v0.52.0

[0.52.0] - 2026-10-30

Todo follow-through

• Remind Neo about each stalled todo, and daily about check-only todos; keep delivery reminders concise (#9436, #9450, #9430).
• Record a worker's final-line blocker and let Neo triage human blockers before asking the human (#9447, #9479).
• Retire Neo questions once their pack checks pass (#9441).

Coding and PR merges

• Merge coding PRs from the daemon once saved merge policy and approval hold; isolate unreadable PRs in merge sweeps (#9432, #9444, #9457, #9454, #9475).
• Include saved merge facts in coding context (#9460).

Voice

• Resume voice streams after a client disconnects, and accept Opus input for resumable streams (#9424, #9453).

Fixes

• Route Claude sends by verified receiver ownership (#9473).
• Reclaim only scratch directories the daemon positively owns; keep SDK backup directory access during startup (#9439, #9452).
• Find unloaded cards in web Work search; distinguish report documents from home versions (#9413, #9481).
• Clean temporary directories owned by test fixtures (#9428).

Groundwork

• Google connections: isolated status and credentials, identity checks during code exchange, one-use loopback consent and human lifecycle operations (#9470, #9476, #9477, #9482); shared account connections design (#8623).
• Move GitHub watched-repository, polling, filter and Space-enable persistence onto the DB writer (#9395, #9398, #9400, #9402, #9404, #9406, #9408, #9410, #9412, #9417, #9420, #9422, #9426).

v0.51.0

[0.51.0] - 2026-10-28

Voice replies

• Add spoken Neo replies for the opted-in client and session; cancel pending speech on disconnect without replaying it on reconnect (#9298).
• Stream spoken reply audio from the daemon, and keep spoken replies from repeating what is already on screen (#9369, #9388).
• Queue Send while transcription is pending (#9261).
• Use explicit batch/live ASR endpoints; move recording storage and tool recovery writes off the daemon main thread (#9209, #9214, #9222).

Quote Markdown and conversations

• Render quote excerpts as Markdown, preserve the browser context menu and improve message touch targets, folding and long-message readability (#9300, #9116, #9238, #9227, #9243).
• Attribute publications to the human input being processed; bind new todos and questions to its ask (#9293, #9338).
• Search Chinese card/message text, rank Work results and open references at the exact item (#9152, #9248, #9273).

Todo status and scheduling

• Keep human-waiting todos waiting, and block completion when a required check is unmet (#9292, #9343).
• Follow through on idle workers, start dependency-ready steps under caps, and support holds and priorities (#9154, #9164, #9166, #9158, #9170, #9178, #9184, #9186).
• Show open questions in Work snapshots and collapsed cards; restore folding for completed todos and collect history in one dialog (#9226, #9205, #9239, #9253).

Database writer work

• Revoke paired devices and observe connected-device revocations without blocking the daemon; move pairing approval, redemption, creation and human reset work to DB workers (#9302, #9304, #9270, #9278, #9295, #9315).
• Move session reminders, schedules, workspaces, GitHub inbox delivery, publication pages, turn vectors and coding-ledger operations through DB workers (#9143, #9252, #9266, #9228, #9215, #9321, #9325, #9247, #9208, #9218, #9244).
• Route global and Space extension configuration, GitHub Space settings and watched-repository reads through DB writers (#9377, #9379, #9381, #9383, #9385, #9389, #9391, #9393).

Agent fixes

• Hold stalled streams until the network returns instead of failing the turn; let the query failure latch expire and park deliveries while it holds (#9375, #9371).
• Show the real dead-letter reason instead of a fixed kickoff banner (#9373).
• Pin the Copilot worker to SDK 1.0.28 / CLI 1.0.105 (#9353).
• Bound stream silence while tool calls are open; surface deferred restart, reconciliation and terminal query failures (#9284, #9285, #9110).
• Preserve model capacity across auto-compaction, stop old queries before fallback and bound repeated delivery parks (#9341, #9134, #9283).
• Prevent overlapping Desktop-owned sends, expose worker work locations and reuse idle workers at the same place (#9245, #9105, #9345).
• Fail the required CI gate when a required job is cancelled (#9311).

v0.50.0

Added

• Work cards: Index asks, todos and questions for search; page older outcomes (#9061, #9010).
• Session tools: Apply saved tool choices through one session picker, including Space tasks (#8914, #9011, #9025).
• Voice: Choose the transcription language and reach voice settings directly (#8984, #9073).

