Qoopia 5.0.25

Qoopia 5.0.25: a reliability release. A general audit of the whole product and 84 fixes; no migration.

• Memory from Claude Code and Codex keeps arriving. A session the server refuses with 404 — it happens after a profile is linked to another agent — continues under an id of its own instead of waiting on the computer for ever. qoopia doctor reports a session whose delivery stands still. A refused tail no longer holds back other sessions.
• Code Mode cannot hold the server. qoopia_execute runs guest code in a sandbox process of its own with a hard memory ceiling. A tight loop or a run that takes too much memory is stopped at the deadline and the server keeps answering; the ceiling also holds in the standalone Mac and Linux binary.
• Long input. file_put checks base64 in linear time and the secret guard's password and JWT patterns run in linear time. Ordinary identifiers such as seq_number_validation_rule are no longer taken for Qoopia keys. The secret check now covers note tags, file names and text files.
• Memory server. Session writes wait for another process that holds the database instead of failing with SQLITE_BUSY. A session whose summary keeps failing backs off up to six hours. An agent whose memory is «only on request» gets APPROVAL_REQUIRED from file_put. Note metadata is limited to 16 KiB.
• Wake runner and services. An agent whose CLI or folder no longer exists no longer stops every other agent on that computer from waking. The services start Qoopia by the installation's launcher, so they follow updates. A managed Claude Code settings file with only harmless switches no longer blocks connecting Claude Code.
• Sign-in. Strangers cannot spend the daily e-mail budget of existing accounts; visitors of a hosted dashboard cannot lock its owner out. Rate limits count an IPv6 client by its /64; X-Forwarded-For is read from the trusted side (TRUST_CF_CONNECTING_IP=false for installations behind a proxy other than Cloudflare).
• Dashboard. An API-key sign-in keeps working after the first page; failed reads show an error instead of an empty list; a proposed rule shows whose it is and what it replaces; pages no longer redraw over what the owner is doing.
• Operations. Off-host backup copies are pruned and an interrupted copy is never named as a backup; the system backup includes the server's configuration; the release monitor pages an outage whose failing check changes every minute; the server's own alerts can reach a receiver on the same host.

Installed instructions refresh with qoopia instructions refresh --commit (instruction kit 18: file_put is listed among the tools a manual agent cannot use).

Mac: Apple Silicon, macOS 15+, Developer ID signed and Apple notarized, build 1794360458. Linux: x64, glibc 2.34+, publisher-signed. Database schema 56 (no migration), instruction kit 18.

Signed package/runtime source: 8b13ea61a77aa21a1c638d8afb205d4483596fc3 (both bundles source_digest 4dc546cd…). Public source snapshot: 03106a594a1f18605342ce2fa5b08a4765c907c8. Publication and merge commits record metadata separately; binaries are not relabeled. Native iOS remains a separate channel (5.0.8).

Verify downloads with SHA256SUMS.txt and the signed manifests. Publisher public key SHA-256: 542bd3715cfbc89fbb2df47b8c40f4964e340993f316f0c32866a2972965e33b.

Installation guide · Release notes · Public source · Signed installers

Qoopia 5.0.24

Qoopia 5.0.24: a much smaller tool catalog for every MCP client, read-only Code Mode, fast recall and public OAuth client registration.

