v0.1.3

Highlights

Chat reliability, modules, and security hardening since v0.1.2.

Chat & permissions

• Restore approval/clarify prompts after page refresh (HITL rehydrate)
• Stop concurrent POSTs from joining an in-flight turn (session_busy + queue)
• Session-turn lease owned by background turn runner for the full lifetime
• Unified live + resume SSE handling (chat_turn_stream.js, hitl_ui.js)
• Agent chat streams use the same background turn path as sessions

Product

• Modules system with Token Monitor usage UI
• Web access security hardening and auto-seed install secrets
• Artifact auto-open / scroll fixes; chat sidebar and Files panel polish
• Artifact auto-save guidance and skill package loading improvements

Security

• Bump cryptography to 50.0.0 (CVE-2026-69247)

Install

App (managed):

curl -fsSL https://raw.githubusercontent.com/Alg0rix/tomo/v0.1.3/scripts/install.sh | bash

Connector:

curl -fsSL https://raw.githubusercontent.com/Alg0rix/tomo/v0.1.3/scripts/install-connector.sh | bash
# pin: TOMO_CONNECTOR_VERSION=v0.1.3

Wheel: tomo-0.1.3-py3-none-any.whl (attached by CI)

What's Changed

• fix: restore HITL after refresh and stop cross-session busy lock
• fix(deps): bump cryptography to 50.0.0 for CVE-2026-69247
• feat: modules system with Token Monitor usage UI
• feat(ui): drop swarm rail, collapse chat sidebar, maximize artifacts
• Harden web access and auto-seed install secrets
• fix(ui): stop artifact reopen and keep long chats at bottom
• Improve artifact auto-save guidance and skill package loading

Full Changelog: v0.1.2...v0.1.3

What's Changed

• Harden web access and auto-seed install secrets by @Alg0rix in #21
• Add modules system with Token Monitor usage UI by @Alg0rix in #22
• Fix artifact auto-open and long-thread scroll stick by @Alg0rix in #23

Full Changelog: v0.1.2...v0.1.3