0.456

Open source →

Additional notes

gh-789 [SEC-01] the browser relay must never send a stored key to a client-chosen address (#811)
gh-760 [GOAL] A persisted provider can never brick the CLI — chatgpt-codex boot-switch hole + degrade-never-crash boot (#762)
chore: pin factory f5c86d8 — mergeBot pullRequestId (#762 merge fix) (#826)
fix(772): one identity per provider - name/kind split resolved through the catalog seam (#779)

Open source →

1.0.45522 Sept 2026

chore: pin factory dff2d08 (mergeBot fallback scoped — #762 ) by @IstiN in #822

What's Changed

chore: pin factory dff2d08 (mergeBot fallback scoped — #762) by @IstiN in #822
chore: pin factory fec4d87 (CANCELLED≠red, bot BLOCKED-race) by @IstiN in #824

Full Changelog: v1.0.454...v1.0.455

Open source →

Additional notes

chore: pin factory fec4d87 — CANCELLED≠red + bot BLOCKED-race (#762) (#824)
chore: pin factory dff2d08 — mergeBot fallback scoped (#762) (#822)

Open source →

1.0.45422 Sept 2026

chore: pin factory af38761 (unarm-stale BEHIND-only — #762 deadlock fix) by @IstiN in #799

What's Changed

chore: pin factory af38761 (unarm-stale BEHIND-only — #762 deadlock fix) by @IstiN in #799
Fixes #774: markdown renders on every CLI surface - one MarkdownSurface policy by @vabhzw17eg2qu4m9-bit in #778
chore: pin factory 4d8537b (mutex — one validation at a time) by @IstiN in #816
chore: pin factory d21899e (mergeBot rollup fallback — #762) by @IstiN in #819
chore: pin factory f0198b1 (bot CI-run fallback — #762; workflow names per-repo) by @IstiN in #820
chore: pin factory 46cf243 (owner FIFO — conflicted oldest defers) by @IstiN in #821

Full Changelog: v1.0.453...v1.0.454

Open source →

Additional notes

chore: pin factory 46cf243 — owner FIFO (notMergeState array) (#821)
chore: pin factory f0198b1 — bot CI-run fallback; stub listens to 'CI' + passes ci.yml (#820)
chore: pin factory d21899e — mergeBot rollup fallback (#762 fix) (#819)
chore: pin factory 4d8537b — mutex serial validation (strict FIFO) (#816)
Fixes #774: markdown renders on every CLI surface - one MarkdownSurface policy (#778)
chore: pin factory af38761 — unarm BEHIND-only (deadlock fix #488) + lockstep (#799)

Open source →

1.0.45322 Sept 2026

feat(machine): event-driven merge bot stub (factory a7a1b13) by @IstiN in #784

What's Changed

feat(machine): event-driven merge bot stub (factory a7a1b13) by @IstiN in #784
chore: pin factory 1eebd58c (merge-bot concurrency fix) by @IstiN in #787
fix(ci): factory_ref echo follows pinned factory ref by @vabhzw17eg2qu4m9-bit in #788
fix(release): unstick nightly publish legs (testflight version, play AAB lib check) by @vabhzw17eg2qu4m9-bit in #797

Full Changelog: v0.1.452...v1.0.453

Open source →

Additional notes

fix(release): unstick nightly publish legs (testflight version, play AAB lib check) (#797)
fix(ci): factory_ref echo follows the pinned factory ref (unstick main) (#788)
chore: pin factory 1eebd58c — merge-bot concurrency fix (factory #487) (#787)
feat(machine): merge bot stub — event-driven merge fast path (factory a7a1b13) (#784)

Open source →

0.1.45122 Sept 20262 sources agree

test(550-family): /dap menu leg anchors on the painted screen (Stop DAP races sibling rows) by @vabhzw17eg2qu4m9-bit in #776

What's Changed

test(550-family): /dap menu leg anchors on the painted screen (Stop DAP races sibling rows) by @vabhzw17eg2qu4m9-bit in #776

