v0.35.0

0.35.0 (2026-09-13)

Features

• add QUIC per-Terminal streams and mTLS workload identity (#590) (0b77c33)
• vt: pin libghostty-rs to official snapshot codec (#588) (e76997a)

Bug Fixes

• protocol: make hand-allocated wire tags duplicate-proof at compile time (#592) (c0f2e5b)

cockpit: v0.23.2

0.23.2 (2026-09-13)

Bug Fixes

• cockpit: commit the settings departure on OS window close (#589) (8a63ce9)

This release is ad-hoc signed because Developer ID credentials are not configured. The Homebrew cask clears the app's quarantine attribute and reports this in its installation caveat.

next

Moving next channel (green main). Not a stable release.

v0.33.0

0.33.0 (2026-09-12)

Features

• cli: opt-in next channel from green main (865f80a)
• cockpit: retain identity-bound native dev diagnostics (713b6d5)
• site: serve docs on docs.phux.sh (#583) (8c32dac)
• tui: stabilize sidebar navigation and move tabs to top (22956c6)

Bug Fixes

• ci: align install surface guards with rewritten docs (06e244d)
• client: enforce one absolute deadline across run and wait operations (8da3800)
• cockpit: fail closed on unframed diagnostics (2d8756e)
• core: validate live agent batches by record sequence (5e1b45c)
• ffi: discover agent streams on workspace refresh (437f8e3)
• ffi: isolate agent refusal and inventory withdrawal (f4e3526)
• ffi: keep agent closure ahead of stale inventory (2b883d2)
• relay: bound only tunnel connections and read the congestion window under the lock (51e2171)
• relay: carry consumer-hop backpressure through the relay to the server (0e6645f)
• relay: tag tunnel CIDs so per-stream bounds stay independent (48b89ff)
• server: age stale output from the later of its read and the publish (f1f72fd)
• server: bound remote output lag with a tracked QUIC send window and a staleness budget (13f6863)
• server: let a retired output pump take any resync (455edc0)
• server: name the generation a resync replaces (2fcf8e4)
• server: resync only the output pump that fell behind (d4e85bd)
• server: revive only named retired pumps and restart staleness after replay (0f7f4e8)
• server: track the WebTransport send window through one shared phux-dial helper (b91335c)
• tui: forget pane fronts at the full-frame clear, record after write (phux-esge) (aeb23a7)
• tui: paint only the changed cells of dirty rows (phux-esge) (912b88e)
• tui: satisfy pedantic clippy in sidebar e2e vocabulary fix (4746519)

Performance

• tui: carry the pen across jumps and skip recording forced paints (phux-esge) (23a5e21)

Documentation

• drop the pre-alpha apology and the wrong name (69e3d81)
• one story, honest maturity, page jobs (74acd87)
• site: make the docs chrome match the rewritten guides (4980b71)

v0.32.0

0.32.0 (2026-09-11)

Features

• install: cockpit curl installer, core-only latest resolution, curl-first hero (d5e2977)
• site: cockpit install path and hero install band above demo (7bf7846)

cockpit: v0.22.0

0.22.0 (2026-09-11)

Features

• install: cockpit curl installer, core-only latest resolution, curl-first hero (d5e2977)

This release is ad-hoc signed because Developer ID credentials are not configured. The Homebrew cask clears the app's quarantine attribute and reports this in its installation caveat.

v0.31.0

0.31.0 (2026-09-11)

