TaskWraith 1.8.1

TaskWraith 1.8.1

TaskWraith 1.8.1 is a focused reliability and orchestration release for the
local-first macOS workbench and its iPhone/iPad companion.

Highlights

• Ensemble now has a BG stage for detached background work. BG seats stay
  out of ordinary rotation, start only when explicitly mentioned or delegated,
  and cannot take Boss, Captain, or synthesizer authority.
• The composer now shows provider-backed live token and projected-cost usage for
  solo and Ensemble work when available, with a clear estimate when it is not.
• Teams can close a genuinely complete active goal through a binding quorum poll
  when the Boss or Captain is unreachable; review gates stay attached to the
  goal they were created for.
• Agents can propose a validated Ensemble roster for user confirmation; Settings
  can selectively import or export saved rosters and keeps participant cards
  compact until you need their detailed controls. The Blackboard popover can
  post or remove notes without opening the right dock.
• Desktop and iOS receive a shared motion and feedback pass that respects Reduce
  Motion.

Reliability and safety

• Ensemble routing now preserves event order and directed scope, favors an
  explicit mention over a yield return, closes terminal yields cleanly, and
  keeps foreground fan-out results with their source before the next serial
  speaker begins. A reader fan-out also shows one contextual Skip control.
• Continuous mode returns control when a no-work, all-yielded panel cannot
  complete on its own, rather than spending another hop. Queued provider/model
  seat changes take effect only after the current pass closes.
• Goal-complete proposal responses retain their own tool identity, and a poll
  resolution cannot create a duplicate audit status line. Activity collapse no
  longer risks a nested renderer update loop.
• Settings and provider capability catalogues consistently surface the
  goal-complete proposal tool, including Cursor's gateway.
• Solo Codex terminal state is persisted reliably. Kimi and Grok MCP handling,
  Kimi weekly quota reporting, late Kimi Wire failure handling, and unsupported
  Codex reasoning-level handling are corrected.
• Before an iPhone/iPad action is sent, TaskWraith verifies the paired Mac is
  alive and makes a bounded reconnect/wake attempt if it has slept. The action
  is not sent until the host is proven reachable; synced threads remain
  readable meanwhile.
• The reviewer-verdict exception is exact and gate-scoped. Agent-created roster
  imports require confirmation and remain capped to Read-Only, Plan, or Default
  permissions without custom overrides.

See CHANGELOG.md in the tagged source for the complete public notes.

Artifact record

• Tag / commit: v1.8.1 → eac99767 (macOS artifacts built from this commit;
  the iOS build-number bump follows on as 08ed731c4).
• macOS: notarized universal .dmg + .zip (Developer ID Application:
  Christopher Izatt, 8CZML8FK2D). DMG notarization submission
  5c237109-2a37-4746-b017-b6214b6bd255 (Accepted); stapled and verified with
  spctl (source=Notarized Developer ID) + stapler. latest-mac.yml
  published for stable-channel auto-update.
  • SHA-256 .dmg: 384f0e44a61a53ae7cfe9afd9ceb02f8b415bef7bfb8cd2eb988496b4d36454b
  • SHA-256 .zip: 37a3cab37718284ffd27e757922885a406c6aceb45986854140c50ae4c89c790
• iOS/TestFlight: 0.1.0 (76) uploaded to App Store Connect, delivery UUID
  5a88bdc6-38ea-4f66-a393-1248741592ac (processing).
• Windows/Linux: attached via CI workflow dispatch after this release
  (unsigned x64/arm64 setup.exe; Linux AppImage + .deb).
• Source verification: whole suite green before bump — 858 files / 10,238 tests;
  iOS Kit swift test 403; swift bridge 88; validate:release all steps.

TaskWraith 1.8.0

TaskWraith 1.8.0

TaskWraith 1.8.0 is the largest release since the 1.7 line: a multi-provider
orchestration, model-control, long-session reliability, and desktop/iOS polish
release following a source-ahead round of more than 400 commits after v1.7.9.

