0.1.16LATEST13 September 2026
ADDEDDrive your agents from your phone. Pair a device once by scanning a code, and the desktop dials out to a relay that carries nothing but ciphertext — your machine still listens on no address, and the relay can read none of what passes through it.
ADDEDA dev stand per working tree. Start the repository’s own dev command for the branch an agent worked on, open it and try the finished task before you read a line of the diff. While it comes up the preview says what it is waiting for, and whether anything is still moving.
ADDEDThe microphone finally has something to run. Speech recognition now travels inside the installer and runs on your own machine — until now every packaged build answered “no recognizer installed” and asked you to compile one yourself.
ADDEDAttach a video. The model has no video modality, so Helmry samples frames and shows the model those — and the composer tells you that before you send, rather than letting an agent answer “I cannot watch video”.
ADDEDSearch what was said, across every conversation on this machine. No index to fall out of date, and find & replace across a working tree beside it.
CHANGEDSigning in moves to a Helmry account, and the licence is a signed token the app checks on its own machine — so the check itself needs no connection.
0.1.1529 August 2026
ADDEDThe cockpit speaks your language. Every user-visible string — 1,411 of them — moved into a typed catalog, and Russian ships with this release. Plurals and dates come from Intl, because an appended “s” has no Slavic equivalent.
ADDEDA git window, and a branch choice asked out loud. One call answers a repository’s whole state — worktrees, branches, dirty counts, who works where — and New agent asks whether to work on the current checkout or an isolated worktree.
ADDEDhelmry doctor reports git authentication per repository. Helmry stores no git credentials and will not ask for them — git’s own credential helper keeps the secret out of every process Helmry launches.
FIXEDServer-run git can no longer block on a prompt: a push on a machine with no credential helper used to spend its whole 60-second timeout waiting for a username nobody could type.
CHANGEDThe product ships under its own name — the installers, the app and the update feed all say Helmry now.
0.1.1411 August 2026
ADDEDWork items, with Jira first: connect a site once, attach a ticket to an agent, and it gets a frozen brief through a scoped task API — never Atlassian’s own toolbox, so the OAuth grant never sits one shell call from the transcript.
ADDEDTask verification: a Verify control beside Send, commands from the project’s own manifests, and a report that names what it did not check. Nothing here reports VERIFIED — an absent capability is never a pass.
ADDEDA usage chip in the header: what this has cost, and how close the account is to its limit. A window no turn has reported since restart shows as unknown, because “no data” is the honest answer.
FIXEDA stale service worker could silently eat the Jira OAuth callback — Atlassian returned a valid code, a cached shell answered it, and nothing reached the server log because the server was never asked.
0.1.137 August 2026
FIXED“Improve prompt” now works on a Windows hub. The install that needs it most never has the CLI at all, so every press died at spawn — the hub now borrows an already-connected environment’s CLI, and a failure names which failure it was.
FIXEDAn agent’s branch is named what you typed. Everything used to be lower-cased and forced under an agent/ prefix, so the branch for a ticket matched nothing in the tracker and nothing a reviewer would search for.
FIXEDA long message is read before it is rejected: pasting a stack trace into a chat hit a 32 KB body limit sized for small JSON. A message now carries its own 20 MB cap.
0.1.127 August 2026
ADDED“Start from” in New agent. A feature agent belongs on top of dev and a hotfix on top of master — neither should depend on which branch the human happens to have checked out. Branches list newest-first; one that exists only on the remote is offered as origin/<name>.
ADDEDThe start point resolves to a commit before the branch or the directory exists, so a ref that does not resolve is a clean refusal naming the ref — not a half-created worktree.
0.1.117 August 2026
FIXED“Add repository” no longer claims a folder is already added when nobody added it — an agent had once run there, which counts as allowed. The wording now states the fact that is actually true.
FIXEDThe New agent picker names the repositories it withheld: a hidden repo used to be indistinguishable from one the environment simply does not have.
FIXEDThe hidden-repositories hint was wrong on one point and silent on two: the list is per account, not per device; a hidden repo cannot be launched in; and matching is by folder name, which reaches every environment.
0.1.107 August 2026
FIXEDWSL environments never actually worked in 0.1.9 — three independent failures, each alone enough. The worst: the node launcher ran nothing at all, because PowerShell cannot run without a console — it exited 0, printed nothing, and launched nothing, ever.
