# Changelog All notable OneAgent for VS Code changes are recorded here. Published Marketplace versions are immutable. ## 0.5.33 - Verified Host path recovery (pre-release) - Recover a missing or rejected custom Host path using the installed managed Host with unchanged release verification. Unknown files never execute. - Verify an existing Host and its Codex pair before saving its path; preserve the working session on rejection and report paths and SHA-256 on failure. - Show actual Host and Codex versions in Runtime installation prompts. - Retain valid custom paths, Host 0.6.1, Codex 0.162.1 and the current model set. Approved older pairs still have to meet the tenant profile's runtime minimum. - Use immutable 0.5.33-r1 Marketplace assets. Remote-user diagnosis remains dependent on the selected path, actual digest and installed extension version. ## 0.5.32 - Terra Balanced model preview - Settle explicit zero cache-write receipts when the provider omits optional lifetime details; preserve unknown status for incomplete or contradictory usage. - Use immutable 0.5.32-r1 public release assets. The unpublished v0.5.31 tag is retained. - Use GPT-6.1 Terra/high for Balanced and GPT-6.1 Sol/medium for Deep; Fast remains GPT-6 Luna/high. Require explicitly advertised Runtime efforts. - Coordinate the signed tenant profile with Gateway capabilities and contextual Terra accounting. The package alone does not enable a production model. - Terra needs Codex 0.159.0 or later; the pinned Runtime is 0.162.1. Its qualified billing path supports client function/custom tools and explicit conversation input. Provider-billed tools and opaque continuation require further qualification. ## 0.5.30 - Message times and reply copying (pre-release) - Show known local message times below user prompts and completed Agent replies, with full dates and timestamp provenance available on hover. - Copy a final reply's original Markdown with keyboard support and accessible success/failure feedback; preserve pending copy state across conversation updates. - Keep time/actions stable during streaming and hide unavailable history times. ## 0.5.29 - Shared skills, memory and lifecycle recovery (pre-release) - Install 14 pinned common skills, including PPT Master, with preserved user customizations and explicit dependency preparation. - Add profile-local memory, scoped retrieval and user management commands. - Generate common skill/memory guidance in managed AGENTS.md, with a compatible projection for the released Host. Tenant and repository instructions remain. - Recover cancelled file drags and make thread/project deletion and owned-resource cleanup consistent without deleting original workspace files. - Retain Host 0.6.1/Codex 0.162.1 and the current model/effort configuration. Existing Runtime threads need a new task to bind the new dynamic tool functions. ## 0.5.28 - Signed model configuration support (pre-release) - Refresh signed tenant configuration before new turns and activate changed settings only after active turns finish; retained conversations can resume. - Support server-managed model presets when a compatible Host and signed profile are available. Existing profiles continue to use the bundled presets. - Keep the published Host 0.6.1 and Codex 0.162.1 installation contract. This VSIX does not deploy Gateway billing fixes, enable pricing v2, or upgrade the Host. - Balanced and Deep remain GPT-6.1 Sol with medium and high reasoning respectively. ## 0.5.26 - GPT-6.1 Sol presets (pre-release) - Balanced uses GPT-6.1 Sol with medium reasoning; Deep uses GPT-6.1 Sol with high reasoning. Fast continues to use GPT-6 Luna with high reasoning. - Keeps existing Runtime compatibility and tenant entitlement enforcement. ## 0.5.25 - Shared Runtime compatibility and lifecycle Adapter (pre-release) - Shares the exact approved installed Host/Codex pair policy with Visual Studio. - Uses the canonical thread start/resume/turn Adapter contract; existing Hosts retain raw RPC fallback without installing or updating Runtime. - Keeps the GPT-6 presets, ATK Connector, retained edits and user-owned Skills. - The optional candidate Host capability is not deployed by this extension update. ## 0.5.24 - Retained ATK edits and installed Runtime compatibility (pre-release) - Keep verified offline edits, continue editing, and Undo in reverse order; reconnect preserves retained working state and Undo