v3.4.9

Chat 3.4.9 makes password reset more forgiving, fixes the usage chart when Extra credits are in use, and prepares the pricing page for more plan sizes.

Highlights

• Password reset: the reset form accepts both the short and the new longer reset codes, and no longer rejects a code for lowercase letters or stray spaces.
• Usage chart: the chart on the Usage page now includes Extra credits, so it keeps rising after the plan's allowance is used, and the note under it no longer promises that Extra credits last until the reset.
• Plans: the pricing page and the iOS paywall can offer more than one size of a plan.
• Security: updated rustix for RUSTSEC-2026-0486 and replaced yanked dependencies.

This release also carries the groundwork for account recovery codes, which is not switched on yet.

What's Changed

• Add Kimi K3.1 Pro on Tinfoil by @AnthonyRonning in #1472
• Approve dev OpenSecret EIF measurements from 3355d6a by @AnthonyRonning in #1473
• Bump Chat to 3.4.9 by @AnthonyRonning in #1474
• Approve prod OpenSecret EIF measurements from 13d75aa by @AnthonyRonning in #1475
• Prepare dedicated inference guest for uncensored CVM update by @AnthonyRonning in #1476
• Approve Dev and Prod OpenSecret EIF measurements from 5f23871 by @AnthonyRonning in #1478
• fix(agent): make composer corner radii concentric with the box by @matthewrball in #1466
• Route DeepSeek models to their updated dedicated guests by @AnthonyRonning in #1480
• Approve Dev and Prod OpenSecret EIF measurements from d8fa269 by @AnthonyRonning in #1482
• test(agent): flush effects instead of polling for a released screen by @AnthonyRonning in #1464
• test(agent): write fake executables from a child process by @AnthonyRonning in #1463
• fix(agent): keep the sign-in page template LF on Windows by @AnthonyRonning in #1484
• fix(opensecret): enforce 8-64 character password policy on user-account password boundaries by @w3irdrobot in #1477
• fix(agent): stop two tests from blocking Mac commits by @AnthonyRonning in #1465
• fix(agent): make Maple Work readable through accessibility by @AnthonyRonning in #1451
• Chart Extra credits on the usage plan card by @AnthonyRonning in #1481
• agent: extend live Mexican Spanish localization across the app by @w3irdrobot in #1372
• Compact Responses within the sliding window in one summary by @AnthonyRonning in #1485
• agent: flag stale translations and clean up the catalog by @AnthonyRonning in #1489
• feat(agent): connect Vana and Home Assistant by address by @AnthonyRonning in #1488
• fix(agent): record the Spanish review of the address strings by @AnthonyRonning in #1493
• test(agent): stop the app tests opening Notion in the browser by @AnthonyRonning in #1495
• feat(agent): add Read only, Auto and Full access permission modes by @AnthonyRonning in #1490
• fix(agent): don't start a second rebuild of a just-finished history by @AnthonyRonning in #1494
• fix(agent): report which Windows installer check failed and install in one transaction by @AnthonyRonning in #1492
• Bump Work to 0.0.19 by @AnthonyRonning in #1497
• Bump Work to 0.0.20 by @AnthonyRonning in #1498
• fix(agent): fix flaky Agent tests and a stale store check that paused the chat by @AnthonyRonning in #1496
• fix(agent): show why Maple could not start on macOS by @AnthonyRonning in #1501
• fix(agent): let a paired computer change a remote task's permission mode by @AnthonyRonning in #1502
• fix(agent): tell Windows users how to recover from a failed install by @AnthonyRonning in #1499
• Bump Work to 0.0.21 by @AnthonyRonning in #1503
• fix(agent): retry macOS release DMG creation when hdiutil is busy by @AnthonyRonning in #1504
• fix(agent): update rmcp HTTP client to 3.9.0 by @AnthonyRonning in #1522
• fix(deps): replace yanked crates flagged by cargo-deny by @w3irdrobot in #1526
• fix(agent): stop refusing Windows installs over permissions Maple does not own by @AnthonyRonning in #1518
• Agent: bring over the CPython worker runtime from #897 by @AnthonyRonning in #1409
• Agent: give every task a persistent python scratchpad by @AnthonyRonning in #1410
• fix(agent): one canvas beside the sidebar, with Settings' Back in the title bar by @matthewrball in #1508
• Agent: bundle the python tool's CPython in macOS apps by @AnthonyRonning in #1412
• Agent: bundle the python tool's CPython in Linux packages by @AnthonyRonning in #1414
• Agent: Settings → Tools, with the python tool off by default by @AnthonyRonning in #1505
• fix(agent): check for updates through the configured proxy by @AnthonyRonning in #1531
• Move the Web switch to Settings → Tools by @AnthonyRonning in #1506
• Say when to use the python tool and how it differs from a script by @AnthonyRonning in #1533
