Hyperia v0.16.1

🔊 New: agents can speak — local, offline Kokoro TTS

The sidecar now embeds Kokoro-82M text-to-speech, running fully in-process
in Rust (ONNX Runtime statically linked, dictionary-based English phonemization,
audio straight to the speakers). No cloud, no API key, no telemetry.

• New MCP tool hyperia_spoken_summary + POST /api/tts — agents announce
  results aloud, framed as a radio transmission:
  "base, base, this is Severe Booby transmitting… over and out."
• Caller callsign auto-resolved from the calling pane/agent; recipient set via
  config.tts.recipient; frame: false speaks the raw text.
• Voices: af_heart (default), am_michael, am_puck, bf_emma, bm_george,
  af_bella, af_nicole; speed 0.5–2.0.
• The ~120 MB model downloads on first use from hyperia.nuts.services (GitHub
  fallback) to ~/.hyperia/kokoro/ and is cached — works offline after that.
• English pronunciation via the CMU dictionary (with case-folding), so it says
  what your agent wrote.

Fixes

• Pulse / re-poke: submits with a real Enter (CR) into agent panes — pokes
  actually send now — and idle detection keys off PTY-output staleness instead
  of screen heuristics, so a thinking agent is no longer false-flagged idle.
• New-pane picker: the W/S/A quick-launch hotkeys work immediately on a
  fresh tab — no click-into-the-pane required.
• quickEdit: a right-click that copies or pastes no longer also pops the
  terminal context menu.

Housekeeping

• Repo reorganized: sidecar helper crates vendored under sidecar/crates/,
  plan docs sorted, root de-cluttered; husky/git-hook tooling removed.
• .gitignore hardened with blanket secret/credential rules.
• All Windows binaries in the package remain Authenticode-signed (since
  v0.15.23); macOS builds signed + notarized.

Hyperia v0.15.23

Signing — every Windows binary is now signed

Previously only the installer and the main app carried a signature. This release
Authenticode-signs all executables in the package under DeepBlue Dynamics LLC:

• the Rust sidecar (hyperia-sidecar.exe)
• every node-pty binary (pty.node, conpty.dll, conpty.node, winpty.dll, winpty-agent.exe, OpenConsole.exe)
• native addons (native-reg, native-process-working-directory)
• the bundled Electron runtime DLLs (vulkan-1.dll, dxcompiler.dll, ffmpeg.dll, libEGL/libGLESv2, vk_swiftshader.dll, …)

No unsigned artifacts remain inside the package — this matters for Windows 11
Smart App Control and enterprise WDAC policies. macOS builds remain
Developer ID–signed and notarized.

Fixes

• Sticky notes — fixed an ownership lockout where a note created without a presented identity (stamped anonymous) could no longer be edited by its creator.
• Web panes — consent/ACL toasts no longer render behind a web pane.
• Command picker — pressing a hotkey right after opening a new tab now works without having to click into the pane first.

Build hygiene

The Windows sign hook now skips non-Windows binaries bundled by dependencies
(macOS/Linux prebuilds) quietly, instead of emitting a false "unsigned build"
warning — keeping the genuine unsigned-detection signal trustworthy.

Automated unsigned nightly build from canary (a5789e2ac9e9fe40d3a885a6afd88a9616ee0b9a).

These installers are not code-signed. Expect OS security prompts:

• Windows — SmartScreen warning; choose More info → Run anyway.
• macOS — Gatekeeper block; right-click → Open, or run
  xattr -dr com.apple.quarantine /Applications/Hyperia.app.

For signed, notarized releases use the tagged versions on the Releases page.

Hyperia v0.15.20

This release: the no-agent-configured greeting no longer tells you to paste API keys into the terminal — it shows a Configure button that opens the agent config page. Everything below shipped in the (unreleased) 0.15.19 line.

• macOS: opening a sticky while Hyperia is fullscreen no longer strips the menu bar / traffic lights and drops the app from Cmd+Tab (skip the process-type transform on setVisibleOnAllWorkspaces). Needs on-device verification.
  Big release: Doors (progressive tool disclosure), a top-to-bottom overhaul of the built-in agent, completion of the native web-pane migration, and a large agent-config / shell UX pass. ~105 commits since v0.15.5.

