v0.24.1

0.24.1 (2026-10-26)

Bug Fixes

• build: silence the workspace-root and edge-runtime build warnings (#579) (e9524a4)
• desktop: handle revoked OIDC refresh token and halt retry loop (#477) (#581) (7408d76)

Performance Improvements

• services: make the win32 boot-restore orphan probe non-blocking (#583) (27c59ea)
• services: probe orphan command lines asynchronously and concurrently on win32 (27c59ea)

Desktop app

Platform	Signing
Linux release (deb, AppImage)	Unsigned by convention. Verify the download with SHA256SUMS.txt.
macOS release (dmg, zip)	Signed with a Developer ID Application certificate, notarized by Apple, and stapled.
Windows release (NSIS, zip)	Signed with Azure Artifact Signing.

These installers were built and verified on the release PR. Verify a download with:

sha256sum -c SHA256SUMS.txt --ignore-missing   # shasum -a 256 -c on macOS

macOS ships a dmg for installation and a zip for updates.
Windows ships an NSIS installer and a zip.
Linux ships a deb and an AppImage.
Every platform is x64 except macOS, which is Apple silicon arm64.

v0.24.0

0.24.0 (2026-10-25)

Features

• work-center: list running tasks first and collapse sections (#574) (7bef943)

Bug Fixes

• desktop: send the instance credential on the /pty WebSocket upgrade (#577) (cd9f6dc)
• pty: contain PTY startup failures and adopt the ConPTY handle fix (#578) (2f152bf)
• work-center: list finished turns as needing you and clear all edits with one acknowledge (#576) (d8fe154)

Desktop app

Platform	Signing
Linux release (deb, AppImage)	Unsigned by convention. Verify the download with SHA256SUMS.txt.
macOS release (dmg, zip)	Signed with a Developer ID Application certificate, notarized by Apple, and stapled.
Windows release (NSIS, zip)	Signed with Azure Artifact Signing.

These installers were built and verified on the release PR. Verify a download with:

sha256sum -c SHA256SUMS.txt --ignore-missing   # shasum -a 256 -c on macOS

macOS ships a dmg for installation and a zip for updates.
Windows ships an NSIS installer and a zip.
Linux ships a deb and an AppImage.
Every platform is x64 except macOS, which is Apple silicon arm64.

v0.23.0

0.23.0 (2026-10-25)

Highlights: Work Center

Work Center replaces the "Needs you" titlebar inbox.

• Pill. The titlebar pill now shows two counts: tasks working and tasks that need you.
• List. Click the pill to open one list across all projects, grouped into Needs you, Working and Waiting, plus Recently finished for the last seven days.
• Phone. On a phone, Work Center is the new Work tab, with a needs-you badge.

Each row shows one chip per reason a task needs you:

• a permission request
• a question
• a review decision
• a failed turn (Recover)
• a rewritten base branch (Repair base)
• failing CI on an open pull request (Open checks)
• a settings proposal
• an agent edit (Acknowledge)

A chip opens the exact card in the task's session, and Back returns you to the same row.

Rows can act without opening the task:

• A permission request that offers only Allow once and Deny shows both buttons inline.
• An agent edit shows Acknowledge inline.
• Every row has Snooze: 1 hour, until tomorrow, or until Monday.
• Keyboard: arrows, Enter, →, S and Esc.

A snoozed task leaves every count: the pill, the phone badge, project badges and the desktop dock or taskbar badge. When the snooze ends and the item is still open, you get one "Snooze ended" notification.

How counting works:

• A task counts once, however many items it has.
• A sleeping, queued, held or blocked task is listed under Waiting with its reason.
• A task running a background command or subagent counts as Working.
• Agent edits on done or cancelled tasks are not counted. The task card keeps their diff and Revert.

Review submissions (opt-in)

Set CALANDRIA_REVIEW_REQUESTS=1 to let agents submit work for review with the new submit_review, get_review and withdraw_review tools. A submission is either a code change or one Markdown document.

The task gets a Review tab that shows exactly what the agent submitted:

• For code, the diff is pinned by git refs, so it stays the same when the branch moves.
• For a document, you see its exact bytes.

Your decisions:

• Accept records approval only.
• Request changes sends your reason to the agent as its next message.
• Waive a required review, with a reason.
• Merge an accepted code review.

Only a person can decide. Service tokens get 403 human_required.

While a required review is unsatisfied, Calandria refuses to complete, cancel, merge, reclaim, move or delete the task, and the worktree sweep and retention prune skip it. Details: docs/REVIEWS.md.

Upgrade notes

• Migration. The database migrates to schema version 11 at startup. The migration only adds tables and columns. A build older than 0.23.0 refuses to open the migrated database, so back up first (npm run backup) if you might roll back.
• Backup. Once you use reviews, back up the database and each project repo together as one set. Code reviews live in git refs. See docs/REVIEWS.md (Backup and rollback).
• Compatibility. GET /api/needs-you remains as a compatibility adapter with the same response shape.

