Qoopia 5.0.22

Qoopia 5.0.22: clearer Canon control, continuous owner sign-in and more reliable memory operations.

• Canon and night review. Canon is a view-and-retire page. Ask an agent to create a rule; the appointed dreamer can propose a draft with its reason and sources. Only the owner accepts or rejects drafts in Overview, and unaccepted drafts never enter agent context.
• Sign-in continuity. Owner sessions renew when used. HTTPS adopts a host-only secure cookie while accepting existing sessions; a transition signing key supports rotation without signing out devices. New API keys show their issue date; older dates remain unknown.
• Memory-model status. Available access-token expiry dates receive an early warning. Sign-in-required errors have a clear recovery message; a provider that does not expose expiry is reported honestly.
• Backups. Optional offsite destinations do not fail required copies. Per-target results, bounded copy waits and a seven-day freshness warning support sleeping laptops. Consistent SQLite snapshots avoid disappearing WAL/SHM failures.
• Dashboard and Mac. Consistent English/Russian text, preserved scroll position when older messages load, and a one-time Open at Login offer on Mac.
• Hermes. The instruction kit explains official active/compacted-turn capture, exclusion of rewound turns and avoiding duplicate session_save delivery.
• Website. Smaller WOFF2 font, language-correct screenshots and real 404 responses. ChatGPT real-client acceptance remains dated 15 September 2026; current consent is not represented as re-verified.
• Continuity regression. Thanks to olzhasbek7-wq for the nested escaped JSON reproduction. The current summary path no longer uses the old literal quote check; the new regression verifies successful summaries, intact transcripts, cursor advancement and idempotent replay.

Mac: Apple Silicon, macOS 15+, Developer ID signed and Apple notarized, build 1792273789. Linux: x64, glibc 2.34+, publisher-signed. Database schema 53 (migrations 052–053), instruction kit 15.

Signed package/runtime source: 8d0a1ff1a0a71d74078f5f23570b786068adfb12. Public source snapshot: 278660b26923e1cbbd93b208b6858bd9758cb238. Publication and merge commits record metadata separately; binaries are not relabeled. Native iOS remains a separate 5.0.8 build 4 TestFlight channel.

Verify downloads with SHA256SUMS.txt and the signed manifests. Publisher public key SHA-256: 542bd3715cfbc89fbb2df47b8c40f4964e340993f316f0c32866a2972965e33b.

Installation guide · Release notes · Public source · Signed installers

Qoopia 5.0.21 public source

Qoopia 5.0.21: Canon, Hermes conversations in memory, and a full audit.

• Canon. Short rules Qoopia keeps in front of your agents by itself. A rule belongs to the whole workspace, one agent or one project and arrives at session start or on the turns it applies to; brief and AgentComm wakes carry it too, and clients without hooks call canon_match. Agents write their own rules; the owner edits them on the new Canon page. qoopia canon import-rules turns current rule notes into canons (dry run by default).
• Hermes agents save their conversations. qoopia hermes-sync reads a Hermes state.db read-only on a timer, sends user and assistant turns without the model reasoning and with secrets redacted, and stores nothing twice.
• The dreamer role. Only the owner grants it; that agent reads the workspace conversations over a time window for the night review. Other agents see only their own raw conversations; notes and summaries stay shared (ADR-022, instruction kit 14).
• Clients. Hooks stay fast when the server hangs; the wake-runner survives broken jobs, restarts and app updates; doctor checks the wake-runner, hooks, the MCP entry, PATH and the Linux sandbox.
• Dashboard. Activity and errors read in the page language; agents, sessions and conversations have their own addresses; long sessions open on the newest messages.
• Security. The 5.0.21 audit closed private supersede chains, manual-mode supersede and delete, deleted-note visibility, pairing redemption limits, TOCTOU-safe downloads, HTTPS-only bearer webhooks and more; an owner session unused for a year ends.
• Website. Installer downloads are counted on the server without JavaScript or cookies; the current version, links and checksums are in the static HTML, JSON-LD and llms.txt.

Mac: Apple Silicon, macOS 15+, Developer ID signed and Apple notarized (build 1792036019). Linux: x64, glibc 2.34+, publisher-signed. Existing data, connections and selected servers are preserved by the update flow.

Package/runtime source: b559e64fcf8582e73020e38702e11d9c8028e962; database schema 51 (migrations 050 Canon and 051 indexes), instruction kit 14. iOS is a separate 5.0.8 TestFlight channel: build 4 is available in the public beta.

This is the independent public source history. SOURCE-MANIFEST.json and RELEASE.json record the reviewed snapshot and signed package provenance.

