PaneFlow 0.8.2 is a focused patch release for an important Windows desktop material boundary. When the terminal enabled the host-window backdrop while the dedicated chrome material was disabled, the transparent title bar could expose terminal-only Mica instead of the configured theme background.

The Windows title bar now paints an opaque theme surface whenever its own material is disabled. It remains transparent when the chrome material is intentionally active, preserving the native backdrop. Linux and macOS keep their existing chrome behavior.

Regression coverage

• Added a Windows-specific test covering both disabled and active chrome material states.
• Kept the non-Windows transparency assertion explicitly scoped to Linux and macOS behavior.
• Preserved the existing opaque Linux shell and native macOS/Windows sidebar material contracts.

Documentation and project state

• Updated the architecture guide to describe the shipped dual terminal stack: pinned libghostty-vt by default on Linux and Windows x64 MSVC, with Alacritty on macOS and as the explicit cross-platform rollback.
• Refreshed the README with the current Windows backend, installation paths, rollback setting, and a direct evaluator quick-test path.
• Finalized the Build Week implementation evidence, platform matrix, validation claims, and traction copy against the shipped v0.8.1 baseline.
• Removed the stale French Build Week duplicate so the English submission document remains the canonical public account.
• Corrected the top-level changelog and added the final submission audit record used to verify the public claims against code and release artifacts.

No configuration, session format, terminal backend selection, or packaging contract changed in this patch.

Install and validation

Download the signed artifacts from this release or use the installation instructions.

The v0.8.2 release pipeline passed Linux x86_64 and ARM64 packaging, the signed and notarized macOS ARM64 DMG, the signed Windows x64 MSI, Ubuntu, Debian, Fedora, openSUSE and Arch smoke tests, Windows install and upgrade validation, and Linux auto-update E2E. The release contains 35 verified assets with SHA-256 sidecars and Minisign signatures where applicable.

Full Changelog: v0.8.1...v0.8.2

PaneFlow 0.8.1 promotes the pinned, statically linked libghostty-vt engine to the default for new terminal sessions in published Windows x64 MSVC builds. Ghostty now owns VT parsing, terminal state, snapshots, and input encoding on Windows. PaneFlow continues to host processes through ConPTY and render through GPUI, so the integration keeps PaneFlow's native desktop model while replacing the terminal engine underneath it.

Alacritty remains available as an explicit rollback with terminal.backend = "alacritty". The setting applies to new sessions only and never swaps the engine underneath a running shell. Windows ARM64 and Windows GNU targets continue to use the Alacritty backend.

Windows terminal parity and reliability

• Ported the Ghostty-backed session host to ConPTY with keyboard and Kitty protocol input, mouse and focus reporting, bracketed paste, scrollback, search, selection, hyperlinks, resize, and lifecycle handling.
• Preserved OSC 7 working-directory tracking, OSC 52 clipboard policy, and OSC 133 shell integration on the Windows path.
• Fixed multiline Shift+Enter input through both PaneFlow's key translation and ConPTY so agents and shells receive the intended escape sequence.
• Batched Ghostty redraw notifications into a 4 ms window on Windows to avoid partial ConPTY frames, cursor jumps, and wakeup storms during output-heavy sessions.
• Completed ConPTY teardown before exit, joined the reader deterministically, and reaped probe descendants so shells do not leave handles or child processes behind.
• Added privacy-safe backend diagnostics that identify the requested and active engine without collecting command text, working directories, usernames, or terminal contents.
• Hardened Windows named-pipe IPC with overlapped I/O, bounded read and write deadlines, and a 256 KiB response cap.

Reproducible native Windows delivery

• Added the Windows MSVC foundation for libghostty-vt, including pinned native sources, generated headers and Rust bindings, verified exported symbols, and deterministic archive generation.
• Official MSI packages statically link the native engine. They require neither a Ghostty installation, a Ghostty DLL, nor Zig at runtime.
• Added package-level provenance, third-party notices, build metadata, a native manifest, and a CycloneDX SBOM, all checked against the binary installed by the MSI.
• The Windows qualification gates rebuild the native archive in a clean environment, compare reproducible output, verify hashes and symbols, exercise the terminal corpus and lifecycle, and enforce performance and handle-growth bounds.
• The release pipeline validates fresh installation, upgrade from v0.8.0, Ghostty and Alacritty startup paths, static provenance, updater relay, and uninstall on the Windows runner.
• Kept Windows ARM64 on the portable backend until its native Ghostty path has the same build, packaging, and runtime evidence as x64.

