Scout v0.4.2

What's Changed

• 🚚 Move GitHub references to the openscout-app org by @arach in #152
• 🔖 Release 0.4.2 by @arach in #153

Full Changelog: v0.4.1...v0.4.2

Scout v0.4.1

Scout 0.4.1 adds scout auth login: a host signs in to your Scout account through the browser, and scout web install no longer needs a download key made by hand. Keys saved by 0.4.0 keep working, and nothing needs to change before you upgrade.

What changes

• scout auth login shows a short code and opens https://console.openscout.app/device. Sign in or make an account there, then approve the terminal. The download key that comes back is saved in the macOS Keychain, in the Secret Service on Linux desktops, or otherwise in a private file. Over SSH, without a terminal, or with --no-browser, the command prints the page instead of opening it.
• scout auth status shows the signed-in account and where its key is saved, never the key. scout auth logout removes the key from this host and says where to revoke it.
• scout auth login --key - saves a key you already have. At a terminal it asks for the key without showing it. SCOUT_DIST_KEY still overrides the saved key for VMs and CI.
• scout web install with no saved key signs in first when it runs at a terminal. Without a terminal it stops with No download key. Sign in first: scout auth login.
• scout web login at a terminal is now the browser sign-in. A key piped to it is saved as before.
• When sign-in stops, the message says why: the code was denied or expired, it was already used, the account can't download the web app, or the account holds as many keys as it can.

Full notes: docs/releases.md

Full Changelog: v0.4.0...v0.4.1

Scout v0.4.0

Scout 0.4.0 is the terminal-only core. This repository holds the runtime, protocol, harness adapters, session observation and extraction, CLI, TUI, and the host side of phone pairing (@openscout/pairing, bundled into the CLI and not published separately). The Mac, iOS, Android, and web apps are the separate Scout apps.

Before you upgrade

• Keep 0.3.9 while you use Mac app 0.3.9. That app loads its views and sends messages through the web server that the 0.3.9 npm package starts on port 43120. 0.4.0 does not include that server. Upgrade the CLI together with a Mac app release that supplies its own web server. Until then, install @openscout/scout@0.3.9.
• Bun 1.4.4 or newer is required. An older Bun exits 1 with Scout requires Bun 1.4.4 or newer; installed: <version>. Upgrade: bun upgrade. A remote host with an older Bun refuses scout update and keeps its existing installation.
• The npm package contains no web app. scout server and scout web serve a web client only when the separate Scout apps supply one. Without one, they explain where the web app comes from.
• scout setup and scout doctor check the core only. They report runtime health, not app health. Their JSON schemas are now scout.setup.v2, scout.doctor.core/v1 and scout.doctor.core.node/v1.
• The journal format moves forward. After 0.4.0 creates or compacts the runtime journal, an earlier runtime cannot load it.
• Hosts with the mesh bridge enabled must pass openscout-runtime mesh-bridge-preflight (exit 0), run from 0.4.0 as the service user, before the service restarts. See the bridge cutover guide.
• A Tailscale Serve or Funnel handler that forwards to the runtime's loopback port or socket removes local trust from that listener. Local-tier requests on it fail with tailscale_runtime_listener_guarded.
• Changed output. scout session touched and scout diff session take the exact <native-session-id> --node <node-id> --harness <claude|codex|pi> tuple. scout providers JSON is scout.provider-usage/v1.

What changes

• Tailnet guests. scout mesh guests list|grant|revoke gives a guest key access to exact agents for up to 30 days. grant --json prints the bootstrap that scout-tailscale connect imports.
• Mesh management. Local runtime APIs configure approval sharing, read Tailscale diagnostics, ping a pinned peer, configure the bridge and collect consent-gated reports. SSH enrollment applies --tier on both hosts. Dormant hosts stay hidden unless you pass --all.
• CLI extensions. scout extensions install|update|remove installs trusted local extensions with rollback. Built-in commands always win. scout completion zsh|bash|fish and scout help <verb> cover installed extensions.
• Phone pairing. A relay handshake no longer grants trust. A phone pairs only in an explicit window of at most five minutes, or in a window bound to a request the host approved. A phone that finds the host through your account waits for scout pair requests approve. Pairing authority can move to a verified capsule store through an explicit local cutover. Revoking a phone does not close a session that is already connected.
• Agent replies. ACP agents keep their messages apart across tool calls and plan updates. A failed Codex turn no longer takes a live session offline. The MCP server keeps one reply waiter per flight across retries. scout watch no longer holds message bodies.
• No web server needed. scout role, scout diff, scout providers, scout runtimes, and the MCP session and attachment reads use the runtime directly.
• The host stays awake. On macOS, the runtime holds off idle sleep while local agents work. OPENSCOUT_KEEP_AWAKE=0 turns it off.
• Operator images. scout notify --image and scout operator --image store images as runtime blobs, without the six-hour expiry.

