OpenSquilla 0.5.4

OpenSquilla 0.5.4

Overview

OpenSquilla 0.5.4 is a feature and maintenance release for the 0.5 stable
line. It introduces a beta for versioned, single-file HTML editing in Electron
Desktop, optional Runtime Packs with slimmer installers, per-chat model routing,
and a more resilient C3 multi-model fusion path. It also improves chat
continuity, Desktop startup and recovery, provider behavior, Skills,
attachments, process lifecycle handling, and the Web interface.

Existing gateway configuration, chats, Agents, memory, and scheduled jobs stay
in place. The Gateway applies additive database migrations automatically; no
manual data transfer is required. Users upgrading from 0.5.3 should quit the
running Desktop app or gateway, install 0.5.4 directly over the current
installation, and restart OpenSquilla.

✨ What's Improved

HTML document editing beta

0.5.4 introduces an early beta for editing single-file HTML attachments and
deliverables in Electron Desktop. It provides Preview, Source, Versions, and
Changes views, selected-element instructions, and Agent-assisted candidate
edits. The workflow is intended for evaluation and may still require manual
source review, retry, or revert.

• The beta is limited to single-file UTF-8 HTML. It does not cover project
  trees, Office or PDF documents, WYSIWYG editing, or collaborative editing.
• Candidate changes remain separate until the user chooses to commit. Review
  Preview and Changes before accepting an edit.
• An Agent-assisted attempt may return no change or need another instruction;
  committed changes can be reviewed by version and reverted as a whole.
• Native element selection requires the current Electron bridge. Browser
  clients and older Desktop bridges remain view-only for this beta.

Runtime Packs and slimmer Desktop installers

• Python, Node.js, and Windows Git Bash are now optional Runtime Packs managed
  from Settings → Security & Privacy → Sandbox → Runtimes. Installing a
  component enables it automatically.
• Downloads use an immutable catalog with GitHub and Beijing OSS source
  fallback, exact integrity checks, resumable transfers, cancellation, removal,
  and cache discard. System-installed runtimes are never modified or removed.
• Desktop installers still include the Gateway and Vue control console but no
  longer bundle developer runtimes, reducing installer size. The 0.5.3 bundled
  runtimes are intentionally not migrated; install the Runtime Packs you need
  after upgrading.

Model routing, Ensemble, and providers

• Each chat can keep its own Direct, Router, or Ensemble strategy. The global
  strategy remains the default for new chats, and existing chats adopt the
  current global strategy atomically on first use.
• C3 can use the shared multi-model fusion plan with resilient fixed-model
  fallback, independent image routing, transactional tool attempts, and clearer
  setup and activity presentation.
• Fresh and managed TokenRhythm configurations use DeepSeek V4 Flash 0731 for
  C0, DeepSeek V4 Pro 0813 for Direct and C1, Kimi K2.7 Code for C2, and GLM
  5.2 B5 fusion for C3. Existing custom inline tiers are not migrated.
• Qwen prompt caching, Zhipu reasoning endpoint matching, Gemini CSV schemas,
  generic custom pricing, routed cost breakdowns, reasoning-only retries, and
  Ensemble usage and fallback behavior are more reliable.

Chats, tasks, and attachments

• Web chat confirms durable turn saves without delaying the answer or disabling
  input. Activity ordering, router panels, steering boundaries, task ownership,
  clocks, pending input, and scroll position recover more consistently across
  reconnects and session switches.
• Stop acknowledges promptly for provider and ordinary tool work while letting
  in-flight filesystem mutations settle safely before the terminal turn is
  published.
• Large attachments use the complete request capacity during routing. Uploaded
  images remain available to vision-capable models and are also materialized
  for workspace tools.
• Session history pagination, first-query session lookup, transcript reads,
  prompt-cache continuity, slash-command input, Composer paste behavior, and
  repeated-output handling have been hardened.

Desktop, Web, and platform reliability

• Desktop startup is decoupled from Gateway readiness and now reports monotonic
  milestones. Recovery starts faster, macOS Keychain failures have a guided
  retry path, and Windows process-tree helpers and installer progress are more
  reliable.
• Settings are organized into ten stable destinations, including combined
  Security & Privacy controls and a first-level Memory page. Existing Settings
  deep links continue through compatibility aliases.
• Sidebar interactions, long-session scrolling, Workbench resizing, activity
  details, usage expansion, automation empty states, memory import, and global
  controls are more consistent.
• Windows Safe execution, process-tree cancellation, Gateway shutdown,
  Skill-catalog digest verification, and CLI error exits now fail more
  predictably across supported platforms.

Downloads

Recommended desktop downloads:

• macOS desktop installer: OpenSquilla-0.5.4-mac-arm64.dmg
• macOS desktop zip: OpenSquilla-0.5.4-mac-arm64.zip
• Windows desktop installer: OpenSquilla-0.5.4-win-x64.exe

Users in Mainland China can use the stable direct installer links on the
Alibaba Cloud OSS mirror:

• macOS Apple Silicon: https://opensquilla-releases.oss-cn-beijing.aliyuncs.com/releases/latest/OpenSquilla-mac-arm64.dmg
• Windows x64: https://opensquilla-releases.oss-cn-beijing.aliyuncs.com/releases/latest/OpenSquilla-win-x64.exe

Each alias is replaced only after the published release passes checksum
verification. Versioned OSS and GitHub Release files remain available for
pinned downloads.

The Windows desktop installer is currently unsigned. See the
code signing policy
before installation.

Terminal and automation downloads:

• Python wheel: opensquilla-0.5.4-py3-none-any.whl
• Checksums: SHA256SUMS

Updater metadata:

• latest-mac.yml
• latest.yml
• *.blockmap

No Windows Portable assets are published for 0.5.4. Existing 0.4.x Portable
downloads remain on their original release pages as legacy sources; do not
expect a 0.5.4 Portable zip or a Portable /releases/latest/download/ alias.

Privacy and third-party attribution are documented in
PRIVACY.md
and
THIRD_PARTY_NOTICES.md.

Container users can pull the multi-architecture gateway image:

docker pull ghcr.io/opensquilla/opensquilla:v0.5.4

The versioned image supports linux/amd64 and linux/arm64. The moving
latest tag follows the most recently verified release tag.

Upgrading from 0.5.3

Quit the running Desktop app and gateway before upgrading. Back up the active
profile first if you may need to recover or roll back.

Install 0.5.4 directly over 0.5.3. Existing configuration, chats, Agents,
memory, and scheduled tasks remain in the active profile. Additive database
migrations run automatically when the Gateway starts.

The 0.5.4 Desktop app uses optional Runtime Packs instead of the developer
runtimes bundled in 0.5.3. Those old bundled runtimes are not copied into the
new application. If a task needs managed Python, Node.js, or Git Bash, install
the corresponding Runtime Pack from Sandbox settings after the upgrade.

Existing chats keep working with older clients. Their per-chat routing mode is
seeded from the current global strategy when first used by 0.5.4. New routing
fields and commit receipts are additive, so clients that do not understand them
may continue through their existing behavior. The HTML editing beta requires
the complete current Electron bridge for native element selection; older or
browser-only clients remain view-only for that capability.

Important

On Windows, users coming from RC3 or an older pre-Preview-4 build must not
uninstall that build first: older uninstallers may delete
%APPDATA%\OpenSquilla. Back up that directory, then install 0.5.4 directly
over the existing installation. Preview 4, 0.5.0, 0.5.1, 0.5.2, 0.5.3, and
0.5.4 installers preserve profile data during a normal uninstall.

On macOS, drag the new app into Applications, eject the DMG, and open the
Applications copy.

CLI users can reinstall the published wheel over the current tool environment:

uv tool install --python 3.12 --force --reinstall-package opensquilla \
  "opensquilla[recommended] @ https://github.com/opensquilla/opensquilla/releases/download/v0.5.4/opensquilla-0.5.4-py3-none-any.whl"

Non-user-initiated network observability can be disabled before startup with
OPENSQUILLA_PRIVACY_DISABLE_NETWORK_OBSERVABILITY=true or:

[privacy]
disable_network_observability = true

The compatibility variables OPENSQUILLA_TELEMETRY_DISABLED=true and
OPENSQUILLA_UPDATE_CHECK_DISABLED=true remain honored.

Acknowledgements

Thanks to the human contributors whose work is newly present in 0.5.4:

• @AmirF194 for tightening Zhipu reasoning
  behavior to official API endpoints.
• @Kiuyor for restoring pasted Composer input
  after stale IME composition state.
• @Liu-RK for improving public release repository
  hygiene.
• @LiuXinchen1997 for the tier-level
  routing foundation used by resilient C3 fusion.
• @Sanjays2402 for finding existing sessions
  on the first search query.
• @ab2ence for C3 fusion and Ensemble fallback,
  provider-state isolation, Qwen prompt caching, usage accuracy, and sidebar
  refinements.
• [@freeaccount-create...