Fixed

• Responsiveness: Read transcript pages, message counts and todo turn completions off the daemon main thread; relay voice on a dedicated worker so main-loop stalls do not cut the stream (#8992, #9121, #9124, #9075).
• Todo completion: Honor passing checks across recorded states, recover interrupted starts atomically, bound repeated worker failures and stop SDK queries without an unbounded interrupt wait (#9117, #9074, #9108, #9109).
• Worker startup: Refresh existing Codex policies, repair scratch permissions, preserve GitHub CLI configuration reads and accept worktrees with local settings (#9114, #9104, #9106, #9059).
• Neo conversations: Render full publications, copy whole messages as Markdown, keep settled question previews readable and distinguish generated notices (#9048, #9094, #9099, #9101).
• Operations: Accept common input variants, advertise schema-derived call shapes and keep worker operation catalogs scoped (#8856, #9030, #9047).
• Desktop delivery: Deliver through the owning Codex Desktop instance and retain the full handoff window during slow ownership discovery (#9006, #9057).
• Local work: Allow worker Unix sockets, keep worker sandboxing optional and default it off, preserve safe Neo home writes and explicit consent for standing rules (#9022, #9024, #9018, #8877).
• Browser reconnect: Resume a suspended web client when it becomes visible again (#9023).
• Verification: Support an isolated mock API port while retaining checks for helpers that use fixed ports (#9066).

Built from the approved candidate 6f6c6aa451e6388b645b6fdce26a17fefe13fc6c. Candidate CI and all platform builds passed; fresh-install checks passed on both macOS architectures.

Artifact provenance

All 21 assets are promoted unchanged from candidate build run 40464965083, at the exact tagged candidate commit. Candidate CI run 40464968300 passed. Later dev changes are excluded.

The CI-produced hyperneo-darwin-x64 has SHA-256 5100bd943072528bdf9c9b2effdd18dd3efb90bc9e9f1dadf033a61115768395. The separately built and installation-tested binary from the same source commit had SHA-256 8caaf26fd440991e41e531ddf7549a29608f7d401e96450292aef4679b282a24; these are different build outputs, not byte-identical artifacts.

This is a manual GitHub-only promotion of the approved frozen candidate. npm publication is pending a coordinated candidate-promotion path.

v0.49.0

[0.49.0] - 2026-10-26

Added

• Session tools: Save tool choices and apply them consistently to current and new SDK sessions (#8881, #8819).
• Phone setup: Guide device pairing from Settings (#8640).
• Kimi models: Add K3.1 Pro and Highspeed with region-aware availability (#8635).
• Coding settings: Configure repository policy and explicitly add or remove watched repositories from Settings (#8588, #8610).
• Work feed: Limit an instance's feed to sessions it started (#8604).
• Neo settings: List muted sessions and unmute them individually (#8590).
• Document previews: Show file tabs and retain preview workspace navigation state (#8583, #8586, #8595).
• Coding verification: Admit recorded manual merges through the existing completion gates (#8484).

Changed

• Database writes: Route live SDK message writers through the database gateway (#8570).

