shadow v0.5.0

Changelog

shadow@0.5.0

Minor changes

• Updated the shadow server in the same change that introduced the Clips quick attach shortcut. (7c04bdf)

Patch changes

• Merged origin/main into the shadow crate, updating Cargo.lock, Cargo.toml, and the package manifest. (1903ef3)
• Merged origin/main into the shadow app, bringing the branch up to date on the dependency security bumps recorded in its Cargo manifest and lockfile. The .env.example, README, package manifest, frame capture, passive capture modules for calendar, filesystem, git and settings, and the config tests were carried through the merge. (1438289)
• Extended passive capture with calendar, filesystem, git, and settings sources alongside the existing frame capture path. Configuration and its tests were updated to match, and the README and manifests were refreshed. (974ca98)
• Merged origin/main into the shadow app, bringing changes to frame capture, the passive calendar, filesystem, git and settings capture modules, plus configuration and its tests. (1b4b24f)
• Keyframe extraction limits are now constants in capture/frames.rs with unchanged values. Extra watched folders, git repos and the calendar file moved to fsWatch, gitRepos and calendarIcs in passive-capture.json, and the Jev/Laya planner defaults no longer read SHADOW_JEV_URL, SHADOW_JEV_MODEL or SHADOW_LAYA_URL, using the persisted computer-use.json fields instead. (e76c49f)
• Reworked capture paths for audio, input, screen and passive terminal monitoring, along with the capture engine and sealed database. Updated agent runtime and tools, memory, directive and semantic modules, intelligence context and meeting handling, OCR, mimicry procedures and the local server. (0af1456)
• Re-derived the standalone Cargo lock so the shadow build picks up the updated YAML and search dependencies. (0c6c7a3)
• Re-derived the shadow lockfile with the patched crate versions. (9ea0295)
• The shadow app's standalone Cargo.lock was re-derived to match the re-resolved dependency set. (3970ebe)
• Re-derived the standalone Cargo.lock through tools/sync-standalone-locks.sh for wasmtime 48.0.7. (f0bd07b)
• Adjusted the agent prompt builder, runtime, the AX and memory tools, passive terminal capture, and the main entry point. (1cc077c)
• Updated rustls-webpki to 0.103.16 and webpki-roots to 1.0.10 in the shadow lockfile. (0c10d21)
• Updated the shadow app's Cargo.lock as part of merging the bot UI setup change from #782. (d92c2d6)
• Shadow gained a sealed database module and moved its capture, memory, OCR, pattern and video data onto it, with the paths module and server updated. Closed segments keep their capture time when sealed so the history window still applies. (07be026)
• Dropped key codes from input records on every platform via the shared ingest path and applied the Shadow challenge check in the agent runtime and prompt builder. (784fd89)
• Updated the shadow crate's capture engine and audio/clip capture, agent pattern handling, LoRA and model manager intelligence modules, configuration, paths, server, and entry point, with Cargo dependencies adjusted. (ddf18f0)
• Shadow's Rust capture, config, intelligence and server modules were updated for the Agent, Bot and OS rename and the Console naming. (a01db11)
• Touched the capture engine's audio and clip capture, the agent pattern and LoRA/model manager modules, and the config, path, and server wiring. (cdb7957)
• Regenerated the Shadow lockfile with the patched TLS and QUIC dependency versions. (e98e55a)
• Changed the passive terminal capture module and its build configuration, wiring the updated module into Shadow's entry point. (b1093ab)
• Hardened the Shadow terminal spool: history-excluded commands are no longer recorded in bash or zsh, hook steps fail quietly, and appends stop once the drainer PID is gone. Drains retire files before emitting, bound per-line and per-file reads, avoid losing appends that race the rename, and the Windows spool directory gets an owner-only ACL or capture stays off. (cc492ed)
• Terminal-capture hooks now append each command as a JSON line to a 0700 spool file under the data directory instead of POSTing to loopback /ingest with the shared API token; a Shadow thread drains the spool every two seconds and emits on track 9 at the command's own time. Also fixed the zsh hook to record the last command and dropped the per-prompt Start-Job from the PowerShell hook. (b8a0dab)
