Model and effort controls in one popup, provider switches that wait for your first message, and a faster, more compact desktop. The relay minimum version is unchanged.
Added
Model and effort together. The model button shows the current model and effort. Its popup keeps the effort controls and opens a provider/model picker showing only the chosen provider models, with the current session model selected. Provider icons expand their labels on hover and stay in place while the model list scrolls (#1570).
Preview a provider switch. Choosing another provider asks for confirmation, then opens a temporary conversation that follows the original history. The new provider starts only when you send your first message; closing the temporary conversation discards it. Sending pauses the original conversation with a provider-switch reason. Click its locked message box to resume it. Fork relationships and suspension survive an engine restart; mirrored conversations keep their model and provider locked (#1571).
More room for conversations. A frameless desktop window, an optional auto-hide workspace rail, and a chat-list toggle beside the machine selector leave more space for your work. Search, new chat and connection actions open focused dialogs (#1535, #1541).
Session title cards open on hover, one at a time, and stay open when clicked (#1539).
A new engraved gear app icon (#1568).
Changed
Faster conversation opening. Reopening a conversation paints its cached transcript first. Large conversations load their round index in windows, and the engine avoids repeatedly resolving every session folder for file requests (#1549, #1551, #1552, #1554, #1557).
CADRE recommends Claude CLI 2.1.310 or later, matching the bundled Claude Agent SDK.
Daemon startup diagnostics name the boot step that is taking time (#1548).
Fixed
Conversation panes settle their layout before revealing content, with stable scrollbar gutters and columns (#1559, #1565, #1567).
Session details dismiss immediately when the pointer leaves (#1569).
A new chat fills the page in buddy mode, and its title strip keeps a usable drag area (#1534, #1536, #1540).
Taking over a conversation can force-stop an unresponsive occupant (#1529).
Computer use for every agent, steering a running turn, the Approve for me mode, and simpler key handling. The relay's minimum desktop version is unchanged.
Added
Computer use. Claude, Codex and Gemini can use a machine's screen, mouse and keyboard in chats its owner starts on that machine, on macOS and Windows. Download cua-driver from Machine settings › Computer use; on macOS, grant it access there too. It is on for new chats once set up, and can be switched off on the same page. In Claude and Codex, looking at the screen needs no approval unless a screenshot is to be saved to a file; everything else, and every Gemini call, follows the chat's approval mode (#1497).
Steer a running turn. In supported Claude and Codex chats, a message sent during a turn reaches the agent without interrupting it. Steer now sends a queued message into the running turn, and Send after this turn holds an unread one back. Other chats still queue (#1451).
Approve for me. Chat owners can let Claude's or Codex's own reviewer approve the requests it judges safe. Ask me is now called Ask for approval, and No approvals is Full access (#1454).
Update progress. An update shows its download progress and can be cancelled or retried, with a manual download link if it fails (#1498).
Before installing a plugin from a registry, the confirmation shows the permissions the registry declares for it. Plugins can read a session's automation-loop status (#1466).
The Enhance prompt shortcut can be changed in Settings › Keybindings (#1466).
A subagent's tab can ask the parent agent to message it (#1475).
Accounts can export their own data from the relay (#1480).
How full the context is shows on the model line under the message box, such as 42% · 84K / 200K, with exact counts on hover or keyboard focus. It turns amber at 60% and red at 90%, and clears after a model switch or a compaction until the next turn reports (#1520).
The cadre relay commands accept --account <id>, and a revocation error names the account and relay and says how to sign in again (#1483).
The phone layout's drawer can sign out of the selected server (#1495).
Changed
New accounts unlock on another device with their password, without a recovery-code step; the code is shown only when that cannot be set up. The Secure-mode switch and the key-trust banner are removed; recovery codes, recovery-key export and device approvals remain. Accounts that chose Secure mode keep its requirements and show a note saying so (#1487, #1508).
Relays can hold workspace keys when their operator turns this on (off by default). Members can then read sessions without a key being delivered to each device, and the relay can read those sessions too (#1479, #1482).
Codex's Ask for approval and Approve for me run under a workspace-write sandbox, falling back to read-only if its settings cannot be read, never full access (#1460).
