Shadow 10.6.3

Fixes the 10.6.2 ultrawide-terminal regression: content now uses responsive centered margins instead of remaining fixed at 100 columns. Existing layouts at 120 columns and below are unchanged; question and approval panels keep their independent sizing.

Verified source: e119123
Native binary smoke: https://github.com/Blackfrost-AI/Shadow_CLI/actions/runs/40408254251 (all six native jobs passed).
Install: https://www.blackfrost.ai/shadow
Signed binaries: https://storage.googleapis.com/blackfrost-ai-prod-shadow-releases/bin/SHASUMS256.txt

Source CI limitations: tag/main matrices retain pre-existing platform and timing failures. Local public gates passed 3757 tests. Website quality CI could not start because the account Actions minutes/spending limit is exhausted; the website Node 22 typecheck, lint and production build passed locally.

Shadow 10.6.2

Shadow 10.6.2 includes deterministic responsive layout, adaptive wrapped composer text, truthful streaming rates, persistent Room collaboration, and robust asynchronous tool follow-ups.

Verified source: b6e0e3d

Install: https://blackfrostai.com/shadow
Signed binaries: https://blackfrostai.com/shadow/SHASUMS256.txt
Native CI: https://github.com/Blackfrost-AI/Shadow_CLI/actions/runs/40236076356

Shadow 10.1.0

Shadow 10.1.0 expands local workflows and verification while keeping Shadow provider-neutral and free of telemetry.

• Reusable project checks and bounded completion corrections.
• Context inspection, persistent file pins, and exact managed-source exclusions.
• Previewed file/hunk review actions, retained backups, and guarded rewind.
• Local session search, pins, tags, and lineage across explicitly selected projects.
• Typed executable workflows with no-call previews and local provenance.
• JSON/JSONL automation, final JSON-schema validation, stable exit codes, and ephemeral transcripts.
• Optional onboarding capability probes with dated endpoint-specific results.
• Local security findings, SARIF/JSON import, evidence history, and redacted reports.
• Extension and learned-skill review menus.
• Local tmux discovery, autocomplete, scrollback, Codex terminal controls, and queued follow-ups during active work.

See the functionality guide, automation guide, and full changelog.

Existing standalone users can run shadow update. New users can install from blackfrostai.com/shadow. Signed standalone binaries are attached for macOS ARM64/Intel, Linux ARM64/x64, and Windows x64.

No analytics, crash uploads, callback service, or hosted coordination was added. Your model, endpoint, permissions, and local harness choices remain yours.

Shadow 10.0.4

Shadow 10.0.4 expands Shadow's security-focused runtime with subscription accounts, reliable onboarding, trusted harness add-ons, and hardened self-hosted model support.

• Subscription accounts: sign in with ChatGPT or connect the official Claude Code CLI. Shadow preserves the chosen account across model and profile changes and refuses silent fallback to API billing.
• Reliable onboarding: configure subscriptions, cloud APIs, self-hosted endpoints, or local model files through one keyboard-driven flow with bounded checks, cancellation, editable failures, and retry.
• Security foundation: every new session starts from Shadow's provider-neutral security engineering foundation for investigation, hardening, incident response, defensive automation, secure coding, and supporting systems work.
• Trusted harness add-ons: install local packages under ~/.shadow/harnesses to add scoped instructions, skills, and tools. Each new session records the selected harness versions and digests; add-ons cannot choose endpoints, credentials, permissions, or sandbox policy.
• Local skill learning: /learn creates evidence-linked candidates, while /skills supports explicit review, activation, revision history, and rollback. This remains fully local with no telemetry or callback service.
• Trusted profiles: pair a model preset with harnesses and runtime limits while keeping endpoints and credentials out of the profile itself.
• Hardened self-hosting: explicitly control SGLang/Qwen chat-template thinking for trusted self-hosted presets without sending that extension to cloud providers.
• Cleaner terminal output: completed reasoning collapses into one expandable row, providers without reasoning produce no empty panel, and repeated grep activity is grouped. Escape interruption remains covered during text, first-token, and thinking streams.
• Tool fidelity and continuity: preserve structured tool calls and partial provider output, strengthen output budgets and file pagination, and bind resumed sessions to their recorded harness state.

