MyAgens
MyAgens

Changelog

Every release, newest first

What's new, changed, and fixed in each version of MyAgens.

v0.5.89 new · 1 changed · 4 fixed
Added
  • PostgreSQL and SQLite database connectors: two new live integrations (connectors 9 and 10). Each exposes list_tables, describe_schema, and a read-only query tool (SELECT/WITH only, guarded by assertReadOnlySql), plus a write-scoped execute tool gated behind WRITE_TOOLS. PostgreSQL uses a lazily-loaded pg client from a connection-string credential; SQLite uses Node's built-in node:sqlite opened read-only. (9a3e884)
  • Unreal Engine MCP connector: connects to the official Epic UE 5.8 MCP plugin running in the local editor via SSE at http://127.0.0.1:8000/mcp. No credential required to activate; an optional vault URL can override the default endpoint. (42b8a52)
  • Unity MCP connector: targets the mcp-unity package (CoderGamester) via stdio transport. The credential is the path to the server script inside the Unity project's package cache; the SDK spawns the Node.js server as a child process per turn. (1fe87b7)
  • Connector brand icons: simple-icons v16 added to the panel; each connector card header now shows a 20px brand SVG that reveals its brand hex colour on hover. (0d1864f)
  • Connector info modal: each connector card has a help button that opens a modal with a plain-English description, credential format, numbered setup steps, colour-coded tool badges (read = green, write = amber), and a contextual tip. (3dc9979)
  • Keyboard shortcuts card: a collapsible card at the bottom of the System (Health) panel view lists all panel-wide keyboard shortcuts (Cmd+K palette, Esc, arrows, Enter/Shift+Enter in chat). (e06bffd)
  • Default Paths (known paths): a new Settings panel section for named folder shortcuts ({ label, path } pairs). These are injected into the system prompt every turn so agents know key directories without being told each time, and appear as quick-pick chips in the Workers panel when setting a worker cwd. Persisted in mainAgent.json; settable via PUT /api/agent with knownPaths. (e9b65cf, 81003fe, 163d427)
  • Playbook size warning: the panel warns when work.md or CLAUDE.md in the active session directory grows beyond a size threshold (both are injected into the system prompt on every turn) and offers a one-click trim for work.md. (843195b)
  • macOS installer Xcode licence preflight: before running Homebrew, the installer now checks whether the Xcode licence has been accepted and offers to accept it automatically, preventing silent mid-install failures when the full Xcode.app is the selected developer dir. (086d105)
Fixed
  • knownPaths not persisted: the backend was silently dropping the knownPaths field from PUT /api/agent — it was never destructured or passed to setMainSettings(), so saves returned 200 but persisted nothing. (163d427)
  • Unified WORKDIR default to ~/MyHQ-Workspace: the agent working directory now defaults to ~/MyHQ-Workspace across all platforms, auto-created on first run. The Windows installer previously defaulted the WORKDIR prompt to <InstallDir>\data, conflating it with the bot's internal state storage. .env.example updated to document the default. (ab9e6f4, be705b1)
  • Update output placement: in-panel update progress output is now rendered inside the top status card directly under the Apply button, instead of a separate card at the bottom of the Updates view where it wasn't immediately visible. (f11cb17)
  • Installer sudo prompt clarity: the first time the installer elevates to sudo, it now prints a clear notice that the password field shows nothing on screen. (29363f0)
Changed
  • Em dash cleanup: replaced all em dashes used as prose connectors in user-facing strings (panel and Telegram i18n files, work.md) with context-appropriate punctuation — commas, colons, periods, or parentheses. Code comments, UI placeholders (— none —), and numeric ranges are unchanged. (8cb54b0)
v0.5.79 new · 1 fixed
Added
  • Slack and GitHub connectors: two new live integrations alongside the existing six. Slack (slack_list_channels/history/post_message/reply_thread/search/upload_file) and GitHub (github_list_repos/list_issues/get_file/put_file/create_issue/comment_issue/create_pr), each vault-backed with a read/write scope toggle. (fd5b24a)