• Applied the security scan patches to the agent prompt builder and runtime, input capture and the Shadow server, including an exclusive owner-only token-file create and removal of the input-producing AX tools from the activity chat. (8aa68aa)
• A Shadow started by Core without a key on a store that was never sealed now keeps the pre-sealing plaintext formats, reports that it is waiting for a Ryu update, and is sealed by the existing migrations at the first start with a key. A sealed store, or a Shadow started by hand, still refuses writes without a key. (6f02da2)
• Merged the proactive and context intelligence modules and updated the crate's main and server entry points. (b4f7dfd)
• The shadow app now uses ghost_eyes::capture_scratch for raw capture frames, cleans crash orphans at startup and deletes frames left behind by earlier builds. (8192eb1)
• The capture engine now closes and seals an open screen-video segment on the wall clock rather than waiting for the next encoded frame. A segment is sealed once it is an hour old, has been idle for five minutes, or is open while recording is not allowed, and segment names now include seconds so multiple segments in one hour do not collide. (4feed5f)
• A stop request now closes capture before axum drains open connections, so a long SSE stream no longer delays sealing past Core's kill deadline, and a failed ffmpeg trailer still drops handles and seals the segment. Encoders register their open path so the media sweep skips only those and seals a dead process's recent leftovers at once. (1345e30)
• The microphone recorder now refuses to start unless Shadow can seal, buffers PCM in memory and writes each two-minute segment sealed and indexed instead of plaintext WAVs. Video segments only open when Shadow can seal, and stopping capture via /stop or SIGTERM closes and seals the open segment. (7707012)
• Agent pattern files are now written whole-body as encb:v1 through an owner-only temp file, and plaintext files from earlier builds are resealed when the store opens. On macOS, OCR frames now go to Shadow's 0700 scratch directory as 0600 files instead of system temp. (7d575da)
• Episodes, meeting summaries, semantic memory, directives, proactive suggestions and procedures now keep their text as encb:v1 under per-database stores of Shadow's key, with legacy rows sealed on open and text matching moved into Rust. Shadow captures its key before runtime start and reports sealing in /health. (198809d)
• Changed Shadow's path handling, server startup and video module to seal event logs, keyframes and closed media segments, and to sweep legacy or orphaned files at startup. (0cd6d6d)
• Shell hooks now invoke Shadow's own binary through a hidden ingest-shell command that sends via peer_proof::send_with_verified_bearer, and Shadow writes its binary path and actual port into the hooks instead of the hooks posting to a hard-coded 127.0.0.1:3030. (278f540)
• Shadow's main binary and server took the listener-ownership and port-check changes, and the intelligence context and proactive modules were updated alongside the crate manifest and lockfile. (7494894)
• Carried crates/core/crypto into the standalone tree and added the dependency, refreshing the lockfile. (371898a)
• Updated Shadow's intelligence context and proactive modules along with its server and main entrypoint. (e3a5e18)
• Brought activity episodes and proactive suggestions into the retention sweep through new delete_before methods on EpisodeStore and ProactiveStore, pruned with the same cutoff hourly and after a retention change. The sweep now also finalizes abandoned open recording segments and rotates the writer's current hour when it was last written before the cutoff. (a6a8b48)
• The service now runs the history retention sweep at startup and then hourly, replacing the daily keyframe-only loop, and spawns a sweep right after /capture/control saves a retention change. (e06b0af)
• Shadow now creates its api-token exclusively at 0600 instead of writing and then changing permissions; the token stays plaintext because shell hooks read it. (1f0b58b)
• Shadow's /health endpoint now answers a challenge query with hex(HMAC-SHA256(token, ...)) over the supplied nonce, letting clients prove the listener before sending the bearer. (dd3137e)
• Updated the input and screen capture modules as part of the #747 merge. (e49d1db)
