[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and publish to npm yourself or setup this action to publish automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@subshell-ai/plugin-grok-build@1.1.0

Minor Changes

• #448 0c0691c Thanks @theogravity! - Add the Grok Build harness with CLI detection, launch presets, and one-time MCP registration. Each subshell runs a dedicated Grok agent process so its MCP tools inherit the correct credentials.

@subshell-ai/plugin-oh-my-pi@0.2.0

Minor Changes

• #446 a1adc0e Thanks @theogravity! - Add Oh My Pi as a built-in harness, with omp detection, model/provider/thinking settings, and automatic per-launch MCP configuration. Document installation and the integration's session behavior.

@subshell-ai/plugin-codex@1.0.2

Patch Changes

• #445 6d3ac61 Thanks @theogravity! - Forward pane identity explicitly to Codex MCP processes so Subshell tools can initialize.

@internal/node@3.0.0

Major Changes

• #426 cec0b06 Thanks @theogravity! - Add web previews, browser watching, saved web services, and virtual displays to subshell workspaces. Open each view in its own draggable tab beside the terminal, move it between splits, or use full screen. Closing a preview leaves its terminal and sibling views running.

  Node settings independently control web previews and virtual displays. Enabling web previews makes them available to the node’s subshells. Nodes can enable multiple display providers and choose a default. Virtual displays are requested at launch, use the default or a selected enabled provider, and check prerequisites before starting. Xvfb + VNC is the initial provider and requires Linux with Xvfb, x11vnc, and xauth. Presets can save a provider choice. Each subshell keeps its resolved provider and display size on restart, even when the node default changes. Disabling a provider prevents new displays and restarts without stopping existing displays. The server’s built-in node uses the same runtime as enrolled nodes.

  Expose feature permissions, display-provider selection, prerequisites, and view controls through MCP. The UI explains disabled features and links to setup documentation. Switching nodes clears incompatible agent and display selections, resets the working directory, and explains the corrections. Preview choices use compact rows with plain port numbers, and phone previews preserve the desktop workspace layout.

  Isolate web-preview scripts from dashboard credentials and browser storage, restrict viewers to authorized resources, and revoke views when access changes or subshells stop. Keep target cookies on the server, bound transport buffers and image dimensions, verify display process ownership before cleanup, and redact preview capability references from diagnostics.

Minor Changes

• #443 7c8fd34 Thanks @theogravity! - Add the BetterDisplay virtual display provider for macOS. Bundle a shared native display helper in both desktop apps, disabled by default and managed through a separate native settings panel. Require explicit local consent and macOS permissions, support immediate disable, and keep activation outside first-run setup and remote node/MCP controls.

  Reuse the authenticated screen viewer with bounded native capture and input, retain verified display ownership for cleanup and recovery, and document activation and macOS shared-desktop limitations in node settings.

  Recheck consent and permissions after native capture startup and on input, and close new displays when node policy changes during allocation.

  Keep uncertain creation records separate so retries can proceed, explain vanished displays, share probe cleanup guards, and encode frames away from the helper's UI thread. Show platform-appropriate provider settings and prevent equal-version release bundles from replacing each other's helper.

• #447 f72a30b Thanks @theogravity! - Presets can now be switched off. A new toggle in the presets table parks a preset without deleting it: a switched-off preset disappears from every launch picker and from the MCP list_presets answer, and starting or restarting a subshell with one is refused until you switch it back on. Panes already running from it are untouched.

• #426 cec0b06 Thanks @theogravity! - Save HTTP or HTTPS services in Apps & screens, including services started outside a subshell. Open each in its own workspace tab, and remove saved connections without stopping their services. Manual connections work without a virtual display, including on macOS nodes. Node protocol 24 adds explicit destinations and certificate-verified HTTPS.

• #426 cec0b06 Thanks @theogravity! - Separate node permissions for apps and browsers from virtual displays. Apps and browser features apply to every subshell when enabled; virtual displays still require an explicit launch choice. Preserve existing grants, show feature-specific readiness, and enforce both switches on the server and node.