Features

• client: request directory listings from a named satellite (0ef3232)
• cli: opt-in generated adjective-noun session names (9d7956e)
• cli: phux whoami reports the serving identity (ADR-0106) (f630b03)
• cli: target remote hosts from headless session verbs (c3cf97c)
• cockpit: add scoped workspace navigation and reversible appearance (1664505)
• cockpit: connect to registered remote hosts over QUIC/WSS (10c88e0)
• cockpit: follow other clients' renames live and rename from the switcher (0945f1e)
• cockpit: hold several coordinators with coordinator-qualified terminal identity (be90392)
• cockpit: hold this Mac and a remote host side by side in one switcher (bba83a5)
• cockpit: keep the relaunch restore across a graceful server upgrade (18a9ef0)
• cockpit: kill a peer's unplaced spawn conditionally once it lists again (758ea78)
• cockpit: list the focused satellite's directories in the picker (d7e7e7e)
• cockpit: open a go-to-directory picker over LIST_DIRECTORY (15b6d54)
• cockpit: re-show the front peer's session after relaunch (0a87a6e)
• cockpit: rename a session on its owning coordinator (b354fae)
• cockpit: retry a failed front restore once and cover the relaunch race (6d3a429)
• cockpit: show keep-empty sessions as an Empty session with New Tab (aff3404)
• mcp: expose phux whoami as a read-only tool (712259a)
• protocol: list directories on the serving host for a go-to-directory picker (b37c4d9)
• server: conditional kill bound to instance and attachment (0b34777)
• server: relay directory listings to satellites for a host-aware picker (f3521b6)
• server: report ssh-bridged connections as ssh-stdio in whoami (79b5478)
• server: sessions can outlive their last window (ADR-0105) (64586db)
• server: surface satellite sessions for a host-grouped selector (921080f)
• tui: bind go-to-directory to G by default (abe9e9a)
• tui: split a satellite pane on its own satellite (327cc43)

Bug Fixes

• cockpit: compile the build without the phux ffi and cover it in ci (0b3832d)
• server: keep PHUX_UPGRADE_* server-private so a graceful upgrade resumes accepting (e2723ad)
• tui: kill a satellite pane a session switch strands mid-open (92f193a)
• tui: kill a spawned satellite pane whose attach is refused (a90f5c8)
• tui: retry unreachable-satellite strays through the conditional kill (1e6aeaf)

Documentation

• adr: accept ADR-0105 and ADR-0106 (c6aa5d7)
• adr: propose keep-empty sessions and serving-user identity (8013110)
• coordinator: specify bounded durable endpoint (5168910)
• docs/consumers/tui.md describes splitting a satellite pane. (327cc43)
• reconcile consumer freeze and tracked browser engine (bea7a42)
• research: close out the gap map's open list (c98183f)
• research: reconstruct Superlogical terminal demo and UX (97cceb5)
• research: record the gap map's status after epic phux-c2td (d271357)
• research: update the gap map now that Cockpit's gaps are closed (683531e)

cockpit: 0.21.0

0.21.0 (2026-09-11)

Features

• cockpit: add scoped workspace navigation and reversible appearance (1664505)
• cockpit: connect to registered remote hosts over QUIC/WSS (10c88e0)
• cockpit: disconnect one remote host and keep the others (26bf1da)
• cockpit: follow other clients' renames live and rename from the switcher (0945f1e)
• cockpit: hold several coordinators with coordinator-qualified terminal identity (be90392)
• cockpit: hold this Mac and a remote host side by side in one switcher (bba83a5)
• cockpit: keep the relaunch restore across a graceful server upgrade (18a9ef0)
• cockpit: kill a peer's unplaced spawn conditionally once it lists again (758ea78)
• cockpit: list the focused satellite's directories in the picker (d7e7e7e)
• cockpit: open a go-to-directory picker over LIST_DIRECTORY (15b6d54)
• cockpit: re-show the front peer's session after relaunch (0a87a6e)
• cockpit: redial a failed listing peer with bounded backoff (4d4515f)
• cockpit: remember every connected host and restore each as a listing peer (339c123)
• cockpit: rename a session on its owning coordinator (b354fae)
• cockpit: retry a failed front restore once and cover the relaunch race (6d3a429)
• cockpit: route New Window and available terminals to the focused coordinator (739fb16)
• cockpit: route peer tab edits to the owning coordinator (f28367b)
• cockpit: show keep-empty sessions as an Empty session with New Tab (aff3404)

Bug Fixes

• cockpit: compile the build without the phux ffi and cover it in ci (0b3832d)
• cockpit: honor a registry entry's pinned session when reattaching at launch (980282f)
• cockpit: keep backing off a pee...

v0.30.0

0.30.0 (2026-09-10)

⚠ BREAKING CHANGES

• protocol: PROTOCOL_VERSION is 0.9.0 and PHUX_CLIENT_ABI_VERSION is 2. A 0.8 peer and a 0.9 peer refuse each other at HELLO, and every embedder of the C ABI must rebuild against the renamed header. No frame bytes changed.

