Release notes

Changed

• Routing that cannot leak by forgetting. Cloaky’s background helpers — the session headline, commit-message drafting, refine, side chat, agent and skill drafting — resolve a provider by climbing a ladder: local daemon, Venice, your proxy, your coding plan. The ladder’s bottom rung used to be Anthropic by default; 0.1.7 inverts it. Work that no configured provider claims is skipped — never quietly sent anywhere — and Anthropic is an opt-in rung like every other one, gated on the Claude toggle.
• The model picker opens where you are — on the provider group your current model belongs to, choices first, with every other provider one Change action away. A search flattens the catalog into one list whose rows carry their provider’s mark and retention contract.

Added

• Pull requests in the sidebar, read through your own gh login — nothing new to sign into. Checks, reviews and mergeability fold to chips.
• The agent’s task list is a surface: one resting line under the status card that opens into the live plan.
• Voice typing, locally. Dictation transcribes on this Mac with a local speech model; the audio never leaves it. The composer also attaches files and folders now, not just images.
• Sessions manage their own budget — the budget is a cap, oversized tool results truncate middle-out and say so, and a session states how many times it has compacted. A finished session can be recorded as a draft skill.

Hardened

• The local WebSocket validates every frame at runtime before anything executes; a violating frame closes the connection.
• Supply chain: dependency installs run with lifecycle scripts disabled behind a fail-closed allowlist; the tree was audited clean during a live npm supply-chain campaign; the one production advisory in Cloaky’s own dependencies is patched. The local auth token compares in constant time, and the renderer sandbox is declared explicitly.

Added

• Local inference is a page, not a setting. The sidebar’s Local inference page browses Ollama’s model gallery with sizes measured from the registry and a hardware-fit readout before you pull. Search asks the full registry instead of filtering the models already on screen. On the local tier your prompts never leave your machine.
• Third-party notices ship in the app. NOTICES.md for every bundled package, plus Electron and Chromium’s own licenses, live in the app bundle — and Settings → General → App behaviour has a row that reveals them. 0.1.6 is the first build that carries them.

Changed

• A broad interface pass — the UI worklist’s first wave. Streamed text drains at a smoothed cadence instead of network clumps; a sent message slides to the top and the reply fills the room below; sidebar rows carry their status as a single word; notifications fire only for work you cannot see; a pasted wall rides as a chip; select a reply to quote it back; a turn’s files can be put back where that is still true; the shortcuts overlay reads the real bindings; the context meter is a ring that fills.

Fixed

• The app can tell “Ollama isn’t installed” from “Ollama is stopped”, and version floors are read from the app bundle rather than whichever CLI is on disk.
• The packaged app hands the engine a PATH that can find node, so sessions started from the Dock behave like sessions started from a shell.
• The packaged pty binaries no longer carry the build machine’s filesystem paths, and about 2 MB of Windows-only payload left the Mac app.
• Two privacy sentences claimed a contract Venice does not always have; they now state the tier they belong to.

Known limitations

• E2EE + TEE still covers only supported turns without tools. Agent turns run on Venice private, and attestation is reported with its current limits.
• The terminal is macOS desktop only, one shell, at a fixed height.
• v0.1.3 and earlier cannot update themselves. A one-time manual download is required.

v0.1.5 is the first public-beta build: downloads are open to everyone, no invitation needed. The app is not finished — if you run it on real work and tell us where it falls short, that is exactly the help we are asking for.

Added

• Terminal. ⌘J opens a shell drawer at the bottom of the workspace: your login shell, in the directory you work in, with your prompt and your colours. ⌘J again hides it and the shell keeps running. The terminal runs in a separate process inside the desktop app — it is not reachable from the local web server or from the phone companion, because no path to it exists there.
• ⌘⇧J now cycles through sessions waiting on you. It used to be ⌘J, which the terminal has taken.

Fixed

• Heavy terminal output. Review found that Unicode-heavy output — any box-drawing TUI, htop, vim — could wedge the terminal until restart, because the two sides of the flow-control window counted bytes differently. Every build now opens a real window, floods 600KB of box-drawing characters through the shell, and checks that it still answers.

