VaneHub AI v1.0.0

VaneHub AI 1.0.0

VaneHub AI 1.0.0 is the first stable desktop release of the unified workspace for Claude Code, Codex CLI, OpenCode, Gemini CLI, Antigravity CLI, and the built-in OnePiece API agent.

Highlights

• Detect, install, configure, launch, and switch between supported coding agents from one workspace.
• Organize sessions, projects, Git worktrees, local terminals, and remote SSH workspaces.
• Manage MCP servers, SDKs, Skills, prompt hooks, extensions, scheduled tasks, notifications, and provider profiles.
• Inspect usage, task output, and redacted unified logs without bypassing the desktop service boundary.
• Use the browser-accessible Web/mock runtime for interface evaluation when native desktop capabilities are unavailable.

Downloads

Platform	Architecture	Assets
Windows	x64	x64 .exe installer (NSIS), updater-signed; Authenticode deferred
macOS	Apple Silicon	aarch64 .dmg, updater-signed; code signing/notarization deferred
macOS	Intel	x64 .dmg, updater-signed; code signing/notarization deferred
Linux	x64	.deb and AppImage
Linux	ARM64	.deb and AppImage

No Windows ARM64, .msi, or .rpm package is included in this release. Linux ARM64 packages are built on GitHub's ubuntu-24.04-arm hosted runner, whose label is currently in public preview.

Verify your download

This phase verifies the Tauri updater signature, package checksums, SBOM, and GitHub provenance. Windows packages are not Authenticode signed, and macOS packages are not Developer ID signed or notarized yet. Linux packages do not use operating-system code signing; their evidence is integrity and provenance only.

Every downloadable package is covered by SHA256SUMS, an SPDX SBOM, and GitHub build-provenance and SBOM attestations. Download SHA256SUMS beside the package and run:

sha256sum --check --ignore-missing SHA256SUMS

Verify GitHub provenance with:

gh attestation verify <downloaded-file> --repo cdavid817/vanehub-ai

Updates

Stable installations use signed updater artifacts and the stable update channel. Automatic checks are disabled by default and can be enabled from the application settings. Preview releases remain on a separate channel and are not offered to stable clients.

Known limitations

• Native CLI detection, process launch, local storage, desktop integration, and installation require the Tauri desktop application; browser mode uses deterministic Web/mock behavior.
• Windows SmartScreen and macOS Gatekeeper may warn because operating-system signing and notarization are deferred to a later release phase.
• Agent vendor authentication still occurs through each vendor's CLI or account flow; VaneHub AI does not broker subscription sign-in.
• Package availability is limited to the platform and architecture matrix above.

Reporting problems

Open a bug report with the release version, operating system, and a relevant redacted log excerpt. Use the feature request for product ideas. Report vulnerabilities privately through a GitHub security advisory, not a public issue.