Patch Changes

• #426 cec0b06 Thanks @theogravity! - Separate virtual display providers from viewer connections and launch settings. Allow node owners to enable multiple display providers and choose a default, with Xvfb + VNC as the initial option. Persist per-subshell provider choices for restart and preserve display requests in presets. Check requirements for the selected provider and preserve existing displays when the selection changes.

  Order provider allocation and cleanup per subshell, recheck permission after asynchronous prerequisites, and verify VNC listener ownership during allocation and recovery. Reserve viewer ports before probing to prevent concurrent displays from selecting the same port.

• #426 cec0b06 Thanks @theogravity! - Explain when node settings disable a virtual display requested through MCP, and verify independent preview permissions for dashboard and agent access.

• #446 a1adc0e Thanks @theogravity! - Add Oh My Pi as a built-in harness, with omp detection, model/provider/thinking settings, and automatic per-launch MCP configuration. Document installation and the integration's session behavior.

• #426 cec0b06 Thanks @theogravity! - Close a preview permission-downgrade race, bound image decoding and retained
  resources, and check transport backpressure before encryption. Verify display
  process identity before cleanup and document the additional security review.

• #426 cec0b06 Thanks @theogravity! - Add MCP Preview discovery, private connections, browser watching, and virtual-display launches. Include harness health, SSH/Preview settings, and live display prerequisite checks in node discovery, with owner-only access preserved. Document the workflow and capability-link security boundary.

• #426 cec0b06 Thanks @theogravity! - Cancel pending preview opens when access is revoked, and recheck authorization before publishing them. Keep CDP discovery on its requested loopback endpoint. Bound proxy response buffers, fragmented WebSocket messages, and target cookies, and prevent preview targets from installing dashboard reporting policies.

• #426 cec0b06 Thanks @theogravity! - Recheck live-screen subscriptions when revocation overtakes their permission check. Limit queued writes to preview targets that stop reading, and clean up node resources after uncertain preview-open replies.

• #426 cec0b06 Thanks @theogravity! - Rename apps and browsers to Web previews throughout the dashboard, API and MCP permission fields, node protocol, and documentation.

• #426 cec0b06 Thanks @theogravity! - Name the unreleased Apps & screens API resources views and expose MCP tools list_subshell_views, open_subshell_view, and watch_subshell_browser. Rename node readiness and enablement discovery, align viewer controls and permission labels, and document the persisted and protocol identifiers retained for compatibility.

• #426 cec0b06 Thanks @theogravity! - Update Zod to 4.6.7 and override Expo CLI’s older Zod dependency to remove the vulnerable version from the dependency tree.

• #426 cec0b06 Thanks @theogravity! - Prevent late browser-watch requests from reactivating closed or changed views, preserve selected virtual displays during same-node rechecks, and clarify disabled settings and setup guidance. Reject conflicting MCP app/display arguments before creating a connection.

• Updated dependencies []:

  • @internal/pane-runtime@1.0.0

@internal/server@3.0.0

Major Changes

• #426 cec0b06 Thanks @theogravity! - Add web previews, browser watching, saved web services, and virtual displays to subshell workspaces. Open each view in its own draggable tab beside the terminal, move it between splits, or use full screen. Closing a preview leaves its terminal and sibling views running.

  Node settings independently control web previews and virtual displays. Enabling web previews makes them available to the node’s subshells. Nodes can enable multiple display providers and choose a default. Virtual displays are requested at launch, use the default or a selected enabled provider, and check prerequisites before starting. Xvfb + VNC is the initial provider and requires Linux with Xvfb, x11vnc, and xauth. Presets can save a provider choice. Each subshell keeps its resolved provider and display size on restart, even when the node default changes. Disabling a provider prevents new displays and restarts without stopping existing displays. The server’s built-in node uses the same runtime as enrolled nodes.

  Expose feature permissions, display-provider selection, prerequisites, and view controls through MCP. The UI explains disabled features and links to setup documentation. Switching nodes clears incompatible agent and display selections, resets the working directory, and explains the corrections. Preview choices use compact rows with plain port numbers, and phone previews preserve the desktop workspace layout.