CADRE recommends Codex CLI 0.164.0 or later; older versions can still be configured (#1463).
Git is on by default, and turned on once on upgrade so the Summary card has its Git section, with GitHub beside it. Plugins awaiting a permission approval stay off, and either can be turned off again (#1470).
On a machine with several accounts, mirrored and locally started conversations follow the folder's assigned relay account; conversations in unassigned folders stay local (#1496).
Split and maximize buttons point up and down when panes are stacked, and More Actions sits at the right end of the title bar (#1456, #1458).
Fixed
After connection trouble, a message whose delivery is unconfirmed shows a notice with Send again, keeping its text and mentions; a later confirmation clears it (#1505).
Sessions re-attach after a reconnect the engine did not see (#1493).
Claude chats started in CADRE are linked to their transcripts, which fixes duplicate mirrored entries and missing history or provider switching. Older missing links are repaired where the conversation can be identified unambiguously (#1509).
A turn keeps its attribution when it is rebuilt from the vendor's transcript (#1469).
A stopped Claude subagent keeps its last activity summary, and checking Claude's setup no longer leaves empty project directories behind (#1465).
Mirrored sessions report liveness correctly, and a very long archive-retention setting keeps archives indefinitely instead of expiring them early (#1478).
On Windows, plugin file operations work again in CADRE-managed worktrees (#1494), and a stopped engine is no longer reported as running but unresponsive (#1464).
On Windows, cadre daemon restart no longer crashes with a stack overflow (#1519).
Security
A relay session list, search and history read return only the caller's own binding (#1486, #1491).
Machine denials win over grants for machine events and cover that machine's archives, and owner-only grants are pinned (#1474, #1490).
The engine proves its identity with a challenge, and key-binding proofs are domain-separated (#1499).
Dependencies and the server toolchain are updated for security advisories (#1462).
Release notes in the app, videos in the chat, plugins that give the agent tools, and the Unreal Engine plugins. No new minimum version.
Added
Release notes in the app. The first launch after an update shows what changed since the version you last saw, and Settings › About › What's new shows every release. The download page shows the current notes and links a full changelog (#1449).
Videos and GIFs play in the chat, including a bare video path the agent mentions. Animated GIFs can be paused, scrubbed and looped, and consecutive images sit side by side (#1400, #1404, #1432, #1438).
**Plugins can give the agent tools, skills and / prompts.** The agent in a chat calls a plugin's tools over MCP, and a plugin service knows which chat called it. A plugin's panel can open a web address or another of its own views (#1313, #1314, #1316, #1351).
Unreal Engine plugins are bundled, along with Unreal Farm for builds across machines, and the Perforce plugin. Git and Perforce now show file status in the file tree (#1351, #1352, #1353, #1355, #1409, #1410).
A step that stalls is flagged, with buttons to interrupt it or let it continue (#1413).
Background tasks are listed, and you get a notification when one finishes (#1424).
Choose a different model while a turn is running. It is used from the next turn (#1429).
Home checks this machine's setup at every start: MCP servers, Codex's configuration and proxies, with fixes to vendor files applied only once you confirm them (#1405, #1431).
Idle worktrees are marked and can be cleaned up in one batch (#1412).
Importing local projects has a page of its own; detected folders can be registered automatically (switchable in setup), and session folders are checked before they are imported (#1329, #1337, #1425).
The session list can be resized and hidden (#1330, #1338). Hovering a round's history dot summarises it, and the selected dot is centred rather than scrolling the rail (#1444, #1447).
A floating toolbar opens a chat's files in other apps (#1411). On a narrow window the right panel stacks above the chat (#1446).
The browser build has a phone layout and can be installed on a phone's home screen as a web app (#1349).
Proxy models are listed in full, grouped by vendor, with a per-machine hide (#1398, #1407).
The agent's reply language can be pinned, with a hint when a chat grows long (#1408).
2D Asset Studio walks you through setting up an image key, lists the key's models and shows the cost; each image provider shows its own sign-in options (#1426, #1430).