Highlights

• One provider/model/reasoning picker now configures solo chats, side chats,
  delegated workers, and Ensemble participants. The new reasoning ladder covers
  each model's supported range, including GPT-5.6 Sol/Terra/Luna and Grok 4.5.
• Delegated sub-thread workers are durable and inspectable: choose their seat,
  recall the same session, queue a follow-up while busy, and receive joined
  results through the parent's exactly-once mailbox. Failed and cancelled work
  is returned as typed evidence rather than disappearing.
• Fresh provider sessions use a progressive, session-pinned capability gateway,
  keeping common coding tools close while specialized media, Canvas, creative,
  introspection, and other tools remain discoverable with their original
  approvals and audit identity.
• Ensemble work is easier to follow with live elapsed/token telemetry, distinct
  Scout/Worker/Reviewer glyphs, more accurate close-outs, Blackboard quick
  access, and fan-out rounds that remain open until every detached lane settles.
• Run and round close-outs gain readable summaries, with optional on-device
  Apple Foundation Models generation and a deterministic, injection-guarded
  fallback.
• GitHub PR/CI state lives above the composer; the right dock gains Home; the
  welcome dashboard gains an Agent Pool leaderboard; and Model Usage gains a
  30-day model comparison table.
• The theme now owns the reading surface independently of the composer shell,
  with a fully opaque pure-white default transcript, native-aligned Codex light
  chrome, shared first-class composer previews, metallic Multiview seams, and
  quick Sidebar/Main-pane opacity controls.
• The iPhone/iPad companion adds home search and thread management, scheduled
  messages, transcript export, a glass model/reasoning picker, collapsible
  reasoning, and a large streaming/reconnect performance pass.

Reliability and safety

• Bounded, checkpointed Kimi/Grok context compaction keeps long-running seats
  recoverable without claiming transcript coverage it has not earned.
• Cache-aware token accounting fixes historical/dashboard totals and records the
  prompt each Ensemble participant actually received.
• Multiview panes isolate their own composer clearance, workspace state, Home,
  and popout actions while avoiding unrelated streaming re-renders.
• Async delegated workers cannot inherit Trusted Session; they receive a capped,
  signed permission snapshot. Cross-instance MCP writes and silent Ensemble
  permission raises are also closed.
• Transcript ordering, long-thinking layout, auto-follow, iOS reconnects, and
  fan-out placement received broad correctness fixes.

See CHANGELOG.md in the release source for the complete Added / Changed / Fixed
/ Security / Accessibility / Removed / Documentation notes.

Artifact record

• Tag / commit: v1.8.0 / baf73212f
• macOS notary submission: DMG 51a84cd4-21b4-4c69-90a3-dd4b7b0bfd7a (Accepted); app notarized in build:mac:notarized
• macOS SHA-256:
  • .dmg — 2e5f0dbdac7c779fcd525aca660e7cd4a41724c215124dd9b9998abb38b5b47a
  • .zip — 912d035f269866ab94090e855086a7f2011ff2f7b21ae67fb32bbec4b5824dc0
• iOS build / delivery UUID: 0.1.0 (75) / ced85d73-c3c2-4371-8c30-7a0b5f959d74
• Windows/Linux CI dispatch: dispatched post-publish (see repository Actions)

TaskWraith 1.7.9

TaskWraith 1.7.9

Desktop release with iOS companion build 73. Highlights: iOS performance pass, liquid-glass sheets, transcript parity refinements, Settings 14→9 cleanup, ensemble participant ordering fix, and deterministic roster seeding.

Checksums (SHA-256)

• TaskWraith-1.7.9-universal-mac.dmg: 7a15fb0465ff9a81597f47241bfadaab0465f613b470c255098c596e109e0410
• TaskWraith-1.7.9-universal-mac.zip: a87f46be8ef32f47217d9f7ec1248005de598d88e0cfb38c8809e7ec2de4627a

See CHANGELOG.md for full notes.

