zarlcode v0.20.1

Fixed

• Restored durable first-turn dispatch, queued input, save retry, and ordinary resume for custom and other provider routes that do not support exact rewind. Exact checkpoint validation remains restricted to qualified routes.
• Replaced the fresh macOS interactive startup failure with explicit, remembered workspace consent to run without the Linux-only shell sandbox. Declining exits without changing settings; explicit sandbox-on requests and Linux startup still fail closed, and headless runs require an explicit opt-out.
• Reject unsupported provider switches in exact-checkpoint conversations before changing the live target or saved selection, with guidance to start a new conversation. Mixed ordinary history is never silently promoted to exact replay.
• Made the watched-provider panic regression fixture deterministic instead of racing a successful early-stop cancellation against the expected panic.

Verification

• Added encrypted custom-provider save/restart coverage that rebuilds the registry, adapter, credentials and session from disk against a local test endpoint.
• Added native macOS startup CI covering explicit sandbox consent, decline, remembered preferences and credential restart, alongside existing Linux checks.

Upgrade notes

• This patch keeps zkit at v0.20.0 and introduces no new database migrations. Existing backups remain useful; do not delete state to work around the v0.20.0 dispatch error.
• macOS still has no kernel shell sandbox. Interactive consent explicitly permits unconfined execution for one workspace; headless use requires a saved opt-out or ZARLCODE_SANDBOX=0.

zarlcode v0.20.0

Added

• Added durable conversation checkpoints, rewind preview and branching, and saved-session recovery backed by canonical replay history.
• Added automatic child-result delivery for supported receiving providers, with parent-scoped routing and explicit status/await rereads still available.
• Added multimodal tool-result rendering and replay, terminal image support, richer web-tool output, and draft attachment recovery.
• Added offline, read-only zarlcode doctor checks for the running binary, home layout, state database file, and credential-vault presence with actionable status and exit codes.

Changed

• Separated provider-attempt usage, live activity, event settlement, and durable session commits so cancellation, queued work, and save status remain distinguishable.
• Made Plan/Build transitions and provider/model changes coordinated runtime operations, preserving active-child and session ownership.
• Promoted the deterministic PTY onboarding, encrypted-credential, restart, unlock, resize, and shutdown walkthrough to a required CI golden workflow.
• Adopted the redesigned project website with a single documentation/deployment root, corrected usage and safety guides, and required whole-site browser, link, and accessibility checks.
• Refreshed compatible dependencies while preserving the validated Anthropic SDK/JSON Schema pair.

Fixed

• Preserved raw tool results, attachments, reasoning, provider continuation, and child-result provenance across save, resume, compaction, and checkpoint replay.
• Hardened session save-conflict recovery, independent-writer detection, rewind activation, queued-turn reservations, OAuth cancellation, and shutdown settlement.
• Made Escape and Ctrl+C at the startup credential-unlock prompt exit cleanly instead of continuing with locked credentials, and covered the path in the PTY golden workflow.

Migration notes

• Back up ~/.zarlcode/state.db together with its credential-vault files before first launch if rollback may be required. Opening the database applies migrations 00029–00034, including the Go-based 00031 tool-history schema repair; rollback to an older binary requires restoring the backup.
• Conversation rewind branches recorded history; it is not a rollback of external tool side effects or workspace files.

zarlcode v0.19.0

Added

• Added passphrase credential-protection controls with keys protect status|on|off, interactive unlock and migration flows, and fail-closed non-interactive startup.
• Added runtime browser and environment controls, direct Agent activity access from the Ctrl+K palette, and OpenAI Codex gpt-6-astra model selection with low through max reasoning effort.

Changed

• Strengthened transcript save, reopen, resume, export, crash recovery, conflict handling, and workspace ownership while preserving exact tool-result and nested sub-agent identity.
• Persisted MCP endpoint, token, and authentication intent atomically, and reject connections when required authentication cannot be established.
• Refined Settings into individually headed panes with clearer navigation, save feedback, provider/model editing, and credential state.
• Hardened release validation and deterministic artifact, checksum, provenance, and Homebrew publication checks.
• Pinned the standalone zarlcode module to zkit/v0.19.0.

Fixed

• Prevented stalled sudo askpass socket I/O from blocking cancellation and shutdown.
• Prevented tool output from crossing session boundaries, divergent transcript conflict retries, foreign-workspace recovery, and unsupported stored transcript or credential representations.

Migration notes

• Back up ~/.zarlcode/state.db together with ~/.zarlcode/master.kdf before first launch if rollback or credential recovery may be required. Opening the database applies migrations 00027 and 00028; older binaries require restoring the backup.
• Passphrase protection is now the default. Existing plaintext credential rows remain unavailable until an interactive unlock migrates them atomically; headless startup never prompts and leaves protected credentials locked.
• Legacy master.key vaults and version-1 encrypted credential rows are retained but unavailable until the affected credential is explicitly re-entered.

zarlcode v0.18.0

Added

• Added a canonical, renderer-independent transcript for user/assistant text, reasoning, tools, diffs, plans, skills, compaction notices, and nested sub-agent lifecycle events.
• Added durable composer drafts, transcript-backed Markdown export, richer saved-session search/rename/pin/delete controls, command-palette and clipboard actions, terminal notifications, and best-effort sleep inhibition.

Changed

• Resume verifies transcript revision, checksum, ordering, parent links, and lifecycle states, recovers interrupted entries, then rebuilds the TUI from canonical records. Provider context remains separately compactable.
• Transcript persistence uses immediate semantic-boundary writes, debounced streaming updates, and save/delete barriers.

Fixed

• Fixed resumed sessions losing tool activity and other rich timeline state by restoring directly from canonical transcript entries.
• Fixed session creation followed by resume against normalized databases that do not expose tool_trace_json.

Removed

• Removed the legacy history/tool-trace reconstruction path. Sessions with missing, empty, or corrupt canonical transcripts are rejected rather than resumed with partial reconstructed history.

Migration notes

• Opening an existing state database applies migrations 00025 and 00026. Back up ~/.zarlcode/state.db before first launch if binary rollback may be required; older binaries cannot open the newer schema without restoring that backup.

zarlcode v0.17.0

Changed

• Pins the standalone zarlcode module to zkit/v0.17.0 so published builds include the conformance, lifecycle, persistence, provider, and black-box testing changes.
• Supersedes the unpublished zarlcode/v0.16.0 tag, whose standalone build correctly rejected the stale zkit/v0.16.0 dependency.

zarlcode v0.15.0

Full Changelog: zarlcode/v0.14.0...zarlcode/v0.15.0

zarlcode v0.14.0

Full Changelog: zarlcode/v0.13.0...zarlcode/v0.14.0

zarlcode v0.13.0

What's Changed

• Add zsync collection conveniences by @zarldev in #43

Full Changelog: zarlcode/v0.12.0...zarlcode/v0.13.0

zarlcode v0.12.0

What's Changed

• Fix release asset selection by @zarldev in #39
• Update artifact actions to Node 24 by @zarldev in #40
• Clean up zkit defaults and spawn budgets by @zarldev in #41
• Prepare zkit and zarlcode v0.12.0 release by @zarldev in #42

Full Changelog: zarlcode/v0.11.0...zarlcode/v0.12.0

zarlcode v0.11.0

What's Changed

• Release zarlcode v0.11.0 and zkit v0.11.1 by @zarldev in #38

Full Changelog: zarlcode/v0.10.0...zarlcode/v0.11.0