cortex-agent server v2026.10.25

Highlights

• Added one-time pairing codes and revocable per-device tokens for connecting apps and browsers.
• Added per-session dock tabs, shared pinned tabs, and a jump to the earliest unseen reply.
• Added desktop start-at-login controls and replaced keychain storage to avoid repeated macOS upgrade prompts.
• Added default-on anonymous crash and usage telemetry, with setup choices and a Privacy settings page.
• Fixed Windows session-registry compaction failures and chat and clipboard actions over plain HTTP.

Connecting apps and browsers

• Added single-use, eight-character pairing codes that expire after ten minutes, generated from Settings → Machines or cortex ui pair.
• Added pairing-code sign-in for desktop, Android, and browsers, including copyable pairing links that fill the server address and code.
• Added a connected-app list with individually revocable device tokens, so apps and browsers can connect without copying the shared remote-client token.

Workbench and conversations

• Added separate dock tabs, active tabs, and open state for each session during the current workbench visit, with pinned tabs shared across sessions.
• Added an unread-reply counter and a jump to the earliest unseen assistant reply on desktop and mobile, including replies received while scrolled up or away from the page.
• Added previous/next navigation through images and videos grouped in a message, with arrow keys, swipe gestures, an item counter, and pinning of the currently displayed item.
• Switched native dropdowns and datalists to app-styled pickers and free-text comboboxes, with sheet pickers on mobile.
• Fixed background-task wakeups being folded into the preceding human turn and hiding the substantive reply in the work log.
• Fixed Markdown list numbering, blank lines between items, continuation paragraphs, nested lists, and fenced code blocks inside list items; underscore italics respect word boundaries.
• Fixed session creation, message sending, and copy actions on workbenches served over plain HTTP; copy feedback appears only when copying succeeds.
• Fixed narrow chat headers, worker panels, and worker action names overflowing their panes, and made nested mobile sheets dismiss only the topmost layer.
• Fixed mobile approval counts and lists to include pending plans, aligned plan-approval labels, and included answer and approval requests in local notification text.
• Fixed duplicate “Other” answer choices, removed inactive actions on offline mobile machines, and hid Claude Code detection status where detection is unavailable.
• Fixed the memory viewer opening the wrong project, selected Settings sections not receiving focus, and tall docked images overflowing at normal zoom.

Desktop setup and settings

• Added start-at-login controls after local installation and in Settings → Advanced, including a per-user Windows startup entry that starts the server without opening a window. The option is off by default, and disabling it leaves the running server alone.
• Fixed startup registrations pointing to an old bundled runtime or executable after an app update; owned registrations refresh for the next login without restarting the current server.
• Switched desktop connection credentials from the OS keychain to connection.json in the app data directory, with Unix permissions of 0600. Existing keychain credentials migrate once; macOS may ask for the login password one final time during migration.
• Made Advanced settings easier to scan with titled groups for agents, updates, maintenance, diagnostics, and the local device; moved Slack/Feishu tool-call traces to Settings → Platform.

Telemetry and privacy

• Added anonymous crash reports, daily usage and performance summaries, installation milestones, and upgrade and migration diagnostics, using a random install ID and redacted error samples rather than conversation or file contents.
• Added a telemetry choice in cortex init and on the provider setup page after desktop installation, plus Settings → Privacy controls and a copyable install ID. Telemetry is on by default in configured release builds; desktop setup milestones can be sent before the post-install choice.
• Added CORTEX_TELEMETRY=0 and DO_NOT_TRACK overrides, with telemetry disabled by default for source checkouts and sealed benchmark homes. Turning server telemetry off clears queued reports and daily counts; the desktop setup honors environment opt-outs too.
• Added telemetry documentation covering collected fields, redaction, local queues, indefinite collector retention, and deletion requests by install ID.
• Added versioned Web source-map archives as separate GitHub Release assets for crash diagnosis, keeping source maps out of npm packages and native installers.

Models and authentication

• Switched the PI SDK to 1.4.0 and updated Kimi Coding and OpenCode gateway upstreams, migrating stored routes that still use the retired official endpoints while preserving custom relay addresses.
• Fixed Claude models appearing on hosts without Claude credentials, and refreshed the model catalog immediately after sign-in or sign-out.
• Fixed authentication reminders suppressing notices in other channels; each affected channel receives its own daily reminder, and administrator notices include a login action where supported.

Plugins, hooks, and environments

• Fixed MCP form saves overwriting changes made since the form was loaded; stale saves require reloading the configuration.
• Fixed stale Claude MCP and remote-proxy configuration files accumulating in the plugin runtime directory.
• Fixed cortex:schedule.fired hooks to receive the schedule ID and run only for dispatchable scheduled work.
• Removed the retired hook-result output mode; hooks that still declare it are skipped with a warning. stdout-as-prompt and none remain supported.
• Removed unused persistSession and delegable environment fields while continuing to load older environment files without warnings.

Reliability and CLI

• Fixed Windows session-registry compaction attempting to sync a directory handle, which could prevent turn completion once the registry grew large enough to compact.
• Fixed RAM reporting on Windows machines running Git Bash without the free utility.
• Made disk-space, file-descriptor, and temporary resource-exhaustion errors eligible for automatic retry.
• Fixed generated memory-index ignore rules to match files under context/, with an additive migration for existing installations.
• Fixed cortex-signal accepting an invalid --status when --exit-code was also supplied, and corrected setup and bootstrap command help.