Desktop improvements

• PaneFlow now persists the main window size across launches, with display-aware bounds and minimum dimensions when the saved geometry no longer fits the active screen.
• Maximized Windows can be restored from PaneFlow's caption controls again.
• Native material is clipped and masked more consistently around the sidebar cards and main panel on Windows and macOS.
• macOS gains a configurable native Sidebar material in Appearance settings, with live updates and corrected backdrop alignment.
• Workspace drag reordering now shows the real before or after insertion edge while preserving stable row sizing.
• Agent completion dots are acknowledged after the workspace is viewed or used, instead of remaining stale in the sidebar.
• Application artwork was refreshed, with separate portable and macOS icon sources and an updated README hero.

Fixes and engineering hardening

• Made OSC 7 assertions and Windows-only helpers platform-aware so portable builds and tests stay warning-free.
• Stabilized native code generation for formatter tables, empty headers, and Windows point maps, and normalized patch line endings across Windows builds.
• Canonicalized Linux native archive ordering and strengthened reproducibility evidence across both Linux and Windows Ghostty builds.
• Hardened PTY resize probes, updater retry tests, terminal handle-growth diagnostics, and final-output cleanup.
• Pinned the Windows native toolchain and ConPTY qualification runner, while extending MSVC CI to compile, lint, test, and build the Ghostty feature.
• Updated release provenance checks for generated application icons and downloaded packaging assets without widening the runtime payload contract.
• Documented Windows backend selection, automatic promotion, rollback, diagnostics, qualification scope, and the bilingual Build Week implementation story.

Install and validation

Download the signed artifacts from this release or use the installation instructions.

The v0.8.1 release pipeline passed Linux x86_64 and ARM64 packaging, the notarized macOS ARM64 DMG, the signed Windows x64 MSI, five Linux distribution smokes, Windows install and upgrade behavior, static Ghostty provenance, and auto-update E2E before publishing 35 release assets with checksums and Minisign signatures.

Full Changelog: v0.8.0...v0.8.1

PaneFlow 0.8.0 moves the default path for new terminal sessions in standard Linux builds from Alacritty to a pinned, statically linked libghostty-vt engine. Parsing, terminal state, input, snapshots, search, selection, mouse reporting, clipboard handling, hyperlinks, prompt marks, scrollback, resize, and shutdown now run through the Ghostty-backed session path.

Alacritty remains available on Linux as an explicit rollback with terminal.backend = "alacritty". The setting applies to new sessions only. macOS and Windows continue to use Alacritty.

Native and reproducible Linux delivery

• Added dedicated FFI, safe Rust wrapper, terminal engine, and smoke-test crates around libghostty-vt.
• Pinned Ghostty to commit ae52f97d, Zig to 0.15.2, the native ABI to 0.1.0, and verified the generated headers, bindings, build metadata, static archives, and third-party notices.
• Bundled verified static archives for Linux x86_64 and ARM64. Normal development builds require neither a Ghostty checkout nor Zig, and official packages have no runtime libghostty dependency.
• The release workflow regenerates the native archive from the reviewed source pin, verifies static linkage, and packages the same engine into AppImage, .deb, .rpm, and .tar.gz artifacts.
• Added bounded worker queues and owned snapshots around the native engine so the GPUI thread never owns raw Ghostty handles.

Terminal behavior and reliability

• Added a 130-case Alacritty/Ghostty differential corpus: 115 cases require exact parity and 15 documented semantic differences are pinned explicitly.
• Added parser and snapshot fuzz targets, chunk-boundary checks, ABI/layout validation, PTY stress coverage, callback panic containment, archive metadata checks, and release-size gates.
• Preserved search, selection, OSC 8 links, OSC 52 clipboard, OSC 133 prompt marks, bracketed paste, mouse reporting, alternate screen behavior, resize, final-output draining, and child teardown on the new path.
• Added previous/next prompt navigation actions backed by prompt marks.
• Improved terminal text hierarchy with the real bright foreground, stronger SGR bold handling, and corrected glyph alignment under the block cursor.
• Replaced the one-cell terminal gutter with a fixed 3 px inset so the grid, tabs, and scrollbar align consistently.
• Terminal scrollback is now process-local and is no longer serialized as raw output in session.json. Restored workspaces keep their layout, cwd, and metadata, while historical terminal output starts fresh.

