Changelog

Release notes are mirrored from the product repository’s CHANGELOG.md. Each entry covers the desktop app and its local engine together.

The v1 release publishes a signed, notarized macOS installer and a Homebrew cask. Installers are on the Download page.

1.0.2-rc1

First release candidate for 1.0.2, published on the preview channel for upgrade testing.

Moving large folders updates their directory identity without rewriting every descendant’s history. File operation completion reaches Files immediately.
New Move to Trash operations use native Trash recovery without first copying or hashing the tree. Undo requires the item to remain in Trash; existing retained recovery history keeps its previous guarantees.
Undoing a new create or duplicate preserves the actual output, including later edits, through native Trash. Copies retain no redundant full-tree backup.
Source history upgrades transactionally to directory identities, preserving saved pins and retained content while removing redundant checkpoint copies.
The previous “check for updates” preference now enables automatic checks and silent downloads, with installation on quit. Turning automatic updates off keeps manual update actions available.
Workflow runs pin sealed definitions and guidance. Project guidance overlays do not change a sealed run; retained shipped workflow versions remain available.

Commands marked as verification now follow the session’s network posture and approvals. They no longer lose all outbound network access, which blocked live checks against remote services with no way to approve them.

Managed secrets act as a vault: storing or reading a secret asks for your presence (Touch ID) wherever the request starts, including file writes and agent requests, not only in project configuration.
The document editor’s core runs as a native program alongside the engine.

Opening or editing documents no longer crashes the engine in signed release builds.
The app restarts its engine after an unexpected exit and says when it stops.

The credential vault opens on macOS. Release builds rejected the identity they had just stored in the Keychain, so 1.0.0-rc.1 could not start.
Reads outside the attached folders ask at every approval posture.
A refused write outside the write roots offers the enclosing repository.
Untagged report fences in a closing answer are read as report fields.

First public release candidate of Painted Wolf Code.
Sessions, tools, workflows, approvals, and mediated sandboxing managed by the local host — Apache-2.0 application code; see LICENSE and docs/licensing.md.

Painted Wolf Code 1.0 is here: our first stable release.