Features

• install: serve a POSIX-clean installer at phux.sh/install (7470793)
• protocol: rename the wire primary to ResourceId and cut protocol 0.9.0 (0e355cf)
• server: agent session resources with producer-fed streams and parent cascade (6203e03)

Bug Fixes

• ci: stop pull-request lanes from evicting the shared cache budget (4f279f3)
• cockpit: bring the shipping extension harness to protocol 0.9 (d93ee09)
• server: stream state survives the screen tick; child spawn reaches the parent's watchers (bccfc23)

Documentation

• adr: accept the resource model and supersede its predecessors (c4407a8)
• reference: regenerate the config reference for agent-log-bytes (d1ea191)

cockpit: v0.20.0

0.20.0 (2026-09-10)

⚠ BREAKING CHANGES

• protocol: PROTOCOL_VERSION is 0.9.0 and PHUX_CLIENT_ABI_VERSION is 2. A 0.8 peer and a 0.9 peer refuse each other at HELLO, and every embedder of the C ABI must rebuild against the renamed header. No frame bytes changed.

Features

• cockpit: draw agent session rows under their terminals (3d94247)
• cockpit: project agent sessions under their terminals (ccbdf49)
• cockpit: qualify catalog navigation command targets (#573) (bdd8df1)
• cockpit: qualify tab commands by identity and correlate receipts (#569) (3f2f978)
• cockpit: retain correlated operation and placement outcomes (#574) (c1ed7ff)
• protocol: rename the wire primary to ResourceId and cut protocol 0.9.0 (0e355cf)

Bug Fixes

• cockpit: bring the shipping extension harness to protocol 0.9 (d93ee09)
• cockpit: commit interaction ownership before native effects (#565) (43e01ba)
• cockpit: publish native focus and persistence transitions (#566) (f5b07fa)

This release is ad-hoc signed because Developer ID credentials are not configured. The Homebrew cask clears the app's quarantine attribute and reports this in its installation caveat.

v0.29.0

0.29.0 (2026-09-09)

Features

• agent: the Claude shim reads hook payloads and feeds the agent session stream (73ced89)
• cli: agent session verbs and kind-aware listing (962ca0f)
• cockpit: project confirmed shared Phux workspaces (#559) (81d78df)
• ffi: expose resource kinds and agent session records to hosts (8b58a6c)
• protocol: additive resource kinds, facets, bindings, and producer-fed output (eb03ded)
• server: stream evidence outranks the screen detector (b028664)
• site: make the live demo fast and release-aware (#558) (e871e0d)
• tui: kind-aware kernel; agent sessions in the sidebar and fleet (0b2ed35)

Bug Fixes

• beads: remove a rebase conflict marker (842fa2e)
• cockpit: restore terminal focus and contain crowded tabs (#555) (66ef0b7)
• protocol: derive resource kind default (65d5d77)

Performance

• ci: route validation and reuse verified build artifacts (#554) (27928a4)

Refactors

• server: resolve resources through one local-or-relayed seam (2828dcc)
• server: split the generic resource core from the terminal engine (58e96ed)

Documentation

• adr: add the decisions-in-force view and its sync gate (9c42c17)
• adr: propose the resource model (ADR-0102, 0103, 0104) (848120a)
• adr: supersede instead of amend; enforce the ADR length cap (f71dc2d)
• architecture: describe the resource core and the terminal engine (cd43211)
• cockpit: use the Native SDK live development loop (#556) (3b01d69)
• concepts: describe phux as a substrate for resources, not terminals (fe3cfe8)
• consumers: document agent session resources and the all-work positioning (8cee330)
• consumers: mark the MCP agent session tools partial (120d3d8)
• spec: mark resource kinds partial now that phux-core carries them (164b9cf)
• spec: specify resource kinds, parent bindings, and producer-fed streams (e5b6d96)