Changelog
Every release, newest first
What's new, changed, and fixed in each version of MyAgens.
v0.5.89 new · 1 changed · 4 fixed
Added
- PostgreSQL and SQLite database connectors: two new live integrations (connectors 9 and 10). Each exposes
list_tables,describe_schema, and a read-onlyquerytool (SELECT/WITH only, guarded byassertReadOnlySql), plus a write-scopedexecutetool gated behindWRITE_TOOLS. PostgreSQL uses a lazily-loadedpgclient from a connection-string credential; SQLite uses Node's built-innode:sqliteopened read-only. (9a3e884) - Unreal Engine MCP connector: connects to the official Epic UE 5.8 MCP plugin running in the local editor via SSE at
http://127.0.0.1:8000/mcp. No credential required to activate; an optional vault URL can override the default endpoint. (42b8a52) - Unity MCP connector: targets the
mcp-unitypackage (CoderGamester) via stdio transport. The credential is the path to the server script inside the Unity project's package cache; the SDK spawns the Node.js server as a child process per turn. (1fe87b7) - Connector brand icons:
simple-iconsv16 added to the panel; each connector card header now shows a 20px brand SVG that reveals its brand hex colour on hover. (0d1864f) - Connector info modal: each connector card has a help button that opens a modal with a plain-English description, credential format, numbered setup steps, colour-coded tool badges (read = green, write = amber), and a contextual tip. (3dc9979)
- Keyboard shortcuts card: a collapsible card at the bottom of the System (Health) panel view lists all panel-wide keyboard shortcuts (Cmd+K palette, Esc, arrows, Enter/Shift+Enter in chat). (e06bffd)
- Default Paths (known paths): a new Settings panel section for named folder shortcuts (
{ label, path }pairs). These are injected into the system prompt every turn so agents know key directories without being told each time, and appear as quick-pick chips in the Workers panel when setting a workercwd. Persisted inmainAgent.json; settable viaPUT /api/agentwithknownPaths. (e9b65cf, 81003fe, 163d427) - Playbook size warning: the panel warns when
work.mdorCLAUDE.mdin the active session directory grows beyond a size threshold (both are injected into the system prompt on every turn) and offers a one-click trim forwork.md. (843195b) - macOS installer Xcode licence preflight: before running Homebrew, the installer now checks whether the Xcode licence has been accepted and offers to accept it automatically, preventing silent mid-install failures when the full Xcode.app is the selected developer dir. (086d105)
Fixed
knownPathsnot persisted: the backend was silently dropping theknownPathsfield fromPUT /api/agent— it was never destructured or passed tosetMainSettings(), so saves returned 200 but persisted nothing. (163d427)- Unified
WORKDIRdefault to~/MyHQ-Workspace: the agent working directory now defaults to~/MyHQ-Workspaceacross all platforms, auto-created on first run. The Windows installer previously defaulted the WORKDIR prompt to<InstallDir>\data, conflating it with the bot's internal state storage..env.exampleupdated to document the default. (ab9e6f4, be705b1) - Update output placement: in-panel update progress output is now rendered inside the top status card directly under the Apply button, instead of a separate card at the bottom of the Updates view where it wasn't immediately visible. (f11cb17)
- Installer sudo prompt clarity: the first time the installer elevates to sudo, it now prints a clear notice that the password field shows nothing on screen. (29363f0)
Changed
- Em dash cleanup: replaced all em dashes used as prose connectors in user-facing strings (panel and Telegram i18n files,
work.md) with context-appropriate punctuation — commas, colons, periods, or parentheses. Code comments, UI placeholders (— none —), and numeric ranges are unchanged. (8cb54b0)
v0.5.79 new · 1 fixed
Added
- Slack and GitHub connectors: two new live integrations alongside the existing six. Slack (
slack_list_channels/history/post_message/reply_thread/search/upload_file) and GitHub (github_list_repos/list_issues/get_file/put_file/create_issue/comment_issue/create_pr), each vault-backed with a read/write scope toggle. (fd5b24a) - Generic outbound webhook connector: register an arbitrary HTTP endpoint in the panel (Webhook Tools view) and it surfaces to the agent as a callable