🚪 Doors — progressive tool disclosure

Hyperia exposes 120+ tools across two surfaces (the built-in ghost agent + the external MCP server). Doors keep a small always-on core visible and let the model open category "doors" on demand, so a 4B local model on an 8k window — or a token-billed cloud model — never faces the whole catalog.

• Ghost agent: 11-tool core + 8 doors, LRU cap (20 local / 24 cloud), auto-open on a closed-door call, door names callable directly. Live-measured tool payload dropped from a flat ~58 KB to ~6 KB core / ~11 KB with a door open.
• External MCP (opt-in): config.agent.mcp_tool_doors = "on" gates the 67-tool MCP surface the same way (default off — external agents keep the full catalog unless you opt in). Emits tools/listChanged. See docs/doors.md.
• Contract hardening: the agent never asks you to open a door (they're its own menu; consent lives at the API layer) — it searches, opens, and acts in the same turn.

🤖 Built-in agent

• OpenAI /v1/responses support for gpt-5-codex / *-pro / *-deep-research (they 404 on chat/completions).
• Central model registry (models.rs): one source of truth for defaults, endpoint routing, token-param naming, small-model classification, curated Ollama list. Provider defaults are now the top cheap/fast model each (Haiku / GPT-5-mini / Gemini-3-flash). Installed :cloud Ollama tags auto-offered.
• Ollama path: live thinking streaming (was ~60 s of silence), single-generation (ends 3× VRAM contention), required reply field + tool-turn silence (fixes self-talk), fast Escape mid-generation.
• Context: small models get an 8k budget so they stop overflowing; hard_trim_to_budget is an LLM-free overflow guard.
• Token Maximus config UI (the local downsizer) — enable/model, and disabled now truly means not-run (full tokens pass through).
• Anti-fabrication rule (no "Done." without the tool result), full-send default, open_web_pane routing, \r TUI submit, runaway-pane cap, host-OS anchor.
• /api/ghost/debug per-turn telemetry + headless /api/ghost/chat driving.

🌐 Web panes & Hyperia Agent

• Fixed: blank / un-right-clickable web panes — the .web_fit container's CSS wasn't applying, collapsing every web pane to zero height so the native view never showed. Load-bearing layout is now inline and can't be dropped.
• Legacy <webview> path fully removed (Phase 6); native WebContentsView owns everything.
• Live-uid resolution fixes the invisible context menu after pane adoption; mouse-out freeze-swap flash is dwell-gated.
• Hyperia Agent gets its own labeled, deduped tab; right-click "Hyperia Agent" everywhere; a /guide start page (DuckDuckGo/URL bar + MCP-add commands); background-tab bell + flash on agent updates (reuses the standard tab-notify).

⚙️ Config & shell UX

• Agent config rework: API-key [set] tag + in-box remove, Token Maximus section, Edit config → syntax-highlighted code sticky, per-provider service ports, Ollama port under the model, no more "unconfigure".
• Picker: W/S/A hotkeys (web guide / remembered shell / remembered agent) + version + one-line update command.
• Shell HUD: HYPERIA SHELL title, gear + red-✕ reset, badge metrics with subtle blue-flash, green-only model lights, TPS max/avg (measured from API usage so it works for cloud tool-call turns).
• Omnibox: bare words → DuckDuckGo (no more https://hello); hyperia.local installer script.

🛠️ Dev / stability

• Ended the launch restart-storm (electronmon now ignores renderer build outputs) and the duplicate-instance sidecar squash (single-instance loser hard-exits).
• scripts/dev.ps1: sweep → verify-zero → launch one stack.
• Stickys: open at default size; resizing no longer rewrites the global default.

Known follow-ups (tracked, not in this build)

• Web-pane Phase 3 remainder; web-pane pulse "watch & notify".
• Sailfish as a Token Maximus engine; agent-attributed shell turns; per-pane code editor.

Artifacts: Windows installer attached below. macOS / Linux build cross-platform via CI when this draft is published.

