Release Notes - v0.1.17

Features

• Vellum Skills Catalog: Added vellum-skills catalog with telegram-setup managed skill for easy Telegram bot configuration
• Interactive CLI: Added default main screen to interactive command-line interface
• Activity Panel: New activity panel for tracking tool call progress with timeline layout, tool-specific icons, and auto-scrolling
• App Builder Enhancements:
  • Added app gallery with preview thumbnails and built-in example apps
  • Multi-page/multi-view app support with dark mode and system theme matching
  • Cloud sharing API for uploading/downloading .vellumapp bundles
  • App forking capabilities to create local copies of shared apps
• Dynamic UI System:
  • Added widget JavaScript library for interactive dynamic pages
  • Contextual workspace composer with refinement capabilities
  • Auto-routing of dynamic pages to workspace with floating overlays
• Memory System:
  • Dynamic profile injection per conversation turn
  • Conflict resolution with clarification flow for ambiguous contradictions
  • Relation-aware entity recall expansion with configurable budget overrides
• Reminder System: Added reminder tool with create/list/cancel actions and persistent scheduling
• Swarm Orchestration: New swarm_delegate tool for parallel task orchestration with DAG scheduling and synthesis
• Credential Management:
  • Secure credential broker with policy enforcement
  • Browser credential filling with approval flow
  • One-time send delivery for enhanced security
• Workspace Features:
  • Multi-select actions in UI surfaces
  • Workspace context injection with dirty state tracking
  • Share button with copy link and native share sheet
• Screen Watching: Added screen watch functionality with detailed analysis and commentary
• Provider Failover: Automatic failover between LLM providers with health checking

Fixes

• UI/UX Improvements:
  • Fixed composer height calculation and scrolling behavior
  • Improved thread sidebar with resizable drag handle
  • Enhanced chat message rendering with proper tool call ordering
  • Fixed attachment handling and display in chat
  • Better error handling with actionable toast notifications
• Performance Optimizations:
  • Eliminated redundant filesystem reads with memoization
  • Optimized memory recall with early termination
  • Improved IPC message handling with zero-copy blob transport
• Stability Fixes:
  • Resolved race conditions in DaemonClient deinit
  • Fixed timeout handling to prevent overflow errors
  • Improved session state management and cleanup
  • Enhanced error classification and recovery
• Security Enhancements:
  • Added SHA-256 content hash verification for skill downloads
  • Improved SSRF protection for external requests
  • Enhanced secret scanning with content block coverage
  • Hardened credential storage with atomic writes

Infrastructure

• Build System:
  • Added macOS build checks in PR CI workflow
  • Improved hot reload capabilities for development
  • Enhanced test coverage with regression suites
• Code Quality:
  • Migrated to generated Swift IPC models from TypeScript contracts
  • Added automated drift checking between TypeScript and Swift types
  • Extensive refactoring to remove dead code and improve maintainability
• Testing:
  • Added comprehensive integration tests for sandbox/host parity
  • Enhanced memory system test coverage
  • Added security invariant tests for credential hardening

Other

• Documentation:
  • Updated architecture documentation for new systems
  • Added credential storage security documentation
  • Comprehensive sandbox and workspace documentation updates
• Configuration:
  • New workspace layout with migration system
  • Enhanced sandbox configuration with Docker backend support
  • Improved default settings for memory and conflict resolution systems