Features

• work-center: replace the Needs you inbox with Work Center and add agent review submissions (#572) (ca7a753)
• work-center: submit-review tools and completion safeguards (WC-13) (ca7a753)
• work-center: transition-based notifications and desktop counts (ca7a753)

Bug Fixes

• deps: resolve remaining production audit findings (#562) (de22845)
• work-center: drop closed tasks' agent edits and keep row titles readable (#573) (53c202c)
• work-center: stop the project count cache serving a stale zero (WC-11) (ca7a753)

Dependencies

• deps: bump Claude Code CLI to 2.1.310 and Agent SDK to 0.3.310 (#459) (#558) (872d862)
• deps: refresh agent CLI pins (#560) (61409ee)

Desktop app

Platform	Signing
Linux release (deb, AppImage)	Unsigned by convention. Verify the download with SHA256SUMS.txt.
macOS release (dmg, zip)	Signed with a Developer ID Application certificate, notarized by Apple, and stapled.
Windows release (NSIS, zip)	Signed with Azure Artifact Signing.

These installers were built and verified on the release PR. Verify a download with:

sha256sum -c SHA256SUMS.txt --ignore-missing   # shasum -a 256 -c on macOS

macOS ships a dmg for installation and a zip for updates.
Windows ships an NSIS installer and a zip.
Linux ships a deb and an AppImage.
Every platform is x64 except macOS, which is Apple silicon arm64.

v0.22.2

0.22.2 (2026-10-24)

Bug Fixes

• docker: stop agy and gh pins from breaking image builds (#555) (e1a6a7d)

Desktop app

Platform	Signing
Linux release (deb, AppImage)	Unsigned by convention. Verify the download with SHA256SUMS.txt.
macOS release (dmg, zip)	Signed with a Developer ID Application certificate, notarized by Apple, and stapled.
Windows release (NSIS, zip)	Signed with Azure Artifact Signing.

These installers were built and verified on the release PR. Verify a download with:

sha256sum -c SHA256SUMS.txt --ignore-missing   # shasum -a 256 -c on macOS

macOS ships a dmg for installation and a zip for updates.
Windows ships an NSIS installer and a zip.
Linux ships a deb and an AppImage.
Every platform is x64 except macOS, which is Apple silicon arm64.

v0.22.1

0.22.1 (2026-10-24)

Bug Fixes

• composer: attach files on a phone and keep them across rotation (#549) (f33754f)
• docker: bump agy CLI pin to 1.4.7 (#554) (9e2786c)

Desktop app

Platform	Signing
Linux release (deb, AppImage)	Unsigned by convention. Verify the download with SHA256SUMS.txt.
macOS release (dmg, zip)	Signed with a Developer ID Application certificate, notarized by Apple, and stapled.
Windows release (NSIS, zip)	Signed with Azure Artifact Signing.

These installers were built and verified on the release PR. Verify a download with:

sha256sum -c SHA256SUMS.txt --ignore-missing   # shasum -a 256 -c on macOS

macOS ships a dmg for installation and a zip for updates.
Windows ships an NSIS installer and a zip.
Linux ships a deb and an AppImage.
Every platform is x64 except macOS, which is Apple silicon arm64.

v0.22.0

0.22.0 (2026-10-24)

Features

• transcript: render mermaid diagrams in chat messages (#545) (b9212f5)

Bug Fixes

• security: bump body-parser to 2.4.0 for GHSA-27r3-jxmh-p828 (#541) (29c5921)

Dependencies

• deps-dev: bump electron from 44.5.0 to 44.9.1 in /desktop (#539) (5a57dac)
• deps-dev: bump fast-uri from 3.1.8 to 3.1.9 in /desktop (#537) (11444ea)
• deps-dev: bump undici from 6.29.0 to 6.29.1 in /desktop (#543) (d2267fa)

Desktop app

Platform	Signing
Linux release (deb, AppImage)	Unsigned by convention. Verify the download with SHA256SUMS.txt.
macOS release (dmg, zip)	Signed with a Developer ID Application certificate, notarized by Apple, and stapled.
Windows release (NSIS, zip)	Signed with Azure Artifact Signing.