Harness selection is fixed when a session starts; live mid-session switching is not part of this release. Subscription credentials are sent only to their configured provider or official CLI, and Shadow adds no analytics or crash uploads.

Update with shadow update, then restart Shadow.

Release validation passed on macOS, Linux, and Windows with Node 22.19 and 26.5, followed by native signed installer/updater checks for all five binaries, including Windows PowerShell 5.1 and 7.

Shadow 10.0.3

Shadow 10.0.3 connects planning, delegated work, code review and session recovery while keeping Snowfall's full-width retro terminal.

• Terminal polish: more footer spacing, elapsed time in minutes, visible /effort choices, and thinking separated from answers and tool output.
• More reliable responses: preserve structured provider content and tool calls, retain partial results, and distinguish completed, interrupted, cancelled and failed work.
• Recoverable work: browse workers and linked tasks through /work, inspect persistent attempts and dependency blockers in /jobs, and exchange local messages with replies and unread history through /room.
• Review retained changes: inspect worker worktrees and patches, then explicitly apply, keep or discard them. Review working changes, branch comparisons or commits through /review, with file and hunk navigation.
• Independent consultations: /consult selects a complete provider/model profile and uses a separate read-only conversation. Follow-ups survive session resume without switching the lead session's model.
• Bounded collaboration: /team offers second opinion, implement-and-review and parallel-team presets, plus pipeline, debate and plan/solve options. Permissions, cancellation and budgets carry through child workers; recorded checks and acceptance remain separate from model opinions.
• Better continuity: resume named conversations with their plan, tasks, work history and recorded tool activity. Rewind previews affected files before applying changes. Interrupted jobs require an explicit retry; reopening a session never automatically repeats commands or edits.
• Repository context and connectors: add semantic navigation with labeled lexical fallback, ranked source excerpts, scoped instructions, skill-source visibility and memory provenance. Snowfall's /mcp supports live connection management, progress, deadlines, cancellation requests and retrieval of large results.
• Windows reliability: recognize managed Git worktrees across path aliases and separator differences.

Jobs, rooms and progress records stay local. Shadow adds no analytics or crash uploads. Update discovery remains off by default and can only be enabled through trusted user configuration; project files cannot turn it on. Configured providers, MCP servers and external programs retain their own network behavior.

These collaboration tools coordinate one user's local workspace. Workers do not survive application exit, and remote MCP cancellation is best effort. Missing provider usage stays unknown; estimated cost is not a billed amount. Snowfall has the new interactive workflows; Ink retains its compatibility controls and applies MCP configuration changes after restart.

Update with shadow update, then restart Shadow.

Release validation passed on macOS, Linux and Windows with Node 22.19 and 26.5, plus native signed installer/updater checks for all five binaries (including Windows PowerShell 5.1 and 7). Source checks · Signed binary checks.

Shadow 10.0.2

Escape now fully interrupts a running provider response and releases the turn, so the next prompt starts immediately. This fixes a compiled-runtime stall where Shadow printed “interrupted” but kept subsequent messages queued.

• Cancellation also handles stalled HTTP error bodies and non-stream fallback responses.
• Partial answers stay above the interrupt notice; repeated Escape does not duplicate it.
• Release checks now exercise Escape before the first token, Escape during streaming, Ctrl+C, follow-up prompts, and terminal restoration against native macOS/Linux binaries.

Validation: 2,852 local tests passed, with type checks, lint, build, packaging, and dependency audit. Cross-platform source checks and signed native release checks cover macOS, Linux, and Windows, including PowerShell 5.1 and 7.

Update with shadow update, then restart Shadow. All binaries are accompanied by the signed checksum manifest verified by the installer and updater.

Shadow CLI v10.0.1 — Guided onboarding and named sessions

Shadow CLI 10.0.1 improves setup and makes multiple conversations easier to track.