OpenSquilla 0.5.3

OpenSquilla 0.5.3

Overview

OpenSquilla 0.5.3 is a maintenance release for the 0.5 stable line. It adds
durable Goal orchestration, makes long-running chats and queued follow-ups more
resilient, expands Skills and scheduling workflows, refines the Web and Desktop
interfaces, and strengthens recovery, upgrade, sandbox, provider, and usage
behavior.

Existing gateway configuration, chats, Agents, memory, and scheduled jobs stay
in place. The Gateway applies additive database migrations automatically; no
manual data transfer is required. Users upgrading from 0.5.2 should quit the
running Desktop app or gateway, install 0.5.3 directly over the current
installation, and restart OpenSquilla.

✨ What's Improved

Durable Goals and long-running tasks

• Goals can persist across turns and continue automatically with visible
  progress. Pause, resume, edit, clear, and Plan-mode deferral controls keep the
  user in charge of ongoing work.
• Goal state uses additive, automatically applied schema migrations and the
  same shared Agent, task, and turn runtime as ordinary chat. Existing sessions
  remain valid, and clients that do not use Goals continue through their
  existing paths.
• Long-running streams recover more cleanly from renderer reconnects and
  temporary activity gaps, with structured provider activity and bounded
  incremental rendering for large conversations.

Sessions, follow-ups, and history

• Queued follow-ups and attachments are durable across reconnects and preserve
  ordering when an active turn completes. Project handoffs and session forks
  keep their intended context without rewriting existing history.
• Session forks use an additive Gateway RPC and fail visibly and safely against
  older Gateways. No configuration migration is required.
• Compaction is request-safe and deployment-aware, prompt-cache continuity is
  more reliable, and artifact publication no longer depends on unrelated chat
  history work.

Chat and Desktop experience

• The responsive top bar, floating and collapsible composer, sidebar peer
  sections, created-chat cards, session counts, artifact presentation, and
  assistant-answer boundaries have been refined.
• Pending input, flattened tool markers, subagent titles, and streaming edit
  controls now reflect the actual task state more consistently.
• The landing-page “Build me a game” suggestion now sends only the visible,
  localized label. The previously bundled hidden detailed game prompt has been
  removed from every locale and is no longer sent by the client.
• Desktop diagnostics now capture renderer console and crash information, while
  startup ownership, profile targeting, and connection recovery are more
  reliable.

Skills, schedules, and providers

• Community Skills support immutable source resolution, transactional
  management, lifecycle diagnostics, and explicit compatibility boundaries for
  supported instruction-first packages.
• MetaSkills, inline /meta requests, Cron workspace management, disabled-job
  presentation, and default schedule handling are more consistent across the
  shared runtime and management surfaces.
• TokenRhythm model discovery combines the published catalog with declared
  credential entitlements, exposes additive catalog metadata, and clamps
  fallback output limits to the physical model's known capability.
• Model discovery adds optional metadata fields. Existing clients may ignore
  them; strict external decoders should allow the additions before upgrading.
• DeepSeek reasoning replay, provider idle handling, multiline TOML parsing,
  usage receipts on error paths, and model activity presentation are more
  reliable.

Recovery, upgrades, and platform reliability

• Recovery now reserves hard startup blocks for genuine profile locks and
  incompatible newer configuration. Corrupt configuration can be repaired from
  bounded backups with visible evidence, without discarding chats or other
  profile data.
• Update downloads prefer the verified OSS mirror and fail closed on checksum
  mismatches. Windows CI and packaging checks cover the supported release asset
  contract more consistently.
• Sandbox settings now cover Safe/Full defaults, versioned file, command, and
  network policies, live availability canaries, bounded recursive-delete
  backups, bundled runtime pins, LAN CIDR controls, and named tokens.
• TokenRhythm requests and LAN WebSocket access now follow tighter privacy and
  network safeguards. Existing privacy and telemetry opt-outs remain available.

Downloads

Recommended desktop downloads:

• macOS desktop installer: OpenSquilla-0.5.3-mac-arm64.dmg
• macOS desktop zip: OpenSquilla-0.5.3-mac-arm64.zip
• Windows desktop installer: OpenSquilla-0.5.3-win-x64.exe

Users in Mainland China can use the stable direct installer links on the
Alibaba Cloud OSS mirror:

• macOS Apple Silicon: https://opensquilla-releases.oss-cn-beijing.aliyuncs.com/releases/latest/OpenSquilla-mac-arm64.dmg
• Windows x64: https://opensquilla-releases.oss-cn-beijing.aliyuncs.com/releases/latest/OpenSquilla-win-x64.exe

Each alias is replaced only after the published release passes checksum
verification. Versioned OSS and GitHub Release files remain available for
pinned downloads.

The Windows desktop installer is currently unsigned. See the
code signing policy
before installation.

Terminal and automation downloads:

• Python wheel: opensquilla-0.5.3-py3-none-any.whl
• Checksums: SHA256SUMS

Updater metadata:

• latest-mac.yml
• latest.yml
• *.blockmap

No Windows Portable assets are published for 0.5.3. Existing 0.4.x Portable
downloads remain on their original release pages as legacy sources; do not
expect a 0.5.3 Portable zip or a Portable /releases/latest/download/ alias.

Privacy and third-party attribution are documented in
PRIVACY.md
and
THIRD_PARTY_NOTICES.md.

Container users can pull the multi-architecture gateway image:

docker pull ghcr.io/opensquilla/opensquilla:v0.5.3

The versioned image supports linux/amd64 and linux/arm64. The moving
latest tag follows the most recently verified release tag.

Upgrading from 0.5.2

Quit the running Desktop app and gateway before upgrading. Back up the active
profile first if you may need to recover or roll back.

Install 0.5.3 directly over 0.5.2. Existing configuration, chats, Agents,
memory, and scheduled tasks remain in the active profile. Additive database
migrations run automatically when the Gateway starts.

Important

On Windows, users coming from RC3 or an older pre-Preview-4 build must not
uninstall that build first: older uninstallers may delete
%APPDATA%\OpenSquilla. Back up that directory, then install 0.5.3 directly
over the existing installation. Preview 4, 0.5.0, 0.5.1, 0.5.2, and 0.5.3
installers preserve profile data during a normal uninstall.

On macOS, drag the new app into Applications, eject the DMG, and open the
Applications copy.

CLI users can reinstall the published wheel over the current tool environment:

uv tool install --python 3.12 --force --reinstall-package opensquilla \
  "opensquilla[recommended] @ https://github.com/opensquilla/opensquilla/releases/download/v0.5.3/opensquilla-0.5.3-py3-none-any.whl"

Non-user-initiated network observability can be disabled before startup with
OPENSQUILLA_PRIVACY_DISABLE_NETWORK_OBSERVABILITY=true or:

[privacy]
disable_network_observability = true

The compatibility variables OPENSQUILLA_TELEMETRY_DISABLED=true and
OPENSQUILLA_UPDATE_CHECK_DISABLED=true remain honored.

Acknowledgements

Thanks to the human contributors whose work is newly present in 0.5.3:

• @249469326i-lang for completing
  localization across the chat interface.
• @HuaXiawithMoon for improvements to
  durable project steering, queued input, assistant-answer presentation,
  reasoning, compaction, schedules, replay, and tool activity.
• @Kiuyor for preventing active streaming
  messages from being edited.
• @LHMQ878 for preserving billed usage receipts
  on error paths.
• @Liu-RK for Sandbox settings reliability and
  clearer sidebar peer organization.
• @RickyYii for network safeguards, Skills
  source guidance, Markdown rendering, scheduling, provider handling, TOML
  parsing, and runtime monitoring improvements.
• @Saul-Soul for the floating, collapsible
  chat composer.
• @TUOXI293 for Cron workspace reliability and
  inline MetaSkill requests.
• @anujbolewar for more tolerant
  apply_patch whitespace handling.
• @freeaccount-create for Desktop
  icon, renderer error-containment, and tool-marker improvements.
• @iamasly for forwarding renderer console and
  crash diagnostics to Desktop logs.
• @jiaoqingrui for recovery governance,
  connection stability, and OSS-first update checksum verification.
• @lihongguang-0014 for improvements to
  chat creation, artifact publication, subagent titles, schedules, profile
  handling, logging, and header presentation.
• @wade19990814-hue for the original
  Goal product direction and channel session rename/delete behavior.
• @weiconghe for the overview session count.

