v5.7.1

Stability and Gateway Reliability

Release date: November 7, 2026

Symbiote 5.7.1 focuses on a faster, more reliable Gateway and Electron runtime, provider hot-swapping, and preventing model context overflow.

Added

• Cloudflare Workers AI provider support with account-scoped model discovery and documented SARSI model assignments.
• Artifact Engine as a local OpenAI-compatible provider, with model discovery and optional neural-memory embedding support.
• Discord provider/model selection and discovery for live provider hot-swapping.

Changed

• Electron starts and supervises the Gateway, detects stale build output, and coordinates clean restarts without launching competing Gateway processes.
• Session summary caching and coalesced neural-memory backfills reduce repeated work during startup and session listing.
• Provider-specific context and output limits account for conversation history, tool schemas, generated output, and safety overhead.

Fixed

• Cloudflare context overflow is prevented by selecting relevant tool schemas and trimming conversation history to fit the configured model context window.
• WebSocket handshake timeout handling and Discord interaction acknowledgement/reconnect paths are more resilient.
• Gateway startup and restart handling avoid stale child processes and repeated initialization work.

Upgrade notes

• No configuration migration is required.
• Cloudflare context budgeting depends on a valid contextWindow and maxTokens configuration for the selected model.
• Source checkouts should use npm ci, npm --prefix webapp ci, then npm run build.

V5.7.0

Released November 2, 2026

Native Connectors, Neural Memory & Staged Startup

Symbiote 5.7.0 adds a first-class connector platform, agent-enabled Markets and intelligence workspaces, optional local neural memory, and a more responsive startup and recovery experience. It also brings major improvements to hands-free voice, the agent's state animations, and the Memory graph.

Major upgrades

• Faster, staged startup: The Gateway now reports core readiness before launching integrations, channels, memory, market-data, and self-improvement initialization as concurrent Gamma background tasks. Optional startup work no longer holds the core ready signal hostage. Electron displays a dedicated animated thinking-orb startup screen, with a clear status if the Gateway takes longer to connect. Heavy webapp views are loaded on demand.
• A coherent four-state agent orb: Replaced the scattered particle swarm with a single, deterministic hero animation that transitions between idle, thinking, executing, and responding states. The animation uses 1,000 particles and reflects the live agent state.
• Connector platform: Added manifest-based REST and MCP adapters, encrypted credential storage, explicit per-agent capability grants, connection health checks, and bounded execution history. The initial REST catalog includes GitHub, Notion, Slack, Figma, and Canva.
• Markets and public intelligence: Added an agent-enabled Markets workspace with public price and history feeds, persistent chart drawings and indicators, a chart tool, and dedicated chat and voice input. An optional MetaTrader 5 bridge supports market data and trade-journal synchronization. The resource aggregator adds OpenSky aircraft positions and further public market and intelligence sources.
• A richer Memory experience: Added optional local neural retrieval using Ollama embeddings and a persistent HNSW index alongside lexical VDB search. Restored the Memory map as a responsive 3D force graph, with clustered nodes, filtering, node details, and image export.
• Hands-free voice: Added profile-driven wake-word activation so the phrase follows the active agent's name rather than a hardcoded alias. Voice activation can open a fresh chat with listening enabled; dictation supports a trailing “send” command. Added optional offline Vosk speech recognition with a persistent worker.
• Provider and workflow options: Registered FreeAI in the CLI and Gateway and added provider/model discovery for interactive switching. Added admin-only n8n workflow operations and safer local-first integration controls.

Fixes and reliability

• Improved speech recognition for short recordings by finalizing audio before recognition and adding trailing silence. Wake-word matching now normalizes names and tolerates common speech-recognition variation. Offline Vosk falls back to Windows speech recognition when its package or model is unavailable.
• Improved Gateway startup and recovery reporting so background initialization failures are visible and do not prevent the core-ready state. Electron supervises Gateway startup and provides a useful recovery status rather than leaving an uninformative blank window.
• Improved chart-state persistence and public data-source status handling.
• Corrected the hero orb's display size to prevent stretching and removed its brightness control without affecting global appearance settings.
• Improved Windows project-terminal lifecycle handling and session continuity.

