Changelog

What's New

The latest updates, improvements, and fixes to CludCode. Subscribe to our RSS feed to stay updated.

v0.6.23Latest

Workspace Sync, Graph Performance & iPad Desktop

  • →Workspace sync — desktop layout persists across web, iOS, and desktop clients via the agent
  • →Graph performance — adaptive layout iterations, 400-node cap, and MiniMap hidden on touch devices
  • →iPad desktop — standalone windows for containers, apps, graph, and more with app launcher dock
NewWorkspace sync protocol — window positions, sizes, and session names persist to agent and broadcast to all clients
NewiPad windowed desktop — standalone windows for containers, apps, projects, AI settings, and graph
NewApp launcher dock — categorized popover menu (Develop, Services, Intelligence, Monitor) with auto-dismiss
NewTerminal search — buffer search with match navigation and scroll-to-line in iOS terminal
NewGraph truncation indicator — shows count of hidden low-connectivity nodes when exceeding 400-node cap
ImprovedGraph layout scales iterations inversely with node count — 200 iters at 100 nodes, 50 at 400
ImprovedMiniMap hidden on touch devices to reduce DOM pressure on mobile Safari and iPad
ImprovedWorkspace saves debounced (1s) to avoid blocking I/O on rapid layout updates
ImprovedSession name lookup optimized — direct key access instead of copying entire name map
FixedMissing canonical kinds (containers, graph) added to web reverse map — prevents silently dropped windows from iOS
FixedRemoved dead code: unused agentSyncActiveRef, no-op setWindowsDirty alias, unused isConnected prop
v0.6.21

Code Intelligence Graph

  • →Tree-Sitter code analysis — parse, index, and visualize your entire codebase as an interactive graph
  • →ReactFlow canvas with force-directed layout, community clustering, and relationship-colored edges
  • →Cross-platform: web dashboard, iOS WKWebView, and 7 MCP tools for AI-assisted code understanding
NewTree-Sitter WASM parser — supports TypeScript, JavaScript, Python, Go, Rust, Java, C, C++, and C#
NewCode graph indexing pipeline — scan, parse, resolve imports/calls, detect class hierarchy, community clustering
NewInteractive graph visualization with force-directed layout and community-based node clustering
NewRelationship-colored edges — calls (blue), imports (green dashed), extends (purple), implements (yellow)
NewNode detail sidebar — file location with copy, signature preview, callers/callees/extends/imports groups
New7 MCP tools: code_graph_index, query, context, impact, detect_changes, list, search
NewFile filter panel — toggle visibility of files/directories on the graph canvas
NewiOS graph view — WKWebView-based renderer with Swift↔JS bridge and touch gestures
ImprovedEditor ↔ Graph mode toggle in ViewerWindow when project context is set
ImprovedDouble-click any graph node to jump to the source file at the exact line
v0.6.20

Security Fixes & CludDesktop Consolidation

  • →Security: patched symlink write bypass, tmux command injection, and image path traversal
  • →CludDesktop windows consolidated 17→13 — cleaner, more focused workspace
  • →Full-stack schedule protocol — create, manage, and view scheduled task results
SecurityFix symlink write bypass in file save handler — validates resolved path stays within project
SecurityFix tmux command injection via session names — strict alphanumeric sanitization
SecurityFix image path traversal in markdown resolver — rejects ../ sequences
NewMerge Preview into Browser window — iframe-based preview with device picker
NewMerge Config + Models into AI Settings — always-visible model list with collapsible sections
NewMerge Projects + Artifacts into Projects & Pins — tabbed window with graph integration
NewSchedule protocol — create recurring tasks, view results, delete from dashboard
ImprovedBrowser preview proxy: blocklist approach forwards all headers except security-sensitive ones
v0.6.17

File Viewer & Browser Preview

  • →Built-in code editor — CodeMirror 6 with syntax highlighting, markdown live preview, and multi-tab editing
  • →Browser preview — access your dev server UIs directly in the dashboard through encrypted tunnel
  • →Parallel terminal updates — unfocused terminals now receive live data instead of going stale
NewCodeMirror 6 editor with custom dark theme, language detection, and Cmd+S save
NewMarkdown live preview — Obsidian-style: hides syntax when cursor is elsewhere
NewMulti-tab file editing with tab bar, dirty indicators, and Cmd+W close
NewFile tree sidebar with lazy-loaded directory browsing and file type icons
NewBrowser preview window — URL bar, back/forward, refresh for dev server UIs
NewAgent TCP multiplexer forwards HTTP to local dev servers through encrypted tunnel
NewiOS: CodeMirror pre-built bundle in WKWebView with base64 JSON bridge
ImprovedUnfocused terminal windows now receive live data — no more blank terminals on tab switch
v0.6.15

