v0.28.5

This release lets the desktop app connect to remote Xum servers, lets xum server update itself, and adds first-class support for OpenAI GPT-6 Astra and Astra Pro.

Models & providers

• First-class OpenAI GPT-6 Astra, with Astra Pro and advisor reasoning mode; GPT-6 Astra routes through Codex OAuth and Astra Pro mode also works through Coder (#4064, #4106, #4094, #4124)
• Default-hidden Daybreak models and configurable Intuition reasoning effort (#4113, #4112)
• Codex OAuth cost estimates, preserved prompt-cache routing, and correct cache-write accounting in the gateway (#4099, #4159, #4160)

Server & desktop

• The desktop app can connect to remote Xum servers (#4101)
• xum server updates itself under a restart supervisor, including with recoverable watchers and the newest npm builds (#4083, #4127)
• Live chat streaming resumes after a reconnect (#4123)
• Desktop viewer controls with managed popouts, and delegated desktop agents can share the caller's desktop (#4088, #4081)
• Opt-in Claude Design MCP credential reuse (#4105)

Chat & context

• Token-budget context window rollovers, a continuous compaction experiment, and opt-in memory intuition recall (#4097, #4086, #4078)
• The workspace remembers its model and mode on send (#3968)
• Copy selected chat text as Markdown (#4170)
• Chat history loading shows above the composer without a layout flash (#4125, #4163)
• Message edits no longer hang during an active stream (#4153)

Agents & workflows

• Statically declared workflow phases with a live phase rail, and compact expandable workflow stages (#4095, #4084)
• Exec sub-agents inherit the calling chat's Exec settings; readable sub-agent failure cards and clearer outgoing agent communication cards (#4080, #4082, #4077)
• Sub-agent progress reports no longer arrive late or stale, and sub-agent execution survives parent guidance (#4100, #4098)
• Fixes for deleting parents with inactive descendants, archiving with an idle desktop process, interrupt_active during a PREPARING turn, and workspace MCP server lifecycle during archive (#4171, #4128, #4166, #4168)
• Best-of report publication is serialized with grouped finalization, and task_send_message acquires locks in the right order (#4162, #4161)

UI

• Optional flat chat list for the sidebar with project badges (#3994)
• "Archiving..." shows from every archive entry point while the request is in flight (#4068)
• Thin dividers between General settings groups, aligned composer pill heights, and preserved spacing around nested code execution tools (#4079, #4087, #4150)
• Plugin updates are reviewed in place instead of uninstall/reinstall (#4164)
• The native macOS shortcut label formatting from v0.28.4 was reverted (#4075)

Reliability

• The origin fetch during worktree workspace creation is bounded (#4155)
• Compaction and history publication are fenced against resets, truncation, deletion, and stale owners (#4129, #4133, #4135, #4137, #4148)
• A turn rolls back when shutdown lands in its pre-acceptance awaits; bash-monitor wakes wait for the active turn to end; withdrawn queued wakes are dropped (#4154, #4114, #4067)
• The server listener binds before startup recovery, and per-task config.json reloads are gone (#4058)

Internals

• Effect Wave 4 runtime work: scoped turn lifetimes, centralized turn preparation and lifecycle ownership, awaitable cancellation and disposal, runtime-run startup effects
• Deslop passes 1 through 3 removing dead exports, unused re-exports, alias wrappers, and tautological tests (#4089, #4090, #4092)