Changelog

This release fixes the terminal-restore regression that could make PorkiCoder heavy and unresponsive after several tabs returned. Restored sessions now start within a bounded resource envelope and idle terminals stay idle. macOS installs update automatically.

• Restored terminals start one at a time - PorkiCoder initializes each restored shell before opening the next one, then restores living-card view only after the sessions are ready. Several PTYs, xterm renderers, and cards no longer surge into startup together.
• Idle terminals no longer trigger process scans - Session snapshots are activity-driven. Output coalesces into at most one refresh per eight seconds, terminal and directory changes are debounced, and quit still performs a final capture. With no terminal activity, there is no recurring process-table or lsof work.
• Card animation has a hard stop - Leaving living-card view now parks Grok's sprite loop. A detected PorkiConsult row gets one bounded 12-second Cthulhu flash burst; repeated scans of the same completed row cannot restart it until that row disappears and a new consult appears.
• Restore behavior and privacy stay the same - Grok sessions still resume their recovered conversation, other local CLIs return as shells in their last directory, and remote tabs plus scrollback are not restored. Snapshot inspection remains local and adds no network request, model call, data collection, or approval authority.

This release makes the Grok Cthulhu living card flash while PorkiConsult is actually calling another model, and stop flashing when those tool names merely appear in the conversation. macOS installs update automatically.

• Flash follows the live consult tool - Grok Build 1.0.5 paints a PorkiConsult call as Porkicoder-consult Consult Kimi3 (and the same titleized form for Codex, Claude Code, Gemini, GPT, and Grok Build). The Cthulhu card now treats that header as transmission.
• Talking about consults does not flash - A markdown list, a file dump, or a shell command that contains porkicoder-consult__consult_* mid-line is not a live call. Those rows no longer trigger the overdrive sheet.
• Discovery is not transmission - Grok's search_tool / Searching MCP tools rows stay on the normal work or idle loop. Flash is reserved for the consult tool itself.
• Same privacy and authority - The change is local TUI parsing and renderer animation. It adds no data collection, model call, network request, or approval authority.

This release restores your local terminals after a restart. Tabs reopen in the directories they were using, and Grok Build sessions resume the same conversation instead of starting over. macOS installs update automatically.

• Local terminals come back after quit - Closing PorkiCoder no longer drops your tab set. The next launch reopens the same local terminals, including their working directories, tab names, colors, and which tab was active.
• Grok resumes the exact conversation - A tab that was running Grok relaunches with grok --resume and the session id recovered from that process. Multiple Grok tabs, even in different projects, each return to their own conversation. If the session id cannot be read, PorkiCoder falls back to grok --continue for that directory.
• A crash during restore cannot wipe the resume list - Snapshot writes pause while empty shells are spawned and Grok is relaunched, so a crash in that window keeps the previous Grok session list instead of replacing it with blank terminals.
• Other CLIs restore as shells - Claude Code, Codex, and idle shells reopen in their last directory. Remote-Mac tabs are not restored. Scrollback is not replayed; Grok redraws its own conversation on resume.

This release confines AGENT HOG's built-in Agent mode to the open workspace with enforced shell approval, keeps long sessions lighter and more responsive, lets PorkiCoder repair its Grok Build integration automatically, and restricts Baseten-backed Kimi work to Premium. macOS installs update automatically.

• Agent tools stay inside the open project - File and shell access is confined to the active workspace. Secret files, .git internals, node_modules, and symlink escapes stay hidden, and every filesystem tool fails closed when no project is open.
• Shell commands run sandboxed with your approval - Agent-mode shell commands execute inside a macOS Seatbelt sandbox with workspace-only file access, no network, and a scrubbed environment. Anything that can change files pauses for your explicit per-command approval first.
• Reviewed edits cannot go stale - If a file changes on disk while its diff review is open, the apply is rejected instead of overwriting the newer content.
• Web research is bounded - Agent web fetches refuse loopback and cloud-metadata addresses, cap response size, and time out instead of hanging a task.
• No @-mentions required - Describe the task in plain English; the agent discovers the relevant project files on its own.
• Long sessions stay light - Completed agent runs no longer accumulate progress-card state, streaming answers stop reparsing the whole reply on every frame, tab naming loads its local model only while needed, hidden windows throttle, and history plus search stay within measured memory budgets.
• Grok Build integration repairs itself - PorkiCoder-managed entries in ~/.grok/config.toml now migrate stale helper paths to the packaged app even after Grok pretty-prints its own configuration, while any unfamiliar value still leaves the file untouched.
• Kimi K3 is text-only - Stock Grok's kimi-k3-baseten model no longer forwards screenshots or image chips. Image description stays on Grok.com, and the gateway drops image parts before they reach Baseten.
• Baseten requires Premium - Managed Kimi K3, Kimi K2.x, GLM-5.2, HogCode, and the stock Grok gateway refuse non-Premium accounts with a clear upgrade message. Gemini and GPT consults keep their existing included quota.

This release adds secure password recovery directly to PorkiCoder. Recovery requests stay account-private, emailed codes are handled by the production auth email hook, and temporary recovery credentials cannot unlock the app before the password actually changes. macOS installs update automatically.

• Forgot Password now completes in the app - From Sign In, request a recovery code, enter it with a new password and confirmation, and finish without opening a browser reset page.
• Recovery does not reveal accounts - Well-formed requests always receive the same response, including delivery and cooldown failures, so the screen cannot be used to discover registered email addresses.
• Recovery is isolated until success - Code verification and password update use a temporary, non-persistent auth client. PorkiCoder adopts that session only after the password update succeeds.
• Consumed codes recover cleanly - If an update fails after verification, the app returns to the request screen and requires a fresh code instead of leaving a dead-end form.
• Session fallback is explicit - If the password changes but the app cannot adopt the new session, PorkiCoder confirms the change and asks you to sign in with the new password.
• Production email delivery is covered - The signed Supabase email hook renders escaped recovery codes through Postal and supports password-change security notifications.
• Kimi K3 provider naming is corrected - A replacement Baseten credential was mistakenly labeled as a Kimi Platform key. Production now names it BASETEN_API_KEY; both consult_kimi3 compatibility names use Baseten exclusively, and the unusable Kimi Platform fallback is retired.

This release moves AGENT HOG's built-in Agent mode back to PorkiCoder's native Gemini engine. It no longer depends on OpenCode or an Anthropic SDK for IDE agent work, and a review pass repaired Gemini's combined tool-call continuation before launch. macOS installs update automatically.

• Native Gemini Agent is restored - AGENT HOG now plans, reads, edits, runs commands, and reports progress through PorkiCoder's in-house Gemini 3.7 Flash loop instead of the OpenCode compatibility route.
• No Anthropic harness charge - Built-in Agent requests use the existing Gemini configuration only; they do not invoke Anthropic or require an Anthropic API account.
• Tool chains survive real Gemini continuations - Thought signatures and function-call IDs are preserved across tool results. Missing IDs are generated consistently on both sides of the exchange, and combined server-side plus local tools use Google's validated calling mode.
• Images work in Agent mode again - Attach a screenshot or diagram directly to a repository task; there is no need to switch to Chat first.
• OpenCode remains a separate terminal - The optional integrated OpenCode terminal is unchanged, but it is no longer the backend for AGENT HOG.
• Start one fresh chat after updating - Older Agent threads contain OpenCode-specific hidden state that cannot be migrated safely. New native threads resume normally after that one-time reset.

This release introduces one clear product identity for PorkiCoder's built-in assistant: AGENT HOG, powered by Gemini 3.7 FLASH. It removes model-selection confusion, fixes the active profile across Chat and Agent modes, and makes the live work feed easier to understand. macOS installs update automatically.

• One name and one active profile - The chat header now says AGENT HOG, powered by Gemini 3.7 FLASH. The main Chat and Agent experience no longer exposes model or thinking selectors.
• Chat and Agent stay consistent - Switching modes or returning with an older saved preference cannot silently change the active AGENT HOG profile.
• Gemini-only terminal choices - The integrated agent terminal keeps Gemini 3.7 Flash as its default and presents only the Gemini family in its model menu.
• Cmd+K has no model decision - Inline Edit now always uses the fast Gemini 3.7 Flash profile. Settings retain review mode and the live-replace line cap, without a separate model picker.
• Activity reads like progress, not plumbing - The live card describes outcomes such as reviewing files, updating code, checking the project, and preparing a release. Internal tool names, model chips, turn counts, and token counts stay out of the way.
• Clearer failures and controls - Errors now speak in AGENT HOG terms instead of surfacing provider details, while activity disclosures and mode controls carry clearer accessible labels and state.

This release repairs Gemini tool-call continuation through OpenCode and makes Agent completion and provider failures display truthfully. macOS installs update automatically.

• Gemini tool chains keep going - PorkiCoder preserves Google's opaque thought signature from each Gemini tool call and restores that exact signature when OpenCode sends the matching tool result back. glob, read, writes, commands, and later steps can now continue to a final answer.
• Follow-ups survive OpenCode serve restarts - Signature matching is bounded and scoped to the canonical conversation prefix, so reopening the persisted session under a new per-serve capability token retains the required Gemini context without affecting another transcript.
• Your prompt stays on your side of the chat - OpenCode events are associated with their owning message role, including out-of-order events. User prompts and injected Project Context are never streamed or saved as assistant output.
• Provider failures show their cause - A terminal session error wins over partial text and displays its bounded, sanitized HTTP/provider message instead of a generic red card or echoed prompt.
• Done and Error are explicit - OpenCode results carry a typed terminal status. Intermediate tool messages cannot prematurely mark the progress card complete, and successful runs finish as Done.
• Other providers stay isolated - The compatibility adapter activates only for Gemini aliases. Regression fixtures verify that Grok and GPT-5 request bytes remain unchanged.

This release makes Living Card submission observable and provider-correct, removes model latency from Terminal Overlord entirely, closes a rapid consecutive-approval race, and simplifies the legacy IDE Agent surface around Gemini 3.7 Flash through OpenCode. macOS installs update automatically.

• First press really submits - Claude and Codex receive an awaited bracketed paste followed by a separate Enter. Grok keeps the atomic prompt-plus-Enter sequence its real TUI accepts, including its intentional busy queue and bare-Enter send-now action.
• Delivery state is honest and retryable - The card shows SENDING, DELIVERED, SEND FAILED — RETRY, or NOT STARTED — PRESS ENTER OR RETRY. Failed writes and missing fresh start evidence restore the draft, while a pending lock suppresses duplicate SEND/Enter requests.
• Back-to-back approvals no longer strand the second prompt - Output that changes while an approval is being verified or written sets an immediate rescan latch. A visible /goal stalled footer is never treated as proof that a newly delivered prompt started.
• Overlord is deterministic local code only - No Gemini or other model client remains in Overlord, and it never answers agent questions. Codex, Claude, and Grok approval mappings live in isolated provider modules so one provider update cannot broaden another.
• A simpler IDE Agent default - The right-side ChatView hides mode, model, thinking, harness, search, and Autopilot inside Advanced. New Agent users start on Gemini 3.7 Flash at its highest supported high thinking level, shown as Max, through OpenCode. Existing saved choices still win.
• Gemini 3.7 profiles stay explicit - OpenCode receives separate low, medium, and high aliases pinned to gemini-3.7-flash, with a 1,048,576-token input window and 65,536-token output limit.
• Privacy stays clear - Overlord terminal screens, approvals, questions, and history stay on this Mac and create no model usage. Normal Gemini Agent turns still use PorkiCoder's OpenCode-backed server route.

This release keeps Terminal Overlord on xterm's logical live screen, so /goal footer redraws, split-card resizing, and reading scrollback no longer strand a current approval until somebody scrolls down. macOS installs update automatically.

• Approvals no longer wait for a scroll - Overlord reads the current screen at xterm's live baseY even when the visual viewportY trails after a pane refit or goal-mode redraw.
• Scrollback stays out of authority - Only rows on the logical live screen are inspected. Visible history is never supplied to the approval classifier.
• Goal mode and fraction panes are covered - A regression test reproduces Goal paused (/goal resume), viewportY != baseY, and a current Codex approval; the verified one-time choice proceeds without human scrolling.
• The safety boundary is unchanged - Render-drain, output-revision, foreground-process, human-input, classifier, one-time-choice, and single-use lease checks still guard every autonomous write.

This release lets Terminal Overlord auto-approve more live coding-request popups after Codex 0.149 title matching still left some Claude and Grok prompts sitting. macOS installs update automatically.

• Claude proceed popups move again - A bounded Do you want to proceed? menu above the persistent composer mode line is treated as an authorization request, not as the idle composer. Overlord still picks the one-time Yes, never the session grant.
• Grok run overlays match locally - Source-derived Grok run/edit titles with a visible Yes/No menu are approved by local rules. No model call is added.
• Codex 0.149 wrap and persist safety - A title that wraps so ? sits on the next row still matches. If the cursor sits on persist without a highlight, Overlord fails closed instead of treating that row as the selection origin.
• Authority is unchanged - Primary composers, secrets, app-link, settings, and unknown surfaces stay human-only. Session and prefix grants remain human-only. Live-viewport, render-drain, output-revision, foreground-process, human-input, and single-use lease checks still guard every autonomous write.

This release hardens Codex 0.149 Terminal Overlord approvals in narrow split panes. Long wrapped command titles remain recognizable and the verified one-time choice still receives exactly one Enter. macOS installs update automatically.

• Narrow panes no longer hide valid approval titles - Overlord scans the complete bounded interaction header, so a long Allow Codex to run title can wrap beyond six physical rows without stalling.
• The verified one-time write path is pinned - Service-level regression coverage proves activation and foreground checks run, the source-derived overlay stays local with no model call, and the selected Yes/proceed choice receives exactly one Enter.
• Authority is unchanged - Session and prefix grants remain human-only. Live-viewport, render-drain, output-revision, foreground-process, human-input, and single-use lease checks still guard every autonomous write.

This release makes Cthulhu flash while porkiconsult is transmitting, even when Grok paints the call as a gutter-pipe MCP row without a diamond. Codex 0.149 also keeps its context bar and exec-approval overlay. macOS installs update automatically.

• Cthulhu flashes during consult transmission - While a current Grok scan shows consult_codex, consult_claude_code, consult_kimi, consult_gemini, consult_gpt, consult_grok, consult_kimi3, or porkicoder-consult__consult_* / mcp__porkicoder-consult__consult_*, the living card loops its flash animation. Composer and queued #N wraps that merely mention those names do not flash. When the row leaves the scan, flash stops. The word porkicoder alone is never enough.
• Codex 0.149 context stays on the card - When Codex no longer paints percent context left, the card reads Context N% left from the matching session jsonl on this Mac.
• Codex 0.149 exec approvals still match - Overlord recognizes Allow Codex to run overlays and still picks Yes/proceed once. Session and prefix grants stay human-only.
• Same privacy and authority - The change is local TUI parsing, renderer animation, and on-device approval matching. It adds no data collection, model call, network request, or approval authority.

This release lets living-card composers take pasted images, grow with the prompt, and toggle back to the raw terminal with Cmd+P. The hog-sphere now opens cards and the eclipse belongs to Overlord. macOS installs update automatically.

• Paste images from the card - In a living card, Codex Ctrl+V pastes the OS clipboard image. Other CLIs use Cmd+V, which inserts a temporary PNG path. Temp files stay under PorkiCoder's app-data directory and are pruned.
• A composer that grows - The card input grows with the prompt instead of staying a single line, so longer instructions stay visible while you type.
• Cmd+P toggles cards and raw - Cmd+P (not Control-P) switches the focused pane between its living card and the raw terminal. It is listed with the other terminal shortcuts.
• Icons match the action - The hog-sphere now opens living agent cards. The eclipse now belongs to Terminal Overlord.
• Same privacy and authority - The change is local clipboard, renderer layout, and toolbar icons. It adds no data collection, model call, network request, or approval authority.

This release lets each living agent card drop to a raw terminal, or switch back, without forcing every pane in the grid to follow. Two Cthulhu cards and one CLI can sit side by side. macOS installs update automatically.

• Per-pane raw terminal - On a living card, the >_ control at the left of the composer shows that pane's raw PTY. The other cards stay cards, and the multi-panel grid stays open.
• Per-pane switch-back - A raw pane in that grid shows a CARD chip at the top-left. Click it to restore only that pane's living agent card. It does not cover the shell prompt or the HOGSPHERE HUD.
• Eclipse still turns every pane into a card - Opening AI panels, or clicking the eclipse while some panes are raw, restores every local pane to a living card. Remote panes stay raw. Closing AI panels still collapses the grid to one tabbed terminal.
• Same privacy and authority - The change is renderer layout and focus. It adds no data collection, model call, network request, or approval authority.

This release finishes HOGSPHERE's autonomous Overlord mode, keeps Codex context telemetry alive through partial process readings, and makes Remote Workspaces recover cleanly when a same-Wi-Fi direct connection fails. Detached remote shells are visible and short-lived instead of becoming unseen background work. macOS installs update automatically.

• Arm and launch in one command - At a normal shell prompt, type codex overlord, claude overlord, or grok overlord. PorkiCoder clears the meta-command, confirms Overlord is armed, and only then launches the exact allowlisted provider. Ordinary commands such as codex explain overlord pass through unchanged.
• Fresh agent questions can keep moving - When local rules prove that a supported agent is visibly waiting on a current question, Gemini 3.5 Flash-Lite can return one bounded schema-constrained answer. The screen, output revision, foreground provider, and human-input revision must still match at the final write.
• Question answers fail safe - Secrets, destructive or external authorization, production and publishing actions, permission broadening, app links, interrupted prompts, idle composers, and unknown surfaces remain human-controlled. Any human keystroke cancels an in-flight answer.
• Approvals remain deterministic and local - Proven provider approval menus still use PorkiCoder's on-device rules and existing trust-mode contract. Only a locally proven question snapshot is sent to Gemini; known credential and token-like values are redacted first, and snapshots are not added to chat history.
• Codex context stays visible - Percentage-only context footers now merge with partial process telemetry and survive brief foreground-stat misses, so the living card's context bar does not empty during a normal Codex repaint.
• Direct failure falls back to cloud - A session may start over the authenticated LAN route, but after that direct socket fails every reconnect attempt bypasses the stale nearby endpoint and uses PorkiCoder's existing end-to-end encrypted cloud relay. A failed input write preserves its sequence number and moves the tab into reconnecting instead of surfacing a raw socket error.
• No more invisible long-lived remote shells - The Settings button shows the active-plus-detached remote-session count, Remote Workspaces exposes an immediate End all action in Settings, and an unclaimed detached shell now expires after 15 minutes instead of 12 hours.

This release repairs Codex living-card context and prompt submission. The card understands Codex's percentage footer, one Enter sends the prompt once, and terminal chrome no longer becomes bot narration. Nothing new leaves this Mac. macOS installs update automatically.

• Codex context is visible again - Percentage-only context left and Context % used readouts now drive the card's context bar and stat. Exact token totals still win when Codex exposes them.
• First Enter sends - The card writes the prompt as one explicit paste, then sends Enter only after that PTY write lands. A single press no longer stops at Codex's paste buffer.
• Chrome stays out of the card - Codex context and status footers are recognized as interface chrome, not assistant prose or a new answer title.
• Command routing stays intact - Paste markers never become part of the logical prompt. Normal prompts submit once, while an exact /overlord from the card still toggles HOGSPHERE.
• Same privacy and authority - The repair is local PTY and renderer logic. It adds no data collection, model call, network request, or approval authority.

This release gives living Agent Cards and Terminal Overlord separate pixel-art controls. A shimmering eclipse opens AI panels; HOGSPHERE now belongs to Overlord and reflects the active terminal's state. Nothing new leaves this Mac. macOS installs update automatically.

• An eclipse for AI panels - The clean neon black-hole button opens and closes living Agent Cards. It shimmers while active and becomes still when reduced motion is requested.
• HOGSPHERE belongs to Overlord - A separate cyber-pig orb toggles Overlord on the active local terminal, with its own eyes, ring, focus, and pressed state.
• Per-terminal truth - The Overlord button follows /overlord and STOP, repaints when tabs change, is disabled for remote terminals, and appears in both terminal headers.
• Same privacy and authority - This is a local interface control. It adds no data collection, model call, network request, or approval authority; Overlord's existing safety boundaries are unchanged.

This release is the updater-visible ship of the Grok living-card work from 2.17.50. A same-day local 2.17.50 install would not pick up that public build because the version strings matched. Nothing new leaves this Mac. macOS installs update automatically.

• A new version number - Macs already showing 2.17.50 now receive the ticking chip, queued follow-ups, empty-Enter send-now, hog-sphere focus restore, idle wing flap, and consult-wait flash.
• Same privacy - Prompts, titles, and cards stay on this Mac. No new data is sent anywhere.

This release gives Grok living cards a working stopwatch, a queued-prompt row, empty-Enter send-now, and the hog-sphere orb that lets go of the keyboard. Idle flaps wings. PorkiCoder consult wait flashes. Nothing new leaves this Mac. macOS installs update automatically.

• A ticking chip - Grok, Codex, and OpenCode cards show WORKING 0:42 and IDLE 0:00 from the card's own clock. Claude still uses its session stamp. A Claude busy status with no stamp stays a bare WORKING.
• Queued follow-ups - Grok's #N composer rows appear as a short count plus the first words of your prompt. Empty Enter or Send writes a bare return into the same session, like Grok Build send-now. No new agent is started.
• The orb lets go - Switching from cards to raw terminal blurs the hog-sphere button and focuses the PTY. You can type without clicking the orb again.
• Idle flaps, consult flashes - Idle loops the flying wing pair only. While a current Grok tool row is a PorkiCoder consult, the card plays the flashy dissolve. Working Grok stays on the still. A dead card session restarts from the composer.
• Same privacy - Prompts, titles, and cards stay on this Mac. No new data is sent anywhere.

This release lets you talk to the same agent session from the living card, lights the hog-sphere orb from the sprite's own eyes, and removes floating pop-out terminals. Nothing new leaves this Mac. macOS installs update automatically.

• Type from the card - A composer at the bottom of each living card writes into the existing terminal. Enter sends. Shift+Enter wraps in the box and still sends as one line. Esc clears. Empty Ctrl-C interrupts the session. /overlord still toggles HOGSPHERE. No new Claude, Grok, Codex, or OpenCode session is started.
• The hidden terminal cannot steal keys - While cards are on, the raw xterm is deaf. Focus lands in the composer. A refused send keeps the draft.
• An honest hog-sphere - The orb's lime eyes sit on the sprite's own eyes. A hairline ring marks it as a button at rest and as the keyboard focus ring. The lit state follows aria-pressed.
• No more pop-out terminals - The detach path refuses new floating windows. Cards stay in the docked panel.
• Same privacy - Prompts, titles, and cards stay on this Mac. No new data is sent anywhere.

This release makes the hog-sphere orb open the pig cards, strips the terminal header to three icon-only controls, and gives Claude Code, Grok Build, and Codex their own card-naming rulesets so leftover TUI chrome no longer freezes the name plate. Research sync lives in Settings. Nothing new leaves this Mac. macOS installs update automatically.

• The pig opens the pig - The hog-sphere portrait is an icon-only toggle for living agent cards. Eyes and a ring light when cards are on. The shield no longer sits in the header and no longer opens the pig.
• Three terminal buttons - New tab, pig cards, and fullscreen. Pop-out, header close, and the remote-workspace pig leave the terminal chrome. Remote workspaces stay in Settings.
• Per-agent card naming - Claude keeps ⏺ blocks. Grok Build drops its title bar, pager, Dashboard, and composer footer. Codex keeps •-tools and skips •-status. Repeated titles like Mode Mode are rejected. The name plate follows the latest named activity.
• Research sync in Settings - SYNC-DROID no longer overlays the terminal. Route, progress, conflicts, and recovery live in the IDE Settings modal. Conflicts still toast.
• Same privacy - Titles, cards, and sync status stay on this Mac. No new data is sent anywhere.

This release makes Living Agent Cards a first-class terminal view: one hog-sphere orb instead of a split-layout glyph, fewer toolbar buttons, last card/raw view remembered, and Grok's own session title bar no longer frozen on MAIN PROJECT. Nothing new leaves this Mac. macOS installs update automatically.

• A button worthy of the cards - The dull two-rectangle split icon is gone. A hog-sphere orb with lime eyes summons the living cards; while they are on, the ring breathes. The same orb is on the floating terminal window.
• Fewer steps, less chrome - Fresh installs still open terminal-first and remember last layout. Last card vs raw view is remembered too. SYN, New OpenCode, Export to chat, and Clear leave the toolbar. Reattach and floating stay. SYNC-DROID still lives on the in-pane HUD.
• Floating cards - Pop-out terminals now run the same pig cards and restore the last card view. Detaching no longer silently turns cards off for next time.
• Grok titles follow the tab - Grok Build paints its own "Main Project" + [Dashboard] title bar. That chrome is no longer scraped as an answer, so the name plate follows PorkiCoder's tab namer live instead of sticking until you flip to raw terminal and back.
• Native Grok config - PorkiCoder ships a managed Grok Build config layer and installs it into ~/.grok only when that file is missing or still PorkiCoder-owned. Your config.toml still wins.
• Same privacy - Titles, cards, and the managed Grok layer stay on this Mac. No new data is sent anywhere.

This release teaches the Agent Card to read the agent's real state, keep a work log you can page back through, and stay honest when a "busy" session has gone quiet. OpenCode gets its own bot. Grok's preparing spinner no longer hijacks the name plate. Nothing new leaves this Mac. macOS installs update automatically.

• The card reads the agent's state - Claude Code's session registry now drives a chasing ring, eye glow, and a chip that says WORKING 0:42 / YOUR TURN / IDLE / SHELL. Agents without a registry (Grok, Codex, OpenCode, Gemini) fall back to streamed text or recent terminal output. Idle five minutes and the bot dozes.
• Page back, and a work log - A landed message can be turned with ◀ ▶ or the wheel. On panels about 560px and wider a WORK LOG rail lists the current and last five emissions. Titles wrap to two lines instead of clipping.
• STALL when busy is a lie - If the registry says busy but the terminal has been silent for 45 seconds, the card switches to STALLED: alarm colour, dashed ring, red eyes, and a silence timer. Any output clears it. A "shell" registry status is treated as quiet, not working.
• OpenCode gets a face - OpenCode has its own bot from the same pixel-art family. Plain shells still get the pig.
• Grok titles stay put - Grok's "Writing file…" / "Writing edit…" preparing spinner is no longer treated as the live answer, so the name plate no longer flips between the tab title and Writing Xxx while tools run.
• Same privacy - State, log, and titles stay on this Mac. No new data is sent anywhere.

This release redesigns the multi-panel Agent Cards. The card no longer draws its own frame inside the pane's ring; the agent now speaks from a bubble above its bot, typed out like a Game Boy textbox; Claude, Codex, and Grok each get their own bot from the same pixel-art family as the pig; and the bottom of the card is a live stat band. Nothing new leaves this Mac. macOS installs update automatically.

• Borderless card, one frame - The card used to draw a glowing rounded border just inside the pane's flat tab-colour ring, so multi-panel view read as frame-inside-frame. That border is gone. Top to bottom: name plate, speech bubble, the bot, then the stat band.
• Speech bubble with a typewriter - The agent's words type in character by character above its bot, with beats on punctuation and a caret that trails the text. A full page holds behind a ▼ and then wipes out before the next one types in. The engine follows a live stream: appends keep typing, a rewritten tail erases only back to the change, a message that finishes on a lonely word re-shows a real last page, and when the stream outruns the typing it jumps to the freshest words instead of replaying history.
• Every agent gets its own bot - Claude, Codex, and Grok each have a bot drawn in the same Doom-2-meets-Metal-Slug style as the overlord pig; everything else keeps the pig. Bots hover gently, and their eyes glow brighter while the agent is talking.
• Live card stats - Under the HP-style context bar sit three cells - CONTEXT, OUTPUT, TURNS - that roll to their new value and flash as telemetry lands every few seconds. The bar goes amber under half and red under a fifth of the window.
• Quieter, and honest about motion - No sweeping sheen, no strobing scanlines. Reduced-motion turns off the typewriter, the hover, the rolls, and the flashes. Hidden panels park the typewriter and resizing a pane re-pages what is on screen, so a page is never left clipped.
• Same privacy - Portraits ship inside the app, telemetry is still read locally, and no new data is sent anywhere.

This release adds Agent Cards to the multi-panel terminal. Flip the terminal to multi-panel and each pane running Claude Code, Grok, or Codex becomes a collectible-style card: a pig-bot portrait, the local model's live name for what the agent is saying, a context-left bar, and a snippet of the stream. Naming stays on this Mac and nothing new is sent to a provider. macOS installs update automatically.

• Agent Cards in multi-panel view - Each terminal running Claude Code, Grok, or Codex renders as a card. The card fully replaces the raw terminal view; there is no input surface and no terminal chrome, just the pig, the title, a context meter, and a small stream snippet.
• Titles come from the shipped local namer - The same on-device Title-SFT FLAN flat1e4 model that names tabs also names each assistant emission as it streams. No API call and no added cost; a title settles in a few milliseconds after warmup.
• Context-left, read locally - Claude's card reads context and token totals from its own local session transcript; Grok and Codex cards parse the used-over-window figure straight from their terminal UIs. The card never phones home for telemetry.
• Reads what the agent actually said - A small VT-aware reader reconstructs each agent's assistant text from the live terminal (Claude's bullet blocks, Grok and Codex prose), skipping prompts, tool calls, spinners, and box chrome.
• Same privacy and authority - Emission text and titles stay on this Mac. Non-agent shells, remote tabs, and unsafe contexts are never labeled.

This release replaces the private 6t + Hybrid A tab namer with Title-SFT FLAN flat1e4. Decode is greedy and unconstrained. No centroid glue. Inference still stays on this Mac. macOS installs update automatically.

• Title-SFT FLAN is the local namer - The packaged INT8 runtime is a new immutable bundle. It writes a raw one-to-three-word title from the full title: agent=… task=… envelope. Hybrid A and the centroid table are no longer on the product path.
• Greedy unconstrained decode - The worker no longer restricts the namer to two visible source words or a four-beam search. It sanitizes to ASCII technical words and still rejects anything outside one to three words or 32 characters.
• The namer is ready before the first prompt - App start still pre-warms the local worker. Verified runtime assets are hashed and loaded in one pass so the first title does not wait on a cold ONNX session.
• Privacy and authority do not change - No prompt or title is sent to a model provider. Directory names stay the fallback, and a manual name, launch preset, remote tab, unsafe context, timeout, or invalid output still wins.

This release makes the private 6t tab namer fire on every eligible prompt and keeps inference on the millisecond path. The 10-word skip is gone. The ONNX worker is pre-warmed at launch. macOS installs update automatically.

