chore(main): release 0.1.33

[rogeriochaves]

🤖 I have created a release beep boop

0.1.33 (2026-10-04)

Features

• activity: keep a card working while its subagents are (4319c7d)
• agents: a codex session carries the agent's name (56a02c0)
• agents: a codex session carries the agent's name (1eb32a3)
• agents: name sessions in LangWatch, and stagger boot launches off the credential race (143a23e)
• agents: name sessions in LangWatch, and stagger boot launches off the credential race (3d54f35)
• app: boxd mode in settings, launch dialogs and card lifecycle (cfeaa51)
• app: title first in the new task dialog and a note on the boxd worktree (adf870f)
• attention: a rush session blocked on a tool call raises a permission request, from the needs rush reports (d67156d)
• attention: AttentionRequest entity, state and reducer actions (51e3e4f)
• attention: detect pending decisions and escalate them Mac first, phone later (88a1441)
• attention: raise decisions from sessions and deliver them on the Mac, the phone and the API (c36ac5d)
• boxd: bring a machine back on focus, and keep the others in standby (7a00170)
• boxd: keep the assistant logins of the Mac and the machines in sync (b2e220d)
• boxd: leave the machines running on quit and sleep, and keep the Mac awake for local sessions only (736de8c)
• boxd: machines park themselves, every pause becomes a stop (fbf3298)
• boxd: one action to bring a paused machine back, over the transcript (cea1d15)
• boxd: one idle window of 30 minutes for every machine (742bc80)
• boxd: open the card of a machine from the pill, and pay only for a look (544dabd)
• boxd: report transcript push progress (4846938)
• boxd: show a notice when a machine is destroyed (429f4ee)
• boxd: stop the machine when the terminal tab is closed (3601812)
• boxd: tell an account switch and a login taken from a machine (56bd3d0)
• boxd: tell the terminal that the machine is coming back (d2907b8)
• chat: /btw and /catchup side chat panel on the Mac and iOS (5795431)
• chat: /catchup reopens the last catch-up while the session has nothing new (6f3fe5a)
• chat: jump through history without parsing or mounting it (a106871)
• chat: side chat engine for /btw and /catchup, and the record of what the human typed (3a2c57b)
• chat: stand a finished run of tool calls behind one line (95d5cc2)
• cli: kanban export prints a whole session as the app's Markdown (201fcee)
• cli: kanban remote drives a Mac's Kanban Code from other machines and agents (a36cf00)
• cli: kanban vault runs kv with the same arguments and exit code (dc10dfb)
• cli: kv owner and kv audit check, with the owner-only vault docs and the cleanup script (98cc0db)
• cli: route rush cards through rush, falling back to agtop (4debecc)
• cli: run channel commands on the channels home and hand foreign cards to their master (d1ef9f6)
• cli: subagent and parent DMs go to the channels home on a paired machine (6bef5d9)
• discovery: headless runs in a globally excluded folder are not tracked (394c6df)
• ios: a Needs you list to answer agents' questions, plans and approvals (a026028)
• ios: apply board deltas from /v1/events and collapse long columns (377837a)
• ios: Kanban Code for iPhone, a remote control for the Mac app (4ab2f08)
• ios: Live section on top, project filter per Mac, compact PR badges (b13e684)
• ios: new composer, drafts, images, queued prompts, selectable chat, terminal scroll (bb0a4c9)
• ios: one board over every paired master, with a primary, per-card routing and a machine picker (a902852)
• ios: queued prompt menu and composer stash (c14b289)
• ios: reinstall the app on a connected iPhone when it expires or changes (c2bf803)
• ios: the refresh job also installs over Wi-Fi when the phone is awake (832498c)
• ios: touch and hold a card for its actions (9f146cf)
• kv: kv add and kv tier take --every-use-asks and --leases (8524bdb)
• kv: refuse reasons a human cannot read on a phone, teach agents to write one plain sentence, and add secret labels (fc4008c)
• master: every master answers subagent commands, one keeps the channels and one polls pull requests (b67590a)
• master: master engine in Core, box-owned cards and handovers between masters (921f933)
• palette: offer every card action of the card menus for the open card, read from one catalog the menus render too, and add Unarchive (b33125e)
• remote: agtop cards queue and send through agtop (427c8b6)
• remote: an ssh machine that runs a paired master is one machine, and cards run there are owned by it (0f27121)
• remote: board and events default to the working set, all=1 for every card (9381c69)
• remote: boxd machine core, bridge, mirror and supervisor (4bb27ca)
• remote: cards and boards name the master that owns them (8d6da17)
• remote: cards on an ssh machine run on its agtop, in truecolor (7ae46b7)
• remote: contract for driving Kanban Code from a phone and other agents (58c026b)
• remote: events send card deltas after the first board, resync on request (6bfcbb7)
