What's new in v0.3.12

Streamlines iOS navigation, adds packaged mobile recovery, and strengthens
local Research, authenticated clients, and everyday workspace reliability.

Patch release on top of v0.3.11. Native iOS now keeps Chats and Tasks focused
as primary destinations while grouping project and familiar context beneath
them. Cave also gains packaged mobile transport recovery, local Research
resource contracts, stronger authenticated-client authority, and a collection
of focused Chat, Code, Calendar, and maintenance fixes.

Changes

• Simplify the iOS navigation drawer (#5058)
• Plan the simplified Canvas GitHub import modal (#5057)
• Clarify Beads skill trigger boundary (#5030)
• Stop GitHubActionPopover positioning itself inside a Popover (#5047)
• Define local Research resource contracts (#5054)
• Retry blank failed Copilot resumes (#5052)
• Add packaged Cave mobile transport recovery
• Define the Cave mobile recovery contract
• Match OpenClaw profiles to real Gateway discovery (#5050)
• Remove stale hydration test helper (#5049)
• Portal the Code Desk action popovers so the drawer cannot clip them (cave-cadp4) (#5046)
• Bind authenticated client requests to Cave authority (#5044)
• Say which calendar cells are short when a projection is truncated (cave-fdcd4) (#5043)
• Scope --allow-cooldown-override to named units (#5041)
• Add a focus-first Research PDF reader (#5039)
• Credit worktree-retention tags by OID rather than only local tag name (#5040)
• Adopt the shared surface toolbar
• Keep X hydration cache fixtures fresh (cave-290os)
• Restore focused sidebar contracts
• Correct the port-claim occupant docs and harden the two contracts that pin them (#4980)

Install

• macOS (Homebrew): brew install --cask opencoven/tap/coven-cave (installs the latest release)
• macOS (Apple Silicon): download CovenCave-v0.3.12-aarch64.dmg, open it, drag CovenCave.app to Applications.
• macOS (Intel): download CovenCave-v0.3.12-x86_64.dmg, open it, drag CovenCave.app to Applications.
• Linux: download the AppImage asset, chmod +x CovenCave_*.AppImage, then run it.
• Windows: download the .msi and double-click to install.

Verify checksums

shasum -a 256 -c SHA256SUMS

Build provenance

This release was built on a manual run with allow_unconfigured_registries
enabled, so the signed OpenCode, Grok, and OpenClaw compatibility-registry
checks did not run. The build uses the built-in baseline schema parsers.

Releases published from a tag push cannot skip those checks.

Full changelog: v0.3.11...v0.3.12

What's new in v0.3.11

Makes iOS pairing land on the requested chat reliably, adds richer Familiar
insight, and sharpens everyday Chat, Research, Rituals, and Calendar flows.

Patch release on top of v0.3.10. Native iOS now preserves invite destinations
through approval, pairing, discovery relocation, and delayed reconnects, while
Familiar profiles gain a comprehensive overview and truthful analytics.
Shared surfaces add calendar-backed cron visibility, live run feedback,
stronger research recommendations, compact chat chrome, and hardened release
and recovery gates.

Changes

• Refuse to report a worktree creation whose unit is not present (#5036)
• Route paired iOS invites to requested chats (#5035)
• Project cron runs into Day, Week and Month calendar views (cave-aa10e) (#5034)
• Show the run you just started (#5031)
• Scale Research resources and ground topic suggestions (#5032)
• Tell the cron detail pane when the cron next runs (#5029)
• Compact Chat workspace chrome (#5028)
• Put the crons on the calendar (#5027)
• Show the cron dialog what it will actually do (#5026)
• Make the first magnification step a nudge, not a jump (#5025)
• Keep Research runnable without Codex launch policy (#5024)
• Require the signed OpenClaw release contract (#5015)
• Make project identity host and worktree aware (#5017)
• Use dropdowns for podcast voices (#5023)
• Let an operator discharge the retirement cooldown, on the record (#5022)
• Say what the last run did, and stay legible while hovered (#5020)
• Match Research Desk to familiar model defaults (#5021)
• Rebuild the Rituals Crons tab from the design handoff (#5019)
• Modernize branded destination cards (#5018)
• iOS: add truthful Familiar analytics digest (#5004)
• Refine chat continuation controls (#5013)
• fix(gate): report a coven spawn that never ran as a timeout, not a bad version (#5014)
• Reconcile X publish surface with its design spec (cave-uajyn) (#4988)
• perf(chat): share large-list project grouping (#5012)
• fix(ci): skip desktop publishing for iOS releases (#5011)
• fix(rituals): compress calendar chrome (#4998)
• fix(ios): restore deterministic XCTest gate (#5010)
• iOS: build Familiar Overview command center (#5005)
• ci: shard final release E2E validation (#5009)
• Refine the command palette into a sleek search surface (#4995)
• fix: make Client v1 fixture cursors canonical
• ci: isolate PR and release E2E servers (#5008)
• feat(ios): build comprehensive Familiar profile (#5003)
• feat(projects): finish AI-generated project icons