Additional improvements

• Refined the API registry, integrations, browser, IDE, maps, health, and Markets interfaces for more consistent layout and theme behavior.
• Added CI, CodeQL, release publishing, dependency-update, and repository-label automation.
• Added desktop and mobile screenshots for the webapp, native recovery UI, and CLI.
• Updated release packaging to publish version-matched assets and SPDX software bills of materials.

Upgrade notes

• No existing configuration migration is required.
• Connectors are optional. Provide credentials for each service you choose to connect and grant agents only the capabilities they need.
• Neural memory is optional and requires Ollama plus a locally installed embedding model. The example configuration uses bge-m3; qwen3-embedding:8b is another option. Existing lexical memories remain available without neural memory.
• Offline Vosk recognition requires the vosk Python package and the vosk-model-small-en-us-0.15 model under .symbiote/models. Set SYMBIOTE_VOICE_MODEL to use a model elsewhere. Windows speech recognition remains the fallback if Vosk is unavailable.
• The MetaTrader 5 bridge is optional and requires a configured MetaTrader 5 terminal and its Python integration.
• To build from a source checkout, run npm ci, npm --prefix webapp ci, then npm run build.

Symbiote v5.6.2

Symbiote v5.6.2 — Apex

Released October 29, 2026

This patch improves Windows launching, setup, and the in-app update experience, alongside runtime and Control Room reliability fixes.

Added

• Added a manual update check in the Control Room and visible progress while a verified Windows MSI is downloaded.
• Added safe recovery states for setup when its preferred local port is already in use.

Changed

• Source installers now use the root and webapp lockfiles, provision the Electron and web build runtimes, and build the Windows shortcut launcher.
• Release publishing selects release notes from the pushed version tag.
• Improved runtime, session, heartbeat, integration, and workspace reliability.

Fixed

• Removed the Windows shortcut launcher's unconditional administrator relaunch.
• Prevented installer defaults from returning existing provider or Discord secrets to the browser.
• Restricted installer requests to the loopback origin, limited request bodies, and returned actionable client errors.
• Improved installer loading, save, and network error handling and prevented duplicate submissions.

Upgrade notes

• No configuration migration is required.
• From a source checkout, run npm ci, npm --prefix webapp ci, then npm run build.
• Windows users can check for updates from the Control Room. The downloaded MSI is validated against the published SHA-256 manifest before installation.

v5.6.1

Released October 25, 2026

This patch release focuses on reliable agent turns, session persistence, and runtime process handling.

Fixed

• Removed duplicate internal review turns from saved conversations. Completion review no longer runs for read-only tool calls. When review is needed after a mutating tool, its internal prompt and draft answer remain available to the model but are excluded from saved checkpoints and returned conversation history. The final answer remains the user-facing response.
• Prevented concurrent session saves from colliding on a shared temporary file. Each write now stages to its own temporary path. Rename retries are limited to contention errors, and failures are reported with session context while Discord receives a safe, actionable storage warning.
• Stopped expected closed-pipe errors from polluting health telemetry. Once stdout or stderr is closed by its reader, the gateway stops writing to that stream rather than repeatedly recording the same EPIPE condition.
• Made shell startup failures easier to diagnose. Foreground and background shell tools validate working directories and shell executables before spawn, then report clear errors if the process still cannot start.
• Prevented duplicate OpenRouter stream completion events. Repeated finish chunks can no longer emit repeated end-of-turn signals. A streamed response returned with HTTP 202 is consumed normally; a JSON asynchronous acknowledgement is reported explicitly because the documented chat-completions API does not define a completion-polling contract.

Changed

• SARSI provider routing now honors the configured default provider/model and only uses explicitly configured fallbacks. Newly created SARSI rules use openrouter/free.
• Provider retry behavior was hardened.
• Added regression tests for runner history, rate-limit handling, OpenRouter completion events, provider routing, session writes, and shell/process failures.