history for the same ATK instance. - Expose current ATK PID/workspace, fresh same-bank reads and correct Undo revision summaries. - Observe current native curves with explicit source/binding limits; do not invent Performance or claim an observation is a new calculation. - Windows VS Code supports the exact already-installed Host 0.6.0/Codex 0.147.0-alpha.6.5 pair. New installations and Visual Studio retain the primary Host 0.6.1/Codex 0.162.1 contract. No automatic Runtime downgrade or upgrade. - Preserve hash, version, signature, protocol, tenant and Preview trust checks. ## 0.5.23 - ATK recovery and Codex 0.162.1 (pre-release) - Restore mandatory ATK Companion/profile/Skill preparation for release packages. - Verify complete final VSIX inventory and hashes before publishing. - Detect incomplete ATK installations before selecting or launching a Companion, with actionable repair guidance. User-customized Skills are retained. - Requires Runtime 0.5.23: Host 0.6.1 with verified Codex 0.162.1 on Windows/WSL. - Fast uses GPT-6 Luna/high, Balanced GPT-6 Sol/medium, Deep GPT-6 Sol/high. - Includes bounded Gateway quota recovery while preserving legacy model access. - Allow exact offline parameter edits without an acoustic Target, with full unchanged-field verification and baseline restoration. - Read fresh same-bank parameters during a run without navigation; distinguish parameter readiness from acoustic setup, and remove a redundant restore read. - Fix VSIX validator argument handling for direct and package-manager invocation. ## 0.5.22 - Bounded large-content requests (pre-release) - Ships Host 0.6.0 with exact UTF-8 request-size checks before Gateway upload, covering native images, tool results, files and accumulated conversation history. - Stops oversized-request retries with actionable recovery guidance, and uses native compaction between turns when the Gateway management threshold is crossed. - Supports the bounded 50 MB Gateway policy without changing image quality, model entitlements, tenant isolation or the existing pilot trust policy. ## 0.5.21 - ATK offline control and acoustic curve reports (pre-release) - Uses the monogram-v2 Marketplace icon, scalable monochrome Activity Bar mark, and transparent welcome logos for dark, light and high-contrast themes. - Packages the Windows ATK Companion and three Skills for user-owned acoustic strategy, managed operation/schema references, and evidence-based analysis. - Adds receipt-bound Phase/Magnitude/Performance plots, log-frequency controls, baseline/candidate/target overlays and JSON/CSV/PNG exports inside VS Code. - Compares compatible exact-grid samples with circular phase differences; missing baselines or incompatible evidence stay unavailable, not invented. - Migrates exact known legacy acoustic starters with a byte-preserving backup; preserves customized Skills and produces a local merge preview instead. - Verifies real installed Agent chat control, two calculations, rendered report, complete FF L1 restoration and unchanged FF L4. Experimental offline evidence is not device measurement, permanent configuration or acoustic certification. - Retains the same compatible Runtime and exact r44 Companion binary. ATK is user-supplied; the connector preview is Windows-local only. ## 0.5.20 - Runtime session and model recovery - Reconciles complete Runtime history with local Project navigation while protecting conversations that are still open. - Recovers a missing cross-IDE session to an open or fresh task instead of leaving the workbench in a permanent Connecting state. - Refreshes and shares the Runtime model catalog before sending when a conversation was created during startup. - Prevents `thread/start`, `turn/start`, and collaboration-mode updates from carrying an empty model; a genuinely unavailable catalog now fails closed with actionable guidance. ## 0.5.19 - Project navigation for parallel tasks - Replaces the single Tasks selector with a responsive Projects sidebar that groups local folders and shows running, waiting, completed, and unread state. - Adds and removes Project bookmarks without creating files, requiring Git, or deleting Runtime history; navigation metadata is local and profile scoped. - Keeps background tasks running while another task is visible and uses an indexed owner lookup so interleaved Runtime events stay isolated. - Bounds the Project tree to 100 mounted task rows and