• Every eligible prompt can rename the tab - A submitted shell command or human agent prompt no longer needs ten technical tokens. Slash commands, bare agent launches, and startup confirmations still stay unnamed.
• The namer is ready before the first prompt - App start pre-warms the local 6t worker. Verified runtime assets are hashed and loaded in one pass so the first title does not wait on a cold ONNX session.
• Warm inference stays on this Mac - After warmup, a title request settles in about 10 ms. No prompt or title is sent to a model provider.
• Privacy and authority do not change - Titles remain one to three ASCII words. Directory names stay the fallback, and a manual name, launch preset, remote tab, unsafe context, timeout, or invalid output still wins.

This release replaces the private B-9500 tab namer with 6t_argmax and keeps titles on this Mac. Beam 4, Hybrid A glue, and the frozen centroid v2 table stay in place. Prompts under ten technical words keep the current title. macOS installs update automatically.

• 6t_argmax is the local namer - The packaged INT8 runtime is a new immutable bundle. It keeps the same two-word beam-4 decoder, Hybrid A 2+1 glue, and frozen Stack Overflow centroid v2. The B-9500 graphs stay on disk and are no longer shipped in the app.
• Short prompts keep the current title - A submitted shell command or human agent prompt must contain at least ten A-Za-z0-9+# tokens after the usual first-paragraph preprocess. Shorter input does not request a rename.
• A skipped short command does not reuse its privacy verdict - The first-shell slot stays armed, and the next eligible line gets a fresh main-process TTY probe instead of the previous command's one-use verdict.
• The product path was measured on this Mac - The INT8 worker returned 1,000 valid titles on 1,000 reusable tasks. Warm median latency was 19.1 ms, p95 was 26.0 ms, and one-time initialization was 535.6 ms. Terminal-board research scored 6t +0.193 versus the previous pin at n=1,000.
• Privacy and authority do not change - Titles still stay on this Mac, remain one to three ASCII words, and never beat a manual name, launch preset, remote tab, unsafe context, timeout, or invalid output.

This release restores prompt-only terminal tab naming. The private Mid GSG + centroid title stays on this Mac, but only eligible submitted human input may request a new label. Streamed assistant output no longer wins the latest-pending queue. macOS installs update automatically.

• Human prompts name the tab - A fresh ordinary shell can still be named from its first eligible submitted command after the existing foreground and privacy gate. After a supported interactive agent is identified, every eligible submitted human prompt can request a new title.
• Streamed output no longer overwrites a prompt title - Assistant prose, status redraws, and tool-call markers no longer enter the local title queue. The previous output sampler raced the in-flight human request and usually discarded it when the assistant sample arrived.
• Slash commands stay unnamed - Bare agent launches, startup confirmations, and slash commands such as /review do not request titles. They also no longer arm a follow-up sample of the agent's reply.
• Manual names and transfer stay authoritative - Off, Shadow, On, detach, reattach, and launch-preset names keep their existing rules. The one-in-flight, newest-pending queue remains only for human prompts submitted faster than local inference can settle.
• The local model contract is unchanged - Titles still come from the bundled Mid GSG Beam 4 + centroid v2 runtime, stay one to three ASCII words, and never leave this Mac.

This release adds a managed Kimi K3 model to stock Grok Build and publishes the corrected, complete PorkiCoder Research library. The three tab-title papers now use one precise meaning for Hybrid A, and the research landing page gives every published result equal, visible summary treatment. macOS installs update automatically.

• Stock Grok Build gets a named Kimi K3 route - PorkiCoder manages kimi-k3-baseten in Grok's model picker through the authenticated server.porkicoder.com/v1 gateway. The production Baseten credential stays server-side; Grok receives short-lived Porki credentials from the existing mode-0600 local token bridge.
• Long K3 turns have explicit client boundaries - The managed profile advertises an 850,000-token working context, compacts at 85%, caps completions at 65,536 tokens, allows 30 minutes of inference inactivity, and uses max reasoning. Client retries are disabled so Grok cannot replay ambiguous paid work; the backend owns bounded retry policy.
• Startup-tier capacity fails clearly - All owner-key Baseten routes share the production 120 RPM, 1,000,000 TPM, and 12-concurrent gate. Admission counts the serialized prompt, reasoning, tools, and response schema; a request too large for one window returns a trim-context error instead of being clamped and sent upstream.
• Hybrid A now means the glue only - Each tab-title paper carries the dated terminology note: Hybrid A is the 2+1 glue rule, while the production stack is mid-GSG B-9500 + beam-4 + centroid v2 + Hybrid A glue. The first two papers also carry their missing 15 August update banners.
• Every research result is visible - The research landing page now presents all four published papers as equal summary cards with the finding, claim boundary, metrics, full paper, and attached evidence. The Beam 4 paper and homepage also include the later dev-200 usefulness estimate of 40.0% (95% interval 33.5–46.9%) without rewriting the failed sealed gate.

This release adds deterministic, trusted one-way research publication between explicitly declared local Git projects. PorkiConsult can establish the trust and route in conversation, while SYNC-DROID makes automatic and manual runs visible without reading or changing terminal input. macOS installs update automatically.

• Set it up by talking to PorkiConsult - porkicoder_sync_trust_current_project binds trust to the live terminal's current Git root after native confirmation. porkicoder_sync_setup accepts only already trusted project IDs and exact repository-relative push mappings, then asks for a second native confirmation. Status, preview, and manual run tools complete the conversational workflow.
• Destination changes fail closed - A source-only watcher waits for a 10-second source settle and 15 seconds of system idle, hashes a stable snapshot twice, validates every tracked mapping, and reports unowned or drifted destination files as conflicts instead of overwriting them.
• A full generation commits or rolls back - Files are staged and synced before installation, evidence trees commit before their HTML entry point, and matching lock, journal, receipt, and managed-trash records make interruption recovery deterministic. Source files are never modified and destination data never flows backward.
• SYNC-DROID stays visible without touching the PTY - The right-corner Sync control opens a compact HUD for waiting, hashing, committing, success, conflict, and error states. Its detail view shows route-relative file counts, digests, and bounded conflict information; it shares the terminal HUD stack with HOGSPHERE and honors reduced-motion and accessibility settings.
• Only the declared research route ships - The tracked publisher and subscriber manifests declare the exact tab_namer to porkr1 paper-and-evidence route. There is no pull direction, generic folder mirroring, arbitrary command execution, force mode, or cloud transport.

This research-only patch publishes the frozen Beam 4 system's one-shot sealed result and its complete inspectable evidence bundle. The desktop app is unchanged beyond its version identity. macOS installs update automatically.

• The relative FLAN win reproduced on the sealed 1,000 - Locked Beam 4 plus the frozen centroid scored 6.197 versus 5.446 for the title-tuned FLAN stack, a paired +0.752 with a 95% bootstrap interval of 0.611–0.891 and a 603/67/330 win/tie/loss record. The strict 32-character variant retained a +0.733 lead.
• The preregistered final gate did not clear - An identity-blind 40-row Codex audit rated 19 outputs useful (47.5%), below the required 24 of 40 (60%). The comparative audit, mean score, empty rate, and title-concentration criteria passed; absolute usefulness was the sole failure, so this is not described as a passed promotion gate.
• The complete research record is public - The paper now links to the frozen protocol, all 1,000 sealed score rows, structural audit, blinded independent-audit records, deterministic summary scripts, tokenizer assets, and a 51-file SHA-256 manifest. The consumed final set will not be used for tuning or another promotion attempt.

This release keeps long Kimi K3 and GLM-5.2 agent turns below provider token-rate ceilings and aligns the explicit Baseten K3 consult with its backend output cap. macOS installs update automatically.

• Long agent sessions compact before rate-limit cliffs - Managed Kimi K3 and GLM-5.2 loops now use a 262,144-token effective profile and proactively recap history at 55%, preserving the six most recent messages. This avoids repeatedly resending 500,000-token-plus histories that previously produced provider 429 responses.
• Kimi K3 completion headroom is bounded - Managed Kimi K3 agent requests and explicit Kimi K3 via Baseten consults now request at most 65,536 completion tokens. That remains above the largest observed completion of 35,609 tokens across 55 measured calls while reducing pessimistic token pressure; a response that actually reaches the cap can still end there.
• Provider identity and authority do not change - Kimi Platform and Baseten remain separately named and separately approved routes with no silent fallback. Authentication, billing attribution, local heartbeat, timeout, and backend-owned capacity controls retain their existing boundaries.

This release ships constrained Beam 4 for the private 35M local tab namer, lets completed agent output refine recurring titles, and preserves a bounded on-device diagnostic trail when an approval-shaped Overlord surface does not complete. The Beam 4 research paper and its preceding Mid GSG result are now published with the product evidence. macOS installs update automatically.

• Four-beam decoding ships without new weights - The INT8 B/9500 model now compares complete, distinct pairs of ASCII source words instead of committing greedily. Candidates must map to visible occurrences within the true 160-token input, stay within the first 96 source words, and satisfy the eight-token, 32-character contract; technical words may retain + and #. The frozen trained centroid v2 still supplies only the bounded whole-word fill.
• The signed-product path preserves the measured win - On a new blinded 1,000-task product packet, bounded Beam 4 scored 6.187 versus bounded FLAN's 5.516, a +0.671 paired mean. The production worker returned 1,000 valid titles and matched the FP32 bounded title exactly on 951 rows. Across three target-Mac runs, warm median latency was 19.95–20.73 ms, p95 was 26.0–34.5 ms, and one-time initialization was 513.7–521.2 ms.
• Useful streamed agent output can refine a tab - After a verified interactive-agent prompt, PorkiCoder locally collapses terminal redraws into one bounded VT screen and samples only the first useful assistant paragraph or three useful lines. Chrome, spinners, prompt echoes, and timing footers are ignored; a new human edit cancels a pending sample. The response sample is combined with the prompt and passed through the same private title contract, while manual names, remote tabs, unsupported foreground processes, and disabled or Shadow mode remain authoritative.
• Approval gaps leave a private recovery trail - When an approval-shaped Overlord surface stalls, fails a safety stage, needs human intervention, later recovers, or ends pending, PorkiCoder records one deduplicated structured event under its private app-data directory. It never stores a raw terminal snapshot or recent input: titles, choices, and reasons are bounded and redact secrets, tokens, opaque values, code spans, URLs, email addresses, hosts, and paths; redraw identifiers use a per-session HMAC. The owner-only JSONL log rotates at 1 MiB with one previous segment, never leaves this Mac, and does not weaken approval authority.
• The evidence and implementation were reviewed together - Full-vocabulary beam scoring, source-offset reconstruction, renderer and main-process output validation, packaged runtime hashes, and all 2,295,030 legal terminals across the reusable corpus are pinned by tests. The sealed final 1,000-task split remains unopened.

This release pairs the shipped B/9500 35M Mid GSG namer with the newest trained centroid v2 combiner. The exact signed-product path was tested on all 1,000 reusable clean-dev tasks; the sealed final 1,000 tasks remain unopened. macOS installs update automatically.

• The newest centroid is now in the app - The eight-token INT8 B/9500 namer and locked two-generated-words-plus-one-fill-word glue remain in place. Centroid v2 replaces the random seed-42 fill table with the trained B/9500 embeddings, aggregate rarity weights from 200,000 training documents, a generic-language residual, diversity-aware MMR selection, and score-ordered output.
• The paired product result improves - In the same blinded four-way Gemini 3.5 Flash-Lite packet, centroid v2 scored 5.25 mean versus 4.82 for the former shipped centroid. Useful titles rose from 67.0% to 73.6%, fails fell from 6.9% to 4.4%, and the new path won 550 tasks, tied 113, and lost 337. The B/9500 fp32 centroid-v2 reference scored 5.90 and FLAN scored 6.01, so the remaining product gap stays explicit.
• The product contract is complete and bounded - The real production worker produced 1,000 valid labels in 1,000 tasks with no runtime fallback. It skips unsafe non-ASCII fragments and overlong fill words before enforcing one to three ASCII words and 32 characters. The 80.9 MB local asset bundle measured 12.6 ms warm median, 16.4 ms p95, and 670.4 ms one-time cold initialization.
• Privacy and authority do not change - The new IDF bundle contains aggregate public-corpus word counts, not source task rows. Naming reads no project files, calls no provider, needs no API key, and writes no naming log; manual names, launch presets, remote tabs, unsafe prompts, stale ownership, timeout, or runtime failure still take precedence.

This release replaces Old Verne with the scratch-trained 35M Mid GSG model and its locked centroid combiner for private local terminal titles. The shipped INT8 runtime was tested through the real production worker on all 1,000 reusable clean-dev tasks; the sealed final 1,000 tasks remain unopened. macOS installs update automatically.

• The new model is the product path - The pinned B/9500 checkpoint has 35,045,888 parameters, six encoder layers, and three decoder layers. Three opset-17 INT8 ONNX graphs, a slim 6,985-by-512 centroid table, tokenizer, and vocabulary make up the exact 77.8 MB runtime bundled in the signed app.
• Production quality is measured, not inferred - In one blinded three-way Gemini Flash-Lite evaluation over the reusable 1,000-task clean-dev packet, the actual eight-token INT8 plus deterministic-JavaScript-centroid output scored 5.4994 mean, 77.5% useful, and 4.8% fail. The unquantized 16-token candidate scored 5.77755 in the same packet, so the quantization and decode-cap delta stays visible.
• Native inference is fast and bounded - Across 1,000 sequential production-shaped worker requests, warm latency was 12.4 ms median and 16.5 ms p95; cold initialization peaked at 264.5 ms. The worker produced a valid local title for 985 tasks and used the strict directory fallback for 15.
• Privacy and authority do not change - Naming reads no project files, calls no provider, needs no API key, and writes no naming log. Source tokenization stops at 160 tokens, greedy decoding stops at eight tokens, accepted labels remain one to three ASCII words and 32 characters, and manual names, launch presets, remote tabs, unsafe prompts, stale ownership, timeout, or runtime failure all win over or fall back from the model.

This site-only release adds the raw 35M GSG baseline to the tab-title paper's displayed holdout examples. The desktop app is unchanged beyond its version identity. macOS installs update automatically.

• Raw 35M GSG is visible - Appendix B now places the 35M GSG output immediately before Hybrid A for all 30 displayed tasks, making the combiner's contribution inspectable row by row.
• One fair comparison call - All seven displayed candidates were rescored together in one blinded Gemini call after adding GSG, so every parenthesized score in the appendix comes from the same candidate set.
• The sealed split stays sealed - The appendix still uses the first 30 rows of the reusable clean-dev packet; the sealed final 1,000 tasks remain unopened.

This release publishes the second PorkiCoder Research paper and raises consult throughput on the backend. The desktop app is unchanged beyond its version identity. macOS installs update automatically.

• New research paper: Two recipes, one glue - The local tab-title campaign, measured on a blinded 1,000-task holdout: FLAN-T5-small plus an untrained centroid highlighter reaches 77% useful titles with a 10% fail rate at 32 ms per title, and the 35M Hybrid A covers phone-class memory with the same combiner. The paper includes full n=1,000 summary statistics and 30 sampled labels per system.
• An honest ledger - The paper records the owner decision that overrides the preregistration rule of shipping only our own model, credits the scale behind FLAN, keeps the sealed final 1,000 tasks unopened, and links the earlier Sniff Test history of the 12.7M incumbent.
• Consult throughput tripled - The consult backend now sizes Kimi K3 token reservations to observed completion lengths and trues them up on settlement, roughly tripling workspace-wide consult throughput under the same provider budget.

This release makes private local terminal titles useful beyond the first task while tightening their shell and agent privacy boundary. It also settles zoom and resize delivery so terminal redraws converge on the final geometry instead of accumulating intermediate layouts. macOS installs update automatically.

• Local titles start on - A missing preference now selects On in the main and detached windows. Off and Shadow remain explicit choices, and malformed stored values fail closed.
• Agent tasks can refresh the same tab - A fresh local shell receives one eligible initial observation. Recurring observations require a supported interactive agent that still owns the terminal's foreground process group.
• Password prompts fail closed - Before the first eligible shell edit reaches the PTY, the main process verifies a normal shell editing state. Canonical no-echo credential prompts are rejected, and agent claims are checked against the foreground process-group leader.
• Ownership and explicit names stay authoritative - Automatic titles survive detach and reattach, stale work is cancelled at every ownership change, and manual or launch-preset names remain untouched.
• Zoom and resizing settle once - Font changes remain immediate, while xterm and PTY geometry converge through a trailing settled fit and serialized latest-size delivery. Wheel, keyboard, and jump-to-live input supersede an older scroll anchor.
• Naming remains local and bounded - Old Verne still runs only on this Mac, emits short validated labels, reads no project files, uses no provider credential, and falls back to the directory label after any timeout, invalid context, or runtime failure.

This release opens PorkiCoder Research with The Sniff Test, an interactive matched-control analysis of Old Verne's apparent reduction in repeated terminal titles. The paper reports the favorable fixed-pair observation, the complete 31-run control matrix, and the limits on what either can establish. macOS installs update automatically.

• The fixed-pair observation remains visible - One 12.7-million-parameter checkpoint emitted 37% fewer repeated-token titles, from 16.0% to 10.1%, while automatic teacher similarity changed by less than 0.2%.
• Matched controls test the apparent mechanism - Ordered Verne averaged 14.75% repeated titles versus 13.79% for frequency-matched shuffled Verne and was more repetitive in six of nine matches.
• The conclusion stays narrow - The original checkpoint difference was real, but preserving Verne sequence order had no stable advantage. One architecture and nine body-donor matches do not establish a universal law about small models.
• Limitations travel with the result - The paper discloses the original body-start confound, the unblinded dependent judge calls, the donor precision-path difference, and the controlled-data privacy boundary.
• Aggregate evidence is inspectable - The research index publishes the complete aggregate control summary, prospective interim rule, recorded GPU environment, exact scientific source commit, and SHA-256 checksums.
• The paper is built for different readers - Interactive figures include plain-language questions, direct labels, keyboard controls, text takeaways, reduced-motion behavior, mobile layouts, print styles, and readable no-JavaScript fallbacks.

This release adds experimental, fully local automatic titles for ordinary terminal tasks. The bundled Old Verne model is based on Jules Verne text, requires no agent CLI or network provider, and remains off by default. macOS installs update automatically.

• Every local shell is eligible - Old Verne observes the first eligible command in a normal local terminal. A recognized agent prefix is optional context only; Claude Code, Codex, HogCode, or any other CLI is not required.
• Three explicit rollout modes - In Settings, Experimental Local Terminal Titles offers Off, Shadow (evaluate only), and On (show titles). Off is the unconditional default; Shadow runs locally while keeping the directory label visible.
• Private and offline by construction - The task and generated title never go to a model provider, naming needs no API key or project-file access, and raw naming input is not added to chat history or persisted as a naming log.
• Short, safe labels keep folder context - Accepted output is one to three ASCII words, at most 32 characters. On mode renders folder · title, while the full working directory remains in the tooltip and remains the fallback after any failure.
• Explicit names and remote tabs stay untouched - Manual renames and launch-preset names always win. Remote Workspaces terminals are excluded, and detach or reattach preserves a completed local naming decision without starting another attempt.
• Inference is bounded - One local worker processes a small FIFO queue with startup and inference deadlines, bounded restart behavior, stale-result rejection, and fail-to-directory handling. Each tab gets only its first eligible naming attempt.
• The packaged runtime is pinned - The arm64 app carries a hash-verified INT8 Old Verne bundle of about 28.54 MiB, and signed-app smoke tests exercise the real Electron main process and five frozen title vectors.

This release fixes signed-in consult failures for Kimi K3 via Baseten and adds local crash reporting after hangs and force-quits. macOS installs update automatically.

• Consult auth force-refreshes - The local token bridge can force a Supabase session refresh, so long-lived MCP sessions no longer send expired spawn-time JWTs to the Baseten K3 proxy.
• One safe 401 retry - consult_kimi3_baseten retries once after a refresh when the server rejects an expired token, without multiplying paid generations on non-auth errors.
• Expired fallback tokens are rejected - A known-expired spawn-time token is treated as no session instead of a confusing server 401.
• Local crash reports - PorkiCoder writes structured reports under ~/Library/Logs/porkicoder/crash-reports/ for unclean exits, uncaught exceptions, and renderer/child process deaths. Upload is disabled; paths and tokens are redacted.

This release preserves both sides of the terminal repair: a slash reaches the PTY immediately, and the exact typed /overlord command still toggles HOGSPHERE instead of executing in the shell or provider. Prefix guessing remains removed; recognition happens only when Enter arrives. macOS installs update automatically.

• One slash remains immediate - The renderer forwards the first slash on its first input event, with no command-prefix probe, delay, or repeated-key batching.
• The typed command is restored - After an exact case-insensitive /overlord line, Enter clears the already-forwarded text with Ctrl-U, is consumed locally, and invokes the existing authenticated toggle.
• Non-commands keep normal terminal behavior - Repeated slashes, absolute and relative paths, URLs, provider slash commands, and non-exact lookalikes continue to the PTY in order.
• Clear happens before toggle - PorkiCoder enqueues the line-clear write before toggling HOGSPHERE, and the local command is not recorded as submitted input or mission context.
• The shield remains available - Main and detached terminal headers still expose the direct control, and the HOGSPHERE HUD retains its immediate STOP button.
• Focused coverage pins both behaviors - The 59-case Overlord suite now checks first-slash immediacy, exact command recognition, application Enter, non-exact slash input, and renderer wiring order.

This release restores immediate, byte-transparent slash input in every local terminal. PorkiCoder no longer holds / while guessing whether an Overlord command is being typed; HOGSPHERE now uses an explicit terminal shield in both main and detached terminal windows. macOS installs update automatically.

• One slash appears immediately - The first slash is sent to the PTY on its first input event, so repeated slashes are never delayed and released as a batch.
• All terminal text stays byte-transparent - Absolute and relative paths, URLs, provider slash commands, bracketed paste, control sequences, and application Enter are forwarded unchanged.
• Overlord gets an explicit control - The terminal shield arms supervision before a provider starts or toggles a running provider directly; the HOGSPHERE HUD keeps its immediate STOP control.
• No shell cleanup tricks - There is no prefix timeout, speculative local echo, or synthetic Ctrl-U. The terminal and provider receive exactly what the user typed.
• Main and detached terminals agree - Both terminal headers expose the same control, target the active local session, and leave remote terminals unaffected.
• The boundary is pinned by regression coverage - Focused router, controller, and manager tests cover slash input, paths, URLs, provider commands, paste, application Enter, and active-terminal targeting.

This release makes desktop updates predictable for long-lived Mac sessions. Reopening PorkiCoder now refreshes the release feed even when the red close button only hid the existing process, while retained updater state guarantees that a completed download still presents Restart after renderer startup or a later transient event. macOS installs update automatically.

• Reopening the app checks again - Dock activation and second-instance launches refresh the feed when the previous check is at least one minute old, fixing the hidden-process path that could otherwise wait four hours.
• Long-lived sessions poll promptly - Automatic checks now run about every 30 minutes with small timing jitter, and a wake-from-sleep check waits 20 seconds for network reachability before it runs.
• Ready updates cannot vanish - The main process retains a revisioned snapshot, renderers subscribe before replaying it, and a downloaded version remains sticky across later check, error, or no-update phases.
• Checks and downloads are deduplicated - Activation, wake, periodic, and manual requests share one in-flight operation. Once an update is downloaded, PorkiCoder stops starting redundant checks until it is installed.
• Failures have a recovery path - A manual failure is immediately retryable; isolated background network failures stay quiet, while the third consecutive background failure presents an in-app Retry action instead of failing invisibly.
• Updater diagnostics persist locally - A bounded mode-0600 ~/Library/Logs/PorkiCoder/updater.log records updater lifecycle failures, rotates at 1 MB, and redacts bearer credentials, secret fields, and URL query values.
• The lifecycle is pinned by focused tests - Eleven updater regression cases cover late subscribers, sticky downloads, revision races, activation limits, in-flight deduplication, error visibility, log redaction, install gating, and timer cleanup.

This release keeps Terminal Overlord moving through long Codex command approvals when wrapped command text pushes the bottom choice and popup footer below the visible terminal viewport. The repair remains narrowly bounded to proven Codex authorization menus and does not broaden approval into questions, forms, transcript content, or the primary composer. macOS installs update automatically.

• Clipped approvals stay actionable - A visible Codex command-approval title, sequential numbered choices, and an affirmative selection are sufficient even when the popup footer is just below the viewport.
• Long commands no longer stall Overlord - Wrapped SSH, deployment, and other multi-line commands can no longer hide enough of the menu to make a genuine approval look like ordinary composer input.
• Stale transcript titles remain inert - The clipped-menu exception is bounded by the exact Codex approval title and nearby menu structure; a later question, form, composer, or generic “Choose an option” screen stays human-controlled.
• Exact visible choices still govern writes - Overlord selects only a proven affirmative choice already visible in the live viewport. Foreground ownership, render-drain, revision, human-input, and single-use lease checks are unchanged.
• The reported screen is pinned by regression coverage - The focused Overlord suite now passes 58 cases, including the exact long-command viewport and a negative stale-title look-alike.

This release adds a clearly attributed Kimi K3 path through Baseten without changing the existing Kimi Platform route. The new consult is explicitly approved, metered, proxy-only, and isolated from provider fallback, so users can choose where paid work runs while PorkiCoder keeps the production credential and retry policy on the server. macOS installs update automatically.

• A distinct Baseten K3 tool - consult_kimi3_baseten is separate from Kimi Platform's consult_kimi3. Each tool names its provider, billing path, and model explicitly.
• Current-call consent remains mandatory - PorkiCoder exposes the new route as a paid API tool and refuses to call it unless the current conversation explicitly authorizes that named model and operation.
• The production key stays server-side - The desktop MCP provider uses PorkiCoder's authenticated proxy exactly once. It never reads a terminal Baseten key, sends the production credential to a child process, or falls back to Kimi Platform.
• Retries cannot multiply paid work - Only the backend retries explicit transient HTTP responses, with a maximum of three attempts. An accepted response or ambiguous network loss is never replayed automatically by either layer.
• Streaming has a complete-result boundary - Reasoning, answer text, usage, cached tokens, cancellation, and backpressure are preserved across the proxy. An incomplete stream fails instead of being presented as a successful partial answer.
• Timeouts remain staggered - Baseten receives a 29-minute backend window, the desktop provider waits 30 minutes, and production Nginx allows 31 minutes so inner outcomes remain visible.
• Metering and capacity are provider-specific - Baseten K3 has its own model key, pricing attribution, shared capacity gate, usage record, and combined consult-quota entry.
• Baseten documentation is current - The integration guide now distinguishes the new K3 route from managed fan-out and the in-house read-only HogCode path, while keeping the four legacy Baseten Consult names retired.

This release makes Terminal Overlord an approval automaton rather than a generic prompt advancer, while letting explicitly approved Kimi K3 MCP reviews finish their long reasoning path. Overlord now proves local authorization intent before writing and leaves questions, forms, settings, app-link flows, composers, and unknown menus untouched. The extended Kimi path remains Kimi-specific, streams without buffering, preserves cancellation and metering, and reports local liveness while the model works. macOS installs update automatically.

• Approval intent is now explicit - Structured-interaction detection and approval classification are separate. Source-derived Codex command, edit, network, permission, and MCP authorization shapes must prove approval before trust-mode selection can run.
• Look-alike screens stay human-controlled - Codex questions, freeform and required forms, unanswered-question confirmation, MCP schema fields, permission settings, app sign-in and link flows, browser-completion actions, ordinary composers, and unknown structured menus produce no terminal write or approval-history entry.
• Current approval families are covered - Command prefix and session choices, network conversation and future rules, permission turn and session grants, patch approvals, modern MCP Allow/Cancel action sets, generic MCP Allow/Deny/Cancel sets, and the legacy MCP overlay all have exact positive fixtures.
• Exact visible actions only - Overlord prefers a one-time or turn-scoped affirmative, then another affirmative when that is all the provider offers. Selection still requires the exact punctuation-preserving label and a visible highlighted coordinate; an unknown menu no longer falls through to Enter.
• Passive rejection can recover - An unchanged rejected screen never gains authority from a timer. New PTY output or human input can still present a genuine approval later, which is reclassified normally without a permanent human-check state.
• Race and replay boundaries remain intact - Live-viewport, render-drain, output-revision, foreground-process, single-use lease, human-override, successful-write-only logging, and changed-target replay checks remain enforced. The focused suite now passes 57 Overlord tests.
• Staggered long-review ceilings - Kimi Platform receives 29 minutes, the MCP provider waits 30 minutes, and both production Nginx and Codex allow 31 minutes. Each inner layer can return a useful result or timeout before its caller gives up.
• Visible 15-second liveness - The MCP provider emits a progress update every 15 seconds for the full request. These are explicitly local timer heartbeats, not a claim that Kimi emitted a new upstream reasoning chunk.
• Streaming and cancellation stay intact - The exact Kimi route disables proxy buffering, forwards SSE incrementally, cancels upstream work when the client disconnects, and keeps partial-usage metering on the established path.
• Useful terminal timeout - A backend ceiling produces a sanitized Kimi timeout frame that the MCP provider treats as terminal rather than launching another long retry or letting the outer Codex tool deadline hide the cause.
• Other consults keep their limits - The shared five-minute proxy constant is unchanged. Only /api/consult/kimi3 receives the extended upstream and Nginx contract.
• Deployments cannot become the short timer - Graceful Nginx cutover drain now lasts 32 minutes, allowing an already accepted Kimi review to finish or reach its inner timeout cleanly during a backend rollout.

This release prevents a transient relay disconnect from crashing the host Mac while a remote terminal is producing output. PorkiCoder now treats that send failure as a disconnected transport, preserves the terminal's bounded replay buffer, and lets the controller reconnect normally. macOS installs update automatically.

• No uncaught relay-offline crash - If the relay WebSocket stops accepting data just before its close event updates the encrypted session, host terminal output is caught at the transport boundary instead of escaping as an Electron main-process exception.
• Output is retained for reconnect - The host records each output chunk before attempting delivery. A failed send detaches the broken connection, and the controller can reconnect and replay the buffered sequence without losing or duplicating terminal output.
• Close completes locally - Relay channels and encrypted sessions now finish their local cleanup even when the offline socket cannot carry the final close notification. Later output remains buffered rather than repeatedly targeting a dead connection.
• Security and limits are unchanged - Reconnection still requires the signed-in device identity, pinned peer keys, Noise session, and directional grant. Replay remains capped at 3 MiB for up to 12 hours, and remote terminals still run with the logged-in macOS user's authority.
• Exact race covered end to end - The regression test forces Remote relay is offline during host PTY output, proves the exception is contained, reconnects through the fallback path, and verifies the complete output replay. The full remote suite passes 87 tests.