  • Generic outbound webhook connector: register an arbitrary HTTP endpoint in the panel (Webhook Tools view) and it surfaces to the agent as a callable webhook_<slug> MCP tool. Each request goes through the SSRF-guarded safeFetch, and an auth header can reference a vault:<id> secret so tokens never sit in plaintext. Routes: GET|POST /api/webhook-tools, PUT|DELETE /api/webhook-tools/:id. (eb005ef)
  • Event-driven inbound webhook triggers: external services hit a public per-trigger URL (POST /hook/:id, authenticated by HMAC-SHA256 over the raw body with the trigger's own secret) to kick off an autonomous run. A fired trigger files a backlog card and delegates it, reusing the full delegation path (transcript, retry, completion webhook); the inbound payload is appended to the prompt. Managed via GET|POST /api/webhook-triggers, PUT|DELETE /api/webhook-triggers/:id, POST /api/webhook-triggers/:id/rotate, GET /api/webhook-triggers/:id/secret. (c5e0888)
  • /digest command: a tight Telegram summary of the last 24h of fleet activity — tasks completed, autonomous runs ok/errored, memories written, skills saved, and cost. (73b81a9)
  • Conversation search across sessions: one panel search box over the live chat history and every on-disk run transcript, ranked by the shared hybrid (cosine + keyword) search with snippet extraction. Route: GET /api/conversations/search. (8f0f69a)
  • Relevance-weighted council votes + configurable quorum: each voter's weight is the proposal's relevance to their domain (1.0 when embeddings are off, so everyone counts equally), and the decision rule is configurable — majority (default), supermajority (≥2/3 of decisive weight), or unanimous. Routes: GET|PUT /api/council/rule. (7368840)
  • White-label branding (gated licensed feature): a panel surface to override product/agent name, panel title, logo, favicon, colours, and email footer. The configuration always exists and persists, but overrides are only applied when BRANDING_UNLOCKED=true (free for self-hosters; there is deliberately no panel toggle). Routes: GET|PUT /api/branding. (d1aacbd)
  • Multi-device presence: a panel banner showing when the dashboard is open on more than one device, broadcast over the existing WebSocket. (fb4bfcb)
  • Onboarding CTA for unconfigured connectors: the Connectors view shows the full catalogue with credential hints when nothing is set up yet. (f7ca4b2, 5cffceb)
Fixed
  • Stuck-task recovery: a POST /api/tasks/:id/unstick route aborts any live run, drops the card from the queue, and clears its delegation without re-running it; cards left queued/running by a restart are auto-reconciled to a retryable error on boot. Plus an agents empty-state CTA, Linux OAuth keyring support for the usage probe, and a work.md drift indicator with a restore-to-default action (POST /api/prompt/restore). (0890a30)
v0.5.66 new · 4 changed · 1 fixed · 4 security
Added
  • Recurring Kanban card templates: mark a card as a recurring template (daily/weekly/monthly cadence) and a fresh backlog copy spawns on schedule; the template stays put and copies don't carry the recurrence. A 60s ticker fires due templates regardless of the panel, and live-refreshes the board over the WebSocket when it does. (20be716)
  • Live "What's running" status strip: a panel strip that surfaces the currently active agent runs at a glance. (59d947e)
  • Thumbs up/down reactions on assistant messages: react to a panel-chat reply; a thumbs-up files the response as a durable memory. Backed by POST /api/chat/react. (9462712)
  • Memory tag filtering + bulk-delete mode: filter the Memory view by tag and multi-select entries for bulk deletion. (af8ad13)
  • Vault search filter + copy-to-clipboard on the Vault view. (7a3d046)
  • Wizard-first agent menu: the Workers/agent menu leads with the guided wizard, with a collapsible memory tag list. (6ab87f4)
Improved
  • Workers UX: renamed the create buttons Wizard→Easy and Manual→Advanced, reordered them, pre-filled the Advanced worker cwd with the host home directory plus a platform-aware path hint, and added inline form/wizard hints. (63c845d, b2eb1f9, 36972cc)
  • Reusable UI primitives: added Modal, Popover, and ConfirmDialog to ui.tsx, and adopted styled confirm dialogs plus a run-agent model badge across the panel. (6c45608, 0b972f0)
  • Finer memory salience control: a more precise slider with a numeric input. (111facb)
  • Updates badge: a CheckCircle2 icon on the up-to-date state. (c1529e0)
Fixed