Install

• macOS (Homebrew): brew install --cask opencoven/tap/coven-cave (installs the latest release)
• macOS (Apple Silicon): download CovenCave-v0.3.11-aarch64.dmg, open it, drag CovenCave.app to Applications.
• macOS (Intel): download CovenCave-v0.3.11-x86_64.dmg, open it, drag CovenCave.app to Applications.
• Linux: download the AppImage asset, chmod +x CovenCave_*.AppImage, then run it.
• Windows: download the .msi and double-click to install.

Verify checksums

shasum -a 256 -c SHA256SUMS

Build provenance

This release was built on a manual run with allow_unconfigured_registries
enabled, so the signed OpenCode, Grok, and OpenClaw compatibility-registry
checks did not run. The build uses the built-in baseline schema parsers.

Releases published from a tag push cannot skip those checks.

Full changelog: v0.3.10...v0.3.11

What's new in v0.3.10

Modernizes native iOS chat and project controls, adds familiar avatar
editing and Auto mode, and turns the XCTest suite into a real release gate.

Patch release on top of v0.3.9. The native app gains a full-width project
selector, focused runtime and model controls, editable familiar avatars,
stronger reconnection behavior, and repaired project-context tests. The shared
experience also includes a calmer composer, unified response status, faster
chat rendering, OpenCoven UI alignment, and GitHub-connected Canvas sketches.

Changes

• Run iOS XCTests in CI instead of only compiling them

• feat(canvas): connect sketches to GitHub projects (#4963)

• feat(ui): align Cave with OpenCoven reference (#4960)

• fix(chat): unify familiar response status (#4961)

• Polish the chat composer (#4959)

• fix(ios): repair 12 XCTest failures the suite's first run exposed (cave-vz17i) (#4958)

• feat(desktop): make main-window identity multi-window-safe (#4956)

• perf(chat): reduce list and transcript latency (#4957)

• fix(desktop): stop a failed startup holding the port claim across its dialog (#4953)

• test(research): pin the cache-expiry semantics X hydration depends on (cave-gbqwe) (#4954)

• feat(chat): add mobile Auto mode control (#4955)

• fix(cave-wh97u): gate the frozen-write / live-read test time-bomb class (#4943)

• fix(settings): harden Client access reconciliation (#4889)

• Add routing decision workflow schema (#4915)

• Verify the Chat v1 Phase 2 canonical reads gate (cave-ma00l) (#4951)

• fix(desktop): align offline cache validation with native limits (#4919)

• Polish native iOS project and chat controls (#4930)

• Verify the Chat v1 Phase 1 discovery and pairing gate (cave-ob9ue) (#4950)

• fix(board): preserve the blocker pin through deletion repair (#4949)

• Keep Thread Signal details out of transcript flow (#4884)

• Stabilize cold E2E surface coverage (#4923)

• Restore fully hidden desktop sidebar (#4936)

• fix(desktop): repair background reachability updates (#4947)

• feat(research): add durable ResearchRun surfaces (#4872)

• fix(ci): synchronize code rail readiness (#4938)

• feat(code): Work scheduler from the Cody Code Reading v2 handoff (cave-7c329) (#4940)

• feat(ios): Familiar hub shell and dashboard refresh store (cave-9rwd.2) (#4946)

• Give a research run one origin across chat and the Research Desk (cave-8o5s7) (#4916)