TaskWraith 1.7.8

Fixed

• iOS transcript hydration. The Mac bridge now avoids sending oversized rich
  remote-projection frames that could exceed the relay's payload budget after
  the phone had already received the lightweight chat list. Oversized projection
  snapshots fan out through the existing single-envelope channel, and large
  thread snapshots are trimmed to a safe latest-row window instead of leaving
  mobile detail screens stuck on "Loading transcript from your Mac...".
• iOS thread detail refreshes. Mobile detail views now re-request transcript
  snapshots when a metadata-only snapshot says history exists but contains no
  rows, and Mac-side request handling avoids races where an early request could
  be ignored before the bridge connection was ready.
• iOS projection aliases. Remote thread snapshots now carry the aliases the
  Swift client expects, keeping transcript rows, ensemble metadata, and composer
  context attached to the selected chat.
• iOS compact composer. The mobile composer again collapses both the
  above-row controls and the footer telemetry rail when the keyboard drops,
  while preserving the compact diff access affordance.
• iOS Ollama brand parity. Participant health cards now repair generic
  Ollama display stamps with model-specific branding, so Laguna renders as
  Poolside on mobile like it does on desktop.
• Windows CI portability. Release/test scripts avoid POSIX-only assumptions
  that broke the Windows lane.

TaskWraith 1.7.7

Added

• Thread Introspection — memory promotion (read-only MVP). A retrospective
  layer scans recent threads and runs, harvests evidence (run events, approval
  friction, message feedback, correction heuristics), and produces reviewable
  Memory Proposal Packs with scoped, cited lessons (preferences, failure
  modes, repo conventions, provider hints, skill patches, bugs, do-not-repeat
  notes). Settings → Automation → Thread introspection supports a manual
  24h run, proposal review (approve/reject), evidence citations, and a daily
  Enable toggle for read-only scheduled packs. Distinct from per-run
  Evidence Packs and ensemble Blackboard. See THREAD_INTROSPECTION.md.
• Thread Introspection — apply phase 1 (repo conventions). After explicit
  approve in Settings, eligible repo_convention and do_not_repeat proposals
  can be applied to the workspace RepoConventionIndex via
  applyMemoryProposal (stable intro-{proposalId} entries, apply receipt on
  the proposal). Blocked in phase 1: skill/instruction file writes,
  skill_patch, bug, preference, provider_hint, and failure_mode.
  Skill patches remain review-only until a later Skill Patch Manager with diff
  preview and rollback. See THREAD_INTROSPECTION.md.
• Thread Introspection — MCP trigger and review tools. Agents can now use
  tw_introspection_run, tw_introspection_list, tw_introspection_read, and
  tw_introspection_review to create, inspect, and review proposal packs from
  chat. The MCP surface intentionally has no apply tool; applying approved
  proposals remains gated through the Settings/API flow.
• Thread Introspection — decay and supersede lifecycle. Store-level helpers
  can now supersede one memory proposal with another, expire past-due proposed
  items, and preserve bidirectional provenance links. Lifecycle controls are
  internal for now; no Settings, IPC, MCP, or automatic lifecycle policy is
  exposed yet.
• Ensemble roster import/export. Settings → Ensemble Roster can now save,
  import, and export full roster presets as portable JSON so teams can swap
  task-specific ensembles between installs. Imported/exported rosters preserve
  participant shape without carrying live Trusted Session authority.
• iOS Ensemble parity. The companion app can create/switch Ensemble chats via
  the same chat-kind bridge as desktop, repairs thread-list/task-card metadata
  when older Mac projections are sparse, and keeps ensemble status visible in
  the mobile shell.
• Boss controls. Bounded Boss control tools add quota reset summaries,
  timeout expiry, user-response tracking, participant summons, and MCP coverage
  for controlled multi-agent orchestration.
• Agent-pool and tool icon expansion. The agent-pool icon catalog now covers
  more workflow/tool families, including Diff Nice and release/CI-oriented
  glyphs.

