Tellnova Desktop v1.1.0

Installing

Linux: download the .AppImage, chmod +x it, run it.
Windows: run the NSIS installer (.exe). SmartScreen may warn — choose More info → Run anyway.
macOS: see below — one extra step is required.

macOS: "Tellnova is damaged and can't be opened"

This build is not yet notarized by Apple (no Apple Developer account yet),
so Gatekeeper shows a scary-but-wrong "damaged" message on first launch. The
download is fine. To open it:

1. Drag Tellnova from the DMG into Applications.

2. In Terminal, run:

   xattr -cr /Applications/Tellnova.app

3. Still blocked on Apple Silicon? Add a local ad-hoc signature:

   codesign --force --deep --sign - /Applications/Tellnova.app

4. Launch normally. This is a one-time step per fresh install.

No Terminal? After one blocked launch attempt, go to
System Settings → Privacy & Security and click Open Anyway.

xattr -cr only removes macOS's download-quarantine flag; it does not modify
the app. You can verify your download against SHA256SUMS.txt attached below:

shasum -a 256 ~/Downloads/Tellnova-*.dmg

Signed and notarized macOS builds are on the roadmap.

---

What's new in 1.1.0

Features

• Local folders as projects — point Tellnova at any git repository on your machine (native folder picker or type a path). Agents work in isolated worktrees branched off your repo's HEAD; your checkout, config, and git identity are never touched. Shipping commits the branch locally, pushes when an origin exists, and opens a real GitHub PR when the origin is github.com.
• Prompt stash — press Ctrl/Cmd+S to stash a half-written prompt and come back to it later, in any thread. Badge with count next to the composer; restoring an entry pops it from the stash.
• Integrated terminal — Ctrl/Cmd+J opens a per-worktree terminal dock with tabs, multiple shells, and a shell picker.
• Better pickers — repository and model dropdowns are now true click-to-open dropdowns with search; custom values (any model id, org/repo, or a folder path) via the search box.
• Slash-command menu now lists all pi commands, including plugin-registered ones.

Fixes and hardening

• Fixed a cancel→retry race that could run two agents in the same worktree.
• Deleting a thread is instant; workspace cleanup happens safely in the background.
• Quitting the app now stops running agents (previously they could keep running—and billing—invisibly on macOS/Windows).
• Web access: revoking the access token now also disconnects already-connected listeners; public-URL (tunnel) lifecycle fixed (no more orphaned tunnel processes).
• Numerous security fixes: OAuth callback hardening, GitHub token no longer visible to other local processes and only ever sent to github.com, tightened sign-in origin trust, dependency security updates.
• Many smaller UI fixes (state no longer leaks between threads, log streaming no longer yanks the page, error messages instead of blank panels).