Godot is found where it is installed and offered to plugins (#1419), and Godot Play ships a gameplay-brief skill (#1420).
Changed
Machine settings open in their own dialog, beside App settings, and every settings page has one entry on Home, in the sidebar and in the switcher (#1350, #1354).
The Alaya Lab theme is redesigned after the Alaya Studio design system (#1365), and the Core section in settings matches the built-in sections (#1292).
No-approval mode uses Claude's and Codex's own approval bypass (#1428, #1440).
Claude, Codex and Gemini are built-in provider plugins (#1282).
Open chats' history is read in the background, within a memory budget (#1406, #1421).
The edited-files card covers only the chat's workspace and is coloured by what the turn did (#1348, #1361).
Fixed
A hung or dead engine is recovered, and every way the engine ends is logged (#1403).
Sending a message scrolls the chat to its end, even from older history (#1310).
A turn is never headed "Human": locally it is You, and over a relay it names the person (#1294).
Chats interrupted by a CLI update are kept, and the next message resumes them (#1402).
On Windows, Claude installed from npm starts directly instead of through its .cmd shim, and the app says when Claude is unavailable (#1395, #1401).
An interrupted Claude turn shows as cancelled, not failed (#1397, #1433).
A live mirrored session keeps following its new output (#1333), and a long session shows its newest plan rather than an older one (#1299).
The import page keeps your ticks when folders are registered automatically, stops listing kept folders once that is off, and counts only listed folders (#1335, #1336, #1339).
A hovered file header in Review stays opaque (#1445).
Chat links end where the address or path ends (#1399), and preview tabs name their file (#1423).
Older messages stay reachable when you scroll beyond the history first loaded for a chat (#1422).
cadre daemon stop and restart act on the daemon a --state-dir names, and a session command waits for its key instead of failing (#1305).
Security
The relay's signing key can be rotated with an overlap (#1306).
Encryption moved to crypto_secretbox, file reads are capped, a plugin panel's frame is torn down on a tab switch, and Godot's remote-debug listener accepts only the Godot it started (#1308, #1309, #1311, #1312).
Fixes for typing into conversations the app found on disk, and for an engine that would not stop. No new minimum version.
Fixed
Typing into a mirrored conversation showed nothing. After you typed into a Claude or Codex session the app was only mirroring, neither your message nor the reply appeared, though the agent had run the turn. They now appear (#1281).
A conversation whose folder was deleted could not be continued, most often one that ran in a git worktree that has since been removed. It now resumes in the nearest folder that remains (for a removed worktree, its repository), and the chat says where it now runs. Where no suitable folder remains, the error names the missing folder instead of a bare "No such file or directory" (#1283, #1286).
Quitting the app could leave the engine running whenever a Claude or Codex chat was live: it logged "shutting down" and never exited, leaving its lock file behind. It now stops in about a second (#1284, #1286).
Your own messages are labelled You rather than a generated gui-xxxxxx name (#1285).
Models are grouped by what the vendor's CLI says they run, each alias shows what it runs, and the effort pill sits to the right of the model, in the chat only (#1271, #1272, #1277).
Changed
Remote workspaces are an experiment, off by default. Joining a server, workspaces, relay accounts and machine sharing are hidden in the desktop app until you switch on Settings › Experiments › Remote workspaces. Nothing signs you out; the browser build is unaffected (#1276).
The model menu is taken entirely from each vendor's CLI, one row per model with its 1M-context switch in the menu; Default is named on the effort pill and every level is described (#1274, #1278, #1280).
A finished group of tool calls collapses (#1279). A CLI update lists the processes it will close as rows and shows its live output on one line per process.
A first-run setup guide, a new look, a reasoning-effort picker, and Claude and Codex updates from inside the app.
Added
A setup guide on first launch: Appearance, Engine, Runtime, Agent, then importing your existing sessions. Reopen it any time from Settings › This machine › General (#1255).
Reasoning effort for Claude and Codex. An effort pill beside the model, in a chat's composer and on the new-chat card, offers the levels the machine reports for that model. A level picked in a chat also becomes where that vendor's next new chat starts (#1266).