Known limitations

• The terminal is macOS desktop only, one shell, at a fixed height. Tabs, a resize handle and scrollback that survives a reload are not in this release.
• The terminal is a real shell running as you. Cloaky’s permission system governs what the agent runs; what you type there is yours.
• E2EE + TEE still covers only supported turns without tools. Agent turns run on Venice private, and attestation is reported with its current limits.
• v0.1.3 and earlier cannot update themselves. A one-time manual download is required.

Fixed

• Auto-update. Cloaky now checks the public release feed on launch, downloads new versions in the background, and installs them once you approve. Earlier builds shipped with a misconfigured feed and cannot detect this release or any later one — if you are on 0.1.3 or earlier, download 0.1.4 manually; it is the last manual update. The release pipeline now blocks any build that is missing its update feed.
• Model picker. Finished the visual styling of the engine groups in the model picker.

Known limitations

• E2EE + TEE still covers only supported turns without tools. Agent turns run on Venice private, and attestation is reported with its current limits.
• v0.1.3 and earlier cannot update themselves to this or any future release. A one-time manual download is required.

Added

• Ollama and LM Studio support. Local models now work as full providers, and sessions that use them show the Local tier throughout. Ollama is verified end to end; LM Studio uses the same supported endpoint contract.
• Local models gallery. Browse compatible models, compare download sizes against your available memory, and follow installation progress from the sidebar.
• Hybrid sessions. A Venice model can plan and review while a local model on the same machine handles suitable subagent work.
• Clear history. Delete your Cloaky history — optionally including supported agent-engine transcripts — while keeping credentials, logins, engine settings, and phone pairings.
• Live Venice catalogue. The model picker refreshes the list of available Venice models, and keeps the last known list when the network is unavailable.
• Notarized macOS builds. Downloads are signed with an Apple Developer ID certificate and notarized by Apple, so first launch is a normal double-click. Release assets were replaced in place on 2026-08-01.

Known limitations

• E2EE + TEE still covers only supported turns without tools. Agent turns run on Venice private, and attestation is reported with its current limits.
• Ollama does not expose its runtime context setting, so Cloaky shows the model’s maximum context window instead of the daemon’s actual value.

Fixed

• Venice usage accounting. Cost records now use the settled amounts reported by Venice, so the local ledger matches Venice billing.
• Zero-cost turns. Venice turns no longer show as free when the selected model is missing from the original rate table.
• Billing periods. The usage pane now shows the account’s actual reset time and marks which spend is charged through Venice.

Added

• Per-session provider badge. Each session records the provider and privacy tier it actually started with. Session assists use the same configured route and stop if it is unavailable.
• Served-model verification. Cloaky compares the model you requested with the model Venice returned, and reports any substitution rather than showing a guarantee that may not apply.
• Live Venice balance. The sidebar shows your available credit, tier, and key expiry, and updates as turns settle.

Known limitations

• E2EE + TEE covers supported turns that do not use tools. Agent turns that need structured tools run on Venice private.
• Attestation evidence is limited and is not an independent cryptographic proof.
• macOS builds are available for Apple silicon and Intel. v0.1.2 builds are not notarized, so macOS may show a Gatekeeper prompt on first launch. Builds from v0.1.3 on are signed with an Apple Developer ID and notarized by Apple (see the install guide).

Added

• Venice inference. Sessions can stream from Venice private models, with tool use available throughout the workbench.
• Privacy-tier model selection. The model picker groups models into Local, E2EE + TEE, Private, and Anonymized tiers, and shows which route a session will use before it starts.
• Desktop builds. The first Linux build established the packaged release path. macOS builds for Apple silicon and Intel are available through the install guide.
• Full workbench. Threads, diffs, subagents, permissions, line-level review, commits, pushes, and phone handoff are all included in this release.

Known limitations

• Exact Venice cost records are not available yet.
• E2EE and attestation receipts are not enabled yet.
• Per-session provider and privacy badges are planned for the next release.