v1.0.0-beta.33

Fixed

• Downloaded RK3588 (rkllama) models now appear in the Models list. rkllama downloaded and registered models correctly, but wrote them to its own directory that taOS never scanned, so a model that finished downloading never showed up. taOS now points rkllama at the unified model directory it already scans, and migrates any models you have already downloaded into it on upgrade, so nothing needs re-downloading. Reported by @mandresve (#1548).
• rkllama install failures now surface the real cause (e.g. HuggingFace unreachable) instead of a generic "model not registered" (#1548).
• Scheduled backups (and any other scheduled task) actually run now. The scheduler stored the cron expression but had no execution engine, so due tasks never fired (#165).

Added

• Cluster GPU-lease coordination: agents claim and release a worker's GPU atomically over the A2A bus, and /api/cluster/workers now reports real-time free/used VRAM, so shared-hardware model loads on one node no longer collide. Archived models are promoted automatically when compatible hardware joins the cluster (#893, #333).

Changed

• Backends (rkllama and other GPU/NPU model servers) run as the unprivileged taos service user with the device-group access they need, rather than root.
• Non-admin users no longer see system-settings panels, a UX follow-up to the settings-router access gate (#163).
• The documentation gate no longer trips on test-only files (#171).
• Cleared seven Dependabot alerts by pinning lodash-es, uuid, and nanoid (#173), and added a safe cleanup policy for stale agent worktrees (#172).

v1.0.0-beta.32

Fixed

• Weather app location search works again. The app looks up cities and forecasts from the open-meteo API, but the Content-Security-Policy only allowed same-origin connections, so the browser silently blocked every lookup. The open-meteo origins are now allowed. Reported by @mandresve (#1668).
• Desktop wallpaper no longer resets on login for anyone using a theme that declares a default wallpaper. Your explicitly chosen wallpaper is now authoritative on restore. Reported by @mandresve (#1603).

Added

• Groundwork for the native iOS and watchOS client: a per-user device registry with revocable per-device scoped tokens, device management endpoints, a device-token auth path, and an APNs push sender (inactive until configured). Server foundation only; no user-facing app yet (#1671).

Changed

• Governance: answering a gated Decision no longer sends the asking agent a duplicate message, and delegation/retry replies now state honestly whether the action completed (#174).

Related

• rkllama fork /api/pull now emits real Ollama ndjson progress + reliable model registration, closing out the RK3588 model-install completion chain on backend reinstall (#175/#1548).

v1.0.0-beta.31

1.0.0-beta.31

Fixed

• Model downloads on RK3588 (rkllama) really show progress now. The earlier fix assumed the rkllama pull stream was JSON, but it streams plain-text percentage lines; taOS now parses those (and still handles JSON), so the bar advances instead of sitting at 0%. Reported by @mandresve (#1648).

Added

• Agent org model: agents carry a role, title, and reporting line (who reports to whom), viewable as an org tree with cycle-safe validation. Agents can delegate a task to another agent through the existing governance gate (allow / deny / Decisions-inbox approval) (#161).
• Agent heartbeat loop (opt-in, off by default): when enabled, taOS periodically wakes each idle running agent with its next ready task and that task's goal context. Enable via the agent_heartbeat_enabled setting (#164).

Security

• cryptography 48.0.1 clears a high-severity OpenSSL advisory in the bundled wheels; all supported-platform wheels (incl. Intel Mac and 32-bit Windows) are retained (#1653).

v1.0.0-beta.30

1.0.0-beta.30

Fixed

• Model downloads on RK3588 (rkllama) no longer sit at 0% forever. Downloads that install through rkllama now report real progress as the weight is pulled, and a completed model is recorded and shown as installed immediately instead of looking stuck. Reported by @mandresve (#1648).

Added

• Agent budget hard-stops: set a per-agent LLM spend cap; once an agent reaches it, model calls are rejected with a clear over-budget error before any request is dispatched. Spend accrues from real usage; the cap is settable/resettable via an admin API (#160).

Security

• Frontend dependency advisories cleared (lodash-es code-injection + prototype-pollution, uuid, nanoid) via a grouped lockfile bump (#1655).

v1.0.0-beta.29

1.0.0-beta.29

Added

• Coding Studio live preview is real: it renders your workspace's actual index.html in a sandboxed iframe (local CSS, JS and images inlined, nothing fetched over the network), with working desktop/tablet/phone size toggles, replacing the old static mock. (#1652, #86)
• Music Studio WAV bounce: render a song to a downloadable WAV file, produced offline via Tone.Offline so the export matches what you hear. (#1650)
• Game Studio templates: four new playable starter games (endless runner, neon snake, sky tapper, asteroid miner), each a self-contained canvas game you can generate from, edit and share. (#1651)

v1.0.0-beta.28

[1.0.0-beta.28] - 2026-07-05

Added

• App Studio is now real: describe an app in plain words and the taOS agent generates it, packages it, runs it through the security analyzer, installs it, and shows it running live in a sandboxed window, all in one flow. Generated apps ship as sandboxed web apps with no elevated permissions.
• Licensing transparency: services whose model weights are non-commercial (MusicGen, MusicGPT, FLUX-Fill) now carry accurate weight-license metadata (the code license was already MIT, but the weights are CC-BY-NC), the Store shows a "Non-commercial weights" badge, and installing such a service now requires a one-time license acceptance. Nothing non-commercial installs silently.