This release makes inbound Remote Workspace access visible on the host Mac and adds Fable 5 to the Claude Code subscription consult. The controller can still connect through the secure relay or an authenticated direct path, while the host now sees who is authorized and which remote shells are active. macOS installs update automatically.

• Host-side controller visibility - Remote Workspaces now separates Macs allowed to control this Mac from Macs this Mac can control, so a directional Work-to-Home grant is visible on both ends without implying reciprocal access.
• Live remote activity - Each authorized controller shows whether it is connected through Direct or Relay transport, its active and detached session counts, and the repositories currently in use. The linked-device button also shows the total live-session count and a descriptive tooltip.
• Host controls remain immediate - The host can revoke one controller or end all remote sessions from the same panel. Remote shells still run with the full authority of the logged-in macOS user; navigation roots organize the picker and are not a sandbox.
• Fable 5 through Porki Consult - consult_claude_code now accepts the exact claude-fable-5 model with max effort. It uses the locally installed Claude Code CLI and its existing subscription quota, with no paid-API fallback.
• Fresh master session after updating - Existing Claude Code, Codex, and Grok Build terminals may retain the previous MCP schema. Open a fresh master terminal session before requesting Fable 5 so the updated allowlist is loaded.
• Reviewed and regression tested - Code review caught a session-count badge that could be clipped by the terminal tab strip; the corrected placement joins the complete 85-test remote suite and the MCP test suites.

This release restores the missing controller path for Remote Workspaces in relay-only packaged builds. A successfully paired home or work Mac now remains visible under Paired Macs, with its Relay, Direct, Offline, or Update required state and the Connect action needed to open a remote terminal. macOS installs update automatically.

• Relay-paired Macs stay visible - The controller list is no longer nested inside the opt-in Nearby Macs panel. Disabling or lacking nearby discovery cannot hide an existing directional grant or its Connect and Revoke controls.
• Paired and nearby roles are clear - Approved hosts live in an always-visible Paired Macs section. Only unpaired, authenticated local-network candidates appear under Nearby Macs for first-time setup.
• Availability copy matches reality - Relay-only builds now say that the secure relay is ready while nearby discovery is unavailable, instead of incorrectly claiming both paths are ready.
• Protocol mismatches fail closed - An incompatible Mac shows Update required and its connection action stays disabled, even if inconsistent presence data claims that device is online.
• Navigation roots are not a sandbox - Roots choose the starting folders shown in the picker. An approved remote terminal still runs with the full authority of the logged-in macOS user, so pair only Macs you trust.
• Regression coverage renders the real card - The consumer test now renders a relay-only Home Mac through the actual modal methods, proves the paired panel stays visible while Nearby Macs is hidden, and joins the complete 84-test remote suite.

This release completes the opt-in Nearby Macs preview: two signed-in Macs can discover each other automatically, approve once, and run a remote terminal over an authenticated direct connection when reachable. The existing end-to-end encrypted relay remains available across isolated or distant networks. Packaged builds keep the preview off unless the explicit validation flag is present; macOS installs update automatically.

• Discover, click, approve once - Nearby Macs are deduplicated into one clear list with direct, relay, incompatible, and offline states. The host uses one enable toggle, while invitation links remain available as a collapsed recovery path.
• Authenticated direct transport - Privacy-preserving Bonjour records are matched to the signed same-account directory before pairing. Noise handshakes bind the account, direction, discovery attempt, both device keys, and the directional grant before terminal data can flow.
• Secure relay fallback - Reachability failures can fall back to the existing encrypted relay without weakening authorization. Wrong peers, malformed responses, revoked grants, key mismatches, and control-plane failures remain hard failures and never trigger a permissive fallback.
• No consumer IP configuration - Direct endpoints come from validated Bonjour discovery on private or link-local IPv4/IPv6 interfaces; there is no manual or hardcoded consumer address. Macs on different networks or in different countries use the relay path.
• Remote terminals are visibly remote - Local terminals keep the established emerald palette, while every remote create, attach, reconnect, fullscreen, and multi-panel path uses pure white on black plus a transport-state badge.
• Lifecycle and hardening - Hosting, browsing, listeners, advertisements, approvals, grants, sockets, reconnects, sleep/wake, sign-out, and revocation now share bounded fail-closed lifecycle rules. The focused desktop remote suite passes 82 tests and the backend remote suite passes 5.

This release adds an internal, off-by-default local-network discovery and reachability foundation for future Nearby Remote Workspaces. It does not enable nearby pairing, direct terminals, or new terminal authority; existing Remote Workspaces continues using its end-to-end encrypted relay. macOS installs update automatically.

• Internal and off by default - Packaged builds do not start the nearby transport unless an explicit internal validation flag is present. Opening unrelated parts of PorkiCoder never triggers local-network discovery or a permission prompt.
• Private Bonjour identity - The _porkicoder._tcp record uses fresh per-process random labels and a minimal, validated TXT schema. It advertises no person, account, device, computer, path, key, grant, invitation, or terminal details.
• Bounded reachability only - A strict main-process WebSocket challenge can prove that a discovered endpoint is reachable, with fixed-size binary messages, connection and rate caps, short deadlines, private-address checks, stale-entry expiry, and clean cancellation.
• Remote authority is unchanged - Discovery cannot pair a device, run Noise, create or verify a grant, expose a file, or open a PTY. The existing signed-in identity, host approval, pinned-key, and directional-grant boundaries remain intact.
• Relay behavior is unchanged - This milestone does not route terminal traffic over the LAN or alter the secure relay path. Invitation pairing and normal Remote Workspaces behavior continue as before.
• Packaged correctly and tested - The signed app declares its Bonjour service and contextual Local Network usage reason, includes client and server entitlements, and adds regression coverage for discovery privacy, listener hardening, lifecycle ordering, packaging, and shutdown.

Terminal Overlord now recognizes and approves supported one-time Codex, Claude Code, and Grok Build prompts entirely on-device. Removing Gemini from the approval loop eliminates model latency and the repeated SCREEN CHANGED cycle caused by harmless terminal redraws. macOS installs update automatically.

• Local rules replace the approval LLM - Recognized yes/no confirmations, coherent one-time menus, and explicit Enter gates are parsed and encoded locally. Overlord no longer needs a Gemini key, proxy request, model token budget, or usage charge.
• Trust mode means approve - When Overlord is enabled, it approves the recognized one-time positive action without judging the command's contents, including production or destructive actions. If a prompt offers both a one-time choice and an “always allow” choice, it deliberately selects the one-time choice.
• Harmless redraws no longer reset approval - Semantic prompt identity ignores animated spinners, status footers, cursor movement, and selection-paint churn while still detecting a changed command or choice.
• Every snapshot is render-drained and revision-bound - PorkiCoder waits for xterm to finish processing queued output and stamps the snapshot with the exact PTY output revision. A genuinely newer screen invalidates the old approval.
• Foreground authorization is fresh and single-use - Each approval verifies that the expected provider still owns the foreground, requests one fresh snapshot after that asynchronous check, then consumes the lease before writing to the PTY.
• The same open dialog cannot be approved twice - A durable request signature survives cosmetic repainting and remains spent until the prompt disappears or a genuinely different approval request appears.
• Unknown screens still pause - Ordinary conversation, primary composers, ambiguous menus, scrolled-back history, changed screens, and interactive child processes are not treated as approvals. The focused suite now covers 48 Overlord cases alongside the terminal integration tests.

Terminal Overlord now gives Gemini enough completion room to finish its strict terminal decision after hidden reasoning. This prevents valid Codex, Claude Code, and Grok Build prompts from degrading into repeated model-link errors. macOS installs update automatically.

• Complete strict decisions - The Overlord completion ceiling increases from 512 to 2,048 tokens on both the authenticated PorkiCoder proxy and direct Gemini fallback paths, leaving room for the required JSON after hidden reasoning.
• Medium safety reasoning stays enabled - The fix preserves Gemini 3.5 Flash-Lite's medium reasoning level instead of weakening the model-side review used for terminal choices.
• The reproduced failure now completes - A realistic Codex command-approval screen that previously stopped after the opening JSON field now returns a complete schema-valid selection.
• The action boundary is unchanged - Gemini can still request only wait, a yes/no confirmation, an exact visible menu selection, an explicit Enter press, or human escalation. PorkiCoder continues to validate and encode every action locally.
• Privacy and billing remain bounded - The larger value is an output ceiling, not a fixed charge or a larger terminal snapshot. Usage is billed from tokens actually consumed, and the existing redaction, visible-viewport, foreground, safety, and session limits remain in force.
• Regression coverage pins both transports - The Overlord suite now requires the same 2,048-token allowance for native Gemini requests and OpenAI-compatible proxy requests; all 44 Overlord tests pass.

A verified Codex CLI 0.146.0 hotfix now keeps overlapping MCP startup rounds separate, so a late cancellation from a superseded refresh cannot become a false failure for the current round. PorkiCoder does not install or replace Codex CLI; the startup-round hotfix is installed separately from this macOS app update.

• Startup rounds are correlated - Thread-scoped MCP status notifications carry an optional startupId, derived from the startup event identifier, so updates from separate refreshes no longer share one undifferentiated status map.
• Stale cancellations stay retired - A new starting round retires the previous active round without warning. Late ready, failed, cancelled, or missing updates from that retired identifier cannot complete or warn for the newer round.
• Out-of-order completion stays bounded - Coherent terminal-only rounds can still become active when their expected server set is complete and newer than the displayed round. Pending and retired history is capped at four identifiers in first-observation order.
• Legacy notifications remain compatible - startupId is optional in the protocol and generated JSON and TypeScript schemas. Identifier-less notifications continue through the established single-round behavior.
• The integration scope stays explicit - PorkiCoder's semantic no-op registration fix from 2.17.10 remains unchanged. This release does not bundle a Codex executable; the round-correlation behavior requires the verified Codex 0.146.0 startup-round hotfix.
• Race behavior is regression-tested - Deterministic coverage exercises overlap, cancellation, stale events, terminal-only promotion, legacy events, and bounded retention. A live launch initialized all three configured MCP servers without the false interruption warning.

Terminal-first mode now returns keyboard control to the active shell after a fullscreen change, and Terminal Overlord uses PorkiCoder's authenticated server proxy instead of asking signed-in users for a personal Gemini key. macOS installs update automatically.

• Fullscreen input focus restored - Clicking the fullscreen header control no longer leaves keyboard focus on the button. After the terminal layout finishes fitting, PorkiCoder returns focus to the active initialized terminal so typing works immediately.
• Hidden terminals stay untouched - The delayed focus restoration rechecks that the terminal panel is still visible. Switching back to IDE mode during the relayout cannot steal focus into a terminal that has since been hidden.
• Overlord is batteries-included - A signed-in PorkiCoder session now authorizes HOGSPHERE through the existing server model proxy. Enabling /overlord no longer redirects users to Settings to add a Gemini API key.
• The Gemini credential stays server-side - The app sends its session token only as the PorkiCoder proxy authorization header and removes it from the model payload. The server-owned Gemini key never reaches the desktop app or terminal snapshot.
• Safety and model behavior are preserved - The proxy pins stable gemini-3.5-flash-lite, medium reasoning, and the same strict decision schema. Local prompt detection, secret redaction, foreground checks, write-time revalidation, and the ban on free-form terminal input remain unchanged.
• Usage follows the authenticated server path - Overlord decisions now use the server's normal request validation, rate limits, quota, and credit accounting without duplicate client-side metering.

Remote Workspace setup, invitations, and pairing approvals now appear above terminal-first mode instead of opening invisibly behind the fullscreen terminal. macOS installs update automatically.

• Remote Connect opens visibly - Clicking the linked-device pig beside the terminal + now places the Remote Workspaces dialog on the established application-modal layer above the fullscreen terminal.
• Pairing prompts stay actionable - Deep-link invitations, controller pairing progress, and host approval prompts use the same repaired layer, so terminal-first mode no longer hides a security-critical confirmation.
• Your terminal state is preserved - Opening or closing the dialog does not exit terminal-first mode, hide a running terminal, or depend on the other Mac being online. A second Mac still needs PorkiCoder 2.17.9 or newer to participate.
• Layer ordering is regression-tested - The remote test suite now enforces that the Remote Workspace modal remains above the fullscreen terminal while authentication and transient notifications retain their existing higher layers.

Codex MCP registration no longer replaces a correct ~/.codex/config.toml merely because it uses different valid TOML formatting. That avoids PorkiCoder-triggered all-server refreshes that could surface as an interrupted MCP startup warning. macOS installs update automatically.

• Semantic Codex config no-op - Equivalent command, arguments, and managed environment values now count as up to date even when keys are quoted, whitespace or comments differ, or a single-line argument array has a trailing comma.
• No refresh for formatting alone - When the managed entry already means the same thing, PorkiCoder leaves the config bytes, inode, and modification time untouched, so a live Codex session is not asked to restart every MCP server.
• Necessary updates still land safely - A genuinely stale command, bundled server path, bridge token-file path, or retired managed value is still corrected while unrelated servers, settings, and environment keys remain preserved.
• Private collision-resistant writes - Real updates use a mode-0600 temporary file with a random name, reject unsafe hard-linked targets, preserve symlinked config paths by updating their regular-file target, and retry if another writer changes the file first.
• Scope remains explicit - This prevents refreshes caused by PorkiCoder's registration writer. Codex can still refresh its own built-in MCP services after Codex-owned settings changes; start a fresh Codex session after any genuine registration update.

Remote Workspaces is available as a working beta for reconnecting to a terminal on another signed-in Mac. The host stays off until enabled, pairing requires approval on the host, and terminal traffic is end-to-end encrypted before it reaches the relay. macOS installs update automatically.

• A visible Remote Connect control - The redundant robot-head terminal button is replaced by a purpose-built linked-device icon beside the new-terminal button. It opens host setup, device pairing, remote workspace launch, running sessions, and revocation in one place.
• Explicit two-Mac pairing - Pair with a QR code, a porkicoder:// invitation link, or a manual invitation. A short phrase appears on both Macs and the host must approve before the controller receives a directional grant.
• End-to-end encrypted remote terminals - Authenticated devices establish a Noise XX session bound to the account, device identities, direction, and pairing secret. The WebSocket relay routes opaque ciphertext and cannot read terminal input or output.
• Host-controlled access - Remote hosting is off by default. The host chooses an exposed navigation root and launch preset, can end all remote sessions, and can revoke a device or grant. Remote sessions are visibly marked and the host receives activity notifications.
• Practical reconnect limits - A disconnected controller can reattach and replay up to 3 MiB of recent output. Replay retention is 12 hours, remote sessions end after 24 hours, and each device is limited to eight concurrent sessions.
• Prototype scope - This beta provides remote terminal workspaces on Apple Silicon Macs. Remote graphical editor mirroring and unattended access beyond the explicit host controls are not part of this release.

Local terminal sessions now run through an ownership-checked main-process broker, establishing the security boundary needed for future Remote Workspaces without enabling remote access. Existing local, detached, Overlord, Copy Card, fan-out, and OpenCode terminal behavior is preserved. macOS installs update automatically.

• Ownership-checked terminal handles - Write, resize, close, and directory requests are accepted only from the renderer window that owns the terminal. Ownership transfers explicitly when a session detaches or reattaches, and numeric handles are never reused during an app run.
• One local PTY lifecycle - Shell spawning, environment scrubbing, output, resize, exit, and close behavior now share one local session adapter. The broker coordinates cleanup while preserving terminal tabs, detached windows, Overlord, Copy Card, fan-out, and OpenCode integration.
• Bounded transitions and retryable cleanup - Terminal options, detach metadata, replay buffers, and transition state are schema- and size-checked. Buffered output has a hard 3 MiB cap, short-lived startup exits clear their capabilities, and a failed native termination remains tracked so cleanup can be retried.
• Remote access remains off - This release contains only the first local-hardening milestone. It adds no device pairing, relay connection, remote terminal UI, or remote shell access, and it sends no terminal data to a Remote Workspaces service.

Terminal tabs close reliably again after the live working-directory naming rollout. Closing a tab now tears down its shell, clears its output, removes the tab, and activates a neighboring session as expected. macOS installs update automatically.

• Terminal tab closing restored - Clicking a tab's close button and confirming once again completes the normal terminal teardown instead of leaving the tab and shell open.
• Obsolete cleanup removed - The directory-label refactor retired the old pending AI-label state but left two cleanup references behind. Both stale references are gone rather than reviving unused naming state.
• Normal and detached removal paths covered - Regression tests exercise the real terminal manager for ordinary tab close and local cleanup during detached-window recovery, including shell teardown, UI removal, metadata cleanup, and preference saving.
• Live labels and privacy stay unchanged - Tabs still follow the active shell's directory after cd, and manual or preset names still win. Closing a tab is local and sends no path, terminal output, or model request to a provider.

Terminal Overlord now acts only on visible structured prompts and never treats Claude Code's primary composer as a popup. Terminal tab names now follow the shell's live working directory after cd, including in detached windows. macOS installs update automatically.

• Popup-only Overlord supervision - HOGSPHERE recognizes coherent choice menus, explicit y/n confirmations, and screens that explicitly ask for Enter. Ordinary prose, transcript questions, progress output, and a lone primary-input marker are treated as non-interactive.
• The primary composer stays human-controlled - Overlord no longer invents, restates, or submits a task into Claude Code's main input. The decision schema and terminal encoder cannot send free-form text or general navigation keys.
• Race-safe action validation - Immediately before an autonomous write, PorkiCoder rechecks the visible screen, terminal output generation, foreground process, scroll position, and human-input generation. Changed or stale prompts fail closed.
• Exact structured choices only - Menu actions must match a currently visible label and use the visible cursor path. Permission menus still reject “allow all” choices and sensitive or ambiguous requests still require a human.
• Live working-directory tab names - Automatic terminal labels update to the basename of the active shell's directory after cd. The behavior works in main and detached terminal windows, while preset and manual names continue to win.
• Bounded, private directory detection - PorkiCoder uses local process inspection and trusted local OSC 7 reports, sanitizes every path, ignores stale responses, and keeps the last valid label through transient lookup failures. No model request or API key is involved.

Terminal Overlord now arms reliably before Claude Code, Codex, or Grok Build starts, approves verified one-time edit requests even above a persistent task footer, and shows what it approved. Terminal tabs now use the starting directory instead of an LLM-generated label. macOS installs update automatically.

• Pre-launch Overlord arming - Type /overlord at a normal shell prompt, then launch Claude Code, Codex, or Grok Build. HOGSPHERE shows ARMED — WAITING FOR AGENT and attaches when the supported agent becomes the foreground process.
• Verified one-time edit approvals - Claude Code edit menus are recognized even when a live task list remains below them. PorkiCoder selects the exact visible one-time Yes choice, never an “allow all” option, and suppresses duplicate approvals caused by footer redraws.
• Sensitive targets still require a human - Credential files, keys, environment files, release workflows, absolute paths, and paths outside the workspace fail closed instead of being auto-approved.
• Visible approval feedback - A compact HOGSPHERE speech bubble confirms each successful approval. Click LOG to reveal a bounded, session-only approval history; it stays hidden by default and clears with the terminal session.
• Directory-named terminal tabs - A new tab uses the basename of its authoritative starting directory, such as porkr1. There is no model request, race, or naming delay, while preset and manual names continue to win.

Terminal Overlord brings the pixel-cyborg HOGSPHERE to already-running Claude Code, Codex, and Grok Build sessions. It can keep clear routine prompts moving, while human input and every sensitive or ambiguous decision take priority. macOS installs update automatically.

• One uniform mid-chat command - Type the exact command /overlord at a provider prompt to toggle supervision. PorkiCoder consumes it before PTY input, so it never reaches the provider and cannot conflict with startup flags such as Claude Code's --dangerously-skip-permissions.
• HOGSPHERE lives in the terminal - The selected retro pixel cyber-pig appears as a compact terminal HUD with live provider, model, state, action-count, and cost telemetry plus an immediate STOP control.
• Gemini 3.5 Flash-Lite decisions, locally enforced - Stable gemini-3.5-flash-lite uses medium thinking and can return only a strict wait, answer, confirmation, visible selection, named navigation key, or escalation intent. PorkiCoder validates the intent and encodes the terminal input; the model cannot emit arbitrary terminal bytes.
• Foreground-aware supervision - PorkiCoder checks the macOS process table before activation, during heartbeats, and immediately before every autonomous write. HOGSPHERE waits if the provider is no longer foreground or has handed the terminal to an interactive child shell, editor, pager, or tool.
• Human input always wins - Any human keystroke aborts an in-flight decision before it can be written. Supervision also pauses when the terminal is scrolled away from the live bottom and stops when the provider or terminal exits.
• Hard safety holds and limits - Secrets, authentication, payments, publishing, production deployment, destructive operations, work outside the workspace, broadened permissions, and ambiguous choices require a human. Sessions are capped at 128 autonomous sends and 24 hours.
• Bounded privacy and billing - Decisions use the visible live terminal viewport plus bounded, sanitized context. Common credentials are redacted, snapshots and decisions are not stored in chat history, and only aggregate token/cost totals enter the existing monthly usage rollup.
• Flash-Lite naming update - Ambiguous terminal-tab naming also moves from Gemini 3.1 Flash Lite to Google's stable gemini-3.5-flash-lite, retaining its minimal-thinking, user-key-only, single-attempt, and privacy limits.

Terminal tabs now use Gemini 3.1 Flash Lite and queue simultaneous naming requests, so concurrent terminals receive useful one-time labels instead of remaining generic Terminal N tabs. macOS installs update automatically.

• Flash Lite from the start - Ambiguous first commands now use Google's stable gemini-3.1-flash-lite model with minimal thinking and structured JSON output.
• Concurrent tabs no longer lose their name - Model-backed naming requests wait in one small process-wide queue. A busy request no longer makes another tab abandon the prompt that should have named it.
• Usage and privacy limits stay bounded - Deterministic labels and cache hits still avoid the API. Model requests remain user-key-only, capped at 512 Unicode characters, one attempt per tab, four starts per rolling hour, and eight starts per app session.
• Manual names still win - Pre-named tabs and user renames remain protected, including when a queued result returns later.

Claude Code, Codex, and Grok Build can now each use the bundled Consult MCP server to request bounded second opinions from either of the other two local subscription CLIs. The release also fixes Codex subscription detection and adds conservative, private Grok configuration updates. macOS installs update automatically.

• Three first-class MCP masters - PorkiCoder now auto-registers porkicoder-consult with Claude Code, Codex, and Grok Build. All three receive the same tool catalog, enabling all six cross-client directions without manual MCP setup.
• Codex ChatGPT login recognized - Current Codex CLI versions can print Logged in using ChatGPT on stderr even after a successful login. PorkiCoder now accepts that exact successful status from either output stream while continuing to reject API-key, nonzero, banner, and near-match responses.
• Safe Grok configuration - The Grok user configuration is updated atomically with private file permissions. Unrelated servers and settings are preserved, an intentional enabled = false remains disabled, and ambiguous multiline or non-table definitions fail closed instead of being rewritten.
• Isolation and consent stay unchanged - Every local consult still requires current approval, consumes the selected worker's subscription quota, receives only the bounded question and context, and runs without repository, shell, web, MCP, plugin, or persistent-session access.
• Restart after upgrading - Start a fresh Claude Code, Codex, or Grok Build session after PorkiCoder launches so the master sees the new registration and current worker login state.

Claude Sonnet 5 becomes the default for new Agent sessions, non-Anthropic Agent choices now use OpenCode automatically, and Gemini-powered terminal-tab naming works again. The release also hardens explicit Opus 5 subscription reviews and simplifies Cmd+K inline edits. macOS installs update automatically.

• Terminal auto-naming repaired - Gemini 3.6 Flash's structured-output endpoint expects an enum value for its JSON response format. PorkiCoder now sends the correct wire value, so ambiguous first commands produce labels again instead of failing with HTTP 400. The existing one-attempt, four-per-hour, eight-per-session, user-key-only, and 512-character privacy limits are unchanged.
• Claude Sonnet 5 Agent default - New Agent sessions start on Claude Sonnet 5 at Max effort. Sonnet 5 supports Low, Medium, High, XHigh, and Max, while Claude Opus 4.8 remains available with the same effort range.
• Choose a model, not a harness - Anthropic models use the Claude Agent SDK; Gemini 3.5 Flash, Gemini 3.1 Pro, Grok 4.3, and GPT-5.5 use OpenCode with the selected PorkiCoder model sent explicitly on every Agent turn. The old pseudo-model named OpenCode is removed from the main picker.
• Safer preference migration - Existing Kimi, Kimi K2.7 Code, GLM-5.2, and legacy OpenCode main-IDE preferences migrate to Sonnet 5 instead of leaving the selector blank or silently changing harnesses. Kimi and GLM remain available to independent fan-out workers and HogCode.
• Focused managed OpenCode catalog - PorkiCoder's managed OpenCode provider now exposes Gemini 3.5 Flash, Gemini 3.1 Pro, Grok 4.3, and GPT-5.5, with Gemini as its default and lightweight model. OpenCode's Bash tool still runs outside PorkiCoder's file-write review boundary, as documented in the app and docs.
• Cmd+K simplified - Inline edit now defaults to Gemini 3.5 Flash and offers Claude Sonnet 5 as the alternate. Retired Kimi and Claude Haiku choices migrate to Gemini automatically.
• Explicit Opus 5 subscription reviews - consult_claude_code can pin Claude Opus 5 and a requested effort level instead of inheriting mutable CLI defaults. Streaming activity resets a five-minute inactivity watchdog, progress appears every 30 seconds when supported, and a separate 30-minute safety ceiling stops stuck reviews.
• Claude runtime compatibility - The Claude Agent SDK and Anthropic SDK are updated, and PorkiCoder now resolves the system Claude CLI asynchronously across GUI launches, Homebrew, common global installs, and supported version managers before starting an Agent run.

Claude Code and Codex can now request bounded second opinions from the local AI CLI subscriptions already installed on your Mac. Terminal tabs also get smarter one-time names through deterministic local rules and, when you opt in with your own Google AI Studio key, Gemini 3.6 Flash. macOS installs update automatically.

• Local subscription consults - The bundled MCP server adds consult_claude_code, consult_codex, and consult_grok_build. Each tool uses the worker CLI's existing subscription login and quota instead of PorkiCoder API credits.
• Explicit, isolated second opinions - Every local consult needs current-conversation approval. Workers receive only the question and optional context you provide, run read-only in a private temporary workspace, and cannot inspect the repository, edit files, run commands, browse, call MCP tools, or continue the parent task.
• No hidden fallback - Missing CLIs, expired logins, timeouts, and worker errors are returned directly. A local consult never falls back to another subscription or a paid API.
• Baseten consults retired - consult_kimi, consult_kimi27, consult_kimi27_fast, and consult_glm52 are no longer advertised or callable. The Kimi K3, Gemini, and GPT API consults remain, and Baseten-backed models remain available in PorkiCoder's normal model catalog and independent fan-out workflows.
• Gemini 3.6 Flash terminal names - Common commands are labeled locally. Ambiguous first prompts can make one direct low-thinking Gemini request using only a user-supplied Gemini key from Settings; app-managed keys, proxies, and provider fallbacks are never used for naming.
• Hard privacy and usage ceilings - Model-backed naming sends at most 512 Unicode characters directly to Google, allows one attempt per tab, caps starts at four per rolling hour and eight per app session, and preserves manual renames. Users choose a free-tier Google AI Studio project and remain subject to Google's regional quota and data-use terms.

Rollback release. PorkiCoder returns to its proven 2.13.3 core after performance and stability regressions in the 2.14–2.15 series. Everything introduced in 2.13.4 through 2.15.6 has been rolled back — the entries below are kept for history. macOS installs update automatically (2.16.0 is macOS-only).

• HogCode is a read-only assistant again - The OpenCode-based HogCode coding agent from 2.14–2.15 is gone. Typing hogcode in a PorkiCoder terminal opens the original read-only assistant: it reads, searches, and explains your project and answers questions, but it does not edit files or run commands. It signs in with its own hogcode login (run it from the shell prompt, not inside hogcode>), and sessions created by the 2.14–2.15 HogCode cannot be resumed.
• Agent sessions use your own OpenCode - ⌘⇧O opens an OpenCode session that runs the opencode binary installed on your system (nothing is bundled); PorkiCoder connects it to your account and managed models automatically. In-app chat Agent Mode (Kimi K2.7 Code default, plus Gemini, Grok, and GPT) is unchanged.
• Consult tools kept - Claude Code, Codex, and OpenCode still get the full porkicoder-consult tool set (consult_*, fanout_*, render_copyable), with manual-only paid agent workflows and explicit approval before every metered call.
• macOS 26.4 installer kept - The installer remains an APFS disk image, so downloads and updates keep working on macOS 26.4 and newer.
• Accounts and settings - Accounts, credits, and app settings are unaffected.

Restores the complete authenticated PorkiCoder tool set across Claude Code, Codex, OpenCode, and HogCode. Supported signed-in sessions now share the same 17-tool inventory.

• All 17 tools everywhere - Every supported client can discover and invoke the seven consult_* tools, render_copyable, and all nine fanout_* tools.
• Scoped client authorization - Ordinary PorkiCoder terminals receive a signed MCP-only launch role, while managed HogCode keeps its sealed Agent role and separately installed OpenCode is migrated only when PorkiCoder owns the existing entry.
• Revocable account binding - Short-lived capabilities remain bound to the active signed-in account and terminal. Raw PorkiCoder login credentials are never written into client configuration or exposed to MCP tools.

Restores the built-in Terminal. A terminal tab could be sent through HogCode's stricter managed Agent setup before its shell started, making the Terminal button appear to do nothing when that setup failed.

• Terminal opens again - Clicking Terminal now starts an ordinary shell without waiting for managed Agent configuration or service availability.
• Shell and Agent launches stay separate - New Agent sessions still use the sealed HogCode launch path, while regular terminal tabs use only the local shell capabilities they need.
• Visible recovery - If a terminal cannot start, its tab now shows a safe error message and a Retry button instead of failing silently.

Completes the macOS 26 launch fix. A background component failed to load on macOS 26, which prevented the app from opening.

• Opens on macOS 26 - Fixed a launch-time load failure of the bundled engine on the latest macOS, complementing the APFS disk-image fix from 2.15.3.

Fixes app launch on the latest macOS. Recent macOS releases (26.4+) can no longer mount the HFS+ disk-image format, which prevented PorkiCoder from opening.

• Opens on the latest macOS - The installer DMG and the internal runtime image now use APFS instead of HFS+, so they mount and the app starts on macOS 26.4 and later.
• Safer startup - Removed a hardened-runtime setting that could cause the background engine to be terminated on first use.