Interface polish

• Added reversible 120 ms hover feedback across Settings, pane tabs, Review, Agents, broadcast controls, sidebars, custom buttons, terminal search, scrollbars, utility actions, and window controls.
• Added fixed navigation headers for Agents, Changes, and Settings. Changes now exposes added/deleted totals, tree/list switching, and collapse controls in one stable header.
• Unified cockpit geometry, title-bar controls, inset cards, client-side chrome, resize hitboxes, and terminal alignment.
• Standardized desktop cursor behavior so interactive rows and buttons keep a normal pointer while text and resize surfaces retain specialized cursors.
• Memoized bundled AI-hook binary verification after the first successful process-local checksum.

Removed and hardened

• Removed the experimental Rosetta status surface, its title-bar toggle, runtime state, runbook, and the rosetta_enabled / rosetta_show_passive settings. Agent attention remains available through the sidebar, desktop notifications, tab indicators, and Attention Queue.
• Hardened dependency review with immutable Git revisions, per-source allow rules, and a verified resolved commit for tagged sources.
• Stabilized generated Ghostty bindings and validated prepared archive target, source SHA, Zig version, optimization mode, normalization, and exported symbols.
• Added complete native license notices to every Linux package and verified them on minimal Ubuntu, Debian, Fedora, openSUSE, and Arch installations.
• Fixed the terminal grid test helper for Windows and pruned superseded internal product plans.
• Added the complete OpenAI Build Week engineering story in English and French, covering the migration decisions, implementation, failures, and lessons.

Install and validation

Download the signed artifacts from this release or use the installation instructions.

The v0.8.0 release pipeline passed the Linux x86_64 and ARM64 builds, macOS ARM64 notarized DMG, Windows x64 signed MSI, multi-distribution package smokes, and auto-update E2E. The dedicated libghostty Linux qualification passed ABI regeneration, native builds, differential tests, fuzzing, supply-chain checks, static-link verification, and package smokes.

Full Changelog: v0.7.11...v0.8.0

PaneFlow 0.7.11 makes workspace state faster to scan, brings local services into the sidebar, and ships a more legible terminal baseline across Linux, macOS, and Windows.

Workspace navigation

• Rebuilt workspace cards around a compact title row and a single metadata row for the Git branch, changed files, and detected services.
• Consolidated multi-agent state into a prioritized indicator for agents that need input, errored, stalled, or are still thinking.
• Added a persistent completion indicator after an agent finishes. It stays visible until that workspace is opened, so completed work is harder to miss.
• Made detected frontend services directly clickable from the workspace card. Additional and non-frontend services remain visible through the workspace context menu.
• Consolidated rename, workflow, local service, editor, reveal, and close actions into the workspace context menu. Workspace titles can also be renamed with a double-click.
• Simplified workspace creation with a dedicated header action and a clearer empty state.

Terminal rendering

• Bundled JetBrainsMono Nerd Font Mono in regular, medium, semibold, bold, and matching italic styles, and made it the cross-platform terminal default.
• Added built-in Nerd Font glyph coverage for shells and prompts while keeping explicit Geist Mono and custom system font configurations supported.
• Refined the One Dark and Cursor ANSI palettes with softer foregrounds and more restrained normal, bright, and dim colors.
• Changed SGR bold rendering to advance one weight from the configured base instead of forcing weight 700, preserving emphasis without overpowering colored terminal output.

Engineering

• Removed the experimental Hera shadow-terminal integration, diagnostic side-by-side renderer, and dogfood crates, simplifying the production PTY and terminal rendering paths.
• Updated the pinned GPUI/Zed fork to a newer upstream base while retaining PaneFlow's streamed Markdown append optimization, with the required layout and input compatibility adaptations.
• Documented the implementation path for the planned Linux libghostty terminal backend.

Full Changelog: v0.7.10...v0.7.11

PaneFlow 0.7.10 fixes long workspace titles overflowing their sidebar cards.

What changed

• Long workspace names are truncated cleanly inside the available card width.
• The active-session indicator remains visible instead of being pushed outside the row.
• Rename fields and horizontal scrolling stay contained within the sidebar.

Paneflow 0.7.9 fixes a Windows self-update regression introduced in 0.7.7.
Older Windows clients pinned the MSI publisher as O=Strivex, while the signed MSI certificate is O=StriveX. The MSI was valid, but the client rejected it after download and surfaced the misleading "corrupt or tampered" update error.

What changed

• Corrected the Windows MSI publisher pin to StriveX.
• Added a Windows release smoke check that compares the pinned publisher in Rust with the actual Authenticode subject on the signed MSI.
• Changed release publishing so GitHub Releases stay draft-only until every signed asset has been uploaded and verified.

