Clayrune v2.0.2 — security + hardening

Security + hardening release — supersedes v2.0.1. All users should update.

Rolls v2.0.1's security work plus a second code-inspection pass into one build:

• /api/terminal/launch (the shell-exec sink) now restricted to loopback callers.
• Dependency CVE fixes — control-plane fastapi/cryptography past 8 known CVEs; main-app floors raised (Pillow libwebp heap-overflow, requests, flask, cryptography).
• Continuous dependency auditing in CI (pip-audit + cargo audit), committed Rust lockfile, lint + exception hardening.

Full details in CHANGELOG.md.

Install / update

• Existing installs auto-update from master — open Clayrune and check for updates.
• Windows: run Clayrune-Setup.bat; re-run it to pick up the dependency floor bumps.
• macOS: download MissionControl-macOS.zip below, unzip, right-click ▸ Open (approve once in System Settings ▸ Privacy & Security if blocked).

macOS build pending notarization; the signed build replaces it shortly. Control-plane CVE fix requires a Cloud Run redeploy.

Clayrune v2.0.1 — security release

Security release — all users should update.

Closes a LAN unauthenticated remote-code-execution chain (a forgeable Cf-Access-* header could bypass the local passcode gate; CORS is now a strict allowlist, blocking drive-by access from any website). Plus hardening: git argument-injection guards, secrets-at-rest file permissions, serve-image path confinement, control-plane dev-auth fail-closed, and opt-in Cloudflare Access JWT verification. Drops the unused Tauri desktop target.

Full details in CHANGELOG.md.

Install / update

• Existing installs auto-update from master — open Clayrune and check for updates.
• Windows: run Clayrune-Setup.bat (pulls the latest source).
• macOS: download MissionControl-macOS.zip below, unzip, then right-click the app ▸ Open. If macOS blocks it ("Apple could not verify…"), approve it once in System Settings ▸ Privacy & Security ▸ Open Anyway.

The macOS build attached here is pending notarization; the signed build will replace it shortly (removes the Gatekeeper prompt).

Clayrune v2.0.0

First major release since v1.5.1 — a redesigned settings surface, sticky/cheaper agent behavior, and runtime efficiency for long-lived sessions.

Highlights

• Settings, redesigned — WhatsApp-style three-level drill-down (categories → sub-list → settings) with live search and depth-aware hardware-back.
• Sticky agent settings (default on for new installs) — brief-replies "Everywhere" is baked into each chat's spawn system prompt (cached, authoritative) instead of re-sent every turn; flipping a CLI-flag setting (model/effort) mid-session resumes the live session so it takes effect.
• Brief replies on desktop — 3-way Off / Phone / Everywhere; prose-only brevity (code, file edits, and tool work are never shortened).
• Search past chats by transcript content (project-scoped).
• PLAN tab revived — detects plan docs without needing plan mode.
• --effort knob — per-agent and per-project effort control.
• Self-learning skills (Phase 4) and SQLite migration foundation (Phase 0) land as new internal subsystems (distiller.py, db.py) with test coverage.

Efficiency

• Per-project MCP trimming — load only the servers a project needs.
• Idle-eviction of warm Mode B sessions to reclaim their MCP fleet.
• Windowless launch by default on Windows; restart + shut-down power menu.

Fixes

• Keep SSE open while blocked on AskUserQuestion (turn_complete race); the form no longer silently fails to reappear after a DOM wipe.
• Resumed sessions keep their transcript across a process death.
• Restart/crash no longer orphans child processes.
• Mobile uploads + agent-text URL linkification.
• Modal no longer re-docks to the right after you drag it free; settings modal sizes to its content.

Upgrade note: sticky_agent_settings defaults on for fresh installs and for existing installs that never set the key; set it to false in config.json to opt out.

Full detail in CHANGELOG.md under [2026-06-04].

v1.5.1 — Fix native window bundling

Fix: Native window now works in bundled exe

Root cause: webview.platforms.winforms was missing from PyInstaller hidden imports. This module is imported dynamically by pywebview's guilib.py (inside a function), so PyInstaller's static analysis couldn't detect it. Without it, the entire GUI backend was absent from the bundle, causing silent fallback to browser mode.

Changes

• Use collect_submodules('webview') and collect_submodules('clr_loader') to automatically bundle all submodules
• Add visible error dialogs (MessageBox) when native window fails, so failures are no longer silent

Download

• MissionControl-Windows.zip — extract and run MissionControl.exe
• Requires .NET Desktop Runtime 6.0+ (will prompt to install if missing)

Windows SmartScreen Notice

On first launch, Windows may show a "Windows protected your PC" warning. This is expected — the app is not code-signed. To proceed:

1. Click "More info"
2. Click "Run anyway"

This only happens once. The warning does not indicate a security issue — the source code is fully open at github.com/ronle/mission-control.

v1.5.0 — Native window fix

What's New

Native window restored in bundled app

The PyInstaller-bundled exe now opens a proper native window (pywebview + EdgeChromium) instead of crashing with a .NET error.

Root cause fixed — three build/runtime bugs:

1. Wrong Microsoft.Web.WebView2.WinForms.dll variant was bundled (net462 instead of netcoreapp3.0)
2. Missing Python.Runtime.runtimeconfig.json prevented .NET version roll-forward
3. webview.start() returns immediately (GUI on background thread) — main thread fell through to browser fallback, opening Chrome on top of the native window. Fixed by blocking main thread until window closes.

Now works on: .NET 6, 7, 8, 9, or any future version. Gracefully falls back to browser if .NET Desktop Runtime is not installed.