Changed

• Trusted Session replaces ambiguous YOLO trust. Full local authority is now
  granted per chat or per ensemble participant lane, not globally to every
  participant in the session. Workspace Write is accented orange and Trusted
  Session/Full Access is accented red in the picker and composer chip.
• Release-class shell posture is narrower. Generic release shell commands no
  longer receive blanket release approval; explicit publish/signing receipts
  still carry their own authority.
• Live activity attribution is clearer. Tool-call and thinking-trace stacks
  show participant-style speaker headers, preserve model/reasoning boundaries,
  and avoid rendering stale historical run cards in the transcript path.
• Composer and workspace controls are denser and steadier. Git/worktree
  rows, utility popovers, goal/plan popovers, diff counters, external-path rows,
  and secondary workspace chrome were tightened for repeated operational use.
• Release packaging checks are more stable. Gate A packaging excludes local
  Cursor workspace state from the app bundle, reduces fixture IO, and keeps
  optional macOS dependency installation scoped to the universal build path.

Fixed

• iOS thread-list recovery. Task-card fallbacks, chatKind repair, and
  metadata snapshot merge keep companion lists aligned with desktop state after
  older or partial broadcasts.
• MCP bridge write hardening. Safe-write paths and tool alias classification
  better distinguish reasoning traces, shell/search aliases, and write-capable
  bridge operations.
• Grok/Cursor composer glow parity. Provider aura styling now matches the
  current composer shell for Grok and Cursor.

TaskWraith v1.7.6

TaskWraith v1.7.6

Release date: 2026-07-05
Tag: v1.7.6 @ 5973182fcfe3e87136a4e4251417aa59af45b5ab

TaskWraith is a local-first macOS desktop workbench for running and reviewing AI coding agents. Execution, history, and workspace state stay on your machine.

---

Highlights

Added

• Prompt caching guarantee tiers. Settings → Providers → Prompt caching shows per-transport posture (Guaranteed / Automatic / Best effort / Unsupported) with optional diagnostics when providers report cache read/creation tokens. Controllable API/BYOK paths honor policy modes (off / auto / explicit); opaque CLI transports remain best-effort only.
• Universal forks. /fork and thread fork actions use a provider capability summary: native fork on Codex (thread/fork), emulated fork (isolated sibling chat with duplicated transcript) on other live providers, with clear native vs emulated labeling.
• Worktree and branch orchestration. Runtime profile workspaceMode: worktree resolves to git worktree lifecycle at run launch. The composer above-row branch control opens a popover to list branches, create a branch, checkout, and create/select/remove worktrees with dirty-tree guards.
• Thinking trace actions. Reasoning traces in the activity stack gain copy-friendly actions consistent with other tool cards.
• Provider thinking summaries. Assistant turns can surface compact thinking summaries where the provider exposes reasoning metadata.

Changed

• Cache usage telemetry. Model Usage and prompt-cache diagnostics surface cache read/creation tokens when providers report them, including on implicit caching transports TaskWraith observes but does not control.
• Run summary diff stats. Diff stat chips align with the current evidence-pack presentation.
• Composer shell polish. Mic affordance and provider-row aura refinements on the composer chrome.
• Sidebar workspace hierarchy. Startup layout for nested workspace trees is tidier and less jumpy on first paint.
• iOS run details token table. Token summary layout simplified on the companion run-details screen.

Fixed

• Branch popover readability and placement. The composer branch/worktree popover reuses the Model/Reasoning picker frosted-glass chrome and opens above the trigger by default so it no longer overlaps the picker row below.
• Grok and Cursor thinking traces. Incremental thinking deltas preserve whitespace and word boundaries instead of trimming each chunk before append.
• Brief mention overlay scroll sync. Ensemble brief @-mention overlays stay aligned while the transcript scrolls.
• Release-class shell commands. Approved release workflows (git push, git_create_pr, and related host commands) bypass redundant shell blocks after explicit user approval.

Documentation

• New guide: SESSION_AND_WORKSPACE.md (caching tiers, forks, worktrees).
• Architecture and Advanced Optional Setup cross-links for BYOK caching caveats.