keeps token streaming from rebuilding the navigation tree. - Makes Projects full-height, collapsible, pointer/keyboard resizable, and icon-only for task state, with visible read receipts and idempotent terminal notifications. - Adds a right-side delete action to saved idle Project tasks on hover or keyboard focus, and standardizes Sidebar, Thread History, and Settings on the Codicon trash glyph. - Renames the Explorer action to **OneAgent: Add to Chat**, adds the VS Code Shift-drag hint to a full-workbench drop overlay, and logs bounded MIME type names when a drop payload cannot be resolved. - Keeps Project tasks in immutable newest-started order after selection or lifecycle updates, and prevents long pasted-image paths from creating a conversation-level horizontal scrollbar. - Retries a transient Runtime writer-release race for at most 500 ms when deleting a session; if another OneAgent window or IDE still owns the writer, preserves the session and shows actionable recovery guidance. ## 0.5.18 - Attachments and parallel conversations - Runs multiple conversations concurrently with isolated drafts, attachments, streams, approvals, stop actions, settings and change-review context; there is no extension-defined two-task limit. - Adds whole-workbench file/folder drop, Explorer file mentions, clipboard screenshot/document import and Windows FileDrop clipboard fallback. - Stages bounded binary imports under application storage with safe UUID paths, image signature checks and originating-conversation ownership. - Routes runtime notifications and requests by thread, preserves asynchronous ownership across UI switches, and hardens lifecycle/delete races. - Does not create Git worktrees or require Git. Users remain responsible for coordinating parallel edits to shared files. - Retains the existing verified Host and managed Runtime; this extension-only update does not require a Runtime reinstall. ## 0.5.17 - Cross-IDE workspace and session lifecycle - Starts and resumes OneAgent tasks without requiring an open folder by using a profile-scoped scratch workspace, while preserving the active thread's original working directory and permission roots. - Sends an explicit Agent or Plan collaboration mode on every turn and reconciles authoritative mode updates from the Runtime. - Adds permanent thread deletion from History and **Delete session** in Settings, with confirmation, running-turn protection, and local tombstones. - Uses canonical OneAgent product and Runtime labels throughout the shared workbench and release gates shared with Visual Studio 0.1.7. - Retains the existing verified Host and managed Runtime; this extension-only update does not require a Runtime reinstall. ## 0.5.16 - Conversation continuity and recovery - Preserves the active conversation during runtime status refreshes instead of replacing the workbench with a loading surface. - Repairs malformed legacy `config.toml` model values before the next turn and reports configuration failures with a bounded recovery action. - Keeps completed turns anchored consistently, ignores stale state revisions, and uses the shared `Workspace` product label across supported IDEs. - Shares the cross-IDE behavioral-equivalence gate with OneAgent for Visual Studio 0.1.6 while retaining the same verified Host and Codex runtime. ## 0.5.15 - Host/Core v2 compatibility - Negotiates Host/Core protocol v2 with capability, sequence, revision and idempotency validation while preserving the exact digest-pinned Host 0.5.0 v1 compatibility path during the preview window. - Sends explicit thread mode updates so switching from Plan to Agent clears the Plan restriction before the next turn. - Shares the same bounded stream policy and cross-IDE release contracts with OneAgent for Visual Studio 0.1.5. ## 0.5.14 - AMPACS platform navigation - Opens the authenticated tenant workspace from OneAgent through a validated HTTPS platform URL. - Opens and focuses the OneAgent panel from AMPACS through the bounded `vscode://oneagent.oneagent-vscode/focus` route, with a Marketplace fallback when the extension is unavailable. - Rejects query-bearing or unknown extension URI routes and keeps tenant, session, user, token, and workspace context out of browser-to-editor navigation. ## 0.5.13 - Responsive long-answer streaming - Coalesces high-frequency Codex deltas before authoritative state reduction while preserving exact per-item order