1Helm 0.0.10

1Helm 0.0.10

This release closes the final production gap from the 22-item stress-test
sweep: central feedback now lands durably on infrastructure controlled by
1Helm instead of the undeployed route that returned Not found. It also
reconfirms the complete v0.0.9 product pass as one integrated release.

What changed

1. Durable central feedback — New reports are saved locally first and relayed to https://1helm.com/api/feedback, where validation, bounded diagnostics and attachments, deduplication, per-IP rate limiting, and a SQLite transaction store them in persistent systemd state. The inbox stays hidden unless an admin token is configured. Historical failed reports were intentionally not replayed.
2. Channel Notes — Every resident channel has Markdown Notes as both a tab and a header button that opens a resizable right-hand dock; create, name, open, edit, rename, and save operate in that channel computer's /workspace/notes directory.
3. Speech-to-text — Composer dictation toggles from the microphone or one bare Option/Alt tap, keeps listening until toggled again, and uses explicit first-party microphone permission with a useful unsupported-browser explanation.
4. Favorites — Channels can be favorited from their header and appear in a per-user Favorites section.
5. Human-only channels — Members can create additional resident-free channels with no agent or channel computer.
6. Scoped mentions — @ suggestions contain only the current resident and current channel members.
7. Tab-to-mention — Tab in an empty composer inserts the resident mention.
8. Unread grouping — An optional preference moves channels with unread work into a separate Unreads section.
9. Live Router visualization — Provider Settings shows the real dotted Requests → 1Helm Router → provider flow.
10. Channel Router popover — The header router icon opens live routing animation, latest ten requests, external Base URL, copy action, and API-key location guidance.
11. Resident avatars — Nine illustrated agent characters are available on configurable flat-color plates and are assigned in varied combinations to new residents.
12. Navigable Files — Files supports folder structure, breadcrumbs, folder creation, direct-child listings, and targeted uploads instead of a recursive dump.
13. Audio and fleet management — MP3/M4A attachments play in place; Skipper owns pressure/storage inspection and distinguishes host mirror quota from guest capacity without making the Captain diagnose the VM.
14. Compact Global Threads — Global thread rows are denser and less visually busy.
15. Focused resident skills — New residents receive a small operational core plus purpose-specific skills while retaining catalog search and persistent explicit assignments.
16. Profile image editor — Profile photos use move, zoom, crop, compression, preview, and explicit save.
17. Workspace names — Names are Unicode-safe, capped at 100 code points, and wrap rather than truncate.
18. Connection language — Unclear “More connections” wording was replaced with plain connection-availability language.
19. Provider Activity — Every time-period filter applies to real member-scoped events and traffic uses human-readable account/provider identity.
20. Thread usage labeling — Usage is labeled as cumulative provider telemetry rather than misleading context-window occupancy.
21. Safe model refresh — Model discovery is preview-before-apply with graceful unavailable-endpoint handling, select all/none, and individual selection.
22. OpenRouter free models — OpenRouter discovery can filter to free models when pricing metadata is available.

Additional changes

• Open threads display the persisted @resident will check back in … wake as a live countdown sourced from the same obligation used by Board.
• Full AGPL-3.0-only licensing, the ≤v0.0.8 MIT boundary in NOTICE, Joseph Yaksich's copyright, and DCO 1.1 contribution sign-off remain enforced and packaged.

Downloads and integrity

Artifact	SHA-256
1Helm-0.0.10-arm64.dmg	bbf79520435d0f7cfe21bfb2911fc5cbd3b4b02bffad4a2bdfc1be0d1c322923
1Helm-0.0.10-mac-arm64.zip	2e22113c0bc71ff99231207bff0eda1f51a1495e6e47c8ab6f1943580da3e484

Source commit: 86da2ba31e1bf5ddca44fd3ec3933b87e714922f

GitHub's recorded digests and clean public downloads match both hashes.

Verification

• Linux: typecheck, build, 117 native-world checks, 91 passing Node/browser contracts with one environment-only Chrome skip, onboarding 20/20, brief browser 30/30, feedback browser 1/1, site/collector 5/5, production-data browser 18/18, and git diff --check.
• GitHub: CI, CodeQL, and Dependabot workflows succeeded on the exact tagged commit.
• Public services: demo.1helm.com and 1helm.com report v0.0.10; public click acceptance passed Favorites, Notes, Router, mic, and bare Option/Alt; collector persistence survived a service restart.
• Apple Silicon: the exact public DMG was downloaded, hash-matched, installed, and launched on the retained release host. The DMG, mounted app, and installed app passed Developer ID signature, Apple ticket, strict verification, and Gatekeeper checks. The installed arm64 app reported v0.0.10 / com.gitcommit90.1helm, answered /api/setup/status with the existing workspace, two users, nine active channels, and one provider, and preserved the Application Support directory inode 34829724.