• Guided onboarding matches Snowfall and the classic SHADOW banner. Compact Local file, Model server, and Cloud menus support arrow keys, numbered choices, search, and review before saving.
• Self-hosted setup keeps your entries after failed checks, with retry/edit controls, cancellable deadlines, masked keys, and separate credentials for each endpoint.
• New presets: Cerebras, Fireworks, DeepInfra, Hugging Face, NVIDIA NIM, vLLM, SGLang, and llama.cpp.
• Sessions get a local name from the first prompt. Use /rename to set one, find it in /resume, and see the active name in the terminal title. /new preserves the previous conversation.

Update an existing installation:

shadow update

Then restart Shadow. Run shadow onboard to use the new setup flow.

Installers and instructions: blackfrostai.com/shadow.

Validation: 2,842 tests passed locally on Node 22.19.0; type checks, lint, build, packaging gates and dependency audit passed. The native source matrix covers Node 22.19.0 and 26.5.0 on macOS, Linux and Windows. The signed binary matrix passed all six jobs: macOS Intel/ARM64, Linux x64/ARM64, and Windows PowerShell 5.1/7. Node and compiled-Mac terminal checks passed setup retry/save, masking, resize, cleanup, session naming and title restoration. Provider checks use disposable loopback fixtures.

The five binaries below share a signed SHA-256 manifest and the existing pinned release key. Installers and the updater verify both signature and checksum. Public source: a19c426ac70ab9b7a51507a1c73e8b91e9691abd.

Shadow 10.0.0 — Snowfall

Shadow 10.0.0 makes Snowfall the default terminal.

• Full-width conversation, pinned composer and compact status bar.
• Original thick, retro SHADOW banner with responsive layouts.
• Transcript scrolling, search, selection/copy, folded details and restored scrollback on exit.
• Custom slash commands, queued follow-ups, external-editor access and accessible themes.
• Existing Work Center agents, shells, tasks, history and controls remain available.
• More reliable Windows configuration saves during concurrent reads.

Install from blackfrostai.com/shadow. Existing standalone users can run:

shadow update

The compatibility renderer remains available with SHADOW_TUI=ink shadow for Vim mode, round-table mode, custom status lines and configurable key mappings. See the terminal contract for supported keys and terminal-image fallbacks.

Validation:

• All 2,822 local tests pass on Node 22.19.0 and 26.5.0; TypeScript, lint, production build, release gates and package validation pass.
• Signed native release checks pass on Linux x64/ARM64, macOS Intel/ARM64, and Windows with PowerShell 5.1 and 7. They verify install/update behavior and reject invalid signatures, modified binaries and missing signatures.
• Source and terminal checks pass on Node 22.19.0 and 26.5.0 across Linux, macOS and Windows, with POSIX PTY lifecycle checks. Platform-specific POSIX cases are explicitly skipped on Windows.
• Runtime and full dependency audits report zero vulnerabilities at release preparation.

All five standalone binaries were built with Bun 1.4.2. The signed SHA-256 manifest authenticates the attached binaries using Shadow's existing pinned release key. Automated checks do not qualify every terminal emulator or graphics protocol.

Shadow 8.7.1 — Blackfrost transition

Shadow 8.7.1 moves signed binary downloads and future updates to Blackfrost.

Get Shadow at blackfrostai.com/shadow. Existing standalone installations can run:

shadow update
shadow --version

This release supports built-in Windows PowerShell 5.1; PowerShell 7 is optional. The installer uses .NET directly for SHA-256 verification, avoiding PowerShell module-discovery dependencies. Standalone shadow update works without either PowerShell executable on PATH.

The old host temporarily serves the signed transition release so existing clients can update. Once on 8.7.1, subsequent binary updates use Blackfrost. Signed manifests, pinned-key verification, SHA-256 checks, and redirect refusal remain enforced. shadow update --offline now refuses before contacting the release server. Undici and js-yaml dependency updates address reported advisories.

Native release validation passed on Windows PowerShell 5.1 and 7, macOS Intel and ARM64, and Linux x64 and ARM64. Checks covered clean installation, launch, reinstall, offline refusal, invalid signature/checksum rejection, and the complete 8.7.0 → legacy host → 8.7.1 → Blackfrost update path. The public source suite passed 2,643 tests.

Reviewed source: 3f900ecb06a3243eff63c0b4ce9f5988f8e18ac6. Versioned signed artifacts are preserved under the 8.7.1 release directory. The next major release remains in development.