Windows upgrade note

If you are already on Paneflow 0.7.7 or 0.7.8 on Windows and the in-app updater reports a corrupt or tampered download, install 0.7.9 manually from the MSI once. After 0.7.9 is installed, future Windows updates should use the in-app updater normally again.

Full Changelog: v0.7.8...v0.7.9

Paneflow v0.7.8 is a focused theme, Windows reliability, and interface polish release. It adds branded presets and makes typography consistent across platforms, while hardening the Windows paths that open browsers, folders, editors, notifications, and taskbar shortcuts.

The release covers 9 commits since v0.7.7, including the final version bump.

Highlights

• Theme presets: Vercel, Claude, and Cursor now ship as bundled presets with their own UI tokens, terminal palettes, and syntax colors.
• Typography: fresh installs now default to bundled Geist for app UI and Geist Mono for terminals, instead of depending on a host-installed preferred font.
• Windows launch reliability: external URLs, editor launches, folder opens, taskbar identity, Start Menu shortcut behavior, and notifications were tightened for packaged installs.
• Daily polish: terminal hyperlink hover no longer paints a large URL tooltip, and sidebar diff stats no longer show meaningless +0 -0 counters.

Themes And Typography

• Added three branded dark presets: Vercel, Claude, and Cursor.
• The Appearance settings page now has preset tiles with logos, palette previews, selected-state checks, and click-to-apply behavior.
• Each preset can define app-wide UI colors, not just terminal ANSI colors, so sidebars, settings, diff surfaces, syntax highlighting, status colors, and terminal chrome stay coherent.
• One Dark received a warmer foreground tuning to match the new font and palette direction.
• Bundled Geist and Geist Mono font families were added under the SIL Open Font License.
• The UI font now uses Geist; the default terminal font now uses Geist Mono on every platform.
• .PaneflowMono now resolves to Geist Mono; .PaneflowSans now resolves to Geist.
• Legacy explicit font names remain supported: Lilex, IBM Plex Sans, and IBM Plex Mono still resolve when users have them in config.
• Config docs, the public JSON schema, theme docs, and troubleshooting docs now list the new presets and updated font defaults.
• Terminal frame goldens were updated for the new theme/font output.

Windows Launch, Taskbar, And Notifications

• External URLs now open through a private helper subcommand that breaks away from Paneflow's kill-on-close Windows Job Object. Browser windows opened from help links, update toasts, release-page fallbacks, sidebar links, profile links, and terminal hyperlinks should survive Paneflow exit.
• Folder opens now use explicit platform file-manager commands instead of the generic open crate path: xdg-open on Linux, open on macOS, and explorer on Windows.
• Editor launches on Windows now normalize extensionless shims to native .exe, .cmd, .bat, or .com siblings where needed.
• The editor resolver now searches common Windows install roots for Zed, Cursor, VS Code, VS Code Insiders, and Windsurf under %LOCALAPPDATA%\Programs, %ProgramFiles%, and %ProgramFiles(x86)%.
• Editor failure toasts now avoid labels like Open in Open in ...; they use the cleaner editor name.
• Windows AppUserModelID is centralized as Strivex.PaneFlow and set at process startup, so notifications, taskbar grouping, and installer metadata share the same identity.
• The WiX Start Menu shortcut now lets Explorer use paneflow.exe's embedded icon instead of an MSI Icon table path, reducing stale taskbar icon risk across major upgrades.
• CI visibility for the shared Windows identity was fixed so test builds can assert the WiX shortcut contract.

Terminal And Sidebar Polish

• Ctrl-hovered terminal links still underline, but Paneflow no longer paints the full URL tooltip over terminal content.
• Sidebar diff stats now hide zero-count sides. Insertion-only and deletion-only changes show only the meaningful side.
• Binary-only or unmeasured changes now show a compact N changed file count instead of +0 -0.
• The sidebar diff summary path is now covered by focused regression tests.

Release Metadata

• Workspace package version bumped to 0.7.8.
• Cargo.lock workspace package entries regenerated to 0.7.8.
• AppStream top release entry added for 0.7.8.
• Debian changelog top entry added for 0.7.8-1.