• remote: gzip responses over 8 KB for clients that accept it (0b178b0)
• remote: HTTP and WebSocket server for remote control (4641d24)
• remote: images on prompts and tasks, queued prompt actions, terminal scroll (0b2adce)
• remote: kanban remote show names the machine that runs the card (ffcb2fb)
• remote: kanban remote task --machine picks the master that runs the card (5242ae9)
• remote: kanban-code-remote-demo dev server over a fake board (ba1c5da)
• remote: native boxd integration with a per-card cloud machine (6ac38cb)
• remote: PATCH /v1/cards/{id} renames, moves and archives a card on any master (57a590f)
• remote: pin, unarchive and delete cards over the remote API (ccb0ed0)
• remote: RemoteClient for the remote control API and pair links (c9461ec)
• remote: run cards on always-on ssh machines, with a Run on picker and moves between Mac and machine (1ceb59c)
• remote: the app serves remote control from Settings > Remote Control (0198c09)
• run Claude sessions on agtop instead of tmux (727fc38)
• rush: rename the agtop runtime to rush, new hosts are rush-<id> and get claude's absolute path (f507219)
• rush: run cards on rush, the renamed agtop, falling back to agtop where only it is installed (16fba4e)
• server: Linux build of Core and a headless kanban-code-server (60e58db)
• settings: SSH machines is the first remote mode, and each mode shows only its own settings (844f370)
• shortcuts: archive the open card with cmd+shift+A (878160b)
• shortcuts: rename the open card with cmd+R (a65f9e8)
• slack: kanban slack post --file attaches files to the message (51f70bd)
• subagents: 5-minute prompt cache and no channel access for children (4d8b02d)
• sync: hand edits of sync.json apply without a restart, and a clone a peer names starts at once (88ceabf)
• sync: peer sync of cards between masters (81cdf8f)
• sync: per-field last writer wins for shared card fields (356b940)
• sync: Settings > Sync keeps git clones, agent files and the OptMem memory the same on every master (10c7233)
• toolbar: move the card tabs into the actions menu (33a228f)
• ui: keep open PR pills next to the card title (7476232)
• ui: let the sidebar grow to 720pt (77969b6)
• vault: a card gets its project's own development secrets without Jev, and Jev is asked once per rules text (4e6712c)
• vault: a card session token places processes that left the session's process tree (1acfbda)
• vault: a card that runs a command on the other master over ssh is that card there (79b81ca)
• vault: a linked worktree without its own .env.vault uses the main checkout's (02c96c0)
• vault: age-encrypted vault store, decision engine, Jev judge, broker and STS client (2e2ccd1)
• vault: approval notifications say who wants what in plain words, the body is only the agent's reason, and a click opens the card with a detail sheet on the Mac and the phone (9695369)
• vault: broker routes on both masters, replica sync, kv CLI, Bash hook and import planner (62353aa)
• vault: daily secret scrubber for transcripts, and a peer scope for paired masters (3c70e8f)
• vault: detect secrets pasted into a prompt, ported from LangWatch's redaction rules (2c254e6)
• vault: Jev also reads up to 20 older prompts of the card, shortened, so an early instruction still counts (b264039)
• vault: Jev reads what Rogerio asked the card, apart from the agent's reason and other senders (d5bca97)
• vault: kanban send, subagent send, self-compact follow-ups and agent-scope remote prompts carry a sender marker (e77873e)
• vault: kanban-vault rush plugin lives in Kanban Code, with make rush-plugins to install it (7c8902d)
• vault: kv import --only writes .env.vault files under chosen folders (4e46dfd)
• vault: kv import --secrets-only adds secrets without writing .env.vault files (00910e1)
• vault: log each Jev verdict with the prompt evidence it read (c89d9e3)
• vault: one approval changes many secrets, picked by name or by a value prefix the master matches (kv tiers) (a5971f1)
• vault: OpenClaw agents get card tiers and leases as openclaw:<agent>, found by the gateway's systemd cgroup, and kv exec-provider serves OpenClaw SecretRefs (4b3e2a1)
• vault: owner-only secrets sealed to Secure Enclave keys and a recovery key (91aa56c)
• vault: scrubber typed mode saves only the keys the human typed, and replaces them everywhere (147beba)
• vault: secrets have a project and an environment, kv env loads the project's group (921c970)
• vault: Settings > Vault tab, card vault releases, kv installed beside kanban (0e15114)
• vault: the Bash hook also wraps Codex commands, installed and trusted in ~/.codex (2981387)
• vault: the chat composer and queued prompt editor offer to save a pasted secret to the vault (6ee9c3b)
• vault: the iPhone composer offers to save a pasted secret through the remote vault API (fe5c1ce)
• vault: the rush plugin asks whether to save a secret, then for its name in a line you edit (ea2f5fa)