Reliable startup across supported Macs

The previous hotfix restored local renderer loading but missed a second packaging problem: two protected startup components accidentally required the newer macOS version used by the build machine. This follow-up fixes that compatibility mismatch.

• Restored native compatibility - Embedded startup components now carry an explicit deployment target compatible with supported macOS releases instead of silently inheriting the build machine's newer version.
• No more silent startup failures - Ordinary launches share one primary app instance and bring its window forward. A renderer or protected-runtime failure now produces a native error instead of leaving another windowless process.
• Bounded stuck-process recovery - PorkiCoder can recover only the exact signed failed predecessor used to reproduce the socket collision, after asking permission. Unknown processes are never terminated.
• Tests the real launch routes - Release verification checks the packaged native deployment targets, normal macOS LaunchServices opening, forced overlap, and a stable visible editor window before publication.

Installed app launch restored

This focused hotfix restores the packaged renderer permission required by PorkiCoder's signed local application files.

• App icon opens PorkiCoder again - Launching the installed app now loads the editor window normally instead of leaving an invisible process.
• Release-tested installer - The signed and notarized DMG is mounted and launched during release verification, and publication uses a new immutable version so a cached 2.15.0 installer cannot be mistaken for this fix.

The real HogCode coding agent replaces the legacy shell

HogCode is now PorkiCoder's maintained OpenCode-based coding agent, shipped as one native engine for the interactive terminal and headless Agent integration. It keeps OpenCode's mature coding workflow while giving the product an isolated identity, managed account connection, and release-grade package attestation.

• Full coding capability - HogCode can run shell and Git commands, read and search files, create reviewed edits, apply multi-file patches, use worktrees, delegate tasks, manage background work, resume sessions, and work across approved sibling directories.
• MCP, LSP, skills, and notebooks - The released registry retains MCP and language-server integration, PorkiCoder-managed skills, task and background-agent workflows, and a new notebook_edit tool that safely edits Jupyter cells while preserving notebook structure.
• Reviewable by default - Normal sessions expose mutation tools behind explicit approval and exact diffs. Plan/read-only mode remains available when you intentionally want inspection without changes.
• One desktop identity - Signed-in terminals use short-lived, account-, session-, terminal-, and operation-bound capabilities. Refreshing the same login does not interrupt work; signing out or switching accounts revokes access and closes affected runtimes.
• Signed, sealed managed launch - PorkiCoder launches the exact packaged HogCode binary through a native broker and a signed one-use launch bundle. Packaged mode does not discover a global OpenCode, accept token/config overrides from the shell, or fall back to the retired runtime.
• Security and correctness hardening - Web fetches reject private-network and unsafe redirect paths by default, filesystem authorization follows canonical destinations, media reads are bounded, foreground tasks drain descendants, and patch writes commit or roll back as one transaction.
• Honest downstream identity - HogCode reports version 1.18.3-hogcode.1, uses its own global state roots, preserves compatible project configuration, and cannot update or uninstall itself from inside the PorkiCoder-managed distribution.
• Safer releases - Builds and publication are separate; the macOS package carries an exact sidecar contract, checksums, SBOM, and provenance records and is staged immutably before publication.
• macOS-only for now - Starting with 2.15.0, new packages and support are limited to Apple silicon Macs while we focus our available release and testing resources. Linux releases are paused until we can test and support them reliably again.

Reliable HogCode recovery and private diagnostics

HogCode now recovers cleanly when a broad repository search reaches its input bound and Kimi reuses streamed tool-call metadata. Failures are retained locally as privacy-safe diagnostic records, and assistant output is normalized to remove U+2014.

• Bounded repository searches: Broad Glob and Grep calls skip common dependency, build, release, vendor, virtual-environment, and cache directories by default. Explicitly targeted generated directories remain searchable.
• Stable Kimi tool calls: Repeated streamed IDs and names no longer concatenate into corrupt tool metadata. Turn-scoped runtime IDs allow a failed search to retry narrowly even when the provider reuses its native ID.
• Private failure diagnostics: Retries, failed tools and sessions, runtime exceptions, cleanup faults, and nonzero command exits are retained under ~/.porkicoder/hogcode/diagnostics.
• Secret-safe bounded storage: Diagnostic records retain only finite error and lifecycle metadata. They exclude prompts, paths, arguments, results, environment values, headers, raw error prose, and stacks; private permissions, symlink protection, rotation, and retention bounds are enforced.
• U+2014-free HogCode output: The managed prompt prohibits U+2014, and streamed answers and reasoning replace it with an ASCII hyphen before display, persistence, or replay.

Startup regression fixed; release gates strengthened

Version 2.14.0 could fail while initializing Electron's sandboxed desktop bridge, leaving sign-in, sign-out, model selection, and project opening unresponsive. Version 2.14.1 restores startup and adds package-level checks designed to prevent this class of regression from reaching production.

• Core controls restored — The sandbox-safe preload bridge now initializes correctly, restoring authentication, model confirmation, project opening, and logout.
• Startup failures are visible — A preload failure now produces a clear fatal startup message instead of leaving an inert application window.
• Broken packages are release-blocked — Tests exercise the real sandbox bridge, production renderer initialization, required IPC controls, logout confirmation, and a packaged cold start before publication.

Clearer HogCode progress and safer model switching

Long HogCode turns now stay informative without flooding the terminal, while PorkiCoder keeps chat-model choices separate from the agent runtime that executes a session.

• Live terminal context — Interactive HogCode prompts show the current project, elapsed time, and a short activity phase while work is in progress. The status clears cleanly before streamed output, keeps non-interactive output byte-for-byte unchanged, and avoids duplicate state during reconnects.
• Confirmed model transitions — Chat and Agent Mode share one model catalog, serialize rapid model changes, validate lane compatibility before changing the backend, and block Send until the selected model is confirmed. Failed changes roll the controls back instead of leaving the UI and runtime out of sync.
• Visible stale-preference recovery — Removed, unknown, or mode-incompatible saved choices fall back in memory with a visible notice. PorkiCoder preserves the stored value until you explicitly confirm a replacement.
• Truthful agent launch labels — New Agent Session now says that it launches the legacy OpenCode runtime. Model names no longer double as runtime identities.
• HogCode fork groundwork — The downstream fork and a fail-closed, hash-attested sidecar-loader spike are now established for development. The forked engine is not packaged or enabled in 2.14.0; New Agent Session still launches the existing OpenCode runtime.

One PorkiCoder sign-in, one continuous HogCode conversation

HogCode terminals now inherit the account already signed into PorkiCoder. There is no second device login and no Keychain password prompt on every turn. Ordinary prompts stay in one active session until you choose to start or resume another.

• Desktop-native authentication — Electron keeps the account credential in the app and gives each terminal a short-lived, provider/model/session/run-bound capability through an authenticated loopback bridge. HogCode never receives the raw account token or PorkiCoder's provider key.
• Continuous interactive sessions — The first prompt creates a durable session and later prompts resume it automatically. Use /new for a clean conversation or /resume <session-id> to switch explicitly.
• Quieter chat output — Interactive mode removes repeated lifecycle and session banners while preserving assistant text, tool activity, retries, and actionable errors.
• Account-safe lifecycle — Signing out or changing accounts revokes terminal capabilities and closes affected terminals; same-account token refreshes continue without disrupting the conversation.
• Standalone behavior remains secure — Outside PorkiCoder's integrated terminal, HogCode retains its own login flow and native credential-store protections, with credentials cached only for that CLI process.

HogCode sign-in works inside the interactive shell

When a signed-out prompt says to run hogcode login, you can now enter that exact command at the existing hogcode> prompt. It starts the real browser-assisted device flow instead of treating the command as another authenticated coding prompt.

• New /login shell command — Interactive help now exposes a native sign-in command alongside sessions, models, doctor, and usage.
• Copy-paste recovery works — The exact hogcode login instruction printed on authentication failures is also accepted inside the shell.
• Same hardened authentication path — Both forms route through HogCode's existing cancellable device login, secure credential store, and normal reprompt behavior.

Paid agent workflows require your explicit approval

full-hog-mode, feat-pig, fix-bugs, and big-deployment are now manual-only. A normal request to implement, review, fix, ship, or deploy no longer authorizes an agent to select one of these automation workflows.

• Native protection on every terminal surface — Claude Code receives user-invocable-only skill metadata, Codex disables implicit invocation, interactive opencode asks before loading these skills and headless opencode denies them, and HogCode carries the same exact-name policy.
• Separate approval before metered calls — Invoking a skill does not authorize PorkiConsult. Every paid consult_*, fanout_run, or model-backed fanout_judge request must carry explicit current-run consent for the named model or operation.
• Blocked before provider dispatch — Missing consent is rejected at the shared MCP boundary and in opencode's generated native consult tools, before a provider request is made.
• Managed upgrades stay consistent — PorkiCoder refreshes its managed copies for Claude Code, Codex, Agent Skills, and opencode while preserving user-owned skill directories.

Managed Kimi streaming compatibility hotfix

HogCode now supports Baseten's cumulative usage snapshots on Kimi K2.7 streaming chunks. Every token counter must remain nondecreasing, and durable billing uses the final validated snapshot; malformed, decreasing, incomplete, or unterminated streams still fail closed.

Supabase login compatibility hotfix

HogCode now accepts Supabase's production refresh-token length across device approval, secure storage, rotation, and capability exchange while retaining strict character and maximum-size validation.

HogCode's managed coding agent is connected

Run hogcode login, approve the short device code, and send a prompt from the persistent shell or hogcode -p. The first production slice uses managed Kimi K2.7 Code with read-only project search and file inspection.

• Durable prompt and resume — Prompt turns, provider-native state, tool results, exact usage, account identity, and resume boundaries survive restarts without storing provider or account credentials in session logs.
• One live logical request, at most one provider execution — Atomic admission, deterministic IDs, exact transport replay, strict terminal/usage validation, and background reconciliation prevent double execution or double settlement while that request remains active. Resuming the CLI after a process restart starts a new logical request.
• Disconnect-safe streaming — Closing a terminal detaches delivery while the bounded server worker finishes validation and settlement. An active same-invocation transport retry can receive the full durable response; a process restart cannot yet recover an undelivered cached response.
• Fail-closed security — Capability tokens are provider/model/session/run bound; approval and filesystem policy remain centralized; malformed streams, credential reflection, path escape, and unverified accounts are rejected.
• Honest scope — The managed route exposes only Read, Glob, and Grep. Shell/file mutation, explicit BYO execution, and finite local budgets are not enabled in this slice.

HogCode starts with one command

Open a new PorkiCoder terminal and run hogcode. PorkiCoder places a private app-owned launcher first on that terminal's PATH and invokes the exact bundled CLI, so there is no global npm install, system Node dependency, or shell-profile edit.

• Persistent interactive shell — Bare hogcode opens a hogcode> prompt. Use /help, /sessions, /models, /doctor, /usage, and /exit.
• Private and self-repairing — The launcher is app-scoped, installed atomically in PorkiCoder's private user-data directory, and guarded against symlink or hardlink replacement. It does not modify the global PATH or appear in unrelated external terminals.
• Script-safe behavior — Non-interactive no-argument invocation prints usage and exits cleanly, while local diagnostic and session commands remain deterministic.
• Explicit preview boundary — This release includes the bundled local CLI surface. Provider-backed prompts, login, and resume report that they are unavailable until the production runner and managed services are enabled; HogCode never silently substitutes a fake provider.

Kimi K3 joins PorkiConsult and worktree fan-out

consult_kimi3 is now available to Claude Code, Codex, and opencode through PorkiCoder's bundled MCP server. Kimi K3 can also run as a fan-out worker or evaluator, with its million-token context window, maximum reasoning, full tool-call replay, and up to 131,072 completion tokens.

Fresh installs work without a personal Kimi key

Signed-in installs route Kimi K3 through PorkiCoder's authenticated server proxy and shared consult quota, so the provider credential never ships in the app or terminal environment. Power users can still add a Kimi Platform key in Settings for direct BYOK fallback.

Fan-outs stay small and stop on time

Fan-out now defaults to two targeted candidates, limits rate-sensitive GLM/Kimi concurrency, runs Kimi K3 serially, and hard-stops active or queued candidate execution after five minutes. Candidates that already completed or failed keep their terminal result instead of being rewritten as stopped.

Quota, metering, and release safety hardened

K3 consult spend is included in combined monthly quota and owner-spend checks, CRLF-formatted provider streams meter correctly, all Kimi Platform key aliases are scrubbed from child processes, and the macOS release stays draft until notarization, stapling, Gatekeeper, and signature verification succeed.

GLM-5.2 follows Baseten's current reasoning API

GLM-5.2 chat, Agent Mode, and consult_glm52 now send Baseten's top-level reasoning_effort: "max" instead of the older template-level thinking flag that could conflict with Baseten-side proxy defaults.

Shared Baseten agent routing has a clearer name

The former Kimi-named agent orchestrator is now the Baseten agent orchestrator because it routes Kimi K2.6, Kimi K2.7 Code, and GLM-5.2 through the same OpenAI-compatible adapter.

Agent resilience checks stay in place

The Kimi/GLM proxy retry coverage now targets the renamed Baseten adapter and continues to guard pre-stream auth refresh, no-retry mid-stream behavior, and metadata-only SSE recovery.

Kimi and GLM agent runs refresh expired PorkiCoder sessions

Long-running Kimi K2.7 Code and GLM-5.2 agent sessions now fetch a live PorkiCoder access token for each streaming request. If the server rejects a request before any response-bearing stream event, PorkiCoder force-refreshes the session and retries once.

Safer retry guard for streamed agent output

The retry path is blocked after content, tool-call, role, or usage frames begin, preventing duplicate partial agent work. Metadata-only stream frames can still retry, which keeps harmless preambles from hiding a recoverable auth refresh.

Agent resilience coverage

The resilience test suite now covers pre-stream 401 refresh, mid-stream no-retry behavior, role-only stream starts, and metadata-only SSE recovery for the Kimi/GLM proxy path.

MCP tools are preloaded across Claude Code, Codex, and opencode

PorkiCoder now registers its bundled porkicoder-consult MCP server for all three terminal agent surfaces on launch. Claude Code, Codex, and opencode get the same consult, copy-card, and worktree fan-out toolset without hand-editing MCP config files.

Fresh-install skills cover current and legacy Codex locations

Bundled workflow skills now install to the shared Agent Skills location as well as Claude Code, legacy Codex, and opencode skill roots. User-owned skill folders remain untouched; only PorkiCoder-managed copies are refreshed.

Global fan-out and copy-card credentials

The shared token credential now carries render and fan-out bridge capabilities, so globally registered MCP sessions can use the same PorkiCoder-backed tools that embedded terminal sessions already had.

Fresh installs include the core terminal skills

PorkiCoder now ships big-deployment, full-hog-mode, feat-pig, and fix-bugs as bundled skills. On launch, the app installs managed copies into Claude Code, Codex, and opencode skill directories while preserving any user-owned skill folders already in place.

Full-hog mode now uses the current review bench

The full-hog workflow now routes architecture and hard-design consults to GLM-5.2, visual and spatial UI work to Gemini, and bug finding/review to GLM-5.2 plus Kimi K2.7 Code in parallel through PorkiCoder fan-out, with the agent's own code review as the third gate.

Terminal-agent compatibility is wired in

The bundled skills are ready for Claude Code, Codex, and opencode terminals. opencode gets the bundled skill path directly plus terminal slash-command adapters, and Claude-style fan-out tool names are mapped to PorkiCoder's native MCP fan-out tools where needed.

Fan-out can checkpoint dirty worktrees before branching

Terminal fan-out now creates a visible local checkpoint commit when the source worktree has uncommitted changes, then launches candidates from that clean base instead of stopping the workflow.

The checkpoint path refuses likely secrets, detached HEADs, in-progress Git operations, and dirty submodules by default. If checkpoint setup fails, PorkiCoder restores the original index and HEAD where it can and reports the checkpoint range.

Applied winners clean up candidate worktrees automatically

When a winner is applied, loser worktrees are discarded by default after patch snapshots are saved, keeping .porkicoder-worktrees from growing indefinitely. Pass discardLosers:false when you want to keep candidates for inspection.

Claude Code and Codex consults recover their PorkiCoder session

The bundled consult MCP server now keeps the shared token-bridge credential file alive while PorkiCoder is running, so GLM-5.2, Kimi K2.7 Code, Gemini, and GPT-5.5 consult tools can continue using the authenticated PorkiCoder proxy from long-running Claude Code and Codex sessions.

Safer multi-instance cleanup

When dev and installed PorkiCoder instances overlap, an older instance no longer removes the token-bridge credentials written by the active one. The credential file is ownership-checked before deletion and automatically repaired if it disappears.

Worktree fan-out runs multiple agent candidates in parallel

PorkiCoder-managed terminals now expose a bundled fan-out workflow for Claude Code, Codex, and opencode. One task prompt can create 2-5 isolated git worktrees, assign each candidate its own branch and model run, and keep the source worktree untouched until a winner is applied.

Judge, apply, and cleanup tools keep the source branch in control

The new fan-out MCP tools can list runs, poll status, inspect candidate diffs, open a candidate workspace, stop active workers, ask an evaluator to recommend a winner, apply the winning patch as unstaged source changes, and discard losing worktrees after saving patch snapshots.

Mixed-model rotation and completion detection got safer

Fan-out runs default to a mixed GLM-5.2, Kimi K2.7 Code, and Codex high-effort rotation, with optional model mixes, shared budgets, staggered launches, and friendly selectors like latest, c1, and winner. This release also tightens completion detection and removes stale fan-out UI/dependency code.

Codex terminal sessions recover from alternate-screen redraw stalls

Long-running Codex sessions in PorkiCoder's terminal could land on a blank alternate-screen view after a resize, tab switch, or fullscreen redraw. The terminal now treats alternate-screen apps separately from normal scrollback, refits after layout settles, refreshes the viewport after hidden-tab restores, and suppresses stale "new output" state while a full-screen TUI is active.

Mouse wheel scrolling works inside Codex recovery views

When an alternate-screen program like Codex is not using mouse tracking, PorkiCoder now translates wheel gestures into the same up/down cursor input that Codex already understands. The "New Output" action also jumps back to live output with a refit and repaint instead of no-oping against the alternate buffer.

GLM-5.2 joins chat, Agent Mode, opencode, and consults

GLM-5.2 is now selectable in PorkiCoder chat and Agent Mode, available through the ChatView agent picker, and exposed in opencode's PorkiCoder provider as a server-funded model. Signed-in users route through PorkiCoder's Baseten-backed proxy with thinking enabled, while BYOK terminals receive the same Baseten key wiring used by the Kimi models.

consult_glm52 lands in the bundled MCP server

Claude Code, Codex, and opencode now get a consult_glm52 tool beside the Kimi, Gemini, and GPT-5.5 consult tools. It streams from Baseten's OpenAI-compatible GLM-5.2 endpoint, includes final usage metering, and spends from the same bundled consult quota as the other server-backed consults.

Long-context guardrails and image handling updated

GLM-5.2 gets a million-token compaction profile for long agent sessions, model pricing is wired through local and server metering, and image attachments are blocked for text-only GLM turns instead of being sent upstream to a model that cannot use them.

Direct Baseten keys work with the current Model API auth scheme

Kimi K2.6 and Kimi K2.7 direct fallback calls now use Baseten's documented OpenAI-compatible Bearer authorization header. Signed-in users still route through PorkiCoder's proxy, while BYOK users with a Baseten key keep working when the proxy is unavailable or quota fallback is needed.

K2.7 fast consults no longer carry a stale highspeed model id

The consult_kimi27_fast compatibility tool now labels and bills itself as the fast path while sending the same Baseten-hosted moonshotai/Kimi-K2.7-Code model id as the regular K2.7 path. That removes a misleading legacy highspeed slug without breaking existing tool names.

Kimi K2.7 Code now runs through Baseten end to end

Kimi K2.7 Code chat, Agent Mode, opencode, Claude Code, and Codex consults now route through PorkiCoder's Baseten-backed proxy instead of the older Moonshot/Kimi Platform path. The K2.7 fast consult alias remains available for compatibility and now rides the same Baseten model route.

Streaming and queue guards reduce 504s and rate-limit spikes

K2.7 proxy calls now stream upstream by default, carry the timeout across the full response body, validate completed streams, honor Retry-After, and pass through a local request/token/concurrency queue before touching Baseten. That keeps long coding consults from sitting behind a synchronous gateway timeout and smooths bursty traffic before it becomes a provider-side 429.

Kimi K2.7 fast consults join the roster

Claude Code, Codex, and opencode can now call consult_kimi27_fast for a fast Kimi K2.7 Code consult path. The path streams Baseten-backed responses to avoid long synchronous gateway timeouts, retries transient failures, and falls back to the existing Kimi K2.6/Baseten consult path if K2.7 is unavailable.

Terminal tab names refresh every third prompt

Auto-generated terminal labels now update after every third real command or agent prompt instead of freezing after the first useful command. Manual renames and preset agent tabs remain protected, while routine AI labels keep following the work as a session changes direction.

Fresh-install Codex consults stay batteries included

Codex now gets the full PorkiCoder consult proxy wiring in its auto-registered MCP config. On a new laptop, signed-in users can ask consult_kimi, consult_kimi27, consult_gemini, or consult_gpt5 without being sent to make a personal provider API key.

Safer live auth for MCP consult tools

The bundled MCP server now fetches a fresh PorkiCoder session token through a local token bridge for every consult. Global Claude and Codex registrations point at a private 0600 credential file instead of carrying a raw session token, and stale managed auth entries are scrubbed during auto-registration.

Codex gets PorkiCoder consult tools automatically

The bundled porkicoder-consult MCP server now registers itself in Codex's user config as well as Claude Code's. Launch Codex from a PorkiCoder terminal and it can discover the same Kimi K2.7, Kimi K2.6, Gemini, and GPT-5.5 second-opinion tools without hand-editing ~/.codex/config.toml.

GPT-5.5 consult run tracking fixed

A database repair fixes GPT-5.5 consults that could create a background run, fail to register its response_id, and then cancel with "Could not register the run; it was cancelled to avoid untracked cost." The tracking table now accepts the intended unmetered worklist state.

Kimi K2.7 Code is now selectable

Pick Kimi K2.7 Code from the main model selector to use Kimi's newest code-focused thinking model in Chat or Agent Mode. PorkiCoder routes it through the authenticated Baseten-backed server proxy, so signed-in users can try it without configuring a separate Baseten key.

Claude Code gets consult_kimi27

The bundled porkicoder-consult MCP server now exposes consult_kimi27 beside consult_kimi and consult_gemini. Claude can ask Kimi K2.7 Code for a code-focused second opinion while K2.6 remains available for faster Baseten-backed consults.

opencode can choose K2.7 too

opencode's PorkiCoder provider now includes Kimi K2.7 Code alongside Kimi K2.6, Gemini 3.5 Flash, Gemini 3.1 Pro, Grok 4.3, and GPT-5.5. Use K2.6 as the fast default, then switch to K2.7 when a coding turn needs the newest Kimi reasoning path.

opencode spends from your credits

The server-paid opencode agent proxy no longer stops Full Hog and other credit-plan users at a separate hidden monthly agent cap. Agent turns now reserve against the same visible PorkiCoder credit balance shown in Settings and settle the real model cost after the turn completes.

Clearer credit exhaustion errors

When an agent turn cannot be reserved, the backend now reports the remaining credit balance and the estimated reserve needed for that turn, instead of saying a separate monthly agent quota was exhausted while credits were still available.

OpenCode gets a terminal-first launch path

The terminal toolbar now has a dedicated OpenCode button, and Cmd+Shift+O opens a new named opencode tab and starts the OpenCode TUI immediately. The existing Claude shortcut stays unchanged.

OpenCode prompts name terminal tabs correctly

PorkiCoder now treats opencode like the other interactive coding agents for terminal tab naming. A bare launch no longer burns the tab name on "Launch OpenCode"; the first real prompt inside OpenCode becomes the naming basis instead.

Kimi consults ride through Baseten rate limits

Kimi K2.6 calls in PorkiCoder and the bundled porkicoder-consult MCP server now retry transient Baseten 429/5xx/network failures with bounded backoff and Retry-After support. PorkiCoder proxy failures still fall back quickly to a user's direct Baseten key instead of waiting through a proxy retry loop.

opencode retries through Kimi rate-limit spikes

The opencode proxy now retries transient 429/5xx failures with bounded backoff, honors Retry-After, and tears down upstream streams immediately when you cancel a run. Short bursts of Baseten Kimi 2.6 rate limiting should now recover instead of surfacing as an opencode turn failure.

Claude skills load cleanly in opencode

PorkiCoder now mirrors Claude skill folders into a temporary OpenCode-compatible shape when their frontmatter is valid for Claude but too loose for opencode's stricter loader. Your original ~/.claude/skills and project .claude/skills folders are left untouched.

Less hidden Kimi traffic

opencode's lightweight title, summary, and compaction work now uses PorkiCoder's Gemini alias instead of the default Kimi model, keeping those background calls out of the same Kimi rate-limit window as your main coding turn.

opencode in the terminal — Internal Server Error fixed

Running opencode in a PorkiCoder terminal could fail with an "Internal Server Error" once a conversation carried real code context. The server-paid agent proxy was capping request bodies at 100 KB — so the first small turn worked, but any context-laden follow-up was rejected. The agent (and consult) routes now honor their full body limits, so large multi-turn opencode sessions go through. Oversized requests also now return an honest "payload too large" instead of a generic 500.

Native matrix theme for the opencode TUI

When you launch opencode in PorkiCoder's terminal, its interface now wears a green-on-black matrix theme that matches PorkiCoder's own terminal — so it reads as part of PorkiCoder rather than a foreign third-party CLI.

Agent spend ceiling — cap what a run can cost

New in Settings: an Agent spend ceiling ($ per run). Set a dollar amount and any agent run hard-stops the moment its model spend reaches it, with a clear notice in the chat — no more open-ended bills from a runaway loop. Sub-agent spend counts against the same ceiling. Leave it blank for no limit. (Claude runs are subscription-billed, so the ceiling doesn't apply there.)

Crash-proof agent tool calls

• A malformed tool call can no longer take down the app — previously a model emitting a Bash call with missing arguments could crash PorkiCoder entirely, killing the run and any unsaved work. Bad calls now come back to the model as a normal tool error it can correct and retry.
• Tool-argument hardening across all providers — non-object tool arguments (a quirk some models occasionally produce) are normalized before execution instead of erroring the whole run mid-task.
• Cost-tracking resilience — a single unpriceable turn can no longer silently disable the spend ceiling for the rest of the run.

opencode model lineup focused to five

The Claude entries have been removed from opencode's PorkiCoder provider — for Claude, use Claude Code (or PorkiCoder's built-in Claude agent mode), which drives it natively with prompt caching. opencode's server-funded lineup is now Kimi K2.6 (default), Gemini 3.5 Flash, Gemini 3.1 Pro, Grok 4.3, and GPT‑5.5. If you had a Claude model selected in opencode, it falls back to Kimi automatically.

New agent backend: opencode, batteries included

PorkiCoder can now drive the open-source opencode agent as a second agent backend — pick "opencode" in the model selector and it just works. No API key required: the model runs through PorkiCoder's own server, separate from your consult allowance. Credit-plan users spend from their visible PorkiCoder credits; users outside the credit system keep a small monthly safety quota. Already use opencode standalone? Your own opencode auth login setup keeps working as a fallback.

Seven models, one picker

The PorkiCoder provider inside opencode now carries the full model lineup: Kimi K2.6 (default), Gemini 3.5 Flash, Gemini 3.1 Pro, Claude Opus 4.8, Claude Sonnet 4.6, Grok 4.3, and GPT‑5.5 — switch between them in opencode's model picker, in the embedded terminal or in agent chat, and your pick is respected.

• Your diff review still rules — every file write opencode attempts routes through PorkiCoder's accept/reject diff modal before it touches disk, exactly like the built-in agents.
• Live progress & cancel — opencode runs stream into the same progress cards, and Stop aborts the run server-side.
• Session resume — opencode conversations map to PorkiCoder threads, so returning to a thread continues the same agent session.
• Works in embedded terminals too — running opencode in a PorkiCoder terminal gets the same server-funded model catalog automatically.

Agents that finish the job — no more stalls, dropped runs, or rate-limit deaths

Agent runs on Kimi, GPT‑5.5, Grok, and Gemini are dramatically more reliable on real coding tasks. Previously a stalled connection could hang a run indefinitely, a momentary provider hiccup mid-response could silently end a run with no output, and bursty rate limits (especially on Kimi) could kill a run outright. Now runs ride through all of it — a stall watchdog unwedges frozen streams, mid-response errors are caught and retried instead of swallowed, and the retry budget survives a full rate-limit window. A glitched turn is re-rolled rather than ending the task.

Stop actually stops — and never leaves processes behind

Hitting Stop while an agent is running a command now cancels the command immediately and kills the whole process tree it spawned — no more builds or dev servers left running in the background holding their ports after you've stopped the agent. Quitting the app mid-run cleans them up too.

Faster, cheaper agent turns

PorkiCoder now preserves each provider's prompt cache across the turns of a run instead of quietly breaking it every turn — so repeated context is re-billed at the cached rate (5–10× cheaper) and turns start faster. On credit plans this directly stretches your balance further.

• Parallel sub-agents — when an agent fans a multi-part task out to sub-agents, they now run concurrently instead of one-at-a-time, so "investigate these four modules" finishes in a fraction of the wall-clock.
• Run a server and keep working — agents handle long-running output far better, and long command output keeps the part that matters (test failures print last) instead of getting cut off at the top.
• Smarter code search — the agent's file-search tool is more capable (case-insensitive, file-list and count modes) and now works reliably on every machine.

New: Terminal-first opens straight into a fullscreen terminal

Set PorkiCoder to terminal-first and it now opens directly into a full-window terminal the moment the app launches — no more opening the terminal and then clicking fullscreen to get there. Run claude (or anything else) right away. Flip back to the full IDE — file tree, editor, and chat — whenever you want with ⌘⇧. or the in-terminal fullscreen button, and the workspace is exactly as you left it.

• Fullscreen on the first frame — the terminal paints full-window immediately and sizes itself correctly, so the shell prompt no longer wraps inside a cramped column the way it could before.
• One shortcut to switch — ⌘⇧. (or Ctrl⇧.) toggles between the fullscreen terminal and the classic IDE layout, and the in-terminal fullscreen button stays in sync.

New: Plans & prepaid credits

PorkiCoder can now run on developer-provided model keys, metered against a prepaid credit balance — so you don't need your own API keys to use every model. Bringing your own API key stays free; credits are only spent when you use the developer-provided keys.