and structural event boundaries. - Replaces repeated full-message Markdown rebuilds with a stable append-only live tail and renders completed Markdown blocks once. - Keeps command output incremental and bounded, and replaces per-token Output-channel lines with content-free sampled stream summaries. - Flushes pending stream text before approval requests, runtime exits, reconnects and disposal so partial answers remain ordered and recoverable. ## 0.5.12 - Focused conversations and deferred Marketplace updates - Keeps file and folder attachments visible as chips while sending only one user conversation bubble; the internal authoritative path manifest no longer appears as a duplicate message. - Automatically collapses `Worked for ` when the final reply arrives while preserving ordered reasoning and command details on demand. - Replaces the full-canvas recent-thread state with a bounded, searchable and scrollable History popover. - Shows a quiet topbar Marketplace download action only when a newer pre-release is publicly available, and opens VS Code's native OneAgent Extension detail page without interrupting active work. - Decouples the Marketplace package version from the explicitly compatible, digest-pinned Windows Runtime release so `0.5.11` and `0.5.12` can coexist and repair against the same governed Runtime artifacts. ## 0.5.11 - Reliable Windows Runtime delivery - Delivers the 101.7 MiB Windows Runtime directly from a five-minute GCS V4 signed URL after OneAgent Control validates the device-bound download receipt. - Avoids Cloud Run response streaming resets that surfaced as `OneAgent Runtime download failed (500)` on Windows. - Allows exactly one HTTPS redirect to the exact `storage.googleapis.com` origin while rejecting HTTP, alternate ports, embedded credentials, lookalike hosts and chained redirects. - Preserves installer size, SHA-256, release-manifest, managed Codex, Host trust and Windows UAC verification before activation. ## 0.5.10 - Long-session Gateway model catalog stability - Snapshots the authenticated tenant model catalog into the isolated Agent Home before Codex app-server startup and constrains it to the signed Tenant Profile allowlist. - Keeps `/v1/responses` on the rotating command-backed Gateway token and preserves incremental live streaming without a renderer-side proxy or buffer. - Refreshes the Extension-held Gateway token before Codex can cache a near-expiry bearer token and records a content-free local catalog digest receipt for diagnosis. - Prevents long-lived sessions from background-polling `/v1/models` with stale authorization while keeping bearer tokens out of profile, config and catalog files. ## 0.5.9 - WSL runtime completeness and portable Webview icons - Packages the Microsoft Codicons font inside the platform-neutral VSIX so local Windows and remote WSL Webviews render the same toolbar and status icons without relying on VS Code's private installation layout. - Packages the exact manifest-pinned `codex-code-mode-host` companion beside Linux Codex, includes it in the signed inventory and SBOM, and verifies it before runtime activation. - Fails the Linux runtime release and repair gates when Host, Codex, Code Mode Host, notices, SBOM, signed metadata or the packaged Webview font are missing. ## 0.5.8 - WSL Runtime storage fetch compatibility - Passes the trusted GCS redirect to remote-host fetch as a string for compatibility with VS Code WSL fetch wrappers. - Preserves safe network `cause`, `code`, and syscall diagnostics instead of reporting only `fetch failed`. ## 0.5.7 - Trusted large Runtime download redirect hotfix - Downloads large Runtime artifacts directly from a five-minute GCS V4 signed URL after Control validates the device-bound receipt. - Allows exactly one HTTPS redirect to `storage.googleapis.com`; arbitrary and chained download redirects remain rejected. - Preserves package SHA-256, KMS-signed manifest, exact inventory and atomic activation verification after the direct download. ## 0.5.6 - WSL runtime receipt refresh hotfix - Refreshes the short-lived, device-bound Runtime download receipt immediately after the user confirms installation. - Retries exactly once with a new receipt when the download endpoint returns `401`, while preserving the confirmed release version, package digest, size and KMS-signed manifest identity. - Requires a new confirmation if the signed Runtime artifact changes