• Lean tool catalog. Direct MCP clients now receive a short core set by default — qoopia_protocol, recall, note_create, note_get, agent_send, agent_inbox, qoopia_guide, tool_search, qoopia_execute — instead of the full list: 9 tools and 5.1 KB instead of 42 tools and 34.7 KB in 5.0.23 (−85%; −87% for steward agents). Every other tool is still callable by its old name, and tool_search returns matching tools with their schemas on demand. Existing connections and credentials keep working without reconnection.
• Read-only Code Mode. qoopia_execute combines searches, batch reads and filtering in one call inside isolated QuickJS-WASM, with the caller's own permissions; every nested call is logged. It cannot write or confirm anything, has no network, filesystem, timers or imports, and is limited to 10 seconds, 50 calls, 20 KB output and 32 MiB of memory.
• Batch reads and short excerpts. note_get reads up to 50 notes at once with bounded bodies (max_chars); recall returns short excerpts with ids. A compact qoopia_guide opens individual rule chapters in English or Russian; session start uses compact rules within 2 KiB. Instruction kit 17 keeps installed roles and manual memory policy.
• Fast recall. recall answers in well under a second by default and no longer waits for the memory model; judge: true asks for the model's judgement within model_budget_ms. The memory model runs without extended thinking. Recall hygiene demotes context-only material and flags low-confidence results.
• Fixes. Resumed ingestion no longer stores retried messages twice (migration 056). Sign in with Apple fixes. Root OAuth Dynamic Client Registration (/oauth/register) no longer answers 401 to unauthenticated MCP clients (#37); rate limits and metadata validation stay, and registration alone grants no access — connection selection, owner consent, PKCE and scoped tokens still apply.
• Rollback switches. QOOPIA_TOOL_SURFACE=classic restores the full tool list; QOOPIA_CODE_MODE=off disables Code Mode. Restart the server after changing either; no downgrade or reconnection is needed.
• Also: qs 6.16.1 and @hono/node-server 2.1.3 floors; bun audit runs without ignores.

Mac: Apple Silicon, macOS 15+, Developer ID signed and Apple notarized, build 1794020709. Linux: x64, glibc 2.34+, publisher-signed. Database schema 56 (migration 056), instruction kit 17.

Signed package/runtime source: c238e5e1be91c68ae515086f237bab5f31b57ce1 (both bundles source_digest 57958320…). Public source snapshot: c23a32f768a542453f25671c943840f73a8369b7. Publication and merge commits record metadata separately; binaries are not relabeled. Native iOS remains a separate channel (5.0.8 build 5 in App Store review).

Verify downloads with SHA256SUMS.txt and the signed manifests. Publisher public key SHA-256: 542bd3715cfbc89fbb2df47b8c40f4964e340993f316f0c32866a2972965e33b.

Installation guide · Release notes · Public source · Signed installers

Qoopia 5.0.23

Qoopia 5.0.23: work passes between Claude Code and Codex, working notes built from facts, and very large transcripts delivered without slowing your agent.

• Work handoff. A session opening a project receives the latest work another agent of the same owner did there: what was done and what is open, its final answer, your last requests, tool errors and the files it changed — each with a content digest checked against this computer. It is marked as history, not instructions. Clients without hooks get the same through work_handoff; work_take marks work as taken without locking anything.
• Changed files. Edits from Claude Code tools, apply_patch (also inside Codex code-mode exec) and the session directory's git working tree, so files written by shell commands are listed too.
• Working notes. Facts collected from the session record plus a model summary; a limit the model invents is dropped. One working note per session.
• Secrets. One sanitized write path for everything stored; more detectors, an entropy check and an owner allowlist. session_save redacts a secret instead of refusing the turn.
• Large transcripts. The hook reads only new bytes, sends bounded portions with a timeout each and stays inside its budget; the rest goes on in a paced background drain. qoopia doctor tells a server that does not answer from delivery that is only behind, and lists Claude Code/Codex profiles that are not connected.
• Also: ё/е-insensitive search, Kazakh words in any case, account deletion from the iPhone app and the website profile, headless read-only service pairing, updated dependencies (MCP SDK 1.32.0, zod 4.6.6, body-parser 2.4.0, fast-uri 3.1.9).

Mac: Apple Silicon, macOS 15+, Developer ID signed and Apple notarized, build 1792806287. Linux: x64, glibc 2.34+, publisher-signed. Database schema 55 (migrations 054–055), instruction kit 16.