Validation

Local validation before tagging:

• cargo fmt --check
• cargo metadata --locked --format-version 1
• git diff --check
• AppStream XML parsed locally and Debian changelog top entry checked
• cargo test --workspace --locked
• cargo clippy --workspace --locked -- -D warnings

GitHub validation and publish:

• Release workflow: https://github.com/arthjean/paneflow/actions/runs/28856648773, succeeded across Linux x86_64, Linux aarch64, macOS aarch64, Windows x86_64, distro smokes, Windows MSI relay smoke, auto-update e2e, and GitHub Release publish.
• Repository publish workflow: https://github.com/arthjean/paneflow/actions/runs/28859008537, succeeded.
• Homebrew cask update workflow: https://github.com/arthjean/paneflow/actions/runs/28859008558, succeeded.
• Release assets: 32 GitHub assets published, including Linux AppImage/deb/rpm/tar.gz for x86_64 and aarch64, macOS aarch64 DMG, Windows x86_64 MSI, SHA256/minisig sidecars, and AppImage zsync files.

Full Commit Set

• 5748246c feat(theme): add branded presets and Geist fonts
• 4c0ec22b fix(terminal): remove hyperlink hover tooltip
• f8924859 fix(windows): launch external urls outside app job
• 473ed89b fix(windows): harden editor and folder launches
• a68d077b fix(windows): centralize app identity metadata
• ee626038 fix(app): hide zero-count sidebar diff stats
• c639edb3 test(theme): update terminal frame goldens
• 3f824139 fix(ci): satisfy run_tests gates
• d37ba6b2 chore(release): bump version to v0.7.8

Full changelog: v0.7.7...v0.7.8

Paneflow v0.7.7 is a major hardening release across the agent control plane, terminal runtime, workspace persistence, diff workflow, and distribution pipeline. The release covers 36 commits since v0.7.6, including the final version bump and release-fix commits.

Highlights

• Agent control plane: MCP pane tools are explicitly read-only, workspace-scoped by default, and wrap terminal output as untrusted content. Workspace automation gained safer spawn planning, bounded prefill/context handling, and stricter scripting gates.
• Terminal runtime: cell geometry, search, input, bracketed paste, OSC52 handling, copy mode, hyperlinks, scroll state, and output detection were hardened. Hera dogfood diagnostics now provide a shadow/side-by-side runtime for render parity checks behind an opt-in environment gate.
• Workspace and sessions: tabbed pane state now persists across restore, session restore is stricter, fleet surfaces are more stable, Rosetta/attention queues are less fragile, and notification surfaces are opt-in.
• Diff and review: the in-app diff engine, worktree scans, generated/binary file handling, review state, and agents diff dock are more resilient under large or multi-project changes.
• Updates and distribution: signed self-update installers, Windows MSI relay, macOS DMG, Debian, RPM, AppImage, Homebrew, Winget, AppStream, and release CI gates were tightened.
• Docs: Conductor, MCP bridge, scripting, Context7 docs metadata, and user-facing launch/demo material were refreshed to match the runtime contracts.

Agent Control Plane And MCP

• Added the Paneflow MCP bridge hardening pass: list_panes, read_pane, and search_pane advertise read-only behavior, clamp output, scope access to the current workspace by default, and require an explicit global scope opt-in for instance-wide reads.
• Terminal data returned to agents is fenced as untrusted terminal output, reducing prompt-injection risk when agents inspect pane contents.
• MCP install/status/uninstall logic is now idempotent across Claude Code, Codex, Gemini, and opencode configs, with config locks, backup-aware writes, TOML/JSON/JSONC preservation, and cross-platform command resolution.
• Shared subprocess execution now uses a bounded helper with timeouts, stdout/stderr caps, null stdin, and process-tree cleanup on Unix and Windows.
• workspace.up and related IPC methods now plan pane spawns before execution, canonicalize working directories, dedupe labels, bound context/prefill content, gate orchestration primitives, and provide clearer failure shapes.
• surface.read, surface.send_text, surface.send_keystroke, events.subscribe, and ai.* routes have tighter validation, pagination, fencing, CR/LF rejection where appropriate, submit echo handling, and better structured responses.
• CLI automation was expanded around paneflow up, paneflow flow, paneflow wait, paneflow watch, split/select/focus helpers, dry-run/json modes, env token substitution, managed worktrees, and public IPC barriers.

Workspace, Sessions, And UI

• Persisted surface schema now exposes tabbed surface fields so split/tab layouts can be restored more faithfully.
• Session restore, worktree scans, pane scans, stale session cleanup, surface identity mapping, mode routing, and agents surfaces were hardened.
• Agents UI runtime fixes cover fleet sidebar rows, bottom panel behavior, visibility, labels, active/running protection, and noisy interrupt completion events.
• Rosetta and attention queue state received stability fixes for cross-agent status surfaces.
• Notification surfaces are opt-in instead of silently on by default.
• Settings primitives, input handling, shortcut recording, theme shortcuts, window chrome, markdown theme sync, and the main panel bottom corners were polished.

