[ log ] // changelog
Changelog
Every change to the CLI and the desktop app, newest first. arcflare update picks up the CLI ones; the app updates itself.
desktop releases
- clitunnel and app: fix round 3c findings (file-stamp races incl. a missed CLI revoke, NavPolicy percent-decoding, client .local rule)
- clihelp: say the start QR opens a browser page and the app is paired with pair
- clidocs: honest release-gate checklist, README section for arcflare phone, SECURITY.md threat table
- clihub and app: fix round 3b findings (separate LAN token, per-carrier budgets, token-first lockout, hub token cannot edit the LAN allowlist, forged replies ignored)
- cliSECURITY-LOG: round 3b re-review (rows 36 to 44), repair row 29
- cliandroid: tunnel over the home network, no plain-HTTP page; pairing flow, WebView and Forget fixes
- clihub: encrypted home-network path (LAN mailbox) and flake fix in the phone e2e
- cliSECURITY-LOG: rows 30 and 34 updated (the previous commit message said so; the edit had failed)
- cliandroid CI: secret-free build job, tag-only protected release job, SHA-pinned actions, allowlist UI sync
- cliwip: android CI split (build vs tag-only release), sync-ui allowlist, workflow tests (165/165)
- cliwip: android build supply chain (gradle checksum, devDependency); CI workflow rewrite in progress
- cliSECURITY-LOG: round 3 Android review findings (rows 29 to 35), fixes in progress
- cliandroid: Capacitor app (pairing by deep link, home-first, relay fallback, native hardening, CI build)
- cliwip: UI transport seam (window.ArcFlareTransport) for relay mode; e2e flow 13
- cliphone UI: redesign as a native-style app (bottom nav, FAB + sheet, chat view, approval sheet)
- clitunnel relay: cap poll replies under 2.5 MB (the hub refuses over 3 MB)
- clitunnel: fix round 2 review findings (M1, L1 to L7, info), 21 regression tests
- cliwip: tunnel review fixes in progress (tests green: 34/34 tunnel and server)
- cliphone UI: fit 320px phones, readable approval status, right setup command; e2e guards
- cliSECURITY-LOG: round 2 tunnel review findings (rows 18 to 27), fixes in progress
- cliTUNNEL.md: CORS is exact-origin, never *; SECURITY-LOG: round 2 status and relay open items
- cliwip: phone emulation e2e script (opt-in, not part of npm test)
- cliphone UI: restyle to match arcflare.net (tokens, themes, fonts, mascot), offline assets
- cliSECURITY-LOG: record the web-server findings (rows 15 to 17) and round 1 status
- clihub server: body deadline, stream caps, immediate stream close on revoke; log findings
- clihub: fix red-team findings (whole approvals, model-swap guard, tier fallback, caps, id validation)
- cliwip: tunnel hooks in hub server (dispatchTunnel, per-device lockout key)
- cliSECURITY-LOG.md: findings, release gate and residual risk for the phone hub
- clihub auth: reserve prototype names, bound concurrent password checks
- cliphone hub: login sessions, agent supervisor, LAN web server, phone UI
- cliwip: phone hub (accounts, router, CLI wiring); server, supervisor and UI landing next
- cliCLI look: section headers, aligned tables, tidy agent turns, grouped help
- cliagent: project notes, Ctrl+C interrupt, /undo, saved sessions, /context
- desktopv0.5.0: new look, refreshed engine (polished agent output)
- desktopPolish: view headers, dot-matrix empty states, VRAM meters, two bug fixes
- desktopAgent view: the ArcFlare coding agent inside the app
- clirc: readable relay errors (503 says the relay is switched off, not raw JSON)
- cliarcflare report: follow the site's pre-filled GitHub issue fallback
- cli/rc prints a QR code: scan it with your phone to take the session anywhere
- cliAnswer the security review: verified updates, explicit MCP trust, SECURITY.md; add report and harness update
- cliSuggest enhancements and new features for website
- cliAdd additional security findings to complaint file
- cliAdd additional security findings to complaint file
- cliAdd security review findings to complaints file
- cliDocument user complaints and feature requests
- cliAdd common secret and local-state files to gitignore
- cliEngine for the desktop app: lib/serve.js and resident generation workers
- cliAdd arcflare shop and arcflare uninstall
- cliSpeech: arcflare gen tts with Qwen3-TTS, Kokoro, Chatterbox, VoxCPM2, OuteTTS
- cliFix window listing and node:test parsing; the suite is green
- cligen: add Hunyuan3D-2 turbo and Hunyuan3D-2 mini fast
- cliArcFlare 1.1: 3D generation, remote control (/rc), and updates (/update)
- cliHarden the machine server: trust-gate repo MCP configs, validate tool args
- desktopPhone: a late or double click can't undo start/stop; plain message when the relay is switched off
- desktopAuto-updates: download new versions in the background, restart to install
- desktopControl from your phone: QR code panel, the app as an /rc host
- desktopRelease builds: GitHub Actions installers for Windows, macOS and Linux
- desktopArcFlare Desktop: chat, studio (image, 3D with point-and-ask editing, speech, flow), models, harnesses