Bug Fixes

• activity: feed hook events to the detector in file order (3d0fad4)
• activity: keep spinners live through slow reconciles, and survive timed-out shell commands (2f42982)
• activity: keep subagent tracking through a compaction (bba2870)
• agents: a codex agent starts in a workspace it has never seen (09d9ca2)
• agents: a codex agent starts in a workspace it has never seen (b0f24d2)
• agents: read the composer before deciding a name was taken (4fbeb39)
• agtop: a rush session asleep between turns keeps its card's terminal (7d7cc21)
• app: build the services once so the boxd supervisor reaches the real store, and let an early terminal find its machine (a9e7372)
• app: dismiss the dialogs with Escape and show every settings tab (c995687)
• app: drop the agent session variables an app launched from a card's shell inherits (f9e38ef)
• app: keep the launch overlay inside the terminal area, not under the toolbar (8a47175)
• attention: a permission prompt for AskUserQuestion or ExitPlanMode raises no second request (e1b9ccb)
• attention: a vault approval on the card on screen opens its detail sheet in the app (d0aa357)
• attention: a vault approval whose sheet is open in front gets no Mac notification on top (f249a64)
• attention: a vault sheet closes once its request settles, escalates to the phone after the delay, and the Dock counts every open request (54e7bbc)
• attention: answers reach rush sessions through rush session answer, the chat's answer buttons use it, and a restart keeps what was delivered (1ad9051)
• attention: approvals stay seen on the Mac and reach the phone once, with every delivery step logged (19e1758)
• attention: carry the open list on board and cards frames, and resolve permissions on conversation lines only (a103b1c)
• attention: Kanban counts as in front while a dialog has the key window (ed6c1b9)
• board: a tall pinned rail scrolls instead of lifting the board (dcc99d7)
• board: only a live tmux session revives an archived card (f63dc72)
• boxd: a changed file in the checkout no longer blocks every launch (f139cbe)
• boxd: a machine that cannot start no longer blocks the card (1a48eb8)
• boxd: archiving a card on an ssh machine no longer offers to destroy the machine (06fec0d)
• boxd: attach the terminal through boxd machine connect, create the worktree on the machine only, and stop the spinner of a paused machine (5987772)
• boxd: find the files to copy through git status, open new terminals on the machine, and keep a local resume off the machine (0419f3f)
• boxd: halt parked machines at Mac sleep and on quit (c3a221f)
• boxd: keep a long launch alive, wait for the remote session, bound the quit pause and sweep orphan machines (d209e16)
• boxd: keep isLaunching on a card on a machine until its launch reports, and leave an existing remote worktree alone on resume (4ad33e2)
• boxd: keep the launch on screen and get the CLI upload through (8de9e42)
• boxd: keep the terminal and retry while a machine is out of reach (db338db)
• boxd: keep the terminal from waking a paused machine, and follow a machine resumed elsewhere (f1569ed)
• boxd: keep the transcript skin inside the detail, not under the sidebar (4d3d4e1)
• boxd: leave scroll mode with Esc and paste images into a session on a machine (ea93bb5)
• boxd: map hook event paths before the transcript arrives (92729c0)
• boxd: mirror a rewritten file whole and stamp the CLI with a digest of the bundle (59d4008)
• boxd: open a new shell tab of a card on its machine (6262d0a)
• boxd: open the launch dialog with the choice of the last run (2bb2ab7)
• boxd: paste the image path after the upload, keep the native selection, and reconnect a running machine on paste or scroll (fb63b10)