• Render markdown live in the chat composer (cave-7ncq) (#4937)

• Resolve Coven under the search-path key Windows actually uses (cave-6bb4m) (#4934)

• fix(cave-6r4t4): give the worktree patrol a real process-cwd probe on Windows (#4922)

• Surface in-flight /auto missions outside their own chat (cave-7gryo) (#4939)

• feat(api): versioned Familiar dashboard read contract (cave-jsnfl) (#4944)

• fix(research): anchor the X hydration test's cache seeding to the real clock (cave-p36ov) (#4942)

• Force behavioural credential-refusal coverage for every authenticated client-v1 route (#4917)

• fix(cave-3458e): give the unsupervised research fallback an actionable remedy (#4885)

• fix(cave-apg39): fail on var(--token) references to tokens defined nowhere (#4927)

• fix(desktop): claim the dedicated port before spawning the sidecar (#4925)

• fix(design): rescale --radius-panel with the corner-radius setting, and close the codemod's radius blind spot (#4350) (#4881)

• fix(beads): resolve bd natively on Windows instead of silently using WSL (#4924)

• Stop a legacy conversation leaving the keyless tail mid-walk (cave-wbxcu) (#4888)

• feat: page the Home Continue strip instead of truncating it (cave-9oi1s) (#4933)

• fix(cave-eo0b0): stop the filemode override pinning every Windows worktree active (#4918)

• fix(shell): stop a keyless keydown killing the shell handler at a third site (#4931)

• Choose the Cave servers' heap ceiling instead of inheriting it (cave-7pksp) (#4932)

• feat(research): make the podcast render's delivery directable (cave-sl7je) (#4926)

• feat(client-v1): make capability discovery operationally truthful (#4882)

• fix(projects): share one root hash between projectTint and the icon prompt (cave-72em) (#4935)

• fix(cave-4x1ag): define --destructive and --shadow-popover on the base palette (#4929)

• Hydrate attached X sources into a mission run and remove them afterward (cave-v3ajh) (#4867)

• Unify dashboard and familiar page framing (#4921)

• fix(cave-lcxc6): keep the toast stack off the shell's top-right chrome (#4887)

• Protect the packaged desktop's plaintext mobile access token on Windows (cave-hdt3f) (#4886)

• fix: serialize Cave store locks and shard E2E (#4890)

• Show default title for new chat sessions

• Update interactions.jsonl

• fix(cave-2aahf): release provably-stale auto-locks in the unattended worktree sweep (#4883)

• Update interactions.jsonl

• Differentiate strict Git probe timeouts (#4880)

• fix(worktrees): fail closed on hygiene mutations (#4877)

• Manage Client v1 access in Settings (cave-9pifu.3) (#4875)

• fix(sidebar): remove project scope disclaimer (#4876)

• Tighten Client v1 capability plan gates (#4878)

• Feat/cave 20wrn calm streaming chat (#4879)

• Remove recurring local access pairing prompt (#4874)

• Bump Next to 16.3.1 and update bead history

• Add sidecar lock parser, digest, and tests

• Page canonical conversations by an immutable key (cave-fhjlu) (#4863)

• docs(client-v1): plan operational capability semantics (#4873)

• Add guarded local worktree hygiene and scheduled reporting (#4871)

• Bound Beads Dolt sync credential hangs (#4861)

• Let a hardened Windows host boot, and restrict the raw mobile token (cave-37fxr, cave-fawvh) (#4864)

• Fix explicit research title provenance (cave-d1p8s) (#4866)

• Stop racing the drawer animation to reach the backdrop (cave-m1mgi) (#4865)

• Preserve project picker expansion focus (#4868)

• Polish project switcher and simplify chat rail (#4862)

• fix(research): preserve explicit mission titles

• fix: make iOS Cave reconnection self-healing

• fix(research): polish prompt recommendations

• Record real-authority client-v1 conformance (cave-2hjtv) (#4859)

• Wire the four uncalled X cache/OAuth lifecycle paths (cave-1tu16) (#4858)

• Persist a group message delete to every session it fans out to (cave-1osn7) (#4857)

• Serve the client-v1 canonical read projections (cave-jfa9y) (#4856)

• Bind the client-v1 ingress gate to every path it claims (cave-uuxga) (#4855)