Terminal, Search, And Rendering

• Renderer cell geometry was aligned with frame metrics, backed by golden Hera snapshots and broader layout tests.
• Search/input handling now deals better with wide characters, regex errors, lowercase expansion, row/column mapping, copy mode, and focus changes.
• Hyperlink and file-path activation, OSC52 clipboard handling, bracketed paste state, cursor blink/color, scrollbars, and terminal output-service detection were hardened.
• Hera dogfood runtime can run disabled, shadow, or side-by-side modes via environment configuration, emit scrubbed/raw artifacts, track render mismatches, and compare viewport/cursor/style state against Paneflow's terminal model.
• Multiline surface sends and terminal IPC paths now reject or route ambiguous content more predictably.

Diff, Review, Markdown, And Security

• Diff scopes, worktree branch selection, multi-project grouping, watcher parking, warm-resume cache, generated/binary file handling, and large patch boundaries are more stable.
• The agents diff dock uses shared diff colors/pipelines, better resize behavior, split/unified toggles, collapse state, cached rows, and per-file scroll spans.
• Markdown rendering received state and security hardening, including safer rendering boundaries, link behavior, and renderer lifecycle fixes.
• Cross-platform test gates were tightened for release and layout behavior, including Unix-specific clippy coverage and Windows-only import guards.

Updates, Packaging, And Release Gates

• Signed self-update flows now reject unsigned/keyless builds before touching disk, use stricter semver guards, verify AppImage replacements, and stage Windows MSI updates through a relay after the current process exits.
• System package update routes cover APT, DNF, and Zypper, with rpm-ostree and unknown package managers falling back to explicit user guidance.
• Release packaging was hardened across Windows MSI, macOS DMG, Debian, RPM, AppImage, tar.gz, Homebrew, Winget, AppStream metadata, SHA256/minisig sidecars, and repository publish checks. The Windows MSI Start Menu shortcut now uses the HKCU KeyPath required by WiX ICE38/ICE43 while binaries and PATH remain machine-wide.
• Release CI now checks workspace tests, formatting, clippy, AppStream freshness against the workspace version, MSI relay integrity, and platform-specific packaging behavior before publishing assets.
• The final v0.7.7 bump updates the workspace version, lockfile package versions, Debian changelog, and AppStream top release entry.

Behavioral Notes

• MCP bridge reads now default to the active workspace. Use the documented opt-in global scope only when an agent truly needs instance-wide visibility.
• Notification surfaces are now opt-in, so existing configs may be quieter until explicitly enabled.
• surface.send_keystroke rejects newline bytes. Use surface.send_text for text submission flows.
• The release workflow requires the first AppStream release entry to match the workspace version.

Validation

Local validation before tagging:

• cargo check --workspace
• cargo fmt --check
• cargo clippy --workspace -- -D warnings
• cargo test --workspace
• git diff --check
• AppStream XML parsed locally and first release version verified as 0.7.7

GitHub release workflow: https://github.com/arthjean/paneflow/actions/runs/28795870781, all build, smoke, auto-update, and publish jobs succeeded.
Repository publish workflow: https://github.com/arthjean/paneflow/actions/runs/28798467533, APT amd64/arm64 and RPM x86_64/aarch64 metadata verified at pkg.paneflow.dev.
Release assets: 32 assets published on GitHub, including Linux AppImage/deb/rpm/tar.gz for x86_64 and aarch64, macOS aarch64 DMG, Windows x86_64 MSI, SHA256/minisig sidecars, and AppImage zsync files.

