Release Notes

Release range: v0.0.9...b956525
Change volume: 13 commits, 30 files changed, +3,334 / -184

Highlights

• Strengthened the full remote-control production path with better reconnect recovery, durable token rotation, and safer multi-pod relay coordination.
• Added production verification tooling so we can validate deployed remote-control behavior before shipping releases.
• Tightened release artifact polish with portable checksum files and refreshed release/ops documentation.

Remote Control Reliability

• Hardened desktop reconnect validation so stale saved remote-control sessions are invalidated instead of being silently reused.
• Improved remote-control sync behavior in the macOS app so reconnects recover against fresher session state.
• Updated the Remote Control PWA client and unit coverage to better track rotated credentials and reconnect edge cases.

Relay Auth, Tokens, and Multi-Pod Correctness

• Exposed clearer websocket auth failure reasons from the relay for better diagnosis of rejected mobile sessions.
• Made mobile websocket token rotation durable across pod restarts and reconnects.
• Synchronized fresh pair tokens across pods so device pairing and resume flows stay consistent in multi-instance deployments.
• Fixed desktop presence synchronization before mobile auth so the relay sees the latest desktop availability during pairing.
• Preserved cross-pod message ordering and terminalized stale websocket auth rejects instead of leaving them ambiguous.

Production Verification and Operations

• Added a production remote-control browser reliability harness covering pair, send, reload, and resume behavior.
• Added deployment verification tooling to confirm the expected relay image and healthy pod set are actually serving traffic.
• Added post-deploy monitoring scripts to watch relay health, metrics, and logs during the early release window.
• Expanded relay integration coverage around rotated-token restart recovery and cross-pod state transitions.

Desktop, PWA, and User-Facing Recovery

• Tightened reconnect validation paths across desktop and mobile so stale saved session state is discarded more proactively.
• Improved user-facing recovery behavior when relay credentials rotate underneath an existing saved remote-control session.
• Kept remote-control UX aligned across the desktop app and PWA as the relay auth contract hardened.

Release Tooling and Documentation

• Normalized DMG checksum artifacts so published .sha256 files reference the released DMG filename rather than a machine-local path.
• Updated the changelog for 0.0.10 and refreshed release docs to reflect the current remote-control production validation flow.
• Refreshed remote-control deployment and relay runbook docs so operational guidance matches the shipped tooling and relay behavior.

Release Notes

Release range: v0.0.8...ef542bc
Change volume: 79 commits, 180 files changed, +23,807 / -7,395

Highlights

• The remote-control relay got a major hardening and refactor pass, including stricter safety guarantees, lower lock contention, protocol validation extraction, and property-test coverage.
• Runtime request support was versioned and expanded across desktop, relay, remote-control, and CodexKit, with schema v2 now treated as the canonical contract.
• Codex Chat now aligns with shared Codex homes, including shared login recovery, one-time history import, and startup self-healing for legacy paths.
• The app experience was polished across live workstreams, transcript activity, queued follow-ups, runtime issue rows, and send/filter controls.
• The Remote Control PWA and public docs/support surfaces were refreshed to better match the shipped product.

Relay Hardening and Rust Service Refactor

• Split the relay service into more focused modules, including dedicated transport layers for HTTP and websocket handling.
• Extracted protocol validation into a dedicated module and enforced strict clippy cleanliness in the Rust relay.
• Added replay-window enforcement, signed cross-instance bus envelopes, ordered persistence, and tighter session-safety rules.
• Reduced websocket lock contention and formalized the relay audit policy.
• Added property tests for protocol-boundary invariants and expanded schema-versioned management endpoint coverage.
• Hardened relay load-harness pair-request handling and removed the async-nats rustls-pemfile advisory path.

Runtime Request Protocol v2

• Versioned the runtime request protocol and tightened relay validation to schema v2 only.
• Added typed runtime-contract support in CodexKit, including runtime compatibility windows and cleanup flows.
• Surfaced interactive runtime server requests in the app and broadened remote support for runtime request handling.
• Completed runtime request responses in remote flows and widened the bounded runtime event buffer to better absorb the newer request/response traffic.
• Removed legacy remote snapshot approval types and preserved only the runtime-request shapes that match the new contract.

Shared Codex Home Alignment and Login Recovery

• Aligned Codex Chat with shared Codex homes and finalized the migration contract in docs.
• Added one-time import of existing Codex history and hardened retries for runtime history import.
• Added shared Codex login recovery in both the setup screen and startup flow.
• Self-healed legacy skill paths during startup and auto-pruned legacy managed homes.