Signed package/runtime source: e902e821f0b4091d19c1ce4684592774b55fa74d (both bundles source_digest c8710862…). Public source snapshot: a4510991974a80ebd7a9de9e90188a6b9bd6770e. Publication and merge commits record metadata separately; binaries are not relabeled. Native iOS remains a separate 5.0.8 build 4 TestFlight channel.

Verify downloads with SHA256SUMS.txt and the signed manifests. Publisher public key SHA-256: 542bd3715cfbc89fbb2df47b8c40f4964e340993f316f0c32866a2972965e33b.

Installation guide · Release notes · Public source · Signed installers

Qoopia 5.0.22

Qoopia 5.0.22: clearer Canon control, continuous owner sign-in and more reliable memory operations.

• Canon and night review. Canon is a view-and-retire page. Ask an agent to create a rule; the appointed dreamer can propose a draft with its reason and sources. Only the owner accepts or rejects drafts in Overview, and unaccepted drafts never enter agent context.
• Sign-in continuity. Owner sessions renew when used. HTTPS adopts a host-only secure cookie while accepting existing sessions; a transition signing key supports rotation without signing out devices. New API keys show their issue date; older dates remain unknown.
• Memory-model status. Available access-token expiry dates receive an early warning. Sign-in-required errors have a clear recovery message; a provider that does not expose expiry is reported honestly.
• Backups. Optional offsite destinations do not fail required copies. Per-target results, bounded copy waits and a seven-day freshness warning support sleeping laptops. Consistent SQLite snapshots avoid disappearing WAL/SHM failures.
• Dashboard and Mac. Consistent English/Russian text, preserved scroll position when older messages load, and a one-time Open at Login offer on Mac.
• Hermes. The instruction kit explains official active/compacted-turn capture, exclusion of rewound turns and avoiding duplicate session_save delivery.
• Website. Smaller WOFF2 font, language-correct screenshots and real 404 responses. ChatGPT real-client acceptance remains dated 15 September 2026; current consent is not represented as re-verified.
• Continuity regression. Thanks to olzhasbek7-wq for the nested escaped JSON reproduction. The current summary path no longer uses the old literal quote check; the new regression verifies successful summaries, intact transcripts, cursor advancement and idempotent replay.

Mac: Apple Silicon, macOS 15+, Developer ID signed and Apple notarized, build 1792273789. Linux: x64, glibc 2.34+, publisher-signed. Database schema 53 (migrations 052–053), instruction kit 15.

Signed package/runtime source: 8d0a1ff1a0a71d74078f5f23570b786068adfb12. Public source snapshot: 278660b26923e1cbbd93b208b6858bd9758cb238. Publication and merge commits record metadata separately; binaries are not relabeled. Native iOS remains a separate 5.0.8 build 4 TestFlight channel.

Verify downloads with SHA256SUMS.txt and the signed manifests. Publisher public key SHA-256: 542bd3715cfbc89fbb2df47b8c40f4964e340993f316f0c32866a2972965e33b.

Installation guide · Release notes · Public source · Signed installers

Qoopia 5.0.21

Qoopia 5.0.21: Canon, Hermes conversations in memory, and a full audit.

• Canon. Short rules Qoopia keeps in front of your agents by itself. A rule belongs to the whole workspace, one agent or one project and arrives at session start or on the turns it applies to; brief and AgentComm wakes carry it too, and clients without hooks call canon_match. Agents write their own rules; the owner edits them on the new Canon page. qoopia canon import-rules turns current rule notes into canons (dry run by default).
• Hermes agents save their conversations. qoopia hermes-sync reads a Hermes state.db read-only on a timer, sends user and assistant turns without the model reasoning and with secrets redacted, and stores nothing twice.
• The dreamer role. Only the owner grants it; that agent reads the workspace conversations over a time window for the night review. Other agents see only their own raw conversations; notes and summaries stay shared (ADR-022, instruction kit 14).
• Clients. Hooks stay fast when the server hangs; the wake-runner survives broken jobs, restarts and app updates; doctor checks the wake-runner, hooks, the MCP entry, PATH and the Linux sandbox.
• Dashboard. Activity and errors read in the page language; agents, sessions and conversations have their own addresses; long sessions open on the newest messages.
• Security. The 5.0.21 audit closed private supersede chains, manual-mode supersede and delete, deleted-note visibility, pairing redemption limits, TOCTOU-safe downloads, HTTPS-only bearer webhooks and more; an owner session unused for a year ends.
• Website. Installer downloads are counted on the server without JavaScript or cookies; the current version, links and checksums are in the static HTML, JSON-LD and llms.txt.