while the confirmation dialog is open. ## 0.5.5 - Windows and Local WSL2 runtime - Ships one platform-neutral VSIX that runs as a workspace extension in Windows local and VS Code WSL2 workspaces. - Adds a signed Runtime Release V2 contract and a per-user Linux x64 installer with exact inventory verification, traversal/link rejection, bounded extraction, install locking, atomic activation and rollback receipts. - Packages a standalone Linux OneAgent Host and the exact manifest-pinned managed Codex CLI/App Server, without requiring system Node.js or the OpenAI VS Code extension. - Adds Windows/Linux runtime path resolution, private Unix token-broker sockets and platform-aware Host/Codex trust checks. - Binds concurrent PKCE callbacks to their original state, device, remote authority and VS Code window nonce; adds device-bound WSL Full Access acknowledgement. - Adds Windows and Ubuntu CI lanes plus WSL platform, path, release-signature and malicious-archive tests. - Keeps Ampacs Remote WSL over SSH as a post-Marketplace pilot lane pending the actual server/network validation. ## 0.5.4 - OneAgent-managed Codex runtime - Installs the OneAgent Host and the manifest-pinned Codex CLI/App Server in one explicit OneAgent Runtime installer and one UAC flow. - Removes the OpenAI VS Code extension as a required dependency while retaining compatible installations as recovery fallbacks. - Verifies the Codex archive, package identity, executable SHA-256, version and OpenAI Authenticode publisher before packaging and at production startup. - Removes the bare `codex.exe` fallback that caused `spawn codex.exe ENOENT` on clean Ampacs computers. - Adds clean-machine resolver and combined-installer validation coverage plus the managed runtime release and rollback plan. ## 0.5.3 - Windows Host elevation hotfix - Fixes a PowerShell parser failure that occurred after installer SHA-256 verification when the elevated installer path was appended after `-Command`. - Passes the exact verified installer path through a bounded process environment value instead of interpolating or appending it to PowerShell source. - Adds a Windows parser smoke test using an installer path with spaces, plus negative launch-path validation. ## 0.5.2 - Post-Marketplace reliability hotfix - Fixes the clean-machine Host bootstrap flow by validating server metadata once and passing an immutable, normalized install plan to the downloader. - Keeps structured file/folder mentions while adding an exact local-path manifest so the agent reliably receives selected context without uploading folder contents. - Reduces the density and footprint of Attach, Approval, Mention and Runtime menus while preserving the primary composer and conversation typography. - Adds regression coverage for the real validate-to-install sequence and attachment paths containing spaces or CJK characters. ## 0.5.1 - Host bootstrap pre-release - Adds an explicit post-login **Install OneAgent Host** flow for new Windows users. - Downloads only the tenant-entitled installer through a short-lived OneAgent Control URL. - Verifies release version, origin, size, SHA-256 and applicable Authenticode trust before UAC. - Supports choosing an existing governed Host and retries runtime startup only after Host verification. - Keeps login non-mutating: OneAgent never installs native software until the user chooses Install. ## 0.5.0 — Pre-release - Added OneAgent Identity OAuth PKCE sign-in and tenant-bound Gateway runtime. - Added signed Tenant Profile and Agent Bundle validation with isolated local Agent Homes. - Added Fast, Balanced, and Deep product model presets; Balanced is the default. - Added chronological, collapsible `Worked for` activity with bounded live streaming and lazy command output. - Added file, folder path, image, current-selection, Files, and Skills context. - Added native Review Diff and conflict-guarded Undo summaries. - Added Ask for approval, Workspace, and Full access permission modes. - Added production Host hash and Authenticode signer enforcement. - Declared Windows-first, trusted-local-workspace preview support. Known preview limits: - Access is limited to invited tenants and users. - Windows 11 and VS Code Stable are the supported initial matrix. - A separately installed, signed OneAgent Host is required. - Remote SSH, WSL, Dev Containers, virtual workspaces, macOS, and Linux are not supported in this pre-release.