• boxd: push transcript deltas, survive resume races, stop idle machines (3abeffb)
• boxd: random worktree name for an unnamed launch and pause on failed preparation (0ce0757)
• boxd: read the pause marker before the terminal connects to a machine (473cb24)
• boxd: resume a card with a large transcript on its machine (9d5a3b7)
• boxd: resume machine also resumes the assistant when the session is gone (2285607)
• boxd: retry the remote attach until the tmux session exists (87f1352)
• boxd: route CLI keys locally for local cards, drop stale compact steers (813cb01)
• boxd: scroll a session on a machine with the wheel (41c58f8)
• boxd: stop a parked machine once, record outside tmux kills (44bb5fd)
• boxd: the login sync never takes another account's login over the Mac's (4371761)
• boxd: the login sync tells accounts apart by who owns the tokens (cd22c2c)
• boxd: the token owner lookup builds on Linux (8ee52cf)
• build: make app builds for the machine's architecture (893f21e)
• build: make app registers the build as the only Kanban Code, so notification clicks open it (3a0a99e)
• card: hide the queued prompts bar while the rush terminal shows the queue (b369ab0)
• cards: a card is never named after text the assistant CLI injects (c79d509)
• channels: the mirror only removes files the home sent, and a first pairing merges both sides (18c1bca)
• chat: draw a link in the link colour when the message has no block markdown (15e32fd)
• chat: keep the whole clicked message on a checkpoint restore (e0da045)
• chat: land a jump below the floating pill, not underneath it (c8af904)
• chat: pay for each history load with a real scroll (e9b692c)
• chat: show a queued prompt once after Claude delivers it (1ea806d)
• chat: stop a slow transcript read from replacing the next card's history (5a98ca0)
• chat: stop an expanded message drawing over the one below it (b4b2582)
• chat: stop history loads a card switch triggers on its own (b460718)
• chat: stop sizing probes from freezing the chat feed (9e90725)
• chat: stop the idle blink and the load that stops at the top (4cda740)
• cli: align kanban remote cards, clearer 409 and 401, Mac name in pair link (01928e2)
• cli: kanban open takes a card id or an existing folder, never makes a project from a card id (ea96b66)
• cli: remote attach keeps LF as LF and sends the terminal size once connected (ea31ad9)
• cli: stop scheduled prompts from concatenating in the composer (a75a8dc)
• cli: subagent commands on a Linux master wait for kanban-code-server instead of opening an app (34eea99)
• detail: drop the link property rows from the card header (1d74928)
• diag: notice tmux mass deaths across app restarts (a17f1d9)
• discovery: find the pull requests a card worked on but never pushed (09b5e1e)
• handover: a card moving between masters waits for its adoption and shows the move everywhere (9f3e002)
• ios: a sent prompt's waiting bubble goes away when the session re-spaced its text (21618a2)
• ios: approvals unlock with Face ID instead of the passcode (f78fe99)
• ios: card rows keep to the screen width, with the machine in grey beside the project (cb11a7f)
• ios: cards name their machine when one master lists cards of several (8ca75e7)
• ios: commit the device refresh script under Scripts/ (60465b9)
• ios: composer above the suggestion bar, [Image #N] markers, chats open at their end (f2457c9)
• ios: opaque app icon, hide terminal on stopped cards, UI tests for older pages and agent scope (09f2c03)
• ios: stop three crashes: PR badges off the main thread, an emptied machine menu, huge chats (545bf55)