  Isolate web-preview scripts from dashboard credentials and browser storage, restrict viewers to authorized resources, and revoke views when access changes or subshells stop. Keep target cookies on the server, bound transport buffers and image dimensions, verify display process ownership before cleanup, and redact preview capability references from diagnostics.

Minor Changes

• #448 0c0691c Thanks @theogravity! - Add the Grok Build harness with CLI detection, launch presets, and one-time MCP registration. Each subshell runs a dedicated Grok agent process so its MCP tools inherit the correct credentials.

• #443 7c8fd34 Thanks @theogravity! - Add the BetterDisplay virtual display provider for macOS. Bundle a shared native display helper in both desktop apps, disabled by default and managed through a separate native settings panel. Require explicit local consent and macOS permissions, support immediate disable, and keep activation outside first-run setup and remote node/MCP controls.

  Reuse the authenticated screen viewer with bounded native capture and input, retain verified display ownership for cleanup and recovery, and document activation and macOS shared-desktop limitations in node settings.

  Recheck consent and permissions after native capture startup and on input, and close new displays when node policy changes during allocation.

  Keep uncertain creation records separate so retries can proceed, explain vanished displays, share probe cleanup guards, and encode frames away from the helper's UI thread. Show platform-appropriate provider settings and prevent equal-version release bundles from replacing each other's helper.

• #446 a1adc0e Thanks @theogravity! - Add Oh My Pi as a built-in harness, with omp detection, model/provider/thinking settings, and automatic per-launch MCP configuration. Document installation and the integration's session behavior.

• #447 f72a30b Thanks @theogravity! - Presets can now be switched off. A new toggle in the presets table parks a preset without deleting it: a switched-off preset disappears from every launch picker and from the MCP list_presets answer, and starting or restarting a subshell with one is refused until you switch it back on. Panes already running from it are untouched.

• #426 cec0b06 Thanks @theogravity! - Save HTTP or HTTPS services in Apps & screens, including services started outside a subshell. Open each in its own workspace tab, and remove saved connections without stopping their services. Manual connections work without a virtual display, including on macOS nodes. Node protocol 24 adds explicit destinations and certificate-verified HTTPS.

• #426 cec0b06 Thanks @theogravity! - Separate node permissions for apps and browsers from virtual displays. Apps and browser features apply to every subshell when enabled; virtual displays still require an explicit launch choice. Preserve existing grants, show feature-specific readiness, and enforce both switches on the server and node.

Patch Changes

• #426 cec0b06 Thanks @theogravity! - Name the dashboard entry point Apps & screens and its picker Open app or screen, with matching setup guidance and documentation. Keep API and MCP identifiers stable. Simplify the website demonstration and support private development hostnames through local environment settings.

• #445 6d3ac61 Thanks @theogravity! - Forward pane identity explicitly to Codex MCP processes so Subshell tools can initialize.

• #426 cec0b06 Thanks @theogravity! - Reduce standard dialog titles to 18px and align the close button with the title. Reduce dialog padding to 18px on all sides.

• #426 cec0b06 Thanks @theogravity! - Use 13px text, 2px vertical padding, and 28px minimum rows for action-menu items.

• #426 cec0b06 Thanks @theogravity! - Separate virtual display providers from viewer connections and launch settings. Allow node owners to enable multiple display providers and choose a default, with Xvfb + VNC as the initial option. Persist per-subshell provider choices for restart and preserve display requests in presets. Check requirements for the selected provider and preserve existing displays when the selection changes.

  Order provider allocation and cleanup per subshell, recheck permission after asynchronous prerequisites, and verify VNC listener ownership during allocation and recovery. Reserve viewer ports before probing to prevent concurrent displays from selecting the same port.

• #426 cec0b06 Thanks @theogravity! - Explain when node settings disable a virtual display requested through MCP, and verify independent preview permissions for dashboard and agent access.

• #426 cec0b06 Thanks @theogravity! - Fix action menus running past the bottom of the screen. A menu taller than the space available (the subshell actions menu on a phone or short window) is now clamped to the viewport and scrolls within it, instead of its last items falling off the bottom where nothing could reach them.