webhook_<slug>MCP tool. Each request goes through the SSRF-guardedsafeFetch, and an auth header can reference avault:<id>secret so tokens never sit in plaintext. Routes:GET|POST /api/webhook-tools,PUT|DELETE /api/webhook-tools/:id. (eb005ef) - Event-driven inbound webhook triggers: external services hit a public per-trigger URL (
POST /hook/:id, authenticated by HMAC-SHA256 over the raw body with the trigger's own secret) to kick off an autonomous run. A fired trigger files a backlog card and delegates it, reusing the full delegation path (transcript, retry, completion webhook); the inbound payload is appended to the prompt. Managed viaGET|POST /api/webhook-triggers,PUT|DELETE /api/webhook-triggers/:id,POST /api/webhook-triggers/:id/rotate,GET /api/webhook-triggers/:id/secret. (c5e0888) /digestcommand: a tight Telegram summary of the last 24h of fleet activity — tasks completed, autonomous runs ok/errored, memories written, skills saved, and cost. (73b81a9)- Conversation search across sessions: one panel search box over the live chat history and every on-disk run transcript, ranked by the shared hybrid (cosine + keyword) search with snippet extraction. Route:
GET /api/conversations/search. (8f0f69a) - Relevance-weighted council votes + configurable quorum: each voter's weight is the proposal's relevance to their domain (1.0 when embeddings are off, so everyone counts equally), and the decision rule is configurable —
majority(default),supermajority(≥2/3 of decisive weight), orunanimous. Routes:GET|PUT /api/council/rule. (7368840) - White-label branding (gated licensed feature): a panel surface to override product/agent name, panel title, logo, favicon, colours, and email footer. The configuration always exists and persists, but overrides are only applied when
BRANDING_UNLOCKED=true(free for self-hosters; there is deliberately no panel toggle). Routes:GET|PUT /api/branding. (d1aacbd) - Multi-device presence: a panel banner showing when the dashboard is open on more than one device, broadcast over the existing WebSocket. (fb4bfcb)
- Onboarding CTA for unconfigured connectors: the Connectors view shows the full catalogue with credential hints when nothing is set up yet. (f7ca4b2, 5cffceb)
Fixed
- Stuck-task recovery: a
POST /api/tasks/:id/unstickroute aborts any live run, drops the card from the queue, and clears its delegation without re-running it; cards leftqueued/runningby a restart are auto-reconciled to a retryable error on boot. Plus an agents empty-state CTA, Linux OAuth keyring support for the usage probe, and awork.mddrift indicator with a restore-to-default action (POST /api/prompt/restore). (0890a30)
v0.5.66 new · 4 changed · 1 fixed · 4 security
Added
- Recurring Kanban card templates: mark a card as a recurring template (daily/weekly/monthly cadence) and a fresh backlog copy spawns on schedule; the template stays put and copies don't carry the recurrence. A 60s ticker fires due templates regardless of the panel, and live-refreshes the board over the WebSocket when it does. (20be716)
- Live "What's running" status strip: a panel strip that surfaces the currently active agent runs at a glance. (59d947e)
- Thumbs up/down reactions on assistant messages: react to a panel-chat reply; a thumbs-up files the response as a durable memory. Backed by
POST /api/chat/react. (9462712) - Memory tag filtering + bulk-delete mode: filter the Memory view by tag and multi-select entries for bulk deletion. (af8ad13)
- Vault search filter + copy-to-clipboard on the Vault view. (7a3d046)
- Wizard-first agent menu: the Workers/agent menu leads with the guided wizard, with a collapsible memory tag list. (6ab87f4)
Improved
- Workers UX: renamed the create buttons Wizard→Easy and Manual→Advanced, reordered them, pre-filled the Advanced worker
cwdwith the host home directory plus a platform-aware path hint, and added inline form/wizard hints. (63c845d, b2eb1f9, 36972cc) - Reusable UI primitives: added
Modal,Popover, andConfirmDialogtoui.tsx, and adopted styled confirm dialogs plus a run-agent model badge across the panel. (6c45608, 0b972f0) - Finer memory salience control: a more precise slider with a numeric input. (111facb)
- Updates badge: a
CheckCircle2icon on the up-to-date state. (c1529e0)
Fixed
- Draft keepalive vs.