Full changelog: CHANGELOG.md

---

macOS downloads

Artifact	SHA-256
TaskWraith-1.7.6-universal-mac.dmg	809e3f9d2f3c601ca08288101be419c02001967a8228210b1de27795eae6a0e5
TaskWraith-1.7.6-universal-mac.zip	097555e0dd2948e0c3efe6b5e213392718aca29a220a809e6214f3fcf775b542
latest-mac.yml	74dec6e8a18ff35410af020c497c978649d6cc53c25e15b9d550ce98445ba3c3
sbom.cdx.json	88503231e0bf03c3d8bed1462934f41df2e4c9c377d57cb064cbd4fc590777cb

Checksums file: SHA256SUMS-1.7.6.txt

Notarization note: The universal .app inside the DMG is signed, notarized, and stapled. DMG-level stapling was deferred (stapler validate on the DMG reports no ticket yet); Gatekeeper acceptance was verified on the packaged .app.

---

iOS companion

TestFlight build 65 (marketing version 0.1.0) uploaded to App Store Connect with production push entitlements.

---

Upgrade

Existing installs on the stable channel should pick up 1.7.6 via the in-app updater (latest-mac.yml). New installs: open the .dmg and drag TaskWraith to Applications.

TaskWraith v1.7.5

1.7.5 - 2026-07-05

Added

• Agent Pool icon colour controls. Hue and brightness sliders stay visible for
  seed, asset, and named icons — not only after Shuffle — with editable Hex and
  RGB fields for precise picks. When Tint icon is on, your chosen colour
  overrides pre-baked asset hues; when off, the preview stays monochrome while
  the colour fields still show your last pick.
• Agent Pool leaderboard. Settings → Agent Pool now includes a sortable
  leaderboard table (styled like Model Usage) ranking pooled agents by runs,
  threads, tokens, tool calls, edits, work time, ensemble stage/role, and last
  active. Stats accumulate forward from saved ensemble runs.
• Transcript participant filter rail. Ensemble transcripts gain a compact
  filter rail so you can focus on one participant's messages without losing
  round context.
• Add selection to composer prompt. Highlight transcript text and send it
  straight into the composer as quoted context.
• Composer voice input. Pick a microphone source and dictate locally into
  the composer; on-device transcription fills the prompt without sending audio
  off-machine.
• Ensemble brief presets. Edit reusable brief presets from Settings and
  update them mid-round via a new ensemble_brief MCP tool.
• Stacked fan-out working indicators. Parallel fan-out lanes now show a
  clearer stacked busy state while seats are running.
• Plugin contributions surface. Activated plugin capabilities, tool bundles,
  local services, workflow templates, connector secret setup, health probes, and
  launch runners are wired into Settings and the new-workflow menu, with review
  gates before risky activations.
• Sketch canvas tooling. Agents can open a persisted sketch canvas for
  lightweight markup workflows.
• Poolside Laguna (Ollama). A new local-model preset joins the Ollama catalog.
• Full thinking traces. Extended reasoning traces are surfaced where the
  provider exposes them.
• Compact collapsed model-usage grid. With the sidebar collapsed, model usage
  condenses into a tighter grid layout.

Changed

• Fan-out transcript grouping. Parallel fan-out activity rolls up into grouped
  cards instead of scattering individual lane messages through the thread.
• Ensemble send queueing. Sends issued while the orchestrator is busy route
  through the ensemble queue instead of racing the active turn.
• Solo assistant labels. Single-provider chats label assistant turns with
  provider identities rather than generic placeholders.
• Workspace board creator. Creating a board opens from a main-pane sheet
  instead of a sidebar-only flow.
• Sidebar rhythm and composer tabs. Section spacing is normalized; tucked
  composer tabs cap at 850px so wide monitors do not sprawl.
• Ensemble chars slider polish. Glass styling refinements and removal of
  noisy warning hints on the orchestration row.
• Ollama branding. Mentions, health cards, and iOS working labels carry
  consistent Ollama identity.
• Provider tools catalog. The tools reference is reorganized for easier
  discovery.