• Two plans — Basic Pig ($20/mo → 10 credits) and Full Hog ($200/mo → 150 credits). 1 credit = $1 of developer-key model spend.
• One-off top-ups — add $25 / $50 / $100 of credits any time; top-up credits never expire.
• See it in Settings → Credits — your balance, plan, and top-up buttons live in a new Credits panel.

Changed: Claude in agent mode now runs on the API

Claude agent runs now use the Anthropic API and are metered like every other model (against your own Claude API key, or against credits when using developer-provided keys). The integrated terminal still uses your own Claude Code subscription — when you type claude there, it's your session, untouched.

New: Copyable content cards in the terminal

Agents can surface a one-click copyable card in the terminal (via the render_copyable tool) for snippets, commands, and values you'll want to grab — no more hunting through scrollback to select text.

Fixed: Terminal tab naming & zoom

Terminal tabs now name themselves correctly even when the command is launched with flags, and a row-height misalignment when zooming the terminal is fixed. The play-button preview also detects a dev server's port more reliably.

Fixed: Attached-image thumbnails now display

When you attached an image to chat — by paperclip, paste, or drag-and-drop — the preview showed a broken-image icon instead of the picture. The image itself always reached the model correctly; only the on-screen preview was broken. Thumbnails now render properly in the input row, in the sent message, and in the full-size image viewer.

Fixed: "Consult another model" no longer times out on deep questions

Consulting GPT‑5.5 on a large, high-effort question could fail after a few minutes with a misleading "Could not reach OpenAI — check connectivity" error, even when your connection was fine — and it discarded reasoning you'd already paid for. GPT‑5.5 consults now run as a background job that waits for the full answer, timeouts are reported honestly instead of blaming connectivity, and long Kimi & Gemini consults get more headroom too.

Agent Mode That Survives Long Sessions — Automatic Context Compaction

Agent mode used to lose its footing on long, tool-heavy runs — once the conversation outgrew the model's context window, the model ended up reasoning over a truncated view of its own history, so it would repeat work or fail to finish. Now PorkiCoder manages that for you. It watches how full the window is getting and, before it overflows, summarizes the older part of the conversation into a dense recap — preserving the goal, the files it has read, and what it has done — while dropping the bulk. The agent keeps the thread and keeps working.

• Tuned per model, not one-size-fits-all — each model compacts at the point that fits its own context window, so long-context models ride their full window while smaller ones compact early. Works across Kimi K2.6, GPT‑5.5, Grok, and Gemini.
• Faithful summaries, not shredded history — older turns are recapped by the model itself into one dense note (decisions, files read, findings, task state), instead of the old approach that chopped tool results into stubs the agent could no longer use.
• Survives restarts & counts its cost — compacted history persists across app restarts, and the summary call's tokens are billed transparently in your usage.

Fixed: Agent Activity Feed Cascading During Rapid Tool Calls

When a model fired many tools in quick succession (most noticeable with Kimi, which is fast and tool-hungry), the activity-feed cards could collapse and overlap into an unreadable stack. The feed now scrolls cleanly no matter how fast the tools come.

Controls always visible

The chat header used to hide a gear that toggled a stripped-down "Advanced Mode," locking you to one model and hiding the controls. That toggle is gone — the model picker, Chat/Agent switch, and effort bar are now always available, so the tools you need are never tucked away behind a confusing menu.

• No more hidden controls — Removed the Advanced Mode toggle; the model selector, Chat/Agent switch, and thinking-effort bar are always shown.
• Steadier agent runs — When a tool call comes back with malformed arguments, the agent now surfaces the error to the model to retry instead of silently running the tool with empty input.

Refreshed Chat mode look

A visual polish pass on Chat mode. Where Agent mode reads as a live green "execution terminal," Chat mode now has its own calm blue "quiet editor" theme — so a glance at the window tells you which lane you're in. AI replies also pick up a small per-message identity mark, and the Chat/Agent switcher got a cleaner, more cohesive look.

• Per-mode theming — Chat mode is themed around the app's blue accent (canvas, message framing, code blocks, input, effort bar, and scrollbar), a distinct counterpart to Agent mode's green HUD.
• Clearer AI identity — Chat-lane responses now lead with a small cyberpig avatar that takes on the active mode's accent, giving each reply an identity without a repeated name label.
• Restyled mode switcher — The Chat/Agent toggle is now a single, unified raised pill; only the accent (text, border, and icon glow) changes per mode, instead of two mismatched button styles.

PorkiCoder 2.0 — Agent Everywhere 🚀

This is the big one. Agent Mode is now the default, and for the first time it runs on every model PorkiCoder supports — Claude, Gemini, Kimi, Grok, and the brand-new GPT 5.5. Pick any provider and get the same autonomous, tool-using agent with human-reviewed file writes. We also retired the old HOG and Normie modes in favor of a single, dead-simple Chat lane for quick questions — two modes instead of three, and no more guessing which one to use. Under the hood, 2.0 sheds roughly 3,250 lines of legacy code, making the whole app leaner and easier to evolve.

• Agent Mode on all five providers — Grok and GPT join Claude, Gemini, and Kimi with native agent loops (Read, Glob, Grep, Bash, WebSearch, WebFetch, sub-Agent). Whatever model you prefer, Agent Mode now just works — with the same accept/reject diff review before anything touches disk.
• GPT 5.5 — OpenAI's latest, wired in through the Responses API with streaming reasoning, replacing the previous Codex model in the selector.
• Agent is the default — New conversations start in Agent Mode, so you're set up for real work from the first message.
• Modes simplified to Chat + Agent — HOG and Normie are gone. Chat is a fast, no-tools Q&A lane (code blocks with a Copy button); Agent handles anything that needs to read or change files. To apply code, switch to Agent and it lands through a reviewed diff.
• Kimi K2.6 is the new default model — Fast, capable, and a great everyday driver across both modes.
• A leaner codebase — The entire legacy code-apply pipeline was removed (~3,250 lines), consolidating all file edits onto Agent Mode's reviewed-diff path. Fewer moving parts, fewer edge cases.

Smarter Agent Mode — Sessions That Survive Restarts, Image Input, Spend Limits, and Claude Task Tracking

1.14.0 is a big upgrade to agent mode. Your agent conversations now persist across restarts, Gemini and Kimi can read image attachments in agent mode, you can set an optional per-run spend ceiling, and Claude agent mode gains task tracking and the ability to ask you a clarifying question mid-run. The activity card also got more useful — long-running commands stream their output live, and parallel tool calls collapse into one tidy card.

• Agent sessions persist across restarts — Gemini/Kimi conversation history (and Claude's resume link) are now saved to disk, so quitting and relaunching no longer loses your agent thread. Bounded and self-pruning, with each thread schema-versioned so an app update can't replay a stale conversation.
• Image attachments in agent mode (Gemini & Kimi) — Attach a screenshot or diagram and ask an agent about it, just like in normal chat. (Claude agent mode stays text-only for now and tells you so.)
• Optional per-run spend limit — Set a dollar ceiling and a runaway agent run hard-stops once it's reached, with a clear "Stopped · budget" note instead of burning unbounded spend. Off by default.
• Claude agent mode: task tracking + clarifying questions — Claude can now create and update a task list and ask you a question when it hits genuine ambiguity — the same tools Gemini and Kimi already had. Pressing Stop now also dismisses an open question prompt instead of leaving it stranded.
• Live command output + cleaner parallel tools — A long npm test or build now streams its output into the agent's activity card as it runs, so it never looks frozen. When the agent fires several read-only tools at once, they group under a single collapsible "Running N tools in parallel" card.
• Heads-up when a folder won't live-update — Opening a system directory (one PorkiCoder can't safely watch) now shows a brief notice, so an unwatched tree doesn't silently look broken.

Smarter Terminal Tab Naming — Skips Slash Commands and Startup Prompts

When you launch Claude Code in a terminal tab, PorkiCoder auto-names the tab from your first real question. But the meta-input you type before that question was being grabbed as the name instead — a slash command like /effort or /model, or the trust-folder confirmation you press right after launching — leaving tabs labelled "Ultracode", "Unknown Command", or "One". 1.13.2 teaches the auto-namer to skip those and wait for the prompt that actually describes your session.

• Slash commands no longer hijack the tab name — Lines starting with a slash (/effort, /model, /ultracode, or any unrecognized /command) are skipped as a naming basis — in both normal and full-screen-TUI keypad modes — so your first actual question names the tab.
• Startup confirmations are ignored — The trust-folder prompt answer and quick y/n/menu selections pressed right after launching an agent no longer become the tab name, so you won't end up with a tab called "One" or "Yes".

Terminal Tune-Up — Emoji Alignment Returns (Safely), Plus Zoom, Scroll & Readability Fixes

Back in 1.12.0 we rolled back the emoji-width fix to keep terminals opening reliably, and promised a safer version would return. This is it. 1.13.1 brings wide-character and emoji column alignment back — this time guarded so it can never block the terminal from opening — and clears out a batch of long-standing terminal annoyances around zooming, scrolling, and readability, all while keeping the classic matrix green-on-black look intact.

• Emoji & wide-character alignment is back — safely — Unicode 11 width support returns so emoji, CJK, and other wide glyphs occupy the correct two cells and stop shearing your tables. It's now wrapped so that if the width data ever fails to load, the terminal falls back to normal widths instead of failing to open — the exact problem that forced the 1.12.0 rollback.
• Zoom no longer double-zooms or breaks rendering — Pressing Cmd +/Cmd -/Cmd 0 in the terminal now resizes only the terminal font. Previously it also scaled the entire app at the same time, which threw off the terminal's character grid and garbled the display.
• In-terminal pickers are readable again — Tools running inside the terminal (like the Claude Code CLI's @-file picker) were rendering the selected row as white-on-white because the terminal under-reported its color support. PorkiCoder now advertises full 256-color and true-color, so highlighted selections are properly visible.
• Smoother scrolling — The mouse wheel now reliably reaches the very bottom of the output, and switching between terminal tabs no longer leaves the scroll "stuck" until you press a key.
• Easier on the eyes — Dim text (prompts, comments, faint git hashes) has been lifted out of near-invisibility and glyphs render a touch crisper — without changing the signature matrix-green color.

Claude Opus 4.8 — Now With the XHigh Effort Tier

Anthropic shipped Claude Opus 4.8, and PorkiCoder now runs it everywhere Opus 4.7 used to — in both regular chat and Agent mode. Opus 4.8 keeps the same pricing as 4.7 ($5 in / $25 out per million tokens) and the same 1M-token context window, so the upgrade costs nothing extra. Alongside the model swap, this release surfaces Anthropic's new XHigh effort level on the effort bar: a tier that sits between High and Max, tuned as the recommended starting point for long-horizon coding and agentic runs, with Max still reserved for the most demanding frontier problems.

• Opus 4.8 replaces Opus 4.7 — The model picker now lists Opus 4.8 (claude-opus-4-8), wired end-to-end through chat, Agent mode, pricing, and usage tracking. If you had Opus 4.7 selected, PorkiCoder migrates you to 4.8 automatically — no blank dropdown, nothing to reselect.
• New XHigh effort tier — The effort bar gains an XHi step between High and Max (the full ladder is Low → Med → High → XHi → Max). XHigh is Anthropic's suggested default for extended coding and agentic sessions, while Max remains the absolute ceiling. The new tier appears only for Opus 4.8 — every other model is unchanged.

Polished Agent Chat Layout — Bubble Padding, Table Styling, and Button Placement

A handful of chat-panel visual fixes that had piled up since the agent-mode redesign. In Agent mode the AI response is wrapped in a subtle bubble, but its first heading would sit flush against the bubble's left edge with no internal padding — visually cramped. Markdown tables that the model produced rendered without any cell padding or borders, so file paths and descriptions ran into each other. And the delete/copy buttons on your own messages sat at the top-left corner, overlapping the first letter of whatever you'd typed. All three fixed in this patch.

• Agent-mode AI bubble breathes — Added 20px of interior left padding and 56px right padding to the AI message bubble in Agent mode, so headings and paragraphs no longer touch the bubble border and never slide underneath the absolute-positioned action buttons.
• Markdown tables render correctly — Tables in AI responses now have proper cell padding, header backgrounds, row separators, rounded outer borders, and wrapped cell content. Long file paths and descriptions wrap inside their cells instead of overflowing the chat panel.
• Your message buttons moved off the text — The delete (✕) and copy buttons on user message bubbles now sit at the top-right corner with reserved padding, instead of overlapping the first word at top-left.

Terminals Open Reliably Again — Rolling Back the Emoji-Width Change

1.11.2 introduced a change to make emoji and wide characters line up correctly in terminal tables, and 1.11.3 was a follow-up to fix a startup problem that change caused. After further testing, that whole approach proved too unreliable, so 1.12.0 removes it entirely and returns the terminal to the proven setup from 1.11.1. Terminals now open consistently every time. The trade-off: tables containing emoji may once again drift a column — a cosmetic issue we'll revisit with a safer fix — but a terminal that always opens matters more.

• Reliable terminal startup — Removed the Unicode 11 width addon (added in 1.11.2) and the proposed-API flag (1.11.3) that together could leave the terminal failing to open. The terminal now initializes exactly as it did in the stable 1.11.1 release.
• Emoji column-alignment temporarily removed — The emoji/wide-character width tweak is gone for now, so emoji-heavy tables may drift a column as they did before 1.11.2. A safer version will return in a future release.

The Terminal Opens Again

On 1.11.2 the terminal could fail to open at all — you'd click into a terminal tab and get an empty panel. The cause was the very fix 1.11.2 shipped: switching the terminal to Unicode 11 width tables relies on an xterm capability that has to be explicitly turned on, and it wasn't. Activating the Unicode 11 addon threw an error partway through terminal setup — before the terminal was ever drawn — so the whole panel never appeared. 1.11.3 turns that capability on, so the emoji-alignment fix from 1.11.2 now genuinely works, and wraps the addon step so that even if it ever fails in the future the terminal still opens (just without the width tweak) instead of refusing to start.

• Terminal reliably opens — Enables the xterm proposed-API flag the Unicode 11 width addon requires, fixing the 1.11.2 regression where the terminal silently failed to initialize.
• Fail-safe Unicode activation — Activating the width tables can no longer block the terminal from opening; if it ever errors, the terminal falls back to default widths rather than not appearing.

Emoji and Wide Characters No Longer Garble Tables in the Terminal

If you ran a terminal program that printed emoji — a ✅ or ❌ in a status table, like the ones Claude Code draws — the columns to the right would drift out of alignment: a stray character would bleed into the previous cell and the row would wrap early with a leftover return glyph. The cause: PorkiCoder's terminal measured character widths against Unicode 6 tables from 2010, which count modern emoji as one column wide, while the programs printing them assume two. Every emoji on a line knocked the rest of the row half a cell out of step. 1.11.2 switches the terminal to Unicode 11 width tables, so emoji and other wide characters take the two columns the printing program expects — and tables line up exactly.

• Unicode 11 width tables — The terminal now activates xterm's Unicode 11 addon, matching the width math modern command-line tools use, so box-drawn tables, status lines, and progress output containing emoji render correctly aligned.

Terminal No Longer Prints Duplicate Output When You Resize

If you ran an inline terminal app like Claude Code and the terminal's width changed — resizing the window, dragging the chat/sidebar splitter, entering fullscreen — the same block of output could suddenly appear twice, often wrapped at two slightly different widths. The cause: terminal UIs that draw directly into the scroll history (rather than a separate full-screen buffer) re-render their current frame every time the terminal is resized, and the already-printed copy has scrolled into permanent history where it can't be erased. PorkiCoder was sending more resize signals than necessary during a single gesture, so a running app redrew — and re-printed — its output more than once. 1.11.1 collapses each resize gesture into a single settled resize, so the terminal redraws at most once and the duplicate blocks are gone.

• One resize signal per gesture — A burst of resize events (a window drag, a panel/sidebar animation, the fullscreen transition) now coalesces into a single trailing resize at the final settled size, instead of pushing intermediate widths that each triggered a redraw. The terminal still resizes the moment you stop; it just stops re-emitting the in-between sizes.
• Idempotent resizes — The main process now skips a terminal resize entirely when the dimensions haven't actually changed, so a redundant redraw signal never reaches a running terminal app — closing the last path that could double-print on a no-op resize.

PorkiCoder Now Updates Itself — Built-In Auto-Update, Plus a Flush-to-Bottom Terminal Scroll Fix

Until now, upgrading PorkiCoder meant coming back to this page and re-downloading the installer by hand. 1.11.0 ends that: the app now ships a built-in auto-updater that checks for new releases shortly after launch and every few hours, downloads them in the background, and shows a dismissible in-app banner with a Restart button when a new version is ready — no OS popups, no manual re-download. One catch, this release only: because 1.10.2 and earlier shipped without the updater, you'll need to grab 1.11.0 from the download button above this one time. Every release after 1.11.0 updates itself.

• Background auto-update from the signed release feed — Built on electron-updater reading PorkiCoder's notarized GitHub release feed. The app checks ~10 seconds after launch and then every ~4 hours, downloads available updates in the background, and stages them to apply on restart. Checks never block startup and fail silently when you're offline.
• In-app update banner — no OS notifications — A subtle, dismissible banner reports "Downloading update v…" with progress, then "Update v… ready" with a Restart button that relaunches straight into the new version. It matches PorkiCoder's existing in-app toasts and never blocks what you're doing.
• Settings → version display + manual "Check for updates" — Settings now shows the running version and a Check for updates button with inline status — Checking… / You're up to date / Downloading… / Restart to update — for when you don't want to wait for the next scheduled check.
• Notarized & stapled DMG for clean first installs — The macOS DMG is now notarized by Apple with the ticket stapled, so a fresh install opens without the Gatekeeper "unidentified developer" right-click-to-open workaround.
• Terminal: mouse-wheel scrolling lands flush at the bottom — Fixed a long-standing bug where wheel-scrolling down in the terminal could stick one row short of the bottom, leaving the last line clipped until you pressed a key. Wheeling down now snaps cleanly to the true bottom; scrolling up through scrollback is untouched.

Accurate Gemini Usage Accounting — Thinking Tokens Now Counted, Plus a Crash-Hardening Fix and Internal Cleanup

1.10.1 made Gemini 3.1 Pro batteries-included. 1.10.2 is a correctness follow-up. The headline fix: Gemini's "thinking" (reasoning) tokens are now counted in usage and cost. Google's API reports thoughtsTokenCount separately from the visible candidatesTokenCount, and both bill at the output rate — but PorkiCoder was only counting the visible tokens, so any thinking-enabled Gemini call (in-app chat and the consult_gemini tool) under-reported its real token usage, often by 5–10x on reasoning-heavy questions. Your Settings → Usage numbers and the combined Kimi + Gemini consult cap now reflect true spend.

• Gemini thinking tokens folded into output for billing — Both the in-app Gemini chat path and the MCP consult_gemini tool now add thoughtsTokenCount to the output-token count used for cost. The Settings usage table's "Output" column already documented that it includes thinking/reasoning tokens — now it actually does for Gemini. A defensive canary also logs a warning if Google's prompt + candidates + thoughts = total token invariant ever shifts, so a future API change can't silently break billing again.
• Main-process crash hardening (EPIPE) — Fixed an "Uncaught Exception: write EPIPE" that could surface if PorkiCoder's stdout/stderr was closed by a downstream reader (e.g. piping dev-mode logs through a tool that exits early). End users running the installed app were never affected — no pipe is involved — but the crash dialog was jarring for contributors. Two boot-time listeners now swallow EPIPE while still surfacing any other stdio error.
• Internal cleanup — Removed 11 unused electronAPI bridge methods from the preload layer (dead convenience wrappers with zero call sites) and dropped four orphaned Postgres functions from the backend — two left over from the Kimi-only consult era (superseded by the combined-cap RPCs in 1.10.1) and two from an old request-limit subsystem (superseded by the signup trigger and inline updates). No behavior change; just less surface area to carry forward.

Gemini 3.1 Pro Joins Kimi K2.6 On the House — Free Users Get $5/mo Included Across Both, Premium Bumps to $15/mo Combined

1.10.0 made consult_kimi batteries-included for Premium users — paste no Baseten key, just sign in and Kimi works. The other half of the consult duo, consult_gemini, still required a Google AI Studio key, and free users got a hard 402 the moment they tried the proxy. 1.10.1 finishes the story: Gemini 3.1 Pro now flows through PorkiCoder's own backend the same way Kimi does (no Google signup needed if you're signed into PorkiCoder), and the per-user monthly USD cap is now combined across both providers — $15/mo for Premium, $5/mo for Free. The free-tier gate that 1.10.0 left in place is gone; everyone gets a small included quota that falls back to BYOK when exhausted.

• New backend route POST /api/consult/gemini — Mirrors the Kimi proxy shape (premium-aware cap, aggregate circuit breaker, rate limit), but adapted for Google's generativelanguage.googleapis.com API. Different upstream auth (URL ?key=… instead of an Authorization header), different body (systemInstruction + contents + generationConfig instead of OpenAI messages), different usage shape (usageMetadata with promptTokenCount / candidatesTokenCount / cachedContentTokenCount). Pricing mirrors the client-side mcp-consult/pricing.js tiered rates — ≤200k input tokens uses low tier ($2/MTok input, $12/MTok output), >200k uses high tier ($4 / $18) — a single call always picks one tier.
• Per-user $15/mo (Premium) / $5/mo (Free) cap, combined across Kimi + Gemini — The old $15-Kimi-only cap is replaced, not stacked. A user spending $7 on Kimi consults + $4 on Gemini consults sees the next call to either provider hit the cap at $11/$15 — the math is summed across both model_key rollups via the new check_consult_quota RPC. Free users no longer get hard-stopped at the door; they get $5/mo of proxy access and fall back to BYOK after.
• Shared rate-limit and aggregate-budget state across both proxies — Both routes now import their gate logic from a new src/routes/_consultShared.js module. The 20-req/min/user rate limiter and the $500/mo global circuit-breaker now count both consult proxies together — alternating between providers does not double your headroom.
• MCP-consult providers/gemini.js ported to the hybrid proxy-first / BYOK-fallback pattern — Same shape providers/kimi.js shipped in 1.10.0. Reads GEMINI_PROXY_URL + PORKICODER_AUTH_TOKEN from the PTY env; on proxy 4xx (cap exhausted, premium required) transparently falls back to direct Google with the user's own GEMINI_API_KEY if one is configured in Settings. On proxy 5xx / network errors, same fallback so a backend hiccup doesn't take consult_gemini offline for BYOK users.
• PTY env injection adds GEMINI_PROXY_URL alongside the existing KIMI_PROXY_URL — src/main/index.js's terminal-spawn handler now sets both proxy URLs in the same if (accessToken) branch. One Supabase access token, two providers. Token TTL is still ~1 hour as before — a stale terminal session may need a fresh tab to re-authenticate, at which point both proxies activate again.
• Settings → Usage table shows friendly names for consult rollups — Added "Kimi K2.6 (consult)" and "Gemini 3.1 Pro (consult)" labels in MODEL_DISPLAY_NAMES. Proxy usage now appears as a labeled row in the monthly usage table alongside main-chat models, instead of showing the raw kimi-consult-proxy / gemini-consult-proxy key.
• Migration 0010 — combined-quota RPCs — check_consult_quota(user_id, cap_usd) and get_consult_aggregate_spend() widen the model_key filter from 'kimi-consult-proxy' (migration 0009) to IN ('kimi-consult-proxy', 'gemini-consult-proxy'). The old Kimi-only functions are deliberately left in place as rollback shims; a follow-up migration will drop them once 1.10.1 has shipped clean for a release.

Kimi K2.6 Is On the House — $15/mo of Consults Included With PorkiCoder Premium, No Baseten Signup Needed

The story 1.8.1 → 1.9.8 was supposed to tell was "open PorkiCoder, run claude, Kimi just works." The story it actually told was "open PorkiCoder, run claude, hit a 'KIMI_API_KEY is not set' error, go figure out what Baseten is, sign up, generate a key, paste it into Settings, restart your terminal, then Kimi works." 1.10.0 collapses that whole chain. Premium users ($20/mo) now get $15 of Kimi K2.6 consults every month proxied through PorkiCoder's own Baseten account — zero account creation, zero key handling. The free-tier bring-your-own-Baseten path still works unchanged for users who'd rather pay Baseten directly; the new proxy is purely additive.

• New backend route POST /api/consult/kimi — Verifies the Supabase JWT, checks user_request_limits.is_premium, atomically checks the per-user monthly USD cap (default $15) via the new check_kimi_proxy_quota RPC against the existing usage_monthly table, then forwards to Baseten using the server's KIMI_API_KEY. Response is the Baseten body verbatim so the MCP-consult provider's parsing is unchanged. Usage is incremented via the existing increment_usage_monthly RPC with model_key='kimi-consult-proxy' so per-model usage continues to roll up correctly.
• Per-user $15/mo cap + per-minute rate limit + global circuit breaker — Cap enforcement is race-tolerant (overshoot bounded by rate limit × max cost-per-call, ≈$0.13). Rate limit is 20 req/min/user — protects against agent loops without throttling normal use. Global aggregate spend across all users gates on the KIMI_MONTHLY_BUDGET_USD env var (default $500 hard cap, cached 60s to avoid DB churn) — fail-safe in case any single user or batch of users tries to grief the proxy.
• MCP-consult providers/kimi.js picks proxy vs direct path automatically — When the PTY env carries PORKICODER_AUTH_TOKEN + KIMI_PROXY_URL (set automatically by signing into PorkiCoder), the provider hits the proxy first. On 4xx from the proxy (premium gate failed, cap exhausted, rate limited) it transparently falls back to direct-Baseten if KIMI_API_KEY is also present — so users who pay for both never see an outage. On 5xx / network errors from the proxy, same fallback. When neither path is available, surfaces the proxy's helpful "upgrade or add a Baseten key" message instead of the bare "KIMI_API_KEY not set" error.
• PTY env injection in src/main/index.js — Signed-in users get their current Supabase access_token forwarded to every spawned terminal as PORKICODER_AUTH_TOKEN, alongside KIMI_PROXY_URL=https://server.porkicoder.com/api/consult/kimi. Token TTL is ~1 hour (Supabase default) — a claude session opened in an old PTY may need a fresh terminal to re-authenticate once the token expires, at which point the provider falls back to direct-Baseten if you have a BYOK key.
• New GET /api/consult/kimi/quota endpoint — Returns {premium, used_usd, cap_usd, allowed} for the calling user. Wires the data the Settings modal needs to surface a "$X of $15 remaining this month" row once that UI lands in a future release.
• Migration 0009 — two read-only RPCs against the existing usage_monthly table — check_kimi_proxy_quota(user_id, cap_usd) returns the calling user's spend on model_key='kimi-consult-proxy' for the current UTC month. get_kimi_proxy_aggregate_spend() returns the SUM across all users for the global circuit breaker. No new table — reuses the existing rollup so the Settings-modal usage breakdown automatically picks up proxy usage as a new model row.

MCP Consult Trimmed to Kimi + Gemini — Claude/GPT/Grok Removed Because They Were Quietly Causing a Billing Surprise

1.9.8 forwarded ANTHROPIC_API_KEY into every PorkiCoder PTY on the theory that a consult_claude tool would exist. It didn't — only consult_kimi and consult_gemini were ever wired up. Worse, Claude Code silently switches from your OAuth / Max-subscription session to per-token API billing whenever it sees ANTHROPIC_API_KEY in the environment, which meant signed-in PorkiCoder users were unknowingly being billed by-token for Claude Code usage they thought their Max subscription covered. OPENAI_API_KEY and XAI_API_KEY were also being exported for tools that don't exist. 1.10.0 stops forwarding all three and removes the dead consult_grok and consult_gpt5 tool definitions + provider modules + pricing entries entirely.

• consultKeyMap trimmed to kimi + gemini — Only the env vars that actually feed an enabled MCP tool are forwarded. Net effect: claude sessions launched in a PorkiCoder PTY no longer trigger the "ANTHROPIC_API_KEY detected, switching to API billing" warning.
• Dead provider modules removed — mcp-consult/providers/grok.js and mcp-consult/providers/openai.js deleted; their imports and tool definitions stripped from mcp-consult/index.js; their pricing tables stripped from mcp-consult/pricing.js. The codebase now reflects exactly what the server actually exposes.
• New ProxyError error type — Lets the MCP-consult tools/consultTool.js error classifier surface the backend's user-facing message verbatim when the proxy explicitly rejects a call (premium-required, cap-exhausted, etc.). Previously these would have been lumped into the generic "Unexpected error" branch with a useless "see logs" remediation.

MCP Consult Tools Light Up for Gemini, Grok, GPT-5, and Claude Too — Plus the Kimi Settings Field Catches Up With the Baseten Backend

1.8.1 promised "open PorkiCoder, run claude, every consult tool just works" — but for the past few releases that was only true for consult_kimi. The other four (consult_gemini, consult_grok, consult_gpt5, and the implicit Claude path) silently failed with "API_KEY is not set" because PorkiCoder was only forwarding the Kimi key into the terminal environment when it spawned claude. 1.9.8 closes that gap — every key you've already pasted into Settings now flows into every PTY, so every consult tool reaches its provider on first attempt. The same release renames the Settings field "Kimi (Moonshot) API Key" to "Kimi (Baseten) API Key" so the label finally matches the actual upstream after the Baseten swap landed in 1.9.6.

• Every consult provider key reaches the MCP server, not just Kimi — src/main/index.js's terminal-spawn path used to inject only KIMI_API_KEY into the PTY env. It now iterates over five service→env-var pairs (kimi→KIMI_API_KEY, gemini→GEMINI_API_KEY, grok→XAI_API_KEY, openai→OPENAI_API_KEY, claude→ANTHROPIC_API_KEY) and forwards whichever ones the user has saved in PorkiCoder Settings. A failed lookup for any single key logs a warning but doesn't block the spawn — one missing key disables one consult tool, the rest still work. Net effect for users: consult_gemini, consult_grok, consult_gpt5 now answer on first call from inside a freshly-opened PorkiCoder terminal, same as consult_kimi already did.
• Settings field renamed "Kimi (Moonshot)" → "Kimi (Baseten)" — Kimi K2.6 has been served via Baseten since 1.9.6, but the Settings label and placeholder text still said "Moonshot," and the error log in kimiService.js still printed "MOONSHOT_API_KEY was not provided to the service" — so anyone debugging from logs saw Moonshot and went hunting for a key that no longer maps to anything reachable. The label, placeholder, helper text, error log, and MCP tool description are all updated. One-time action for upgraders: open Settings, paste a Baseten key in the renamed "Kimi (Baseten) API Key" field — a previously-pasted Moonshot key will not authenticate against Baseten's inference endpoint and the consult tool will return a 403 until it's replaced.
• Vendor label in MCP error text now says "Baseten" — The kimi provider's vendor constant used to be 'Moonshot', which surfaced as "Could not reach Moonshot" in MCP error remediation messages even though the actual failed request went to inference.baseten.co. Switched to 'Baseten' so the remediation text points users at the right vendor dashboard when they hit a key/quota/network issue.