Fixed

• Video Studio generation is no longer a multi-minute blocking request that could time out or fail on a disconnect. Generation now runs as a background job: you get an immediate job id, the UI polls for progress, and a failed job always ends in a clear error state instead of hanging.

v1.0.0-beta.27

[1.0.0-beta.27] - 2026-07-04

Added

• Office Suite is now complete: a Database view joins Write, Calc and Presentations, so you can build simple tables (typed columns, rows, inline editing) that save alongside your other documents.
• Office AI: Write now has working Rewrite, Shorten, Continue and Change tone actions, and Calc has a working "Ask your data" panel, both powered by your taOS agent. AI edits in Write are a single undo step (one Ctrl+Z restores your original text), and untrusted document/spreadsheet content is passed to the model as clearly delimited data, not instructions.
• Web Studio can now generate a real website from a prompt via your taOS agent (with a safe fallback to templates), previews it in a sandboxed frame, and shares or installs it as a taOS app.
• Music Studio is now a playable browser DAW: a Tone.js audio engine with a multi-track timeline, piano-roll editor, drum step-sequencer and mixer, songs that save to your cluster, and MIDI/JSON export.
• Design Studio designs now save: open, rename and delete your canvases, which persist across sessions (the editor itself was already fully featured).

Fixed

• Images Studio no longer misleads you when the Quality edit tier is unavailable: it now tells you when a request was served by the fast eraser (prompt ignored) and disables the Quality option when its model is not installed, instead of silently downgrading. Reported behavior aligned with what the backend actually does.
• Settings: changing a Dock setting no longer resets your wallpaper to the default on the next login. Partial settings saves now merge instead of overwriting the rest of your preferences. Reported by @mandresve (#1603, #1601).

v1.0.0-beta.26

[1.0.0-beta.26] - 2026-07-04

Added

• Projects now give a task its full relational context: an agent sees the goal ancestry behind a task (its project and parent-task chain) and what is blocking it, and that "why" is surfaced in the task view and injected into the assigned agent's context when the task becomes ready or is claimed (#158).
• Routines & Schedules: a project can now run recurring or triggered routines (cron schedule, inbound webhook, or manual/API trigger) that automatically create a task on the board and wake the assigned agent. Managed from a Routines tab in the Projects app; webhook triggers are per-token, rate-limited, and owner-only (#159).
• Agent governance (first slice): execution policies decide whether a deployed agent's tool call is allowed, denied, or needs human approval. By default the sensitive actions (host code execution and arbitrary outbound HTTP) require an approval that lands in the Decisions inbox; once approved, a short-lived grant lets the agent proceed. Policies are a global default with per-agent overrides; admin operators are never gated (#160).

v1.0.0-beta.25

[1.0.0-beta.25] - 2026-07-04

Security

• Fixed a high-severity missing-authorization vulnerability (GHSA-47g9-fwwp-hrfp, CWE-862) in the system settings router: every /api/config and /api/settings/* endpoint was served with no admin check, so an authenticated non-admin user could read and overwrite the full system configuration and trigger privileged actions (git pull + dependency reinstall + service restart, and switching the tracked update channel), causing configuration corruption or denial of service for the whole instance. The settings router now requires an admin session or the host local token; non-admin sessions are rejected with 403 before any handler runs. Reported by EQSTLab.

v1.0.0-beta.24

[1.0.0-beta.24] - 2026-07-04

Fixed

• taOS Agent: the agent chat no longer wrongly reports "runtime unavailable" when opencode is installed system-wide. taOS now finds opencode on the PATH and at its default install location, and when the runtime genuinely can't start it shows the real error instead of a misleading generic message. The taOS Agent dialog also no longer opens as a blank window when launched from the Launchpad or Dock. Reported by @mandresve (#1615, #1616).
• Settings: theme, wallpaper, dock position and dock icon size now persist across logout/login. They were applying in-session but a restore that ran before login completed left them reverting to defaults on the next session. Reported by @mandresve (#1601, #1603).
• Models & Providers: when a downloaded model can't be used because the backend that serves it isn't running, taOS now says exactly that and how to fix it (install/start the backend) instead of a generic "not found anywhere", and provider connection tests report the real failure reason instead of "unknown error". Reported by @mandresve (#1599, #1600, #1614).