v0.94.1

Crux v0.94.1

This patch release improves provider switching, secures filesystem-backed tools, refines thought and todo presentation, and resolves cross-platform test regressions.

Provider and runtime reliability

• Fixes provider switching failures that could occur after a session had been running for an extended period.
• Improves publication of authentication and runtime state during provider changes.
• Prevents stale account, model, and configuration state from overriding newer selections.
• Improves OAuth credential loading and remote codebase-index authentication.
• Coordinates semantic API requests through credential-scoped rate limits to reduce failures during concurrent indexing and search operations.

Filesystem and image-generation security

• Binds approved jq and image-generation inputs to their captured filesystem identities.
• Uses descriptor-relative file access to prevent approved paths from being redirected through directory replacement or symlink races.
• Ensures queued image jobs retain authorized input and output directory handles throughout execution.
• Strengthens generated-image staging, replacement, cancellation, and cleanup behavior.
• Preserves existing outputs when image replacement fails.
• Adds Windows-specific retained-handle coverage without weakening the production filesystem security boundary.

Terminal interface

• Refines thought sections with clean framing and standard terminal backgrounds.
• Thought groups now default to collapsed, while single thoughts remain directly readable without unnecessary expansion controls.
• Corrects thought alignment, including when another message is selected.
• Removes unwanted spacing between thoughts and the following assistant response.
• Restores the standard background between the expanded todo panel and chat input.
• Removes the unintended background band above the todo panel.
• Improves instructions-dialog rendering and navigation edge cases.

Indexing, memory, and agent reliability

• Prevents superseded indexing workers from publishing stale state.
• Improves codebase-index request recovery and authentication handling.
• Strengthens background memory maintenance and bounded scanning.
• Improves agent compaction and summary behavior.
• Fixes configuration persistence and runtime-control regressions.
• Expands race-sensitive WebSocket and account-state coverage.

Embedded runtime and maintenance

• Refreshes embedded mitmproxy dependencies and platform lock files.
• Improves reproducible embedded-runtime packaging and licensing metadata.
• Adds manual dispatch support for build, lint, security, and generated-file workflows.
• Fixes Windows filesystem-security tests to account for valid handle-sharing restrictions.

Validation

The code changes in this release passed the full race-enabled test suite on Linux, macOS, and Windows, along with lint, security, and generated-file consistency checks in GitHub Actions. Focused filesystem-security tests and their owning packages also passed locally under the race detector on macOS.

No configuration migration is required for this patch release.

Crux remains independently maintained and unaffiliated with the vendors whose provider protocols or command contracts it supports. Required upstream and third-party license notices remain included.