Full notes: docs/releases.md

Full Changelog: v0.3.9...v0.4.0

Scout v0.3.9

What's Changed

• 🐧 Add Linux desktop integration, usage study and Omarchy story by @arach in #66
• Add an Omarchy edge HUD and optional TUI shimmer by @arach in #67
• 🐛 Repair production release verification and dev classification by @arach in #68
• 🐛 Preserve reachable mesh routes across authenticated fallbacks by @arach in #69
• Reconcile isolated instances, bounded storage, LAN access and first-task setup by @arach in #70
• 📝 Clarify public Scout contribution routing by @arach in #71
• 🐛 Reconcile managed permissions, web recovery, and bounded reads by @arach in #72
• 🐛 Preserve web delivery request identity across retries by @arach in #75
• 🐛 Fence inbox claims and honor deferred retry deadlines by @arach in #76
• 🩹 Recover invocation completion from accepted replies by @arach in #79
• 🐛 Preserve peer acknowledgements through local recovery by @arach in #81
• 🐛 Reserve mobile session replies before input submission by @arach in #84
• 🐛 Recover terminal reports without replacing current flights by @arach in #86
• 🩹 Recover terminal work-item promotion after interrupted writes by @arach in #87
• 🐛 Fence native session replies from legacy input bridges by @arach in #88
• ✨ Add explicit completion and joined work contracts by @arach in #89
• 🐛 Fix post-#74 validation failures and permission double-send by @arach in #90
• 🐛 Treat exact-session harness as a lookup filter by @arach in #78
• ✨ Add explicit native Codex composer draft mode by @arach in #77
• ✨ Discover app-held Codex threads from live writer locks by @arach in #80
• ✨ Expose broker-guarded queued flight cancellation by @arach in #83
• ✨ Stamp explicit return addresses on direct session requests by @arach in #85
• ✨ Guard native thread submit and fall back to standalone Lattices by @arach in #82
• ✨ Add T3 orchestration adapter and shared workflow context by @arach in #73
• ✨ Publish standalone MIT Scout Tailscale Python client by @arach in #91
• 🔖 Prepare Scout 0.3.9 by @arach in #92

Full Changelog: v0.3.8...v0.3.9

Scout v0.3.8

What's Changed

• Include cardless conversations in natural-language discovery (0.3.8) by @arach in #65

Full Changelog: v0.3.7...v0.3.8

Scout v0.3.7

What's Changed

• ✨ Release Scout 0.3.7 with natural-language recipient discovery by @arach in #64

Full Changelog: v0.3.6...v0.3.7

Scout v0.3.6

What's Changed

• Document Linux setup readiness and the foreground broker by @arach in #53
• Add supported-agent pills to the README by @arach in #52
• Scout skill: rules and pointers instead of a manual by @arach in #54
• 🎨 Refresh Scout README artwork and integration links by @arach in #55
• 🚀 Add guarded npm dev prerelease channel by @arach in #56
• 🔖 Prepare v0.3.6-dev.1 dev release by @arach in #57
• ✨ Ship shared navigation and terminal layout in 0.3.6-dev.2 by @arach in #58
• 🔖 Ship cross-host asks and Linux local edge in 0.3.6-dev.3 by @arach in #61
• Release 0.3.6-dev.4 by @arach in #62
• 🔖 Release Scout 0.3.6 with reliable routing and historical retries by @arach in #63

Full Changelog: v0.3.5...v0.3.6

v0.3.6-dev.3

OpenScout 0.3.6-dev.3

Scout 0.3.6-dev.2

Scout 0.3.6-dev.2 is a dogfood npm release on the dev channel.

• Shared sidebar for Home, Chat, Terminals, Broker, Search, Ops, and Settings.
• Lanes and Tail remain reachable; work/follow links retain their pages.
• Standalone terminal controls share a toolbar. A single shell fills the available viewport, and Add existing opens the session picker.
• Basic bundle guards continue excluding full-app and 3D surfaces.

Install the exact version:

bun add -g @openscout/scout@0.3.6-dev.2
scout server restart

Refresh any existing browser tab after the restart.

Both @openscout/scout and @openscout/protocol were published through GitHub OIDC from 4a10dc8. The attached receipt matches npm artifact integrities. Stable npm latest remains 0.3.2.

Changes and validation · Publication job

This release contains npm packages, not a new native installer. Known inherited stable-only release test fixture limitation: #59.

v0.3.6-dev.1

Scout 0.3.6-dev.1 dev