Validation

• The focused regression suite passed: 55 tests.
• The compiled release suite passed: 197 tests.
• npx tsc --noEmit and npm run build passed.
• A live authenticated request through openrouter/free returned HTTP 200 and the expected streamed answer.

Upgrade notes

• No configuration migration is required.
• From a source checkout, run npm ci and npm run build.
• Download the Windows installer or Linux npm tarball from the GitHub Release assets. The website’s platform download buttons resolve the assets from the latest published release.
• The @artifact-opensource/symbiote package is also published to GitHub Packages.

v5.6.0 [Stable]

Release date: October 23, 2026
Description: Runtime Stability and Bug Fixes
Compare: v5.5.0...v5.6.0

Downloads

• Windows x64: Symbiote-5.6.0-x64.msi
• Source archive (tar.gz): symbiote-5.6.0-source.tar.gz
• Source archive (zip): symbiote-5.6.0-source.zip
• Linux and macOS: build from either source archive. See the installation instructions below.

---

Symbiote 5.6.0 is a bug fixes and stability update. It adds HttpMcpBridge support for remote n8n connections, stabilizes the Electron gateway lifecycle, fixes stale OpenRouter key propagation, and improves UI/UX consistency across the workspace.

Highlights

Stability and bug fixes

• Electron gateway lifecycle: stabilized the desktop-to-Gateway lifecycle handling for more reliable communication.
• OpenRouter key propagation: fixed stale OpenRouter key propagation to ensure credentials are correctly refreshed.
• Workspace hero graph: fixed overflow issues in the workspace hero graph visualization.
• HeroAgentOrb: fixed dimension and style consistency issues for improved rendering.
• Surfacaced errors: fixed surfaced errors and added Windows app icon.

Enhanced integrations

• HttpMcpBridge integration: added support for remote n8n connections through the HttpMcpBridge, enhancing MCP server handling for external workflow orchestration.
• WhatsApp QR support: added WhatsApp QR code display to the GatewayStatus channel tiles for streamlined WhatsApp channel setup.

Health telemetry

• Enhanced health telemetry: improved gateway issue tracking and added provider call tracking with gateway lifecycle events for better observability.
• Activity states: updated activity states and enhanced UI components for improved runtime visibility.

Tool reliability

• Idempotency metadata: added idempotency metadata to all 62 tool definitions across 51 tool files, improving tool execution reliability and preventing duplicate operations.

UI/UX refinements

• Uptime stopwatch and channel tiles: updated styles for improved visual consistency.
• Workspace graph interactions: improved styling for graph interaction elements.
• General UI components: updated styles and components across the application for improved UX.

Documentation and cleanup

• Updated documentation files and cleaned up unused code sections.
• Removed release notes for Symbiote v5.3.0.

Upgrade and installation

No configuration migration is required. Symbiote requires Node.js 20 or newer.

Build from a source checkout or extracted source archive:

npm ci
npm run build

On Windows, run the x64 MSI to install the Gateway service. On Linux and macOS, follow the source installation and daemon instructions in the installation guide and production deployment guide.

Release artifacts

The release page includes the Windows MSI and source archives (.tar.gz and .zip). Linux and macOS do not require a separate installer package; install from source.

Full Changelog: v5.5.0...v5.6.0

v5.5.0

Symbiote v5.5.0 — Apex

Release date: October 17, 2026
Compare: v5.3.0...v5.5.0

Symbiote 5.5 is a major workspace and runtime release. It rebuilds the Control Room and Electron desktop experience around live agent operations, adds project-aware work and memory, expands the agent's integrations and tools, and delivers a Windows service installer. It also improves host telemetry, memory visualization, Discord streaming, and recovery across the desktop and gateway.

Highlights

Rebuilt Control Room and desktop app

• Reworked the web Control Room and Electron desktop shell into a live workspace for monitoring and operating the Symbiote runtime.
• Added a live workspace clock and uptime dial, runtime health and setup surfaces, and clearer desktop-to-Gateway lifecycle handling.
• Added dedicated views for projects, the agent IDE, integrations, scheduled work, conversation threads, games, and memory.
• Improved the shared visual system, responsive layouts, and appearance controls so the selected brightness and primary color carry through the application.