MCP Consult Swaps Gemini 3.5 Flash for Gemini 3.1 Pro — With a Thinking Knob You Can Dial From Fast-and-Cheap to Deep-and-Patient

1.9.6 added consult_gemini35flash to the MCP consult server so Claude Code could fetch a quick Google second opinion alongside Kimi. In practice the Flash variant was just too shallow for the kinds of design questions you actually want Gemini for — useful as a sanity check, rarely useful as a tiebreaker. 1.9.7 retires Flash from the consult surface entirely and exposes Gemini 3.1 Pro as consult_gemini, with a thinking argument (low / medium / high / max) so the calling agent picks the depth that matches the question — low by default for sub-second drive-bys, high/max when you want it to actually chew on the problem before answering.

• consult_gemini now routes to Gemini 3.1 Pro with adjustable thinking — Same MCP transport, same calling convention from Claude Code, just a more capable model behind the wheel. Thinking defaults to low (≈token-budget equivalent of "minimal" reasoning) so the common "give me a quick second opinion on this snippet" case still returns in a second or two without burning budget. Bump it to high or max from the agent side when you want Gemini to actually reason about a multi-file refactor, a tricky algorithm, or a "which of these two approaches is less likely to bite me in six months" question — same tool, just deeper.
• consult_gemini35flash removed from the consult tool surface — The Flash variant added in 1.9.6 is gone (provider file, pricing entry, tool registration) — one consult-Gemini tool, not two confusing siblings. If you had Claude Code subagents wired specifically to consult_gemini35flash, point them at consult_gemini instead and pass thinking: "low" to keep the same latency profile.
• makeConsultTool factory gains extraInputProperties — Internal cleanup so per-tool schema extensions (like Gemini's thinking argument) don't bleed into every other consult tool's input schema. The Kimi consult tool stays clean, the Gemini one advertises the thinking knob — both share the same factory without surprising each other. No user-visible change unless you're writing your own consult provider against this codebase, in which case the extension point is now actually correct.

Terminal Wheel Scroll Lands Flush at the Bottom — Plus Kimi Routes Through Baseten for Steady Connections and Tab Naming Returns to Kimi K2.6

Three releases since terminal scroll was last touched and the same intermittent symptom kept resurfacing: slow trackpad-scroll toward the bottom would stop one row short, the last line hidden until you pressed the down arrow. Two prior fixes patched the symptom (snap-to-bottom when within 10 px of the end) but never the cause — xterm's ybase × rowHeight bottom couldn't coincide with the browser's scrollHeight − clientHeight max because the row height (16.8 px at lineHeight: 1.2) didn't divide the viewport evenly. 1.9.6 sets lineHeight: 17/14 so the row is exactly 17 px, aligning xterm's grid with the browser's, and drives follow-state from terminal.onScroll(ydisp) instead of fighting viewport.scrollTop. Same release routes every in-app Kimi call (chat, agent, Cmd+K inline edit, terminal tab naming, MCP consult) through Baseten's OpenAI-compatible endpoint to recover the long-lived complex prompts that Moonshot direct had been dropping mid-request.

• Terminal wheel scroll lands flush every time — Two prior attempts treated the symptom: 1.8.x called terminal.scrollToBottom() inside the scroll handler (no-op once xterm's ydisp rounded up to ybase), and 1.9.0 replaced it with viewport.scrollTop = scrollHeight − clientHeight guarded by a scrolledDown heuristic (lasted longer but trackpad inertia still settled outside the 10 px snap zone). 1.9.6 fixes the geometry at its source: lineHeight: 17/14 instead of 1.2 makes the rendered row exactly 17 px so xterm's ybase × rowHeight bottom equals the browser's scrollHeight − clientHeight max — they can finally agree. With the grid aligned, follow-state moves to xterm's authoritative onScroll(ydisp) + buffer.active.baseY signal instead of reading the DOM scrollbar, and the snap-back hack is deleted entirely. Scrollback navigation is unaffected; the "↓ New output" badge still appears when output arrives while you're scrolled up; alt-screen apps (vim, htop, less) keep working untouched.
• Kimi via Baseten for chat, agent, Cmd+K, and MCP — Moonshot's direct endpoint was dropping long-running thinking-enabled requests mid-flight on bursty days — the client received a generic fetch failed with no HTTP response, and previously-successful 60–120 s prompts started returning "Could not reach Moonshot." Same Kimi K2.6 weights are served by Baseten (inference.baseten.co/v1/chat/completions, model moonshotai/Kimi-K2.6, auth scheme Api-Key) with infrastructure tuned for long-lived inference connections. Every internal call site swaps together so chat, the agent dispatch (Cmd+L), Cmd+K inline edit, terminal tab naming (now back on Kimi — see below), and the MCP consult-Kimi tool all hit Baseten through a single shared constant. Your existing "Kimi/Moonshot API key" setting field now expects a Baseten key — paste a new key from your Baseten dashboard once and everything routes through it.
• Terminal tab naming returns to Kimi K2.6 (via Baseten, thinking-disabled) — 1.9.4 swapped naming from Kimi to Gemini Flash-Lite for cost and latency reasons. Two months in, the trade-off no longer holds: Baseten's serving infra lands Kimi K2.6 in sub-second territory with thinking disabled, the per-label budget is capped at 64 output tokens (sanitize-to-32-chars hard cap on top), and Kimi follows the "label the intent of the command, not the literal binary" guideline better than Flash-Lite for compound commands and agent prompts. BYOK takes precedence as before — if you have a Kimi (Baseten) key set, the client calls it directly. The subsidised proxy at server.porkicoder.com/api/terminal-name still serves Gemini for users without their own key (server-side migration is a separate ticket).
• API keys can now come from environment variables in dev — Local-dev convenience: getApiKeyForService('kimi') now checks KIMI_API_KEY (and the matching SERVICE_API_KEY for any other provider) before falling back to the encrypted electron-store value. Pasting a key in Settings still works exactly as before; the env var just wins when present so a fresh npm start session can run without re-pasting after a store wipe. Production builds ignore this unless you explicitly launch with an env var set.
• MCP consult gains Gemini 3.5 Flash + progress callbacks — The MCP consult server (used by Claude Code via stdio) adds consult_gemini35flash alongside consult_kimi for a low-latency Google second opinion, with pricing wired in for usage rollups. The shared consult tool factory also gains a sendProgress passthrough so providers can stream periodic "still thinking…" notifications back to the calling agent during long requests — currently used by the Kimi provider's in-progress timeout/retry work, infrastructure for future providers to opt into.

Tab Naming Works Out of the Box on Fresh Installs — Backend Proxy Subsidises the Call When You Haven't Plugged In a Gemini Key, Plus macOS Fullscreen Finally Refits the Terminal and 16 Reliability Fixes Land

1.9.4 made terminal naming reliable for people who had already set up a Gemini key in Settings, but new downloaders who hadn't touched Settings yet got nothing — every tab stayed Terminal N because the local naming path needed a key it didn't have. 1.9.5 fixes that by routing keyless users through a small subsidised endpoint on porkicoder.com (Gemini 3.1 Flash-Lite, 200 labels/user/day cap) so the feature works the moment you sign in. Power users with their own key still call Gemini directly — BYOK wins when present, and now falls through to the proxy when the user's key fails (stale, revoked, transient outage). The same release fixes a long-standing UX bug where toggling macOS native fullscreen left the active terminal rendered at the pre-fullscreen width, fixes the popped-out detached terminal window's identical fullscreen miss, and lands 16 correctness bug fixes surfaced by a five-angle code review of the new naming and resize paths.

• Subsidised backend proxy at server.porkicoder.com/api/terminal-name — Fresh installs without a Gemini key now route through a small Express endpoint on the porkicoder.com backend, authenticated with your existing Supabase session, that calls Gemini Flash-Lite server-side and returns the label. Per-user daily cap of 200 labels (more than enough for normal use — the trivial-command filter and one-shot-per-tab rule keep real usage well below) bounds infrastructure cost; the counter is held in-memory with an upper LRU bound so a high-cardinality day can't blow out container memory. Quota is reserved up-front so concurrent requests respect the cap, but released on every failure path (timeout, Gemini 5xx, empty label) so a flaky-network day can't soft-lock you out before you've actually got a single label. Fetch is locked to redirect: 'error' and refuses non-JSON 2xx bodies so a future CDN/edge interstitial fails loudly instead of masquerading as an empty-label model issue.
• BYOK still wins, but falls through to the proxy when your key fails — If you've set your own Gemini key in Settings, the client calls Gemini directly first (no proxy round-trip, no quota consumption against your account) — that path is unchanged. New: when your direct call returns gemini-error or timeout (stale/revoked key, personal quota exhausted, Gemini blip), the client now silently retries via the subsidised proxy instead of leaving you stranded on Terminal N. Empty-label and trivial-command skips are still terminal (the proxy would skip those too — no point retrying). The BYOK path also no longer requires you to be signed in to Supabase: the auth gate moved inside suggestName so it only fires for the proxy path, restoring the contract that "BYOK takes precedence" actually means BYOK works standalone.
• macOS native fullscreen finally refits the terminal — Toggling the green window button (or Cmd+Ctrl+F) used to leave the active terminal rendered at the pre-fullscreen width — text wrapped at the old narrow column with a huge black gap on the right, and new commands kept rendering narrow until you re-toggled. macOS native fullscreen animates over ~700 ms, the renderer's window-resize listener fired off intermediate sizes during the animation, and the 250 ms post-event settle could land mid-animation and miss the final size. The main process now explicitly forwards enter-full-screen/leave-full-screen over a new window:fullscreen-changed IPC channel, and the TerminalManager subscribes and triggers an authoritative refit on every terminal (active or not) after the animation completes. A long-settle pass at ~900 ms also catches the rare reduced-motion / Linux/Windows edge cases where the OS event doesn't fire — gated to the fullscreen path so it doesn't add a spurious third refit to every window-drag.
• Popped-out detached terminal window gets the same fullscreen fix — Pop the terminal panel out to its own window (Cmd+Shift+D) and macOS-fullscreen that window — same bug used to reproduce there, because the fullscreen event forwarders were only wired on the main window. The detached BrowserWindow now also forwards enter-full-screen/leave-full-screen, and DetachedTerminalManager mirrors the main window's refit handler. Multi-panel detached views refit all panels, not just the active one.
• Agent-launch deferral is now per-CLI and recognises positional prompts — The "defer naming until you've prompted the agent" path used to mis-treat any flag as one-shot (so claude --dangerously-skip-permissions got labelled "AI Assistant" instead of waiting for your real prompt), and conflated -m across CLIs (Claude uses -m for --model — session config — while aider uses -m for one-shot message). One-shot flags are now a per-agent Map<head, Set<flag>>: claude/gemini/codex get {-p, --print}, aider gets {-m, --message}. Positional-prompt invocations like gemini "summarize package.json" are now recognised as one-shot too via a quoted-string heuristic. Session-config flags (--dangerously-skip-permissions, --model, --continue, --resume) correctly defer to the next prompt instead of producing a useless label.
• Tab naming re-arms when the first command was skipped, preserves your in-flight keystrokes, and handles app-keypad Enter — Pre-1.9.5, if your first command in a fresh tab was trivial (cd ~, ls, etc.) or hit a transient skip (no key, timeout, Gemini error), the controller latched and the tab stayed Terminal N for the rest of the session. The observer now re-arms when no label committed, so the next real command gets another shot. Re-arm preserves the _cmdLineBuf so chars you typed during the ~800 ms naming round-trip aren't silently discarded. The input observer also recognises SS3 keypad-Enter (\x1bOM) as a real Enter, so TUIs that enable application-keypad mode (Claude Code, possibly aider) don't drop the Enter event when you submit a prompt — fixes the "deferred-Claude tab never gets named" edge case.
• Per-command IPC storm suppressed with a session-level cooldown cache — Combined with re-arm, a signed-out user or one with no Gemini key would previously send a fresh IPC + auth + network round-trip on every Enter they typed for the entire session. The client now caches a "naming is currently disabled" verdict for 60 s when a skip arrives with a session-level reason (no-session, no-gemini-key, quota, repeated gemini-error) — controller stays re-armed, but _handleFirstCommand short-circuits before the IPC during the cooldown. Recovers gracefully on the first command after the cooldown when auth/quota/Gemini becomes healthy.
• Smaller correctness fixes from the review pass — Long-settle no longer runs on every window-drag (gated to the fullscreen OS event path); the fullscreen-event unsubscribe is stored on the manager and a double-init guard prevents stacked listeners; manual-rename mid-flight no longer waste a Gemini call (the pending label is now persisted to a short-lived slot so cancelling the rename restores it); proxy fetch sets redirect: 'error' so DNS/load-balancer 3xx changes don't silently surface as model failures.

Terminal Tab Auto-Naming Switches to Gemini 3.1 Flash-Lite — Sub-Second Labels, Reliable Firing, and No More Stale Names From Past Sessions

1.9.2 shipped Kimi-powered terminal tab auto-naming and 1.9.3 patched the obvious bugs in it, but three problems surfaced once the feature was in regular use: naming fired only sometimes (the "sporadic" feel — type a prompt cleanly and it labelled, lift a finger to use a cursor key and it silently skipped), labels from yesterday's session reappeared on today's tabs and short-circuited any new observation, and Kimi K2.6 was overkill — frontier-tier reasoning for a job that needs 1–3 words. 1.9.4 fixes all three by swapping the engine to Gemini 3.1 Flash-Lite, relaxing the input observer so it stops poisoning itself on every escape sequence, and dropping auto-generated labels from persistent storage so fresh sessions stay fresh.

• Gemini 3.1 Flash-Lite replaces Kimi K2.6 for terminal naming — Roughly 5× cheaper input/output ($0.25/$1.50 per MTok vs. $0.95/$4.00) and roughly 7× lower TTFT (~0.4s vs. ~2.8s median) for a labelling task that only ever produces 1–3 words. Frontier-tier intelligence was never the bottleneck here — TTFT was — so the swap is a clean win on both axes. Flash-Lite runs with minimal thinking enabled (thinkingLevel: 'minimal', includeThoughts: false) and a tight maxOutputTokens cap so worst-case spend is bounded. Cost rolls up under "Gemini 3.1 Flash Lite" in Settings → Usage as a separate line item from your chat/agent usage.
• Input observer no longer poisons itself on cursor keys — The renderer's first-command observer used to mark the capture buffer "tainted" the instant any ANSI escape sequence appeared in your input — arrow keys, history recall, Tab completion, Home/End, function keys, you name it. Once tainted, the next Enter reset the buffer silently and waited for the next "clean" cycle, where you typed an entire command without ever moving the cursor. With long prompts to Claude Code or any natural-language input where you fix a typo mid-sentence, that "clean" cycle rarely happened — naming would skip cycle after cycle until you got lucky. The observer now just consumes escape sequences (so embedded \r/\n in OSC/DCS payloads don't fake an Enter) without poisoning the buffer. Trade-off: a recalled-from-history command produces a label based on what you typed, not what the shell actually substituted — but for a 1–3 word tab label the gist is good enough. Empty buffer at Enter still skips fire, so a bare <up-arrow><enter> history recall produces no spurious label.
• Auto-generated labels stop persisting to electron-store — Pre-1.9.4 every AI-generated label was written to the terminalTabNames preference and reloaded on next launch, which had a nasty side effect: yesterday's "Login Bug" tab came back named "Login Bug" today, and the observer's skipFirstCommandObservation() short-circuit treated it as an "already named" tab — so you could never get a fresh label even if today's tab was for something completely different. 1.9.4 introduces a new preference key terminalTabNamesManual that only stores names you produced explicitly: double-click renames and presets (the "claude" session button). Auto-labels live in memory for the duration of the app run and quietly vanish on quit. The old terminalTabNames key is orphaned in the store — your existing stale entries don't get migrated, they just stop being read.
• Pricing + display name wired so usage rollup works — modelPricing.js gained a GEMINI_FLASH_LITE_RATES record (verified against ai.google.dev/gemini-api/docs/pricing on release day) and a 'gemini-flash-lite' key in the MODEL_PRICING map. modelDisplayNames.js gained the matching 'Gemini 3.1 Flash Lite' display entry. geminiService.js gained Flash-Lite as a third model variant alongside 'pro' and 'flash' via a new resolveGeminiModelId() helper, with its own default thinking level ('minimal') and the same "no temperature/topP/topK" generation-config restriction the Flash family uses. Existing Gemini call sites (orchestrator chat path, Cmd+K inline edit) are untouched — they still resolve to 'pro' or 'flash' as before.
• Per-request maxOutputTokens cap honoured — geminiService.ask/askStream previously hard-coded maxOutputTokens: 65535. For terminal naming that's ~2000× the budget actually needed for a 1–3 word reply. The service now reads options.maxOutputTokens and falls back to the 65k default only when the caller doesn't specify, letting naming cap itself at 128 (enough headroom for the minimal-thinking budget plus the actual label).

Cmd+Q Just Works Again — Confirm Dialog Fires Only When a Terminal Script Is Actually Running, Standard Quit Otherwise

An earlier release hijacked the red traffic light so closing the window would hide PorkiCoder instead of killing your long-running scripts — useful — but the same intercept was applied to Cmd+Q, the dock Quit item, and the menu's Quit entry. Hitting any of them just hid the window. The only buried escape hatch was a Shift+Cmd+Q "Quit & terminate scripts" menu item that nobody discovered — so users ended up force-quitting through Activity Monitor instead. 1.9.3 restores standard macOS Cmd+Q semantics while preserving the data-loss protection that mattered: the red traffic light still hides, but every quit path now either quits cleanly or surfaces a native confirm dialog when (and only when) there's something to lose.

• Idle shells don't trigger the dialog — only PTYs running an actual child process do — PorkiCoder opens a default terminal tab at startup, so a naive "any PTY alive → prompt" rule would confirm on every quit and train users to dismiss it reflexively. The new check runs pgrep -P <pty.pid> against every live PTY: zero children means the shell is sitting at a prompt, so the quit is silent. A non-empty result means a foreground command is running and the dialog appears, listing the command names by terminal ("Terminal 2: npm, node — Quitting will terminate them") so you know exactly what's at risk before you confirm.
• Native macOS confirm dialog with Cancel as default — When scripts are running, dialog.showMessageBox shows a system-modal warning with Cancel (default, also bound to Esc) and Quit. Cancel preserves whatever state the window was in (visible or hidden), no side effects. Quit sets the internal real-quit flag and re-fires app.quit(), which proceeds through the existing teardown path — PTYs killed, in-flight LLM streams aborted, project watcher closed, detached terminal window destroyed.
• Red traffic light still hides the window — original protection preserved — The mainWindow.on('close') handler is unchanged: clicking the red dot on macOS still calls preventDefault and hides the window with the existing safe-fullscreen exit logic. PTYs and any detached terminal window stay alive; the dock icon brings the window back. Only the quit paths (Cmd+Q, dock-quit, menu-quit) route through the new confirm flow.
• Dropped the buried Shift+Cmd+Q menu item — The "Quit & terminate scripts" entry was a workaround for the self-inflicted Cmd+Q hijack. With Cmd+Q working correctly again, it served no purpose and was actively misleading (suggested the standard Cmd+Q wouldn't terminate scripts). The application menu is back to a standard macOS app submenu: About, Services, Hide / Hide Others / Show All, Quit.
• Re-entrancy guarded — rapid Cmd+Q presses can't stack dialogs — Holding Cmd+Q or hitting it from multiple sources in quick succession used to be moot when the handler just hid the window, but with an async dialog in the path a naive implementation would queue duplicate prompts. A quitConfirmInProgress flag short-circuits subsequent calls until the first dialog resolves, so you get exactly one confirm prompt regardless of how many quit signals arrive.

Terminal Tabs Auto-Name Themselves from Your First Real Command — Kimi K2.6 Picks a 1–3 Word Label in About a Second

Open a new terminal tab and run your first non-trivial command — npm run build, pytest -k login, ssh prod-web-01, tail -f logs/app.log — and a moment later the tab title changes from a generic Terminal 1 to something useful: "Build App", "Run Tests", "SSH Prod", "Tail Logs". Kimi K2.6 with thinking disabled picks the label in roughly a second, the IPC round-trip is fire-and-forget, and there is exactly one naming call per tab — subsequent commands don't re-rename. Trivial heads (cd, ls, pwd, clear, exit, history, echo) skip the call entirely; so do tabs you've already renamed manually or that came pre-named (the Claude Code session preset). No setting to enable, no model to pick — it's on as long as you have a Kimi key in Settings, and silently skipped otherwise. The feature shipped with a 12-bug self-audit pass folded in — every issue surfaced during the review is FIXED in this release.

• Compound commands count, not just the first word — A naive deny-list on the head token would skip ls -la | grep secret > out.txt, cd ~/proj && npm test, cat foo.log | jq . from naming because the first word is in the trivial list. The classifier now checks for shell operators (| < > ; &) before the head-word lookup — anything that pipes, redirects, chains, or backgrounds is treated as non-trivial regardless of how it starts. cd alone still skips; cd ~/proj && npm test gets named "Run Tests".
• Manual rename always wins, even mid-flight — Double-click a tab to rename while the Kimi call is in flight and the AI label is dropped on the floor when it returns. The persisted-name write is gated by the same renaming-in-progress check as the visible-title write, so the cancel-rename path can't leave terminalTabNames in storage diverged from what the tab actually shows — there is no scenario where the AI name "resurrects" on next launch because you cancelled the rename you started while Kimi was thinking.
• Detached terminal windows get auto-named too — Pop the terminal panel out into its own window (Cmd+Shift+D), run your first command, and the tab in the detached window picks up an AI label via a new IPC channel to the main process. When you reattach, the auto-named state migrates back to the main window's tab strip — the in-memory copy of terminalTabNames is refreshed from preference on reattach so Kimi writes from the detached session aren't lost.
• Cost surfaces in Settings → Usage like every other AI call — Terminal-naming hits the same saveChatInteraction + increment_usage_monthly path that Cmd+K inline edits use, so per-tab labelling cost (input tokens for the system+user prompt, output tokens for the 1–3 word reply) rolls up under "Kimi K2.6 (Min Thinking)" in the Usage panel. A misunderstanding model that decides to write an essay can't burn budget — max_tokens is now caller-configurable per request, and naming caps itself at the smallest value that still lets the model finish a 3-word label, instead of the 32K-token default the chat path uses.
• 10-second timeout, AbortController-clean shutdown — A hung Kimi call no longer holds the per-tab in-flight slot indefinitely. AbortController aborts the fetch after 10 seconds; on app quit, the controller tears down the in-flight request cleanly instead of leaving the fetch dangling on Electron exit. Other tabs are unaffected — the in-flight lock is keyed per terminal id.
• Error path distinguished by structure, not by string-matching the reply — Earlier in development the error-detection guard was a regex that flagged any reply starting with "Error " as a failure to swallow. That false-positive-d legitimate labels like "Error Boundary", "Error Handler", "Error Logs" — all plausible names for a developer terminal — and silently kept the default Terminal N. The guard is now if (!result?.usage): the Kimi adapter only populates the usage field on a 200 response with a parsed body, so its absence is the unambiguous error signal and legitimate "Error …" replies pass through. Net effect: any tab whose first command actually relates to error handling now gets a sensible label instead of staying generic.
• Tighter ANSI-escape skipping in the input observer — The renderer's first-command observer ignores arrow keys, history search, and other interactive shell traffic by recognising ANSI escape sequences. The previous parser only fully consumed CSI (ESC [) and SS3 (ESC O) with a narrow class of parameter bytes; sequences with intermediate bytes, OSC, DCS, or SOS/PM/APC could leak printable garbage into the buffer. Any \x1b now taints the buffer for the rest of the line and the Enter event is skipped — naming never fires on a Ctrl-R search string, an arrow-key edit, or an escape-laden paste. A 4096-char cap caps buffer growth from a malicious paste; the Kimi key is never accidentally exfiltrated via a runaway label.

Terminal Wheel Scroll Lands Flush at the Bottom — No More Down-Arrow Rescue

Slow trackpad scrolling toward the bottom of the terminal sometimes left the viewport 1–9 px short of true bottom — the last row was partially cut off and only a tap of the down-arrow key snapped it flush. 1.7.4 took a swing at this by calling terminal.scrollToBottom() from the scroll handler whenever the viewport entered the 10 px "at bottom" zone, but the swing missed. xterm.js's wheel path rounds scrollTop / rowHeight to compute the new display row, and for any gap smaller than rowHeight / 2 (~8 px at the default font) that round produces ydisp === ybase before our handler runs. scrollToBottom() then resolves to scrollLines(0), which short-circuits inside BufferService without ever touching viewport.scrollTop — so the snap was silently a no-op for the lower half of the gap. 1.9.1 swaps in a direct viewport.scrollTop = scrollHeight - clientHeight assignment, which is the same primitive xterm's own _innerRefresh uses after PTY data arrives (and is incidentally what the down-arrow keystroke was triggering as a side effect).

• Direction-guarded snap — small wheel-UP from the bottom no longer yanks you back — Setting scrollTop directly is more forceful than the old no-op, so without a guard a 5-pixel upward flick from a flush-bottom state would land at distance = 5, fire the snap, and immediately return to bottom — making it feel like the wheel was scrolling into a wall. The handler now tracks the previous scrollTop in a closure variable and only snaps when the current value is greater than the last — i.e., when the user is actively heading downward. Wheel-up from bottom proceeds freely; wheel-down to bottom snaps flush.
• Works on macOS trackpad inertia and slow mouse-wheel finishes alike — Two scroll patterns reliably reproduced the residual gap before: a slow trackpad glide where the tail of inertia emitted sub-pixel deltaY values rounded down by the browser, and a slow mouse-wheel finish where the final tick advanced scrollTop by less than the canvas row height. Both now land flush. Fast flicks and shift+wheel (the fast-scroll modifier) were never affected and remain unchanged.
• Detached terminal windows and multi-tab terminals both get the fix — The scroll-listener attachment runs the same code path during initialize() and attachToExisting(), so the detached-terminal window inherits the new behaviour, and each tab in a multi-tab terminal has its own controller with its own lastScrollTop closure — no cross-tab interference.

Gemini Flash Is Now Gemini 3.5 Flash — Better Reasoning at the Same Sub-Second Latency

Google made gemini-3.5-flash generally available on May 19, 2026, and PorkiCoder picks it up in this release. The model retains Flash's defining trait — sub-second first-token latency that makes Cmd+K inline edits feel instant — while delivering noticeably stronger coding, tool use, and long-horizon reasoning than the 3 Flash Preview it replaces. Everywhere "Gemini Flash" appears in PorkiCoder — chat dropdown, agent-mode model picker, Cmd+K fallback, and the apply-code semantic-diff fixer — you're now talking to the 3.5 GA model. No setting to flip, no migration, no flag.

• Drop-in across every Gemini Flash call site — Four code paths route to Flash: regular chat (geminiService), agent mode tool-use loop (geminiAgentOrchestrator), Cmd+K inline-edit fallback when no Moonshot key is configured (inlineEditService), and the apply-code semantic-diff LLM fallback (applyModelService). All four now hit gemini-3.5-flash directly. The internal gemini-flash model key is unchanged, so per-mode model preferences saved in 1.8.x carry forward without resetting.
• Sampling knobs dropped per Google's 3.x migration guide — temperature, topP, and topK are no longer sent on Flash requests. Google's guidance for the Gemini 3.x family is that reasoning is tuned for the built-in defaults and these knobs make things worse, not better. Pro (still 3.1 Pro Preview) keeps them. The conditional is on the resolved model id, not the variant string, so future Pro upgrades that join the no-knobs club need only a flag flip.
• Effort bar unchanged — still Min / Low / Med / High — Gemini 3.5 Flash exposes the same four thinking levels as 3 Flash Preview did, with the same default of medium. The Min / Low / Med / High effort selector in the chat header keeps working exactly as before; Min stays the right pick for Cmd+K inline edits where first-token latency dominates and Max remains hidden because Flash never supported it.
• Pricing updated to 3.5 Flash's $1.50 / $9.00 / $0.15 per MTok — A roughly 3× bump on both input and output relative to 3 Flash Preview ($0.50 / $3.00), with cached input at $0.15. The Settings → Usage panel reflects the new rates immediately for any Gemini Flash usage after upgrading; historical 1.8.x rows continue to display at the rates that were in effect when they were billed.
• Display name reads "Gemini 3.5 Flash" everywhere — Chat header dropdown, agent-mode selector, chat-history sidebar, and every per-call usage row in Settings now say "Gemini 3.5 Flash" (with the same Min / Low / Med / High suffix variants). The chat-history fallback map was updated alongside the canonical display-name table so older rehydrated rows render with the new label too.

MCP Consult Tools Now Install Themselves — Zero Setup, Just Launch PorkiCoder and Talk to Kimi from Claude Code

1.8.0 shipped consult_kimi / consult_grok / consult_gemini / consult_gpt5 as an MCP server, but actually using them required two manual steps most users never made it through: running claude mcp add porkicoder-consult … in the right shell with the right path, and remembering to export KIMI_API_KEY=… in every terminal that hosted a Claude Code session. 1.8.1 closes both gaps. Open PorkiCoder, open a terminal, run claude — Claude already sees the consult tools and already has your Kimi key. Nothing to configure.

• Auto-registration into ~/.claude.json on every launch — On app.whenReady PorkiCoder writes a porkicoder-consult entry under mcpServers pointing at the bundled mcp-consult/index.js with ELECTRON_RUN_AS_NODE=1 set so the same Electron binary runs the MCP server as Node 20. Subsequent launches no-op when the entry already matches; dev↔packaged switches and node_modules reinstalls rewrite the entry to the current binary so claude mcp list never reports a stale path.
• KIMI_API_KEY injected into every PorkiCoder terminal — The terminal:create handler reads the encrypted key from safeStorage and threads it into the spawned PTY's environment. Two-hop env flow does the rest: terminal env → Claude Code CLI inherits it → MCP server subprocess spawned by Claude Code inherits it too. Set the key once in Settings, never touch a shell rc-file again. The other three providers (Grok / Gemini / GPT-5) still need their env vars set manually until a future release ports them.
• Concurrency-safe writes to ~/.claude.json — The Claude Code CLI rewrites the same file after every turn, without a lock. A naive read-modify-rename would silently clobber a CLI write that landed between our read and our rename — losing whatever turn the CLI just persisted. The new flow snapshots the file's inode+mtime+size at read time from a single fd, re-stats just before the atomic rename, and retries up to three times on mismatch. Per-pid .tmp filenames mean two simultaneous PorkiCoder launches can't truncate each other's in-progress writes either.
• Non-destructive on every malformed-config path — If ~/.claude.json is unparseable JSON, has mcpServers set to an array or string, or is anything other than a plain object, PorkiCoder now logs and skips the registration instead of rewriting the file with a default-empty {mcpServers: {}}. Any custom hand-edits or third-party MCP entries in unusual shapes are preserved untouched.
• Indent + trailing-newline preserved when rewriting — The writer sniffs the existing file's indent (tab vs. 2-space vs. 4-space) and trailing-newline style and round-trips whatever it found, so updating our entry doesn't produce a noisy whitespace diff against whatever format the CLI's own writer uses.

