Repository navigation
ThinkWatch Lite 2026.10.22
Upgrade notes:
- The bundled core is now 0.75.0. The control-plane protocol stays at 48, so remote servers on core 0.74.0 keep working.
- Nothing is cleared; the request history, stored payloads and settings carry over.
- Plugins: changes a hook makes to the request or tool call it receives now take effect without returning it. Before, they were dropped unless the hook returned the object. The two built-in plugins are updated unless their code was edited.
Security:
- The dangerous-command check now looks at every choice of a streamed Chat Completions answer and every candidate of a Gemini answer, not only the first. An upstream could otherwise get a tool call past the check by placing it in a second choice, or by spreading its arguments across two choices.
- In a streamed answer with several choices, placeholders are restored in each choice separately; the choices could get mixed before.
Plugins:
- Plugins have a global
twwith helpers for common edits:tw.appendSystem,tw.texts,tw.toolCalls,tw.mapStrings,tw.replace,tw.streamReplace,tw.linesandtw.pairs.tw.streamReplacereplaces text in streamed answers, including a match that spans two pieces of the stream. The template for a new plugin uses them. See the Plugins page of the documentation. - A stream-mode plugin that held back text and cut a placeholder in two left the placeholder in the answer instead of the original value. This is fixed.
- A stream-mode plugin that failed and was skipped could lose or reorder the text it was holding. This is fixed.
- In answers with several choices, plugins keep each choice apart, and every choice of a non-streamed answer goes through them.
- A stream-mode plugin that only holds text back, without changing it, is no longer recorded as having changed the answer.
Other:
- rustls 0.23.46 (RUSTSEC-2026-0346 to -0349).
Downloads
| Platform | File |
|---|---|
| macOS, Apple silicon | ThinkWatch-Lite-2026.10.22-darwin-arm64.dmg |
| Windows, x64, installer | ThinkWatch-Lite-2026.10.22-windows-x64-setup.exe |
| Windows, x64, portable | ThinkWatch-Lite-2026.10.22-windows-x64-portable.zip |
| Windows, ARM64, installer | ThinkWatch-Lite-2026.10.22-windows-arm64-setup.exe |
| Windows, ARM64, portable | ThinkWatch-Lite-2026.10.22-windows-arm64-portable.zip |
| Linux, x86_64 | ThinkWatch-Lite-2026.10.22-linux-x86_64.AppImage |
| Linux, aarch64 | ThinkWatch-Lite-2026.10.22-linux-aarch64.AppImage |
Each file is published with a .sha256 file beside it. latest.json is the manifest for in-app updates, and install.sh is the Linux install script.
On Windows, the portable ZIP runs without installation or administrator rights: extract it to any writable folder and start ThinkWatch Lite.exe. Its settings stay in the data folder beside it, separate from an installed copy, and it updates itself in place.
On macOS, Homebrew installs the same disk image:
brew install --cask thinkwatchproject/tap/thinkwatch-liteOn Linux, the install script downloads the AppImage for the machine's architecture, checks its SHA-256 and installs it as ~/Applications/ThinkWatch-Lite.AppImage:
curl -fsSL https://github.com/ThinkWatchProject/ThinkWatch-Lite/releases/latest/download/install.sh | shBoth commands install the latest release. First-launch steps for each platform, such as removing the quarantine attribute from a copy downloaded on macOS, are described in the README.
The ThinkWatch Lite page describes each feature, and the documentation covers installing, connecting clients and routing.
Verifying a download
A .sha256 file holds the SHA-256 of the file followed by its name. With both files in the current directory, on macOS:
shasum -a 256 -c ThinkWatch-Lite-2026.10.22-darwin-arm64.dmg.sha256On Linux:
sha256sum -c ThinkWatch-Lite-2026.10.22-linux-x86_64.AppImage.sha256On Windows, in PowerShell, the following prints True when the installer matches:
(Get-FileHash .\ThinkWatch-Lite-2026.10.22-windows-x64-setup.exe).Hash -eq (Get-Content .\ThinkWatch-Lite-2026.10.22-windows-x64-setup.exe.sha256).Split()[0]The Homebrew cask and the Linux install script check the SHA-256 themselves.
What's Changed
- Bump rustls to 0.23.46 (RUSTSEC-2026-0346 to -0349) by @fylorn in #337
- 2026.10.22: pin core v0.75.0; plugin template uses tw by @fylorn in #338
Full Changelog: v2026.10.21...v2026.10.22