Changelog
What changed
Generated from the release notes and pending changesets in the repository, so it always matches the code.
-
Fix
Adapters on the redesigned console: "Open terminal" continues a Claude Code conversation through the Claude Code adapter (resume passes through the adapter boundary), the Sessions list names a non-Claude agent in the row and offers an Agent filter only when more than one agent has sessions, the drawer's Details tab shows the agent, its version and what Orgus can do with it, and Codex lines in a session log read as the agent speaking.
Orgus Agent, Orgus Console
-
Change
Design foundation on main: Checkbox and Popover from
@orgus/uistay the components feature code uses (label, hint, indeterminate; anchored panel), with the shadcn popover's header, title and description beside them; the shadcn Checkbox and Popover are in@orgus/ui/primitives. Badge keeps the per-tone ink that reads at 4.5:1 and the accent's own text colour on solid fills; Drawer, now on the shadcn Sheet, still returns focus to the row it opened from. Durations and counts across the console use the one formatter (45s,4h 46m, compact from 10,000).Design system, Orgus Console
-
Change
The portal's link check counts a line number only for a broken link, so checking a large site no longer times out.
docs
-
Fix
Web push sends its encrypted body as an ArrayBuffer-backed Uint8Array, a body under both the Node and the DOM fetch types (the e2e unit typechecks hub code with the DOM library). The e2e unit now holds both the contract suite (pnpm test) and the end-to-end gates (pnpm e2e).
Orgus Hub
-
New
An update refusal
origin-mismatch("The update server and the official release disagree"): a node that finds the vendor's fixed release origin disagreeing with its server's offer refuses it, and the server raisesoriginAlertin the fleet state, a danger notice (shown in Machines even while a rollout runs), auditfleet.origin-mismatch, and the machine's hold, until the machine reaches that version or a week passes. Add machine's downloads (WP-03) now run on the shared fleet engine and hand out the newest release of the workspace channel; the control plane serves them too, redirectingGET /api/fleet/downloads/:targetto the file on its release origin (which now sendsOrgus-Sha256).Protocol, Orgus Hub, Orgus Cloud, Orgus Console
-
Change
Flows on main: the canvas is in the secondary nav (key f) and opens from a workflow in the run drawer (Open on canvas); its routes are in the API reference.
Orgus Console, Protocol
-
Change
The landing queue on main: policy freeze windows (Settings, Landing and freezes) now hold the queue and refuse deploys and promotes on top of each environment's own freezes (rollbacks stay allowed); the queue's settings are their own section, Settings, Landing queue; landing routes are in the API reference; a parked landing shows in Overview's Needs you on the redesigned list. The environment freeze type is DeployFreezeWindow, since policy already has a FreezeWindow.
Orgus Hub, Orgus Console, Protocol
-
Change
Getting started on the redesigned console: its checklist heads the Overview, the empty project list offers Connect a repo, empty Activity and machine session lists offer a new session, and General settings links to Getting started. Onboarding and template routes are in the API reference, and an address under /api/templates that is not part of the API gets the hub's 404 instead of a 405.
Orgus Console, Orgus Hub, Protocol
-
Change
Power UX on the redesigned console: Sessions keeps its calm list and gains a views bar (saved and shared views, a filter in words that narrows every count), a checkbox per row with Shift ranges and x on a focused row, and the floating bulk bar (Stop with confirmation, Copy links). Machines gains the words filter and the hive layout for large fleets. The entity hover card is EntityHoverCard (the HoverCard name belongs to the shadcn primitive), the row checkbox is the existing Checkbox, and the shared views routes are in the API reference.
Orgus Console, Design system, Protocol
-
Fix
The hidden-spawn scan accepts a command held in a field (
util.HideWindow(a.launcher)), and the spawns added since the PTY fix (layout's git check-ignore, the status e2e build, the hook-script and live-haiku tests, the Go parity test's mklink) start hidden too.Orgus CLI
-
Change
The session drawer's Diff and Events tabs join the redesigned drawer (six tabs: Activity, Diff, Events, Agents, Details, Terminal), with the cost per model in Details. Claim stays the one in the drawer header (teams), and the hub's stop gate for discovered sessions counts a teams owner or session control on the machine as held. A headless session Orgus launched takes messages from the Activity tab where session control is off. Older
?tab=transcriptand?tab=costlinks still open.Orgus Console, Orgus Hub, Orgus Agent, Design system
-
Change
The installed desktop app's title bar is one strip across the window with the Orgus mark and sidebar toggle in it: equal space around the mark, clear of the window buttons wherever the system puts them (right on Windows and Linux, traffic lights on the left on macOS).
Orgus Console
-
Change
A Codex session that fails (a usage limit, a sign-in error) now carries its cause, also when Codex fails before writing a session file, so a mission moves on to another agent instead of stalling.
Orgus Agent
-
Change
Autopilot missions run only the tests of the files they changed and submit without waiting on pnpm test:affected, which the landing queue runs, so each change is tested once and missions do not sit waiting for CPU.
Protocol
-
Fix
Orgus's review runs at most two reviews at once and does not count a review the machine turned away as busy, so a burst of landed items is reviewed instead of giving up after three refusals.