  • Draft keepalive vs. crew_ask_president: the draft streamer's keepalive now pauses while a crew_ask_president call is awaiting the user, so the pending question isn't clobbered. (204fe09)
Security
  • Crash-atomic vault key rotation: a write-ahead journal makes rotateKey() recoverable if the process dies mid-rotation, so secrets can't be left half-re-encrypted. (c3b611b)
  • Wider vault secret-id entropy: secret ids widened from 32-bit to 64-bit to make them unguessable. (a5fce6a)
  • Separate ceiling on expensive GET reads: new PANEL_READ_RATE_LIMIT (default 600/window) caps the few heavy read endpoints (memory semantic search, log reads/search, run transcripts) so a runaway client can't flood them, without throttling normal fleet activity. (be86cdc)
  • Loud terminal env warning: when PANEL_TERMINAL_INHERIT_ENV=true exposes the full host environment to the panel shell, the bot now logs a loud warning and DMs allowed users. (6ee3831)
v0.5.56 new · 1 security
Added
  • Agent avatars: pick an avatar from a curated set (13 flat-illustration assets) for any worker/Lead; avatars show on Crew/Workers cards and in chat bubbles, and each Lead bot's Telegram profile photo is set automatically on startup. (a9367b4, 187b7bc, 569a097, db6df2e)
  • Run Agent modal: the worker cards' Run Agent button opens a confirmation modal with the agent name, role, working directory, and a one-shot editable prompt (prefilled, never mutating the saved worker). (13c822d)
  • Autonomy level selector in Chat: choose supervised/standard/full per panel chat from the toolbar, replacing the removed PANEL_CHAT_BYPASS env flag. (5f98335, 6bec138)
  • Interactive AskUserQuestion widgets in panel chat, backed by GET /api/asks and POST /api/asks/resolve. (78b7f7b)
  • Chat permissions indicator with browser-resolvable approvals. (abac35c)
  • PLANNING badge shown in chat instead of the raw planning preamble. (cd80443)
Security
  • crew_delegate privilege-escalation fix: the delegated child run's autonomy is now capped at the caller's (only full/auto_until_error callers grant bypass), and a planning turn files the delegation to the suggestion inbox for explicit approval instead of firing real work. (26f929c)
v0.5.47 new · 3 changed
Added
  • Semantic search for tasks and skills: new task_search and skill_search MCP tools (auto-allowed) let agents find existing cards and skills by meaning before creating duplicates, via a shared cosine + keyword blend with keyword-only fallback when embeddings are off. (75c0a08)
  • In-panel changelog viewer: the Updates view fetches the public CHANGELOG, shows a collapsible "What's new" section for releases newer than the installed version, a year-grouped Release history, and falls back to the locally served changelog when GitHub is unreachable. (edd2240, 6fcb9fa, b049ddb)
  • Update-first nudge on Feedback: a soft, non-blocking callout links to the Updates tab when the deployment is behind. (edd2240)
  • Version badge and changelog link in Setup: the bot identity step shows the running version (amber when an update is available) alongside a link to the changelog. (c2898cb)
  • Bulk-delegate Tasks to a chosen Lead: the board's bulk-select now includes a Lead picker, queuing the selected cards as autonomous runs under that Lead (or auto-routed). (0a45c1e)
  • Expand/collapse markdown notes on every Kanban card, not just done cards, for long or multi-line notes. (1697319)
  • Markdown link rendering ([text](url)) in the panel Markdown component, and a local GET /api/update/changelog route. (b049ddb)
Improved
  • Agent chat resume token now persists per-agent to agentChat.json, so a panel chat with a Lead survives a restart instead of starting cold. (b1703f2)
  • Planning/Execution toggle remembers its last state per agent in localStorage instead of resetting to Execution on every mount. (0025d0c)
  • Documented that each Lead bot's session already survives restarts and updates (resume token in data/lead-<id>-state.json, untouched by update.sh). (803b15e)
v0.5.36 new · 3 changed · 4 fixed
Added
  • Planning mode for Lead chat: the Execution/Planning toggle now works in every Lead/worker panel chat session, not just Atlas. Leads stay conversational and propose backlog cards instead of taking real actions. (c5c26d1, d910ced)
  • Inbox "Run as one task" bulk action: select multiple suggestions and delegate them as a single merged task. (be39693)