---

What's Changed

Documentation

• docs(zh): consolidate the Chinese documentation set and flatten README navigation by @cdavid817 in #102
• fix(release): publish a checksum manifest downloaders can verify by @cdavid817 in #105
• feat(plan): add Plan execution foundation by @cdavid817 in #106
• feat(agents): add Antigravity CLI as a fifth built-in CLI agent by @cdavid817 in #107
• chore(skills): refresh Claude workflow skills by @cdavid817 in #108
• feat: introduce extensible CLI provider contracts by @cdavid817 in #109
• feat: add workspace Tree-sitter code indexing by @cdavid817 in #110
• fix(skills): recover built-in Skill seeding from a registry/filesystem divergence by @cdavid817 in #111
• docs: surface project app icon in README hero by @cdavid817 in #112
• fix: harden runtime concurrency, transactional migrations, and query efficiency by @cdavid817 in #113
• feat: add durable session recovery by @cdavid817 in #117
• feat(lsp): add semantic code intelligence by @cdavid817 in #118
• feat: complete multi-agent session presence by @cdavid817 in #119
• feat(skills): add governed skill evolution foundations by @cdavid817 in #120
• Refine agent workflows, permissions, and tool activity by @cdavid817 in #121
• feat: complete OnePiece native Plan-Agent loop by @cdavid817 in #122
• feat: add fine-grained token accounting by @cdavid817 in #123
• Bind IM connectors to existing sessions by @cdavid817 in #124
• Add unified Todo Board by @cdavid817 in #125
• Add governed skill evolution evidence and utility delegation by @cdavid817 in #126
• feat: add OnePiece built-in tool system by @cdavid817 in #127
• Add OnePiece context management by @cdavid817 in #128
• Fix misleading workspace state and make destinations addressable by @cdavid817 in #129
• Add application-level slash commands for OnePiece sessions by @cdavid817 in #130
• Make file references work for source files by @cdavid817 in #133
• Add cross-platform desktop smoke automation by @cdavid817 in #132
• Archive the file reference preview and drag-paste changes by @cdavid817 in #134
• Expand the OnePiece native agent with five built-in capabilities by @cdavid817 in #136
• Add goals as a top-level entity over plans, loops, work items, and sessions by @cdavid817 in #138
• Archive the goal system change by @cdavid817 in #139
• Read and edit Jupyter notebooks a cell at a time by @cdavid817 in #140
• Stop direct connection from inheriting the operating system proxy by @cdavid817 in #137
• Rework cross-session memory into an addressable file store with two-tier recall by @cdavid817 in #141
• Archive the desktop smoke and slash command changes by @cdavid817 in #135
• Archive the direct-connection proxy inheritance fix by @cdavid817 in #142
• Advance Skill configuration, the sandboxed tool runtime, and Utility delegation by @cdavid817 in #143
• Enforce architecture fitness functions by @cdavid817 in #144
• Unify the Agent context engine by @cdavid817 in #145
• Add the agent code review center by @cdavid817 in #146
• Unify the agent run state machine by @cdavid817 in #147
• Add signed desktop releases and automatic updates by @cdavid817 in #148
• Add agent evaluation and benchmark platform by @cdavid817 in #155
• Add sandboxed Skill Tool runtime by @cdavid817 in #156
• Harden runtime lifecycle, persistence, and context boundaries by @cdavid817 in #157
• Rebuild the documentation topology and complete both user guides by @cdavid817 in #158
• Add Agent Mission Control by @cdavid817 in #159
• Extend the provider runtime plugin SDK by @cdavid817 in #161
• Make guide images resolve in the repository as well as the assembled site by @cdavid817 in #160
• perf: add runtime performance budgets by @cdavid817 in #162
• feat: add hybrid local model runtime by @cdavid817 in #163
• feat: add agent runner abstraction by @cdavid817 in #164
• Freeze line budgets for oversized source paths by @cdavid817 in #166
• Split migrations.rs into a directory module by @cdavid817 in #167
• Extract 102 methods from web-agent-client into bounded-context modules by @cdavid817 in #168
• Extract api_process_adapter inline tests to a child module by @cdavid817 in #169
• Archive four completed changes, fix a load-sensitive teardown assertion by @cdavid817 in #171
• Docs/expand capability chapters by @cdavid817 in #165
• Split api_process_adapter into responsibility modules by @cdavid817 in #173
• Split two monolithic test modules along subject seams by @cdavid817 in #174
• Break the web client state hub, extracting 77 more methods by @cdavid817 in #175
• Remove seven unused dependencies by @cdavid817 in #176
• Gate panic shortcuts in production Rust by @cdavid817 in #177
• Decompose the API tool-use loop, 978 lines to 621 by @cdavid817 in #179
• Docs/expand capability chapters by @cdavid817 in #178
• Extract chat, memory, and lifecycle state, web-agent-client to 822 lines by @cdavid817 in #181
• Establish the cargo workspace skeleton, extract vanehub-permission-hook by @cdavid817 in #180
• Retire the panic-shortcut whitelist, all 35 sites by @cdavid817 in #183
• Archive freeze-panic-shortcuts-in-production-code by @cdavid817 in #182
• Archive this session's six completed changes by @cdavid817 in #185
• docs: full zh-CN/EN/JA documentation overhaul and gap closure by @cdavid817 in #186
• Fix twelve defects found by running the desktop client, and cover its UI by @cdavid817 in #187
• Prepare VaneHub AI 1.0.0 stable release by @cdavid817 in #189
• Enable updater-only stable release phase by @cdavid817 in #191
• feat(permissions): recovery paths for the Claude Code permission hook + locale-independent git classification by @cdavid817 in #188

Dependencies

• deps(npm): bump the npm-minor-patch group with 4 updates by @dependabot[bot] in #114
• deps(cargo): bump the cargo-minor-patch group in /src-tauri with 6 updates by @dependabot[bot] in #115
• deps(actions): bump the actions-updates group with 3 updates by @dependabot[bot] in #116
• deps(actions): bump the actions-updates group with 2 updates by @dependabot[bot] in #154
• deps(cargo): bump html5ever from 0.38.0 to 0.39.0 in /src-tauri by @dependabot[bot] in #153
• deps(npm): bump the npm-minor-patch group with 10 updates by @dependabot[bot] in #150
• deps(cargo): bump the cargo-minor-patch group in /src-tauri with 7 updates by @dependabot[bot] in #152

Other changes

• Fix documentation screenshot race on lazily loaded surfaces by @cdavid817 in #131
• Resolve Dependabot dependency alerts by @cdavid817 in #149
• Close a render race in the mission-control bounded-page test by @cdavid817 in #184
• Fix stable release checksum manifest by @cdavid817 in #192
• Fix stable release asset collection by @cdavid817 in #193

Full Changelog: v0.1.0-preview.1...v1.0.0