Licensing

Releases through v0.0.8 remain MIT licensed. v0.0.9 and later are
AGPL-3.0-only under Joseph Yaksich. See LICENSE, NOTICE, and
CONTRIBUTING.md in the exact v0.0.10 source.

1Helm 0.0.9

1Helm 0.0.9

This release turns Joseph's full stress-test report into a broad product pass
without replacing the channel-computer, resident-agent, or provider-fabric
architecture that was already working well.

What changed

1. Feedback — Reports are saved locally first, retain bounded opt-in diagnostics and attachments, remain visible to the Captain, and retry central delivery automatically.
2. Channel Notes — Every resident channel now has Markdown Notes as both a channel tab and a header button that opens a resizable right-hand dock. Notes can be created, named, opened, edited, renamed, and saved in that channel computer's /workspace/notes directory.
3. Speech-to-text — Composer dictation can be toggled from the microphone or with one bare Option/Alt tap, continues listening until toggled again, includes an explicit macOS microphone-purpose declaration, and fails with a useful explanation when the browser lacks speech-recognition support.
4. Favorites — The channel header now has a per-user favorite control, and favorite channels appear in a dedicated Favorites section without changing another member's sidebar.
5. Human-only channels — Members can create additional channels that intentionally have no resident agent and no channel computer.
6. Scoped mentions — Typing @ now suggests only the current channel's resident and human members instead of everyone in the workspace.
7. Tab-to-mention — Pressing Tab in an empty composer inserts the current resident's mention.
8. Unread grouping — Settings now includes an optional Slack-style “Group unread channels first” preference with a separate Unreads section.
9. Live Router visualization — Provider Settings now shows the dotted Requests → 1Helm Router → provider flow using real routing activity.
10. Channel Router popover — The router symbol in every channel header opens a credential-free live popover with the routing animation, latest ten requests, external Base URL, copy action, and the guidance “API Keys for the router are stored in Settings → Providers → Endpoints.”
11. Resident avatars — New residents receive one of nine illustrated agent characters on a randomly selected flat-color plate; both character and color remain configurable.
12. Navigable Files — Files now renders real folder structure with breadcrumbs, direct-child listings, folder creation, and folder-targeted uploads instead of one raw recursive dump.
13. Audio and fleet management — MP3 and M4A attachments play in place. Skipper now reports validated live or last-known pressure honestly, distinguishes the Files mirror quota from unknown guest capacity, and owns inspection/remediation instead of asking the Captain to run guest checks.
14. Compact Global Threads — Global thread rows are shorter, quieter, and focused on the information needed to reopen work.
15. Focused resident skills — New residents receive a small operational core plus channel-purpose skills rather than every built-in skill. The full catalog remains searchable, explicit assignments persist, and Skipper retains the complete catalog.
16. Profile image editor — Profile-photo selection now includes move, zoom, square crop, compression, preview, and an explicit save step.
17. Workspace names — Names are Unicode-safe, capped at 100 code points, and wrap visibly instead of fading into an ellipsis.
18. Connection language — The inscrutable “More connections” copy was replaced with plain connection-availability language.
19. Provider Activity — One-hour, 24-hour, seven-day, 30-day, and all-time periods now filter real member-scoped events, and traffic rows use recognizable account/provider names instead of generic “account” labels.
20. Thread usage labeling — Thread usage is identified as cumulative provider telemetry rather than a context-window estimate, avoiding a misleading claim about current context occupancy.
21. Safe model refresh — Provider accounts have a Refresh models action that previews discovery results, gracefully explains unavailable /models endpoints, and supports select all, select none, and individual selection before anything is applied.
22. OpenRouter free models — OpenRouter discovery exposes a “Free only” filter when its catalog returns pricing metadata.

Additional changes

• Open chat threads now show @resident will check back in … with a live second-by-second countdown. Chat and Board read the same persisted follow-up obligation, and the banner clears through the same WebSocket lifecycle when the wake completes or is cancelled.
• The channel-header Router and web microphone permission were explicitly regression-tested against the public demo after their deployment mismatch was found.
• 1Helm v0.0.9 and later are AGPL-3.0-only under Joseph Yaksich. Releases through v0.0.8 remain MIT licensed as recorded in NOTICE.
• CONTRIBUTING.md now requires Developer Certificate of Origin 1.1 sign-off on every contributed commit without treating the DCO as a copyright assignment.