Full Changelog: v0.1.450...v0.1.451

Open source →

Additional notes

Latest

Compare

Open source →

0.1.45022 Sept 2026

Full Changelog : v0.1.449...v0.1.450

Full Changelog: v0.1.449...v0.1.450

Open source →

Additional notes

chore: pin factory f0e962a79acfd0f10c29550840bf03e34d9b8a8b (sticky-approval rework fix)

Open source →

0.1.44921 Sept 2026

Full Changelog : v0.1.448...v0.1.449

Full Changelog: v0.1.448...v0.1.449

Open source →

Additional notes

chore: pin factory b105bfd1bc1d93539b561f1957e6e97466a8fe4a (conflict-rework)
chore: pin factory a92d91cd2ceb3787c80982542844d03aa6ade73f (prStatus BLOCKED fix)
chore(machine): pin factory to d6c45fb — guest PRs never get a rework arm

Open source →

0.1.44821 Sept 2026

fix(729): over-window resume — raised-window override + window-bounded compaction payloads by @vabhzw17eg2qu4m9-bit in #767

What's Changed

fix(729): over-window resume — raised-window override + window-bounded compaction payloads by @vabhzw17eg2qu4m9-bit in #767
fix(infra): unblock CI — sqlite3 3.6.0 native-asset hash mismatch by @vabhzw17eg2qu4m9-bit in #768
Fixes #693 by @vabhzw17eg2qu4m9-bit in #769
feat(machine): dispatch-only CI — SM is the only CI trigger; auto-update-prs retired by @IstiN in #770
chore(machine): pin factory to 27534bf — no-op rework token guard by @IstiN in #775

Full Changelog: v0.1.447...v0.1.448

Open source →

Additional notes

fix(machine): repair Frankenstein factory ref — sed replaced only the 7-char prefix inside the 40-char SHA
chore(machine): pin factory to 27534bf — no-op rework token guard (#775)
feat(machine): dispatch-only CI — SM is the only CI trigger; auto-update-prs retired (#770)
feat(693): providers queue picks through the shared two-step provider→model flow (#769)
chore(ci): cache native-assets hook downloads — ride out GitHub release-asset 504s (#768)
fix(729): over-window resume — raised-window override + window-bounded compaction payloads (#767)

Open source →

0.1.44721 Sept 2026

fix( #761 ): never emit whole-screen CSI S/T when the leading edge row is static by @vabhzw17eg2qu4m9-bit in #766

What's Changed

fix(#761): never emit whole-screen CSI S/T when the leading edge row is static by @vabhzw17eg2qu4m9-bit in #766
feat(blog): fa1.dev blog — first post (40B tokens article) by @IstiN in #758
Fixes #705: provider-switch-safe sessions — top-level function_call items, sanitize-on-switch, recovery by @vabhzw17eg2qu4m9-bit in #765

Full Changelog: v0.1.446...v0.1.447

Open source →

Additional notes

Fixes #705: provider-switch-safe sessions — top-level function_call items, sanitize-on-switch, recovery (#765)
feat(blog): fa1.dev blog — first post (40B tokens article) (#758)
fix(#761): never emit whole-screen CSI S/T when the leading edge row is static (#766)

Open source →

0.1.44621 Sept 2026

gh-746 Android Play Store Error by @ai-teammate in #750

What's Changed

gh-746 Android Play Store Error by @ai-teammate in #750
fix(726): resilient iOS pub get + advancing TestFlight marketing version by @vabhzw17eg2qu4m9-bit in #764

Full Changelog: v0.1.445...v0.1.446

Open source →

Additional notes

fix(726): resilient iOS pub get + advancing TestFlight marketing version (#764)
gh-746 Android Play Store Error (#750)

Open source →

0.1.44521 Sept 2026

gh-752 Boarding screens in Apps disable swipping by @ai-teammate in #753

What's Changed

gh-752 Boarding screens in Apps disable swipping by @ai-teammate in #753
fix(cli): cut marathon-session boot cost round 2 (issue #503) by @ai-teammate in #676

Full Changelog: v0.1.444...v0.1.445

Open source →

Additional notes

fix(cli): cut marathon-session boot cost round 2 (issue #503) (#676)
gh-752 Boarding screens in Apps disable swipping (#753)