See
CONTRIBUTORS.md
for the rel...

OpenSquilla 0.5.2

OpenSquilla 0.5.2

Overview

OpenSquilla 0.5.2 is a maintenance release for the 0.5 stable line. It keeps
same-turn follow-ups consistent across clients, keeps Desktop and Gateway
startup responsive, makes retained session history usable while it loads,
restores custom-provider and usage settings, and fixes Desktop project
selection and native HTML artifact previews.

Existing gateway configuration, chats, Agents, memory, and scheduled jobs stay
in place. Users upgrading from 0.5.1 should quit the running Desktop app or
gateway, install 0.5.2 directly over the current installation, and restart
OpenSquilla. Normal version upgrades do not require a data transfer.

✨ What's Improved

Same-turn steering across clients

• Follow-up messages can steer an active supported single-model or router turn
  consistently from the Web UI and CLI without cancelling or recreating the
  task. Ensemble turns, attachments, and control changes remain explicit
  queue-only cases.
• Accepted steer input is validated against the expected turn, persisted
  idempotently, and resolved as applied, promoted, cancelled, or rejected.
  Eligible provider fallback can still apply the input without rerunning the
  turn's route decision.
• The new Gateway capability is additive. Older clients retain their legacy
  path, and newer clients talking to an older Gateway fall back to visible
  queue behavior. No database or configuration migration is required.

Faster startup and safer recovery

• Desktop no longer blocks an otherwise usable primary profile on unnecessary
  recovery scans or legacy-recovery maintenance. Strict validation still runs
  whenever real recovery work exists, and retained recovery data stays
  available for a safe retry from Data maintenance.
• Repeated Desktop ownership checks share a bounded readiness deadline without
  weakening the fresh ownership and liveness checks that protect gateway
  shutdown and replacement.
• Historical usage backfill uses smaller transactions and bounded contention
  handling. Recovery consolidation now preserves usage records even when it
  deduplicates an existing conversation.

Sessions and activity

• Retained session messages, controls, navigation, and message sending remain
  usable while history loads or recovers. Gateway history reads no longer
  occupy the serial interactive request path.
• Model Ensemble activity timers continue across channel heartbeats instead of
  restarting, and the Desktop startup loader now rotates in the expected
  direction.
• Usage backfill no longer repeats terminal partial work on every startup, and
  committed progress is preserved when a later batch fails.

Desktop projects and artifact previews

• The Desktop project picker now matches the Web picker on macOS: it supports
  folder creation, uses system-localized dialog text, and opens at the intended
  initial directory.
• Windows Desktop accepts the validated Electron profile marker when preparing
  its sandbox, while continuing to reject arbitrary marker paths.
• HTML artifacts appear immediately in the Desktop right-side preview.
  Full/offline mode changes apply without an extra confirmation, saved defaults
  remain intact, and forced-offline policy stays authoritative.

Provider and usage settings

• Custom OpenAI-compatible and Anthropic-compatible providers once again expose
  their Base URL fields in the active provider editor.
• The Usage currency toggle now applies to mixed, pending, and older usage rows
  while preserving exact native receipt amounts when available.
• TokenRhythm onboarding presents its optional registration action separately
  from provider selection, and assistant usage details no longer clip against
  the message pane edge.

Downloads

Recommended desktop downloads:

• macOS desktop installer: OpenSquilla-0.5.2-mac-arm64.dmg
• macOS desktop zip: OpenSquilla-0.5.2-mac-arm64.zip
• Windows desktop installer: OpenSquilla-0.5.2-win-x64.exe

Users in Mainland China can use the stable direct installer links on the
Alibaba Cloud OSS mirror:

• macOS Apple Silicon: https://opensquilla-releases.oss-cn-beijing.aliyuncs.com/releases/latest/OpenSquilla-mac-arm64.dmg
• Windows x64: https://opensquilla-releases.oss-cn-beijing.aliyuncs.com/releases/latest/OpenSquilla-win-x64.exe

Each alias is replaced only after the published release passes checksum
verification. Versioned OSS and GitHub Release files remain available for
pinned downloads.

The Windows desktop installer is currently unsigned. See the
code signing policy
before installation.

Terminal and automation downloads:

• Python wheel: opensquilla-0.5.2-py3-none-any.whl
• Checksums: SHA256SUMS

Updater metadata:

• latest-mac.yml
• latest.yml
• *.blockmap

No Windows Portable assets are published for 0.5.2. Existing 0.4.x Portable
downloads remain on their original release pages as legacy sources; do not
expect a 0.5.2 Portable zip or a Portable /releases/latest/download/ alias.

Privacy and third-party attribution are documented in
PRIVACY.md
and
THIRD_PARTY_NOTICES.md.

Container users can pull the multi-architecture gateway image:

docker pull ghcr.io/opensquilla/opensquilla:v0.5.2

The versioned image supports linux/amd64 and linux/arm64. The moving
latest tag follows the most recently verified release tag.

Upgrading from 0.5.1

Quit the running Desktop app and gateway before upgrading. Back up the active
profile first if you may need to recover or roll back.

Install 0.5.2 directly over 0.5.1. Existing configuration, chats, Agents,
memory, and scheduled tasks remain in the active profile.

Important

On Windows, users coming from RC3 or an older pre-Preview-4 build must not
uninstall that build first: older uninstallers may delete
%APPDATA%\OpenSquilla. Back up that directory, then install 0.5.2 directly
over the existing installation. Preview 4, 0.5.0, 0.5.1, and 0.5.2
installers preserve profile data during a normal uninstall.

On macOS, drag the new app into Applications, eject the DMG, and open the
Applications copy.

CLI users can reinstall the published wheel over the current tool environment:

uv tool install --python 3.12 --force --reinstall-package opensquilla \
  "opensquilla[recommended] @ https://github.com/opensquilla/opensquilla/releases/download/v0.5.2/opensquilla-0.5.2-py3-none-any.whl"

Non-user-initiated network observability can be disabled before startup with
OPENSQUILLA_PRIVACY_DISABLE_NETWORK_OBSERVABILITY=true or:

[privacy]
disable_network_observability = true

The compatibility variables OPENSQUILLA_TELEMETRY_DISABLED=true and
OPENSQUILLA_UPDATE_CHECK_DISABLED=true remain honored.

Acknowledgements

Thanks to the human contributors whose work is newly present in 0.5.2:

• @jiaoqingrui for startup, recovery,
  historical usage, activity, provider-settings, and Windows Desktop fixes.
• @Liu-RK for Desktop project-picker parity.
• @joyfan621-png for provider onboarding
  and assistant usage presentation improvements.

See
CONTRIBUTORS.md
for the release attribution ledger.

OpenSquilla 0.5.1

OpenSquilla 0.5.1

Overview

OpenSquilla 0.5.1 is a maintenance release for the 0.5 stable line. It
improves scheduled-task and execution-mode reliability, adds durable Plan mode
and project workspaces, expands artifact previews and desktop navigation, and
hardens profile recovery across macOS and Windows.

Existing gateway configuration, chats, Agents, memory, and scheduled jobs stay
in place. Users upgrading from 0.5.0 should quit the running Desktop app or
gateway, install 0.5.1 directly over the current installation, and restart
OpenSquilla. Normal version upgrades do not require a data transfer.

✨ What's Improved

Plan mode, projects, and artifacts

• Durable Plan mode keeps plans visible and actionable across the full turn
  lifecycle, with clearer summaries in the execution dock.
• Project workspaces have a first-class setup flow, improved chat activity
  presentation, safer sandbox routing, and native folder creation in the macOS
  project picker.
• Artifact previews now support richer browser-grade rendering and a more
  extensible workbench. Pasted files of any supported type can be attached
  directly from the chat composer.
• Desktop deep links can open the intended OpenSquilla destination directly,
  and keyboard zoom plus project setup are more predictable.

Desktop startup and profile recovery

• Desktop consolidates legacy recovery profiles into the primary profile
  without silently merging two active profiles. Recovery stays bounded and
  non-blocking, long-session history remains available, and profile
  consolidation preserves existing recovery data.
• Windows Desktop can recoverably import an existing profile, and its frozen
  gateway now resolves sandbox setup paths correctly.
• First-install provider and model routing state is retained, the packaged
  Desktop gateway carries its CA trust bundle, and onboarding is simpler.
• Session deletion now waits for the active runtime to quiesce, while replay
  preserves reasoning timers and subagent usage rolls into the parent turn's
  reported usage.