• Reference the eight shipped client-v1 routes (cave-2kyas) (#4850)

• Derive the client-v1 public path list from the contract (cave-d1sjz) (#4851)

• Enforce client-v1 filesystem ownership on Windows (cave-adcmu) (#4852)

• Meter the pairing poll route against the exchange brute-force budget (cave-11w87) (#4849)

• Stop pre-authorizing client-v1 paths with no handler (cave-4841) (#4847)

• Give X publishing a surface in Comms Operations (cave-8i8q5) (#4828)

• Allowlist local roots for the Coven CLI binary (cave-ckk.1) (#4825)

• Land the Chat v1 Phase 1 pairing authority on current main (cave-9pifu) (#4840)

• Persist a single-message delete from iOS (cave-ioswipe.6) (#4827)

• Pin the release-notes guard-disclosure env expressions (cave-9dg) (#4826)

• Persist single-message delete to the server (#4824)

• Confirmed, non-retrying X publishing for familiar comms (#4823)

• Hide dot folders by default in the project folder picker (#4822)

• Report and attribute a red main after a direct-to-main push (#4792)

• fix(scripts): repair the direct-run guard that made two CLIs inert on Windows (cave-zya, cave-wxq) (#4821)

• Gate staged rollout on acceptance evidence and a bounded rollback drill (cave-udcn7) (#4789)

• fix(release): pin release gates by consulting them, not by naming them (#4809)

• Gate rollout on a verified rollback target (cave-ilh1h) (#4782)

• test(e2e): count Enhance's own sends, not every POST to a shared endpoint (#4800)

• Refuse off-machine daemon sockets on Windows (#4780) (#4787)

• Pin exclusivity, not just existence, in the streaming-chat guards (#4784)

• fix(scripts): resolve the Windows bd npm shim instead of spawning a bare name (#4807)

• Fix main's last e2e failure (no duplicate send), and forbid duplicate suite wiring (#4790) (#4793)

• Encrypted replaceable offline read cache (cave-f1k8n) (#4786)

• fix(release): key the iOS provisioning profile off each target's bundle id (#4815)

• feat(client-v1): serve release compatibility metadata on a health route (#4785)

• feat(performance): enforce phase-6 production budgets (cave-o8gc4) (#4788)

• Verify updater signatures before publishing the manifest (cave-gcb0i) (#4783)

• fix(release): sign the iOS archive manually against the installed profiles (#4814)

• Add agentic Research Improve and Mermaid draft rendering (#4811)

• Fix use-undo-delete-deferred test: extract scheduleDeferredDelete from React module (#4805)

• fix(release): let the iOS archive resolve provisioning headlessly (#4813)

• Attach Research resources before the first pass

• fix(dev): disable persistent Turbopack cache

• Remove the recurring fresh-pairing-token interruption for trusted local browser REST and terminal access.

• Refuse a second desktop copy cleanly instead of letting it race the first onto
  the dedicated port. Launching another CovenCave used to end on a raw
  EADDRINUSE dump from Node; it now names the copy that already holds port
  3020, or says what kind of program is holding it, and points at
  COVEN_CAVE_PORT for running two copies side by side. The refusal now
  arrives before the second copy touches anything the running one is using, so
  it no longer wipes the live diagnostics file, prunes the shared reliability
  store, or adds a duplicate tray icon on its way out. On Windows that means
  the second copy never opens the CovenCave startup screen: the refusal arrives
  right away, in the same plain-text note other early-exit messages use, rather
  than inside that screen behind a runtime-preparation wait that can take
  minutes.

Install

• macOS (Homebrew): `brew install --cask opencoven/...

What's new in v0.3.9

Restores the release pipeline and ships the refreshed desktop chrome.

Patch release on top of v0.3.8. v0.3.8 tagged but never produced builds: its
platform validation failed on all three runners, which skipped the iOS
TestFlight upload. This release repairs that path and the frontend contracts
that went red behind it.