Connection Registry, Skills & Local Models

  • →Multi-surface broadcast — web, iOS, and desktop all receive live updates simultaneously
  • →OpenClaw skill import — install AI instruction sets from GitHub repositories
  • →Ollama integration — use local LLMs through the REPL manager
NewConnection registry — multi-surface broadcast replaces single-socket, all clients get live data
NewShared PTY manager — single tmux control mode client per session with viewer reference counting
NewTerminal redraw on reconnect — captures existing pane content, eliminates blank terminals
NewOpenClaw GitHub skill import — URL-based install of SKILL.md instruction sets
NewOllama integration — auto-configure OpenCode with local Ollama models
ImprovedRemoved ttyd dependency entirely — replaced by native tmux -C control mode
ImprovedSession pruning — stale sessions cleaned when agent reports updated list
ImprovediOS: skill detail, search, install UI; model provider reorganization
v0.6.13

Code-Based Pairing & iOS Improvements

  • →QR pairing removed — replaced with simpler code-based pairing flow
  • →iOS: MLX-first AI routing — handles simple queries on-device, delegates complex tasks to backend
  • →Rathole auth recovery and proxy GET forwarding fixes
NewCode-based pairing replaces QR — install, pair with code, sync encryption key, connect
NewiOS MLX-first routing — on-device AI handles simple queries, delegates complex tasks transparently
NewAgent TUI: full-screen re-registration on token revocation, ConfigPanel backend switching
ImprovedMarketing pages refresh — expanded feature sections, architecture diagrams, handshake visualization
ImprovedInteractive AI Settings window — backend selector, model download/delete, API key input
FixedRathole auth recovery — detect failures on both stdout and stderr (v0.5 change)
FixedRelay proxy forwards Bearer-authenticated GET requests to orchestrator
FixedDesktop auto-updater: semver comparison prevents CDN cache lag from downgrading agent
v0.6.12

Security Hardening & Architecture

  • →Comprehensive fetch timeout hardening across all agent services
  • →REPL autonomy — AI coding tools run without artificial time limits
  • →iOS protocol alignment for session rename and PIN entry flows
SecurityAbortSignal.timeout on all agent fetch() calls — prevents indefinite hangs
SecurityCommand injection prevention in process-manager and scheduler
SecurityTmux session name sanitization — defense-in-depth shell injection prevention
SecurityUser ownership guard on PATCH device route
NewREPL delegation now runs without hard timeout — configurable per-request with 4h safety cap
NewREPL results persisted to memory when client disconnects mid-task
ImprovedRedis circuit breaker in relay orchestrator
ImprovedRathole exponential backoff with zombie PID detection
ImprovedStructured JSON logging for production observability
v0.6.0

ECDH Forward Secrecy & Cross-Device Execution

  • →ECDH X25519 forward secrecy — session keys never stored, ephemeral per connection
  • →Cross-device remote execution — run commands on one machine from another
  • →Token refresh with 24h JWTs and automatic rotation
SecurityECDH X25519 key agreement embedded in handshake — forward secrecy for all sessions
SecuritySession keys derived via HKDF-SHA256, discarded on disconnect — never stored
SecurityJWT lifetime reduced to 24h with automatic 20h refresh cycle
SecurityToken revocation support via dashboard device management
NewCross-device remote execution — zero-knowledge agent-to-agent commands through relay
NewTunnel auto-recovery — self-healing when relay restarts or Redis TTL expires
v0.5.0