• Consolidated Shadow input ingestion into one event-ingest function, drain task, and Windows/macOS throttled mouse-move path, and re-exported Ghost's screen display/frame types instead of redefining them. (b82a6b1)
• Updated the shadow crate's audio and clip capture paths, capture engine, configuration and path handling, plus the agent pattern code and the LoRA and model manager intelligence modules. Manifest, lockfile and README were changed alongside. (c85b573)
• Updated the shadow crate's capture engine and audio and clip capture modules, plus the pattern agent and the LoRA and model manager intelligence modules. The server, paths, and config modules were touched alongside the README and manifest. (992f5f4)
• Updated shadow's audio and clip capture paths, capture engine, and the intelligence modules for LoRA and model management. Config, paths, server, and agent pattern modules changed as well. (f1cbdf6)
• Updated the capture, intelligence, and agent modules covering audio and clip capture, LoRA and model management, and pattern handling. Adjusted configuration, path handling, server wiring, and the crate manifest and lockfile. (0700593)
• Updated the shadow daemon's capture engine, audio and clip capture, pattern agent, LoRA and model manager, configuration, and path handling, plus the server and main entry point. (8dc5253)
• Updated the capture engine and audio and clip capture paths, plus the agent pattern module and the LoRA and model manager intelligence code. Config, paths, server, and the main entry point were also revised. (e83fa92)
• Updated the Shadow capture engine, audio and clip capture, pattern agent, and LoRA and model manager modules. Adjusted the local server, config, and path handling. (7879ba9)
• Changed the Shadow Rust capture engine's audio and clip capture paths, agent pattern matching, LoRA and model-manager intelligence modules, server, config and path handling. Cargo manifests and the README were updated with them. (2d39da4)
• Shadow updated its capture engine with audio and clip capture changes, and revised agent pattern matching, the LoRA and model manager intelligence modules, config, paths, and server code. (999bd1e)
• Updated shadow's capture engine, audio and clip capture paths, LoRA and model-manager intelligence modules, agent pattern handling, configuration, paths, and server code. The Cargo manifest and lockfile were updated to match. (0427301)
• Updated the shadow service's agent pattern matching, audio and clip capture, capture engine, config, paths, and server, along with the LoRA intelligence module and model manager. (680e9b0)
• Updated shadow's audio and clip capture paths, capture engine, config, paths and server modules. Intelligence code for LoRA handling and the model manager, plus the agent pattern module, were revised as well. (859b517)
• Updated the shadow service's audio and clip capture, pattern agent, LoRA and model manager modules, along with config, paths and the server. (3be8abd)
• Merged updates to the capture engine and audio/clip capture paths, the agent pattern module, LoRA and model manager code, and configuration, path, and server modules. (6d31064)
• Updated audio and clip capture, the capture engine, LoRA and model manager modules, and the config, paths, and server code. (f9b1a3a)
• Merged main into the 2FA branch, touching the desktop app's capture path (audio and clip capture, capture engine), its intelligence modules (LoRA, model manager), and agent pattern, config, paths, main and server files. Dependency manifests and the README were updated alongside. (0bfeb76)
• Updated shadow's capture engine and audio and clip capture paths, along with pattern detection, LoRA and model manager, config, paths, and server modules. (77c01e4)
• Shadow's capture, intelligence, agent pattern, config, and server modules were updated. The manifest, README, and lockfile changed as well. (7b203e4)
• Updated the capture engine and audio and clip capture paths, the pattern agent, LoRA and model manager modules, plus the server, config, and path handling. (28e5be5)
• The shadow crate updated audio and clip capture, capture engine, the pattern agent, and the LoRA and model manager modules. Configuration, path handling, and server code changed alongside them. (0932854)
• The merge carried changes to Shadow's capture engine and audio/clip capture, agent pattern handling, config and path resolution, LoRA and model manager code, and the server entry point. (5cbf4b6)
