Changelog

All notable changes to Tower are documented here. Release pages use the matching section from this file as their release notes.

The format follows Keep a Changelog and versions follow Semantic Versioning.

[Unreleased]

Changed

• Pushing a stable v<version> tag now starts the production release workflow automatically. GitHub environment approval remains required before npm and GitHub Release publication.
• The protected publication job validates and publishes the npm tarball built before approval instead of rebuilding the application and rerunning release gates.
• Production Releases publish install.sh, install.ps1, and SHA256SUMS as top-level helper assets. The changelog remains the release-notes source, and the CMD compatibility wrapper remains inside the Windows portable archive.

Fixed

• GitHub Pages retries use attempt-scoped artifacts, preventing a failed deployment retry from colliding with an artifact uploaded by the prior attempt.

[0.4.0] - 2026-08-06

Added

• Registry-free portable distributions for macOS arm64/x64, Linux arm64/x64, and Windows x64, with installers, platform manifests, and SHA-256 checksums.
• A five-platform Release Candidate workflow that produces reviewable artifacts without creating a tag, publishing npm, or creating a GitHub Release.
• Durable Gateway-to-Workbench project discussions, work requests, completion delivery, and bounded OWNER capability routing.
• Guaranteed final OWNER notification and recovery states for unattended goals.
• A Windows CMD installer entry point alongside PowerShell installation.

Changed

• Workbench availability now follows provider turns and durable pending work; terminal lifetime and delayed stop hooks no longer keep an idle Workbench busy.
• Assistant sessions use bounded Tower-owned history, preserve explicit workspace/project bindings per session, and hide internal CLI carrier sessions.
• Missions presents localized Workbench status, pending count, and heartbeat without exposing internal generation numbers.
• Backups remain an explicit Settings action; Tower no longer starts an undocumented, default-enabled scheduled backup loop in the server process.
• GitHub Pages documentation now separates product features, Gateway, Workbench, durable protocol, MCP, OpenClaw integration, and AI Provider extensions. Version-specific guide pages moved into this changelog.
• Release Candidate and production workflow downloads expose separate platform artifacts with stable names such as tower-macos-arm64 and tower-windows-x64, without a redundant all-platform bundle.

Fixed

• Restored Workbench queue draining after idle resume and fenced delayed provider callbacks from newer turns.
• Hardened Windows portable builds, Prisma path normalization, npm invocation, and native probe shutdown.
• Restored Assistant attachment/goal-mode tools and built-in CLI Provider registration after the runtime refactor.
• Removed a company-environment Feishu screenshot from the public documentation.

Security

• Production startup now rejects wildcard and LAN bind addresses; supported CLI and unattended-service startup paths remain loopback-only.
• Release identity is bound to one tag, commit, package version, repository, and explicit approval value; recovery refuses moved tags or conflicting assets.
• Candidate metadata is passed through environment variables rather than direct workflow expression interpolation in shell commands.
• GitHub publication uploads and verifies assets on a recoverable draft, then publishes once so repository-level immutable releases can lock the tag and assets.

[0.3.1] - 2026-08-04

Added

• Recoverable Workbench inbox batches with ACK, leases, heartbeat, recovery scans, and generation fencing.
• Gateway queue, task-created, reviewed-result, and delivery-outbox flow.
• OWNER/NON_OWNER routing, scoped channel authorization, remote repository review, and user-managed unattended services.

Fixed

• Empty Workbench queues no longer report false busy states or resurrect an idle coordinator.
• Platform delivery failures retry independently without rolling back completed Tower work.

0.3.0 (2026-07-26)

User-visible capabilities

• add AI Tools connections and five ordered capability slots
• add built-in Claude Code, Codex CLI, and Gemini CLI providers plus four API protocols
• add Tower-owned multi-turn Assistant sessions, attachments, tools, cancellation, and legacy Claude import
• add trusted local third-party CLI plugin installation, permission review, configuration, and lifecycle controls
• default the production CLI to 127.0.0.1 while preserving explicit host overrides

Migration and security

• add one-shot migrations 0009-api-connections through 0013-assistant-sessions while preserving legacy profiles/config/transcripts
• document plaintext local API key storage, full-backup inclusion, redaction, plugin trust boundaries, and non-compatible 0.2 rollback

Known limitations

• workspace SDK/runtime/provider packages remain private and are not independently published
• the official hosted extension Catalog is not part of this release; operators must configure an approved HTTPS Catalog URL

Release validation

• pass the latest isolated frozen install, database migration, type checking, ESLint, unit/component tests, workspace and Qwen builds, Catalog validation, and documentation build
• require a stable font build connection before rerunning the final production build, package canary, and standalone install/migration smoke
• keep real Provider accounts, API keys, CLI login state, and the existing production service outside the release gate