• #444 7a7f9b4 Thanks @theogravity! - Fix the mobile key bar's scroll, page up/down, byte, and paste keys doing nothing under a real finger on iPhone. The bar cancels the button's pointer-down to keep the terminal focused, and WebKit then skips the click it would otherwise synthesize, so the action that rode click never ran. Buttons now act on pointer-up (which every browser delivers), a tap that pans off the button sends nothing, and a browser that still clicks sends once, not twice.

• #426 cec0b06 Thanks @theogravity! - Show Apps & screens prerequisite checks in node settings, including missing virtual display programs, setup guidance, and a Recheck action. Explain platform limitations and make the disabled state visible beside the node's switch.

• #426 cec0b06 Thanks @theogravity! - Remove the terminal tab bar’s standalone maximize control and action menu. Keep Restore available for maximized groups.

• #426 cec0b06 Thanks @theogravity! - Close a preview permission-downgrade race, bound image decoding and retained
  resources, and check transport backpressure before encryption. Verify display
  process identity before cleanup and document the additional security review.

• #426 cec0b06 Thanks @theogravity! - Add MCP Preview discovery, private connections, browser watching, and virtual-display launches. Include harness health, SSH/Preview settings, and live display prerequisite checks in node discovery, with owner-only access preserved. Document the workflow and capability-link security boundary.

• #426 cec0b06 Thanks @theogravity! - Require an authorized browser-watch registration before delivering frames and revoke watches that no longer meet view-only browser restrictions. Preserve virtual-display dimensions across restarts and refuse disabled displays before stopping a live subshell. Buffer early target greetings within bounded lane limits so virtual-display connections cannot lose their handshake.

• #426 cec0b06 Thanks @theogravity! - Cancel pending preview opens when access is revoked, and recheck authorization before publishing them. Keep CDP discovery on its requested loopback endpoint. Bound proxy response buffers, fragmented WebSocket messages, and target cookies, and prevent preview targets from installing dashboard reporting policies.

• #426 cec0b06 Thanks @theogravity! - Recheck live-screen subscriptions when revocation overtakes their permission check. Limit queued writes to preview targets that stop reading, and clean up node resources after uncertain preview-open replies.

• #450 3de3f67 Thanks @theogravity! - Add a + menu beside sidebar machine groups to start a terminal with that machine's recent directory or open the new-subshell dialog with the node selected.

  Keep the working-directory default when reopening the launch dialog, and close the directory picker after choosing a folder, Recent path, or Favorite without reopening it when focus returns to the input.

• #426 cec0b06 Thanks @theogravity! - Rename apps and browsers to Web previews throughout the dashboard, API and MCP permission fields, node protocol, and documentation.

• #426 cec0b06 Thanks @theogravity! - Match sidebar workspace and grouping dropdown rows to their compact triggers, using 28px rows and 13px text.

• #426 cec0b06 Thanks @theogravity! - Keep Cancel and Start subshell visible while scrolling the new subshell form. Cancel and Close discard the draft before the dialog is reopened.

  Opening a new subshell no longer automatically reapplies the previous subshell’s preset.

• #426 cec0b06 Thanks @theogravity! - Name the unreleased Apps & screens API resources views and expose MCP tools list_subshell_views, open_subshell_view, and watch_subshell_browser. Rename node readiness and enablement discovery, align viewer controls and permission labels, and document the persisted and protocol identifiers retained for compatibility.

• #426 cec0b06 Thanks @theogravity! - Update Zod to 4.6.7 and override Expo CLI’s older Zod dependency to remove the vulnerable version from the dependency tree.

• #426 cec0b06 Thanks @theogravity! - Prevent late browser-watch requests from reactivating closed or changed views, preserve selected virtual displays during same-node rechecks, and clarify disabled settings and setup guidance. Reject conflicting MCP app/display arguments before creating a connection.

• #426 cec0b06 Thanks @theogravity! - Explain when a virtual display is useful and its resource cost beside the launch checkbox.

