Shepherd for Mac 2.6.0-nightly.2547

Native Mac tester release. Requires macOS 15+. Download Shepherd-2547.dmg, open it and drag Shepherd.app into Applications. Direct launch also offers installation for all users or your account. Future updates arrive automatically. Signed with Developer ID and notarized by Apple. Nightly build of main at e0023ff, after v2.6.0.

v2.6.0

2.6.0 (2026-10-29)

Features

• assistant: configure HUD runtimes and transfer conversations (#3591) (c15e38a)
• assistant: schedule_create action + schedules in repo_automation (#3483) (ce09271)
• auto-retry Claude turns cut by transient API errors (#3466) (7cbafed)
• bootstrap: scaffold ships favicon, theme-color, OG head; P3 sharing/SEO (#3489) (8a3b154)
• cli: shepherd new --on <machine> and --require <capability> (#3559) (083a503)
• cli: shepherd schedule ls|add|run (#3472) (#3480) (1bb9629)
• codex: add GPT-6.1 Terra model selection and guidance (#3498) (9fc715b)
• codex: answer native questions in the Shepherd question center (#3566) (d900cb8)
• commandbar: add schedules verb opening Settings → Schedules (#3568) (c33f665)
• contract: add /api/project-icons and project-icons:update to the API contract (#3543) (ec44d77)
• epic: warn on incremental merge stalls, name blocking PR, flag overlapping siblings (#3425) (1fdaa42)
• host resource budget and a visible check queue instead of test/browser storms (epic #3181) (67644f7)
• ios: long-press quick actions to dictate or start a new task (#3437) (64cc4d9)
• ios: mirrored sessions join the lifecycle groups, labelled with their machine (#3417) (de1ac04)
• ios: show pull requests in Up Next with sheet, merge confirmation and Dependabot train (#3439) (6fcd71a)
• models: offer Claude Mythos only when the logged-in account has it (#3531) (e19a846)
• native: show host check slot and resource details (#3612) (e2cefff)
• persistent default issue filters (mine, forks, labels) for Up Next, Backlog and… (epic #3007) (#3412) (1345801)
• plan-gate: accept operator plan edits and hand them to the planner as binding (#3514) (#3565) (1e5128f)
• preview: self_status exposes the session's preview URL (#3582) (bd18221)
• prompts: deliver long tasks through local files (#3142) (d27f4f8)
• repos: show a missing PR CI on the repo, not in Settings → Diagnostics (#3548) (ac69d0b)
• review: critic on push in parallel with CI + combined CI/critic steer (#3429) (1b85099), closes #3426
• scheduled prompts/skills per repo (#3469) (#3473) (ff60058)
• schedules: scheduled runs close themselves on no-op (#3533) (1467201)
• settings: per-CLI quick-start presets as a server setting (#3507) (#3562) (a9b65b2)
• shelve sessions — hide + quiet without decommissioning (#3494) (b2b3d6a)
• shepherd-cli agent skill (#3492) (fc54056)
• show epic halts and fix them in place — sandbox, CLI and host in the epic overview (epic #3458) (e95b609)
• site: compositor-only landing motion + mobile pipeline (#3416) (826d9bf)
• site: show critic running in parallel with CI (#3430) (11344d0)
• split plan/execution effort for plan-gated sessions (#3434) (#3440) (d6b1158)
• ui: add 🔌 to back-online toast (#3529) (1dd3a13)
• ui: add chat tab for regular sessions (#3471) (ff3e029), closes #3470
• ui: attach PRD + design in New Project idea field, Bootstrap default (#3431) (ff3c22e)
• ui: bootstrap checklist starts the next phase in one click (#3427) (e4018bb), closes #3421
• ui: check-slot state on session cards + operator docs (#3181) (#3613) (fba408c)
• ui: draw the bootstrap checklist as one track with a must-have gate (#3438) (921c7fe)
• ui: epic mode Next-epic default prompt from PRD (#3496) (046bce7)
• ui: fold keyboard hint strip into steer-row ⌘K key, join review banner and status bar (#3614) ([a9d2e19](https://github.com/erwins-enk...

Shepherd CLI 2.6.0

Prebuilt shepherd CLI for v2.6.0 (x86_64/aarch64 Linux, Apple Silicon macOS), each with a .sha256. deploy/install.sh installs it and deploy/update.sh keeps it at the server's version; see docs/cli.md.

Shepherd for Mac 2.6.0

Native Mac tester release. Requires macOS 15+. Download Shepherd-2538.dmg, open it and drag Shepherd.app into Applications. Direct launch also offers installation for all users or your account. Future updates arrive automatically. Signed with Developer ID and notarized by Apple. Source release: v2.6.0.