Update Claude and Codex from the app. When a newer vendor CLI is available the app can run the vendor's own update, after showing which running processes it will close; only the processes you confirmed are closed (#1260).
GitHub and GitLab plug into the Git panel as forge plugins (#1257).
Changed
A new look: the Alaya Lab theme is the default, with new fonts, provider icons, a new folder picker and one style for form fields across the app (#1255).
A machine's model list tells the CLI's own models from the ones a refresh probed, and shows each model in at most two lines with its id beside the name (#1258, #1261).
Models from a provider's endpoint are kept across restarts and fetched again when the engine starts, and the Show filter on the model list is remembered and followed by the model menus (#1259).
Archived sessions are rendered from a portable transcript sealed into the archive when the session ends (#1257).
The app recommends the Claude CLI version that its bundled Agent SDK pairs with (#1269).
Fixed
A menu row highlighted by the pointer no longer also draws a focus ring (#1265).
Desktop notifications, model tags, and Codex edits drawn like Claude's.
Added
Notifications when a session needs you: an agent finished or stopped, needs a permission, asked a question, or someone @-mentioned you. Clicking one opens that session, switching workspace first if needed. Settings › Notifications chooses Never, When the app is in the background (the default) or Always (#1243).
A machine's model list is one list in which each model is tagged by where it came from (CLI, Upstream, User, Built-in), with chips to filter by tag. Refreshing no longer jumps the page back to the top (#1242).
Fixed
A Codex session's edits showed no diff. Edits, commands, image views and web searches in a Codex session are now drawn as Claude's are, with the diff inline, the "Edited N files" card and the Review tab, including in mirrored and archived sessions (#1246).
**Contains a security fix for remote commands. Update every machine that runs Gear Cadre or the cadre CLI**, not only the one you use the app on: the fix is in the machine's daemon. There is no new minimum version, so 0.2.18 still signs in to the hosted relay.
Security
Remote commands. A machine now checks a command that arrives over a relay against the sender identity the relay stamps on it, and does not serve a command without that stamp. The hosted relay stamps every command, and so does any relay built from 0.2.18 source or later. If a relay does not, cadre daemon status says so (#1006).
Added
Chat:
Tool calls are grouped into rows whose output wraps instead of overflowing, with the latest thinking in the group's header, for Claude and Codex. Codex rows show exit codes and durations (#1039, #1047).
Diffs: an edit call draws its diff inline, each turn that edited files ends with an "Edited N files" card, and the right panel has a Review tab for any turn or the whole session (#1041, #1046, #1051).
Images in chat, with a lightbox and a right-panel view (#1045).
Branch a chat into a new one from any message, choosing the machine, provider (Claude or Codex), model and folder. A branch shows where it came from. Answers gain a Copy action (#1042, #1053, #1231).
Subagents: open one in a panel, stop it or send it to the background from its own tab, and see a turn's subagents in a list. Stop says which agents it could not reach. Subagent progress summaries can be turned on per machine by its owner; each is a model call about every 30 seconds per running subagent (#1052, #1055, #1056).
A session Summary card holds the plan, the agents and the session's git state. It replaces the agent board and the running strip above the composer (#1050, #1068, #1132).
Prompt enhancement: a button in the composer (Cmd/Ctrl+Shift+E) rewrites the draft on the chat's machine and puts it back for review. It is never sent on its own. The button appears once the machine's owner turns it on and picks a provider under Machine settings › Prompt enhancement; observers never see it (#1002, #1004).
Projects: create and edit a project in a panel, give a local project its own name, give it several folders or take one out, delete a project, and fold its chats by clicking its name. A project's git worktrees can be listed, created, opened and removed (#1152, #1206, #1214, #1216, #1218).
Close an open chat back to the start page with Cmd/Ctrl+W, or the chat's close button where its tab is hidden. The chat keeps running in the sidebar. On macOS, closing the window moves to Cmd+Shift+W (#986, #989).
Plugins are packages: the Plugin Store can add one from a file or a URL, shows where each plugin came from, and says what failed to load. The cadre CLI can pack, install and list plugin packages.
The About box links to the alpha's known issues.
Workspace settings show the workspace's trust mode, once the relay reports one.