Project-aware agent work

• Added project workspaces with project identity, scoped context, editable project details, and project task tracking.
• Track scope, task status and progress, agent assignment, and work remaining from the project workspace.
• Select projects from the Agent IDE and run project-scoped work, including terminal tasks, without globally activating a project just to inspect it.
• Index project files as a distinct memory collection and connect projects into workspace and memory visualizations.

Expanded agent tools and integrations

• Added scheduled and recurring work through the cron manager and its Control Room panel.
• Added persistent conversation threads and workspace task operations.
• Added speech-to-text, image-generation, Google Workspace, and cloud-integration tools and supporting setup surfaces.
• Added an ArtifactEngine provider configuration option and improved OpenRouter setup guidance.
• Restored Discord slash commands and skill handlers; improved browser interaction and Windows Git Bash path handling.

Windows deployment and portable runtime

• Added a Windows x64 MSI installer for deploying Symbiote Gateway as a Windows service, with install, firewall, and uninstall scripts.
• Improved runtime setup and service lifecycle handling for the desktop app and Gateway, including recovery of Discord credentials from configured sources.
• Added release workflows for build/test validation and platform release artifacts.
• Kept Linux and macOS source installation available through the npm package and source archives; the GitHub release provides source .tar.gz and .zip archives.

Memory, visualization, and host telemetry

• Added per-logical-core CPU history and GPU adapter load/memory metrics; GPU is reported as unavailable when the host exposes no supported telemetry.
• Improved Windows counter collection with bounded queries, non-overlapping GPU refreshes, and recovery from transient sampling failures.
• Rebuilt the workspace hero visualization around connected routes from the main agent through conversations/projects to agents and subagents.
• Added project nodes to the memory map and clarified the knowledge, sessions, projects, and vector-store source families.
• Improved sparse-vector neighbor ranking with inverse-document-frequency-weighted cosine similarity and bounded, symmetric graph links.

Reliability and hardening

• Serialize Discord streaming edits to prevent duplicate, stale, or out-of-order progress messages.
• Hardened long-running agent and workspace recovery, project IDE behavior, and credential handling.
• Improved SVG safety and input sanitization, and tightened runtime/tool handling.
• Avoid expected Windows registry lookup noise when resolving Node.

Downloads

• Windows x64: Symbiote-5.5.0-x64.msi
• MSI SHA-256: DC15DC3B92EC1BE53719EE0AFDF57353CAA89B753369CDBA83F97C6D9EFA91DF
• Source archive (tar.gz): symbiote-5.5.0-source.tar.gz
• Source archive (zip): symbiote-5.5.0-source.zip
• Linux and macOS: build from either source archive. See the installation instructions below.

Upgrade and installation

No configuration migration is required. Symbiote requires Node.js 20 or newer.

Build from a source checkout or extracted source archive:

npm ci
npm run build

On Windows, run the x64 MSI to install the Gateway service. On Linux and macOS, follow the source installation and daemon instructions in the installation guide and production deployment guide.

Release artifacts

The release page includes the Windows MSI and source archives (.tar.gz and .zip). Linux and macOS do not require a separate installer package; install from source.

v5.3.0 Apex

Changelog

v5.3.0 (2026-10-12) — Apex

Full release notes: RELEASE_NOTES_v5.3.0.md

Added

• Ops Memory: a separate bounded operational-history store records coarse metadata from completed tool executions after delivery. It stores no command text, arguments, output bodies, or user messages; observations are workspace-scoped, deduplicated, capped, and expire by category.
• Historical operational retrieval: relevant past execution metadata can be surfaced for an operational user query with explicit expiry and a warning to verify volatile state before relying on it. No background model call or tool-loop decision was added.
• Tests for Ops Memory persistence, data minimization, deduplication, workspace scoping, expiry, corrupt-state reporting, opt-out, and context retrieval.
• Tests and diagnostics for Windows/Git Bash path mistakes, successful commands with intentionally empty output, Discord progress message sizing, and sensitive argument redaction.