Changes

• Repair red main frontend contracts (#4797)
• docs: add Bead Quests design prompt (#4795)
• Add chat kind filters and PR state fixes
• Refresh desktop chrome and activity UX (#4791)
• Restore the iOS release path by patching every canonical reading key (#4794)
• Document AICSS chat approval and segment fix
• Enforce local remote-tracking hygiene so Desktop's branch list stays honest (#4769)
• test: repair the stale contracts deadlocking every PR, unit and e2e (#4768)
• Update interactions.jsonl
• Update .gitignore
• Update interactions.jsonl
• Reuse board resource and fix split pane sizing
• Document analytics and fix split pane sizing
• feat(chart-room): consume canonical multi-parent dependencies and import the legacy overlay (#4757)
• Consolidate recovered platform reliability work (#4759)
• Consolidate recovered product experience work (#4758)
• fix: restore browser access prompt (#4761)
• Implement Research Protocol v1 (#4760)
• Establish signed release-candidate validation (#4753)
• fix(desktop): mint dev sidecar auth token
• wip(cave-atox4-marketplace-logo-colors): marketplace logo color treatment
• wip(cave-kex69-performance-reports): Cave performance report workflow
• wip(cave-w3hx6-empty-self-report): empty thread self-report handling
• wip(cave-b21o1-appstore-status): App Store Connect release status wiring
• wip(cave-w7wzu-research-video-e2e): research studio video e2e coverage
• wip(cave-cma81-remove-ios-terminal): remove the iOS terminal surface
• Fix Task9 stale source contract
• feat(chat): surface released stream updates
• fix(chat): await late quick-chat stop promises
• fix(quick-chat): separate BFCache Stop ownership
• fix(quick-chat): reconcile BFCache stop outcomes
• fix(chat): coordinate Stop without stream fields
• fix(chat): isolate run stops and terminal streams
• fix(chat): isolate stop intent ownership
• fix(chat): harden final streaming contracts
• fix(chat): preserve early cancellation intent
• fix(quick-chat): close terminal cancellation races
• fix(quick-chat): honor late stop outcomes
• fix(quick-chat): close final stop races
• fix(quick-chat): harden stop and rich replies
• fix(quick-chat): stop active server runs
• feat(quick-chat): share calm streaming responses
• Fix Task7 meaningful output guard
• Fix non-prose empty-success fallback
• fix(chat): preserve rich response chronology
• feat(chat): use stable streaming response model
• Fix blank citation-only markdown blocks
• Fix streaming Markdown integrations
• Fix Task 6 streaming response gaps
• feat(chat): render shared streaming responses
• Fix streaming presentation scheduling
• Fix projected streaming source mode
• Fix streaming buffer source modes
• Fix exact streaming replacement detection
• Optimize streaming boundary scans
• Fix streaming presentation hook lifecycle
• Fix snapshot transition boundaries
• Fix streaming boundary detection
• fix(chat): calm streaming presentation buffer
• feat(chat): coalesce live response presentation
• Fix tool activity chronology merge
• fix(chat): suppress mirrored tool progress
• Restrict tool activity classification
• feat(chat): derive shared streaming turn model
• Fail closed on test runner flags
• fix(chat): reject raw multiline shell input
• feat(chat): normalize trusted verification results
• fix(chat): partition first nested list boundary
• fix(chat): close nested list boundaries
• fix(chat): finalize stable list items
• fix(chat): detect nested list markers conservatively
• fix(chat): retain list identity for nested tails
• fix(chat): preserve streaming block identity
• fix(chat): honor markdown block precedence
• fix(chat): stabilize markdown block boundaries
• feat(chat): partition stable streaming markdown
• fix(chat): protect result marker parsing
• feat(chat): parse streaming result markers

Install

• macOS (Homebrew): brew install --cask opencoven/tap/coven-cave (installs the latest release)
• macOS (Apple Silicon): download CovenCave-v0.3.9-aarch64.dmg, open it, drag CovenCave.app to Applications.
• macOS (Intel): download CovenCave-v0.3.9-x86_64.dmg, open it, drag CovenCave.app to Applications.
• Linux: download the AppImage asset, chmod +x CovenCave_*.AppImage, then run it.
• Windows: download the .msi and double-click to install.

Verify checksums

shasum -a 256 -c SHA256SUMS

Full changelog: v0.3.8...v0.3.9

What's new in v0.3.7

A calmer native iOS shell, clearer Chats, and a safer cross-platform foundation.

