Release Notes - v0.1.22

Features

Browser Integration: Added browser view support with Swift types, CDP screencast capabilities, and browser frame IPC handling
Permission System Overhaul: Introduced strict permissions mode with skill-based security, principal-aware rule matching, and version-bound approvals
Dynamic Skill Tools: Implemented dynamic skill tool loading system with TOOLS.json manifests and runtime skill registration
Enhanced UI Components:
- Added constellation mind-map tree with interactive canvas
- Implemented Identity panel with avatar and constellation view
- Added personalized empty state for new conversations
- Introduced inline image/GIF rendering in chat
Improved Onboarding: Split API key setup and model selection into separate steps with enhanced UX
Voice Features: Added fn+shift voice activation, voice onboarding step, and push notifications
Tool Management:
- Added integration_manage tool and Google OAuth setup skill
- Implemented contextual tool pill labels with file/command details
- Added retry functionality for failed message sends
Model Management: Added model selector in settings and /model slash command with highlighting
Activity Tracking: Enhanced Activity panel with side panel view, hover states, and diff coloring
Markdown Rendering: Added block-level markdown rendering in chat messages

Security Hardening:
- Fixed directory boundary enforcement in file path checks
- Prevented symlink escape attacks in bundle sandbox
- Added PII redaction to Sentry reporting
- Enforced request body size limits and attachment validation
UI/UX Improvements:
- Made sidebar archive button more prominent
- Fixed composer height reset when input is cleared
- Prevented tool chip overlap with long message text
- Improved sidebar scroll behavior and thread visibility
Authentication & Authorization:
- Required bearer token for HTTP server endpoints
- Fixed token-based authentication for IPC sockets
- Improved permission prompt handling with principal context
Tool Execution:
- Fixed skill tool registration reference counting
- Improved error handling in runtime proxy and HTTP server
- Enhanced tool timeout handling against invalid values
Performance:
- Optimized skill version hash computation to avoid unnecessary directory scanning
- Cached embedding backend instances globally
- Improved memory usage in test suites
Browser Tools: Fixed browser tool risk classification and removed deprecated captcha detection
Message Handling:
- Fixed message queuing and retry logic
- Improved Telegram edit handling and deduplication
- Enhanced error visibility and recovery

Build System:
- Added ESLint linting to gateway CI pipeline
- Updated macOS build requirements and Xcode preferences
- Improved parallel worker configuration (default to 12 workers)
Logging: Replaced console logging with structured Pino logging throughout CLI
Testing: Added comprehensive regression tests for security features and skill system
Code Quality:
- Resolved TypeScript type checking failures
- Fixed ESLint errors across codebase
- Improved error handling with proper type safety

Documentation: Updated architecture docs, security model documentation, and skill development guides
Feature Flags: Added FeatureFlagManager for VELLUM_FLAG_* environment variables
Configuration: Enhanced Sentry configuration with environment-based DSN loading
Cleanup: Removed deprecated tools and stale documentation