v3.4.1

Maple 3.4.1 fixes Google and GitHub sign-in in the native apps, desktop Apple sign-in through the browser, and cancellation of these sign-in attempts. This resolves the native sign-in error introduced in 3.4.0.

If you installed 3.4.0, update to 3.4.1. Users upgrading from 3.3.10 also receive the Transport V2 encrypted sessions, queued chat follow-ups, and Agent Mode improvements introduced in 3.4.0. The Transport V2 upgrade requires signing in again.

Maple SDK remains 4.0.0 and Maple Proxy remains 0.4.0.

Hotfix: #931

Full changelog: v3.4.0...v3.4.1

v3.4.0

Maple 3.4.0 brings the new encrypted Transport V2 client, queued chat follow-ups,
and improvements to Agent Mode and account management.

• Queue follow-up messages while a chat response is running, then edit or remove
  them before they send. Attachments, model choices, and web-search settings stay
  with each queued message.
• Updated encrypted sessions and sign-in flows, including native account
  confirmation and session-bound browser handoffs.
• Use the Quick/Powerful model selector in Agent Mode, with improved handling of
  inference capacity limits.
• Upgrade eligible Bitcoin-paid plans through the app and review subscription
  guidance before deleting a paid account.
• Updated available models and dependencies.

Existing users will need to sign in again after the Transport V2 upgrade.
The release includes Maple SDK 4.0.0 and Maple Proxy 0.4.0.

What's Changed

• chore: bump Maple to v3.3.11 by @AnthonyRonning in #871
• chore(proxy): bump version to 0.3.4 by @AnthonyRonning in #870
• feat(settings): warn paid users before account deletion by @AnthonyRonning in #876
• feat: self-service Zaprite Pro to Max upgrades by @AnthonyRonning in #875
• feat(agent): reuse chat Quick/Powerful model selector by @AnthonyRonning in #878
• feat: bound inference capacity replay by @AnthonyRonning in #865
• Own Pages publishing with guarded preview and release artifacts by @AnthonyRonning in #879
• Keep Pages deployment reporting on verified artifact commits by @AnthonyRonning in #881
• Apply MaplePrivacyLabs identity and proxy namespace after transfer by @AnthonyRonning in #882
• Clean up remaining repository references after transfer by @AnthonyRonning in #883
• Move Research app and updater into monorepo component directories by @AnthonyRonning in #884
• Import Maple Agent GPUI with shared dependencies and isolated CI by @AnthonyRonning in #885
• Fix Agent test portability and revocation timing by @AnthonyRonning in #887
• Import OpenSecret backend with history and manual PCR compatibility by @AnthonyRonning in #888
• Fail SDK CI on unsuccessful checks and patch fast-uri by @AnthonyRonning in #892
• Fix backend entropy test fixtures in the Nix sandbox by @AnthonyRonning in #889
• Use canonical Maple PCR histories in both SDKs by @AnthonyRonning in #891
• Patch SDK and Research dependency findings by @AnthonyRonning in #893
• Stabilize Agent login-shell output cleanup regression by @AnthonyRonning in #894
• Rename SDKs to @mapleai/sdk and maple-sdk by @AnthonyRonning in #895
• Add protected, independent SDK publishing in GitHub Actions by @AnthonyRonning in #896
• Let clients adopt published SDK versions independently by @AnthonyRonning in #898
• Fix Agent revocation fixture FIFO synchronization by @AnthonyRonning in #900
• Refresh current monorepo setup and component documentation by @AnthonyRonning in #899
• Remove deprecated GLM 5.2 and default Powerful to GLM 5.3 by @AnthonyRonning in #903
• Add scoped OpenSecret EIF approval checks by @AnthonyRonning in #905
• Restore scoped OpenSecret EIF caches by @AnthonyRonning in #906
• Pin maple-agent CUA SDK to upstream trycua/cua by @AnthonyRonning in #907
• Add DeepSeek V4.1 Flash by @AnthonyRonning in #908
• Fail proxy CI immediately when a check fails by @AnthonyRonning in #910
• Update dev and prod PCR approvals for ad5a389 by @AnthonyRonning in #909
• Own local OpenSecret provider secrets with SecretSpec and BWS by @AnthonyRonning in #911
• Isolate PCR signing behind a dedicated SecretSpec boundary by @AnthonyRonning in #912
• Correct the CI signing statement; drop a personal key name from the runbook by @AnthonyRonning in #914
• Remove the obsolete provider-dependent extended health endpoint by @AnthonyRonning in #913
• Retire DeepSeek V4 Flash by @AnthonyRonning in #915
• Update Rustls for RUSTSEC-2026-0285 by @AnthonyRonning in #917
• OpenSecret PCR approvals (dev and prod) for b8c0aa9 by @AnthonyRonning in #923
• Share one approval branch per source commit across environments by @AnthonyRonning in #921
• Transport V2: consolidate SDK, proxy, and Maple client cutover by @AnthonyRonning in #873
• feat(chat): queue follow-up messages in Maple Research by @AnthonyRonning in #877
• Prepare Maple 3.4.0, SDKs 4.0.0, and proxy 0.4.0 by @AnthonyRonning in #924
• Isolate Continuum prompt caches per user by @AnthonyRonning in #922
• Pin Maple consumers to published SDK 4.0.0 by @AnthonyRonning in #925