• #426 cec0b06 Thanks @theogravity! - Link missing virtual-display prerequisites to the setup guide instead of
  listing installation instructions in the launch form.

• Updated dependencies []:

  • @internal/pane-runtime@1.0.0

@internal/desktop-client@1.4.0

Minor Changes

• #443 7c8fd34 Thanks @theogravity! - Add the BetterDisplay virtual display provider for macOS. Bundle a shared native display helper in both desktop apps, disabled by default and managed through a separate native settings panel. Require explicit local consent and macOS permissions, support immediate disable, and keep activation outside first-run setup and remote node/MCP controls.

  Reuse the authenticated screen viewer with bounded native capture and input, retain verified display ownership for cleanup and recovery, and document activation and macOS shared-desktop limitations in node settings.

  Recheck consent and permissions after native capture startup and on input, and close new displays when node policy changes during allocation.

  Keep uncertain creation records separate so retries can proceed, explain vanished displays, share probe cleanup guards, and encode frames away from the helper's UI thread. Show platform-appropriate provider settings and prevent equal-version release bundles from replacing each other's helper.

Patch Changes

• #446 a1adc0e Thanks @theogravity! - Add Oh My Pi as a built-in harness, with omp detection, model/provider/thinking settings, and automatic per-launch MCP configuration. Document installation and the integration's session behavior.
• Updated dependencies [cec0b06, cec0b06, 7c8fd34, a1adc0e, cec0b06, f72a30b, cec0b06, cec0b06, cec0b06, cec0b06, cec0b06, cec0b06, cec0b06, cec0b06, cec0b06, cec0b06]:
  • @internal/node@3.0.0

@internal/docs@0.11.0

Minor Changes

• #443 7c8fd34 Thanks @theogravity! - Add the BetterDisplay virtual display provider for macOS. Bundle a shared native display helper in both desktop apps, disabled by default and managed through a separate native settings panel. Require explicit local consent and macOS permissions, support immediate disable, and keep activation outside first-run setup and remote node/MCP controls.

  Reuse the authenticated screen viewer with bounded native capture and input, retain verified display ownership for cleanup and recovery, and document activation and macOS shared-desktop limitations in node settings.

  Recheck consent and permissions after native capture startup and on input, and close new displays when node policy changes during allocation.

  Keep uncertain creation records separate so retries can proceed, explain vanished displays, share probe cleanup guards, and encode frames away from the helper's UI thread. Show platform-appropriate provider settings and prevent equal-version release bundles from replacing each other's helper.

• #443 7c8fd34 Thanks @theogravity! - Explain virtual display architecture and provide a runnable provider implementation guide with registration, recovery, security, and compiled-runtime validation.

• #443 7c8fd34 Thanks @theogravity! - Document web preview architecture and extension boundaries with a runnable HTTP/WebSocket target and validation guidance.

Patch Changes

• #426 cec0b06 Thanks @theogravity! - Name the dashboard entry point Apps & screens and its picker Open app or screen, with matching setup guidance and documentation. Keep API and MCP identifiers stable. Simplify the website demonstration and support private development hostnames through local environment settings.

• #443 7c8fd34 Thanks @theogravity! - Document the BetterDisplay CLI, helper socket protocol, and RFB transport, with a user-facing explanation of the macOS connection.

  Organize preview security by authorization, transport, VNC, macOS consent, and revocation, and clarify local-listener and capability-link risks.

• #445 6d3ac61 Thanks @theogravity! - Explain Codex MCP environment forwarding, missing-identity troubleshooting, and the boundaries of direct API fallbacks.

• #426 cec0b06 Thanks @theogravity! - Separate virtual display providers from viewer connections and launch settings. Allow node owners to enable multiple display providers and choose a default, with Xvfb + VNC as the initial option. Persist per-subshell provider choices for restart and preserve display requests in presets. Check requirements for the selected provider and preserve existing displays when the selection changes.

  Order provider allocation and cleanup per subshell, recheck permission after asynchronous prerequisites, and verify VNC listener ownership during allocation and recovery. Reserve viewer ports before probing to prevent concurrent displays from selecting the same port.