crew_ask_president: the draft streamer's keepalive now pauses while acrew_ask_presidentcall is awaiting the user, so the pending question isn't clobbered. (204fe09)
Security
- Crash-atomic vault key rotation: a write-ahead journal makes
rotateKey()recoverable if the process dies mid-rotation, so secrets can't be left half-re-encrypted. (c3b611b) - Wider vault secret-id entropy: secret ids widened from 32-bit to 64-bit to make them unguessable. (a5fce6a)
- Separate ceiling on expensive GET reads: new
PANEL_READ_RATE_LIMIT(default 600/window) caps the few heavy read endpoints (memory semantic search, log reads/search, run transcripts) so a runaway client can't flood them, without throttling normal fleet activity. (be86cdc) - Loud terminal env warning: when
PANEL_TERMINAL_INHERIT_ENV=trueexposes the full host environment to the panel shell, the bot now logs a loud warning and DMs allowed users. (6ee3831)
v0.5.56 new · 1 security
Added
- Agent avatars: pick an avatar from a curated set (13 flat-illustration assets) for any worker/Lead; avatars show on Crew/Workers cards and in chat bubbles, and each Lead bot's Telegram profile photo is set automatically on startup. (a9367b4, 187b7bc, 569a097, db6df2e)
- Run Agent modal: the worker cards' Run Agent button opens a confirmation modal with the agent name, role, working directory, and a one-shot editable prompt (prefilled, never mutating the saved worker). (13c822d)
- Autonomy level selector in Chat: choose supervised/standard/full per panel chat from the toolbar, replacing the removed
PANEL_CHAT_BYPASSenv flag. (5f98335, 6bec138) - Interactive AskUserQuestion widgets in panel chat, backed by
GET /api/asksandPOST /api/asks/resolve. (78b7f7b) - Chat permissions indicator with browser-resolvable approvals. (abac35c)
- PLANNING badge shown in chat instead of the raw planning preamble. (cd80443)
Security
crew_delegateprivilege-escalation fix: the delegated child run's autonomy is now capped at the caller's (onlyfull/auto_until_errorcallers grant bypass), and a planning turn files the delegation to the suggestion inbox for explicit approval instead of firing real work. (26f929c)
v0.5.47 new · 3 changed
Added
- Semantic search for tasks and skills: new
task_searchandskill_searchMCP tools (auto-allowed) let agents find existing cards and skills by meaning before creating duplicates, via a shared cosine + keyword blend with keyword-only fallback when embeddings are off. (75c0a08) - In-panel changelog viewer: the Updates view fetches the public CHANGELOG, shows a collapsible "What's new" section for releases newer than the installed version, a year-grouped Release history, and falls back to the locally served changelog when GitHub is unreachable. (edd2240, 6fcb9fa, b049ddb)
- Update-first nudge on Feedback: a soft, non-blocking callout links to the Updates tab when the deployment is behind. (edd2240)
- Version badge and changelog link in Setup: the bot identity step shows the running version (amber when an update is available) alongside a link to the changelog. (c2898cb)
- Bulk-delegate Tasks to a chosen Lead: the board's bulk-select now includes a Lead picker, queuing the selected cards as autonomous runs under that Lead (or auto-routed). (0a45c1e)
- Expand/collapse markdown notes on every Kanban card, not just done cards, for long or multi-line notes. (1697319)
- Markdown link rendering (
[text](url)) in the panel Markdown component, and a localGET /api/update/changelogroute. (b049ddb)
Improved
- Agent chat resume token now persists per-agent to
agentChat.json, so a panel chat with a Lead survives a restart instead of starting cold. (b1703f2) - Planning/Execution toggle remembers its last state per agent in localStorage instead of resetting to Execution on every mount. (0025d0c)
- Documented that each Lead bot's session already survives restarts and updates (resume token in
data/lead-<id>-state.json, untouched byupdate.sh). (803b15e)
v0.5.36 new · 3 changed · 4 fixed