Open source →

0.1.44421 Sept 2026

chore: repin factory to 8d83bf4 (fail_validation unarm + branch fallback) by @IstiN in #755

What's Changed

chore: repin factory to 8d83bf4 (fail_validation unarm + branch fallback) by @IstiN in #755
chore: repin factory to 554cfb0 (merge_pr merged:true verification) by @IstiN in #757

Full Changelog: v0.1.443...v0.1.444

Open source →

Additional notes

chore: repin factory to 554cfb0 (#476) (#757)
chore: repin factory to 8d83bf4 (fail_validation unarm + branch fallback) (#755)

Open source →

0.1.44321 Sept 2026

chore: repin factory to bd763b3 (review→rework arming fix) by @IstiN in #754

What's Changed

chore: repin factory to bd763b3 (review→rework arming fix) by @IstiN in #754

Full Changelog: v0.1.442...v0.1.443

Open source →

Additional notes

chore: repin factory to bd763b3 (#474) (#754)
chore(coverage): CLI terminal-test baseline 8.0 -> 12.17 (ratchet up)

Open source →

0.1.44121 Sept 2026

fix(735): TermiosGuard — re-assert raw-mode tty flags after tool phases so Ctrl+S steering survives IXON re-enable

fix(735): TermiosGuard — re-assert raw-mode tty flags after tool phases so Ctrl+S steering survives IXON re-enable (#738)

Open source →

0.1.44021 Sept 20262 sources agree

feat(cli): pi mode — pi's exact benchmark config (4 tools, bare prompt, token parity) by @vabhzw17eg2qu4m9-bit in #689

What's Changed

feat(cli): pi mode — pi's exact benchmark config (4 tools, bare prompt, token parity) by @vabhzw17eg2qu4m9-bit in #689

Full Changelog: v0.1.439...v0.1.440

Open source →

0.1.43820 Sept 2026

config(machine): machine author is ai-teammate (the App), not the SOURCE-token login by @IstiN in #747

What's Changed

config(machine): machine author is ai-teammate (the App), not the SOURCE-token login by @IstiN in #747
ci: repin factory to dmtools-agents@78345a9 — rework policy, auto-approve external PRs, guard AGENT_HANDLE by @IstiN in #748
ci: repin factory to dmtools-agents@f03fbdf — label-echo dedup (no duplicate legs) by @IstiN in #749
feat(691): App Store launch surface — links: config, fa1.dev block + goldens page, Get banners, referral analytics by @vabhzw17eg2qu4m9-bit in #700

Full Changelog: v0.1.437...v0.1.438

Open source →

Additional notes

feat(691): App Store launch surface — links: config, fa1.dev block + goldens page, Get banners, referral analytics (#700)
ci: repin factory to f03fbdf — label-echo dedup (no duplicate legs) (#749)
ci: repin factory to 78345a9 — rework policy + auto-approve external + guard AGENT_HANDLE (#748)
config(machine): machine author is ai-teammate (the App), not the SOURCE-token login (#747)

Open source →

0.1.43720 Sept 2026

gh-740 [GOAL] Compaction failure must never brick a session — deterministic trim fallback, decorrelated role chain, trap circuit-breaker (M1 spec: 90s

What's Changed

gh-740 [GOAL] Compaction failure must never brick a session — deterministic trim fallback, decorrelated role chain, trap circuit-breaker (M1 spec: 90s→300s ready) by @ai-teammate in #743
fix(692): iOS sandbox fitness — visible errors, sandbox-aware prompt, viewport-aware widgets, bounded app-state by @vabhzw17eg2qu4m9-bit in #704

Full Changelog: v0.1.436...v0.1.437

Open source →

Additional notes

fix(692): iOS sandbox fitness — visible errors, sandbox-aware prompt, viewport-aware widgets, bounded app-state (#704)
gh-740 [GOAL] Compaction failure must never brick a session — deterministic trim fallback, decorrelated role chain, trap circuit-breaker (M1 spec: 90s→300s ready) (#743)

Open source →

Your coding agent can read these notes before it upgrades. Set up the MCP server →