• #451 66a493b Thanks @theogravity! - Clarify preview and virtual-display setup, remove repeated implementation detail from the architecture overview, and correct macOS support, node protocol, and Codex MCP guidance.

• #448 0c0691c Thanks @theogravity! - Add the Grok Build harness with CLI detection, launch presets, and one-time MCP registration. Each subshell runs a dedicated Grok agent process so its MCP tools inherit the correct credentials.

• #426 cec0b06 Thanks @theogravity! - Document independent node preview permissions in node management, architecture, MCP, and protocol references.

• #446 a1adc0e Thanks @theogravity! - Add Oh My Pi as a built-in harness, with omp detection, model/provider/thinking settings, and automatic per-launch MCP configuration. Document installation and the integration's session behavior.

• #426 cec0b06 Thanks @theogravity! - Add web previews, browser watching, saved web services, and virtual displays to subshell workspaces. Open each view in its own draggable tab beside the terminal, move it between splits, or use full screen. Closing a preview leaves its terminal and sibling views running.

  Node settings independently control web previews and virtual displays. Enabling web previews makes them available to the node’s subshells. Nodes can enable multiple display providers and choose a default. Virtual displays are requested at launch, use the default or a selected enabled provider, and check prerequisites before starting. Xvfb + VNC is the initial provider and requires Linux with Xvfb, x11vnc, and xauth. Presets can save a provider choice. Each subshell keeps its resolved provider and display size on restart, even when the node default changes. Disabling a provider prevents new displays and restarts without stopping existing displays. The server’s built-in node uses the same runtime as enrolled nodes.

  Expose feature permissions, display-provider selection, prerequisites, and view controls through MCP. The UI explains disabled features and links to setup documentation. Switching nodes clears incompatible agent and display selections, resets the working directory, and explains the corrections. Preview choices use compact rows with plain port numbers, and phone previews preserve the desktop workspace layout.

  Isolate web-preview scripts from dashboard credentials and browser storage, restrict viewers to authorized resources, and revoke views when access changes or subshells stop. Keep target cookies on the server, bound transport buffers and image dimensions, verify display process ownership before cleanup, and redact preview capability references from diagnostics.

• #447 f72a30b Thanks @theogravity! - Presets can now be switched off. A new toggle in the presets table parks a preset without deleting it: a switched-off preset disappears from every launch picker and from the MCP list_presets answer, and starting or restarting a subshell with one is refused until you switch it back on. Panes already running from it are untouched.

• #426 cec0b06 Thanks @theogravity! - Close a preview permission-downgrade race, bound image decoding and retained
  resources, and check transport backpressure before encryption. Verify display
  process identity before cleanup and document the additional security review.

• #426 cec0b06 Thanks @theogravity! - Document website previews, virtual displays, browser isolation, private preview links, and the preview architecture and protocol. Add screenshots captured from an isolated sample project.

• #426 cec0b06 Thanks @theogravity! - Explain how Mac users can use Preview with a Linux node, where to install
  virtual-display prerequisites, and which macOS features are unavailable.

• #426 cec0b06 Thanks @theogravity! - Add MCP Preview discovery, private connections, browser watching, and virtual-display launches. Include harness health, SSH/Preview settings, and live display prerequisite checks in node discovery, with owner-only access preserved. Document the workflow and capability-link security boundary.

• #426 cec0b06 Thanks @theogravity! - Require an authorized browser-watch registration before delivering frames and revoke watches that no longer meet view-only browser restrictions. Preserve virtual-display dimensions across restarts and refuse disabled displays before stopping a live subshell. Buffer early target greetings within bounded lane limits so virtual-display connections cannot lose their handshake.

• #426 cec0b06 Thanks @theogravity! - Cancel pending preview opens when access is revoked, and recheck authorization before publishing them. Keep CDP discovery on its requested loopback endpoint. Bound proxy response buffers, fragmented WebSocket messages, and target cookies, and prevent preview targets from installing dashboard reporting policies.