Changed

• exec now distinguishes a successful silent command from absent results and provides actionable guidance for path and shell mismatches on Windows.
• Discord tool-progress previews are capped below Discord's 2,000-character message limit and redact common credential/header formats before display.
• README and release documentation now describe the current runtime, memory boundaries, tool execution, adaptive subsystems, channels, and security considerations.
• Version reporting remains package-metadata driven: the package, gateway banner, daemon, web status, and MCP server all resolve the same application version.

Fixed

• Prevented Discord progress edits from exceeding the platform message-content limit.
• Clarified that Windows Git Bash is not a Linux filesystem: Windows drive paths and guessed /workspace or /tmp paths are not valid unless they exist in that shell.
• Successful exec calls with no stdout/stderr now return an explicit exit-code-0 result rather than an empty string.
• Restored and retained the committed Discord.js 14.25.1 dependency and lockfile after an unintended local downgrade.

Included since v5.2.0

• More reliable tool-call pairing and session-message sanitization.
• Hardened session persistence, self-improvement evaluation, and long-running agent behavior.
• Corrected historical COMB wording and removed hard-coded OpenRouter quota/reset assumptions; retries now follow provider response metadata.

Upgrade notes

• No configuration migration is required for this release.
• Ops Memory is enabled by default and can be disabled with SYMBIOTE_OPS_MEMORY=0.
• Run npm ci followed by npm run build when upgrading from a source checkout.
• On Windows, provide workdir instead of issuing cd with guessed paths; use /c/... for explicit Git Bash paths.

---

v5.2.0 (2026-10-10) — Apex

Full notes are superseded by the current v5.3.0 release notes; this section preserves the v5.2.0 release summary.

Added

• Curator tool-bug detection (v5.1): per-tool failure windows, minor/major classification, retry/timeout/fallback proposals
• Memograph integration with shard-hash verification; reseal repair tool
• fs and hardware admin tools; read handles directories, binary and very large files; write supports append and base64
• Native browser CUA driver, channel-specific formatting, live CLI interrupts
• Skill ingestion and persona_digest

Changed

• Tool sandbox off by default (SYMBIOTE_SANDBOX=1 re-enables it); exec default timeout 600 s
• Prompt-injection guard rebuilt with trust levels, weighted patterns and obfuscation-aware normalisation (SYMBIOTE_INJECTION_GUARD)
• Naming unified on symbiote; environment variables are SYMBIOTE_*

Fixed

• Shell execution on Windows (PowerShell-first), tree-kill for timeouts
• Stream drops retried; hung tools and silent streams time out; progress saved each iteration
• Context compaction preserves the original task and tool-call pairing
• Repeated text in context, empty-reply stalls, cut-off tool arguments, lost output tails
• Tool-success reporting, daemon lock and duplicate-start issues, Discord drops, OpenRouter registration

---

v4.0.0 (2026-09-03) — Apex

Windows-First Runtime Portability

• Replaced Unix-only shell assumptions in core execution tools with platform-aware shell dispatch
• Added shared runtime helpers for app home, config discovery, IPC keyring lookup, Python launch, and shell execution
• Removed hardcoded /etc, /usr/bin/chromium, /bin/bash, /home/..., and raw /tmp/... assumptions from key runtime paths
• Preserved legacy symbiote paths for compatibility while preferring current Symbiote runtime locations

Installer & Launch Flow Cleanup

• Hardened launcher/runtime assets for Windows, Linux, and macOS
• Improved browser sidecar startup so packaged and cross-platform installs can resolve Python and browser paths correctly
• Aligned setup defaults with portable app data locations for new installs

Release & Packaging Prep

• Aligned package metadata and runtime version reporting to v4.0.0 Apex
• Refreshed release surfaces and static landing assets for public packaging and deployment handoff
• Updated installation guidance to use the published symbiote package name