App UX and Workflow Polish

• Refined live workstream presentation by separating live and settled turn states and streamlining live activity surfaces.
• Polished transcript workstream presentation, hidden non-tool work summaries where appropriate, and restored auto-follow behavior for active transcript updates.
• Simplified queued follow-up cards and actions, and tightened the queued follow-up stack overall.
• Softened runtime issue rows and polished filter/send controls.
• Broadened pending-summary coverage for server requests and tightened runtime-request formatting.

Remote Control and Automation Improvements

• Introduced stable remote command IDs end-to-end, with validation in both Node and Rust relay paths.
• Scoped remote ack replay to command payloads and hardened remote approval-command handling.
• Split the remote control command processor and reflected relay state more clearly in the remote control sheet.
• Preserved legacy remote approval aliases where needed for compatibility.
• Ran background automations through the shared worker contract, scheduled enabled automations across projects, stabilized execution context, and reconciled stale background jobs.
• Tightened trust and identity boundaries across mods, extensions, skills, and executable-mod updates.

Remote Control PWA Refresh

• Refreshed the remote-control mobile surfaces and stabilized package quality checks.
• Updated the Remote Control PWA to the runtime request schema v2 contract.
• Clarified launch, release, and remote-control guidance in docs so the public-facing material matches the current mobile and remote experience.

Docs, OSS, and Support Hardening

• Hardened public OSS support and security paths.
• Finalized shared Codex home migration docs and refreshed release/remote-control guidance.
• Kept CHANGELOG.md current so the repo now reflects the shipped 0.0.9 changes as well as the GitHub release.

Release Notes

Release range: v0.0.7...6ebe6ff
Change volume: 62 commits, 72 files changed, +7,694 / -788

Highlights

• Remote Control reliability and persistence received a major hardening pass.
• Remote PWA command handling, mobile UX, and reconnect behavior were significantly improved.
• Skills installation and scoping was overhauled with install registry + trust gating.
• macOS DMG installer now includes a simple first-launch instruction file.

Remote Control Reliability Improvements

• Added keychain-backed remote session credential storage on desktop.
• Added persisted desktop session restore on launch.
• Preserved server remote session on app teardown.
• Added desktop status broadcasting and offline command guard behavior.
• Added trusted-session retention and revoke/reauth enforcement tests.
• Added command ack payload support and event-driven sync/apply flow.
• Added duplicate command ack replay handling.
• Improved rejected-command handling to ensure correct thread attribution.
• Rejected remote send paths when dispatch would only queue.

Remote PWA Improvements

• Simplified mobile chat surface and reduced technical transcript noise.
• Unified pairing entry and simplified connection sheet flow.
• Added/expanded tests for token rotation persistence and persisted pairing restore.
• Improved forced re-pair handling by clearing persisted pairing state.
• Queued commands until websocket auth completes.
• Surfaced Mac offline state and paused commands accordingly.
• Improved lifecycle teardown by clearing reconnect timers.
• Hardened long-string overflow, sheet width clamping, and standalone mode behavior.
• Improved approval content wrapping and orientation/overflow coverage.
• Stabilized e2e seeding/reset and standalone install-surface regression coverage.

Relay and Backend Hardening

• Added desktop connectivity state semantics (runtime-only) and reconnect/offline tests.
• Added test coverage for pair-stop trusted-token reuse blocking.
• Added mobile reauth behavior tests while desktop is offline.
• Added trusted session sweep retention coverage.
• Rolled remote PWA production image (ga-20260301-044715-bbf9c32-next).

Skills System Overhaul

• Added install registry table + SQLite repository.
• Added secure shared-store link manager primitives.
• Wired shared store root into catalog installs.
• Registered installs and project links at install time.
• Added marketplace tab and selected-project install modal.
• Added installed-skill management actions (remove/reveal).
• Made autocomplete availability project-scoped.
• Migrated legacy enablements into install registry.
• Enforced trust gating across selected install targets.
• Hardened migration retry and shared-store path guards.
• Aligned install UI copy and selected-project scope labels.

Desktop UX and App Fixes

• Fixed settings target consume loop when opening project settings.
• Fixed skills catalog endpoint drift and simplified skill cards.
• Added regression test coverage around remote pairing session teardown.

Installer and Release Flow

• Added Install CodexChat.txt into DMG payload with first-launch steps:
  1. Drag CodexChat to Applications
  2. Open Applications
  3. Right-click CodexChat and choose Open

Documentation Updates

• Updated remote control docs for desktop status, offline semantics, and mobile behavior guarantees.
• Updated release docs to include DMG instruction file contents.

