Development Build 1.0.0-rc.2.dev.20261016.1

Development build — an automated snapshot of develop. Not a supported release.

• Source commit: 32da6c7e5e8507c3a1a29254482d7c55bb5b15a9
• Anchor tag: v1.0.0-rc.2
• Previous Development build: dev/1.0.0-rc.2.dev.20261015.1 (e30ef6ad44b267a23efa82d20bd29835ba9b3974)
• Built: 2026-10-16 03:31 UTC

1.0.0-rc.2.dev.20261016.1 — 2026-10-16

Bug Fixes

• Voice-to-action follow-ups: failed-action text, /command failure reason, Rename on a layout-only canvas, 9B router and the ADR 0008 reading (graph) (32da6c7)

Features

• Voice-to-action: audited unattended actions in graph Tool nodes, run origins and triggers, intent routing, the command page and the desktop overlay (ADR 0021) (graph) (28c95a6)

Development Build 1.0.0-rc.2.dev.20261015.1

Development build — an automated snapshot of develop. Not a supported release.

• Source commit: e30ef6ad44b267a23efa82d20bd29835ba9b3974
• Anchor tag: v1.0.0-rc.2
• Previous Development build: dev/1.0.0-rc.2.dev.20261014.1 (f0ac857eac6a41717ad6acfecc0fb72ec3d0d90a)
• Built: 2026-10-15 03:31 UTC

1.0.0-rc.2.dev.20261015.1 — 2026-10-15

Bug Fixes

• Close the 2026-10-14 build-110 run_python round (N-60..N-68) (sandbox) (e30ef6a)
• Register a tool-capable GGUF at the point of use and name the allow-list when it trims the offer (chat) (54d4a76)

Features

• Run_python on Windows x64 under the MXC AppContainer boundary; SignalR 10.0.13 (CVE-2026-70159) (compute) (2a75d85)

Development Build 1.0.0-rc.2.dev.20261014.1

Development build — an automated snapshot of develop. Not a supported release.

• Source commit: f0ac857eac6a41717ad6acfecc0fb72ec3d0d90a
• Anchor tag: v1.0.0-rc.2
• Previous Development build: dev/1.0.0-rc.2.dev.20261012.1 (61b1aa5c2bb16816adca1dca1d4bc878b41cf2f7)
• Built: 2026-10-14 03:31 UTC

1.0.0-rc.2.dev.20261014.1 — 2026-10-14

Bug Fixes

• Close the 2026-10-13 build-109 round (content-validated SPA shell, accent default choice, taskbar identity, window icon) (hosting) (f0ac857)
• Close the 2026-10-13 tray and unlock-page round (unlock page follows an unlock made elsewhere, close dialogs titled by purpose, high-contrast tray icon) (desktop) (52d71d2)
• Close the 2026-10-13 Windows sandbox round (volume roots, network shares, parallel MCP connects, tray icon, probe UBR, redactor flags) (sandbox) (d348dc2)
• Map Scalar.AspNetCore 2.17.14's upstream license and drain stderr before reporting an engine startup failure (ci) (b0d6b11)
• Close the 2026-10-12 external-provider tester log (5xx message, runtime publish retry, probe budget, Quartz columns) (2ea2fba)

Build System

• Absorb Dependabot #77, #88, #89, #90 and hold the majors with migration cost (deps) (eb085a9)
• Bump the actions-weekly group with 4 updates (#91) (deps) (dc7345a)

Features

• Share definitions as files, pin run.previous, render the run result (graph-workflows) (9987e19)

Development Build 1.0.0-rc.2.dev.20261012.1

Development build — an automated snapshot of develop. Not a supported release.