Patch release on top of v0.3.6.

Changes

• Refine native iOS navigation, Chats chrome, Settings shelves, and accessibility
  while retiring the native-only Terminal surface (#4729)
• Layer native destination titles above app toolbars for clearer hierarchy
  (#4727)
• Require explicit Research cost approval and protect active Terminal missions
  (#4726)
• Publish a deterministic Client v1 contract with precise success and error
  envelopes (#4717, #4725)
• Preserve marketplace logos through shared transport handling (#4724)
• Harden CI recovery, managed worktree retention, and release lifecycle guards
  (#4719, #4720, #4721)
• Improve Chat follow-up pills and session-toolbar alignment (#4718, #4707)
• Add familiar execution analytics, durable local previews, direct podcast
  rendering, and the inference-route foundation (#4710, #4714)
• Restore compact Code-rail Terminal access and improve cross-theme Beautiful UI
  legibility (#4713, #4702)
• Honor COVEN_BIN in the desktop shell and retry transient managed Node
  installation failures (#4703)

Install

• macOS (Homebrew): brew install --cask opencoven/tap/coven-cave (installs the latest release)
• macOS (Apple Silicon): download CovenCave-v0.3.7-aarch64.dmg, open it, drag CovenCave.app to Applications.
• macOS (Intel): download CovenCave-v0.3.7-x86_64.dmg, open it, drag CovenCave.app to Applications.
• Linux: download the AppImage asset, chmod +x CovenCave_*.AppImage, then run it.
• Windows: download the .msi and double-click to install.

Verify checksums

shasum -a 256 -c SHA256SUMS

Full changelog: v0.3.6...v0.3.7

What's new in v0.3.6

Seamless familiar credential intake and a Chat panel that stays with you across the Cave.

Patch release on top of v0.3.5.

Changes

• Make familiar Vault credential intake dynamic, secure, and copy-paste friendly (#4700)
• Add a global shell-owned right Chat panel (#4697)

Install

• macOS (Homebrew): brew install --cask opencoven/tap/coven-cave (installs the latest release)
• macOS (Apple Silicon): download CovenCave-v0.3.6-aarch64.dmg, open it, drag CovenCave.app to Applications.
• macOS (Intel): download CovenCave-v0.3.6-x86_64.dmg, open it, drag CovenCave.app to Applications.
• Linux: download the AppImage asset, chmod +x CovenCave_*.AppImage, then run it.
• Windows: download the .msi and double-click to install.

Verify checksums

shasum -a 256 -c SHA256SUMS

Full changelog: v0.3.5...v0.3.6

What's new in v0.3.5

Hardened iOS mutations and familiar avatars, now with corrected cross-platform packaging.

Patch release on top of v0.3.4.

v0.3.4 was tagged but stopped at release validation before any artifacts or
TestFlight build were published. v0.3.5 supersedes it and carries its complete
product payload.

Changes

• Carry forward replay-safe iOS mutations and Familiar avatar management (#4695)
• Restore cross-platform packaging with the measured sidecar runtime budget (#4698)
• Review every product change since v0.3.3

Install

• macOS (Homebrew): brew install --cask opencoven/tap/coven-cave (installs the latest release)
• macOS (Apple Silicon): download CovenCave-v0.3.5-aarch64.dmg, open it, drag CovenCave.app to Applications.
• macOS (Intel): download CovenCave-v0.3.5-x86_64.dmg, open it, drag CovenCave.app to Applications.
• Linux: download the AppImage asset, chmod +x CovenCave_*.AppImage, then run it.
• Windows: download the .msi and double-click to install.

Verify checksums

shasum -a 256 -c SHA256SUMS

Full changelog: v0.3.4...v0.3.5

What's new in v0.3.3

Closes an access-gate bypass on mobile, keeps chat attachments and skills
inside their runtime boundaries, revives Research Desk missions that had been
failing at their first iteration, and dresses every surface in the Coven crown.

Patch release on top of v0.3.2. Headline: the mobile access gate is restored
without locking the desktop webview out, and the chat runtime no longer stages
files or resolves resume roots outside the boundaries it grants.