• ios: the attach menu no longer crashes when the composer's selection outlived its text (c3c7ab5)
• ios: the composer no longer shows the queue hint above the message (771c7ab)
• kv: a Jev denial says Jev denied it and the rules it read, not how to write a reason (e6e1b41)
• master: a card moving between masters stays as released until adopted (b799a93)
• master: a handover diffs uncommitted work in a copy of the index (5660f1c)
• notify: notify only when a session needs a decision, never on stop or idle (a457352)
• pr: refresh a pull request in the repository it lives in (87db565)
• reconcile: a launch takes only the session it started (c73fe97)
• reconcile: keep unclaimed headless claude -p sessions off the board (c31ac50)
• reconciler: stop the board from re-rendering every pass (39f63ef)
• remote: a resume right after a start does not start the session over (87082f2)
• remote: host name from the computer name, without a DNS lookup (9d184e2)
• remote: log a call refused by the token's scope (f2ab4cd)
• search: hide sessions from globally excluded paths in the search palette (8093a31)
• self-compact: drop a context warning the agent no longer needs (f33e875)
• server: deploy kanban-code-server from the committed tree (03c63be)
• server: deploy waits for the server to answer before checking it (c5c01f4)
• server: sessions the server starts survive its restarts, with room for their open files (931273a)
• server: spawn commands with posix_spawn on Linux, root sessions run with IS_SANDBOX, peers over plain http (660bbe6)
• server: spawned commands keep only stdin, stdout and stderr on Linux (b6e0514)
• settings: atomic settings writes, so a racing read never resets Remote Control (0206dde)
• settings: the ssh machine rows show one header line instead of a label per field (fcf9986)
• settings: widen the settings window so all 11 tabs fit in the tab bar (1cdbb3c)
• shell: child processes get the interactive shell PATH, so claude under nvm is found however the app was launched (b9a84a8)
• store: atomic links and channel writes, so a racing read never sees an empty board (7af75c2)
• subagents: resumed and forked children follow their parent's machine (ded8968)
• sync: a card another master runs shows under the project here with the same repository (f0302c3)
• sync: a card archived on another master ends its sessions on the master that runs it (548c512)
• sync: a deletion reaches the machine that made the file, and a peer pulls back after taking changes (132d529)
• sync: a master merges peer pages only after it reads its own links (fb8336a)
• sync: mirrors never carry the assistants' login files (e6ab737)
• sync: Settings > Sync says when no peer is online and shows only the excludes that differ from the defaults (1c69e85)
• terminal: a card another master owns attaches to it once its owner is known (05de205)
• terminal: a cmd+click on a link keeps the press from the program too, so rush opens it no second time (d12e6b5)
• terminal: agtop copies on cmd+c, not when a drag ends (25f1127)
• terminal: agtop terminals never drop output (6e544f8)
• terminal: cmd+c keeps what agtop copied (8940ca8)
• terminal: Copy stays enabled while agtop has the mouse, so cmd+c reaches it (a3bd93c)
• terminal: make a link written by an agent clickable (abfa2ab)
• terminal: OSC 52 copies from the program reach the clipboard (6dc6e1a)
• terminal: rush gets the wheel and sees the pointer hover (bd3e6f6)
• terminal: scroll down moves whole lines inside a scroll region (98afa7a)
• terminal: SwiftTerm builds for iOS again (attribute cache keyed by render key) (e2c16c0)
• tmux: drop an agent's session variables from the tmux server before creating a session (d65ed96)