• Source commit: 61b1aa5c2bb16816adca1dca1d4bc878b41cf2f7
• Anchor tag: v1.0.0-rc.2
• Previous Development build: dev/1.0.0-rc.2.dev.20261011.1 (23794174d2c9306f08eb7c0957ab437479c260f0)
• Built: 2026-10-12 03:45 UTC

1.0.0-rc.2.dev.20261012.1 — 2026-10-12

Bug Fixes

• Close the MXC-only tester round on rc.2.dev.20261011.106 (credential-store subtrees, Windows path spellings, node symlinks, cwd, jails) (sandbox) (61b1aa5)
• Close the Windows tester round on rc.2.dev.20261011.104 (10 findings, four lanes, Win32k allowed in the MXC sandbox) (b05e4f1)
• Align markdown table headers, follow the accent in selection highlights, allow the auto-accept toggle on a draft (client-react) (88e3271)
• Rewrite the German sandbox profile copy and review the whole de locale (i18n) (7934a31)

Development Build 1.0.0-rc.2.dev.20261011.1

Development build — an automated snapshot of develop. Not a supported release.

• Source commit: 23794174d2c9306f08eb7c0957ab437479c260f0
• Anchor tag: v1.0.0-rc.2
• Previous Development build: dev/1.0.0-rc.2.dev.20261010.1 (af7b9f4194a095ad943f585fda55a8fd75918017)
• Built: 2026-10-11 03:39 UTC

1.0.0-rc.2.dev.20261011.1 — 2026-10-11

Bug Fixes

• Close the Windows tester round on rc.2.dev.20261010.102 (12 findings, five lanes, four Codex passes) (2379417)
• Close the Windows tester round on rc.2.dev.20261009.101 (15 findings, five lanes, two Codex rounds) (8c8edaa)
• Cap TUnit parallelism at eight per heavy test assembly (tests) (bd3f168)

Refactor

• Replace the developer theme configurator with per-browser appearance settings (theme) (465fce3)

Development Build 1.0.0-rc.2.dev.20261010.1

Development build — an automated snapshot of develop. Not a supported release.

• Source commit: af7b9f4194a095ad943f585fda55a8fd75918017
• Anchor tag: v1.0.0-rc.2
• Previous Development build: dev/1.0.0-rc.2.dev.20261007.1 (e4d355f62c625f1019651ae995554203aefae644)
• Built: 2026-10-10 03:36 UTC

1.0.0-rc.2.dev.20261010.1 — 2026-10-10

Bug Fixes

• Honour per-connection grants in the orchestration seed, read grants once per turn, name the grant in every notice (providers) (d05d257)
• Close the four review nits left by the Windows tester round (chat) (b9aa92c)
• Close the Windows tester round on rc.2.20261008.1 (19 findings, two review passes) (597d4b2)
• Own the diff editor's view model so an early unmount cancels its diff computation (code-editor) (63d0eb6)
• Pin the probe through the endpoint guard and let the fake gateway host exit on SIGTERM (external-providers) (2c8ee23)
• Find agent rows by their menuitemradio role and pick the FakeOllama model before the cancel test (e2e) (0afc6b6)
• Widen the app bundle budget to 6 000 000 bytes and keep idle-deadline tests off the turn deadline (ci) (0049a4e)
• Close the pre-1.0 freeze leftovers, add node database snapshots with a staged restore, and state the 1.x contracts (97fd297)
• Close the brick-risk follow-ups left open by the pre-1.0 audit (c505fce)
• Give the real-SDK Windows test the LOCALAPPDATA MXC requires (sandbox) (be5213e)
• Harden the brick, data-loss and stuck paths found by the pre-1.0 brick-risk audit (f619882)
• Stop the orchestration idle clock counting prefill and tool runs, name attachments a tool turn leaves out, export git-removed AgentHome folders and close five more pre-1.0 defects (bdecddb)
• Close the open GitHub security findings (security) (9bb20d8)

Build System

• Guard the squash, fail fast in the gate, scan docs for drift, and state each rule once (021cb55)