Orgus Hub
and 588 more unreleased changes
New
- AI agents can now monitor and manage Airside through
airside mcp(an MCP server for Claude Code) and the hub's AI API, inside tiers, rate limits and an audit trail you can watch in Settings, AI agents. (@airside/protocol, @airside/hub, @airside/agent-ts, @airside/web, @airside/mcp, @airside/cli) - Sign in with GitHub, with owner, admin, operator and viewer roles enforced on every route and action, scoped API tokens for scripts and AI agents (audited as agent:name), and
airside loginfor the terminal. (@airside/protocol, @airside/hub, @airside/web, @airside/cli) - Airside has a Cloudflare Workers and Durable Objects control plane, written and tested locally and not deployed, that serves the hub's API to the console, accepts unchanged agents, and adds sign-in with GitHub, a tamper-evident audit log and serialised landing queues. (@airside/control-plane, @airside/hub)
- Spend shows what every session, project, machine and model costs at API list prices (labelled notional for subscription seats), with budgets that warn at 80 % and can stop launched sessions at the limit, a month-end forecast, runaway session alerts in Needs you, a cost chip on each session, and a CSV export. (@airside/protocol, @airside/agent-ts, @airside/hub, @airside/web)
- Airside has a real design system: tokens built from W3C Design Tokens JSON with dark, light and high contrast themes and a compact density, status colours separate from the brand accent, new StatusPill, MetricTile, CostMeter, DataState, AuditEntry, PipelineStage and row components, a theme toggle that cycles all three themes, and a living catalogue at /design checked by axe and visual snapshots. (@airside/tokens, @airside/ui, @airside/web)
- Every watched repo now gets a discipline score and a list of rule violations on the new Discipline page, and
airside check,airside new,airside docsandairside releasehold the Airside repo itself to the same rules. (@airside/discipline, @airside/cli, @airside/agent-ts, @airside/hub, @airside/web, @airside/protocol) - The machine agent reports long sessions exactly (it reads each long transcript whole once in the background and remembers the result), keeps subagents running through long commands, shows the Qawl landing queue as it really is (who is verifying, who waits, idle versus down, real titles, the right log), answers project.add at once, and costs about half the CPU it did once its git and tasklist children are counted. (@airside/agent-ts, @airside/protocol, @airside/web)
- The session drawer shows the real transcript, commands have live output and Cancel, Needs you shows only recent unresolved failures, and the hub closes the review's security findings (exact Host and Origin checks on /agent, no blocking scrypt, sign-in rate limits, a per-port session cookie, no cross-machine overwrites). (@airside/hub, @airside/web, @airside/agent-ts, @airside/protocol)
- A Go machine agent (
airside-node-agent), one static binary for Windows, Linux and macOS, enrols with a join token and reports the machine, Claude Code sessions and git checkouts to the hub, and runs commands and project changes there; the TypeScript agent stays the default until the Go one reaches parity. (airside/node-agent) airside layout(andpnpm check:layout) checks every file and folder against the allowed tree in.airside/layout.json, with expiring waivers in.airside/waivers.json; a Claude Code hook refuses writes to a disallowed path and a test failspnpm testwhen a tracked file breaks the layout. (@airside/cli)- Missions: keep a backlog of epics, stories, bugs and chores, start a mission from any item on any machine, and watch its sessions, blockers, spend and progress live in one place. (@airside/protocol, @airside/hub, @airside/web)
- Airside now runs on your phone: install it as an app at /m (Inbox, Fleet, Session, Costs, Settings), get Web Push notifications with Approve, Deny and Open buttons, and send alerts to Slack or Teams with quiet hours and a daily digest. (@airside/protocol, @airside/hub, @airside/web)
- Machines now prove their own Ed25519 key on every connection, every command from the hub is signed and checked by the machine, each machine can set ceilings the console cannot raise, the audit log is hash-chained and verifiable, and admins can freeze all write actions or pause one project from Settings > Trust and kill switches. (@airside/protocol, @airside/hub, @airside/agent-ts, @airside/cli, @airside/web)
- Sessions Airside starts now ask before risky steps: policy rules allow, deny or ask, the Inbox shows each request with its exact command and risk (Allow once, Allow for session, Make it a rule, Deny with a note), pending approvals lead Overview's Needs you, and Settings, Policies lists the rules with their hits and simulates any change against the last 7 days. (@airside/policy, @airside/protocol, @airside/agent-ts, @airside/hub, @airside/ui, @airside/web)
- Every agent of a workflow run now shows as its own live lane on the Agents & workflows page, grouped by phase with status, duration, tool calls, worktree and last message, and the Running count includes workflow agents. (@airside/protocol, @airside/agent-ts, @airside/web)
Fixed
- An AI agent's mission.start now creates the mission and starts it on a machine with a checkout of the project. (@airside/hub, @airside/protocol)
- Trust and kill switches, AI agents, Members and API tokens now update live from the hub instead of polling every few seconds. (@airside/web)
Upgrade steps
None. Pull, run pnpm install, and restart.