v1.46.0

1.46.0 (2026-06-12)

Features

• agent: refine the empty-session greeting (872eab3)
• agent: restyle session pane to the Codex desktop design (25e9eed), closes #111111 #131313 #0169cc
• settings: add Hermes to the local agent attach flow (bf6d515)
• settings: attach models to local coding agents in one click (07c8db9)

Fixes

• agent: split received vs committed cursors; commit content + cursor atomically (2133e0a)
• controller: drop the stale currentRecipe cache from recipe status (ec524da)
• controller: harden first boot for new installs (0f155f5)
• controller: stop engine installs and probes from freezing the event loop (dd9c830)
• frontend: make setup-wizard and engine-install failures visible (141883e)
• security: harden controller, frontend, desktop & supply chain (422077d)
• sessions: poll may not idle a session right after a turn accept (0cf41aa)
• workspace: runtimeSessionId lives only on Session; restore reuses it (d3701dd)
• workspace: single persistence write path for snapshots and layout (0ceab69)

Refactors

• agent: consolidate event-seq gating into pure runtime-cursor module (f1b876f)
• agent: fold inert queue-drain into the controller; drop redundant cursor ctor (ff8a9e3)
• agent: make pi-event-applier a pure session reducer (1da2bff)
• agent: remove dead piEventBatchesRef batching machinery (4ce6530)
• agent: session-runtime-controller owns the live event transport (66c0dce)
• agent: single-source the compaction success predicate (7680e9c)
• controller,cli: collapse the double event barrel, dedupe helpers, drop knip-masked dead exports (6fbeeb0)
• controller: flatten services and fold spine types into their owners (6d9e2dd)
• controller: remove the dead module-barrel layer, merge single-consumer fragments (6bccfc1)
• desktop: extract the shared projects-store core and fs-json helpers (f87e0a5)
• frontend: de-fragment features/agent — 35 fragment files merged into their consumers (214ed89)
• frontend: evict feature-owned code from shared layers and consolidate the controller client (1b6f415)
• frontend: finish agent ui consolidation; left-sidebar becomes features/shell (5e86c1a)
• frontend: finish thin app shells, remove masked dead code (a3d9569)
• frontend: finish thinning app/ shells and feature de-fragmentation (8a18e42)
• frontend: one fetchWithTimeout primitive instead of four copies (cfdbea5)
• repo: adopt src/features convention, controller RouteRegistrar, shared validation (695a592)
• sessions: controller owns the runtime status poll (6a12538)
• status: derive sidebar status from the realtime store (e1b4907)
• tests: split the two megafiles into per-topic suites with shared fixtures (f42e6ee)
• workspace: direct sidebar commands replace same-tree window events (86afd06)
• workspace: extract session replay queue to a pure module (0ab3c45)
• workspace: purge dead actions, handles, and event branches (5a6a821)
• workspace: registration-driven replay drain, no more 50ms polling (d8e4fea)

Documentation

• accurate quick start, remote-deploy rules, and a preflight doctor script (7f77104)
• re-verify every stale claim against source and fix it (72dc144)
• security: add security, standards & state audit wiki (10acf65)
• status: document the two status owners (75abeec)
• workspace: document the single persistence write path (4e8e9ee)

Tests

• agent: pin session event ordering behavior before controller refactor (be36245)
• workspace: pin pane/persistence/hydration behavior before consolidation (e4322a6)