Changed
Sessions started by scripts and agents (claude -p, the Agent SDK, codex exec) are hidden by default. A Settings switch and an "N hidden" line at the foot of the list bring them back. The hover on a session shows what started it and when (#987).
Claude is driven through Anthropic's Agent SDK (#1177).
Long sessions load their rounds on demand (#1238).
Inline code gets a subtle chip, and fenced code blocks get a visible surface that scrolls inside itself and can be reached with the keyboard (#1036, #1049).
Workspace settings and members are one page, and archived chats are one-line rows that open, and are unarchived when you send to them (#1204, #1208).
Fixed
Every app icon, including the macOS Dock icon, is the blue Gear mark on white, drawn on Apple's icon grid on macOS (#978, #1040).
Very long session titles are clamped in the hover, and a long title no longer floods the tab strip (#979, #990).
A queued message interrupting a turn, or changing the model mid-session, no longer stops a Claude session's background agents (#1037).
Codex sessions started from the app show their thinking, as mirrored ones already did.
Codex subagent events no longer leak into the parent session (#1044).
A session name being edited is no longer replaced, and its caret moved, by a rename arriving mid-edit (#1059).
Known limitations: undo for file edits is not available yet, so review a turn's diff, then revert with your own tools. On the hosted relay, the About box's known-issues link opens the relay's sign-in page until the relay is updated, and the trust mode is not shown there yet either.
Relay-side changes are in the source too, and apply to a relay only once it is rebuilt from this release's source and redeployed. They include a plugin registry that a mapped GitHub Actions workflow can publish to (with a new public-endpoint setting for its bucket), a trust mode on every workspace (trusted for now), the known-issues page, and the bundled object store changing from MinIO to Garage. An existing self-hosted relay has to move its object data before it is rebuilt from this source, and MinIO-era backups are refused by the new restore. The steps are under "Migrating from MinIO to Garage" in the source repository's deploy/README.md at commit f1eb0ee2 (#1023); later revisions of that file no longer carry them.
Contains security hardening for device keys, key sharing and archives. Update. 0.2.18 is the new minimum version for the hosted relay: older desktop builds are asked to update at sign-in.
Security
Device-key proof. When the app or the cadre CLI registers a device key with an account, it now proves that it holds that key. A relay can require the proof: see "Self-hosted relays" below (#903).
Key sharing. Stronger device-certificate checks and account-root pinning before a machine shares session keys; see "Account keys are trusted on first use" in the source repository's docs/known-limitations.md. The app and the CLI pin each machine's key the first time they see it, and refuse and report a later change of key. Who may write key grants is narrower (#929, #939).
Archives. Archive session keys are sealed only to recovery keys the machine trusts (#904).
Machine sharing. A daemon that has been connected for a while keeps refreshing who a machine is shared with, so revoking a share and the key pins above keep taking effect. A session started in an over-broad folder, such as a disk root or the home folder, gets no write root (#905, #935, #962).
Added
A local workspace starts empty, with a start page to create a project or "Import all local sessions" (#948).
Sessions started in a git worktree are grouped under their repository, and a local project can take more folders with "Add folder…" (#933).
Changed
A consistency pass across the UI: better focus rings and target sizes, long text that wraps instead of overflowing, dialogs and popovers that stay on screen, settings that read and behave alike, and progress and failures announced to screen readers (#943 – #973).
A revoked account says so, instead of "relay auth failed" (#906).
Relay-side changes are in the source too, and apply to a relay once it is rebuilt from this release's source and redeployed. They include stateless sign-in challenges, reclaiming an address from an unconfirmed sign-up, and a public mode that runs without email verification when no mail server is configured.
Self-hosted relays. The v0.2.18 source still reports minClientVersion 0.2.17: the floor moved to 0.2.18 on main right after this release. Once your relay is rebuilt from a tree whose GET /version reports 0.2.18, and your users are on 0.2.18, you can set CADRE_API_REQUIRE_KEY_PROOF=true to refuse device keys registered without proof. Older desktop builds are then asked to update at sign-in. An older cadre CLI fails cadre login with key proof required, and the fix is to update it. See "Device-key proof" in the source repository's deploy/README.md.