Also includes

• .NET Desktop Runtime pre-detection with guided install dialog
• Drag-and-drop file attachments in agent chat
• Global Settings UI
• Per-project Remote Control toggle
• Agent process registration API
• GitHub Sync improvements

Mission Control v1.4.2

Fixes

• .NET detection fixed: Removed clr_loader pre-check that was false-negating in frozen builds (webview would work but the pre-check said .NET was missing). Now uses console=True bootloader with hidden console window so Python's exception handling catches real .NET errors properly.

New Features

• Global Settings modal: New "Settings" button in header with UI for all config options — Identity, Agent Defaults, Claude Code Integration (streaming/remote control/channels), Memory & Condensation, Paths & Server
• Per-project Remote Control: Toggle in three-dot menu to enable --remote-control per project
• Agent process registration: Agents can register spawned processes via API for visibility in Process Manager
• Config API: GET/PUT /api/config endpoints for reading/writing config.json

Also includes (from v1.4.0/v1.4.1)

• Process Manager with PID tracking, kill, and orphan cleanup
• Toast notification system
• Dispatch error handling for missing Claude CLI

Mission Control v1.4.1

Fixes

• Claude CLI missing: Dispatch now returns a clear JSON error message ("Claude CLI not found") instead of crashing with an HTML 500 page
• .NET fallback: Pre-checks .NET runtime before loading webview — shows a friendly dialog and opens in browser instead of crashing
• Process Manager: Fixed process list not loading (API response format mismatch)

Mission Control v1.4.0

What's New

Process Manager (PID Tracker)

• Centralized process registry — every spawned subprocess (agents, terminals, housekeeping) is tracked with PID, name, project, and task preview
• New Processes button in the header opens a live process table
• Kill individual processes or clean up orphaned ones from the UI
• Scheduler auto-sweeps dead processes every 30 seconds

.NET Runtime Fallback

• Graceful handling when .NET Desktop Runtime is missing on target machines
• Shows a friendly dialog instead of crashing with a raw traceback
• Falls back to opening Mission Control in the default browser

Toast Notifications

• Auto-fresh session alerts shown as slide-in toasts
• Available for future notifications via showToast()

Also includes (from v1.3.0)

• Auto-fresh large sessions (>5 MB transcripts start fresh)
• Mobile tile drag improvements (300ms long-press, insert-and-shift)
• TTY shim fixes for Rich Live displays

Mission Control v1.3.0

What's New in v1.3.0

Auto-Fresh Large Sessions

• Sessions with transcripts > 5 MB are automatically started fresh instead of resumed
• Prevents slow agent startup from loading massive conversation history
• Context note injected so the agent knows it's continuing from a prior session

Toast Notifications

• Lightweight notification system — toasts slide in from top-right corner
• Auto-dismiss after 5 seconds with fade-out animation
• Notifies when auto-fresh triggers so users know what's happening

Mobile Tile Improvements

• 300ms long-press required before drag starts — scroll and pinch no longer conflict
• Separate tile order for mobile vs desktop
• Insert-and-shift reorder: dragging between tiles pushes others right

TTY Shim Improvements

• FakeBuffer wrapper preserves isatty() through TextIOWrapper re-wrapping
• Auto-flush on buffer write — fixes Rich Live display buffering
• Rich TUI dashboards render with full color in terminal pop-outs

Agent Tab Ordering

• New agent tabs appear on the right side of existing tabs

GitHub Issues Sync (Phase 1)

• Bidirectional sync between MC backlog items and GitHub Issues
• Security: all GitHub text sanitized
• Auto-sync every 5 minutes via scheduler

---

Download: Grab MissionControl-Windows.zip, unzip anywhere, and double-click MissionControl.exe.

Mission Control v1.2.0

What's New in v1.2.0

Scheduler

• Automate agent dispatch with once, daily, or interval-based schedules
• Enable/disable individual schedules
• Upcoming jobs banner shows next 5 scheduled tasks

GitHub Issues Sync

• Bidirectional sync between project backlogs and GitHub Issues
• Priority labels mapped automatically
• Open/closed status synchronized
• Manual or automatic sync every 5 minutes

Walkthrough Tour

• 18-step guided tour for new users
• Auto-triggers on first launch (zero projects)
• Re-triggerable via Tour button in header
• Virtual demo tile and modal shown during tour

Interactive Agent Questions

• Agents can now ask questions via AskUserQuestion tool
• Interactive forms appear in agent chat with radio/checkbox options
• Answers sent as follow-ups — works in both Mode A and Mode B

Grid Tile Arrangement

• Snap-to-grid tile positioning (Android home screen style)
• Drag tiles to any position, leave gaps, swap tiles
• Compact button to remove grid gaps

Plans Tab & Viewer

• Plans History tab shows all historical plans per project
• Wide-format plan viewer with Ctrl+scroll zoom
• Pop-out button for viewing any agent session output

Agent Improvements

• Stop and resume agent sessions
• Paste screenshots directly into agent prompts
• Per-project model selection (Sonnet 4.5, Opus 4.6, Haiku 4.5)
• Plan approval button for ExitPlanMode
• Token usage and cost tracking per session
• Live elapsed timer for running sessions

Other

• Touch support: drag, resize, pinch-to-zoom on mobile
• Memory system with auto-summaries on session completion
• Textarea content preserved across refreshes
• Various UI polish and bug fixes

---

Download: Grab MissionControl-Windows.zip, unzip anywhere, and double-click MissionControl.exe.