Full Changelog: v3.3.10...v3.4.0

v3.3.10

Maple v3.3.10 expands image support across paid chat models, improves failed-image recovery, and brings a clearer, consistent presentation to tool activity in Chat and Agent Mode.

Highlights

• Attach images while using any paid chat model. Models without direct image support can now use Maple's secure server-side image description path, with support for images up to 20 MiB.
• If every image-description provider is unavailable, Maple preserves the original message and attachments for retry instead of repeating the exhausted request cascade.
• Chat and Agent Mode now share compact tool cards with consistent icons, statuses, disclosure controls, and sanitized output previews.
• Release infrastructure now promotes the production web branch without force pushes and adds safer, recoverable publishing for separately versioned maple-proxy containers.

What's Changed

• docs: refresh release skills after v3.3.9 by @AnthonyRonning in #860
• chore: bump Maple to v3.3.10 by @AnthonyRonning in #861
• Publish versioned maple-proxy containers from Maple by @AnthonyRonning in #862
• Prevent forced Pages production promotion by @AnthonyRonning in #864
• Harden proxy container publishing by @AnthonyRonning in #868
• feat(chat): support images with all paid models by @AnthonyRonning in #866
• fix(chat): stop retrying exhausted image descriptions by @AnthonyRonning in #867
• Share Agent tool card styling with Chat by @AnthonyRonning in #869

Full Changelog: v3.3.9...v3.3.10

v3.3.9

Maple 3.3.9 makes Quick the default chat model for every plan and completes a major internal consolidation of Maple's SDK and local proxy.

Highlights

• Makes Quick the default for all plans and migrates existing sticky model selections once so current users receive the new default.
• Brings the OpenSecret TypeScript and Rust SDKs plus maple-proxy into the Maple repository and switches Maple to those in-tree packages.
• Adds verified native maple-proxy archives for macOS, Linux x86_64, Linux arm64, and Windows to every Maple release.
• Adds model-catalog support to the Rust SDK.
• Promotes Cloudflare Pages production only after a successful stable release while preserving automatic pull-request previews.
• Restores best-effort Zapstore publishing and removes the obsolete in-app downloads page.