These installers were built and verified on the release PR. Verify a download with:

sha256sum -c SHA256SUMS.txt --ignore-missing   # shasum -a 256 -c on macOS

macOS ships a dmg for installation and a zip for updates.
Windows ships an NSIS installer and a zip.
Linux ships a deb and an AppImage.
Every platform is x64 except macOS, which is Apple silicon arm64.

v0.21.4

0.21.4 (2026-10-23)

Bug Fixes

• docker: bump gh apt pin to 2.103.2 (#534) (b24b866)

Desktop app

Platform	Signing
Linux release (deb, AppImage)	Unsigned by convention. Verify the download with SHA256SUMS.txt.
macOS release (dmg, zip)	Signed with a Developer ID Application certificate, notarized by Apple, and stapled.
Windows release (NSIS, zip)	Signed with Azure Artifact Signing.

These installers were built and verified on the release PR. Verify a download with:

sha256sum -c SHA256SUMS.txt --ignore-missing   # shasum -a 256 -c on macOS

macOS ships a dmg for installation and a zip for updates.
Windows ships an NSIS installer and a zip.
Linux ships a deb and an AppImage.
Every platform is x64 except macOS, which is Apple silicon arm64.

v0.21.3

0.21.3 (2026-10-23)

Bug Fixes

• security: bump dompurify, next, MCP SDK, gh and Antigravity pins to clear the audit and image gates (#523) (d74f6b9)

Dependencies

• deps-dev: bump electron from 44.0.0 to 44.5.0 in /desktop (#529) (5d974ba)
• deps-dev: bump vite from 6.4.3 to 6.4.5 (#526) (98156b2)
• deps: bump Codex CLI and SDK to 0.164.0 (#459) (#524) (69db5fe)
• deps: bump hono, ip-address and vitest with the lockfile gypfile fix (#528) (146ce8d)
• deps: bump zod from 4.4.3 to 4.6.7 (#531) (ac74f0d)
• deps: refresh agent CLI pins (#511) (587ebc3)

Desktop app

Platform	Signing
Linux release (deb, AppImage)	Unsigned by convention. Verify the download with SHA256SUMS.txt.
macOS release (dmg, zip)	Signed with a Developer ID Application certificate, notarized by Apple, and stapled.
Windows release (NSIS, zip)	Signed with Azure Artifact Signing.

These installers were built and verified on the release PR. Verify a download with:

sha256sum -c SHA256SUMS.txt --ignore-missing   # shasum -a 256 -c on macOS

macOS ships a dmg for installation and a zip for updates.
Windows ships an NSIS installer and a zip.
Linux ships a deb and an AppImage.
Every platform is x64 except macOS, which is Apple silicon arm64.

v0.21.2

0.21.2 (2026-10-20)

Bug Fixes

• gemini: hand out the whole Google sign-in URL for Antigravity login (#497) (0f708f8)
• mcp: name the reason a /api/mcp request was refused (#506) (48d23be)

Dependencies

• deps: bump Antigravity CLI to 1.3.4 (#495) (99130fe)
• deps: bump Antigravity CLI to 1.3.5 (#496) (6a568fe)
• deps: bump Antigravity CLI to 1.4.0 (#500) (35f329a)
• deps: bump Antigravity CLI to 1.4.2 (#503) (311e2a7)
• deps: bump Antigravity CLI to 1.4.3 (#507) (a5dd3ae)
• deps: bump Claude Code CLI to 2.1.303 (#505) (a1eb26b)
• deps: bump node from 662933c to 2989926 in the base-image group across 1 directory (#504) (a6e6980)

Desktop app

Platform	Signing
Linux release (deb, AppImage)	Unsigned by convention. Verify the download with SHA256SUMS.txt.
macOS release (dmg, zip)	Signed with a Developer ID Application certificate, notarized by Apple, and stapled.
Windows release (NSIS, zip)	Signed with Azure Artifact Signing.

These installers were built and verified on the release PR. Verify a download with:

sha256sum -c SHA256SUMS.txt --ignore-missing   # shasum -a 256 -c on macOS

macOS ships a dmg for installation and a zip for updates.
Windows ships an NSIS installer and a zip.
Linux ships a deb and an AppImage.
Every platform is x64 except macOS, which is Apple silicon arm64.

v0.21.1

0.21.1 (2026-10-12)

Bug Fixes

• mcp: annotate external tools for client confirmations (#482) (4e141a7)
• security: prevent external MCP from releasing unattended work (#492) (ca55bcf)

Desktop app

Platform	Signing
Linux release (deb, AppImage)	Unsigned by convention. Verify the download with SHA256SUMS.txt.
macOS release (dmg, zip)	Signed with a Developer ID Application certificate, notarized by Apple, and stapled.
Windows release (NSIS, zip)	Signed with Azure Artifact Signing.

These installers were built and verified on the release PR. Verify a download with:

sha256sum -c SHA256SUMS.txt --ignore-missing   # shasum -a 256 -c on macOS

macOS ships a dmg for installation and a zip for updates.
Windows ships an NSIS installer and a zip.
Linux ships a deb and an AppImage.
Every platform is x64 except macOS, which is Apple silicon arm64.