0.2.20 (2026-06-10)

Bug Fixes

• git: worktree 复用时也重建 node_modules 软链 (f0e2856)
• preview: 预览 cwd 在 worktree 下也拼接 subPath (3e409a0)

0.2.19 (2026-06-09)

Bug Fixes

• assets: 笔记列表排序在毫秒并列时不确定，修复 CI 间歇失败 (7c92596)
• assistant: AI 助手只描述不执行工具调用 (#10) (f6888e3)
• layout: root layout 标记 force-dynamic，避免 build 时把发布者本地数据烤进 RSC 产物 (2448f99)
• terminal: 启动终端报错被 RSC 脱敏成通用错误 (#6) (a973cc6)
• test: search-code fs mock 改同步 factory，修复 CI existsSync 失效 (dc46f87)

Features

• board,task,settings: 版本展示、任务体验与设置页改进 (84bab87)
• git: 分支下拉显示完整分支名 (#7) (c020c6f)
• mcp,skill: create_task 版本/默认行为，修复 subPath 丢失 (7cd4e40)
• notes: 任务面板附件支持预览和在文件夹中显示，对齐资源页 (fe116f3)
• project: 项目卡片路径/Git URL 支持一键复制 (#11) (927f9c1)
• search: 内置 ripgrep，代码搜索开箱即用 (e273f8d)
• settings: rg 安装提示改为可复制 Popover (ff500e0)
• workspace: 侧边栏工作空间拖拽排序 (#9) (43a8a87)

0.2.18 (2026-05-29)

Chore

• release: version bump for a clean retry — no functional changes since 0.2.17

0.2.17 (2026-05-29)

Bug Fixes

• ripgrep detect: fall back to well-known install paths (/opt/homebrew/bin/rg, /usr/local/bin/rg, scoop/winget/choco/ProgramFiles on Windows, ~/.cargo/bin/rg, ~/.local/bin/rg, /snap/bin/rg, MacPorts) when which/where rg returns nothing. Tower processes inherit a snapshot of PATH at launch — if the user installs ripgrep via brew after starting Tower, PATH lookup misses it even though the binary is right there
• rg install tooltip: restructure the manual-install tooltip into a proper line-by-line layout — three rows (macOS / Win / Linux) each with the package-manager command in monospace. Was previously one long sentence that rendered as a wall of text with parentheses

0.2.16 (2026-05-29)

Bug Fixes

• monaco: drop the npm install install path entirely. We now download the monaco-editor tarball directly from npmmirror and extract it (with the existing tar dep) into ~/.tower/extensions/monaco/. Removes the whole class of failures around ~/.npmrc prefix= overrides, npm CLI absence, npm.cmd CVE-2024-27980 wrapping on Windows, and untrusted postinstall scripts. The Monaco API route (/api/internal/monaco/[...path]) now streams from the new path
• ripgrep: stop pretending we can auto-install a native Rust binary. The "Install" button is replaced with "Install from homepage" + a tooltip explaining why (GitHub releases unreliable in restricted networks, no domestic mirror), pointing users at brew install ripgrep / winget install BurntSushi.ripgrep / apt install ripgrep. check() keeps detecting the binary on PATH so installing it manually still flips the badge to ✓
• search: ripgrep resolution in code search now only looks at the user's PATH (with where on Windows + which on POSIX). The dead @vscode/ripgrep import path is gone, along with the dependency itself

0.2.15 (2026-05-28)

Bug Fixes

• monaco: serve Monaco assets through /api/internal/monaco/[...path]/ directly from ~/.tower/extensions/node_modules/monaco-editor/min/vs/ — no more copy-to-public/vs step. Next.js standalone bakes its static asset manifest at build time, so files we copied into public/vs at runtime weren't being served — loader.config got a 404 and the editor sat at "Loading editor…" forever
• extensions: npm install --prefix=$EXT_ROOT to force install into ~/.tower/extensions/ and ignore any user-level ~/.npmrc prefix= override that would otherwise hoist the install elsewhere and leave the workspace empty (this is why "first install succeeded, refresh said not installed" — npm wasn't actually putting files where check() looked)
• extensions: install errors now surface npm's stdout/stderr so the next failure mode is diagnosable from the toast instead of needing to attach the server log

0.2.14 (2026-05-28)

Refactor

• assistant: drop the inline mcpServers config in /api/internal/assistant/chat/route.ts — Tower MCP is already installed at user scope on every boot by instrumentation.ts, and the Claude SDK auto-discovers it. Keeping a second copy of the config inline meant dist/mcp-server.cjs path had to stay correct in two places. Now there's only one source of truth (the user-scope CLI install)
• init-tower: delete the now-unused buildTowerMcpConfig() helper; the legacy-cleanup path only needs the MCP name, which getTowerMcpName() already gives us