Control console and providers

• The control console gains cleaner chat and provider settings, improved
  assistant activity presentation, stable Skills navigation, safer Settings
  overlays, and refined Cron, Skills, and MetaSkill workflows.
• Qwen Token Plan and custom Anthropic-compatible providers are available as
  first-class choices.
• Channel administration approvals are consistent again, gateway
  self-termination attempts are refused, and audio configuration uses a
  dedicated validated tool path.

Scheduled tasks and execution-mode reliability

• Full mode now behaves consistently across Web, CLI, TaskRuntime, and Cron for
  the local owner, preventing scheduled tasks and common File, Shell, and Git
  operations from being misrouted into unavailable sandbox workers.
• Owner-created Cron jobs retain their selected execution mode. Standard and
  Trusted tasks continue to use isolation, and non-owner channels never inherit
  the local owner's execution mode.
• Tool-created Cron jobs now use atomic idempotency, preventing retries or one
  model response from creating dozens of identical scheduled jobs.
• Packaged macOS file operations now launch their dedicated worker through the
  frozen gateway's supported internal entry point, preventing interpreter
  launch errors in restricted modes.

Downloads

Recommended desktop downloads:

• macOS desktop installer: OpenSquilla-0.5.1-mac-arm64.dmg
• macOS desktop zip: OpenSquilla-0.5.1-mac-arm64.zip
• Windows desktop installer: OpenSquilla-0.5.1-win-x64.exe

Users in Mainland China can use the stable direct installer links on the
Alibaba Cloud OSS mirror:

• macOS Apple Silicon: https://opensquilla-releases.oss-cn-beijing.aliyuncs.com/releases/latest/OpenSquilla-mac-arm64.dmg
• Windows x64: https://opensquilla-releases.oss-cn-beijing.aliyuncs.com/releases/latest/OpenSquilla-win-x64.exe

Each alias is replaced only after the published release passes checksum
verification. Versioned OSS and GitHub Release files remain available for
pinned downloads.

The Windows desktop installer is currently unsigned. See the
code signing policy
before installation.

Terminal and automation downloads:

• Python wheel: opensquilla-0.5.1-py3-none-any.whl
• Checksums: SHA256SUMS

Updater metadata:

• latest-mac.yml
• latest.yml
• *.blockmap

No Windows Portable assets are published for 0.5.1. Existing 0.4.x Portable
downloads remain on their original release pages as legacy sources; do not
expect a 0.5.1 Portable zip or a Portable /releases/latest/download/ alias.

Privacy and third-party attribution are documented in
PRIVACY.md
and
THIRD_PARTY_NOTICES.md.

Container users can pull the multi-architecture gateway image:

docker pull ghcr.io/opensquilla/opensquilla:v0.5.1

The versioned image supports linux/amd64 and linux/arm64. The moving
latest tag follows the most recently verified release tag.

Upgrading from 0.5.0

Quit the running Desktop app and gateway before upgrading. Back up the active
profile first if you may need to recover or roll back.

Install 0.5.1 directly over 0.5.0. Existing configuration, chats, Agents,
memory, and scheduled tasks remain in the active profile.

Important

On Windows, users coming from RC3 or an older pre-Preview-4 build must not
uninstall that build first: older uninstallers may delete
%APPDATA%\OpenSquilla. Back up that directory, then install 0.5.1 directly
over the existing installation. Preview 4, 0.5.0, and 0.5.1 installers
preserve profile data during a normal uninstall.

On macOS, drag the new app into Applications, eject the DMG, and open the
Applications copy.

CLI users can reinstall the published wheel over the current tool environment:

uv tool install --python 3.12 --force --reinstall-package opensquilla \
  "opensquilla[recommended] @ https://github.com/opensquilla/opensquilla/releases/download/v0.5.1/opensquilla-0.5.1-py3-none-any.whl"

Non-user-initiated network observability can be disabled before startup with
OPENSQUILLA_PRIVACY_DISABLE_NETWORK_OBSERVABILITY=true or:

[privacy]
disable_network_observability = true

The compatibility variables OPENSQUILLA_TELEMETRY_DISABLED=true and
OPENSQUILLA_UPDATE_CHECK_DISABLED=true remain honored.

Acknowledgements

Thanks to the human contributors whose work is newly present in 0.5.1:

• @joyfan621-png for desktop onboarding,
  project and chat UX, provider settings, startup presentation, and Settings
  overlay fixes.
• @jiaoqingrui for desktop deep linking and
  recovery-profile consolidation that preserves existing data.
• @shixi-li for correct subagent usage rollup.
• @Liu-RK for project workspace and macOS picker
  improvements plus Windows frozen-gateway sandbox setup fixes.
• @RickyYii for isolating ambient proxy state
  from direct-upstream sandbox checks.
• @HuaXiawithMoon for propagating
  reasoning levels through direct and custom Model Ensemble paths.
• @TUOXI293 for refined Cron, Skills, and
  MetaSkill workflows.
• @JarvisPei for safe audio configuration,
  honest gateway tool capabilities, and gateway self-termination protection.

See
CONTRIBUTORS.md
for the release attribution ledger.

OpenSquilla 0.5.0

OpenSquilla 0.5.0

Overview

OpenSquilla 0.5.0 is the first stable release of the 0.5 line. It collects
everything shipped across Previews 1 through 4 plus the fixes landed since,
covering the full range since 0.4.1: Model Ensemble and multi-provider
routing, safer upgrades with strong profile-data protection, signed macOS
desktop updates, usage and cost reporting, and a mainland-China download
mirror.

Existing gateway configuration, chats, Agents, and memory stay in place.
Users upgrading from 0.4.1 or from any 0.5.0 preview should quit the running
desktop app or gateway, install the 0.5.0 package, and restart OpenSquilla.
Normal version upgrades do not require a data transfer.

✨ What's New

Model Ensemble and multi-provider routing

Model Ensemble runs one turn across several models and reconciles the
answers. 0.5.0 ships preset and custom lineups with clear static and dynamic
guidance, dynamic ensemble routing, quorum latency and timeout tuning, and
image-input validation before ensemble execution. Provider management is
rebuilt around it: multi-provider routing with verified provider state that
persists across restarts, cleaner model settings and credential controls, and
session auto-naming that follows the active provider. Router presets for
verified coding providers make the initial setup practical, and SquillaRouter
lays the groundwork for refining its routing decisions from local outcomes —
classification stays fully on-device, and the prompt never leaves the machine
to make a routing decision.

Safer upgrades, migration, and profile-data protection

The 0.5 line reworked how OpenSquilla protects the active workspace,
identity, memory, configuration, and chat history. Desktop verifies the
effective profile before creating an empty workspace or opening a chat
database: existing USER.md, SOUL.md, IDENTITY.md, MEMORY.md, and the
chat databases under state/ are not silently overwritten, deleted, or merged.
Complete profile transfers use a stable source snapshot and an
all-or-nothing target replacement, and two profiles are
never silently merged or kept in automatic sync.

One-click migration from legacy homes gained guarded previews and explicit
apply controls; optional profile migration now lives only in Settings →
Advanced → Data maintenance, with startup, onboarding, and Doctor staying
silent. Profile transfers keep machine-local run worktrees out of the copy
and handle workspace links without following them. Windows installers from
Preview 4 onward preserve profile data during a normal uninstall, and an
optional transfer flow imports an old Windows Portable installation.

Desktop app: signed macOS builds and in-app updates

macOS desktop builds are Developer-ID signed, notarized, and update
in-place: preview installs are offered the next release automatically,
including this stable. Desktop gateway boot recovery, fail-closed restart
handling, credential cleanup, and clearer packaged startup diagnostics round
out the desktop hardening. Windows desktop installers remain unsigned and
update via manual download; see the code signing policy linked below.

Control console and Web UI

The Vue control console is now the only console. Navigation is reorganized,
support and diagnostics actions are unified behind one entry, tool detail
expansion is configurable, forked chat sessions hand off completely, and the
console speaks English, Simplified Chinese, Japanese, French, German, and
Spanish. Uploads, streaming recovery, and runtime contracts were hardened
across the previews. AI-generated chat content is labeled as such.

Usage and cost reporting

Daily usage reporting summarizes what ran and what it cost. Costs are backed
by a durable ledger with exact usage-based billing arithmetic, so the
numbers stay right across restarts and long sessions.

Terminal preview (OpenTUI)

Source checkouts can opt into a full-screen terminal chat with shared
gateway sessions, turn, tool, and reasoning presentation, and Router and
Ensemble controls. This remains a source-install preview: release installs
keep the Python-native chat, and no extra release assets are involved.