Added

• The Coven crown is now the app icon on every surface — the Tauri desktop set,
  Windows tiles, Android mipmaps, the iOS asset catalog, the PWA icons, the
  macOS tray glyph, and the Tauri startup splash, all regenerated from the
  brand art as rounded-rect tiles with transparent corners (#4577).
• Familiar avatars are now stored host-authoritatively in the desktop host
  workspace and refresh from it, replacing the split model where desktop
  uploads lived in IndexedDB while host avatars lived in the workspace (#4579).
• Research Desk short videos now default to the ElevenLabs Rachel voice (#4581).
• Research diagnostics now carry a fuller trace (#4585).
• Release automation can publish an authenticated TestFlight build (#4587).

Security

• Restored the mobile access gates that had been removed, closing an auth
  bypass, and fixed the gate's own blind spot in the same change: a document
  navigation is not a fetch, so it never carried the sidecar token and could
  not exchange it for a cookie. The gate now admits that one request shape
  rather than refusing the desktop webview outright (#4571).
• Chat attachments and advertised skills now stay inside runtime boundaries.
  Per-turn image files stage beneath the familiar workspace instead of
  os.tmpdir, which sat outside every runtime grant; narrow skill roots are
  granted read-only; and staged files a crashed turn stranded are swept on the
  next delivery, matched strictly against the names Cave itself writes (#4576).
• A hidden generation's resume root is now authorized rather than exempted.
  Canvas, enhance, and journal turns skipped the project-launch check because
  they run in the familiar's own workspace — but with no Cave conversation
  record the resume root falls back to the daemon's global session list, which
  is not the familiar's directory (#4582).

Fixed

• Chat sandboxes now refresh after grant changes instead of holding the
  boundaries they were created with (#4580).
• Both chat expand lightboxes — attachment and carousel — now sit above the
  reader overlay band. They portal to body, which puts them in the root
  stacking context competing with every other portalled overlay rather than
  with the transcript (#4584).
• Research missions fall back to a direct Copilot spawn when Coven's native
  process supervisor is absent. Every mission had failed at its first iteration
  since #4524 with advice — update the Coven CLI — that no published CLI could
  satisfy, so the feature was dead for every user (#4578).
• The worktree auto-lock now counts a pushed tag as retention, matching the
  guard it claimed to mirror. It had used git rev-list --count HEAD --not --remotes, which consults only remote-tracking branches — git keeps no
  remote-tracking refs for tags — so a branch archived as a pushed tag was still
  treated as at-risk (#4573).
• A refused maintenance fence now explains itself and prints the admissible
  rerun instead of failing with an opaque message (#4572).
• Deleting a project now cascades correctly, the worktree lifecycle patrol
  reports managed-creation exceptions, and a flaky standalone-budget assertion
  was stabilised (#4567).

Install

• macOS (Homebrew): brew install --cask opencoven/tap/coven-cave (installs the latest release)
• macOS (Apple Silicon): download CovenCave-v0.3.3-aarch64.dmg, open it, drag CovenCave.app to Applications.
• macOS (Intel): download CovenCave-v0.3.3-x86_64.dmg, open it, drag CovenCave.app to Applications.
• Linux: download the AppImage asset, chmod +x CovenCave_*.AppImage, then run it.
• Windows: download the .msi and double-click to install.

Verify checksums

shasum -a 256 -c SHA256SUMS

Full changelog: v0.3.2...v0.3.3

What's new in v0.3.2

A maintenance patch: worktree-lifecycle reporting states a repository-wide
failure once rather than once per unit, and the Coven brand assets now live
in the repository.

Patch release on top of v0.3.1. Headline: a single checkout-level probe failure
no longer reads as N independent problems in the worktree lifecycle report.

Added

• Added the Coven brand assets under assets/brand — logo, Discord banner, and
  a wordmark banner variant.

Fixed

• The worktree lifecycle inventory now reports a repository-wide default-branch
  probe failure in its global errors, and the patrol states it once under its
  own heading instead of stamping the identical sentence onto every affected
  unit. Classification is deliberately unchanged: each unit still fails closed
  on the error and still carries it in its own probe errors (#4565).
• Retargeted a stale comment that cited the removed
  scripts/worktree-sweep-prompt.md to scripts/worktree-sweep.sh, and the
  patrol report now hints that a retired worktree's bead may still be open so a
  human can close it from the sweep log (#4568).
• Resolved Chat model application state when the downstream harness echoes the
  request, so the applied model is reported from the harness response rather
  than assumed from what was sent (#4569).