Kimi Consults No Longer Return Empty Answers

The MCP consult tool capped Kimi's output at max_tokens: 4000. Kimi K2.6 counts thinking tokens against that budget — so a question that triggered a few thousand tokens of reasoning would burn the entire budget reasoning and emit zero visible content. The tool surfaced only the cost footer (— Kimi K2.6 (… in, 4000 out, $…)) with an empty answer above it, leaving Claude Code with nothing actionable. Bumped to 32768 — Moonshot's documented default and the highest doc-blessed cap — so even thinking-heavy questions have ample room to both reason and answer.

API Keys Survive Transient Decrypt Failures

Two key-lookup paths (chat orchestrator and Cmd+K inline-edit service) used to store.delete() the encrypted key whenever safeStorage.decryptString threw — on the theory that an undecryptable key was a corrupted key. That's wrong in the common cases: a Keychain reissue, a login migration, copying the store across machines, or running PorkiCoder under a different macOS user account all produce decrypt failures with a perfectly intact ciphertext. The new behaviour is to log the failure, return null, and leave the stored value in place — the user can re-enter the key in Settings to overwrite it whenever convenient, instead of silently re-entering it from scratch after every machine migration. Bug surfaced because 1.8.0's KIMI_API_KEY injection now runs that decrypt on every terminal-create.

Smaller fixes

• Decrypted Kimi key cached in-process — Per-terminal-create file I/O + decrypt is now a single hit, invalidated when the user saves a new key in Settings. Negligible for occasional terminal opens; matters if a future flow spawns terminals in a loop (multi-tab restore, test harnesses).
• Dev-mode process.execPath staleness diagnosable from logs — When a registered entry points at an electron binary that no longer exists on disk (after a node_modules wipe or an Electron version bump), startup logs the prior path and the new one, so claude mcp list's "failed to start" line is no longer mysterious.
• Registration completion now logged with a restart hint — Because the read-write happens fire-and-forget from app.whenReady, a terminal opened in the first few hundred milliseconds may launch a claude session before the entry lands. The post-write log now explicitly warns that any in-flight session won't see the entry until restarted — so the gap is diagnosable rather than mysterious.
• Disabled provider blocks switched from /* */ to if (false) { … } — The three commented-out provider registrations in mcp-consult/index.js are now syntax-checked by node --check instead of hidden behind comment delimiters, so a typo while the block is "off" still trips the syntax checker.
• Bundled mcp-consult/.git/** excluded from packaged builds — Forward-looking: if a future restructure makes mcp-consult/ a vendored repo or submodule, its .git/ won't bloat the DMG.

Cmd+K Inline Edit — Select Code, Describe the Change, Accept the Diff

Select a block of code in the editor, press Cmd+K, and a floating prompt anchors itself to the selection. Type the change you want — "convert this to async/await", "extract the validation into a helper", "add JSDoc" — hit Enter, and the replacement streams in in place from Kimi K2.6. The selection greys out while tokens land character-by-character; Esc mid-stream restores the original; Cmd+Z after the edit completes reverts the whole thing in one keystroke. Same flow that makes Cursor's Cmd+K sticky, now in PorkiCoder — and intentionally on a different model from your chat dropdown so latency stays sub-second on the first token.

• Streaming live-replace via Kimi K2.6 with thinking off — Inline-edit needs first-token latency on the order of a second, not the multi-second budget of a thinking model. The Kimi adapter gained an SSE streaming path (OpenAI-compatible delta format), and inline edits route to a dedicated kimi-fast variant that forces thinking: 'disabled' without disturbing the chat-mode Kimi which keeps thinking on. The chat selector and Cmd+K's model are independent — picking Opus in the dropdown does not slow down your inline edits.
• Fallback chain when no Moonshot key is configured — If you only have a Gemini key, Cmd+K silently falls back to Gemini Flash at minimal thinking. If you have neither, you get a one-time toast linking to Settings rather than a silent no-op. The fallback explicitly does not pick up whichever chat model is selected — Codex / Opus / Sonnet / Grok are all wrong for this latency profile and the feature would feel sluggish on them.
• Two review modes — live replace and diff modal — Default is live replace: chunks land directly in the buffer as a single merged undo unit. For larger edits, switch Settings → Cmd+K Inline Edit → "Diff modal" and completions open in the same Monaco side-by-side diff editor used by the apply-code flow, with explicit Accept / Reject. There is also a size cap (default 80 lines) that auto-switches to diff modal when you select a big block, so live-replace never nukes a wall of code invisibly.
• Settings → Cmd+K Inline Edit — A new section in the Settings modal lets you pick the default inline-edit model (Kimi K2.6 / Gemini Flash / Claude Haiku 4.5 / Claude Sonnet 4.6), choose live vs diff review mode, and set the live-replace line cap. The model picker also lives inside the Cmd+K overlay itself as a small badge — click to override the default per-edit.
• Cost rolls up alongside chat costs in the monthly usage view — Every Cmd+K invocation reuses the same saveChatInteraction persistence path as chat messages, so the token counts and USD are visible in Settings → Usage this month under the resolved inline-edit model name. No separate tab, no hidden spend.
• Sanity-strip on model output — Even with a strict "no preamble, no fences" system prompt, models occasionally wrap output in markdown code fences. The renderer post-strips them before applying — if Kimi drifts and returns ```javascript ... ``` the inserted code is still clean.

MCP Consult Tools — Claude Code Can Ask Kimi, Grok, Gemini, or GPT-5 for a Second Opinion Mid-Task

A new standalone MCP server ships under mcp-consult/ in the porkr1 repo. Wire it into Claude Code with one claude mcp add command and Claude gets four new tools — consult_kimi, consult_grok, consult_gemini, consult_gpt5. When Claude is uncertain, has burned three turns on the same debugging path, or wants a perspective from a different model lineage, it calls the tool, gets the other model's answer back as a tool result with a cost footer, and folds that perspective into its next turn. No UI, no copy-paste, no user intervention — and you watch the exchange happen in the Claude Code TUI's normal tool-result rendering.

• One tool per provider, with descriptions tuned for autonomous use — Each tool description gives Claude both a vibe ("Kimi is fast and unbiased by your training", "Grok has live web access and tends toward direct, less-hedged reasoning", "Gemini's 1M-token window excels at long-context", "GPT-5 is strong on algorithmic correctness") and explicit trigger conditions. Claude picks the right one based on the question — you don't have to instruct it.
• Standalone — works without PorkiCoder running — The MCP server is a separate Node ESM project. It does not depend on the Electron app being open, and it does not import any PorkiCoder code. Install it on any machine you run Claude Code on. Future-proof — could ship as @porkicoder/mcp-consult on npm later for users who don't even use PorkiCoder.
• Tool results include a cost footer — Every successful consult returns the answer plus a one-line tail: — Kimi K2.6 (834 in, 312 out, $0.0021). Claude can reason about cost when deciding whether to consult again on a follow-up, and you can spot-check spend at a glance without opening any dashboard.
• Usage logged to ~/.porkicoder-mcp/usage.jsonl — One JSON line per call: timestamp, tool, model, tokens, USD cost, duration, and a 120-char preview of the question (full content is never persisted). tail -f the file during a Claude Code session to see exactly when Claude reaches for a second opinion. The PorkiCoder Settings → Usage panel will surface this alongside chat costs in a future release.
• API keys via environment variables — missing keys silently disable just that one tool — Set KIMI_API_KEY, GROK_API_KEY, GEMINI_API_KEY, OPENAI_API_KEY in the shell that launches Claude Code. If you only have a Kimi key, the other three tools return a helpful "set the X env var" message when Claude tries to call them, while consult_kimi works fine. No all-or-nothing wiring.
• Clean stdio — no log pollution of the JSON-RPC stream — All diagnostic logging routes through stderr or the usage-log file. Stdout carries only well-formed MCP JSON-RPC frames, so the Claude Code transport never sees a malformed message.

Small fixes

• Scrollbar-corner white square is gone — Wherever horizontal and vertical scrollbars met (most visible in ChatView), WebKit was rendering its default opaque corner instead of the dark themed scrollbar track. A global ::-webkit-scrollbar-corner rule now matches the rest of the scrollbar theming.

Terminal Text No Longer Tears Mid-Word During Resize

When the terminal resized — window drag, font-size change, pane-split, cold start while the custom font was still loading — running tools that draw with absolute cursor positioning (Claude CLI being the most visible offender) could emit a stream of bytes that arrived in xterm at the new column count while the PTY was still echoing against the old one. The result was words sliced apart and stitched back together at the wrong column — em<unrelated>bellish-style garbling that looked like a corrupted stream but was actually a tiny ordering bug between two perfectly healthy components. This release fixes the ordering and several smaller contributors in the same call path.

• Resize is now PTY-first instead of xterm-first — _safeFit() was rewritten to be async: it computes the target geometry via proposeDimensions() without applying, awaits the IPC that delivers SIGWINCH to the child process while xterm is still at the old size, and only then calls terminal.resize(cols, rows). The child's first byte at the new width now lands in an xterm that already agrees on the new width — no more cross-talk between the two sides during the transition.
• Concurrent resizes can no longer race — A monotonic _fitSeq counter is captured before the await and re-checked after; if a newer fit arrived during the IPC, the older fit drops its xterm-apply rather than stomping the newer geometry. So rapid window drags, font-size flurries, and pane-split + drag combos converge to the latest size cleanly instead of oscillating.
• Post-spawn and restart paths now await the same flow — _performInit and _performRestart previously kicked off a fire-and-forget _pushPtySize() after spawning; that helper was deleted entirely, and both paths now await this._safeFit() so the very first byte from the child is sized correctly. The old optimistic _lastPushed set-before-IPC-resolves trap is also gone.
• Cold-start font drift no longer mis-sizes the terminal — When the renderer mounts before the configured terminal font has finished loading, xterm measures cell width against the fallback font; once the real font lands, every column is suddenly off by a fraction of a pixel and existing output sits a column too far left or right. A document.fonts.ready safety net was added to _performInit that invalidates the size cache and re-fits through the new PTY-first flow once the configured font is actually available — so the first paint and every paint after it line up.
• Font-size changes preserve scroll position correctly through the new flow — _setFontSize used to snapshot wasFollowing / scrollTop, then call the old sync fit, which applied xterm-side before the PTY had updated. The snapshot is now threaded into _safeFit({...}) so the restore runs after xterm.resize in the new ordering, keeping "stick to bottom" and mid-buffer reading position intact across font changes.

Cmd+Q and the Red-X No Longer Kill Your Running Scripts on macOS

The 1.7.1 / 1.7.2 fixes closed the detached terminal window's red-X path, but the same scripts could still die from the main IDE's quit paths — Cmd+Q, the dock's Quit menu, the app menu's Quit, and (the symptom that named this release) the main IDE's red-X while in macOS native fullscreen. All of those routed through before-quit, which killed every PTY unconditionally before the close interception could even run. This release closes the entire family of paths in one pass.

• Cmd+Q, dock→Quit, and app menu→Quit are now intercepted on macOS — they hide the window instead of murdering your scripts — Previously, before-quit killed every PTY in the map before any window's close handler could preventDefault(), so the user saw "I pressed Cmd+Q, my long-running build died, and the IDE didn't even close — what?". before-quit now preventDefault()s on macOS unless an explicit "real quit" path is in flight, and hides the main window instead. PTYs keep running in the background, ready for you to bring the IDE back via the dock.
• New "Quit & terminate scripts" menu item (Shift+Cmd+Q) for when you actually want to fully quit — Since plain Cmd+Q now hides instead of quitting, there's a new explicit menu item that sets the real-quit flag and tears down PTYs the way the old before-quit did. Use it when you genuinely want everything dead. The standard Cmd+Q stays bound to the OS-conventional "close window, keep app in dock" behaviour.
• Red-X on the main IDE while in macOS native fullscreen no longer strands you on an empty Space — macOS native fullscreen runs each window in its own Space; calling .hide() on a fullscreen window leaves that Space visible (dark, empty, just the menubar) because the exit-fullscreen animation hasn't run. The hide path now exits fullscreen first (via setFullScreen(false)), waits for leave-full-screen, and only then calls .hide() — so the IDE properly returns to the dock instead of leaving you stuck staring at an empty desktop.
• Clicking the dock icon now reliably brings the IDE back — After a hide, the activate handler used to be a no-op because the window still existed (just hidden), so the dock click went nowhere. Users gave up and force-quit, which routed back through before-quit and killed the very PTYs we just spent the close handshake protecting. The handler now explicitly .show()s the hidden main window when you click the dock icon, closing the loop.
• PTY routing during reattach now points back at the main window immediately — During detached→main reattach, there was a small window where PTY data could arrive while the main renderer was still wiring up — and because terminalWindowMap still pointed at the (about-to-die) detached window, that data was silently dropped. Routing is now flipped to mainWindow at the start of the reattach handshake, so no bytes get lost in transit.
• Linux/Windows still cleanly close-and-kill on red-X — The hide-on-close behaviour is macOS-only (it matches macOS's window-vs-app convention). On Linux and Windows, closing the main window remains a real close — and the closed handler now correctly tears down PTYs owned by the main window while leaving any detached-window PTYs alive, so non-macOS users get the cleanup they expect without losing detached-window state.

Detached Terminal — Close Handshake Hardened on macOS

A follow-up to the 1.7.1 detached-terminal fix. The reattach-on-close path was still vulnerable to a residual race on macOS where a second close signal could arrive mid-handshake and tear the window down before the renderer finished moving PTYs back to the main IDE — which, in the worst case, orphaned the PTYs and killed the running scripts. This release closes that window.

• Every close signal during reattach is now blocked, not just the second one — Previously the close handler used if (winRef._reattaching) return, which let any close event after the first one fall through to the default and destroy the window. macOS will sometimes deliver a second close signal before the async reattach handshake finishes (closing via the menu while the red-X is also processed; back-to-back keyboard shortcuts; some accessibility paths). The handler now event.preventDefault()s every close while _reattaching is set, so the destruction can only happen on the explicit code path that owns the timing.
• Window destruction switched from close() to destroy() after the handshake — Calling winRef.close() at the end of the reattach re-fired the same close event handler we'd just spent the whole function preparing to exit cleanly — a self-recursive landmine. Replaced with winRef.destroy(), which tears down the window without re-triggering the close listener.
• Reattach failures no longer leave a stranded window — Added a .catch() on the reattach promise. If the buffer-serialize, IPC send, or restore-and-focus step throws, we now still clear the detachedTerminalWindow reference and destroy the window instead of leaving a half-dead popup with no listeners attached.

Detached Terminal — Stray Red-X No Longer Kills Running Scripts

A focused fix on the popped-out terminal window. Clicking the macOS red traffic light on the detached terminal used to interrupt anything actively running inside it — long scripts, in-progress builds, agent shells. The intent was always "reattach to the IDE," but the implementation lost the handshake under multiple race conditions. Now the close button reliably brings your terminals — and whatever is running in them — back into the main IDE window with no operation interrupted.

• Red-X on the detached terminal window now reattaches instead of killing — The close handler was rewritten to perform the reattach handshake before the renderer is torn down: PTY output is transit-buffered immediately, the main IDE is brought to front (restored from minimize, focused), the visible scrollback is captured, and only after terminal:reattached is sent does the detached window actually destroy. Previously, the buffer-serialize ran first and the reattach signal fired only after the renderer was already dead — leaving a window where PTY data going to a destroyed webContents was silently dropped, which produced the "looks like the script died" symptom.
• Closing the main IDE while a terminal is detached no longer murders the running script — mainWindow.on('closed') previously killed every PTY unconditionally, including ones currently routed to the still-alive detached window. So if you closed the main IDE while a long script was running in the popped-out terminal — even briefly, even by accident — the script died instantly. The closed handler now skips PTYs that are owned by a still-alive detached window; they keep running and stay yours to reattach later.
• The reattach is now visible — The main IDE is restored from minimize, shown, and focused as part of the close handshake, so you can see your terminals reappear instead of wondering whether they vanished. No more "did the script die or did the window just hide somewhere" guessing.

Custom Domains — Bring Your Own, Reconcile, and Import

A round of work on the custom-domains pipeline so the database stops drifting from reality. If you bought a domain through PorkiCoder and then changed something at the registrar — or owned a domain before you ever opened the app — your custom_domains table now reflects that. Plus two terminal/UI fixes that have been quietly annoying for a while.

• Import an externally-owned domain — If you already own yourname.dev at Namecheap, Cloudflare, GoDaddy, or anywhere else, you can now point it at a PorkiCoder-published site without buying a second copy. The Custom Domains panel exposes an "Import existing domain" flow that verifies you control the domain (DNS challenge), wires it to the chosen site, and creates the custom_domains row — same downstream behavior as a domain you bought through the app.
• Restore custom_domains rows for domains you already own at the registrar — If you bought a domain through PorkiCoder before the custom_domains table existed (or the row was lost in some past schema churn), the app now reconciles registrar ownership against the local DB on launch and recreates the missing rows automatically. No more "I own this, why doesn't PorkiCoder know?" — the next time you open the panel, every domain you own at the registrar shows up.
• Deleting a site cascades to its custom domains — Previously, deleting a published site left orphaned custom_domains rows pointing at a site that no longer existed; the next deploy attempt with the same domain would hit a unique-constraint violation. Site deletion now cascades: every custom_domains row attached to that site is removed in the same transaction. Re-attaching the domain to a new site Just Works.
• Terminal text reflows correctly when you widen the window — Resizing from narrow to wide used to occasionally "stick" — the running shell kept rendering at the old narrow column count even though xterm had visually expanded, so new output wrapped at the wrong width and TUI programs (claude, vim, htop) drew their UI to the stale size. Two independent root causes fixed: (1) a guard that silently swallowed the PTY-resize step when xterm and the PTY momentarily disagreed about readiness — that resize is now idempotent and ungated, so the PTY always learns the current size; (2) the debounced fit now schedules through requestAnimationFrame plus a 250 ms settle-pass to catch sub-pixel under-reports from ResizeObserver. The targeted repro (run a shell, exit, resize wider, restart shell) now renders at the wide width every time.
• Zen-mode indicator no longer covers the terminal's fullscreen controls — The "Zen Mode Active — Press Esc to exit" badge used to live as a fixed top-right element with z-index: 100000, which painted directly on top of the terminal panel's clear/fullscreen-toggle/detach/close buttons when both fullscreen and zen mode were on. The badge is now a real top-center button: clickable to exit zen mode (mouse-only path), out of the way of every other floating UI in either layout. And the Esc handler now runs in capture phase with stopImmediatePropagation, so pressing Esc to leave zen mode no longer bleeds through to xterm and cancels whatever Claude Code is running in the terminal.

Kimi K2.6 — Now Available in Agent Mode

Moonshot's Kimi K2.6 lands in Agent Mode with thinking cranked to maximum — and as a bonus, the terminal color bug it one-shotted in testing ships in the same release. If you've been waiting for a non-Anthropic option that can actually drive the full autonomous Read/Glob/Grep/Bash/Write tool loop, it's here.

• Kimi K2.6 available in Agent Mode — Pick Kimi from the model selector with Agent Mode on and you get the same Read, Glob, Grep, Bash, WebSearch, WebFetch, and sub-Agent tool loop that's always run on Claude, now driven by kimi-k2-thinking-turbo. Human-in-the-loop diff review, progress cards, and session resume all work identically. The model handles multi-step planning and tool chaining well enough that it can be a real daily driver, not just a "try it once" curiosity.
• Kimi upgraded to K2.6 everywhere, with thinking maxed out — The default Kimi endpoint is now kimi-k2-thinking-turbo across chat, HOG Mode, Normie Mode, and the apply-diff path, with the provider's highest thinking effort tier selected by default. Summarized thinking streams live in the UI, same as Claude and Gemini.
• Round-trip reasoning_content on tool-call assistant messages — Previously, when Kimi emitted a tool call with attached reasoning, the reasoning was dropped on the next turn's history replay — which confused the model about its own prior thought process and led to tool-call loops. We now round-trip reasoning_content back on tool-call assistant messages so the chain-of-thought stays continuous across tool hops.
• Terminal color / contrast fix (one-shot by Kimi K2.6) — Meta-validation: the first non-trivial bug fix we threw at the new K2.6-in-Agent-Mode was a terminal color regression, and it landed the correct fix on the first attempt, no follow-ups. Shipping that fix in this release alongside the model that wrote it.

Sidebar & ConfirmModal — Reliability Pass

Twenty-six bugs swept out of the project sidebar and the confirm/alert modal — the kind of issues that rarely crash but quietly corrupt state, leak memory, or silently drop your work. Most were found in a code-review pass and fixed as a batch; none of them were on fire, all of them should have been.

• Filenames with <, &, or > no longer break the tree — Searching a tree that contained a file like foo<bar>.js used to corrupt the filename on the next clear-search pass: an innerHTML = textContent round-trip re-interpreted the brackets as HTML, so the sidebar rendered foo with the rest silently swallowed. The cleanup paths now restore from a data-name attribute stored at node creation, and highlight insertion escapes through a proper HTML-escape helper.
• Search stops returning hits for files that no longer exist — Deleting a directory used to leave every file inside it in the search index, because the delete handler only purged the directory's own (absent) entry. Added a prefix-delete that walks every indexed file under the path. The same leak pattern in window.projectFileMap (breaking @filename autocomplete after a delete) is fixed alongside.
• Rapid filesystem bursts no longer pile up duplicate work — A Set keyed by object identity meant two chokidar events for the same path produced two separate entries, and the sidebar then did two rounds of DOM removes, search-index updates, and ancestor-walk consolidation per path. Converted to a Map keyed by type:path so repeat events for the same path collapse in place. Matters most under agent-driven batch writes where dozens of events fire within a frame.
• IPC listeners stop firing after app teardown — Three of five IPC cleanup thunks (directory change, file-changed-for-search, build-activity-ended) were being discarded, so after the controller tore down those handlers kept firing on a destroyed state — mutating a cleared pending-changes map, calling index methods on a nulled worker, scheduling refreshes against a detached tree. All five thunks are now captured and called in destroy(), and every handler body short-circuits on the teardown signal.
• User edits during a build no longer vanish for up to a second — When a build finished, the build-activity-ended handler would pendingChanges.clear() and cancel the debounced flush before scheduling a 1-second safety refresh. Any real user edits, file deletions, agent writes, or rename events that happened during the build window were silently dropped — the tree stayed stale for a full second. The clear-and-cancel is gone; queued events now flush normally within 10 ms.
• Stop auto-opening every file the agent creates — After an agent batch-write, the sidebar used to click open every new file that matched the editor-open allowlist, thrashing the editor as each click overwrote the last. User context-menu creates piggybacked on the same path and opened files the user hadn't asked to open. Now the sidebar just pulses + scrolls new entries into view; you can click to open if you want to.
• Search auto-expansions don't permanently reveal directories — When a search auto-expanded directories to show matches, those expansions were indistinguishable from user-driven expansions — so if saveExpandedState ran mid-search (common: any delete during an active search triggers a refresh), the search-only expansions got persisted and those directories stayed permanently open across sessions. A new .search-expanded class marker separates the two so persistence skips search-only expansions; explicit user toggles upgrade search-only expansions into real ones.
• .env, Dockerfile, Makefile, .gitignore get syntax highlighting — All of these opened as plaintext because the extension map had no entry for dotfile-derived extensions or no-extension filenames. Added a filename-first lookup (Dockerfile → dockerfile, Makefile → makefile) and a prefix rule so .env.local, .env.production, etc. all resolve to shell highlighting. .editorconfig maps to ini.
• Native confirm() and alert() replaced with the styled modal — The delete flow and eight create/rename error paths were using browser confirm()/alert() which block the renderer event loop and look out of place against the rest of the app. All nine sites now route through the existing ConfirmModal component (a new showAlert variant handles single-button dismissals).
• ConfirmModal race conditions closed — Seven subtle bugs around modal lifecycle: a stale 200 ms teardown timer could destroy a follow-up alert, the duplicate-modal guard silently dropped both callbacks (callers waiting on either would hang), consecutive showAlert calls dropped the prior onClose, a reentrant showAlert from inside an onClose destroyed the new modal, the duplicate-guard's synchronous onCancel was a reentrancy risk. All fixed; the modal now composes safely under collision, reentry, and rapid-fire scenarios.
• Worker response race after project refresh eliminated — The search worker used to apply index updates from the old project against the new tree when a refresh swapped the data mid-flight — so searches returned a mix of real and ghost results until the next restart. The worker now stamps each response with a generation token; the sidebar bumps the generation on refresh and drops mismatched responses.
• Long lines no longer hide matches past column 500 — The search worker used to truncate every indexed line to 500 characters, so a match living at column 600 was invisible, and the content preview in the sidebar was the cut-off line with highlights sometimes landing mid-word. Replaced per-line truncation with a 200 KB aggregate budget — full lines go into the index, CSS truncates the visual preview with ellipsis, and match positions stay correct.
• And fourteen more — timer leaks on destroy, context-menu listener leaks, a crash on indexFile after worker teardown, filenames with special characters breaking querySelector lookups, stale decoration-tracking entries across deletes, children: undefined directories crashing the render, batched-create diff-removal path not pruning search/file/git state, descendant expandedState orphans, null-project-load leaving stale timers and decoration sets, detached <li> refs pinned across project refresh, and several others along the same lines.

Chat — UI Polish Pass

Twelve improvements across the main chat surface — the streaming path, the scroll behavior, and the small affordances you use without thinking. Eight features plus four follow-up fixes uncovered in review.

• Streamed messages finalize in place — no flash, no re-render — When a response finished streaming, the streaming element used to be removed and a fresh displayMessage node rebuilt in its place, causing a visible flash on long replies. Now the streamed element stays put: the blink cursor is dropped, the delete and copy buttons are attached, and the markdown is re-parsed once into the existing DOM. And because the in-place path had drifted from displayMessage's output (thinking block at the top, wrong classes, plain-text reasoning), the finalized DOM is now identical to what you get when reloading the same message from history — reasoning at the bottom, .ai-thinking / .thinking-content classes, markdown parsed through marked. No more "this looked different during streaming vs. after reload."
• Auto-scroll pauses when you scroll up during streaming — Scroll up mid-stream to re-read something and the chat now stays put instead of yanking you back down on every chunk. A pinnedToBottom flag flips off when you're more than 40px from the bottom; when you scroll back within 40px, it re-pins automatically and subsequent chunks snap the view down again. Three hardcoded scroll sites now route through a single maybeAutoScroll() helper.
• Blinking cursor in the thinking preview — While the model was reasoning, the live preview element could sit silent for a second at a time — long enough to make the UI look frozen. A subtle blinking cursor now lives inside .streaming-thinking-preview via a CSS ::after, reusing the existing blink-cursor keyframes. As soon as the first text chunk arrives the preview collapses into the <details> summary and the cursor disappears cleanly. Purely additive CSS.
• "Reasoning… 0s" label visible from the first frame — The cached thinking header used to be created empty and only populated by the next rAF tick or the 1s interval, so if the model emitted no thinking chunks for the first second the header was blank. Now the label is written at creation time so it's visible immediately; the timer and rAF updates keep refreshing the elapsed seconds.
• Agent summary headers update from pending → done — After the agent resolves, the in-chat summary strings ("Applying files…", "Running commands…") now rewrite themselves to reflect the final counts and outcome: "Applied N file(s)" / "Failed to apply N file(s)"; "Ran N command(s)" / "Failed to run N command(s)". New -done/-error CSS classes tint the headers green or red so the result reads at a glance.
• Only newly-arrived messages animate — Opening a 50-message conversation used to stutter-cascade as every message played its messageFadeIn. The animation is now gated on a .message.new class that displayMessage only adds for live arrivals; history-path callers pass an isHistory flag and skip the class. Loading a long thread feels instant.
• History loads and Refresh Chat land you at the bottom, always — The new pinnedToBottom flag is module-scoped, so scrolling up in chat A and then opening chat B (or hitting Refresh Chat) used to leave the new view scrolled to the top — every auto-scroll in the load path was a no-op. A new resetScrollPin() helper runs at every clear-and-reload site so fresh conversations always open at the latest message.
• Delete and copy buttons are discoverable without hover — Both .message-delete-button and .message-copy-button sat at opacity: 0 when the message wasn't hovered — invisible unless you happened to mouse over the bubble. They now rest at opacity: 0.35 with real colors, brighten to 1 on message hover, and pick up their accent shade on button hover with a smooth transition. Disabled and waiting-state overrides still take precedence.
• Thinking DOM stops rebuilding every animation frame — The rAF tick that updated the elapsed-time header used to innerHTML = '' and recreate the header and preview elements from scratch every frame. Both are now pre-created once per stream and cached in locals; the tick just writes textContent. One less source of layout thrash during a long reasoning chain.
• Filename highlighter short-circuits when there's no @ — highlightFilenamesInInput ran a regex + DOM mutation on every keystroke, even when the input had no mentions. Typing a paragraph-length message could cause caret jitter. A cheap indexOf('@') === -1 && !messageInput.querySelector('.filename-tag') guard now returns early before any regex or DOM work — the hot path on non-mention typing is effectively free.

Terminal — Claude Code @-picker Selection Visible Again

Follow-up to 1.5.12's WCAG-AA contrast bump. That fix solved one TUI bug and quietly broke another — Claude Code's @-file picker.

• Selected row is once again clearly distinguishable from the rest — Claude Code's @-picker doesn't paint a background for the highlighted row; it dims every other row using SGR \x1b[2m (faint). xterm.js implements faint by blending the foreground toward the background, then lifts the result back up if it falls below the configured minimumContrastRatio. At 4.5 (WCAG AA, set in 1.5.12 to fix a separate white-on-white rendering bug) the lift fully cancelled the dim, so every row in the picker rendered identically and the selection was visually invisible. Lowered to 2 — still corrects degenerate same-fg-as-bg collisions, but lets dim text actually look dim. Selected vs non-selected rows now read at a glance.

Terminal — Scroll & Follow-State Reliability Pass

An audit sweep through the terminal scrolling subsystem to close the class of stale-paint and follow-state bugs that 1.5.11's tab-switch fix pointed at but didn't fully cover. Thirteen fixes, most of them invisible until you hit them — and then jarring every time.