Downloads and integrity

Artifact	SHA-256
1Helm-0.0.9-arm64.dmg	a7f733f0af0732ba93e9d4b9ad26f7390c30176d6d0c6e7551c57b5e6285e89e
1Helm-0.0.9-mac-arm64.zip	b6d1d5acfb80cc93d02e49831de28a23be5193044b255cf8b7c93e659c81493f

Source commit: 76b44b6dd1e2536a774c2597f43338ff77891392

Verification

• Linux: typecheck, build, 117 native-world checks, 89 Node/browser contracts with one environment-only Chrome skip, onboarding 20/20, brief browser 30/30, feedback browser 1/1, production-data browser 18/18, website 4/4, and git diff --check.
• Apple Silicon: real channel-computer acceptance 26/26; the app and DMG were Developer ID signed, accepted by Apple notarization, stapled, strict-verified, and accepted by Gatekeeper; the mounted app and updater ZIP app were independently verified.
• Public demo: favorite toggle, Notes dock, Router popover, mic click, bare Option/Alt toggle, and first-party microphone policy were exercised from the visible UI.

Licensing

Releases through v0.0.8 remain MIT licensed. v0.0.9 and later are
AGPL-3.0-only under Joseph Yaksich. See LICENSE, NOTICE, and
CONTRIBUTING.md in the exact v0.0.9 source.

1Helm 0.0.8

1Helm 0.0.8

The day-one host trifecta: one coherent 1Helm experience across macOS, Linux, and Windows.

Highlights

• Every ordinary channel gets its own persistent isolated Linux computer: Apple container machines on supported Macs, unprivileged LXC on Linux, and private WSL 2 distributions on Windows.
• Host-owned updates now act on the machine running 1Helm—not the browser that clicked the button—with digest verification, atomic switching, health checks, and Linux rollback.
• Skipper and residents receive a compact capability map instead of an instruction manifesto, including live research and on-demand semantic channel-transcript recall.
• #main now rejects unrelated resident-agent invitations and provider-forced cross-channel calls.
• Gmail supports remote-browser OAuth by accepting the complete failed loopback callback URL and exchanging it safely on the 1Helm host.
• Providers are a multi-account fabric with personal and shared access, named routes, and OpenAI-compatible external endpoints.
• Global and per-channel mute, per-channel sounds, feedback reporting, refreshed skill visibility, terminal reconnection, and durable follow-up completion are included.

Downloads

• macOS Apple Silicon: 1Helm-0.0.8-arm64.dmg — Developer ID signed, Apple-notarized, and stapled.
• Linux x64/arm64 host artifact: 1Helm-0.0.8-linux-node.tgz — used by the digest-verifying systemd installer/updater.
• Windows x64: 1Helm-0.0.8-windows-x64-setup.exe — includes the private WSL 2 channel-computer runtime.
• Update artifacts: 1Helm-0.0.8-mac-arm64.zip, 1Helm-0.0.8-full.nupkg, and RELEASES.

Windows signing notice

The Windows 0.0.8 installer is intentionally not Authenticode-signed. Windows may display Unknown publisher or a Microsoft Defender SmartScreen warning. To continue, choose More info → Run anyway. The installer was built and acceptance-tested on the retained Windows 11 host; its SHA-256 is published with the release. A publicly trusted Windows signature will be added in a later release and is not required for 1Helm or its private WSL 2 distributions to run.

Artifact SHA-256

1Helm-0.0.8-arm64.dmg                       7dad1d2c0cc574565f48b956414ff92152c9cc7906e8f2aa86792e6dddde51a9
1Helm-0.0.8-mac-arm64.zip                   840cef1d5d7b75dc664408ce0e57150bda811d9d09b932d1cd098394b648ebea
1Helm-0.0.8-linux-node.tgz                  71f5dfdf646246afae132cdb13b137572eb1e0d50977bdf1c073a98dc93e110d
1Helm-0.0.8-windows-x64-setup.exe           b138037662d948dc16ecec54ad72d768b77f2fcb2e882b37150cc44d4848260f
1Helm-0.0.8-full.nupkg                      a45b22727753b333b553009d42e74efbd1c023ccae92dd4a1de982452203fd6a
RELEASES                                    d21391b425fd13d4591394b5fdbf0ae5ce944b185ab467b9cadddbb52293239a

Source: 953708c3796dbe4962eaa20fdcfc2ea72d8e77e5

1Helm 0.0.6

1Helm 0.0.6 makes each ordinary channel a real isolated computer-backed agent world on Linux and Windows, adds raw session transcript recall, opens SkillsMD discovery, and ships the reliability fixes requested during 0.0.4–0.0.5 testing.

Highlights:

• Persistent unprivileged LXC computer per ordinary Linux channel, with private networking and host-owned lifecycle/update behavior.
• Accepted Windows 11 WSL 2 implementation and packaging contract; unsigned Windows artifacts remain intentionally unpublished until Authenticode signing is available.
• Semantic, exact-text/date, recent, and full-session raw transcript retrieval for the owning resident, backed by separate per-channel Mnemosyne databases and authoritative raw messages.
• SkillsMD discovery returns the open registry’s results without an arbitrary catalog cap; selected installs remain provenance-pinned and scanned.
• Durable Feedback button/inbox, live skill-list invalidation, terminal heartbeat/reconnect, host-owned app updates, personal provider/model/endpoint scopes, current-event web research, real sourced images, #main resident isolation, and corrected Skipper computer awareness.
• Compact factual agent capability context replaces behavioral manifestos; human display names no longer contaminate model prompts or web searches.
• Apple release validation now recovers cleanly when a preferred Homebrew Python cannot prepare the pinned Mnemosyne test runtime.