---

v3.0.0 (2026-08-23) — Apex

Production Hardening

• Enforced HTTP API authentication across web and API chat paths
• Added loopback-safe API host defaults and stricter CORS validation
• Prevented unverified HTTP owner impersonation
• Validated config before startup and hot reload
• Reduced sensitive request/message logging in production paths

Installer & Setup

• Replaced the legacy wizard with a shared guided setup flow
• Added a desktop installer UI served by symbiote init --ui
• Added double-click launchers: install.command and install.cmd
• Rebuilt symbiote install to install, build, configure, and launch in one flow
• Preserved existing .env secrets during reconfiguration

Runtime Reliability

• Fixed sub-agent depth accounting
• Implemented real sub-agent kill and steer behavior via abort + resume
• Removed accidental admin-tier treatment for sub-agents
• Fixed packaged browser sidecar path discovery
• Unified runtime version reporting through package metadata

---

v2.1.0 (2026-03-12)

Circuit Breaker Failover

• Providers that fail 3x consecutively are automatically disabled for 60s cooldown
• Latency-aware routing: tracks moving average latency per provider, prefers faster ones when all healthy
• Auto-recovery: half-open probes after cooldown, full recovery after 2 consecutive successes
• Health states: healthy -> degraded -> unhealthy -> circuit-open (automatic transitions)
• Circuit-open providers skipped during fallback chain (no wasted retries)
• See: Circuit Breaker

Session Hot Resume

• Session state persisted to disk every 60s
• On process termination: all active sessions marked and flushed to disk before exit
• Startup restoration: previous session state reloaded on boot with 24h age validation
• Gateway restarts no longer lose conversation context registration
• See: Sessions

Metrics Collector

• Provider metrics: call count, error count, token usage (in/out), latency histograms (p50/p90/p99)
• Tool metrics: per-tool call frequency, latency, error rates
• Session metrics: turn count, active session tracking
• Ring buffer design: bounded memory, automatic eviction of old samples
• Auto-flush to JSON every 5 minutes; zero dependencies (pure Node.js stdlib)
• See: Metrics

Configurable Idle Emoji

• Idle status indicator emoji now configurable via idleEmoji field in symbiote.json
• Also configurable via IDLE_EMOJI environment variable
• Defaults to existing behavior when absent

Enhanced Health Endpoint

• GET /api/v1/health now returns comprehensive gateway status
• Fields: version, uptime (human-readable), PID, provider health states (per-provider circuit breaker status), metrics snapshot (tokens/latency/errors), memory usage (RSS + heap in MB), active turns, session count, tool count, connected channels

Other

• Dependabot security patches (file-type)
• Documentation and landing page updates for Symbiote rebrand

---

v2.0.0 (2026-03-12)

Provider Health Monitor — Circuit Breaker + Intelligent Failover

• Circuit breaker pattern: Providers that fail 3× consecutively are automatically disabled for 60s cooldown
• Latency-aware routing: Tracks moving average latency per provider, prefers faster ones when all healthy
• Auto-recovery: Half-open probes after cooldown, full recovery after 2 consecutive successes
• Health states: healthy → degraded → unhealthy → circuit-open (with automatic state transitions)
• Fallback chain integration: Circuit-open providers are skipped during failover — no wasted retries
• File: src/providers/health.ts (202 lines)

🔥 Session Hot Resume — Survive Restarts

• Session state persistence: Active session metadata saved to disk every 60s
• Graceful shutdown capture: On SIGTERM/SIGINT, all active sessions marked and saved
• Startup restoration: Previous session state restored on boot with age validation (24h expiry)
• Zero-loss restarts: Gateway restarts no longer lose conversation context registration
• File: src/sessions/hot-resume.ts (193 lines)

Metrics Collector — Runtime Observability

• Provider metrics: Call count, error count, token usage (in/out), latency histograms (p50/p90/p99)
• Tool metrics: Per-tool call frequency, latency, error rates
• Session metrics: Turn count, active sessions tracking
• Ring buffer design: Bounded memory, automatic eviction of ...

v5.2.0 Apex

Release Notes - v5.2.0 Apex

Symbiote v5.2.0 - Admin-Grade Tools, Hardened Agent Loop, Windows-Native Execution

Date: October 10, 2026

This release covers everything from v5.1 onward: the self-improving Curator, persistent memory with Memograph, native browser control, a far more resilient agent loop, a rebuilt prompt-injection guard, and full-access admin tooling that works natively on Windows, Linux and macOS.