Channels and runtime reliability

Channel platform workflows are unified with hardened heartbeat delivery;
WeCom websocket connections are more stable; malformed WebSocket frames are
rejected instead of dropping the connection. The runtime side collects a
long tail of fixes across transport, process handling, SQLite, checkpoints,
atomic file writes, retry limits, and sandbox alignment for managed
execution — including a 36-defect reliability sweep shortly before this
release.

Container images and mainland-China downloads

Multi-architecture gateway images (linux/amd64, linux/arm64) are
published to GHCR for every release, with a moving latest tag that follows
the most recently verified release. Release assets are mirrored to Alibaba
Cloud OSS with stable download aliases, giving mainland-China users fast
installer downloads and update-channel metadata.

Since Preview 4

For users already on 0.5.0 Preview 4, the notable changes since that preview:

• Multi-provider routing and provider management, with provider verification
  that persists across restarts.
• Daily usage reporting and exact usage-based billing on a durable ledger.
• Control console navigation reorganization, unified support and diagnostics
  actions, and configurable tool detail expansion.
• Optional profile migration moved to Settings → Advanced → Data
  maintenance; startup and onboarding stay silent.
• Desktop gateway restarts fail closed on timeout instead of hanging.
• Ensemble quorum latency tuning and image-input rejection before ensemble
  execution.
• A 36-defect reliability and compatibility sweep across runtime, channels,
  and clients.
• Source installs now build the Vue console from locked frontend
  dependencies and require Node.js 22.12+ with npm; release wheels, desktop
  installers, and container images still include the prebuilt console and
  need no Node.js.

Downloads

Recommended desktop downloads:

• macOS desktop installer: OpenSquilla-0.5.0-mac-arm64.dmg
• macOS desktop zip: OpenSquilla-0.5.0-mac-arm64.zip
• Windows desktop installer: OpenSquilla-0.5.0-win-x64.exe

Users in Mainland China can use the stable direct installer links on the
Alibaba Cloud OSS mirror:

• macOS Apple Silicon: https://opensquilla-releases.oss-cn-beijing.aliyuncs.com/releases/latest/OpenSquilla-mac-arm64.dmg
• Windows x64: https://opensquilla-releases.oss-cn-beijing.aliyuncs.com/releases/latest/OpenSquilla-win-x64.exe

Each alias is replaced only after a release passes mirror checksum
verification; the versioned OSS and GitHub Release files remain available for
pinned downloads.

The Windows desktop installer is currently unsigned. See the
code signing policy
before installation.

Terminal and automation downloads:

• Python wheel: opensquilla-0.5.0-py3-none-any.whl
• Checksums: SHA256SUMS

Updater metadata:

• latest-mac.yml
• latest.yml
• *.blockmap

No Windows Portable assets are published for 0.5.0. Existing 0.4.x Portable
downloads remain on their original release pages only as legacy sources. Do
not expect a 0.5.0 Portable zip or a Portable /releases/latest/download/
alias.

Privacy and third-party attribution are documented in
PRIVACY.md
and
THIRD_PARTY_NOTICES.md.

Container users can pull the multi-architecture gateway image:

docker pull ghcr.io/opensquilla/opensquilla:v0.5.0

The versioned image supports linux/amd64 and linux/arm64. The moving GHCR
latest tag follows the most recently verified release tag.

Upgrading from 0.4.1 or a 0.5.0 preview

Quit the running Desktop app and gateway before upgrading. Back up the active
profile first if you may need to recover or roll back.

Important

On Windows, install 0.5.0 directly over the existing installation. Do not
uninstall a pre-Preview-4 build first: older uninstallers may delete
%APPDATA%\OpenSquilla. Back up that directory before upgrading. Preview 4
and later installers preserve profile data during a normal uninstall.

On macOS, drag the new app into Applications, eject the DMG, and open the
Applications copy. Existing profile data remains in place. Preview installs
with in-app updates are offered 0.5.0 automatically.

After startup, no action is needed when the existing chats and Agents look
correct. The optional data transfer is for a legacy Windows Portable
installation or another explicitly selected profile, not for the profile that
Desktop has just upgraded.

CLI users can reinstall the published wheel over the current tool
environment:

uv tool install --python 3.12 --force --reinstall-package opensquilla \
  "opensquilla[recommended] @ https://github.com/opensquilla/opensquilla/releases/download/v0.5.0/opensquilla-0.5.0-py3-none-any.whl"

Binary downgrade from 0.5.0 to a preview or to 0.4.x is not supported. If a
rollback is necessary, restore a complete backup rather than running an older
binary against a profile already used by 0.5.0.

Non-user-initiated network observability can be disabled before startup with
OPENSQUILLA_PRIVACY_DISABLE_NETWORK_OBSERVABILITY=true or:

[privacy]
disable_network_observability = true

The compatibility variables OPENSQUILLA_TELEMETRY_DISABLED=true and
OPENSQUILLA_UPDATE_CHECK_DISABLED=true remain honored.

Acknowledgements

Thanks to the human contributors whose work is newly present in the...

OpenSquilla 0.5.0 Preview 4

OpenSquilla 0.5.0 Preview 4

Overview

OpenSquilla 0.5.0 Preview 4 is an upgrade-safety release for existing Desktop
and terminal installations. It protects the active workspace, identity,
memory, configuration, and chat history while correcting the profile-layout
transition introduced in earlier previews.

Normal version upgrades do not require a data transfer. If the current chats
and Agents already appear correctly, continue using the active profile. Data
transfer is reserved for an old Windows Portable installation or another
explicitly selected OpenSquilla profile.

✨ What's Improved

Profile recovery and upgrade safety

Desktop now checks the effective profile and workspace before creating an
empty workspace, opening a chat database, or writing any profile data. Existing
USER.md, SOUL.md, IDENTITY.md, MEMORY.md, and the chat databases under
state/ are not silently overwritten, deleted, or merged.

When an older and current workspace both exist but the active data is still
valid, OpenSquilla keeps using it and shows a non-blocking recovery notice. If
the active profile cannot be verified safely, Desktop offers an isolated,
persistent recovery profile instead of writing to an uncertain location.
Recovery remains available without deleting the original profile or its
backups.

Complete profile transfers use a stable source snapshot and an all-or-nothing
target replacement. Existing target data must be backed up first, and the
source remains unchanged. Two profiles are never silently merged or kept in
automatic sync.

Windows Portable transfer

A fresh Windows Desktop installation can detect retired OpenSquilla Portable
data and offer an optional copy during setup. The page identifies the selected
Portable data before copying its chats, Agents, settings, and other profile
state. Nothing is selected automatically, and choosing Not now continues
normal setup without changing the Portable source.

CLI homes and other Desktop profiles are not presented as normal-upgrade data
during first-run setup. They remain available through the explicit transfer
action in Settings, where a populated Desktop target requires a complete backup
before replacement.

Desktop cleanup, credentials, and updates

The RC4 Windows uninstaller preserves Desktop profile data during a normal
uninstall. Desktop also separates resetting setup, deleting the current
profile, and deleting all user data so each action describes exactly what it
will remove.

Provider API-key updates now remain effective after restart instead of being
replaced by an older saved value. Update checks can continue across long-running
Desktop sessions and can report a later 0.5 preview or the final 0.5.0 release.
Windows update notices still lead to a manual installer download; they do not
silently replace the running application.

Model Ensemble, providers, and Control UI

Model Ensemble now reports distinct candidate and aggregation progress, handles
slow or incomplete streams more reliably, and closes stalled runs without
leaving the interface indefinitely busy. Usage no longer applies a misleading
single-model savings formula to Ensemble turns.

The Control UI also improves model selection, full tool-result inspection, and
chat scroll retention. Provider limits and request budgets have received
additional corrections for long-running and multi-model turns.

Requests to the official TokenRhythm and OpenRouter API hosts now include
OpenSquilla's public HTTP-Referer and X-Title application-attribution
headers. Custom OpenAI-compatible hosts do not receive these headers.

Runtime and channel reliability

WeCom WebSocket connections no longer run competing heartbeat loops that can
cause repeated disconnects. Transport failures, child-process cleanup, SQLite
extension handling, and checkpoint recovery also fail more predictably without
discarding valid user state.

Downloads and deployment

Release files remain available from GitHub and from the versioned Alibaba Cloud
OSS mirror. Users in Mainland China can use the stable download page at:

https://opensquilla-releases.oss-cn-beijing.aliyuncs.com/releases/latest.html

The page points to the latest verified mirrored release; it is not an
additional GitHub Release asset.

