v3.4.3

Maple Research 3.4.3 improves chat usability, subscription recovery on iOS, and handling of usage limits and device clock errors.

Highlights

• Restore upgrade prompts when usage is exhausted and preserve drafts when a request is rejected.
• Add iOS in-app subscription purchase and recovery flows, with clearer billing information before account deletion.
• Improve composer controls, chat footers, sidebar menus, and long-title display.
• Explain device clock problems that prevent secure connections.
• Include maple-proxy 0.4.1 and improve signed installer and download delivery.

This GitHub release provides Research desktop and Android downloads. App Store and Google Play availability follow their separate release processes.

What's Changed

• Accept GHCR null tags for untagged public proxy packages by @AnthonyRonning in #932
• Show tool summaries at full row width by @benthecarman in #933
• Fix settings dropdowns and task permission default by @benthecarman in #935
• sdk: add notBefore leeway to attestation checks and explain device clock errors by @AnthonyRonning in #936
• Install frontend deps before format and format:check by @AnthonyRonning in #939
• Pin clients to SDK 4.0.1 and surface device clock guidance by @AnthonyRonning in #937
• Add Codex as an external agent for Maple tasks by @benthecarman in #934
• Prepare Maple 3.4.2 and maple-proxy 0.4.1 releases by @AnthonyRonning in #938
• Share the recovered login PATH with task tools on macOS by @AnthonyRonning in #941
• Fix stale code references in Agent component docs by @AnthonyRonning in #942
• Fix GPUI branch watcher read-feedback loop on Linux by @AnthonyRonning in #946
• Auto-approve web_search in Ask first without a classifier by @AnthonyRonning in #949
• Trust home and the launch directory without a project-trust prompt by @AnthonyRonning in #951
• Make Tab reach the next login field in maple-gpui by @benthecarman in #950
• Resume parent tasks with background agent results by @benthecarman in #955
• Give maple-gpui a readable chat type system by @AnthonyRonning in #952
• Support Continuum GLM Flash on legacy and v2 routers by @AnthonyRonning in #953
• Harden Unix process-group cancellation tests by @AnthonyRonning in #956
• Add per-task integration selection by @benthecarman in #954
• Approve dev OpenSecret EIF for GLM Flash routing by @AnthonyRonning in #957
• Approve production EIF for Continuum Flash routing by @AnthonyRonning in #960
• ci: component-aware pre-commit hook for the monorepo by @AnthonyRonning in #959
• Run CodeQL on master and weekly, not every PR by @AnthonyRonning in #961
• agent: lay out markdown tables from measured columns by @AnthonyRonning in #962
• Fix image helper routing and raise V2 Flash Continuum allocation by @AnthonyRonning in #963
• Approve dev and prod EIFs for image helper routing by @AnthonyRonning in #964
• Keep public guides self-contained and refresh backend skills by @AnthonyRonning in #965
• Update Tinfoil router hostnames to tinfoil.sh by @AnthonyRonning in #966
• Approve dev and prod EIFs for Tinfoil hostname migration by @AnthonyRonning in #967
• ci: pre-commit hook sets the opensecret dev-shell knobs on nix develop by @AnthonyRonning in #969
• Fix initial sidebar scroll position by @benthecarman in #958
• opensecret: health-aware Auto model selection for Router V2 by @AnthonyRonning in #968
• OpenSecret: standard Flash circuits and safe inference diagnostics by @AnthonyRonning in #973
• opensecret: approve dev EIF for Auto V2 routing follow-ups by @AnthonyRonning in #974
• Approve production Auto Router V2 EIF measurements by @AnthonyRonning in #975
• feat(opensecret): support per-project OAuth callback allowlists by @AnthonyRonning in #978
• Put timestamp last in assistant footer by @benthecarman in #977
• Protect app signing credentials with environment boundaries by @AnthonyRonning in #985
• sdk: add optional OAuth callback selection by @AnthonyRonning in #979
• Handle cancellation rejections when chat deletion reaches its deadline by @AnthonyRonning in #980
• sdk: prepare TypeScript 4.1.1 and Rust 4.0.2 releases by @AnthonyRonning in #987
• Import Nitro Toolkit into the OpenSecret backend by @AnthonyRonning in #984
• auth: add standalone hosted sign-in application and Pages delivery by @AnthonyRonning in #986
• Give unstyled text a readable default in both themes by @benthecarman in #982
• test: verify OAuth callback completion across encrypted transports by @AnthonyRonning in #990
• Give sidebar tasks one active-to-deleted ladder by @benthecarman in #989
• Approve dev and prod OAuth callback EIF measurements by @AnthonyRonning in #991
• Add Claude Code delegation to Maple Agent by @benthecarman in #976
• maple-agent: add platform word and line editing shortcuts by @maple-engineering[bot] in #992
• maple-agent: one popup primitive for every menu (fixes #997) by @AnthonyRonning in #1002
• Add Maple Dev as a separate internal TestFlight app by @AnthonyRonning in #998
• Add iOS StoreKit bridge and authenticated recovery adapter by @AnthonyRonning in #981
• Connect Apple purchases and recovery to Maple account billing by @AnthonyRonning in #1001
• Handle the internal TestFlight marker in Dev IPA verification by @AnthonyRonning in #1012