Mac: Apple Silicon, macOS 15+, Developer ID signed and Apple notarized (build 1792036019). Linux: x64, glibc 2.34+, publisher-signed. Existing data, connections and selected servers are preserved by the update flow.

Package/runtime source: b559e64fcf8582e73020e38702e11d9c8028e962; database schema 51 (migrations 050 Canon and 051 indexes), instruction kit 14. iOS is a separate 5.0.8 TestFlight channel: build 4 is available in the public beta.

Verify files with SHA256SUMS.txt and the signed manifests. Publisher public key SHA-256: 542bd3715cfbc89fbb2df47b8c40f4964e340993f316f0c32866a2972965e33b.

Installation guide · Release notes · Public source

Qoopia 5.0.20

Qoopia 5.0.20: agents wake each other, and a full audit with about ninety fixes.

• Agents wake each other. A message in AgentComm starts a real turn of Claude Code or Codex on your computer through the new qoopia wake-runner, and the agent answers by itself. Every wake is signed, only a request gets an automatic answer, and each AgentComm thread keeps its own agent session.
• Honest delivery status. agent_send and the dashboard say whether the agent was woken, read the message from its inbox without a wake, or has no runtime to wake.
• Every connection talks to agents. ChatGPT, Claude Desktop, Claude Code, Claude Web and Codex can send, read their inbox and reply, within their tool profile and OAuth scope.
• Security. A sign-in email can no longer enroll a device for someone who did not start that sign-in; OAuth client registrations and the consent page are bounded; a reporter key cannot open the dashboard.
• Files and memory. PDF and DOCX text is read in a separate bounded process (30 s, 1 GB); memory status names the real cause and clears after sign-in; retried saves are stored once.
• Dashboard and website. Errors in plain words in the page language; the website has real Russian pages at /ru/.

Mac: Apple Silicon, macOS 15+, Developer ID signed and Apple notarized (build 1791732825). Linux: x64, glibc 2.34+, publisher-signed. Existing data, connections and selected servers are preserved by the update flow.

Package/runtime source: f9a554ed3589f33d44740f3e99d04fa3ca8d7c20; database schema 49 (migration 049), instruction kit 13. iOS remains a separate 5.0.8 TestFlight channel: build 3 is available, build 4 is in Apple beta review.

Community contributions: PR #33 by @olzhasbek7-wq (AgentComm for memory connections) and PR #17 by @niyazirsaliev (installable dashboard icons) — thank you.

Verify files with SHA256SUMS.txt and the signed manifests. Publisher public key SHA-256: 542bd3715cfbc89fbb2df47b8c40f4964e340993f316f0c32866a2972965e33b.

Installation guide · Release notes · Public source

Qoopia 5.0.19

Qoopia 5.0.19 makes file updates, agent messages and OAuth connections more reliable.

• Concurrent file appends detect a conflict instead of overwriting another update. File and activity changes commit together.
• Agent replies stay in the correct conversation, and topic whitespace no longer breaks retries.
• Stricter OAuth form validation and bounded consent replies; MCP client SDK 1.31 includes the issuer fix.

Mac: Apple Silicon, macOS 15+, Developer ID signed and Apple notarized. Linux: x64, glibc 2.34+. Existing data, connections and selected servers are preserved by the update flow.