Contains security fixes for machine sharing and the local daemon socket. Update, especially if you share a machine with other people.
Security
Machine sharing. The daemon now enforces each person's share role on everything that arrives over the relay: who may start and resume agents, which launch settings are the owner's alone, and which folders people you share with may browse. Share collaborator only with people you would let run commands on the machine (#902).
Local daemon socket. Session traffic is sent only to connections that have authenticated, and the socket enforces an authentication deadline and bounds what it buffers (#889).
Projects. Adding the root of a disk, the home folder or a top-level system folder as a project is refused (#894).
Export the recovery key; older account backups are pruned. State-directory hardening is bounded and the kit file is saved owner-only (#818, #899).
Added
cadre uninstall, offered by the Windows uninstaller too (#786).
Copy diagnostics from Settings and from the error screen (#855).
Delete your account from the app (#829).
Changed
Failures that only reached the console are shown in the app (#827).
Unfinished surfaces are hidden for the alpha (#808).
An invite link says it is pasted into + › Join, not opened (#864).
Fixed
cadre spawn ends when the daemon closes its socket (#861).
A version probe the OS refuses as "text file busy" is retried (#887).
Relay-side security fixes are in the source too: revoking a device now revokes its tokens and disconnects it, and the relay tightens how it routes session traffic. They apply to a relay once it is rebuilt from this release's source and redeployed.
Contains a security fix for the local daemon socket. Update.
Security
The daemon now refuses connections that do not present its local token, and refuses WebSocket upgrades from browser origins it does not recognise. The desktop app, the cadre CLI and the Godot bridge present the token automatically (#771).
If you cannot update yet and drive the daemon **only from the cadre CLI**, start it with CADRE_REQUIRE_TOKEN=1: older CLIs already present the token. The desktop app before 0.2.16 cannot present it and would be locked out of its own daemon, so for desktop users the mitigation is to update.
CADRE_REQUIRE_TOKEN=0 now turns the token requirement off. That is an escape hatch for clients that cannot read daemon.lock. It is logged on every start, and it makes the socket reachable again by any other local user on the machine.
New installs keep ~/.cadre private to their user (#762).
Added
Choose how each provider's executable is found, with a link to restart the engine when an environment variable decides it (#733, #734).
Upload custom game covers, at full size, from Gear Zero Sync (#731, #732).
Changed
The chat UI is polished to match Codex (#683).
A crash of the cadre CLI prints a report instead of a bare panic (#769).
Fixed
A plugin editor opens on the machine the session runs on (#690).
Browser sign-up solves the relay's ALTCHA challenge (#763).
The Gear Zero asset library, projects grouped under their machine, and chats you can archive. (0.2.14 was never published: its release run was cancelled.)
Added
Gear Zero asset library, and simpler Gear Zero upload and download flows that show progress and completion, say where a download goes and what it is named, and check a game before it is uploaded (#714, #716, #717, #720).
Archive a conversation out of the list into an archive page, and see a card when you hover a session row.
A project's chats are drawn one batch at a time.
Godot Play can use a directory you pick, and shows the current one beside the picker (#728, #730).
A relay workspace stays usable while its relay is unreachable (#695).
Gear Zero room assistance, and English throughout the Gear Zero plugins (#692, #721).
Changed
The sidebar puts the machine on top and its projects in the list, and a sibling git worktree is folded into the project it was cut from. The active project follows the focused tab, and the machine roster names three liveness states.
Fixed
Thumbnails render for generated 3D assets, framed correctly for skeletal animation (#723, #724).
Approving new machines by code, the Gear Zero Sync plugin, and a much larger plugin system.
Security
Approve a new machine by comparing a code, and machines refuse device keys the account root has not certified. The owner's root is pinned when a machine enrols, and device keys are checked against it (#657, #665, #666).
An account's root key can be wrapped several independent ways, with a tier to choose between them (#655).
The engine's state directory is out of the app's reach (#614).
Added
Gear Zero Sync plugin: link a project to a Gear Zero game, browse its directories, download existing games into new projects, and follow sync progress, which survives a restart (#652, #653, #654).