Fixed

• Model discovery: Keep cold SDK startup within bounded parallel discovery, return healthy providers when another stalls, and let browser model lists wait for discovery (#8930).
• Neo chat: Keep the scrolled-up view stable and hide system-forwarded worker messages from the human conversation (#8927, #8922).
• SDK startup: Start sessions without inheriting auto mode, and allow workers to run isolated local test servers (#8923, #8925).
• Desktop delivery: Queue Codex work even when Desktop ownership is temporarily unavailable (#8879).
• New-user sessions: Resolve model targets with thinking effort, keep non-coding work in one visible folder, and isolate automatic project discovery (#8617, #8621, #8620).
• Tools panel: Show the tools observed in the current SDK query (#8636, #8641).
• Neo work: Deliver worker milestones and card answers reliably; keep Waiting on you cards first with stable ordering (#8843, #8834, #8911).
• File previews: Preserve preview and draft context and allow explicit non-sensitive attachment paths (#8801, #8811, #8883).
• Responsiveness: Move queued work, native feed, GitHub poll, mailbox and settings writes to the database writer, reclaim stale jobs, and keep slow WebSocket clients connected (#8898, #8868, #8905, #8871, #8931, #8921, #8917, #8882).
• Coding ledger: Reduce review-query overhead, scan fairly across quota failures, and diagnose stale approved PR observations (#8861, #8893, #8906).
• Worker isolation: Enforce the prepared worker OS write sandbox (#8632).
• Device pairing: Restore hyperneo pair and hyperneo devices in compiled binaries and list both commands in help (#8615).
• First start: Download the Claude Code SDK without blocking the event loop, load embeddings in compiled binaries, and preserve explicit test mode in compiled entrypoints (#8599, #8601, #8612).
• Browser security: Refuse cross-site WebSocket upgrades and mutating HTTP requests (#8594).
• Neo cards: Link reply notices to their question cards and preserve the human turn context (#8584, #8603).
• Neo model menu: Restore model and thinking choices on the Neo page (#8587).
• Desktop delivery: Match direct and retried messages to the receiver's current permission mode (#8577, #8592).
• Coding events: Keep PR events across restarts and log skipped unowned events (#8598).
• Repository watches: Start with no watched repositories and require explicit enrolment (#8608).
• Prepared Claude workers: Persist native Edit/Write denies for the main checkout and sibling clones while allowing the worker's own clone; unlisted outside directories still require the next OS-sandbox slice (#8606).

v0.48.0

[0.48.0] - 2026-10-24

This release includes the features and fixes since v0.46.0, including the unpublished v0.47.0, v0.47.1 and v0.47.2 changes below. Those earlier tags remain unchanged.

Added

• Settings: Manage Neo standing rules one by one and choose default thinking beside the default model (#8563, #8561).
• Focused discussions: Prepare fresh sessions, retain source-session links on cards and asks, and record settled outcomes (#8424, #8471, #8473, #8480).
• Documents: Attach complete PR-head files and dock previews beside Neo (#8454, #8459).
• Coding verification: Configure stage actors and review bots, prepare pinned checkouts, record verification facts, and require assigned QA smoke (#8442, #8512, #8522, #8529, #8431, #8474, #8468).
• Chat notices: Publish notices for Neo card question replies (#8547).
• Ledger health: Persist coverage health, deliver notices, and publish daily dropped-work counts (#8492, #8494, #8504, #8441).

Changed

• Database writes: Expand guarded and awaited gateway writes across sessions, messages, search, task runtime, coding ledgers and delivery; switch space-task writes to the gateway (#8382, #8349, #8350, #8367, #8447, #8450, #8548, #8550).
• Permission controls: Show the configured Claude worker permission mode and the SDK mode's actual name (#8564, #8556).