Package/runtime source: 11e2b03b95e223275c7d75376057fd9230689c1c; database schema 48, instruction kit 12. iOS remains a separate 5.0.8 build 3 channel; this release does not replace the native iOS build.

Verify files with SHA256SUMS.txt and the signed manifests. Publisher public key SHA-256: 542bd3715cfbc89fbb2df47b8c40f4964e340993f316f0c32866a2972965e33b.

Installation guide · Public source

Qoopia 5.0.18

Qoopia 5.0.18

Autosave works out of the box with ChatGPT, Claude.ai, Grok bots and Muse: while an agent's Autosave switch is on, Qoopia asks its model to save every turn of the conversation, and the same switch turns it off at once. The dashboard says "Saving automatically" only for agents that really save.

Claude.ai connects through a connection address with a trailing slash; Codex on the computer that runs Qoopia saves its sessions locally. On a shared Linux host another user can no longer sign in to your dashboard with a code you approve; knowledge pages change only by their author, the steward and you; the memory file for another computer says it is a key to your memory; a full disk reads in plain words. Qoopia speaks MCP 2026-07-28, and two dependency advisories published on 6 October are closed.

Existing agents, connections, memory and permissions remain intact. Instruction kit revision 12; database schema 48 (unchanged).

Mac: Apple Silicon, macOS 15+. Developer ID signed and notarized. Linux: x64, glibc 2.34+, natively compiled and publisher-signed. Both installers come from source fde4f3a1feff03814f4f5f5a702d07bf2cb4f34d. Check SHA256SUMS and the signed manifests. iOS remains the separate TestFlight version 5.0.8 build 3.

Qoopia 5.0.17

Qoopia 5.0.17

External access works end to end: ChatGPT and Claude.ai connect to a Mac or Linux install behind its tunnel, and the consent page opens in your language and confirms from the browser you started in. Claude Code and Codex on the same computer save their sessions locally and keep working after updates; a transcript record over 8 MiB no longer stops capture.

Logs and daily backups survive a Mac restart, sleep and Time Machine. A Linux server without a screen signs in with a code confirmed on your phone. Neighbouring agents can read each other's notes, but only the author, the steward and you can change them; agent names may be Cyrillic; Russian search finds other word forms. The dashboard tells the truth about saving: idle and polling agents no longer show "Saving needs attention", clients without hooks are shown as not saving automatically, and an unfinished connection reads "setup not finished".

Existing agents, connections, memory and permissions remain intact; Codex asks once to approve the Qoopia hooks again. Instruction kit revision 11; database schema 48 (unchanged).

Mac: Apple Silicon, macOS 15+. Developer ID signed and notarized. Linux: x64, glibc 2.34+, natively compiled and publisher-signed. Both installers come from source 341ef82f3973c90e517a0d70e2a3c1d1075328e5. Check SHA256SUMS and the signed manifests. iOS remains the separate TestFlight version 5.0.8 build 3.

Qoopia 5.0.16

Qoopia 5.0.16

Sign in with Google and you are in Qoopia straight away: no confirmation email, no code. Sign in once on each device; website and iPhone sessions last a year and renew on every visit. A sign-in finishes only on the network where it started, so someone else's link signs nobody in.

A clearer dashboard: you first, then your steward and agents in a fixed order with memory switches in the row; an overview with live activity; one list of connected apps with Disconnect; folders in Files, where agents can now save files themselves (file_put). Memory summarises only live conversations, so finished ones no longer spend your model subscription; recall is faster on Linux.

Existing agents, connections, memory and permissions remain intact. Instruction kit revision 9; database schema 48 (unchanged).

Mac: Apple Silicon, macOS 15+. Developer ID signed and notarized. Linux: x64, glibc 2.34+, natively compiled and publisher-signed. Both installers come from source dba3d1682767de87bbee02d1908cdc9a76f28208. Check SHA256SUMS and the signed manifests. iOS remains the separate TestFlight version 5.0.8 build 3.