Fixed

• Agent Pool tint precedence. Legacy baked accents no longer win over user
  hue/brightness when tinting is enabled.
• Settings roster brief editor width. The ensemble brief editor no longer
  overflows its panel.
• Workflow quick-create from general chats. Quick workflow creation works
  from non-workspace threads again.
• Participant filter rail alignment. Underfilled filter rails bottom-align
  cleanly against the transcript edge.
• Completion-claim warnings retired. Stale completion-claim transcript
  warnings are removed in favour of the current evidence-pack flow.
• Active run provider labels. In-flight runs show the correct provider name.
• Ollama health card brand fallback. Missing brand metadata no longer leaves
  a blank card.

---

SHA-256 checksums (macOS artifacts):

31708ff3a630b7bed131cddcb0368e15d3104d6af89cd55b4c10f67af965c7cc  TaskWraith-1.7.5-universal-mac.dmg
4d94de30fbf7ad6a6554cc4961231b7f552c1f502780db5ce7cc600a559415b6  TaskWraith-1.7.5-universal-mac.zip

Windows and Linux installers are unsigned CI builds attached after publish.

TaskWraith v1.7.4

1.7.4 - 2026-07-04

Added

• Mid-thread ensemble toggle. Top-level chats can now flip in place between
  single-provider and Ensemble mode on the same chat, preserving transcript and
  run history. Solo → Ensemble seeds a single participant from the current
  provider instead of recreating the thread, and Ensemble → Solo collapses back
  to a canonical provider — defaulting to the current Boss participant so the
  thread keeps its lead voice. The toggle is available on started threads when
  idle and stays disabled while a turn is active.
• Ensemble blackboard — a shared scratchpad for your agents. Participants can
  now post durable, bounded shared-memory entries (decisions, verified facts,
  open risks, do-not-repeat notes, concise notes) that every seat sees as a
  compact digest instead of re-deriving the same facts each turn. Agents get
  blackboard_post / blackboard_read / blackboard_delete tools with per-seat
  "seen" tracking, entries carry a round / session / chat lifespan, and the whole
  board is browsable — with its unseen/seen state — from the Pins panel.
• Ensemble fan-out controls, refined. The orchestration-row Fan-Out control is
  clearer to steer, and a parallel writer wave now lands as a single Fan-out
  result card that gathers each seat's contribution in one place instead of
  scattering them down the transcript.
• Live seat-compaction progress. When an Ensemble seat approaches its context
  ceiling, you now see its compaction happening live — an in-progress indicator
  on the participant and a boss-facing cue — rather than only a card after the fact.
• File-change hover diffs. Hovering a changed file in a run now previews a
  compact per-file diff summary (added / removed line counts and the change
  shape), so you can gauge what a step touched without opening the editor.
• Transcript rail reading lens. The user-message marker rail now carries a
  slide-rule-style "lens": a frosted carriage whose height shows how much of the
  thread is on screen and whose position tracks your scroll. Ticks it has swept
  past settle into an "inked" spent state, marking the done/upcoming boundary as
  a second, colour-independent cue.
• Rail jumps now glide. Clicking a go-to-message tick or the ↑ / ↓ arrows
  animates the transcript to the target (distance-scaled, eased) instead of
  teleporting. Any wheel / touch / key input mid-glide cancels it instantly, and
  reduced-motion settings restore the instant jump.
• Collapsed rounds keep their rail markers. In Ensemble chats, user prompts
  hidden inside a collapsed round card still appear on the go-to-message rail,
  anchored at the round's header; clicking one auto-expands the round and glides
  to the prompt.
• Quick controls survive collapsing the sidebar. Hiding the workspace sidebar
  now surfaces a bottom-left vertical glass pill with the sidebar footer's quick
  controls — Settings, Approvals, Shares, and Devices — each opening the same
  popover as its sidebar counterpart, with the same pending/collaborator/device
  glows.
• iOS: richer notification banners. Turn-complete and status banners on the
  companion carry more context at a glance, while genuinely noisy remote
  notifications are dialled back so the ones that arrive are worth reading.