• toolbar: the sidebar's buttons do not double the detail's (b92f647)
• ui: keep the machine banner off cards resumed locally (d1140c3)
• ui: let Return confirm the destroy machine and remove worktree dialogs (56217c0)
• ui: show a stop icon for stopped boxd machines (b340a1b)
• vault: a hook-wrapped command's withheld secrets log as skipped, not denied (f35d7cf)
• vault: a manifest folder gets its own project's group only, a submodule is a subfolder of its repository, kv env --names sends the mode (7cde20c)
• vault: a rush host is its card's whenever the links map it, whoever started it; --meta is still never read (ecc26e5)
• vault: an agtop/rush host is a card's only through Kanban's links and a host the master started, never its own --meta kanban_card (609f325)
• vault: an open approval survives a master restart, and kv waits up to 2 min for a restarting master (b2cd43f)
• vault: approvals wait 60 minutes before denying, and kv says how long it waits (e671e18)
• vault: hook-wrapped env loads stay out of the rate limit (0cc7c7f)
• vault: import skips worktree copies and names duplicates by project (336a3d3)
• vault: judge secrets in parallel, wrapped commands run when the master is down, deploys take a lock (b9d4004)
• vault: kv flushes stdout before exiting, so piped kv ls --json is no longer cut at 64 KiB (193db41)
• vault: log when a loopback caller's process cannot be found (2af97b8)
• vault: one question per thing asked, AWS credentials reused per card, and a live phone approval list (c7f92f9)
• vault: read /proc tables to their end on Linux, so box callers are found, and kv status says who the master takes you for (d881379)
• vault: scrubber backup is an APFS clone on a Mac, and a gzip needs free disk (c2e1457)
• vault: scrubber backup records the replaced bytes, with a restore, and compressed transcripts stay compressed (2075318)
• vault: scrubber index outlives owner-only sealing, and a first run waits for its time (2605f93)
• vault: scrubber takes extra paths from settings, keeps made up keys out, and shows less in Settings (41041f8)
• vault: scrubber typed mode counts only the records of the human's messages (3518ff7)
• vault: scrubber writes only the bytes of a value, and never takes the disk below 1 GB (6761586)
• worktree: remove a card's worktree where the card lives: on its owner master, over ssh on its machine, never for a disposable boxd machine (8eb8746)

Performance

• board: keep reconcile and card rebuilds off the main thread's hot path (4951eb5)
• board: rebuild the cards once per action, after sync stamps (03ca0a7)
• boxd: gzip uploads and send them in 4 MB parts (48cfb6a)
• links: cards whose session holds the prompt keep a short preview of it (6b89824)
• remote: card JSON leaves out false, zero and empty fields (fa0c237)
• terminal: agtop frames are drawn as they arrive (404e7b3)

Refactoring

• agents: name sessions through claude's own --name, drop the env var (5321a81)
• boxd: name the machines kanban-<repo>-<card> and drop a needless await in the bridge reader (f8a1c72)

Documentation

• cli: name the Settings > Remote Control pane (bbbec65)
• remote: describe PATCH /v1/cards/{id} in the OpenAPI document (64522c5)
• vault: a shared ssh connection from before the sshd reload drops the card variables (36636f1)
• vault: commented env lines and worktree backups are cleaned, Stripe CLI config stays (bf54800)
• vault: pasted secrets in composers (0a69554)
• vault: projects, environments, the manifest, the own-project policy and session tokens (7f3953b)
• vault: where secrets live after the migration and what stays in plaintext (e25819d)

---

This PR was generated with Release Please. See documentation.