  • Inbox multi-select with bulk park / delegate / dismiss and delegate-as-Lead. (7b1cd95)
  • Embeddings probe chip: panel now shows which embedding backend is live and lets you manually override auto-probe mode. (2af6d17)
  • Markdown card notes in Tasks, Lucide icon set across nav, chat role labels, Crew role chips. (d910ced, 1ca66e0)
  • Semantic colour tokens for the Logs activity feed and memory tier indicators. (69455c8)
Improved
  • auto_until_error escalation state is now persisted across restarts. (7b98dc8)
  • Schedules: busy-chat fallback behaviour improved, errors surfaced in the panel. (ee8028e)
  • Panel bundle split: main chunk down from 647 kB to 250 kB (roughly 61% smaller) via React.lazy for 20 tabs and separate vendor chunks for React, Lucide, and xterm. (731ebd7)
Fixed
  • Loopback addresses now exempt from panel auth lockout. (6ba3ea3)
  • Keyboard navigation for clickable Task cards. (cf7f5fa)
  • Workers wizard "Done" button missing i18n string. (bb2c418)
  • Stale agent chat empty-state copy (claimed sessions were stateless when they are not). (5de9df2)
v0.5.25 new · 3 changed · 2 fixed
Added
  • Agent identity + diff rendering in panel agent chat: tool calls show which agent ran them and a mini diff for file edits. (86fd81c)
  • Web Chat badge on Crew/Agents cards: one click opens a panel chat session with that Lead. (34d8580)
  • Command palette (Cmd+K / Ctrl+K): keyboard-first navigation across all panel views. (067e13a)
  • Mobile UX pass: searchable More drawer, bottom nav, Kanban scroll-snap, Health status strip, Chat FAB. (64dd8c4)
  • 3-tier nav, Command Hub, unified Settings: desktop sidebar reorganised into three groups; chat and terminal share a hub. (e541b97)
Improved
  • Default PANEL_RATE_LIMIT raised from 30 to 120 req/min. (12a4dd2)
  • Delegation log secrets redacted; hot-tier memory hardened against injection. (1bf53f5)
  • Schedule prompts capped/sanitised; mutating API routes rate-limited. (1747a31)
Fixed
v0.5.19 new · 2 fixed
Added
  • Encrypted backup and restore: one-click export/import of all fleet state (memory, tasks, skills, vault, schedules). (c5ea8b6)
  • Spoken TTS replies via OpenAI or local Piper. (09f4564)
  • Calendar-aware heartbeat: proactive assistant with quiet hours tied to calendar availability. (d64b5bf)
  • Global dry-run mode: mutating tools (write/edit/bash) silently no-op for safe exploration. (1e07257)
  • Web Push notifications and panel approval queue. (ece1aca)
  • Guided setup wizard for first-run onboarding. (f3f1a11)
  • Tasks: blocked-by dependencies, newest-first sort, live run timer, queue pause/clear, session resume on retry. (973c991, 822d3f4, 465ddea)
  • Rate-limit auto-fallback to a local provider when the primary is throttled. (a7a01bb)
  • i18n: all user-facing strings in bot.ts, commands.ts, and leadBot.ts translated; panel footer and bulk-selected count localised. (8d53c6b, 9bbb863)
Fixed
  • Usage bar charts collapsing to zero height. (492a327)
  • Drag-drop insertion indicator and themed Logs date select. (e2c678e)
v0.5.09 new · 1 fixed
Added
  • Agent chat in the panel: interactive multi-turn sessions with any Lead or worker. (cc5c06f)
  • Feedback panel: in-app feedback relay with optional email. (cc5c06f)
  • Per-agent and per-category usage tracking: token and cost breakdown by agent and role. (66dd083, 2a15962)
  • Windows support: PowerShell installer wizard, NSSM service, update/uninstall scripts. (7478b05 and multiple follow-up fixes)
  • Connection banner: sticky panel banner on backend outage with auto-reload on recovery. (167aeda, fdc3a56)
  • Process uptime, connector scope toggles, task log filter. (60e05d2)
  • GitHub Actions CI: typecheck and build on every push. (18e2f84)
  • Granular cache-control for panel static assets. (9582968)
  • Auto-detect local providers (Ollama, LM Studio), one-click panel login link from installer. (ed8aa26)
Fixed
  • Memory crash on lone UTF-16 surrogates in Claude CLI output. (b2a3f8c)
v0.4.15 new · 2 fixed
Added
  • Gmail, Google Drive, Apple Calendar, Apple Mail connectors. (1c87983)
  • PWA support: installable on iOS and Android with offline caching. (b51c2df)
  • Toast notifications and skeleton loaders across the panel. (b51c2df)
  • Onboarding art and sidebar hints for empty states. (b51c2df)
  • Try agent button, portfolio truncation, task ID surfaced in logs and cards. (ae655ce)