Full Commit Set

• 47a219e1 docs(readme): add Paneflow badge
• 56d046c3 docs(readme): tighten Paneflow badge spacing
• d66bd859 docs(readme): refresh Paneflow badge source
• 76bdbed6 fix(config): expose persisted surface fields in schema
• f6acc27e docs(user): refresh Conductor docs for Context7
• 5fbc533a feat(agent-control): add MCP hardening and Hera dogfood runtime
• 5c297472 fix(agent-control): normalize agent launches
• f0db92d2 feat(workspace): persist tabbed surface state
• 8702205e fix(terminal): align renderer cell geometry
• c1ca5c03 fix(terminal): harden input and search handling
• 3056247f fix(ipc): guard multiline surface sends
• e337a2f4 fix(app): centralize mode routing and expose agents surfaces
• c7ea92e5 fix(app): harden session persistence restore
• 14ecad53 fix(workspace): harden worktree and surface scans
• 52bf7b6d fix(cli): harden orchestration control plane
• cac3ba4b fix(agents): harden agents UI runtime
• fc1a217b fix(app): stabilize Rosetta and attention queue state
• 4dcb30cf fix(app): harden fleet sidebar surfaces
• 1b719cb6 fix(diff): harden diff engine edge cases
• d8417141 fix(diff): stabilize review and agents diff state
• 9e0623eb fix(markdown): harden renderer state and security
• eef7e66c fix(ci): stabilize cross-platform test gates
• 3e28ff57 fix(app): satisfy unix markdown clippy
• 38287675 fix(ui): harden settings primitives and input handling
• 19779b2d fix(app): harden theme shortcuts and window chrome
• 91435e40 fix(update): harden signed self-update installers
• f9ef896e fix(release): harden distribution packaging
• 83f9eead fix(docs): align public surfaces with runtime contracts
• 028a561a chore(tasks): harden PRD and demo artifacts
• d49ca3ec ci(tests): harden release and layout gates
• 744ee6b7 fix(update): gate MSI stdio import on Windows
• 494dab67 fix(config): make notification surfaces opt in
• 58de4c98 fix(app): suppress interrupt completion noise
• fdaca5d9 fix(app): square main panel bottom corners
• de717e42 chore(release): bump version to v0.7.7
• 9d7789f5 fix(release): allow MSI shortcut key path

Full changelog: v0.7.6...v0.7.7

• Terminal appearance is now much more tunable. Settings > Terminal exposes cursor shape, cursor color, font size, font weight, line height, cell width, integrated block glyphs, color emoji, ligatures, scrollback, and Windows terminal material controls, with matching paneflow.json schema coverage.
• The terminal renderer got a sharper visual pass. Text is rounded onto stable cell pixels, cursor painting handles wide glyphs and emoji more accurately, the default cursor color moves to Apple system blue, and golden snapshots now lock the new renderer output.
• Windows material mode is cleaner and safer. Windows-only terminal and chrome material toggles let Mica or blur show through the CLI surface and chrome, while non-CLI surfaces stay opaque and cross-platform configs remain safe on Linux/macOS.
• The app now builds on Rust 1.96.1 everywhere: local toolchain, CI, release workflow, docs, and README are in lockstep.
• Security audit is clean again: anyhow was updated to clear RUSTSEC-2026-0190.

Install

See the Installation section in the README.

Validation

• Local checks: cargo check --workspace, cargo fmt --check, cargo clippy --workspace -- -D warnings, cargo test --workspace.
• Test CI: run_tests.yml run 28518881646 passed on the 0.7.6 release commit.
• Release CI: release.yml run 28518883543 passed across Linux x86_64/aarch64, macOS Apple Silicon, Windows x64 MSI, package smoke tests, auto-update e2e, and GitHub Release publication.
• Repo publish: repo_publish run 28521051417 passed.
• Homebrew cask update: update_cask run 28521051376 passed.
• Release assets: 32 assets published, including Linux x86_64/aarch64 AppImage, .deb, .rpm, .tar.gz; macOS Apple Silicon .dmg; Windows x64 .msi; plus minisign and SHA-256 sidecars.

Full Changelog

Features

• 8f297cd4 feat(app): refine terminal material appearance - adds Windows-aware terminal and chrome material switches, transparent CLI terminal backgrounds when material is enabled, rounded panel corner masks, material-aware startup/backdrop painting, and safer native-backdrop resolution across Windows, macOS, Linux, Diff, Agents, and Settings.
• 600a1c7c feat(terminal): add renderer appearance controls - adds Settings controls and config/schema fields for cursor shape, cursor color, font weight, cell width, integrated glyphs, color emoji, Windows terminal material, and related renderer defaults; also reworks font resolution, cell metrics, text paint alignment, and cursor rendering.

Maintenance And Security

• 19414984 chore(rust): bump pinned toolchain to 1.96.1 - moves the repo pin, README badge/docs, run_tests, audit, release workflow inputs, and update e2e script expectations to Rust 1.96.1.
• 5cb18899 fix(deps): update anyhow for RUSTSEC-2026-0190 - updates anyhow from 1.0.102 to 1.0.103 so advisory scanning passes again.
• da101da3 test(terminal): refresh renderer golden snapshots - refreshes terminal renderer golden files for ANSI colors, APCA contrast, block glyphs, CJK spacer, cursor shapes, dim/inverse/selection, indexed color, and truecolor output after the renderer appearance changes.
• b8db1bcf chore(release): bump version to 0.7.6 - updates the workspace package version, internal lockfile package versions, and Debian changelog for the release.