0.2.13 (2026-05-28)

Bug Fixes

• extensions: install npm deps into ~/.tower/extensions/ (own workspace) instead of the global Tower package's own node_modules — system-managed install paths cause silent install failures and refresh shows "not installed" minutes after a successful install. Resolves "monaco-editor/min/vs not found after install" and ripgrep binary-missing failures on Windows + global-install macOS
• extensions/monaco: restore process.cwd()/public/vs for the public-asset destination so Next.js standalone actually serves the loader (the previous switch to TOWER_PACKAGE_ROOT/public/vs placed it outside the static dir Next.js reads at runtime)
• assistant: resolve dist/mcp-server.cjs from TOWER_PACKAGE_ROOT, not process.cwd() — the standalone server chdirs into .next/standalone/ where dist/ doesn't exist, so the embedded assistant was wired to a non-existent MCP entry. Mac "MCP 未安装" and Windows "Assistant encountered an error" both come from the same broken path
• search: ripgrep system fallback now also tries where rg on Windows (was POSIX-only which)

0.2.12 (2026-05-28)

Bug Fixes

• probe: pass on any non-empty assistant text, not a literal "hello" — models that respond with "Hey!" / "Sure!" / "Hi there" no longer falsely fail Test Connection while the underlying CLI is fully working
• extensions: switch ripgrep + monaco installers from pnpm to npm and run from TOWER_PACKAGE_ROOT — end-user machines (especially Windows) rarely have pnpm on PATH, so spawn pnpm ENOENT was breaking optional extension install. Windows now spawns npm.cmd via shell: true to satisfy Node's CVE-2024-27980 mitigation

0.2.11 (2026-05-28)

Bug Fixes

• windows: install skill via NTFS junction instead of a dir symlink — fs.symlink(..., "dir") requires Administrator / Developer Mode privilege on Windows and silently fails for normal users, leaving skillsInstalled: false and locking them out via the connection gate. Junctions are unprivileged and behave identically for the read-only directory scan Claude/Codex do over ~/.<provider>/skills/
• providers: loosen the "connected" gate to require only testOk (hello probe passed). MCP/hooks/skill install flags are still recorded and shown in Settings, but they no longer block slot resolution — a working CLI is enough to launch a terminal. Stops the lockout when a non-essential integration trips up on an environmental issue

0.2.10 (2026-05-28)

Bug Fixes

• hooks: auto-repair stale hook paths on app boot and before every Test Connection probe — repairHookPaths() rewrites command paths in ~/.claude/settings.json / ~/.codex/hooks.toml to the current TOWER_PACKAGE_ROOT for entries that already exist (never adds new ones). Fixes the chicken-and-egg case where the hello probe would hang on broken hook paths from 0.2.5/0.2.6 before the install step that would normally upsert them. Users no longer need to edit settings files by hand

0.2.9 (2026-05-28)

Bug Fixes

• hooks: drain stdin in all three hook scripts (session-start, post-tool, stop) before any early exit — Claude Code writes its payload to the hook's stdin, and exiting before reading drops the write side mid-stream. On Windows libuv races on the orphaned pipe and Claude either crashes or hangs after the hook_started event without emitting hook_completed
• cli-test: parse stream-json output when the hello probe is missing the literal "hello" — surface hook failures, the assistant's actual response, or the last event instead of a 120-char raw-bytes preview that almost never contains anything useful

0.2.8 (2026-05-28)

Bug Fixes

• hooks: upsert (not just insert) — rewrite stale Claude/Codex hook paths in ~/.claude/settings.json and ~/.codex/hooks.toml when their command embeds an old .next/standalone/scripts/... path. Self-heals upgraders whose hooks were written by 0.2.5/0.2.6 before TOWER_PACKAGE_ROOT landed
• package: drop src/mcp/ from files — the runtime uses dist/mcp-server.cjs (bundled by esbuild), so the source tree was dead weight and accidentally shipped __tests__/ too

0.2.7 (2026-05-28)

Bug Fixes

• windows: drop stdin from the hello probe — pass the prompt inline via --print <text> / codex exec <text> instead of --print -. Windows libuv crashes (Assertion failed: !(handle->flags & UV_HANDLE_CLOSING) ... async.c:76) when a cmd.exe-wrapped child with a piped stdin exits quickly
• windows: wrap .cmd/.bat shims via cmd.exe for the version probe too — Node refuses to execFile them directly since CVE-2024-27980, which was silently turning every Test Connection on Windows into "Version: unknown"