Downloads

Recommended desktop downloads:

• macOS desktop installer: OpenSquilla-0.5.0-rc4-mac-arm64.dmg
• macOS desktop zip: OpenSquilla-0.5.0-rc4-mac-arm64.zip
• Windows desktop installer: OpenSquilla-0.5.0-rc4-win-x64.exe

The Windows desktop installer is currently unsigned. See the
code signing policy
before installation.

Terminal and automation downloads:

• Python wheel: opensquilla-0.5.0rc4-py3-none-any.whl
• Checksums: SHA256SUMS

Updater metadata:

• latest-mac.yml
• latest.yml
• *.blockmap

No Windows Portable assets are published for 0.5.0 preview releases. Existing
0.4.x Portable downloads remain on their original release pages only as legacy
sources. Do not expect a new 0.5.0rc4 Portable zip or a Portable
/releases/latest/download/ alias.

Privacy and third-party attribution are documented in
PRIVACY.md
and
THIRD_PARTY_NOTICES.md.

Container users can pull the multi-architecture gateway image:

docker pull ghcr.io/opensquilla/opensquilla:v0.5.0rc4

The versioned image supports linux/amd64 and linux/arm64. The moving GHCR
latest tag follows the most recently verified release tag.

Upgrading from Preview 3, earlier previews, or 0.4.1

Quit the running Desktop app and gateway before upgrading. Back up the active
profile first if you may need to recover or roll back.

Important

On Windows, install RC4 directly over the existing RC3 installation. Do not
uninstall Preview 3 first: its uninstaller may delete
%APPDATA%\OpenSquilla. Back up that directory before upgrading. RC4 and
later installers preserve profile data during a normal uninstall.

On macOS, drag the new app into Applications, eject the DMG, and open the
Applications copy. Existing profile data remains in place.

After startup, no action is needed when the existing chats and Agents look
correct. The optional Portable transfer is for a different legacy installation,
not for the profile that Desktop has just upgraded.

CLI users can reinstall the published wheel over the current tool environment:

uv tool install --python 3.12 --force --reinstall-package opensquilla \
  "opensquilla[recommended] @ https://github.com/opensquilla/opensquilla/releases/download/v0.5.0rc4/opensquilla-0.5.0rc4-py3-none-any.whl"

Binary downgrade from RC4 to RC3 or an earlier preview is not supported. If a
rollback is necessary, restore a complete backup rather than running an older
binary against a profile already used by RC4.

Non-user-initiated network observability can be disabled before startup with
OPENSQUILLA_PRIVACY_DISABLE_NETWORK_OBSERVABILITY=true or:

[privacy]
disable_network_observability = true

The compatibility variables OPENSQUILLA_TELEMETRY_DISABLED=true and
OPENSQUILLA_UPDATE_CHECK_DISABLED=true remain honored.

Acknowledgements

Thanks to the human contributors whose new work is present in Preview 4:

• @HuaXiawithMoon for improving WeCom
  WebSocket connection stability.
• @ab2ence for restructuring Model Ensemble
  guidance around clear static and dynamic lineups.
• @nice-code-la for the Alibaba Cloud OSS
  release mirror and stable download page.
• @nankingjing for transport, process, SQLite,
  and checkpoint reliability fixes.

See
CONTRIBUTORS.md
for the attribution ledger and pull-request evidence.

OpenSquilla 0.5.0 Preview 3

OpenSquilla 0.5.0 Preview 3

Overview

OpenSquilla 0.5.0 Preview 3 is a broad preview release for the 0.5 runtime,
desktop, routing, and deployment line. It adds a transactional migration path
for older OpenSquilla homes, expands provider and router choices, strengthens
the shared agent runtime, refreshes the terminal and Control UI experiences,
and introduces prebuilt multi-architecture container images.

Existing CLI and desktop configuration remains in place when it already lives
in the active OpenSquilla home. Retired Windows portable homes and other legacy
or relocated homes can now be discovered, previewed, and imported explicitly.

Preview 2, Preview 1, and 0.4.1 clients should not wait for an in-app RC3
notification. Those released clients either predate the macOS prerelease feed
resolver or consult GitHub's stable-only latest-release endpoint, so a correctly
marked RC3 pre-release is not reliably visible to them. Install Preview 3
manually using one of the pinned downloads below. Preview 3 includes the macOS
resolver needed for future same-line preview and stable updates.

✨ What's Improved

Legacy home migration and upgrade safety

opensquilla migrate now detects legacy OpenSquilla homes alongside the
existing migration sources. The dedicated opensquilla migrate opensquilla
path supports CLI homes, retired Windows portable data directories, desktop
homes, restored backups, Docker volumes, and other explicit source paths.

Migration is dry-run by default. Apply mode stages the complete import,
normalizes stale paths and configuration, moves inline provider secrets to
.env, pauses imported scheduled jobs, and publishes the target
transactionally. Recovery metadata makes interrupted imports repeatable instead
of leaving a partial home or forcing users to discard their source data.

Desktop onboarding, Settings, gateway boot diagnostics, doctor, and the Web UI
surface legacy data and provide the matching recovery command. Configuration
formats from every released OpenSquilla version remain supported, so older
homes can be imported without hand-editing their files.

Providers, models, and routing

TokenRhythm support now includes a verified provider integration, a curated
router ladder, a static ensemble profile, live model-limit corrections, and
GLM 5.2 coverage. The ensemble configuration has been redesigned around clear
presets and custom lineups.

New provider coverage includes Tencent TokenHub and Token Plan for the Hunyuan
hy3 family, plus Alibaba Cloud IQS for runtime web search. Live catalogs and
model discovery expose fuller model lists and current limits. Provider probes
report latency, per-model context-window overrides participate in budgeting,
API-key shape diagnostics catch common setup mistakes, and an explicitly saved
llm.base_url now wins over provider environment defaults.

Provider request and stream handling has tighter compatibility across strict
OpenAI-compatible gateways, DashScope thinking and prompt-cache behavior,
reasoning-only responses, length limits, and one-shot thinking fallbacks.
Code-task subagents inherit the configured provider and fail early when the
selected credentials cannot be used.

The opt-in router self-learning loop can collect privacy-preserving routing
features, learn from explicit feedback, evaluate candidate heads offline, and
roll back a regressed promotion. It remains disabled unless the operator turns
it on.

Desktop, terminal, and Control UI

The terminal UI gains a substantial interaction and rendering overhaul,
including inline approvals and clearer live activity. The Control UI adds a
theme engine, improved monitoring and diagnostics, safer Settings navigation,
copyable desktop-shell commands, better image navigation, compact long tool
traces, and an opt-in background-music player for user-supplied media.

Desktop fixes cover gateway boot recovery, language selection, Windows native
theme behavior, the macOS prerelease feed resolver, gateway lifecycle guidance,
and packaged CLI invocation. Chat keeps scroll position and token-linked state
more reliably, while code blocks and skill details are easier to inspect and
copy.

Attachments can now accept opaque file types without parsing their contents,
with bounded upload memory and workspace disk usage. Large valid UTF-8 text
files and larger channel downloads have clearer, safer staging behavior.

Runtime, safety, and data reliability

Persistence migrations, scheduling, session cleanup, MCP lifecycle, channel
reply routing, provider retry behavior, context compaction, tool dispatch, and
workspace writes have all received contract hardening. The per-turn objective
reminder is now off by default to preserve provider prompt-cache reuse and avoid
unnecessary repeated reasoning.

The gateway now disables CORS by default and rejects cross-origin browser
requests to state-changing routes unless the origin is explicitly allowed.
Diagnostics redact more secret shapes, provider credential reveal windows are
shorter, and sandbox/search/file-access boundaries are more consistent across
platforms.

Container deployment

Release tags now build and publish a prebuilt gateway image for both
linux/amd64 and linux/arm64:

• ghcr.io/opensquilla/opensquilla:v0.5.0rc3
• ghcr.io/opensquilla/opensquilla:latest

Docker latest follows the most recently pushed release tag, including previews
and backports. Use the versioned tag for reproducible deployments and rollback.
State remains in the configured volume when the container is replaced.

Downloads

Recommended desktop downloads:

• macOS desktop installer: OpenSquilla-0.5.0-rc3-mac-arm64.dmg
• macOS desktop zip: OpenSquilla-0.5.0-rc3-mac-arm64.zip
• Windows desktop installer: OpenSquilla-0.5.0-rc3-win-x64.exe

The Windows desktop installer is currently unsigned. See the
code signing policy
before installation.