Signed installers · Release notes

Qoopia 5.0.20 public source

Qoopia 5.0.20: agents wake each other, and a full audit with about ninety fixes.

• Agents wake each other. A message in AgentComm starts a real turn of Claude Code or Codex on your computer through the new qoopia wake-runner, and the agent answers by itself. Every wake is signed, only a request gets an automatic answer, and each AgentComm thread keeps its own agent session.
• Honest delivery status. agent_send and the dashboard say whether the agent was woken, read the message from its inbox without a wake, or has no runtime to wake.
• Every connection talks to agents. ChatGPT, Claude Desktop, Claude Code, Claude Web and Codex can send, read their inbox and reply, within their tool profile and OAuth scope.
• Security. A sign-in email can no longer enroll a device for someone who did not start that sign-in; OAuth client registrations and the consent page are bounded; a reporter key cannot open the dashboard.
• Files and memory. PDF and DOCX text is read in a separate bounded process (30 s, 1 GB); memory status names the real cause and clears after sign-in; retried saves are stored once.
• Dashboard and website. Errors in plain words in the page language; the website has real Russian pages at /ru/.

Mac: Apple Silicon, macOS 15+, Developer ID signed and Apple notarized (build 1791732825). Linux: x64, glibc 2.34+, publisher-signed. Existing data, connections and selected servers are preserved by the update flow.

Package/runtime source: f9a554ed3589f33d44740f3e99d04fa3ca8d7c20; database schema 49 (migration 049), instruction kit 13. iOS remains a separate 5.0.8 TestFlight channel: build 3 is available, build 4 is in Apple beta review.

Community contributions: PR #33 by @olzhasbek7-wq (AgentComm for memory connections) and PR #17 by @niyazirsaliev (installable dashboard icons) — thank you.

This is the independent public source history. SOURCE-MANIFEST.json and RELEASE.json record the reviewed snapshot and signed package provenance.

Signed installers · Release notes

Qoopia 5.0.19 — public source

Qoopia 5.0.19 makes file updates, agent messages and OAuth connections more reliable.

• Concurrent file appends detect a conflict instead of overwriting another update. File and activity changes commit together.
• Agent replies stay in the correct conversation, and topic whitespace no longer breaks retries.
• Stricter OAuth form validation and bounded consent replies; MCP client SDK 1.31 includes the issuer fix.

Mac: Apple Silicon, macOS 15+, Developer ID signed and Apple notarized. Linux: x64, glibc 2.34+. Existing data, connections and selected servers are preserved by the update flow.

Package/runtime source: 11e2b03b95e223275c7d75376057fd9230689c1c; database schema 48, instruction kit 12. iOS remains a separate 5.0.8 build 3 channel; this release does not replace the native iOS build.

Verify files with SHA256SUMS.txt and the signed manifests. Publisher public key SHA-256: 542bd3715cfbc89fbb2df47b8c40f4964e340993f316f0c32866a2972965e33b.

Installation guide · Public source

This is the independent public source history. SOURCE-MANIFEST.json and RELEASE.json record the reviewed snapshot and signed package provenance.

Qoopia 5.0.18

Qoopia 5.0.18

Autosave works out of the box with ChatGPT, Claude.ai, Grok bots and Muse: while an agent's Autosave switch is on, Qoopia asks its model to save every turn of the conversation, and the same switch turns it off at once. The dashboard says "Saving automatically" only for agents that really save.

Claude.ai connects through a connection address with a trailing slash; Codex on the computer that runs Qoopia saves its sessions locally. On a shared Linux host another user can no longer sign in to your dashboard with a code you approve; knowledge pages change only by their author, the steward and you; the memory file for another computer says it is a key to your memory; a full disk reads in plain words. Qoopia speaks MCP 2026-07-28, and two dependency advisories published on 6 October are closed.

Existing agents, connections, memory and permissions remain intact. Instruction kit revision 12; database schema 48 (unchanged).

Mac: Apple Silicon, macOS 15+. Developer ID signed and notarized. Linux: x64, glibc 2.34+, natively compiled and publisher-signed. Both installers come from source fde4f3a1feff03814f4f5f5a702d07bf2cb4f34d. Check SHA256SUMS and the signed manifests. iOS remains the separate TestFlight version 5.0.8 build 3.

Qoopia 5.0.17

Qoopia 5.0.17

External access works end to end: ChatGPT and Claude.ai connect to a Mac or Linux install behind its tunnel, and the consent page opens in your language and confirms from the browser you started in. Claude Code and Codex on the same computer save their sessions locally and keep working after updates; a transcript record over 8 MiB no longer stops capture.