Added
- Planning mode for Lead chat: the Execution/Planning toggle now works in every Lead/worker panel chat session, not just Atlas. Leads stay conversational and propose backlog cards instead of taking real actions. (c5c26d1, d910ced)
- Inbox "Run as one task" bulk action: select multiple suggestions and delegate them as a single merged task. (be39693)
- Inbox multi-select with bulk park / delegate / dismiss and delegate-as-Lead. (7b1cd95)
- Embeddings probe chip: panel now shows which embedding backend is live and lets you manually override auto-probe mode. (2af6d17)
- Markdown card notes in Tasks, Lucide icon set across nav, chat role labels, Crew role chips. (d910ced, 1ca66e0)
- Semantic colour tokens for the Logs activity feed and memory tier indicators. (69455c8)
Improved
auto_until_errorescalation state is now persisted across restarts. (7b98dc8)- Schedules: busy-chat fallback behaviour improved, errors surfaced in the panel. (ee8028e)
- Panel bundle split: main chunk down from 647 kB to 250 kB (roughly 61% smaller) via
React.lazyfor 20 tabs and separate vendor chunks for React, Lucide, and xterm. (731ebd7)
v0.5.25 new · 3 changed · 2 fixed
Added
- Agent identity + diff rendering in panel agent chat: tool calls show which agent ran them and a mini diff for file edits. (86fd81c)
- Web Chat badge on Crew/Agents cards: one click opens a panel chat session with that Lead. (34d8580)
- Command palette (Cmd+K / Ctrl+K): keyboard-first navigation across all panel views. (067e13a)
- Mobile UX pass: searchable More drawer, bottom nav, Kanban scroll-snap, Health status strip, Chat FAB. (64dd8c4)
- 3-tier nav, Command Hub, unified Settings: desktop sidebar reorganised into three groups; chat and terminal share a hub. (e541b97)
Improved
v0.5.19 new · 2 fixed
Added
- Encrypted backup and restore: one-click export/import of all fleet state (memory, tasks, skills, vault, schedules). (c5ea8b6)
- Spoken TTS replies via OpenAI or local Piper. (09f4564)
- Calendar-aware heartbeat: proactive assistant with quiet hours tied to calendar availability. (d64b5bf)
- Global dry-run mode: mutating tools (write/edit/bash) silently no-op for safe exploration. (1e07257)
- Web Push notifications and panel approval queue. (ece1aca)
- Guided setup wizard for first-run onboarding. (f3f1a11)
- Tasks: blocked-by dependencies, newest-first sort, live run timer, queue pause/clear, session resume on retry. (973c991, 822d3f4, 465ddea)
- Rate-limit auto-fallback to a local provider when the primary is throttled. (a7a01bb)
- i18n: all user-facing strings in bot.ts, commands.ts, and leadBot.ts translated; panel footer and bulk-selected count localised. (8d53c6b, 9bbb863)
v0.5.09 new · 1 fixed
Added
- Agent chat in the panel: interactive multi-turn sessions with any Lead or worker. (cc5c06f)
- Feedback panel: in-app feedback relay with optional email. (cc5c06f)
- Per-agent and per-category usage tracking: token and cost breakdown by agent and role. (66dd083, 2a15962)
- Windows support: PowerShell installer wizard, NSSM service, update/uninstall scripts. (7478b05 and multiple follow-up fixes)
- Connection banner: sticky panel banner on backend outage with auto-reload on recovery. (167aeda, fdc3a56)
- Process uptime, connector scope toggles, task log filter. (60e05d2)
- GitHub Actions CI: typecheck and build on every push. (18e2f84)
- Granular cache-control for panel static assets. (9582968)
- Auto-detect local providers (Ollama, LM Studio), one-click panel login link from installer. (ed8aa26)
Fixed
- Memory crash on lone UTF-16 surrogates in Claude CLI output. (b2a3f8c)
v0.4.15 new · 2 fixed
Added
- Gmail, Google Drive, Apple Calendar, Apple Mail connectors. (1c87983)
- PWA support: installable on iOS and Android with offline caching. (b51c2df)
- Toast notifications and skeleton loaders across the panel. (b51c2df)
- Onboarding art and sidebar hints for empty states. (b51c2df)