Fixed

• Compiled startup: Embed worker entrypoints and resolve encoded Windows virtual paths, with a native Windows smoke check required before merge (#8528, #8540, #8572).
• Coding notifications: Restore PR lifecycle notifications, persist merged-PR owner delivery intent, and reconcile polling coverage (#8544, #8573, #8535).
• Desktop delivery: Recover stale wake helpers and keep sent Claude messages pending rather than relaying them again (#8566, #8555).
• Preview rendering: Match Markdown previews to assistant typography (#8571).
• Todo completion: Refuse to finish a todo while its card remains unanswered (#8552).
• Worker documents: Register artifacts from a Claude worker's own checkout (#8562).
• SDK startup: Bound startup permit holds and await remaining live message writers (#8500, #8508).

v0.46.0

[0.46.0] - 2026-10-23

Added

• Neo work: Goals, schedules and fact-driven todo completion; dispatch-bound worker results and report-only relays for silent worker turns (#8263).
• Document previews: Registered documents open from Neo replies and question cards without pasting their contents into the conversation (#8392).
• Model controls: Ordered primary/fallback preferences, per-model auto-compaction, and live model/thinking changes for Anthropic, GLM, DeepSeek and Kimi (#7950, #8303, #8340, #8364).
• Diagnostics: SQLite contention timing and opt-in event-loop profiles identify slow phases and worker SQL (#7967, #8377).

Changed

• Network default: The daemon now listens on 127.0.0.1 by default. Direct LAN clients, including iOS and another daemon, must set --host 0.0.0.0, HOST=0.0.0.0, or a specific LAN address. This reduces accidental exposure; reachable-peer authentication remains tracked separately (#8393, #7975).
• Database gateway: Job-queue claims, settlements and WebSocket authentication reads use the gateway; table-change notifications are replayed after worker writes (#8300, #8299, #8348). The sessions-writer switch is not part of this release.
• Neo UI: Expandable todo rows, model-switch disclosures, and a connection-settings drawer aligned with iOS (#8345, #8336, #8395).

Fixed

• Codex delivery: Desktop ownership is acquired before unloaded-thread delivery, with bounded owner discovery and visible refusal instead of a competing background writer while Desktop is running (#8370, #8384).
• Claude Desktop: Prepared work is woken through Desktop (#8274).
• Neo inputs: Interrupted inputs recover with fresh SDK attempt identities (#8388).
• Model preferences: Refused or deferred primary-model restores preserve the fallback model's thinking level (#7973).
• Responsiveness: Batched Neo snapshots and card eligibility reads, asynchronous worktree resolution, and explicit SQLite worker closure reduce main-loop stalls (#7944, #7947, #7967, #7986).
• Storage/runtime: Stale SDK message indexes retire on upgrade, and missing embedding runtime/model assets recover automatically (#8376, #8379).

v0.45.2

[0.45.2] - 2026-10-18

Fixed

• Neo routing: The route model id is sent without the Claude Code CLI's [1m] tag, which the HTTP API rejected with 400 so every message fell back to the Inbox; a failed route call now logs the model and the response body (#7500).
• Drivers: An idle Claude session is opened before a send, and Claude engine version pins are gone, so an SDK upgrade no longer makes sessions unknown (#7502).

Added

• Neo: A reply can reference a whole work card (replyTo kind ask) (#7504).

v0.45.1

[0.45.1] - 2026-10-18

Patch release: v0.45.0 never reached npm because its Intel Mac (darwin-x64) builds failed.

Fixed

• Release: onnxruntime-node 1.24 ships no darwin-x64 binding, so Intel Mac builds leave the binding out. Agent-memory embeddings are unavailable there and log why; the rest of the daemon runs.

v0.44.1

[0.44.1] - 2026-10-15

Patch release: v0.44.0 never reached npm because its Windows build failed.

Fixed

• Release: Binaries build without a shell, so the Windows build receives the commit define and the release can publish (#7008).
• Neo: Facts are read before publishing, and a wrong fact goes through correction (#6999); a refused change to a closed answer tells Neo to end the turn (#7004); a waiting human message ends a turn whose answer is already out (#7005); a human message decides its own turn's reply language (#7009).