Features

• Edit the skill body in Monaco and compare an AI draft with the current content before applying it (skills) (2178ecc)
• Per-connection cloud grants on external connections (providers) (5a8f171)
• Make an imported skill inspectable before it lands, and fix SDK request validation that refused every upload (skills) (b29aa86)
• Add a low/high sandbox security profile with a first-run chooser and a Sandbox & isolation settings section (sandbox) (66622b4)
• Reach a private AI gateway with custom request headers, name its rejections, and fake it for tests (external-providers) (85c661c)
• Show how a request fills the model's context window (chat) (5eaf074)
• Notice when the cloud-model switches withhold tools (chat) (b96198d)
• Add the live-round lab bootstrap with a model-ready handoff (scripts) (011fc0a)
• Windows AppContainer sandbox boundary through MXC 1.0 behind an operator-enabled execution preview (sandbox) (5502d71)
• Per-function permission switches for cloud-hosted models (cloud) (d7fa295)

Miscellaneous

• Reuse the shared composer-model picker in the RAG test and propose four runner-round traps (e2e) (06f677c)

Refactor

• Reformat and cleanup (af7b9f4)
• Reformat and cleanup (35db7ea)
• Reformat and cleanup (9008485)

Development Build 1.0.0-rc.2.dev.20261007.1

Development build — an automated snapshot of develop. Not a supported release.

• Source commit: e4d355f62c625f1019651ae995554203aefae644
• Anchor tag: v1.0.0-rc.2
• Previous Development build: dev/1.0.0-rc.2.dev.20261005.1 (506b64d7d2deddd201258ccb4f783d6b16ff2717)
• Built: 2026-10-07 03:37 UTC

1.0.0-rc.2.dev.20261007.1 — 2026-10-07

Bug Fixes

• Stop the idle timeout counting prefill, name unsent attachments, let AgentHome write into an empty folder and close eleven more pre-1.0 defects (e4d355f)
• Name benchmark, graph and chat failure causes, record restart-interrupted Development attempts and close eight more pre-1.0 defects (abf7145)
• Space residency ticks on the monotonic clock (model-fit) (18e7acb)
• Cap tool calls per model response, keep the session on a failed token refresh, harden AgentHome patch paths and close seven more pre-1.0 defects (1275095)
• Require the complete Windows CUDA companion set and repair an incomplete one in place (llama-server) (01199f2)
• Account for loaded models on a chat load, fit two tool rounds at a 4,096 window, cap orchestration participants, and let node settings be reset (model-matrix) (d513db3)
• Publish the Windows CUDA runtime only together with its cudart DLLs (llama-server) (f8943ae)
• Refuse another owner's run while any run is in flight on the node (agent-home) (c63875c)

Build System

• Run contract tests in the backend gate, pin acceptance to CI's Node major and build before the live OpenAPI check (scripts) (41b9d9d)

CI

• Add an advisory Windows test job and retry the dev-build anonymous verification (#81) (windows) (aa12f9a)

Dependencies

• Override source-map-js for GHSA-68fv-2mgg-jv7q and drop tool-branded comment markers (deps) (414ca2f)
• Drop dead pnpm overrides and release-age exemptions (deps) (068d5c5)

Features

• Mark gated repositories on the advisor, send the Hugging Face token on header reads, rank the tested list by fit and refresh the catalog seed (model-fit) (ffe65e3)
• Name skipped catalog entries on the advisor, show tested-list fit badges on a first landing and keep per-file GGUF header values (model-fit) (120dfb9)
• Offer the authors' tested models by default and stop the advisor dropping large-vocabulary repos (model-fit) (2ac5976)
• Show the queued and loading-model status inside the assistant bubble (chat) (e27c52b)
• Add an opt-in --debug launch that streams the engine log and enables DevTools, and an open-logs-folder action (desktop) (bbc4b82)

Miscellaneous

• Act on the React Doctor triage (react) (bca3e1e)
• Remove the suppressions a small refactor makes unnecessary (analyzers) (2204abd)
• Remove leftovers of the retired Central Platform stack (node) (8b583d1)

Performance

• Push runtime residency over a hub, wake the MCP and graph dispatchers on a signal, drop polls that duplicate a hub and add the push-first rule (e429bfa)

Refactor

• Replace production tuples with named record structs and enforce the rule (19c7572)
• Cleanup and reformat (4addd20)

Development Build 1.0.0-rc.2.dev.20261005.1

Development build — an automated snapshot of develop. Not a supported release.