Release Notes

Release range: v0.0.6...35f8b00
Change volume: 225 commits, 273 files changed, +36,348 / -1,598

Highlights

• Introduced a major Remote Control epic: users can start pairing from desktop, scan a QR code, and control Codex Chat from phone via a web/PWA companion.
• Shipped an installable Remote Control PWA with stronger mobile UX, reconnect handling, and reliable transcript sync behavior.
• Rebuilt and hardened the relay backend around stronger auth, replay/rate-limit protection, durability options, and production-ready operations.
• Added substantial runtime and reliability work across concurrency tuning, diagnostics, and release safety.

Remote Control (Desktop + Mobile)

• Added desktop remote session controls with QR link flow and session stop controls.
• Added in-session Add Device join-token refresh flow without ending active sessions.
• Added explicit desktop approval requirement for pairing requests.
• Added trusted-device management with list and revoke actions.
• Added device identity display improvements during pairing/reconnect.
• Improved remote onboarding and reconnect behavior for users.

Remote Control PWA

• Evolved from scaffold to a redesigned, single-page conversation-first mobile UX.
• Added install readiness assets (icons, Apple touch icon) and launch polish.
• Added stronger safe-area + keyboard viewport behavior for mobile devices.
• Added bounded offline command queue and reconnect flush behavior.
• Added sync freshness and resume/resnapshot flows.
• Added transcript UX upgrades: better cards, anchoring, and composer ergonomics.
• Added auth-gated UI so projects/thread panes stay hidden until device authentication succeeds.
• Added mobile Playwright E2E coverage and expanded QA workflow.

Relay, Security, and Protocol Hardening

• Added secure relay scaffolding and progressed to hardened Rust relay paths.
• Added token rotation on websocket auth and stronger token/session validation.
• Added replay protection for mobile command sequences.
• Added stricter payload validation and bounded websocket message/frame budgets.
• Added heartbeat timeout and slow-consumer disconnect behavior.
• Added per-device/per-session throttling and snapshot rate controls.
• Added capacity admission controls and clearer client-facing disconnect messaging.
• Added relay health/metrics endpoints and high-signal operational counters.

Durability, Scale, and Multi-Instance Support

• Added optional Redis-backed relay persistence for restart recovery.
• Added optional NATS cross-instance routing/state sync for multi-pod scenarios.
• Added GKE deployment baselines, overlays, ingress hardening, and network policies.
• Added Cloud Armor guidance and production alert provisioning scripts.
• Added domain/cert cutover work to bikz.cc hostnames and ingress alignment.
• Fixed cross-pod routing regressions and compatibility edge cases.

Load, Soak, and Release Gating

• Added relay load/soak harnesses and wrapper scripts.
• Added machine-readable load artifacts and gate scripts.
• Added latency/backpressure/auth-failure gate checks.
• Added Node-vs-Rust protocol compatibility gates in stage workflows.
• Added remote-control stage-gate automation and OSS-smoke compatibility coverage.

Desktop App UX + Runtime Improvements

• Added channelized assistant progress streaming and inline progress messages.
• Added shell-pane race/teardown hardening with regression coverage.
• Added adaptive runtime concurrency tuning for high-session workloads.
• Added turn-start IO/load signal scaling and backpressure improvements.
• Added sidebar and toolbar UX refinements (focus mode, controls, discoverability).
• Added recents/thread ordering and deduplication fixes in sidebar.
• Improved empty/draft/thread-state UX consistency.
• Expanded mods rail improvements: grouping, icon identity, scope semantics, draft compatibility.

Reliability, Diagnostics, and Policy Tooling

• Added one-command runtime reliability diagnostics bundle.
• Added replay/ledger export/policy validation CLI improvements.
• Added idempotent ledger backfill and stale-marker recovery hardening.
• Added diagnostics timeline filtering/rollups/scope pivots.
• Added reliability scorecard and policy-gate wiring updates.

Release and Contributor Workflow

• Added CI-first release-prod path with fallback handling and stronger release resiliency.
• Hardened fallback release behavior to build from tagged commit context.

Docs and Runbooks

• Added/expanded remote control architecture docs, relay runbook, GKE deployment guide, and GA hardening plan.
• Added runtime tuning, reliability, and policy docs for contributors/operators.

CodexChat v0.0.6 release artifacts (signed, notarized, stapled).

CodexChat v0.0.5 release artifacts (signed, notarized, stapled).

CodexChat v0.0.3 release artifacts (signed, notarized, stapled).