Artifacts:

• 1Helm-0.0.6-arm64.dmg — signed, Apple-notarized, stapled Apple Silicon app.
• 1Helm-0.0.6-mac-arm64.zip — notarized/stapled app archive used by the native host updater.
• 1Helm-0.0.6-linux-node.tgz — exact Linux host source/runtime payload.

The central hosted feedback collector is not yet deployed; reports remain durable locally and retry delivery. No Windows installer is published in this release because an Authenticode certificate is not provisioned.

1Helm 0.0.5

Native model autonomy restored

• Replaced large behavioral manifestos with compact factual identity, machine, workspace, tool, memory, skill-inventory, and authority context.
• Added lazy skill discovery/loading so full procedures enter context only when selected.
• Removed prose-policing evidence/outcome gates that rewrote capable-model answers.
• Kept human display names out of model transcripts and added one concise retry for empty conversational web/news searches.
• Verified the exact WeHo sinkhole prompt and resident Linux/skill awareness against the configured real model.

Apple Silicon DMG and updater ZIP are Developer ID signed, Apple-notarized, stapled, and Gatekeeper accepted. The Linux host artifact is for the signed host-owned systemd updater.

1Helm 0.0.4

1Helm 0.0.4 makes app updates run on the 1Helm host, researches current events from dated sources, adds member-owned provider accounts and personal OpenAI-compatible endpoints, and keeps terminal sessions alive through brief backgrounding and transport loss.\n\nIt also fences Apple fleet reconciliation during app-removal cleanup so installation-owned channel machines cannot be recreated by an in-flight maintenance pass.

1Helm 0.0.3

Fixed

• Makes every personal #main a resident-free Skipper authority boundary, with database cleanup and hard execution guards.
• Keeps Skipper’s own assigned computer inventory available and explicit in #main.
• Adds safe, audited HTTPS source inspection for Learn a New Skill and requires source evidence before skill creation.
• Rejects duplicate resident invitations and unsupported inspection, provisioning, skill-creation, or missing-computer claims.

The Apple Silicon DMG is Developer ID signed, Apple-notarized, stapled, and Gatekeeper verified.

1Helm 0.0.2

Photon now keeps texts from the same mapped sender in one durable 1Helm thread until the sender texts /new.

• Persists the active conversation across app/connector restarts
• Ignores Photon space-ID churn as a thread boundary
• Treats /new as a connector control without invoking the resident
• Carries the latest pre-upgrade Photon thread forward
• Preserves exactly-once reply delivery behavior

The macOS artifact is Developer ID signed, Apple-notarized, stapled, and Gatekeeper verified.

1Helm 0.0.1

Changelog

All notable changes to 1Helm are documented in this file.

The format is based on Keep a Changelog,
and this project adheres to Semantic Versioning.

Unreleased

0.0.1 - 2026-07-23

Initial release

• One permanent resident agent and one persistent private Linux computer for
  every ordinary channel, with Skipper serving as the workspace-wide chief of
  staff and host/fleet operator.
• Durable per-thread agent turns with concurrent independent threads, visible
  same-thread FIFO queues, generation-fenced single-writer responses, restart
  recovery, lane-scoped Stop, and immutable finalized answers.
• Durable memory, provenance-bearing knowledge, reusable skills, scheduled
  follow-ups, recurring workflows, sleep/wake obligations, and resident ↔
  Skipper handoff with automatic return.
• A shared multi-account model fabric spanning OAuth providers, API-key
  providers, enabled models, fallback routes, quotas, logs, and an internal
  OpenAI- and Anthropic-compatible gateway.
• Host-owned Gmail and Photon connections with narrow grants, secret
  isolation, stable human blockers, deduplicated inbound messages, and durable
  external reply delivery states.
• Native channel inventory and lifecycle controls for Skipper, authenticated
  file Open/Download actions, clickable structured questions, shell-correct
  cwd-aware terminals, trusted skill discovery, smooth streaming, Settings,
  Board, Activity, Files, Terminal, and complete first-run onboarding.
• A documented reliability contract covering partner persona, prompt tiers,
  action bias, blocker and retry judgment, verification, memory, recovery,
  scheduling, connectors, and adversarial acceptance tests.
• Signed, hardened-runtime Apple Silicon desktop packaging with Apple
  notarization, stapled tickets, Gatekeeper verification, persistent
  Application Support, and isolated Apple container machines.