• Updated the shadow daemon's audio and clip capture, capture engine, configuration, model manager and LoRA handling, plus its agent pattern, paths and server modules. The main entry point and Cargo manifests were revised to match. (#716)
• Updated the shadow server implementation in apps/shadow/src/server.rs. (3dfc6af)
• Merged changes to the shadow server source at apps/shadow/src/server.rs. (c3c45c0)
• Updated the shadow server implementation. (9ab0a5b)
• Updated the server module in apps/shadow/src/server.rs. (5694a3c)
• Brought the shadow server source in line with rustfmt. No logic was modified. (ccb1f76)
• Refreshed the shadow app's Cargo.lock dependency lockfile. (e8a0a9a)
• Updated the crate lockfile. (ddf81f4)
• Updated the Cargo lockfile. (e650a39)
• Regenerated apps/shadow/Cargo.lock from the root lock so the standalone release workflow ships the versions CI tested. (3bf9b17)
• The capture clipping module and the shadow server module were merged as part of the runtime-chain integration. (2a72a08)
• The clip capture and server modules in apps/shadow were updated during the merge. The commit message records the touched files without describing a behavior change in this app. (71765ad)
• Updated the capture clip and server modules in the shadow app as part of the branch integration. (4c7c6d4)
• The shadow app's manifest and README were updated alongside its agent pattern, audio and clip capture, capture engine, config, LoRA, model manager, paths, and main modules as part of integrating #640 into the mega branch. (2116eb2)
• The clipboard capture path and the shadow server entry point were updated during the merge resolution. Both files, apps/shadow/src/capture/clip.rs and apps/shadow/src/server.rs, are covered by the change. (d8a51d1)
• The shadow crate took the merged capture, clip, audio, intelligence, config, and path modules, along with its manifest, README, and main entrypoint. (4a480b1)
• Serialized clip diagnostics and manifest read-modify-write under a single lock so overlapping flushes or a flush racing stop no longer drop events or rewrite the finalized manifest, and moved the fsyncing append off the async workers. The weekly journal is now anchored with a checked local offset, fixing the date_naive panic for an end on chrono's last day east of UTC. (a6bf211)
• Made clip manifest and diagnostics writes atomic via fsynced temp-and-rename, moved unparsable diagnostics.json aside instead of wiping it, wrote clips to clip.partial.mp4 before renaming, and sized weekly journal days by local midnight across DST transitions with a 400 for out-of-range end values. (e49223d)
• Moved config, path handling, capture and audio/clip modules, and model and LoRA management onto the reworked data directory layout (checkpoint 3). (d2e32fa)
• Merged the shadow server source with main as part of the branch integration. (394b79a)
• Shadow now persists the accepted capture policy before the server starts, so the accepted choice survives a restart. (74bca92)
• The Shadow server now acknowledges retention only after the retention write has been persisted atomically. (b2b456d)
• Merged origin/main into the working branch across the shadow crate, including Cargo.toml, the computer-use agent, the clip and screen capture modules, and the server entry point, keeping both sides of the conflicting edits. (205244f)
• Merged origin/main into the branch, updating the shadow crate manifest plus its computer-use agent, screen and clip capture modules, and server code. (a2c4927)
• Updated the computer-use agent implementation in src/agent/computer_use.rs. (a55e3e4)
• Merged origin/main into the shadow binary, resolving conflicts in its main entry point. (4f2bfb3)
• The shadow binary's main entry point was updated. (2b3568a)
• Resolved conflicts across Shadow's agent, computer-use, accessibility capture, capture engine, config, server, and entry point modules. (1b8bdef)
• Updated the Shadow computer-use agent, accessibility capture, configuration, main entry, and server modules. (5be3771)
• Updated Shadow capture and server code to validate capture sources, reuse modern macOS capture, and preserve recording duration when screen capture is slow. (83368ae)
• Shadow gained clap's --version flag so the installed version can be reported. (20ec47c)
• Optimized Shadow's capture engine and server paths as part of the bottleneck pass, including caching of browser sessions. (b0202e4)

Full changelog: amajorai/ryu@v0.4.0...v0.5.0

Full release notes: docs.ryuhq.com/docs/release-notes/v0.5.0