Compare: v0.7.5...v0.7.6

• Agent session discovery is broader. The docked sessions sidebar now goes beyond Claude, Codex, and OpenCode with discovery/resume support for Pi, Hermes, Grok, Cursor Agent, Gemini, and Kiro through documented local stores or CLI list commands. Resume commands keep the strict session-id guard before anything reaches a PTY.
• Agents terminals now follow your current shell settings. Bottom-dock terminals and sidebar agent terminals can be restarted with the active integrated-terminal shell, and Settings now makes it clear when running terminals need a restart versus when new or finished terminals will pick up the change automatically.
• The Files sidebar is smoother and keyboard-first. It now animates open/close, focuses on toggle, supports arrow/Home/End/Enter/Escape navigation, preserves selection as the tree changes, and handles loading, empty roots, workspace switches, and file-watcher churn more defensively.
• Diff review is much more interactive. The Agents diff dock and Review surface gained shared direct-paint scrolling, unified/split switching, collapse-all and per-file folding, fold expansion for hidden context, horizontal scrolling per file/side, language/file icons, better untracked-file stats, and warmer revalidation for visible columns.
• Linux readability is safer by default. Native compositor backdrop/blur on Linux is now opt-in through PANEFLOW_LINUX_NATIVE_BACKDROP, so Wayland/X11 users get an opaque background unless they explicitly enable experimental blur.

Install

See the Installation section in the README.

Validation

• Local checks: cargo check --workspace, cargo fmt --check, cargo clippy --workspace -- -D warnings, cargo test --workspace.
• Release CI: release.yml run 28456228236 passed after hardening the openSUSE smoke-test refresh against slow Tumbleweed metadata downloads.
• Release assets: 32 assets published, covering Linux x86_64/aarch64 AppImage, .deb, .rpm, .tar.gz; macOS Apple Silicon .dmg; Windows x64 .msi; plus minisign and SHA-256 sidecars.

Full Changelog

Features

• cbd783c0 feat(app): expand agent session discovery - adds session discovery for Pi, Hermes, Grok, Cursor Agent, Gemini, and Kiro; wires the docked sessions sidebar to all supported agent readers; adds safe resume-command shapes per agent; and keeps attribution matching available for the wider agent set.
• fcd9d6aa feat(terminal): restart agents terminals with current shell - adds restart controls for bottom-dock and sidebar terminals, makes terminal shell changes visible in Settings, and lets finished/new terminals reopen with the current shell while warning when running terminals need a restart.
• d13d05eb feat(files): add animated keyboard sidebar controls - adds the Files sidebar toggle binding, open/close animation, focus tracking, row selection, keyboard navigation, and Markdown activation while keeping selection clamped as folders expand or collapse.
• 4a41d8e4 feat(diff): add interactive scrolling and fold expansion - upgrades the Agents diff and Review diff surfaces with unified/split row caches, file collapse/expand controls, fold expansion, horizontal wheel and scrollbar support, file/language icons, binary/file stats handling, and visible-column revalidation.

Fixes And Polish

• e59ed986 fix(files): harden files sidebar state and rendering - makes the Files sidebar more resilient around root hydration, empty listings, stale expansion state, context menus, file watcher updates, and active-session changes.
• 665df894 style(diff): refine review diff gutter styling - tightens the diff gutter treatment, row styling, and theme colors so review diffs scan cleaner.
• ad33b556 fix(app): keep Linux backdrop opaque by default - makes Linux native blur opt-in with PANEFLOW_LINUX_NATIVE_BACKDROP and forces an opaque background when it is disabled.
• 8acd7357 refactor(app): collapse project git stats guard - simplifies the guard around project git stats updates.

Docs And Release Infrastructure

• 3588b096 docs(show-hn): refresh launch draft claims - refreshes the Show HN launch draft to match the current product claims.
• 46a318f7 chore(release): bump version to 0.7.5 - updates the workspace version, lockfile package versions, and Debian changelog.
• f3ee2abe ci(release): harden openSUSE smoke refresh - extends the openSUSE smoke-test zypper timeouts so slow Tumbleweed metadata downloads do not block a valid release.
• 235f0d70 ci(release): bootstrap zypp config in openSUSE smoke test - creates the zypp config file when the container image does not ship one before applying the timeout override.

Compare: v0.7.4...v0.7.5