Added

• Neo: Every Neo turn states the reply language of the human message it answers (#6995); an ask with nothing running offers Drop and says Neo will propose again, shown on its card in the web (#7001, #7006).

v0.43.0

[0.43.0] - 2026-10-10

260 commits since v0.42.0. Headline families: Neo asks with done-when checklists that Neo, the daemon, and the human tick, approve-once asks that start their cards under a shared continue budget, Neo packs (core prompt plus a per-ask pack, starting with coding), pull request and issue awareness on asks and cards, direct-task dependency and stop hardening, and adaptive thinking levels.

Added

• Neo asks: Every request opens an ask with its done definition, its cards filed under it, and a settle step that stops live work when it ends; done-when checklists Neo ticks with evidence, the daemon ticks for merged pull requests, and the human edits, ticks, or drops from the card; achieved requires every item met; approve an ask once and Neo starts its cards under one shared continue budget; asks waiting on you shown under Needs your attention; close an ask as done or dropped from its card.
• Neo awareness: Asks watch the pull requests and issues they name (including bare #N in one repo); cards track the PRs their session opened, coding card sessions subscribe to their PR's events, PR state names what blocks the merge, and the done check holds while CI runs; Neo is told when the human's own sessions need them, fail, or finish, and when a message to Neo was never delivered.
• Neo packs: A NeoPack contract and registry, the system prompt split into a domain-agnostic core plus the ask's pack, neo.pack.read, a pack enable setting with a file-pack loader, and coding moved into neo/packs/coding; a core evidence and done-check planner with neo_work_checks bookkeeping.
• Neo work: Neo learns while working (reuses precedent and saves standing rules, saying which it saved), finds where a request belongs with work.find before proposing, retries a failed hand-off on the same card, lets the user close any card as done or cancelled, reads and changes the default model, and sets one model and thinking preference for all its sessions; Neo-started Claude Code sessions go to the phone via Remote Control; Codex and HyperNeo work in a linked worktree runs in place.
• Tasks: A person can finish, cancel, or archive a task from any status; task.start accepts a kickoff note and the composer runs a not-started task with one; cancelling a direct task stops and blocks its running dependents; one status-change table shared by web and daemon.
• Web: One task page with the thread first; ask and work cards with full-width titles, a status chip, PR state, Retry from the daemon's retryable flag, and notices when Neo could not confirm or check a session; Neo's short reply with details one tap away; a swipe-in mobile work list.
• Thinking and clients: Low to Ultra thinking levels with a slider picker and adaptive thinking with effort for Claude models that support it; a user-only registry for companion clients; sessions outside a Space can subscribe to external events.

Changed

• Performance: Web global snapshots omit the unused session inventory, health session totals read the maintained session_counters row, metadata-only deltas keep the sessions array, and review-summary patches are batched into one diff per range.
• Sessions: User sessions left in retired rooms are archived on upgrade (migration 319); nothing is deleted.

Fixed

• Neo: Cards follow their session until it finishes or stops and stop following once a newer card lands there; sent work settles once its message lands, including in busy sessions; waiting asks are re-asked once when the human next writes and reopen when the human answers the work session; old failures are re-checked before repeating; asks admitted behind a running turn keep their place; voice keeps the draft visible and its height.
• Tasks: Dependents settle the same way however a task ends, and one failing dependent no longer stops the rest; dead direct start and outcome jobs recover; expected-status and Space slot checks happen inside the status writes; typed rejections for approve, reject, reopen, and handoff-blocked retry.
• Drivers and daemon: Claude hand-offs report an expired CLI login, Remote Control failures are logged, Codex threads that asked the user read as needs-you, provider credentials stay off the SDK command line, a gone provider fails a delivery once, and new sessions skip an unavailable default model.
• Web and desktop: GlobalStore initialization is single-flight and retryable, archived tasks stay listed after reload, the hidden-page socket closes with an allowed code, and the desktop app gets past its startup splash; the file index honors gitignore matching and refreshes its rules.

Removed

• Dead code: The task manager's own dependent settling and unused cancel cascade, task modules nothing imports, unused provider env mutators, the workflow_run_artifact_cache table, and the web EntityStore, no-op cleanup registration, and write-only message count.