Terminal and automation downloads:

• Python wheel: opensquilla-0.5.0rc3-py3-none-any.whl
• Checksums: SHA256SUMS

Updater metadata:

• latest-mac.yml
• latest.yml
• *.blockmap

No Windows portable assets are published for 0.5.0 preview releases. Existing
0.4.x portable downloads remain on their original release pages so users can
recover the old data directory, but new installations should use Electron, the
versioned Python wheel, or the container image. Do not expect a new
0.5.0rc3 portable zip or a portable /releases/latest/download/ alias.

Privacy and third-party attribution are documented in
PRIVACY.md
and
THIRD_PARTY_NOTICES.md.

Upgrading from Preview 2, Preview 1, or 0.4.1

Quit the running desktop app and gateway before replacing them. macOS users
should drag the new app into Applications, eject the DMG, and open the
Applications copy. Windows users should run the new installer. Existing active
home configuration and session data are reused.

Back up the active home before upgrading if you may need to roll back. Preview 3
relocates data left in older desktop layouts; after that relocation, downgrading
to Preview 2 or Preview 1 can make workspaces, skills, secrets, or sessions look
missing because those builds still expect the old paths. Prefer restoring a
backup over running an older client against a migrated home.

CLI users can reinstall the published wheel over the current tool environment:

uv tool install --python 3.12 --force --reinstall-package opensquilla \
  "opensquilla[recommended] @ https://github.com/opensquilla/opensquilla/releases/download/v0.5.0rc3/opensquilla-0.5.0rc3-py3-none-any.whl"

To inspect legacy OpenSquilla data before importing it:

opensquilla migrate

The command is a dry-run unless --apply is present. For a retired Windows
portable home, the explicit path is also available:

opensquilla migrate opensquilla --kind windows-portable
opensquilla migrate opensquilla --kind windows-portable --apply

If multiple portable homes are found, use the displayed chooser or pass
--home <path>. The source is left untouched after a successful import.

Container users should pin this release for reproducible deployments:

docker pull ghcr.io/opensquilla/opensquilla:v0.5.0rc3
docker compose up -d

Non-user-initiated network observability can be disabled before startup with
OPENSQUILLA_PRIVACY_DISABLE_NETWORK_OBSERVABILITY=true or:

[privacy]
disable_network_observability = true

The legacy compatibility environment variables
OPENSQUILLA_TELEMETRY_DISABLED=true and
OPENSQUILLA_UPDATE_CHECK_DISABLED=true remain honored.

Acknowledgements

Thanks to the human contributors whose work is newly present in Preview 3:

• @ab2ence for desktop gateway boot recovery.
• @JarvisPei for desktop language resolution and
  the opt-in background-music player.
• @labulalala for more reliable Windows
  source-installer PATH setup and clearer shell guidance.
• @Liu-RK for token deep links, zero-output chat
  recovery, and sandbox file-access alignment.
• @lyteen for the router self-learning foundation
  adopted into the hardened opt-in loop.
• @nice-code-la for verified coding-provider
  router presets.
• @TUOXI293 for chat, code-copy, skill-details,
  tool-trace, title-bar, and native-theme improvements.

See
[CONTRIBUTORS.md](https://github.com/opensquill...

OpenSquilla 0.5.0 Preview 2

OpenSquilla 0.5.0 Preview 2

Overview

OpenSquilla 0.5.0 Preview 2 is a preview maintenance release for the 0.5
routing and desktop/runtime line. It keeps the default path on the
single-model squilla_router, while the front-end ensemble toggle still
defaults enabled ensemble sessions to the packaged static_openrouter_b5
profile. This preview focuses on provider/router recovery, Web UI upload
refresh, desktop and session stability, and CI contract repair before the next
0.5 release candidate.

Existing gateway configuration and session data stay in place. Users upgrading
from 0.4.1 or 0.5.0 Preview 1 should close any running desktop app or gateway
process, install the 0.5.0 Preview 2 package, and restart OpenSquilla.

✨ What's Improved

Model Ensemble and provider routing

Provider and router settings are easier to recover and inspect across the Web
UI, desktop onboarding, config provenance RPCs, and the provider catalog. Fresh
installs continue to use the direct single-model router path by default. Users
who explicitly enable ensemble mode get the static OpenRouter B5 profile as the
default ensemble selection, with doctor and timeout checks scoped to that
opt-in path.

Managed execution and sandbox alignment

Cancelled turns, sandbox denial resume recovery, approval grant behavior, and
bounded code-task verification have tighter rollback and recovery behavior.
The code-task build scaffold now stays non-interactive by using the scaffold
package's supported skip flag.

Desktop and Control UI polish

The desktop app and Control UI improve local HTML artifact opening, desktop
reopen behavior, session deletion, attachment isolation, composer draft
persistence, refreshed-session recovery, empty states, voice readiness, and
ensemble progress trace display.

Web UI uploads and runtime contracts

Expired or near-expired staged uploads refresh their file UUIDs before send
when the original local file is still available. The Preview 2 branch also
repairs main CI contract drift around onboarding status fields, router mode
classification, migration/provider persistence, and static-B5 doctor coverage.

Non-user-initiated network observability can be disabled before startup with
OPENSQUILLA_PRIVACY_DISABLE_NETWORK_OBSERVABILITY=true or:

[privacy]
disable_network_observability = true

That unified switch covers automatic install telemetry, passive update checks,
and desktop startup auto-update checks. The legacy compatibility environment
variables OPENSQUILLA_TELEMETRY_DISABLED=true and
OPENSQUILLA_UPDATE_CHECK_DISABLED=true remain honored; manual user-initiated
release, download, or update checks may still contact GitHub after user intent.

Downloads

Recommended desktop downloads:

• macOS desktop installer: OpenSquilla-0.5.0-rc2-mac-arm64.dmg
• macOS desktop zip: OpenSquilla-0.5.0-rc2-mac-arm64.zip
• Windows desktop installer: OpenSquilla-0.5.0-rc2-win-x64.exe

Code signing policy: docs/code-signing-policy.md.

Terminal and automation downloads:

• Python wheel: opensquilla-0.5.0rc2-py3-none-any.whl
• Checksums: SHA256SUMS

No Windows portable assets are published for 0.5.0 preview releases. Existing
0.4.x portable downloads remain available on their original release pages for
legacy scripts and portable-folder workflows. New Windows users should use the
Electron installer or the terminal wheel install path. Do not expect a new
0.5.0rc2 portable zip or /releases/latest/download/ portable alias.

Privacy and third-party attribution are documented in
PRIVACY.md and
THIRD_PARTY_NOTICES.md.

Updater metadata:

• latest-mac.yml
• latest.yml
• *.blockmap

Upgrading from 0.4.1

If OpenSquilla was installed with uv tool install, reinstall 0.5.0 Preview 2
over the existing tool environment:

uv tool install --python 3.12 --force --reinstall-package opensquilla \
  "opensquilla[recommended] @ https://github.com/opensquilla/opensquilla/releases/download/v0.5.0rc2/opensquilla-0.5.0rc2-py3-none-any.whl"

The release installers use the same forced reinstall path. Close any running
OpenSquilla gateway or desktop app before upgrading, then restart it after the
install. Existing ~/.opensquilla/config.toml and session data are reused.

Desktop users should quit the running desktop app before replacing it. macOS
users install the .dmg by dragging OpenSquilla into Applications, ejecting
the mounted DMG, and opening the Applications copy. If the Dock icon keeps
bouncing or startup reports a busy/translocated app, force quit any old
OpenSquilla process, eject the DMG, and reopen OpenSquilla. Windows users run
the .exe installer.

Legacy Windows portable users should switch to the Windows Electron installer
or terminal wheel install path for 0.5.0 previews. Do not expect a new
0.5.0rc2 portable zip or /releases/latest/download/ portable alias.

Acknowledgements

Thanks to the contributor whose work is newly present in the 0.5.0 Preview 2
release surface:

• @HuaXiawithMoon for keeping code-task
  build scaffolding non-interactive.

See CONTRIBUTORS.md
for the full attribution ledger and PR/commit evidence.

OpenSquilla 0.5.0 Preview 1

OpenSquilla 0.5.0 Preview 1

Overview

OpenSquilla 0.5.0 Preview 1 is a preview release for the next routing and
managed-execution line. The headline feature is dynamic Model Ensemble routing:
OpenSquilla can route across multiple candidate models, progressively reveal
results, and still fall back to direct single-model defaults when that is the
better fit. The second major theme is sandbox and managed-execution alignment,
followed by Control UI polish, OpenTUI preview reliability, and Windows/runtime
cleanup.

Existing gateway configuration and session data stay in place. Users upgrading
from 0.4.1 should close any running desktop app or gateway process, install the
0.5.0 Preview 1 package, and restart OpenSquilla.