Shepherd for Mac 2.5.0-nightly.2530

Native Mac tester release. Requires macOS 15+. Download Shepherd-2530.dmg, open it and drag Shepherd.app into Applications. Direct launch also offers installation for all users or your account. Future updates arrive automatically. Signed with Developer ID and notarized by Apple. Nightly build of main at 7d281b2, after v2.5.0.

Shepherd for Mac 2.5.0-nightly.2490

Native Mac tester release. Requires macOS 15+. Download Shepherd-2490.dmg, open it and drag Shepherd.app into Applications. Direct launch also offers installation for all users or your account. Future updates arrive automatically. Signed with Developer ID and notarized by Apple. Nightly build of main at 6e29a94, after v2.5.0.

Shepherd for Mac 2.5.0-nightly.2469

Native Mac tester release. Requires macOS 15+. Download Shepherd-2469.dmg, open it and drag Shepherd.app into Applications. Direct launch also offers installation for all users or your account. Future updates arrive automatically. Signed with Developer ID and notarized by Apple. Nightly build of main at aeb166b, after v2.5.0.

Shepherd for Mac 2.5.0-nightly.2438

Native Mac tester release. Requires macOS 15+. Download Shepherd-2438.dmg, open it and drag Shepherd.app into Applications. Direct launch also offers installation for all users or your account. Future updates arrive automatically. Signed with Developer ID and notarized by Apple. Nightly build of main at d4e468a, after v2.5.0.

v2.5.0

2.5.0 (2026-10-25)

Features

• cli: derived session phase in sessions list/show (#2586) (#3359) (b8f68de)
• cli: worktree state without SSH — git <session>, diff, cat (#3356) (1290144)
• hooks: show ExitPlanMode plan + arm block edge on PreToolUse (#2779) (#3361) (443111c)
• preview: relay egress session's in-netns dev server via slirp forward (#2902) (#3355) (5171486)
• task dependencies (--after) + base-moved notice (#3360) (fb889c2), closes #2589
• ui: optional PRD markdown upload on new project PRD brief (#3390) (316cea9)
• ui: select + copy terminal text on touch devices (#3399) (04292ee)

Bug Fixes

• cli: sanitize server/agent text before writing to TTY (#3364) (#3395) (2954f87)
• github: open-PR snapshot on change, targeted transient poll (#2799) (#3357) (2ca7220)
• security: accept any valid shepherd_session so planted sibling can't shadow it (#3365) (#3394) (cff44d6)
• security: bind assistant merge approval to PR head; expire action requests (#3378) (7ecb9aa)
• security: bind proxied login/pair throttle to proxy socket UID (#3368) (#3396) (dc1ba8b)
• security: cap unauthenticated /api/pair body at 1 KiB (#3369) (#3385) (bb34ffa)
• security: doc-agent finalize runs only trusted install code on worktree (#3377) (0a274a4)
• security: fail-closed read-only git store carve-outs in membrane (#3375) (3d5c0cb)
• security: gate epic auto-land on critic verdict for landing head (#3383) (6a6979f), closes #3367
• security: honor host-only cookies in confined attach (#3366) (#3393) (0c63634)
• security: isolate preview slot origin state across owners (#3374) (899e1f8)
• security: keep ingress key off curl argv; refuse archived sessions (#3388) (04135a0)
• security: re-check loopback listener owner before every CLI connection (#3372) (e992ce0)
• security: read-only per-worktree config and info/ in membrane git store (#3391) (9a36cfd)
• security: split login/pair throttle by loopback proxy identity (#3368) (#3386) (dd1c4fd)
• security: token below full may only tighten spawn sandbox profile (#3376) (a4671ed)
• security: unterminated fence marker can't unfence content (#3371) (#3382) (8cbacb1)
• ui: enter submits question forms; ask dialog waits for open dialogs (#3403) (b20b046)
• ui: keep decommissioning row dimmed until archived (#3380) (be1b5a6)
• ui: seed prompt for bootstrap P1+P2 and P3 checklist steps (#3397) (#3398) (8ba41b2)

Documentation

• highlights since 2.0 for 2.5 (docs site + landing) (#3402) (a55aad3)

v2.4.0

2.4.0 (2026-10-25)

Features

• sandbox: default new repos to standard profile (#2100) (#3344) (cb57006)

Bug Fixes

• autopilot: reliable CI-red steering (#3340) (902347c)
• egress: autonomous sessions died at launch; bind DNS to dnsmasq (#3347) (4b3307d)
• egress: run autonomous agent as host uid, not netns root (#3350) (f8cdb49)
• ingress: auto-resume live sessions lacking current ingress key at settle (#3345) (b214e0a), closes #3341
• sandbox: put server's bun on membrane PATH (#3352) (0d0a6c7), closes #3351
• security: close audit run-1 leads N01/N02/N11/N12 (#3348) (3289d43)
• security: hardening roundup from audit run-1 (#3338) (#3346) (19c5b0d)