What's Changed

• Restore simple best-effort Zapstore publishing by @AnthonyRonning in #841
• Remove obsolete app downloads page by @AnthonyRonning in #842
• Centralize Maple GitHub repository metadata by @AnthonyRonning in #840
• Promote Pages production after stable releases by @AnthonyRonning in #844
• ci: canary sccache 0.16 on Windows PR builds by @AnthonyRonning in #843
• ci: share Windows sccache across build lanes by @AnthonyRonning in #845
• chore: bump version to 3.3.9 by @AnthonyRonning in #846
• Import OpenSecret SDK with history by @AnthonyRonning in #847
• ci: route monorepo checks by component by @AnthonyRonning in #848
• docs: add monorepo SDK agent guidance by @AnthonyRonning in #849
• build: consume the in-tree TypeScript SDK by @AnthonyRonning in #850
• Import maple-proxy into proxy/ with history by @AnthonyRonning in #851
• ci: integrate proxy checks into Maple by @AnthonyRonning in #853
• build: use in-tree proxy and Rust SDK by @AnthonyRonning in #854
• release: attach proxy artifacts to Maple releases by @AnthonyRonning in #855
• Document in-tree SDK and proxy workflows by @AnthonyRonning in #856
• Add get_model_catalog to Rust SDK by @benthecarman in #852
• ci: cache Windows Cargo sources by @AnthonyRonning in #857
• ci: revert Windows Cargo source cache by @AnthonyRonning in #858
• Default chat model to Quick for all plans by @AnthonyRonning in #859

Full Changelog: v3.3.8...v3.3.9

v3.3.8

Highlights

• Updates Agent Mode to Goose 1.47.0, including the matching ACP and MCP compatibility work.
• Makes native Maple downloads easier to find from web Settings and improves the mobile message-copy action.
• Desktop updates now prefer Maple's protected updater endpoint at updates.trymaple.ai, with GitHub retained as a fallback.
• Updates the OpenSecret React SDK with the Firefox GET/HEAD request-body fix, and hardens release, updater, and Zapstore verification.

What's Changed

• chore: bump version to 3.3.8 by @AnthonyRonning in #827
• Fix user-message copy action on mobile by @AnthonyRonning in #829
• feat: surface native app downloads in web About settings by @AnthonyRonning in #828
• Bump Agent Mode Goose pin to 1.47.0 by @AnthonyRonning in #819
• Add updates.trymaple.ai Worker that 404s until first publish by @AnthonyRonning in #831
• Fail closed on Maple app release identity and prerelease follow-ons by @AnthonyRonning in #832
• Publish updater metadata to Cloudflare by @AnthonyRonning in #833
• Attach updater domain through Cloudflare API by @AnthonyRonning in #834
• Expose updater metadata on its Worker URL by @AnthonyRonning in #835
• Verify updater publishing on updates.trymaple.ai by @AnthonyRonning in #836
• Publish updater metadata automatically after releases by @AnthonyRonning in #837
• chore: bump OpenSecret React SDK to 3.5.2 by @AnthonyRonning in #838
• Use Maple updates Worker for desktop updates by @AnthonyRonning in #839

Full Changelog: v3.3.7...v3.3.8

v3.3.7

What's Changed

• fix(windows): prevent Agent task creation stack overflow by @AnthonyRonning in #821
• chore: bump version to 3.3.7 by @AnthonyRonning in #820
• Allow disabling automatic updates by @AnthonyRonning in #822
• Require explicit installation for downloaded updates by @AnthonyRonning in #823
• security: enforce unsoundness advisories by @AnthonyRonning in #824
• chore: update spin to 0.9.9 by @AnthonyRonning in #826
• Fail Agent runs cleanly after SDK auth recovery by @AnthonyRonning in #825

Full Changelog: v3.3.6...v3.3.7

v3.3.6

Agent Mode now supports image attachments. This release also updates the embedded Goose runtime, asks before applying Linux package updates, and strengthens dependency and Rust advisory checks.

What's Changed

• chore: bump version to 3.3.6 by @AnthonyRonning in #810
• Bump Agent Mode Goose pin to 1.46.0 by @AnthonyRonning in #788
• ci: enforce locked dependency resolution by @AnthonyRonning in #811
• Clarify Buzz agent connection setup by @AnthonyRonning in #814
• feat(agent): support image attachments by @AnthonyRonning in #815
• Ask before installing updates on Linux deb/rpm by @benthecarman in #813
• Security: enforce daily RustSec advisory checks by @AnthonyRonning in #816

New Contributors

• @benthecarman made their first contribution in #813

Full Changelog: v3.3.5...v3.3.6

v3.3.5

Maple 3.3.5

Word documents, now supported

• Upload and chat with both .doc and .docx files, alongside PDFs.
• Word text is extracted locally by Maple, with strict format validation and size limits.