Scene assets: browse complete scene assets with thumbnails, preview and improve saved Godot scenes, and open game assets and runtime layouts in UI Studio (#630, #636, #662).
Play Godot games inside plugin tabs, and open a project's plugins from the sidebar (#619, #620).
Claude shells: the agent's background commands, read-only, beside the chat (#622).
The / menu works in drafts, with argument completion, and vendor slash commands are listed before the agent first speaks (#641, #644).
Click a file path in a chat to open the file (#612).
A maximize and restore control on the right pane (#629).
A fresh local install sets itself up (#615).
Changed
Plugins bind by a declared scope chain, their tabs persist across restarts and say why one cannot open, and plugins are installed app-wide with enablement per machine. The Plugin Store is refreshed and manages local plugins across workspaces (#638, #640, #643, #645).
Every machine setting has one home, and app settings split into This machine › Engine and Node.js; Node.js is picked by source instead of typed as a path (#618, #621, #632).
The 3D previewer is renamed 3D Asset Studio, and 2D asset editing is unified and expanded (#623, #624, #627).
Fixed
One account reached at two URLs is treated as one account (#668).
Codex interrupts are confirmed and its MCP calls are drawn (#648).
An archive epoch that no recovery key can open is refused (#650).
A closing HTML tag in a chat is no longer read as a file path (#613).
When the agent asks you a question, it appears as a card you answer in place, and the composer waits until you do (#609).
Fixed
A conversation found on disk gets its status before it is shown, and a file's modification time changing alone no longer counts as work on it (#607, #608).
The / command menu, the plugin system and Plugin Store, subagents and MCP.
Added
**The / command menu** in the composer, with the app's own commands and the vendor's slash commands (#597, #600).
An approvals picker in the composer (#603).
Plugins: a Plugin Store to browse plugins and configure their settings, with Asset Studio, UI Studio, Desktop Pet and the Gear Zero theme bundled. Plugins also work for sessions on remote machines (#585, #586, #588, #589, #591).
Subagents: child sessions a chat starts and talks to, and the agent's own subagents shown read-only beside the chat (#577, #583).
MCP for Claude and Codex: a Claude session loads the MCP servers the CLI would, and the app shows the roster (#578, #580).
Node.js runtime in Settings: the engine finds Node.js on the machine, or installs one on request.
The machine's folders fold into General, with a dialog to detect them (#574).
The sidebar says when the engine on this machine is not running (#581).
Changed
Taking over a session is one line over the locked composer (#582).
The transcript's machinery rows sit behind a log level (#598).
The app checks for updates every hour and never installs on its own (#576).
Fixed
A mirrored round is shown live, the round line is a divider, and whoever holds the session is named (#575, #584).
The engine notice counts only this engine's own sessions, and is shown once (#573).
The first published build of the Gear Cadre desktop app and the cadre CLI: one place to run, watch and share Claude Code and Codex sessions across your machines.
Added
Chat with Claude Code and Codex (and Gemini CLI over ACP) on any of your machines, with a model picker that says what Default resolves to, a 1M-context switch where the vendor offers it, switching the model mid-session, pasted and dropped files, @-mentions of colleagues, a thinking line and Esc to stop.
Your existing sessions, mirrored. Claude and Codex sessions started outside the app appear read-only beside your own, and you can take one over to continue it.
Transcripts drawn as rounds, with a sticky header and a dot rail, collapsible thinking, and history that pages in as you scroll up.
Workspaces and machines: sign in to a relay, add this machine to a workspace in one click, invite people, and share a machine with per-person roles. Traffic is end-to-end encrypted, and goes peer-to-peer where the network allows.
Encrypted archives of finished sessions, readable only with your own keys, and search across your conversation history.
Providers: configure each provider with stored profiles, and each machine's model list is read from its endpoint.
Projects and folders: browse a machine's folders, open a new chat in a folder, and rename a project.
English and Simplified Chinese, light and dark themes, profile pictures, and automatic updates.
The cadre CLI, bundled with the app: run the engine, enrol machines, and drive sessions from a terminal.