0.2.6 (2026-05-28)

Bug Fixes

• ai-providers: ship skills/ in the npm package and resolve skill/hook/MCP paths from TOWER_PACKAGE_ROOT instead of process.cwd() — Test Connection now produces a usable connection (Settings → Test Connection no longer reports installed but the slot resolver throws CLI_NOT_FOUND because skillsInstalled was silently false)

0.2.5 (2026-05-28)

Bug Fixes

• boot: drop FTS5 shadow tables and checkpoint WAL before db push — fixes "no such table: notes_fts_config" mid-migration crash on upgrade

0.2.4 (2026-05-28)

Bug Fixes

• boot: auto-migrate database schema on upgrade — gated by prisma/schema.prisma hash, so existing users no longer have to run prisma db push manually after tower-studio updates (issue #6)
• fts: repopulate the notes search index from ProjectNote when it's empty — avoids broken note search after schema migrations drop the FTS5 shadow tables

0.2.0 (2026-05-28)

Features

• preview: live frontend preview module — preset detection, dev-server session lifecycle, WS log streaming, embedded panel
• preview: 3-level (task/project/preset) config with source indicators + presets for uni-app, Vue CLI, CRA
• version: 版本时间线 — 版本管理 + 按版本归纳任务
• mcp: auto-install Tower MCP to each CLI user scope at boot
• settings: folder picker and {path} toggle for git path rules

Bug Fixes

• worktree: symlink node_modules for task subPath; skip stray root node_modules without package.json
• task: keep Monaco mounted to avoid "InstantiationService has been disposed"
• task: skip detail drawer when returning from studio (tower) task
• preview: graceful stop with lifecycle logs and SIGKILL fallback

CI

• run test suite on pull requests to main; skip environment-coupled smoke tests in CI

0.1.0 (2026-03-26)

Bug Fixes

• address code review CRITICAL and HIGH issues 0cd6ac9
• address remaining code review issues (H-4, M-2/4/6/7) a8fcb92

Features

• add adapter execution engine with Claude Code support 0d1e66e
• add MCP Server with 18 CRUD tools, AGENTS.md, and SKILL.md 93dd85e

0.1.0 (2026-03-26)

1.0.0 (2026-03-26)

Bug Fixes

• add router.refresh after all server actions, fix task detail messages ca00627
• board height, project tabs, priority buttons, repo sidebar styling abf4a73
• improve contrast and readability across dark theme 8ef2182
• make all buttons functional with toast feedback and proper state 8a85ef0
• move language toggle from sidebar footer to top-bar header 69b84c6
• position search dialog at 10vh from top 437cf51
• prevent unicode escaping of Chinese text, use dialog for workspace edit 5dcce57
• project creation working, search dialog with Cmd+K, sidebar clip 7a0e0dd
• project creation, sidebar clip, search dialog with multi-type 82d1299
• project tab border-b-2 on all states to prevent layout shift 8f63e16
• replace branch lists with searchable dropdown selectors d4beebc
• separate sidebar navigation from dropdown menu, add E2E tests ed485bf
• unify button colors to amber, fix kanban top border clipping 455fff6
• wire message sending, task editing, and board interactions 62c6211
• wire sidebar navigation, settings link, and new project dialog 1717334

Features

• 6 UI improvements 9083dd7
• add agent runner, SSE streaming, and execution server actions b775e4f
• add app layout with purple sidebar and top bar ab49cb3
• add kanban board components with drag-and-drop cb7c0d2
• add seed data and utility helpers with tests e8e557c
• add settings page with AI Tools configuration 5779870
• add task detail panel with conversation UI c849d9e
• apply Midnight Studio theme to right panels 2de04fb
• collapsible sidebar with icon selection and dialog creation 0a5c8b5, closes #1
• complete kanban board page with filters, actions, and task creation b53a996
• create branch dialog with name, base branch selector, and description 013409e
• define database schema with Prisma models and types 4de5025
• full git integration in right sidebar f2435c7
• full label system - create/assign/display labels on tasks with workspace management c440527
• full workspace CRUD with create/rename/delete in sidebar 98dbdd0
• i18n zh/en support with language toggle, tooltips on collapsed sidebar 894c243
• initial commit 9e77b51
• labels + project edit + UI improvements d5a8633
• local folder browser for project path selection 0b3f7c8
• project CRUD, task edit dialog, and search functionality 92ccbc6
• project details sidebar, enhanced creation dialog, remove ws tabs, fix collapsed clipping 3e0b3bb
• project details, enhanced creation, labels schema, sidebar cleanup 3a2a360
• unified project creation with git URL auto-mapping and clone support d395bf2
• visual redesign — Midnight Studio dark theme 71a6444