A much more capable Agent Mode

• Connect external Agent clients through ACP with guided setup for Paseo and Buzz.
• ACP now supports richer sessions, model discovery, tool activity, usage, cancellation, and transient loopback MCP tools.
• Add reversible per-project trust: decide whether a project’s skills are available to the agent, change that decision later, and keep the choice scoped to the canonical project path.
• Agent task and project hover cards now show when they were last updated.

Security and reliability

• Added a CI supply-chain gate that blocks the known compromised Rust-crate versions from the recent crates.io incident.
• Improved version-bump tooling so release preparation works consistently across macOS, Linux, and Nix environments.

What's Changed

• chore: bump version to 3.3.5 by @AnthonyRonning in #800
• feat(chat): support DOC and DOCX uploads by @AnthonyRonning in #806
• feat(agent): show last-updated date on sidebar hover info card by @AnthonyRonning in #803
• docs: prefer Codex built-in Computer Use by @AnthonyRonning in #807
• security: block compromised Rust crates by @AnthonyRonning in #809
• feat(agent): expand ACP support for Paseo by @AnthonyRonning in #799
• feat(agent): add reversible project trust across Desktop and ACP by @AnthonyRonning in #801
• feat(agent): simplify ACP connection setup by @AnthonyRonning in #808

Full Changelog: v3.3.4...v3.3.5

v3.3.4

Highlights

• Queue follow-up requests during active Agent Mode work, edit or remove them before they run, and steer a queued instruction into the current turn when needed.
• Navigate and recall prior Agent prompts more reliably.
• Improve resilience to transient inference failures, and update the OpenSecret SDK and Maple Proxy.

What's Changed

• chore: bump version to 3.3.4 by @AnthonyRonning in #777
• chore: update OpenSecret SDK and Maple Proxy by @AnthonyRonning in #778
• docs: add CUA targeting for macOS Open/Save panels by @AnthonyRonning in #789
• fix(agent): retry transient inference failures for ~3 minutes by @AnthonyRonning in #790
• feat: add Agent prompt history navigation by @marksftw in #784
• feat(agent): Maple-owned mid-run message queue by @AnthonyRonning in #781
• chore: disable Tauri file watcher on local justfile dev by @AnthonyRonning in #793
• feat(agent): steer a queued follow-up into the current turn by @AnthonyRonning in #794

Full Changelog: v3.3.3...v3.3.4

v3.3.3

Highlights

• Resize and collapse Chat and Agent Mode sidebars, with preferences preserved across relaunches.
• Continue Markdown bullets, numbered lists, and task lists automatically while composing.
• Rename Agent tasks, with improved rename focus and ordering.
• Improve anonymous signup and native OAuth callback reliability.
• Target Android 16 / API 36.
• Bind enclave trust roots to the selected build environment and update vulnerable dependencies.

What's Changed

• Bump Maple version to 3.3.3 by @AnthonyRonning in #760
• build(android): target Android 16 / API 36 by @AnthonyRonning in #761
• Fix anonymous signup Account ID handoff by @AnthonyRonning in #765
• docs: add agent development and validation guidance by @AnthonyRonning in #766
• Make Chat and Agent sidebars resizable by @marksftw in #759
• Guard native OAuth callbacks by @AnthonyRonning in #772
• Continue Markdown lists in chat composers by @AnthonyRonning in #767
• chore: update vulnerable frontend and Rust dependencies by @AnthonyRonning in #770
• fix: bind enclave trust roots to build environment by @AnthonyRonning in #774
• feat: allow renaming Agent tasks by @marksftw in #771
• fix(agent): harden task rename ordering and focus by @AnthonyRonning in #776

Full Changelog: v3.3.2...v3.3.3