Logs and daily backups survive a Mac restart, sleep and Time Machine. A Linux server without a screen signs in with a code confirmed on your phone. Neighbouring agents can read each other's notes, but only the author, the steward and you can change them; agent names may be Cyrillic; Russian search finds other word forms. The dashboard tells the truth about saving: idle and polling agents no longer show "Saving needs attention", clients without hooks are shown as not saving automatically, and an unfinished connection reads "setup not finished".

Existing agents, connections, memory and permissions remain intact; Codex asks once to approve the Qoopia hooks again. Instruction kit revision 11; database schema 48 (unchanged).

Mac: Apple Silicon, macOS 15+. Developer ID signed and notarized. Linux: x64, glibc 2.34+, natively compiled and publisher-signed. Both installers come from source 341ef82f3973c90e517a0d70e2a3c1d1075328e5. Check SHA256SUMS and the signed manifests. iOS remains the separate TestFlight version 5.0.8 build 3.

Qoopia 5.0.16

Qoopia 5.0.16

Sign in with Google and you are in Qoopia straight away: no confirmation email, no code. Sign in once on each device; website and iPhone sessions last a year and renew on every visit. A sign-in finishes only on the network where it started, so someone else's link signs nobody in.

A clearer dashboard: you first, then your steward and agents in a fixed order with memory switches in the row; an overview with live activity; one list of connected apps with Disconnect; folders in Files, where agents can now save files themselves (file_put). Memory summarises only live conversations, so finished ones no longer spend your model subscription; recall is faster on Linux.

Existing agents, connections, memory and permissions remain intact. Instruction kit revision 9; database schema 48 (unchanged).

Mac: Apple Silicon, macOS 15+. Developer ID signed and notarized. Linux: x64, glibc 2.34+, natively compiled and publisher-signed. Both installers come from source dba3d1682767de87bbee02d1908cdc9a76f28208. Check SHA256SUMS and the signed manifests. iOS remains the separate TestFlight version 5.0.8 build 3.

Qoopia 5.0.15

Qoopia 5.0.15

Shared context: every agent reads its workspace siblings' notes and conversations by default, so any agent can pick up another's work; the owner switches it off per agent on the agent page or through the steward, and no agent reads another workspace. This release includes a full product audit: hardened sign-in, sessions and connections, faster dashboard search and lists, accessibility fixes, clearer install and update messages, and updates that refuse downgrades and keep a rolled-back version.

Existing agents, connections, memory and permissions remain intact. Instruction kit revision 9; database schema 48 (applied by the update).

Mac: Apple Silicon, macOS 15+. Developer ID signed and notarized. Linux: x64, glibc 2.34+, natively compiled and publisher-signed. Both installers come from source 2a062e8f5662e49e33691902c8aa44cf330d8c1a. Check SHA256SUMS and the signed manifests. iOS remains the separate TestFlight version 5.0.8 build 3.

Qoopia 5.0.14

Qoopia 5.0.14

Connect your agent with one setup request. The first successful protocol call confirms the connection automatically. Existing owner browser sessions are reused for explicit consent, and pending applications remain visible with automatic status refresh.

Instruction updates preserve agent identity and container-local paths. Existing agents, connections, memory and permissions remain intact. Instruction kit revision 7; database schema 47. Chat performance improvements from 5.0.12–5.0.13 remain included.

Mac: Apple Silicon, macOS 15+. Developer ID signed and notarized. Linux: x64, glibc 2.34+, natively compiled and publisher-signed. Both installers come from source 703e48475b4b0fa7a3bc0346ba830f9ceb24578c. Check SHA256SUMS and the signed manifests. iOS remains the separate TestFlight version 5.0.8 build 3.

Source is published under MIT in an independent history. No private Git ancestry or workspace data are included.

Qoopia 5.0.13

Qoopia 5.0.13

• Separate Muse.app and Muse Code CLI setup, with meaningful agent names.
• Prepare one owner review link through the steward, preserving existing connections and OAuth permissions.
• Combine setup and actual-client verification for cloud Muse and Grok Bot.
• Show native connections, verified calls and unused drafts accurately.
• Recover timed-out memory checkpoints with smaller batches.

Instruction kit revision 6; database schema remains 47. Existing data and connections are preserved. Generic MCP access does not imply automatic capture of the client transcript. Native iOS remains its independent 5.0.8 build 3 channel.

Security: updated fast-uri and ip-address to patched versions; dependency audit reports no vulnerabilities.