v0.32.2

Models

• Gemini 4 Carbon. Google's new model is in the registry for the Google and Vertex AI providers, with the aliases carbon and gemini-carbon, a 1M-token context and low, medium and high thinking. Xum strips the frequency and presence penalties that Carbon rejects. gemini-4 still points at Argon (#8108).
• Claude Fable 5.2 and Mythos 5.2 are now the fable and mythos models (#8078). The refusal fallback follows Anthropic's Fable 5.2 guidance (#8094), and Mythos 5.1 is treated as prefix-bound again, per the current preserved-thinking docs (#8082).
• Claude Opus 4.8 no longer offers Fast mode, before Anthropic removes it (#8099).
• A Coder-scoped fallback key no longer hides the direct Fable seed (#5470), and hand-edited fallback keys with stray whitespace are read the way they are saved (#8089).

Other changes

• Cursor plugins. Xum reads Cursor plugin manifests and loads their rules as skills (#7837), their MCP servers (#7838) and their hooks, with trust and file review (#7846). Settings > Plugins shows one merged Cursor and Claude marketplace list (#7844).
• Plugins. The installed plugin list is backed up and offered for review on restore (#7985, #8036). Read-only Claude plugin agents can search code (#7939). OAuth sign-ins of MCP servers that a plugin update removes or an uninstall deletes are signed out (#7941). Local plugin sources and projects clone through git's transport (#7936, #7942).
• Memory. The memory harvest is now an analyzer that reads and corrects workspace memory and sees tool calls and results (#7990, #7988). The dream runs at most once per 6 hours, one at a time (#7989), and stops when its estimated cost is over a ceiling you set (#7987). Credentials and Azure shared access keys stay out of memory text (#8007, #8008, #8034).
• Mermaid. Diagrams render with Pele in the selected theme (#7820), at explicit pixel sizes so Safari shows them (#7925), and whole in the expand dialog (#7930).
• Costs. The Costs tab and the prompt cache summary include open sub-agents' spend (#7861, #7865, #7866, #7867).
• Agents and hooks. Per-agent Anthropic prompt-cache TTL (#7767). Per-hook Stop continuation limits, capped at 50 per user turn (#7835). Live line follow-ups and a Waiting on you card (#7687). bash timeout_secs is optional with a 60s foreground default (#7958).
• Stop and restart. A Stop, a workspace-turn interrupt and a hard timeout end the auto-retry loop (#7892, #7896), and startup recovery no longer resumes a turn that was stopped or interrupted (#7898, #7899, #7901, #7903).
• Shortcuts. The background bashes shortcut moves to Ctrl/Cmd+Alt+J (#7763).
• Phones and tablets. The iPhone Duo web app uses the cover display's full width and keeps taps and size working across folds (#7976, #8042, #8043, #7986), and phone layouts keep names and paths whole (#8058, #8084).
• Artifacts. Live artifacts stay open in WebKit (#8010, #8063, #8087), hash routers navigate in HTML artifacts (#7997), and "Open as artifact" opens files outside the checkout (#7915).
• Reliability. server.lock liveness is decided by process identity, and a reader never deletes a lock (#7952, #7956, #7961). GitHub gateway errors are transient update-check failures (#8031). The Docker runtime resolves ~ from the container user's home (#7951). The sidebar no longer re-renders on every new-chat draft save (#8109).
• Under the hood. The dev-server sandbox now requires an auth token over a private Unix socket (#7902 to #7912), plus new tests and gate fixes across the agent loop.

Full changelog: v0.32.1...v0.32.2