• Bump Work to 0.0.22 by @AnthonyRonning in #1539
• Agent: regroup Settings into Workspace, Connections, and Account & System by @matthewrball in #1507
• Agent: bring the web Usage page to Settings → Usage by @matthewrball in #1512
• Agent: show Account & Security with a shield-user icon in the Settings menu by @matthewrball in #1513
• Catalog: serve model picker groups by @AnthonyRonning in #1538
• Require a paid plan with usage remaining for embeddings by @AnthonyRonning in #1542
• Show exceptions from threads in the python cell that started them by @AnthonyRonning in #1536
• Approve dev and prod OpenSecret EIF measurements from 4b91700 by @AnthonyRonning in #1543
• Ask less often in Auto by @AnthonyRonning in #1544
• fix(agent): Settings dialog and Usage page follow-ups by @AnthonyRonning in #1541
• Add a generic request limiter and limit password resets by @AnthonyRonning in #1546
• Approve OpenSecret password-reset limiter EIF measurements by @AnthonyRonning in #1547
• Add German localization to Maple Work by @w3irdrobot in #1529
• Accept 32-character password reset codes in Research by @w3irdrobot in #1550
• Make the Research Linux AppImage work outside the Nix build by @w3irdrobot in #1487
• Bump Work to 0.0.23 by @AnthonyRonning in #1553
• Agent: carry the python tool's CPython inside the Windows executable by @AnthonyRonning in #1537
• Agent: pick a new task's folder by the prompt and clear the task top bar by @matthewrball in #1517
• Agent: start projects from scratch by @matthewrball in #1516
• fix(agent): error on an unrecognized command instead of opening the desktop app by @w3irdrobot in #1549
• Agent: set the model's effort on a slider in the model chip by @matthewrball in #1520
• Agent: list models in the catalog's groups by @AnthonyRonning in #1540
• Agent: keep the folder readable in the project chip and quiet the picker by @AnthonyRonning in #1554
• Agent: compact question card that answers on one click by @AnthonyRonning in #1557
• Agent: dock the out-of-usage notice in the composer and make status banners neutral by @matthewrball in #1510
• Agent: show extra credits in the Settings menu and composer by @matthewrball in #1514
• Agent: tell team members their own extra credits keep them going by @AnthonyRonning in #1559
• Bump Work to 0.0.24 by @AnthonyRonning in #1561
• Agent: show the model chip's effort level without waiting for the host by @AnthonyRonning in #1560
• Agent: follow a remote computer's update without a manual check by @AnthonyRonning in #1562
• Deps: bump rustix to 1.1.6 for RUSTSEC-2026-0486 by @AnthonyRonning in #1569
• Agent: stop weighing the whole transcript on every streamed chunk by @AnthonyRonning in #1566
• Route GLM 5.3 account buckets 99 percent to Continuum by @AnthonyRonning in #1563
• Recovery codes and seed-preserving password reset by @w3irdrobot in #1470
• Approve dev OpenSecret EIF measurements for recovery credentials by @AnthonyRonning in #1579
• Approve prod OpenSecret EIF measurements for recovery credentials by @AnthonyRonning in #1581
• Agent: a Quit confirmation that says what quitting stops by @matthewrball in #1568
• Agent: build SQLCipher 4.20.0 for RUSTSEC-2026-0502 by @AnthonyRonning in #1597
• Remove retired Kimi K3 from OpenSecret by @AnthonyRonning in #1602
• Loosen the Research reset-code check to non-empty input by @w3irdrobot in #1598
• Approve Dev EIF measurements for Kimi K3 retirement by @AnthonyRonning in #1603
• Approve Prod EIF measurements for Kimi K3 retirement by @AnthonyRonning in #1604
• Add Korean localization to Maple Work by @w3irdrobot in #1605
• chore(ci): update GitHub Actions dependencies by @w3irdrobot in #1593
• fix(agent): refresh the icon theme after a Linux first install by @w3irdrobot in #1600
• Agent: show the remaining native dialogs in the quit prompt's design by @matthewrball in #1601
• Agent: a startup failure window that says the failure plainly by @matthewrball in #1594
• Read plan identity from billing and offer plan sizes in Research by @AnthonyRonning in #1564
• Research iOS: offer a plan's larger sizes on the paywall by @AnthonyRonning in #1609
• Agent: read plan identity from billing instead of the plan name by @AnthonyRonning in #1565
• Agent: make the late-output worker test independent of drain time by @AnthonyRonning in #1614
• Agent: move gpui to Zed c7bea343 by @AnthonyRonning in #1571
• Agent: add purposeful motion across chat, composer, menus and settings by @AnthonyRonning in #1573
• Agent: rework the motion layer on springs, with timing in one place by @AnthonyRonning in #1575
• Agent: show message image thumbnails and fitted previews by @AnthonyRonning in #1612

Full Changelog: v3.4.8...v3.4.9