Fixed
  • Skip project/local settingSources for autonomous runs to avoid picking up wrong CLAUDE.md. (08e9974)
  • Installer browser open, Windows PATH, and update reliability improvements. (bcd806b)
v0.4.012 new · 8 security
Added
  • Secret vault: AES-256-GCM encrypted secrets, macOS Keychain or key-file on Linux, rotation and backup/restore. (b8c72ee)
  • Crew hierarchy: Lead bots with their own Telegram tokens, crew_delegate, crew_report, crew_ask_president, crew_suggest. (b8c72ee)
  • Kanban task board with delegation to autonomous runs, WIP limits, drag-drop, bulk select, blocked-by ordering. (b8c72ee)
  • Council votes: /council <proposal> runs all Leads as one-shot SUPPORT/OPPOSE voters. (b8c72ee)
  • Suggestion inbox: Leads file non-urgent ideas via crew_suggest; president triages from the panel. (9b0ab54)
  • Remote access / tunnel relay: ngrok or cloudflared child process, Basic Auth gate, auto-start. (5ab31d1)
  • AskUserQuestion rendered as inline Telegram buttons. (158298e)
  • Agentic loop detector: SHA-256 hashes tool+input, prompts or aborts at threshold. (60a6555)
  • Per-chat turn rate limiter in the Telegram bot. (5e016ff)
  • SSRF guard (safeFetch, assertSafeUrl) on all server-side outbound fetches. (b5b655c)
  • Task concurrency queue, provider probe diagnostics, hot-memory shorten threshold. (b5b655c, c5c0e52)
  • Activity feed shows crew tool calls with meaningful detail. (955301b)
Security (0.3.x batch included here)
  • Panel token brute-force hardening and URL-leakage fix. (502b687)
  • Provider authToken never returned in plaintext. (7e957e2)
  • Panel terminal gated behind a flag; env sanitised. (a9880dc)
  • Log lines redacted before persistence. (8a2f04c)
  • SSRF guard on all outbound fetches. (5d84440)
  • Symlink-escape fix for claudeFiles path canonicalisation. (cf931fa)
  • Private-chat enforcement on Lead bots. (1cffb5a)
  • Data dir chmod 0700, proto-pollution reviver, Vite bumped. (0eb24ff)
v0.3.19 new · 2 fixed
Added
  • Memory maintenance: deterministic tier decay, Haiku consolidation pass, shorten-verbose pass; interval-based scheduler. (b7118db, 3e71117)
  • Maintenance dry-run preview before compaction runs. (fdf67e9)
  • Council votes from Crew view in the panel. (ef63fc3)
  • Lead protocol injected into Lead system prompts; delegation log expand. (ca7ed6d)
  • Lead bot AskUserQuestion inline buttons. (147bbb1)
  • Restore button on archived task cards. (9f12012)
  • Lead bot splits final reply on --- separator, matching main bot UX. (41d5d21)
  • Persona-aware inbox delegation. (158298e)
  • Memory stats overview grid. (4fa23a2)
Fixed
  • crew_ask_president now works inside Lead bots. (64663a8)
  • Hot memory entries can decay; steered toward terse memories. (7f4cff0)
v0.3.05 new · 1 security
Added
  • Three-tab Logs view: human-readable activity feed, raw logs, analytics. (5d00416)
  • Remote Access: tunnel relay (ngrok/cloudflared) with HTTP Basic Auth gate and auto-start. (5ab31d1)
  • Auto-heal weak PANEL_TOKEN: generates a secure token and DMs it via Telegram. (c611f51)
  • Lifecycle events surfaced in the activity feed. (de644c1)
  • Blurred locked-terminal placeholder when terminal is disabled. (41852da)
Security
  • Full SEC-1 through SEC-8 hardening pass (see the 0.4.0 section above for details).
v0.2.011 new
Added
  • Management panel: embedded Fastify SPA with health dashboard, workers, tasks, memory, vault, logs, usage, settings, and more.
  • Crew / Lead bots: initial multi-agent infrastructure.
  • Scheduling: persisted timed prompts run as autonomous turns.
  • Voice transcription: OpenAI-compatible endpoint or local Vosk backend.
  • Projects: saved cwds with /projects inline menu.
  • Approval presets: persistent always-allow per tool and per bash command.
  • Image vision: inline photo handling and send_file back to Telegram.
  • Git review flow: /diff with Commit/Discard buttons, /commit.
  • Usage tracking: per-session lifetime and per-day token buckets.
  • Session persistence across restarts (resume token, cwd, autonomy, usage).
  • Install wizard (myhq-install.sh), update, and uninstall scripts.
v0.1.0

Initial release. A Telegram bot driving the Claude Agent SDK on the host machine, with streamed replies, inline tool-approval buttons, and an allowed-user allow-list.

Full history and source on GitHub.