v0.51.9

0.51.9 (build 311) — 2026-11-13

• A sudo request can no longer be approved by the exception button. That button carries no password, so one tap approved with an empty field, skipped the password path, and wrote a rule relaxing every SSH command for the plugin/verb pair.
• The offer is not built for a password request, and the gate refuses any approval of one that does not carry the password, whichever button sent it. DENY still works.

v0.51.8

0.51.8 (build 310) — 2026-11-13

• The secret vault can be created on phones without StrongBox. The TEE fallback reused the StrongBox attempt's key spec, still asked for StrongBox, and failed with "could not create the vault key", which left Secrets and SSH locked.
• A vault key that cannot be created now reports the real Keystore exception of each attempt instead of a generic message.

v0.51.7

0.51.7 (build 309) — 2026-11-13

• The card stamp sits half its own height higher, so its lower edge meets the card's centre and the summary stays readable. The offset uses the resting height, keeping the slam one downward press rather than a wobble.

v0.51.5

0.51.5 (build 307) — 2026-11-12

• Added an opt-in -PemuAbi=true build flag that adds x86_64 alongside arm64-v8a, so an x86_64 emulator can load the native model library. A normal build is unchanged and still arm64 only.

v0.51.4

0.51.4 (build 306) — 2026-11-12

• A locked vault now asks for a fingerprint instead of refusing the request. Routes that read a stored credential (needsVault) unlock before their approval card is built, so the request survives instead of dying in milliseconds with secret_locked and no prompt.
• Unlocking is not approving: the fingerprint only releases the key, and the real host and command are then shown for a separate APPROVE.
• Dead-end vault states (never created, unrecoverable, orphaned) and gate modes with no fingerprint surface refuse with the specific remedy instead of showing a prompt that cannot succeed.

v0.51.3

0.51.3 (build 305) — 2026-11-12

• Getting started installs the Hermes plugin by its catalog name (hermes plugins install stmp --yes-deps) instead of the GitHub path, now that stmp is a curated entry. The bare name resolves to a reviewed, SHA-pinned commit and can be moved forward by hermes plugins update.

v0.48.16

0.48.16 (build 292) — 2026-11-10

• The bridge starts on Android 12 and 13 again. Below API 34 the service now posts its foreground notification with no type, because asking for dataSync against a manifest that declares specialUse fails the type-subset check and throws out of startForeground.
• No behaviour change on Android 14+, which still starts as specialUse and keeps the no-6h-cap property.

v0.48.15

0.48.15 (build 291) — 2026-11-10

• A plugin's help is a 💡 badge on the left of the row instead of a ? beside the switch. A question mark beside a control reads as a fault on that control; on the left it marks the thing being explained.
• The badge sits in a 44dp touch frame with a drawn disc inside it, so it is easy to hit without being a large target on screen.

v0.48.14

0.48.14 (build 290) — 2026-11-10

• The introduction is shorter and larger: each step is a headline plus a few lines, and body text is bigger.
• The introduction now helps you grant the four system accesses it depends on — notification access, draw over apps, lock-screen popup and battery exemption — each row showing live state and opening the right screen.
• The updates card always states the installed version, instead of only when a check came back up to date.
• A check in progress no longer stays "checking…" forever, which previously also disabled CHECK NOW.
• Speaking during a call is refused with tts_in_call instead of reporting success for a sentence nobody heard.

v0.48.13

0.48.13 (build 289) — 2026-11-10

• Settings repaints when you come back to it, so a permission granted in Android Settings shows as granted instead of still offering to grant it.