Highlights

• Full-access admin agent. The tool sandbox is off by default. read, write, edit, exec and the new fs and hardware tools reach any path and any device on the machine. Set SYMBIOTE_SANDBOX=1 to restore owner/non-owner tiering.
• Shell commands work on Windows. exec and background processes use PowerShell (pwsh, then powershell, then cmd) instead of assuming sh. Override with SYMBIOTE_SHELL.
• Long tasks no longer stall or restart from scratch. Dropped streams are retried, hung tools time out, progress is saved every iteration, and the original task survives context compaction.
• A prompt-injection guard that does not cry wolf. Source code and docs no longer trigger warnings, while genuine injection in web or MCP content is flagged with obfuscation-aware detection.

New Features

v5.1 - Curator tool-bug detection

• Per-tool failure tracking over a sliding window of recent interactions
• Minor bugs (a single failure) produce low-confidence retry/timeout proposals
• Major bugs (repeated failures or a failure rate of 50% or more) produce high-confidence proposals to raise retries, extend timeouts or use a fallback tool, with a cooldown to avoid duplicates
• Per-tool results are now actually delivered to the Curator after each turn, and interaction success reflects real tool outcomes

Memory and knowledge

• Memograph integration with the embedded vector store: snapshots are imported with SHA-256 shard-hash verification that mirrors Memograph's own hashing
• reseal tool in Memograph repairs snapshots whose hashes went stale after content edits, rewriting parent links and edges consistently
• Skill-file ingestion into the vector store, plus a persona_digest tool for consolidating user context
• Long-term retrieval in the loop: context dropped by truncation is preserved in the vector store and retrieved on later turns

Channels and interfaces

• Channel-specific response formatting for CLI and Discord
• Live CLI interrupts, queueing and steering during long-running turns
• Native browser CUA driver (cua_screenshot, cua_click, cua_move, cua_type, cua_press, cua_scroll)
• Refreshed CLI and TUI branding (Symbiote name, indigo theme, minimal layout)

Admin tools

• fs: list, stat, mkdir, move, copy, delete, chmod, symlink, and search by file name or content, across the whole machine
• hardware: CPU, memory, disks, GPU, network, USB, audio, camera, Bluetooth, displays, serial ports, battery, sensors and processes on Windows, Linux and macOS
• read: reads any path, lists directories, streams files over 10 MB, returns hex dumps for binary files and raw bytes via encoding: base64|hex
• write: appends, writes binary via base64, and no longer redirects paths to a temp folder
• exec: default timeout raised from 30 s to 600 s
• todo is now available in the gateway daemon

Agent Loop Reliability

• Completion review runs only after real tool work and at most once per turn
• Mid-stream connection drops (terminated, ECONNRESET, timeouts) are retried up to three times with backoff
• A silent provider stream fails after 3 minutes and is retried (SYMBIOTE_STREAM_IDLE_MS)
• A hung tool is cut off after 15 minutes (SYMBIOTE_TOOL_TIMEOUT_MS) and the loop continues
• Progress is persisted after every iteration, so a failed turn no longer loses its tool work
• Context compaction keeps the original request and never starts on an orphaned tool result
• Per-iteration text replaces the old cumulative text, ending repeated narration in context and replies
• Empty replies after tool work are nudged instead of ending the turn silently
• Truncated tool-call JSON returns a clear error instead of running the tool with empty arguments
• Oversized tool output keeps both head and tail, because errors usually appear at the end
• A call that fails three times in a row is flagged so the model changes approach
• Provider routing, fallback chains and session path resolution were hardened for long runs