FIXEDA refused satellite was left running and poisoned every later connect — one bad launch made a distro permanently unusable. The hub now asks an install which flags it takes instead of guessing from its vintage.
CHANGEDA standalone install in a distro is refused with the reason and the escape hatch named: it owns that distro’s data directory, and only one server may.
0.1.97 August 2026
ADDEDWSL support rebuilt as execution environments: the server is a hub keeping a satellite server per distro, chosen per repository — several at once, identically for helmry start and a browser. One commit, 107 files.
ADDEDEvery request states an activation policy — never, connect or start. Boot recovery may re-adopt a remembered endpoint but can never wake a distro you shut down; only an explicit act may scan, install and launch.
FIXEDA node served every route without authentication — a live exposure, not a design point. Everything but /api/health now requires the install token.
FIXEDBackground work was destroyed by any ordinary shutdown: a chat whose turn had ended while its subagents kept running was classed idle and killed, with nothing persisted, reported or resumed.
0.1.84 August 2026
ADDEDMandatory sign-in, and per-account state on the server. Registration closes itself the moment the first account exists, and the cockpit’s state left localStorage — so the desktop shell and a browser tab are the same workspace.
ADDEDThe user guide: ten pages, from install and first run to reviewing, WSL, security and troubleshooting.
CHANGEDThe server owns every fact a remote client cannot compute — the notification decision, the file-edit feed, the conversation itself. A chat worked on with no page open still grows its cards, and two clients see the same ones.
FIXEDSSE frames were published before COMMIT, so a failed commit could leave a client rendering a state that was then rolled back. Effects now flush only after COMMIT returns.
0.1.71 August 2026
CHANGEDA new agent starts at high effort, not xhigh — measured, not argued: xhigh spent 27% more output tokens for an answer of the same length. Output bills at five times input; this was the app’s most expensive default.
CHANGEDThe composer says when continuing a conversation has stopped being cheap and offers a fresh agent — thresholds measured over a week of real turns, where a chat’s 6th–15th turns cost half again as much as its first five.
FIXEDAny write to a WSL environment could fail with “environment did not answer”: the proxy read request-finished as client-walked-away and aborted the upstream call before the satellite could answer.
0.1.61 August 2026
CHANGEDA chat keeps one claude process across its turns instead of one per turn. A fresh process re-snapshots the machine into its system prompt and breaks the prompt cache every turn — the same four-turn task measured $0.76 against $0.08.
ADDEDWSL environments install Helmry automatically: a distro without it gets a prebuilt build pushed in over wsl.exe and unpacked atomically — no git clone and npm install by hand.
FIXEDAn agent waiting on its own background work looked finished and its answer was invisible. The spontaneous continuation is now a real turn: streamed, replayable, stoppable, and billed to the message that caused it.
0.1.431 July 2026
ADDEDPer-agent execution environments: in the dialog where you pick the folder, you pick where it lives — this PC or a WSL distro — and the agent, its terminal, its worktree and its uploads all run there.
ADDEDThe agent channel is a resumable stream: turns no longer get stuck on “Working” with an empty chat after a dev restart, a frozen tab or one dropped connection.
0.1.329 July 2026
ADDEDThe installed-app release: logs on disk behind Help → Open logs, a window that remembers its bounds and validates them against the monitors that exist now, a single-instance lock, and an error page instead of a blank window.
FIXEDA downloaded update could sit on disk forever — the quit path skipped the hook the installer hung off. It now runs explicitly on the way out, whichever way the app is quit.
0.1.229 July 2026
ADDEDThe private update feed gets real token resolution: an env var, then a 0600 update-token file. The token is injected into the updater alone, never the process environment — which every spawned agent would inherit.
ADDEDCI runs the suite on Ubuntu, Windows and macOS — which immediately found two Windows-only bugs, including git worktrees listed twice and then dropped entirely.
0.1.129 July 2026
ADDEDThe Windows release: the shell runs the server natively, and claude is resolved to a real executable and spawned with an argv array, no shell — because the prompt is an argv element.
FIXEDA turn’s state stays true across stops, restarts and lost streams: the driver reports the result explicitly instead of three components each inferring it from stream liveness.
0.1.029 July 2026
ADDEDFirst tagged release — the Cockpit: observed sessions over hooks and SSE, drivable in-app chats, workspace files, git and search, a terminal over WebSocket, and the Electron shell.
That is every release so far.