- Try agent button, portfolio truncation, task ID surfaced in logs and cards. (ae655ce)
v0.4.012 new · 8 security
Added
- Secret vault: AES-256-GCM encrypted secrets, macOS Keychain or key-file on Linux, rotation and backup/restore. (b8c72ee)
- Crew hierarchy: Lead bots with their own Telegram tokens,
crew_delegate,crew_report,crew_ask_president,crew_suggest. (b8c72ee) - Kanban task board with delegation to autonomous runs, WIP limits, drag-drop, bulk select, blocked-by ordering. (b8c72ee)
- Council votes:
/council <proposal>runs all Leads as one-shot SUPPORT/OPPOSE voters. (b8c72ee) - Suggestion inbox: Leads file non-urgent ideas via
crew_suggest; president triages from the panel. (9b0ab54) - Remote access / tunnel relay: ngrok or cloudflared child process, Basic Auth gate, auto-start. (5ab31d1)
- AskUserQuestion rendered as inline Telegram buttons. (158298e)
- Agentic loop detector: SHA-256 hashes tool+input, prompts or aborts at threshold. (60a6555)
- Per-chat turn rate limiter in the Telegram bot. (5e016ff)
- SSRF guard (
safeFetch,assertSafeUrl) on all server-side outbound fetches. (b5b655c) - Task concurrency queue, provider probe diagnostics, hot-memory shorten threshold. (b5b655c, c5c0e52)
- Activity feed shows crew tool calls with meaningful detail. (955301b)
Security (0.3.x batch included here)
- Panel token brute-force hardening and URL-leakage fix. (502b687)
- Provider authToken never returned in plaintext. (7e957e2)
- Panel terminal gated behind a flag; env sanitised. (a9880dc)
- Log lines redacted before persistence. (8a2f04c)
- SSRF guard on all outbound fetches. (5d84440)
- Symlink-escape fix for
claudeFilespath canonicalisation. (cf931fa) - Private-chat enforcement on Lead bots. (1cffb5a)
- Data dir
chmod 0700, proto-pollution reviver, Vite bumped. (0eb24ff)
v0.3.19 new · 2 fixed
Added
- Memory maintenance: deterministic tier decay, Haiku consolidation pass, shorten-verbose pass; interval-based scheduler. (b7118db, 3e71117)
- Maintenance dry-run preview before compaction runs. (fdf67e9)
- Council votes from Crew view in the panel. (ef63fc3)
- Lead protocol injected into Lead system prompts; delegation log expand. (ca7ed6d)
- Lead bot AskUserQuestion inline buttons. (147bbb1)
- Restore button on archived task cards. (9f12012)
- Lead bot splits final reply on
---separator, matching main bot UX. (41d5d21) - Persona-aware inbox delegation. (158298e)
- Memory stats overview grid. (4fa23a2)
v0.3.05 new · 1 security
Added
- Three-tab Logs view: human-readable activity feed, raw logs, analytics. (5d00416)
- Remote Access: tunnel relay (ngrok/cloudflared) with HTTP Basic Auth gate and auto-start. (5ab31d1)
- Auto-heal weak PANEL_TOKEN: generates a secure token and DMs it via Telegram. (c611f51)
- Lifecycle events surfaced in the activity feed. (de644c1)
- Blurred locked-terminal placeholder when terminal is disabled. (41852da)
Security
- Full SEC-1 through SEC-8 hardening pass (see the 0.4.0 section above for details).
v0.2.011 new
Added
- Management panel: embedded Fastify SPA with health dashboard, workers, tasks, memory, vault, logs, usage, settings, and more.
- Crew / Lead bots: initial multi-agent infrastructure.
- Scheduling: persisted timed prompts run as autonomous turns.
- Voice transcription: OpenAI-compatible endpoint or local Vosk backend.
- Projects: saved cwds with
/projectsinline menu. - Approval presets: persistent always-allow per tool and per bash command.
- Image vision: inline photo handling and
send_fileback to Telegram. - Git review flow:
/diffwith Commit/Discard buttons,/commit. - Usage tracking: per-session lifetime and per-day token buckets.
- Session persistence across restarts (resume token, cwd, autonomy, usage).
- Install wizard (
myhq-install.sh), update, and uninstall scripts.
v0.1.0Initial release. A Telegram bot driving the Claude Agent SDK on the host machine, with streamed replies, inline tool-approval buttons, and an allowed-user allow-list.
Full history and source on GitHub.