• maple-agent: add macOS Hide, Hide Others, and Show All by @maple-engineering[bot] in #1014
• fix: hide sidebar ellipsis after dismissing its menu by @doowta in #1005
• fix: avoid scroll-lock shifts in composer dropdowns by @doowta in #1009
• fix: fade long sidebar chat and project titles by @doowta in #1004
• Rename Agent package/binary to maple-agent and move shared Cargo caches under ~/.cache/cargo-build by @AnthonyRonning in #993
• Update Maple account emails by @maple-engineering[bot] in #1018
• Require billing cleanup before account deletion by @AnthonyRonning in #1017
• Approve dev enclave for account deletion billing cleanup by @AnthonyRonning in #1019
• feat: add hover tooltips to composer controls by @doowta in #1006
• Clarify billing consequences before account deletion by @AnthonyRonning in #1025
• fix: send replies to Maple email to support by @doowta in #1021
• fix: show the project name as the email sender by @doowta in #1020
• Route both GLM models 75% to Continuum and expand Flash context by @AnthonyRonning in #1026
• Approve OpenSecret GLM routing and Flash context EIF measurements by @AnthonyRonning in #1027
• ci: serialize production iOS export and TestFlight upload by @AnthonyRonning in #1028
• Tighten OpenSecret startup configuration error handling by @AnthonyRonning in #1029
• Approve OpenSecret EIF measurements from dbd287b by @AnthonyRonning in #1030
• Preserve forwarder bytes across socket write timeouts by @AnthonyRonning in #988
• fix: surface safe completion provider errors by @AnthonyRonning in #995
• Run OpenSecret hook checks for entrypoint changes by @AnthonyRonning in #1037
• Default enclave logging to info,opensecret=debug by @AnthonyRonning in #1036
• Remove trace-level logs from OpenSecret by @AnthonyRonning in #1031
• Keep payloads out of OpenSecret parse-error logs by @AnthonyRonning in #1032
• Tighten OpenSecret log invariants by @AnthonyRonning in #1033
• Remove unused KV API from OpenSecret and the SDKs by @AnthonyRonning in #1035
• ci: stop running client CI for SDK-only changes by @AnthonyRonning in #1039
• sdk: prepare TypeScript 4.2.0 and Rust 4.1.0 releases by @AnthonyRonning in #1038
• Serialize Goose config bootstrap across processes; allow remote transient MCP servers by @benthecarman in #994
• Start new tasks as drafts and title the header by the pane by @benthecarman in #1000
• Upgrade GPUI embedded Goose to v1.52.0 by @AnthonyRonning in #1011
• Approve DEV OpenSecret measurements for the September 25 release by @AnthonyRonning in #1047
• docs: keep Continuum proxy recovering after DNS failures by @AnthonyRonning in #1046
• opensecret: use each model creator's sampling and reasoning-history rules by @AnthonyRonning in #1040
• Retire Router V1 and the routing feature flag by @AnthonyRonning in #1041
• Isolate provider rate limits by model by @AnthonyRonning in #1042
• Prefer GLM Flash for paid Auto Quick by @AnthonyRonning in #1043
• Approve DEV EIF for Responses sampling and router cleanup by @AnthonyRonning in #1048
• Approve production OpenSecret EIF for the tested router release by @AnthonyRonning in #1049
• Redact secrets from OpenSecret Debug output by @AnthonyRonning in #1055
• Reduce OpenSecret log noise by @AnthonyRonning in #1053
• Trim OpenSecret's stale log filter and unused dependencies by @AnthonyRonning in #1054
• maple-agent: adopt a task's locked model in the selector by @maple-engineering[bot] in #1051
• Clarify development lanes and shorten component guidance by @AnthonyRonning in #1052
• sdk: bump transitive brace-expansion to clear new high advisories by @AnthonyRonning in #1056
• Add a Linux x86_64 local Continuum proxy recipe by @maple-engineering[bot] in #1059
• maple-agent: open Documents/Maple as the default workspace by @maple-engineering[bot] in #1057
• ci: consolidate stable Xcode selection for macOS 26 by @AnthonyRonning in #1061
• fix(opensecret): upgrade AWS JSON runtime for CVE-2026-18140 by @AnthonyRonning in #1065
• Protect publishing build inputs and document approval boundaries by @AnthonyRonning in #1066
• Document automatic signing for protected master and release tags by @AnthonyRonning in #1067
• Harden Nitro parent helper images and add ARM64 validation by @AnthonyRonning in #1068
• Restore Research upgrade prompts for exhausted usage by @AnthonyRonning in #1064
• Upgrade GPUI Goose to v1.53.0 by @AnthonyRonning in #1063
• Pin fixed PCRE2 in OpenSecret parent helper images by @AnthonyRonning in #1070
• Update OpenSecret EIF kernel to Linux 6.12.112 by @AnthonyRonning in #1069
• Approve signed OpenSecret EIF PCRs for kernel 6.12.112 by @AnthonyRonning in #1071
• Prepare Maple Research 3.4.3 release by @AnthonyRonning in #1074
• Publish stable Research download links through the updates Worker by @AnthonyRonning in #1073
• Build isolated Dev and Prod Agent desktop packages on master by @AnthonyRonning in #1072
• Make Agent signing keychain visible to codesign by @AnthonyRonning in #1077
• Fix Gatekeeper tool paths in Agent packaging by @AnthonyRonning in #1078
• Fix Research release preflight for unchanged CI inputs by @AnthonyRonning in #1079

New Contributors

• @maple-engineering[bot] made their first contribution in #992
• @doowta made their first contribution in #1005

Full Changelog: v3.4.1...v3.4.3