• Source commit: 506b64d7d2deddd201258ccb4f783d6b16ff2717
• Anchor tag: v1.0.0-rc.2
• Previous Development build: dev/1.0.0-rc.2.dev.20261003.1 (0569f23b20bfd52129fb21489a3c56fd5a5b885f)
• Built: 2026-10-05 03:41 UTC

1.0.0-rc.2.dev.20261005.1 — 2026-10-05

Bug Fixes

• Make small, cross-family and MoE models work with default settings, and add a pinned model matrix lane (model-matrix) (506b64d)

Development Build 1.0.0-rc.2.dev.20261003.1

Development build — an automated snapshot of develop. Not a supported release.

• Source commit: 0569f23b20bfd52129fb21489a3c56fd5a5b885f
• Anchor tag: v1.0.0-rc.2
• Previous Development build: dev/1.0.0-rc.2.dev.20261002.1 (cec0bc1403241275a69f921b10027efdff9f6c70)
• Built: 2026-10-03 03:41 UTC

1.0.0-rc.2.dev.20261003.1 — 2026-10-03

Bug Fixes

• Nine tester findings — hidden dirs in publish, stuck runtime banner, decode timer, web-search offer, interim text segments, Answer now + reasoning cap, update-channel race, German wording (tester-round6) (cd03d03)
• Polyfill Blob.stream() for jsdom so blob responses pass under Node 22 (client-react) (35d6431)
• Draft-dialog model picker, orphaned chat Stop, image VRAM eviction, flaky idle tests (tester-round5) (fcd331b)

Build System

• Bump urllib3 from 2.7.0 to 2.8.0 in /tools/training (#74) (deps) (6640f5f)
• Bump urllib3 from 2.7.0 to 2.8.0 in /tools/training (deps) (2afd052)

Features

• Make the nine feature switches user-editable node settings (node-settings) (b79c5db)
• One trust authority, tri-state external capabilities, HTTPS-by-default connections and unattended tool-requirement refusals (models) (5e4c99b)
• Edit existing and uploaded images with img2img and Qwen reference prompts (images) (e2fa466)
• Make 47 appsettings knobs user-editable node settings (node-settings) (05e7585)
• Add a session-only verbose logging switch, process crash hooks and the silent-catch policy (diagnostics) (ac2704c)
• Add the scrubbed support bundle, join trace ids to the log and tighten logging (diagnostics) (5fdd657)
• Wrap the persisted node key under the admin password and a recovery code (vault) (eea4454)

Refactor

• Reformat and cleanup (0569f23)

Development Build 1.0.0-rc.2.dev.20261002.1

Development build — an automated snapshot of develop. Not a supported release.

• Source commit: cec0bc1403241275a69f921b10027efdff9f6c70
• Anchor tag: v1.0.0-rc.2
• Previous Development build: dev/1.0.0-rc.2.dev.20260930.1 (6ffd080308ce4a43731d95e7b50448b66bc55612)
• Built: 2026-10-02 03:33 UTC

1.0.0-rc.2.dev.20261002.1 — 2026-10-02

Bug Fixes

• Attach the rrweb segment to captured snapshots (diagnostics) (b12f975)

Features

• Harden the outbound MCP client and the inbound MCP server (mcp) (4f9d2f6)
• List image and transcription residents in the top-bar widget (runtime-resources) (dd32f8a)

Miscellaneous

• Reformat and cleanup (cec0bc1)
• Third structural and documentation cleanup pass (cleanup) (ae494b5)