Security

• Prompt-injection detection uses weighted, word-boundary patterns with Unicode, zero-width, bidi and look-alike normalisation, and scans embedded base64
• Output from local tools gets a single-line note for high-confidence hits; web, image, memory, MCP and unknown tools get a full untrusted-content banner
• SYMBIOTE_INJECTION_GUARD accepts standard (default), strict or off
• Bidi and invisible control characters are always stripped from tool results

Bug Fixes

• Fixed every shell command failing on Windows because sh does not exist there
• Fixed an over-broad self-kill guard that blocked ordinary commands mentioning the project name
• Fixed false-positive injection warnings on most read and exec results
• Fixed turns dying on a single dropped network connection
• Fixed work being lost after a failed turn, which caused the agent to repeat earlier steps
• Fixed the agent losing its task after context compaction
• Fixed silent stops after tool-heavy runs
• Fixed SessionManager defaulting to a legacy home directory instead of the workspace sessions directory
• Fixed OpenRouter registration and authentication, plus provider fallback and routing
• Fixed Discord message drops, silent stops and timeouts
• Fixed stale to-do output in the CLI
• Fixed duplicate daemon startup, stale daemon lock detection and daemon isolation on SIGTERM
• Fixed the BLINK continuation loop and long-turn time limits
• Fixed tool-success reporting, which always read as successful
• Fixed a duplicate bin entry and leftover legacy names in the package manifest
• Fixed the persisted SARSI identity on existing installs, which migrates to the current name on first load

Cleanup and Packaging

• Naming is unified on symbiote across code, config, environment variables (SYMBIOTE_*), file names and docs
• All runtime paths are project- or home-relative; hard-coded absolute and legacy paths are removed
• .gitignore is rebuilt to cover secrets, runtime state, sessions, vector data, .json and .jsonl user data, backups, logs and build output
• Installer scripts verify prerequisites and stop on failed steps; install.ps1 now checks exit codes
• Clean rebuilds produce an output tree free of legacy names

Upgrade Notes

• Rename any MACH6_* variables in your .env to SYMBIOTE_*
• symbiote.json is the only config file name; the legacy ~/.mach6 home is no longer read
• Admin access is the default. If you run Symbiote for other users, set SYMBIOTE_SANDBOX=1
• Run symbiote restart after upgrading

Release Handoff

• Suggested tag: v5.2.0
• Suggested release title: v5.2.0 Apex

Symbiote v4.0.0 Apex — Updated

What's Changed

• Fix: build reliability, tsconfig, logger shim, and performance tune script by @alisbanaam-alt in #2
• Restore clean-checkout build and tighten installer/sub-agent edge cases by @artifact-opensource with @Copilot in #3
• Prepare Symbiote v4.0.0 Apex for cross-platform packaging by @artifact-opensource with @Copilot in #4
• Main by @artifact-opensource in #5
• Enhancing project documentation for better clarity by @artifact-opensource with @Copilot in #6
• Fix docs sidebar logo path resolution on landing page by @artifact-opensource with @Copilot in #7
• Main by @artifact-opensource in #8

New Contributors

• @alisbanaam-alt made their first contribution in #2
• @artifact-opensource made their first contribution in #5

Full Changelog: v3.0.0...v4.0.0

Symbiote v3.0.0

What is New

NVIDIA NIM Provider

• Added full NVIDIA NIM provider with streaming and tool call support
• Default model: meta/llama-4-maverick-17b-128e-instruct
• Supports: Llama 4 Maverick, Llama 4 Scout, Nemotron 70B, Mistral Large, Phi 4, DeepSeek R1

9 Providers

Anthropic, OpenAI, GitHub Copilot, Google Gemini, Groq, Ollama, xAI, NVIDIA NIM, Gladius

Infrastructure

• Repository: artifact-opensource/symbiote
• Default branch: master
• Clean single-branch workflow

Config

{
  "providers": {
    "nvidia": {
      "baseUrl": "https://integrate.api.nvidia.com",
      "model": "meta/llama-4-maverick-17b-128e-instruct"
    }
  }
}

NVIDIA_API_KEY=your_key_here