Changed

• Provider / model / reasoning switching no longer stops at first send. In
  normal chats, the composer provider and model / reasoning pickers stay usable
  after a thread has history. Idle changes apply immediately; while a turn is
  active they queue and apply at turn end. The same-provider case keeps the live
  session; only a genuine provider switch resets provider-linked session state.
  The iOS companion mid-thread switch got the same session-hygiene treatment.
• Continuous-mode ensembles keep going on their own. A Continuous round no
  longer stops the moment agents stop explicitly handing off. When the roster
  drains with an active goal, TaskWraith re-dispatches another pass automatically
  — up to the handoff-turn budget — and stops cleanly when the goal is completed,
  blocked, or paused, when the hop budget runs out, or when a round makes no
  progress.
• Ensemble roster is easier to shape. The old minimum-two-participant floor is
  gone, so you can pare a roster down freely, and collapsing or reworking the
  roster no longer discards participants you meant to keep.
• Guest participants removed. The older Guest helper path has been removed from
  desktop, iOS, bridge, and live docs. Historical guest transcript rows remain
  render-safe and inert.
• Corner-pill polish. The bottom-left column pill's dividers span the full pill
  width and its icons are larger. Active pill buttons swapped the old
  left-weighted blue gradient — whose near-white glyph vanished on light themes —
  for the neutral glass blob + hairline ring the hover state already used.
• Quieter sidebar and calmer flourishes. The sidebar's model-usage heatmap was
  retired, the masthead and New button line up with the brand row, transcript
  item separators read as a softer silver, and the sky-diff easter egg is pared
  back to just its drifting +/− line counts.

Fixed

• Priority @-mentions reach the Boss even after they've spoken. Directing a
  round back to the Boss — or the acting Captain when the Boss is away — after
  that authority had already taken its turn printed a "takes routing priority"
  note but then silently dropped the route. The authority is now genuinely
  re-summoned (bounded by the handoff budget so it can't loop), and when a
  re-summon truly can't be delivered the note reports the real reason.
• Dedicated writers fan out in parallel again. Two round-start gating bugs let
  stage reviewers and read-only workers falsely veto a parallel writer wave,
  forcing writers back to a slower serial pass; parallel writer fan-out now runs
  when it's warranted.
• Ensemble steering and recovery hardened. A steer issued during a parked
  window is now honoured, zombie dispatch after a cancel is stopped, and an
  ensemble participant recovered after an app restart is labelled as itself
  rather than mislabelled as a solo run.
• Stale run-queue rows no longer linger. Active-run queue entries left behind
  by a finished or interrupted run are suppressed, so the queue reflects what's
  actually running.
• Chat titles and summaries stay honest. Chat-list summaries are validated
  against each chat's own file so a title can't drift away from its conversation,
  index churn is throttled to keep the list steady, and session checkpoints
  persist more reliably across compaction.
• A pending question now sits at the live tail. In Ensemble chats an
  ask_user_question card could strand itself above the speaker; it now pins to
  the bottom of the live conversation where you'd expect to answer it.
• Rail no longer bleeds under the composer. With the workspace sidebar
  collapsed, the go-to-message rail could overlap the floating composer's left
  edge; it now anchors to the leftmost mounted lane, stays fully to the
  composer's left, and re-measures when layout transitions settle.
• Settings is reachable with the sidebar collapsed. Opening Settings while the
  sidebar was hidden left no tab navigation and no "Back to app"; the sidebar slot
  that hosts the Settings nav now force-mounts for the takeover and slides back
  out on close, without touching the user's collapsed preference.
• Right-dock panels no longer stack from the top pill. The rim buttons (Run
  rail, Media, Notes / Pins, Terminal, File editor, Inspector) route through the
  dock's exclusive lifecycle: opening one surface replaces the previous, and
  closing the active surface collapses the whole dock in a single click.
• Remote approvals that over-shoot the offered tier are honoured. Tapping
  "Accept for workspace" on an iOS approval that only offered a narrower accept no
  longer silently drops it; the accept is down-clamped to the strongest offered
  tier and the command actually runs.