Clu AI Assistant, iOS App & Desktop Mode

  • →iOS app with real E2E encrypted terminal, voice/text AI assistant, and iPad windowed desktop
  • →CluDesktop — windowed UI mode with draggable terminal windows in the web dashboard
  • →Multi-model AI routing — on-device MLX, Claude Code, Codex, Aider, and direct API
NewiOS app — real terminal access, container management, file browser, and AI assistant from your phone
NewClu AI assistant — voice and text input with 28 tools for file ops, containers, memory, and MCP proxy
NewiPad windowed desktop — draggable, resizable, snappable terminal windows with keyboard shortcuts
NewMulti-model routing — seamlessly switch between on-device MLX, REPL tools, and API models
NewAgent supervision with iOS Live Activities — approve AI plans from Dynamic Island
NewCluDesktop mode in web dashboard — spatial window manager with file explorer and containers
NewClawHub skills marketplace — install and manage SKILL.md instruction sets for AI tools
NewMemory store — persistent FTS5-indexed memories for Clu context across conversations
NewClipboard sync — bidirectional clipboard between iOS/web and agent
ImprovedQR pairing for iOS — scan code, enter PIN, connected in seconds
ImprovedBiometric unlock — Face ID / Touch ID for stored encryption keys
v0.4.0

Security Overhaul & Electron Desktop App

  • →Electron desktop app for macOS, Windows, and Linux
  • →Two-factor authentication (TOTP) for dashboard accounts
  • →Comprehensive security hardening — headers, CORS, JWT validation, encryption key validation
NewDesktop app — native Electron app with auto-registration and local WebSocket connection
NewTwo-factor authentication — TOTP setup with QR code and recovery codes
SecuritySecurity headers — HSTS, X-Frame-Options, CSP, and more via next.config.js
SecurityJWT_SECRET minimum 32 characters enforced at startup
SecurityEncryption key validated as 32-byte base64 at agent startup
SecurityRemoved wildcard CORS from MCP server
NewFile transfer — drag-and-drop uploads and downloads in the web terminal
NewSplit panes — iTerm-style horizontal and vertical terminal splits
ImprovedOnboarding tour — 5-step spotlight guide for new users
ImprovedMobile terminal keyboard with special keys (ESC, TAB, Ctrl+C, arrows)
v0.3.3

Session Management Fix

  • →Fixed critical bug where sessions accumulated on page refresh
  • →Sessions can now be properly closed and cleaned up
FixedSession accumulation bug - no more 30+ ghost sessions on refresh
NewSESSION_CLOSE protocol - properly kills tmux sessions when closed
ImprovedSession deduplication - matches UI sessions to remote tmux sessions correctly
v0.3.2

Security Hardening

  • →Critical fix: Terminal server now bound to localhost only
  • →Sync PIN no longer saved in plaintext on your device - only hash retained
  • →Improved compatibility with Node.js < 18
Securityttyd now binds to 127.0.0.1 - prevents network access to terminal
SecuritySync PIN now stored as hash only - was previously in plaintext on your device (not our servers)
ImprovedLog rotation - auto-truncate logs over 10MB
Fixedfetch() polyfill for Node.js versions before 18
FixedTerminal copy button in toolbar for reliable clipboard access
FixedTrial banner hidden for users who have purchased Pro
v0.3.1

Version Exchange & Auto-Updates

  • →Dashboard now detects outdated agents and prompts for updates
  • →One-click agent updates directly from the browser
  • →Automatic reconnection after agent restarts
NewVersion exchange protocol between dashboard and agent
NewUpdate banner with one-click upgrade command
NewAuto-reconnect after agent update completes
ImprovedSession persistence improvements
FixedKeyboard shortcuts now work reliably (Alt+1-9, Alt+T, Alt+W)
v0.3.0Major

New Architecture: ttyd + Rathole

  • →Complete rewrite with ttyd for rock-solid terminal handling
  • →Rathole tunneling for NAT traversal without port forwarding
  • →End-to-end encryption with AES-256-GCM
NewNew agent architecture using ttyd + crypto-proxy + rathole
NewEnd-to-end encryption - we cannot read your terminal
NewMulti-session support with tmux integration
NewSession tabs with keyboard shortcuts
SecurityMutual challenge-response handshake
ImprovedAuto-reconnect on network changes
v0.2.5

Dashboard Redesign

  • →New dark theme with improved readability
  • →Device sidebar with quick switching
  • →File explorer for easy navigation
NewComplete dashboard UI redesign
NewDevice sidebar with status indicators
NewFile explorer modal
NewAI tools launcher
ImprovedMobile-responsive layout
v0.2.0

Public Beta Launch

  • →First public release of CludCode
  • →Basic terminal access via WebSocket relay
  • →Device registration and management
NewWebSocket relay server
NewDevice registration flow
NewBasic terminal emulation
SecurityJWT-based authentication