• Mouse wheel no longer goes dead after fullscreen, multi-panel toggle, or window bring-back — Four code paths transitioned a terminal container from hidden/resized → visible without routing through the fit+refresh+snap path introduced in 1.5.11. Entering/exiting fullscreen, flipping multi-panel on or off, and returning from a minimise/Spaces switch would all leave the active terminal mid-scrollback with a dead scroll wheel until a keystroke forced a redraw. All four now call the same onShow() that fixed tab switching.
• "↓ New output" badge and auto-follow reset correctly after clear and restart — If you scrolled up to read an error, then cleared the terminal or restarted the process, the badge used to stay pinned over an empty terminal and subsequent output wouldn't auto-follow — because clear()/reset() shrink content but don't move scrollTop, so no scroll event fires and follow-state never resets. Extracted a shared _resetFollowState helper and called it from both paths so they can't drift.
• Auto-follow no longer silently turns off during window resize or font-zoom — Transient scrollHeight/clientHeight measurements during a fit (scrollHeight shrinking before scrollTop catches up) could flicker the "at bottom" check to false and flip you into manual-scroll mode with no scroll action on your part. Ctrl+=/Ctrl+-/Ctrl+0 zoom hit it worst because a font-size change is a much bigger resize than a window drag. Follow-state is now snapshotted before the fit and re-asserted after.
• Inactive tabs can't erase your scroll-up state — The viewport scroll listener treated display: none containers (which report 0 - 0 - 0 < 10) as "at bottom" and reset follow-state to true. Switching to another tab could quietly wipe out your deliberate scroll-up on a background terminal. The handler now early-returns on zero-size viewports.
• Reattach from a detached window lands you at the live prompt — Three bugs in the reattach path: the tab could open mid-scrollback, the rolling line buffer was never updated from the restored xterm buffer (so @terminal mentions returned empty until new output arrived), and transit-data replay bypassed the scroll-badge + inactive-tab-indicator path that live output goes through. All three fixed — reattached tabs always snap to the prompt, @terminal mentions work immediately, and transit-data replay behaves like live output.
• Process-exit banner is visible when you're scrolled up — The ── Process exited (code N). Press any key to restart ── line wrote directly to xterm, bypassing the scroll-badge path. If you were scrolled up reading the error that caused the exit (common — that's usually why the shell exited), you'd see no indication the process had ended or that a key would restart it, and a harmless click quietly spawned a new shell you hadn't asked for. The badge now appears in that case so there's an obvious visual cue.

Terminal — UX Polish Pass

Three rough edges in the multi-terminal experience that we shipped in 1.5.10. A tightening pass.

• Active-terminal ring no longer flashes and disappears — In 1.5.10 the colored ring used an inset box-shadow on the terminal container, but xterm's canvas paints on top of that and covered the ring almost immediately after it appeared. Re-implemented as a ::after pseudo-element overlay with pointer-events: none so it sits above xterm's content (clicks still reach the terminal). The ring now persists the entire time a tab is active instead of vanishing after the first paint.
• No ring when only one terminal is open — A single session doesn't need a disambiguation cue. The ring now only renders when there are two or more terminals, so a solo terminal has a clean frame. Rematerializes the moment you open a second tab and disappears when you close back to one.
• Active tab row stays calm and uniform — Tried a per-session coloring on the active tab text/glow; it read as busy across three tabs and didn't hold up for non-green tab colors (see the color-theory discussion in the commit trail). Reverted to a neutral VS Code / iTerm-style active tab: white text, subtle neutral fill, no glow. Color signaling lives in two places now where it carries real information: the always-on left strip on each tab (per-session identifier, visible on active AND inactive tabs) and the panel ring (active session).

Zsh %-Marker Finally Gone

• Fixed a long-standing bug where zsh's reverse-video % would appear in terminals — Zsh's PROMPT_SP option prints a bold % plus a padded CR whenever the previous command's output didn't end in a newline, so the next prompt doesn't collide with partial output. The renderer was already setting PROMPT_EOL_MARK='' on the terminal's env to suppress the symbol — but the main-process PTY handler was building its spawn env from scratch using only process.env and silently dropping options.env. The override never reached zsh. Fixed by merging options.env into the spawn env so the existing renderer-side override actually takes effect. Classic renderer ↔ main handshake mismatch that had been hiding in plain sight.

Terminal — Never Close the Wrong Tab Again

When you're juggling multiple terminal sessions and go to kill the one that's finished work, it's easy to hit the × on the wrong tab. Each tab already had its own color on its left edge — now the active terminal body wears that same color as a persistent ring, so the tab → panel mapping is unmistakable at a glance.

• Active terminal shows its tab color as a persistent inset ring — In single-panel mode the colored ring used to only appear in multi-panel view, which meant when one terminal was visible there was no visual link between the highlighted tab and the session you were looking at. Now the active .terminal-instance always carries a 2px inset box-shadow in var(--tab-color), so switching tabs visibly repaints the whole panel frame in that session's color.
• Zero layout shift — Implemented as an inset box-shadow rather than a real border, so activating a tab doesn't nudge the xterm content by 2px. Multi-panel's existing colored border still wins via CSS specificity when you're in grid view.

UI Polish — Consistent Emerald Theme

Two small visual inconsistencies that only show up once you're using the app daily. Now fixed so the emerald accent is consistent everywhere.

• Advanced-mode (gear) toggle now matches the emerald theme in Agent Mode — In Agent Mode everything else adopts the green accent, but the gear toggle was still lighting up blue because it had its own --accent-primary active style and no agent-mode override. Added it to the same green-override block the web-search toggle already uses; the gear is now emerald-on-emerald like the rest of the header.
• Glassmorphism emerald scrollbar in the live preview — The scrollbar inside the previewed site was whatever boring grey Chromium gave it by default. The preview webview now has CSS injected on every dom-ready (survives navigations/reloads) — translucent blurred black track with an emerald gradient thumb that glows brighter on hover. Matches the app's glass aesthetic.

Claude Opus 4.7

• Migrated Opus 4.6 → Opus 4.7 across Agent Mode, chat, and the apply-diff path. Anthropic's latest and most capable Opus is now the one you get everywhere "Opus" was an option — sharper reasoning on long contexts and better tool-use. (Gemini 3.1 Pro remains the default model; pick Opus 4.7 from the model selector when you want it.)
• Thinking panel stays live — Opus 4.7 hides raw thinking by default; we explicitly request thinking.display = "summarized" so the thinking stream keeps rendering in the UI the way you're used to.
• Adaptive settings adjusted — Opus 4.7 no longer accepts temperature / top_p / top_k; dropped those from the adaptive request path so requests don't fail under the new API contract.

Terminal — Rock-Solid Lifecycle

A full reliability pass on the terminal controller to close every race and leak we could find. If you ever saw a terminal freeze, spawn in the wrong folder, or leak a PTY when you closed a tab fast — this is the release where that stops.

• No more crashes when closing a terminal mid-startup — destroy() and initialize()/restart() used to guard their own re-entrance but never coordinate with each other. A tab-close during init could null out the terminal mid-flight and the init continuation would then dereference it and crash. Destroy now flips isDestroying first and awaits any in-flight init or restart; all async paths re-check isDestroying after every await and bail cleanly, closing any PTY they'd already spawned so nothing leaks.
• Restart spawns the shell in the right directory after project switch — attachToExisting was unconditionally overwriting the stored cwd with the currently-open project, so if you switched projects and then hit restart on an older tab, the new shell would come up in the wrong folder. The original cwd is now preserved.
• Readiness / cleanup gaps in attach + init paths closed — split the shared init promise into separate init/attach slots so cross-method calls fail loudly instead of silently dropping arguments; flip isTerminalReady true before wiring xterm listeners so events never fire while the tab still reads "not ready"; add a destroy re-check after the initial resize so a racing close can't re-flip isInitialized back on; publish to this.terminals only after attach succeeds so a failed attach is never briefly visible; and make sure partial setup is torn down (ResizeObserver, scroll badge, window listeners) in the destroy-during-init bail path.
• Early bail on already-destroying terminals — _performInit, _performAttachToExisting, and _performRestart now short-circuit at entry and after the project-path lookup when destroy has already fired, avoiding a full xterm setup + createTerminal IPC spawn that would immediately have to be torn down.
• Detached terminal window: activity dot stops pulsing forever — Ported the active → waiting → idle timer chain from the main window into the detached window, so a background-output tab in a detached window now correctly decays from green pulse to amber to idle.
• Misc regressions swept up — reattach now only iterates terminals that actually attached successfully, the per-tab activity map is fully cleared on detach, command-launched terminals log init failures instead of swallowing them, and backend-id lookups use strict equality.

Agent Mode — Longer Autonomous Runs

• Claude Agent tool-turn ceiling raised 25 → 100 — Matches what Gemini Agent got in 1.5.6. Complex multi-step work (broad refactors, migrations, multi-file investigations) no longer hits an artificial "agent stopped after 25 turns" ceiling in the middle of a run.

Gemini Agent & Advanced Mode Fixes

• Advanced-mode toggle no longer gets clobbered mid-boot — If you clicked the Advanced Mode toggle while the chat was still finishing its async init, a stale .then() would land after your click and silently flip the internal flag back to its stored preference. The CSS class stayed on so the UI looked advanced, but Cmd+M and Cmd+1–9 would start behaving as if Advanced Mode were off. Removed the racy continuation; the inline callback now owns the state.
• TaskUpdate: no more literal "null" rendering in TaskList — Gemini's schema declares task subject/description as strings but can actually send null. The update path was using !== undefined, so a null would pass the write check and corrupt the task — rendering as the literal word "null" in TaskList output. Tightened to typeof === 'string'.

Live Preview Button — Easier to Find

• Play-triangle icon + one-time coachmark — The Live Preview toggle used to hide among a row of near-identical icon-only chat-header buttons. Swapped in a filled play triangle (▶), added a first-time pulsing cyan tooltip the first time you open an HTML file ("Click here to see your site live."), and rewrote the tooltip copy to plain language ("Preview site — see your HTML/site live").

Custom Domain Reliability Fixes

• Domain transfer to another PorkiCoder user actually works now — The transfer feature was silently broken since launch: supabase-js's listUsers wrapper drops the filter parameter on the floor (only forwards page + per_page to GoTrue), so the recipient lookup was returning the same wrong user every time and failing the exact-match check for everyone except whichever account happened to be at the top of the database. Replaced with a paginated lookup that exact-matches in JS. Transfer now also requires the recipient to have published a site first and the sender to enter that subdomain in the dialog, so the recipient inherits a domain pointing at content they actually control — instead of one still pointing at the sender's site (which the sender could keep editing, and which would tear down the recipient's domain if the sender ever deleted that site).
• Custom domain teardown no longer leaks AWS infrastructure on site delete — Deleting a published site that had a linked custom domain disabled the CloudFront distribution but never actually deleted it, leaving the disabled distribution and its SSL certificate orphaned. The site-delete handler now hands the row off to the same DB-backed reaper the standalone domain delete already used.
• Domain purchase no longer takes payment without provisioning — The Stripe checkout session is now created after the database row is claimed. If the row claim fails (transient DB error, or a unique-constraint race against another user buying the same domain), the user gets a clean 409 instead of a Stripe charge with no tracking row. Stripe failures after the claim roll back the row so the domain becomes purchasable again.
• "Change site" no longer reports false failures on cache-invalidation hiccups — When CloudFront's cache invalidation API hit a transient error during a change-site operation, the whole operation was reported as failed even though the origin update had already succeeded. The invalidation is now best-effort with a warning log; the origin change is consistent and edge caches refresh naturally as their TTL expires.
• Cleaner SIGTERM/SIGINT handling — Container shutdown no longer crashes with a stale cfCleanupTimer ReferenceError. Replaced with a single gracefulShutdown handler that drains in-flight HTTP requests and force-exits after 8 seconds if server.close() hangs.

New Features

• Autopilot Mode for Agent Edits — New header toggle that lets Agent Mode auto-apply file writes and edits without showing the diff preview modal. Per-edit progress still surfaces in the activity toast (with a ⚡ icon to distinguish autopilot writes from reviewed ones), so you stay informed without being interrupted. State persists across restarts. Works for both Claude Agent SDK and Gemini Agent.
• Gemini Agent: AskUserQuestion tool — Gemini agent can now pause mid-task to ask a clarifying question via a modal, instead of guessing on long autonomous runs. Mirrors the Claude Agent SDK's AskUserQuestion behavior.
• Gemini Agent: environment context injection — Each run now injects cwd, platform, shell, OS version, git branch + status, model identity, knowledge cutoff, and today's date into the system prompt. Prevents wrong-OS suggestions and stops the agent from stepping on uncommitted work.
• Gemini Agent: longer autonomous runs — Raised MAX_AGENT_TURNS from 25 → 200 and MAX_SUB_AGENT_TURNS from 10 → 50, matching Claude Code's effectively-unlimited default. Fixes premature "agent quit after 25 turns" cutoffs on legitimate multi-step work.
• Background SSL provisioning for custom domains — The domain purchase modal no longer blocks for the 5–60 minute SSL/CDN steps. After payment + the registrar/DNS handshake, it flips to a "submitted" state with a TLD-aware ETA and hands the domain off to a background watcher. Live status flows through Settings → Custom Domains, with toasts on completion and a boot-time catch-up that surfaces transitions that happened while the app was closed.

Fixes & Improvements

• Friendlier "awaiting payment" UI — The domain purchase modal no longer shows a raw payment_pending code chip while waiting for Stripe confirmation. Replaced with a soft blue info pill containing a spinner and a human label ("Waiting for payment", "Registering domain", etc) that updates as the backend status advances.
• Faster stuck-row recovery — The Retry button on Settings → Custom Domains now appears after only 3 minutes of in-progress staleness (down from 60 minutes), and explicitly says it's safe to click. The visual "failed" treatment is unchanged at 60 minutes — Retry is now a softer manual nudge for Stripe webhook hiccups.
• Clearer payment-wait copy — The awaiting-payment screen now correctly explains that we're waiting on the backend to confirm Stripe (not on the user to pay), and always exposes a "Continue in background" escape hatch.
• Subscription status auth fix — Fixed a pre-existing 401 on the subscription-status fetch by adding the Bearer token header — backend now requires auth on that endpoint.

Fixes

• Fixed "Request validation failed" error — All LLM and Agent Mode requests were failing because the Electron client was not sending the Supabase auth token to the server's validation endpoint. Both validateRequest and getSubscriptionStatus API calls now include the Authorization: Bearer header.
• Better error messages for validation failures — Validation errors now surface the actual failure reason (timeout, auth issue, network error) instead of a generic "Request validation failed" message.

New Features

• Retry domain provisioning — If domain setup gets stuck after payment, you can now retry provisioning directly from the app. Added IPC plumbing between the Electron client and backend for manual retry triggers.

Security

• Production error messages sanitized — API error responses no longer leak internal details (DB column names, AWS errors, Porkbun internals) in production.
• Security headers on user-content subdomain — Added HSTS, Content-Security-Policy with frame-ancestors 'none', and changed X-Frame-Options to DENY on the wildcard subdomain block, preventing cross-subdomain iframe attacks.
• Auth client privilege reduction — Auth verification client now uses the anon key instead of the service role key.

Fixes & Improvements

• Orphaned CloudFront distributions tracked and retried — Background distribution deletions are now tracked in-memory with a periodic retry scanner every 15 minutes. Timeout increased from 10 to 15 minutes.
• Domain renewal scanner runs more frequently — Increased from once per day to every 6 hours, with escalating urgency levels (critical/urgent/warning) based on days until expiry.
• Stripe webhook uses shared orchestrator — Domain provisioning triggered by Stripe webhooks now uses the singleton DomainOrchestrator, fixing missing SSE progress events and a broken concurrency guard.
• Partial upload rollback — When a deploy fails due to too many upload errors, successfully-uploaded files are now rolled back instead of left orphaned in S3.
• Partial upload threshold fixed — Exactly 10% file failure now correctly triggers the failure path (was off-by-one).
• Domain info status field fixed — Removed a nonsensical TLD fallback that could return "com" as a domain status.
• changeSite ownership check — The orchestrator now verifies subdomain ownership defensively, not just the route handler.
• deploy_log cleanup activated — The pg_cron schedule for hourly cleanup of old deploy log entries is now active.

Security

• Shell injection fix in Grep tool — Switched from shell execution to direct process spawn, eliminating a potential shell injection vector in Agent Mode's Grep tool.

Gemini Agent Mode Improvements

• 3-layer tool result size management — New graduated truncation system prevents context window overflow during long Gemini agent sessions. Results are progressively compressed across three layers before hitting the model's limits.
• Claude Code-like features — Gemini agent orchestrator gains WebFetch tool support, sub-agent spawning, and improved concurrent tool execution, bringing it closer to parity with Claude Agent Mode.

Fixes & Improvements

• Fixed false "Agent could not run" error — Resolved a startup error that incorrectly reported Gemini agent sessions as failed.
• Broader overflow detection — Layer 3 overflow detection now catches Gemini HTTP 400 errors in addition to existing overflow signals.
• Fixed response accumulation bug — Intermediate model text no longer leaks into the final response during agent loops.
• Race condition fix — User messages are now removed by ID instead of pop(), preventing a race condition when messages arrive mid-removal.
• Thought structure preserved during compaction — Aggressive context compaction no longer corrupts thought block structure.
• Sub-agent truncation — Tool result truncation layers now correctly apply inside sub-agent loops.
• Streaming suppressed during compaction retry — Prevents partial/duplicate content from reaching the UI during context compaction retries.
• capAggregateResultSize fixed — The function now actually shrinks oversized results to the target size instead of silently passing them through.
• WebFetch hardened — Body streaming now enforces size limits and a full-lifecycle timeout, preventing runaway fetches.
• Gemini agent error metadata — All error and abort return paths now include proper agentMeta, fixing missing progress indicators on failures.

Fixes & Improvements

• Custom domain shown after publish — Users with a custom domain linked to their site now see the custom domain URL (e.g. shamikashabnam.com) on the publish success screen instead of the .porkicoder.com subdomain.
• "Get Custom Domain" button hidden when not needed — The button no longer appears after every publish if the user already has an active custom domain for that site.

New Features

• Custom Domain Management in Settings — View all your custom domains with status badges (active, provisioning, renewal due), linked subdomains, and expiry dates directly in Settings.
• Change Site — Re-point any active custom domain to a different published site via a dropdown, right from Settings.
• Internal Domain Transfer — Transfer domain ownership to another PorkiCoder user by email. Two-step inline confirmation with real-time status. No premium requirement for the recipient.
• External Transfer Support — Dedicated "Transfer Out" action with direct support contact for transferring domains to external registrars.

Fixes & Improvements

• Fixed Change Site dropdown not working after domain transfer — recipient can now re-link the domain to their own site.
• Fixed CloudFront 504 errors on pre-migration distributions by ensuring http-only protocol for S3 origins.
• Domain card layout now stacks vertically, preventing text wrapping issues with long subdomain names.
• Published site storage migrated from Supabase Storage to S3 on the backend — eliminates Content-Type and CSP header workarounds.

Fixes

• Missing dependency fix — Added missing glob package that caused a crash on launch ("Cannot find module 'glob'") in the Gemini Agent orchestrator.

New Features

• Gemini Agent Mode — Gemini models now have a full Claude Code-style agent loop built from scratch. Concurrent tool execution, WebFetch tool support, and Google Search grounding let Gemini autonomously read, search, run commands, and browse the web inside your project — just like Claude Agent Mode.
• Publish-to-Web — Premium users can now publish any project as a live site at <name>.porkicoder.com. One-click deploy directly from the IDE with automatic subdomain provisioning.

Fixes & Improvements

• Removed terminal session grid view overlay for a cleaner terminal experience.
• Cleaned up unused dependencies for a smaller install footprint.

Fixes & Improvements

• Zero-Loss Terminal Detach & Reattach — PTY output is now buffered in the main process during detach/reattach transitions and replayed once the receiving window is ready. No terminal content is lost during window transfers, even with rapid detach→reattach cycles.
• Stale Mouse Mode Reset on Process Exit — When a process that enabled mouse tracking (vim, htop, less) exits or is killed, terminal modes are now explicitly reset. Previously, clicking in a terminal with stale mouse tracking could trigger an accidental restart that wiped the scrollback buffer.
• Buffer serialization timeout increased from 3s to 10s, preventing content loss when reattaching terminals with large scrollback.
• Exit events during transitions are now captured and delivered alongside buffered data, so terminals that die mid-transfer show "press any key to restart" instead of appearing stuck.
• Fall back to original main-window buffer when the detached window closes before initializing its controllers.
• removeTerminal() now properly awaits destroy() for clean PTY shutdown before DOM removal.

New Features

• Drag & Drop Files / Images into Terminal — Drop any file or image directly onto the terminal and its shell-escaped path is typed at the cursor. Pairs naturally with Claude Code running in the terminal — drag a screenshot or design file and it lands ready to reference.

New Features

• Multi-Session Terminal Management — Run up to 6 concurrent Claude Code sessions in dedicated terminal tabs. Each tab gets activity indicators (pulsing green dot for live output, amber when idle), an auto-assigned cyberpunk color palette, and persistent tab names (double-click to rename). Navigate with Cmd+1-9 or cycle with Cmd+Shift+[ / Cmd+Shift+]. Quick-launch a Claude Code session with Cmd+Shift+C. A session grid view overlay shows all terminals at a glance.
• Multi-Panel Split View — Toggle a CSS grid layout that shows all open terminals simultaneously in up to 3 columns. The active terminal is highlighted with its tab color. Click any panel to focus it. Works in both the main window and detached terminal windows.
• Terminal-to-AI-Chat Bridge — A "Send to Chat" button captures the active terminal's recent output (or current selection) and pre-fills it as a code block in the chat input. Type @terminal in the chat for autocomplete that injects the terminal buffer as inline context to the LLM. Powered by a 200-line ANSI-stripped rolling buffer.

Fixes & Improvements

• Kill orphaned PTY processes on app quit to prevent zombie processes.
• Reentry guard for toggleDetach() preventing concurrent detach/reattach operations.
• Fix attachToExisting() concurrent init race and missing error handling.
• Await async destroy before window.close() in detached terminal for clean shutdown.
• Close grid modal before detach to prevent listener leaks and stale DOM.
• Wire onInactiveOutput in detached window so tab activity dots show correctly.
• Validate DOM before toggling multi-panel state, preventing null reference errors.
• Set _cwd in attachToExisting() for correct restart directory.
• Cap _lineResidue at 10KB to prevent memory growth from oversized lines.
• Improved error handling in addClaudeSession() with graceful fallback.
• Keyboard shortcuts now use event.code for consistent behavior across keyboard layouts.
• Balanced multi-panel grid layout (2×2 for 4 terminals instead of 4×1).
• Track restart-on-keypress disposable for proper cleanup.
• Guard auto-scroll setTimeout against early destroy.
• Prevent visibility/resize listener accumulation on repeated panel toggles.
• Fix keyboard shortcuts using event.code for bracket keys across layouts.

New Features

• Multi-Screen Preview Navigation — Preview mode now discovers all HTML files in your project. Use ← → arrow keys (or the nav buttons in the preview header) to navigate between screens. The header shows the current filename and position (e.g. admin.html 2/3).
• Preview Any HTML File — Live preview no longer requires an index.html. Any .html file in your project is directly accessible; if no index.html exists, the first HTML file found is served automatically.
• Svelte & Vue Frontend Detection — Projects with .svelte or .vue entry files are surfaced in the preview navigator. Selecting one shows a clear build-step guide (npm install && npm run dev) instead of a blank page.

New Features

• Project Instructions (porki.md) — Drop a porki.md file in your project root and PorkiCoder's agent will load it as persistent project-level instructions, giving the AI full context on your codebase conventions, architecture, and preferences.
• Copy Button on Chat Messages — Every AI response now has a one-click copy icon so you can grab code or text without selecting.
• Element Attachments in Chat — You can now attach elements (images, files) directly into the chat for richer context when prompting the AI.
• Preview Error Auto-Send — When your live preview hits an error, PorkiCoder automatically sends it to the AI so it can diagnose and fix it without you copy-pasting stack traces.
• Agent Cancel Button — The stop button now properly cancels agent mode with a clean abort mechanism and double-send guard.
• Auto-Open Agent Projects — When the agent creates a new project, the sidebar automatically opens it as soon as the first file is written — no more manual navigation.
• Terminal Transcript Preview — Full transcript preview is now available in the terminal script picker.

Linux ARM64 Support

• Full Linux ARM64 build pipeline with auto-launched Docker cross-compilation from macOS.
• Fixed node-pty binary corruption when building Linux Docker images on macOS.
• Updated native modules and build scripts for ARM64 compatibility.

Fixes & Improvements

• Agent SDK no longer crashes when settingSources is empty — prevented an exit code 1 failure.
• Agent now retries with a fresh session when the SDK session goes stale, and no longer fails silently when Claude Code is unauthenticated.
• Sidebar no longer opens the parent folder instead of new projects — replaced 60 lines of heuristics with actual file paths.
• Cancel button no longer nukes the sidebar; Bash file writes are now tracked for auto-open.
• Executables and compiled binaries are now hidden from the sidebar file tree.
• Live preview no longer refreshes itself into oblivion when the terminal panel is open.
• Fixed packaged app not finding npm, which caused live preview to fail on full-stack projects.
• Upgraded electron-builder to v26 to fix node-gyp failures with Python 3.14.
• Fixed escaped HTML in stderr output, backtick injection, and sidebar race conditions.
• Removed 660 lines of terminal transcript context pollution for cleaner agent interactions.
• Closed isGenerating race window and ensured all AI messages have IDs.

New Features

• Live Preview — See your project running directly inside PorkiCoder without leaving the editor. Click the preview button to launch on a local port and start working visually.
• Smart Project Detection — PorkiCoder automatically detects your project type and picks the best preview strategy: Vite projects get native HMR, framework projects (Next.js, Nuxt, CRA) run npm run dev with auto port detection, and static sites get a built-in HTTP server with WebSocket live reload.
• Auto-reload — File changes trigger instant browser refresh, debounced to handle rapid multi-file saves from the AI agent.
• Framework-aware — Detects package managers (npm, yarn, pnpm, bun) and respects each framework's conventions.
• Graceful fallback — If Vite or a dev command fails, PorkiCoder falls back to static serving automatically.
• Zero config — No setup required. Open a project, hit preview, and it works.

New Features

• Claude Agent SDK Integration — Agent Mode now runs on the official @anthropic-ai/claude-agent-sdk, enabling autonomous multi-step tool use directly inside PorkiCoder.
• Human-in-the-loop Diff Review — Agent file writes now route through a blocking diff review bridge. Every edit is shown in a Monaco Diff Editor modal for you to accept or reject before it touches your codebase.
• Full Tool Suite in Agent Mode — Agent can now use Read, Glob, Grep, Bash, WebSearch, WebFetch, and sub-Agent tools autonomously to understand and modify your project.
• Resumable Agent Sessions — Agent conversations are now persisted per thread, so you can pick up complex multi-step tasks exactly where you left off.
• Adaptive Thinking with Streaming — Extended thinking is enabled in Agent Mode with thinking deltas streamed live to the UI, so you can follow the agent's reasoning in real time.
• Agent Progress Cards — New toast-style progress cards show planning, turn-start, tool-start, thinking, and generation-complete events as the agent works.
• Added Kimi model support — Kimi (Moonshot AI) joins Claude, GPT, Gemini, and Grok as a supported provider.

Fixes & Improvements

• Agent Mode now serializes diff reviews — only one review shown at a time with a 5-minute timeout to prevent stalls.
• Improved chat history management with a 40-message sliding window for better context handling.
• EventManager cleanup on app exit to prevent memory leaks from stale listeners.

New Features

• Thinking tokens are now stripped from model responses, reducing cost and improving output accuracy.
• Web search is now available on all models — including OpenAI, Gemini, and Anthropic. No longer limited to specific models.
• Effort controls for all models — Low, Medium, High, and Max settings are now available across every model. Current effort level is shown as green bars in chatview, and can be adjusted with ⌘ + ↑ / ⌘ + ↓.

New Features

• Introducing Agent Mode — capable of running shell commands directly in chatview.
• Max, High, Medium, Low Effort controls added for Claude Opus 4.6 and Sonnet 4.6.
• Better guardrails for less error prone code application.
• Added Codex 5.3 Medium and Codex 5.3 High models.

Fixes & Improvements

• Overall UI improvements for Chatview and Autocomplete file tagging mechanism.

New Features

• New file creation can now happen from chatview.

Fixes & Improvements

• Code block generation made more robust in chatview making allowances for LLM generated errors.

New Features

• Added git status indicator for files in the side panel.
• Added auto-apply option for multi-file code application in one-go.
• Code blocks now show as collapsible/expandable blocks for easier scrolling and navigation.
• Diff preview has been fully refurbished — now displays line-by-line stats for lines added and removed, alongside a completely redesigned, more polished interface.

New Models

• Added Claude Opus 4.6 and Claude Opus 4.6 Max — Anthropic's most capable models yet.
• Added Claude Sonnet 4.6 for fast, balanced code generation.
• Added Gemini 3.1 Pro and Gemini 3.1 Flash from Google DeepMind.

Fixes & Improvements

• Polished overall UI with a range of visual consistency improvements.
• Resolved terminal bugs causing unexpected output and instability.
• Fixed sidebar panel issues including incorrect file tree states and refresh glitches.

Fixes & Improvements

• Fixed terminal glitches for a smoother command-line experience.
• Resolved app slowdown when opening projects containing Python virtual environments.

New Features

• Added "Open in Finder" option to sidebar context menu for quick file access.

Fixes & Improvements

• Improved UI behavior on shrinking screens for better responsive layout.
• Resolved issues with selection of multiple files with the same name.
• Fixed filepath extraction for new files.
• Fixed issues with new file creation via chatview.
• Other minor quality of life improvements relating to UI resizing.

New Features

• Added Gemini 3 Pro and Opus 4.5 models.
• Added Zen Mode for full screen code viewing.

Fixes & Improvements

• Squashed bugs with terminal and sidebar panel.
• Improved coding for Normie Mode patches.
• Fixed HTML rendering in chatview.
• Can now view .ejs files in sidebar search.

New Features

• Added GPT-5 High and GPT-5 Medium to the list of available models, expanding your options for code generation and analysis.

Fixes & Improvements

• Real-time Sidebar Sync: Resolved an issue where the sidebar file tree did not update in real-time to reflect file changes, ensuring your project view is always current.
• Editor Display Fix: Fixed a bug where the editor would not display code modifications made by Claude models until the file was reopened. Changes are now reflected instantly.
• Terminal Display Correction: Corrected a minor display issue with a trailing '%' symbol appearing in the integrated terminal output on certain platforms.