Install

• macOS (Homebrew): brew install --cask opencoven/tap/coven-cave (installs the latest release)
• macOS (Apple Silicon): download CovenCave-v0.3.2-aarch64.dmg, open it, drag CovenCave.app to Applications.
• macOS (Intel): download CovenCave-v0.3.2-x86_64.dmg, open it, drag CovenCave.app to Applications.
• Linux: download the AppImage asset, chmod +x CovenCave_*.AppImage, then run it.
• Windows: download the .msi and double-click to install.

Verify checksums

shasum -a 256 -c SHA256SUMS

Full changelog: v0.3.1...v0.3.2

What's new in v0.3.0

Search that understands Cave's workspace, more legible multi-agent Chat,
safer operator-controlled handoffs, and sturdier local runtime boundaries.

Coven Cave 0.3.0 is a minor release on top of v0.2.5.

Added

• Added workspace-wide Search with a deterministic query parser, SQLite FTS5
  index, provider registry, file-backed sources, and a ranked /api/search
  surface (#4481, #4482, #4484, #4490, #4502).
• Added Cave agent filesystem surfaces, a Chat run rail, inline audio and video
  playback, and grouped multi-agent runs with earlier runs folded into the
  transcript (#4457, #4460, #4461, #4486, #4504).
• Added orchestration validation at the Board write boundary, including
  actionable failure blockers while preserving human-authored direction (#4527).
• Added an accessible iOS terminal composer and macOS CI compilation for iOS
  changes (#4475, #4446, #4516).

Changed

• Redesigned streamed Chat responses with stable rendering, accessible status
  controls, copy/retry/collapse affordances, and clearer task-work and code
  rails (#4515, #4462, #4463, #4478).
• Made first-run setup more guided and diagnosable, including honest progress,
  managed-NPM timeout diagnosis, checksums, and Windows CLI repair (#4477,
  #4476, #4518, #4523, #4539).
• Improved worktree lifecycle operation with bounded reprobes, explicit
  deferred states, retention proof, local-plane apply, and more precise
  per-unit metadata diagnostics (#4471, #4480, #4499, #4519, #4520, #4526,
  #4529, #4530, #4532, #4536, #4538, #4540).

Security

• Loopback access-token deployments now require user-bound authorization, and
  familiar handoffs are operator-approved proposals rather than automatic work
  dispatch (#4533, #4551).
• Hardened local process and workspace boundaries: private research ownership,
  cross-platform process launches, resolved-CWD authorization, bounded prompt
  transport, constrained worktree handoffs, and authenticated sidecar readiness
  (#4524, #4531, #4537, #4543, #4546, #4550).

Fixed

• Stabilized daemon connectivity, lifecycle diagnostics, sidecar recovery, and
  iOS credential-failure handling (#4487, #4489, #4495, #4496, #4497, #4498,
  #4500, #4506, #4509, #4510).
• Corrected Board mirrored-card retention, stored Asana/GitHub titles, Chat
  reply ordering, reader typography, and task/journal controls (#4469, #4507,
  #4508, #4514, #4535, #4459).

Build and release

• Decoupled Cave release readiness from the daemon's version while retaining
  the requirement that a published daemon package is available (#4450).
• Reduced routine CI fan-out, recovered cancelled coverage safely, and added
  regression coverage for Chat-to-Coding workflows (#4503, #4505, #4517,
  #4549).

Install

• macOS (Homebrew): brew install --cask opencoven/tap/coven-cave (installs the latest release)
• macOS (Apple Silicon): download CovenCave-v0.3.0-aarch64.dmg, open it, drag CovenCave.app to Applications.
• macOS (Intel): download CovenCave-v0.3.0-x86_64.dmg, open it, drag CovenCave.app to Applications.
• Linux: download the AppImage asset, chmod +x CovenCave_*.AppImage, then run it.
• Windows: download the .msi and double-click to install.

Verify checksums

shasum -a 256 -c SHA256SUMS

Full changelog: v0.2.5...v0.3.0