✨ What's Improved

Model Ensemble and smarter provider routing

Dynamic Model Ensemble is the headline feature in OpenSquilla 0.5.0
Preview 1. For hard turns, OpenSquilla can coordinate multiple candidate models
and progressively surface the strongest result instead of forcing every request
through one fixed model.

• Fans difficult turns across multiple candidate models.
• Progressively reveals useful results while the ensemble settles.
• Falls back to the direct single-model path when that is the better fit.
• Includes ensemble timeout tuning so slow candidates do not hold the turn.

In internal hard-turn evals, the ensemble route outperformed our single-model
baselines, including Fable 5.

Managed execution and sandbox alignment

Sandbox run modes, approval boundaries, and managed host execution now share
clearer authorization behavior and diagnostics. This preview also tightens
gateway lifecycle conflict reporting and cross-platform subprocess handling.

Desktop and Control UI polish

The desktop app and Control UI improve router/provider settings, drag-and-drop
attachments, history materialization, image preview navigation, settings
restore, refreshed-session recovery, and package runtime checks.

OpenTUI preview and terminal reliability

OpenTUI preview work continues with stronger terminal behavior, while Windows
process cleanup, GBK/UTF-8 subprocess handling, pidlock behavior, and gateway
runtime diagnostics are more predictable.

Non-user-initiated network observability can be disabled before startup with
OPENSQUILLA_PRIVACY_DISABLE_NETWORK_OBSERVABILITY=true or:

[privacy]
disable_network_observability = true

That unified switch covers automatic install telemetry, passive update checks,
and desktop startup auto-update checks. The legacy compatibility environment
variables OPENSQUILLA_TELEMETRY_DISABLED=true and
OPENSQUILLA_UPDATE_CHECK_DISABLED=true remain honored; manual user-initiated
release, download, or update checks may still contact GitHub after user intent.

Downloads

Recommended desktop downloads:

• macOS desktop installer: OpenSquilla-0.5.0-rc1-mac-arm64.dmg
• macOS desktop zip: OpenSquilla-0.5.0-rc1-mac-arm64.zip
• Windows desktop installer: OpenSquilla-0.5.0-rc1-win-x64.exe

Code signing policy: docs/code-signing-policy.md.

Terminal and automation downloads:

• Python wheel: opensquilla-0.5.0rc1-py3-none-any.whl
• Checksums: SHA256SUMS

No Windows portable assets are published for 0.5.0 preview releases. Existing
0.4.x portable downloads remain available on their original release pages for
legacy scripts and portable-folder workflows. New Windows users should use the
Electron installer or the terminal wheel install path.

Privacy and third-party attribution are documented in
PRIVACY.md and
THIRD_PARTY_NOTICES.md.

Updater metadata:

• latest-mac.yml
• latest.yml
• *.blockmap

Upgrading from 0.4.1

If OpenSquilla was installed with uv tool install, reinstall 0.5.0 Preview 1
over the existing tool environment:

uv tool install --python 3.12 --force --reinstall-package opensquilla \
  "opensquilla[recommended] @ https://github.com/opensquilla/opensquilla/releases/download/v0.5.0rc1/opensquilla-0.5.0rc1-py3-none-any.whl"

The release installers use the same forced reinstall path. Close any running
OpenSquilla gateway or desktop app before upgrading, then restart it after the
install. Existing ~/.opensquilla/config.toml and session data are reused.

Desktop users should quit the running desktop app before replacing it. macOS
users install the .dmg by dragging OpenSquilla into Applications, ejecting
the mounted DMG, and opening the Applications copy. If the Dock icon keeps
bouncing or startup reports a busy/translocated app, force quit any old
OpenSquilla process, eject the DMG, and reopen OpenSquilla. Windows users run
the .exe installer.

Legacy Windows portable users should switch to the Windows Electron installer
or terminal wheel install path for 0.5.0 previews. Do not expect a new
0.5.0rc1 portable zip or /releases/latest/download/ portable alias.

Acknowledgements

Thanks to the contributors whose work is newly present in the 0.5.0 Preview 1
release surface:

• @ab2ence for drag-and-drop attachment work,
  dynamic Model Ensemble routing, and ensemble timeout tuning.
• @Liu-RK for sandbox authorization alignment and
  managed execution host routing.
• @TUOXI293, a first-time OpenSquilla release
  contributor, for image preview navigation.
• @tqangxl, a first-time OpenSquilla release
  contributor, for gateway lifecycle conflict diagnostics and SQLAlchemy core
  dependency work.
• @HuaXiawithMoon, a first-time OpenSquilla
  release contributor, for WeCom AI Bot websocket mode work.

See CONTRIBUTORS.md
for the full attribution ledger and PR/commit evidence.

OpenSquilla 0.4.1

OpenSquilla 0.4.1

Overview

OpenSquilla 0.4.1 is a maintenance release for the 0.4 desktop and Control UI
line. It focuses on desktop install reliability, Web UI recovery, multilingual
client support, Coding mode and SquillaRouter packaging, installer telemetry
accuracy, and the project move to main as the active development branch.

Existing gateway configuration and session data stay in place. Users upgrading
from 0.4.0 should close any running desktop app or gateway process, install the
0.4.1 package, and restart OpenSquilla.

✨ What's Improved

Desktop reliability and Coding mode

Desktop installs are more dependable across macOS and Windows. The packaged app
now carries the runtime pieces needed for Coding mode and SquillaRouter, and the
release pipeline verifies that the desktop gateway can start with those pieces
in place. Windows desktop cleanup wording, active-window reload behavior, and
packaged startup diagnostics are also tightened.

Multilingual Control UI and client

The Control UI and desktop client now support English, Simplified Chinese,
Japanese, French, German, and Spanish across first-paint desktop boot text,
settings surfaces, connection state, and persisted language selection.

Telemetry, icons, and user-facing polish

Install telemetry now skips GitHub Actions, pytest, and explicit test
environments before creating telemetry state or uploading events. The Windows
Electron app, installer, and uninstaller use the OpenSquilla logo. Web UI fixes
improve streaming recovery, stale task isolation, settings restore behavior,
session deletion, topbar layout, status line breaks, and HTML artifact opening
from the desktop app.

Providers, router labels, and mainline governance

Provider profile fixes cover Volcengine and BytePlus, macOS router runtime
diagnostics are clearer, and model request logs expose router target labels.
OpenSquilla now treats main as the ordinary development and integration
branch; maintainer collaboration branches remain available for release,
hotfix, staging, integration, and sandbox work.

Downloads

Recommended desktop downloads:

• macOS desktop installer: OpenSquilla-0.4.1-mac-arm64.dmg
• macOS desktop zip: OpenSquilla-0.4.1-mac-arm64.zip
• Windows desktop installer: OpenSquilla-0.4.1-win-x64.exe

Terminal and automation downloads:

• Python wheel: opensquilla-0.4.1-py3-none-any.whl
• Checksums: SHA256SUMS

Legacy compatibility downloads:

• Legacy Windows portable, versioned: OpenSquilla-0.4.1-windows-x64-py312-recommended-portable.zip
• Legacy Windows portable, stable alias: OpenSquilla-windows-x64-portable.zip

The legacy Windows portable assets remain available as legacy compatibility
downloads for existing scripts and portable-folder workflows. New Windows
desktop users should prefer OpenSquilla-0.4.1-win-x64.exe.

Updater metadata:

• latest-mac.yml
• latest.yml
• *.blockmap

Upgrading from 0.4.0

If OpenSquilla was installed with uv tool install, reinstall 0.4.1 over the
existing tool environment:

uv tool install --python 3.12 --force --reinstall-package opensquilla \
  "opensquilla[recommended] @ https://github.com/opensquilla/opensquilla/releases/download/v0.4.1/opensquilla-0.4.1-py3-none-any.whl"

The release installers use the same forced reinstall path. Close any running
OpenSquilla gateway or desktop app before upgrading, then restart it after the
install. Existing ~/.opensquilla/config.toml and session data are reused.

Desktop users should quit the running desktop app before replacing it. macOS
users install the .dmg by dragging OpenSquilla into Applications. Windows
users run the .exe installer.

Legacy Windows portable users should extract the 0.4.1 portable zip to a fresh
folder, or replace the whole extracted 0.4.0 folder while the gateway is
stopped. Do not copy only individual files from the new zip into an old
portable tree.

Acknowledgements

Thanks to the contributors whose pull-request work is newly present in the
0.4.1 release surface:

• @ab2ence for install telemetry CI/test
  environment skipping and desktop HTML artifact native-open support.

See CONTRIBUTORS.md
for the full attribution ledger and PR evidence.