Security

• Roster permission changes respect the workspace auto-edit gate. Setting an
  ensemble participant to an auto-edit-tier posture (workspace-write or full
  access) from a remote device now requires the workspace to permit auto-edit,
  closing an escalation path that bypassed the gate the composer already enforces.
• Cursor native shell and writes unlock only under a real Full access grant. A
  write-capable Cursor run keeps its native shell / write deny-list — routing
  through the TaskWraith broker — unless it's running under a genuine, signed Full
  access grant, matching how Codex full-access is treated.

---

SHA-256 checksums (macOS artifacts):

67c0dd36e0261be49dfd687abb4d1f14cf98d685889b83cd0f2a0af5e0db3dee  TaskWraith-1.7.4-universal-mac.dmg
52fad4aaeeda344c8e3e90bbddba3168925bfe85a8963951035c40a9614e1060  TaskWraith-1.7.4-universal-mac.zip

Windows and Linux installers are unsigned CI builds attached after publish.

TaskWraith v1.7.3

TaskWraith 1.7.3 — Full Access agents can build, sign & ship

Fixed

• Full Access agents can build, sign and ship. A Codex agent running under
  the Full access permission preset now launches without the workspace
  sandbox (danger-full-access) instead of being confined to the repository.
  Under the previous workspace-write confinement it could not reach the login
  keychain (code-signing identities), ~/Library caches (SwiftPM / DerivedData),
  or paths outside the workspace — so an approved release task (iOS
  archive / notarize / TestFlight upload) failed at signing even after the user
  approved it. The sandbox now drops only for a genuine, signed Full access
  grant; every other run stays workspace-confined, and a global "deny shell
  commands" setting still overrides it.

Added

• iOS: grant Full access from your phone. The iOS participant permission
  picker now offers Full access, matching the desktop permission picker, so
  a phone-driven ensemble participant can be given the full-access posture that
  lets it build, sign, and ship.

Companion: iOS build 62 on TestFlight.

---

macOS artifacts (universal, notarized)

SHA-256:

51e7a03b034ac28f6192d38773ee62939006459ce54a7d82e984b02ca368b77d  TaskWraith-1.7.3-universal-mac.dmg
2493048ffe6017286be72010d72163e61b1065f2d1a9d40deeb8e9e0945da410  TaskWraith-1.7.3-universal-mac.zip

Windows and Linux builds are attached separately via CI.

TaskWraith v1.7.2

1.7.2 - 2026-07-03

Added

• iOS ensemble orchestration parity. The iOS companion can now adjust
  ensemble controls that were previously desktop-only: designate the
  Captain (second-in-command who steps in when the Boss is unavailable),
  switch between Turn and Continuous mode, set the max handoff
  turns (hop limit) for continuous rounds, choose the Fan-Out policy
  (Off / Read / Write, where Write resolves to the Boss-gated or
  user-preflight writer lane), and set the shared-transcript character
  budget. Each change round-trips to the Mac and takes effect on the next
  round.

Changed

• Question routing. The agent runtime preamble now steers agents to the
  TaskWraith ask_user_question tool instead of a provider-native question
  prompt, which silently auto-resolves without reaching the user in this
  harness (desktop or the iOS companion).

---

SHA-256 checksums (macOS artifacts):

ed1700dde039b7a4fc790cb9f32f5a922f236c4aa43fe92805fdede7e9d0049e  TaskWraith-1.7.2-universal-mac.dmg
eeac06b1020577b761b1755eac47622849f20a7773b5f8354c27c18bc4c9b920  TaskWraith-1.7.2-universal-mac.zip

iOS companion build 0.1.0 (61) was uploaded to TestFlight with delivery UUID a392efdb-99db-4e47-99a6-c1274daf53dc.

Windows and Linux installers are unsigned CI builds attached after publish.