• #426 cec0b06 Thanks @theogravity! - Recheck live-screen subscriptions when revocation overtakes their permission check. Limit queued writes to preview targets that stop reading, and clean up node resources after uncertain preview-open replies.

• #426 cec0b06 Thanks @theogravity! - Rename apps and browsers to Web previews throughout the dashboard, API and MCP permission fields, node protocol, and documentation.

• #426 cec0b06 Thanks @theogravity! - Save HTTP or HTTPS services in Apps & screens, including services started outside a subshell. Open each in its own workspace tab, and remove saved connections without stopping their services. Manual connections work without a virtual display, including on macOS nodes. Node protocol 24 adds explicit destinations and certificate-verified HTTPS.

• #426 cec0b06 Thanks @theogravity! - Separate node permissions for apps and browsers from virtual displays. Apps and browser features apply to every subshell when enabled; virtual displays still require an explicit launch choice. Preserve existing grants, show feature-specific readiness, and enforce both switches on the server and node.

• #426 cec0b06 Thanks @theogravity! - Name the unreleased Apps & screens API resources views and expose MCP tools list_subshell_views, open_subshell_view, and watch_subshell_browser. Rename node readiness and enablement discovery, align viewer controls and permission labels, and document the persisted and protocol identifiers retained for compatibility.

• #426 cec0b06 Thanks @theogravity! - Update Zod to 4.6.7 and override Expo CLI’s older Zod dependency to remove the vulnerable version from the dependency tree.

• #426 cec0b06 Thanks @theogravity! - Link missing virtual-display prerequisites to the setup guide instead of
  listing installation instructions in the launch form.

@internal/desktop-server@1.6.0

Minor Changes

• #448 0c0691c Thanks @theogravity! - Add the Grok Build harness with CLI detection, launch presets, and one-time MCP registration. Each subshell runs a dedicated Grok agent process so its MCP tools inherit the correct credentials.

• #443 7c8fd34 Thanks @theogravity! - Add the BetterDisplay virtual display provider for macOS. Bundle a shared native display helper in both desktop apps, disabled by default and managed through a separate native settings panel. Require explicit local consent and macOS permissions, support immediate disable, and keep activation outside first-run setup and remote node/MCP controls.

  Reuse the authenticated screen viewer with bounded native capture and input, retain verified display ownership for cleanup and recovery, and document activation and macOS shared-desktop limitations in node settings.

  Recheck consent and permissions after native capture startup and on input, and close new displays when node policy changes during allocation.

  Keep uncertain creation records separate so retries can proceed, explain vanished displays, share probe cleanup guards, and encode frames away from the helper's UI thread. Show platform-appropriate provider settings and prevent equal-version release bundles from replacing each other's helper.

Patch Changes

• #446 a1adc0e Thanks @theogravity! - Add Oh My Pi as a built-in harness, with omp detection, model/provider/thinking settings, and automatic per-launch MCP configuration. Document installation and the integration's session behavior.
• Updated dependencies [cec0b06, 6d3ac61, cec0b06, cec0b06, cec0b06, cec0b06, cec0b06, 0c0691c, 7c8fd34, 7a7f9b4, cec0b06, a1adc0e, cec0b06, cec0b06, f72a30b, cec0b06, cec0b06, cec0b06, cec0b06, cec0b06, 3de3f67, cec0b06, cec0b06, cec0b06, cec0b06, cec0b06, cec0b06, cec0b06, cec0b06, cec0b06, cec0b06]:
  • @internal/server@3.0.0

@internal/website@0.2.19

Patch Changes

• #426 cec0b06 Thanks @theogravity! - Name the dashboard entry point Apps & screens and its picker Open app or screen, with matching setup guidance and documentation. Keep API and MCP identifiers stable. Simplify the website demonstration and support private development hostnames through local environment settings.

• #426 cec0b06 Thanks @theogravity! - Update Zod to 4.6.7 and override Expo CLI’s older Zod dependency to remove the vulnerable version from the dependency tree.

• #426 cec0b06 Thanks @theogravity! - Add a website preview demonstration directly below the mobile video, showing a real coding agent fixing project filters and checking the result beside its terminal.