What's in it (the 55 commits), by theme:

• Pane Pulse / agent-coordination layer (headline): sidecar idle monitor, pane_on_idle self-callback, self-reported liveness (pane_busy/pane_idle), cross-pane pulse watchdog with persistence + restart-survival, clock-icon control on the pane band, submit toggle, specific-pane targeting, [rand] interval.
• Consent UX: centered window-level approval modal; agent keys held while you decide, auto-run on approve.
• Focus safety: terminal_focus no longer steals the human's view.
• Attribution: From: is now opt-in (attribute=true; Hyperia stamps the origin pane).
• Terminal correctness: PTY born at the real grid size (panel-TUI fix), copyOnSelect on by default, CR-submit >> fix, bracketed-paste for long Ink-TUI input.
• Fixes: tray-Quit lingering processes (#126), userData-dir-orphans-localStorage (#127), dead/unselectable tab, "No identity" recovery guidance, window closes when last tab closes, web-pane DuckDuckGo URL fallback.
• Plus: hyperia MCP CLI client, identity-token/provenance plumbing, installer fixes.

The first release under the Hyperia-Terminal name — the terminal app, now named distinctly from its hyperia-sidecar backend. Same application, updates in place (app identity unchanged, so existing installs auto-update). Windows is code-signed (Azure Trusted Signing), macOS is signed + notarized, Linux ships as AppImage + deb.

Highlights

• 🎛️ Stream Deck Plus support — a new companion daemon (tools/deck-mcp) turns a Stream Deck Plus into a physical control surface: focus/split/new-tab your panes from the touch strip and dials, switch apps from the keys.
• ⌨️ hyperia CLI — a first-class MCP client for scripts and lightweight agents: curated verbs (status, run, split, focus, open, cd, …), a doctor health check, and a guide. Build standalone with yarn build:cli.
• 🐚 Shell integration — panes report live working directory and running app, with safe cd from the picker and agents.
• 🎯 Agent focus that moves the pane — terminal_focus (and the CLI / Stream Deck) now switch to the owning tab and focus the terminal, entirely in-window — no OS-window stealing.
• 🧠 Maximus structured extraction — tool-result extraction uses JSON-schema structured output, reliable across models.

Terminal & panes

• Pane focus fix: terminal_focus selects the pane's tab and focuses it; consent requests switch to the target pane so the prompt is visible.
• Panes/tabs are addressed by name or id only — the positional a/b/c labels are gone (they confused agents).
• Web panes show load status in the label (404 / Unreachable / page title / host) instead of a placeholder; split + remount fixes.
• Picker: cd via the shell-state dispatcher, recent-path filtering.

Identity & consent

• New request_access tool cleanly separates identity (who you are) from access (consent to act on a pane).
• Consent panel is a contained card; consent-wait timing fixed; secret-redaction hardening.

Windows polish

• Taskbar/window/tray icon fixes: AppUserModelId set before window creation, tray uses icon.ico, explicit window.setIcon(), PNG→nativeImage decode.

Build & CI

• Windows signing degrades gracefully to unsigned (with a loud warning) if Azure Trusted Signing is unavailable, so an outage never blocks the macOS/Linux release.
• fail-fast: false + resilient release gate — one platform failing no longer drops the others.

Downloads

• Windows: Hyperia-Terminal-0.12.11-x64.exe (signed)
• macOS: Hyperia-Terminal-0.12.11-mac-x64.dmg · …-mac-arm64.dmg (signed + notarized)
• Linux: Hyperia-Terminal-0.12.11-x86_64.AppImage · Hyperia-Terminal-0.12.11-amd64.deb

The first release under the Hyperia-Terminal name — the terminal app, now named distinctly from its hyperia-sidecar backend. Same application, updates in place (app identity unchanged, so existing installs auto-update). Windows is code-signed (Azure Trusted Signing), macOS is signed + notarized, Linux ships as AppImage + deb.

Highlights

• 🎛️ Stream Deck Plus support — a new companion daemon (tools/deck-mcp) turns a Stream Deck Plus into a physical control surface: focus/split/new-tab your panes from the touch strip and dials, switch apps from the keys.
• ⌨️ hyperia CLI — a first-class MCP client for scripts and lightweight agents: curated verbs (status, run, split, focus, open, cd, …), a doctor health check, and a guide. Build standalone with yarn build:cli.
• 🐚 Shell integration — panes report live working directory and running app, with safe cd from the picker and agents.
• 🎯 Agent focus that moves the pane — terminal_focus (and the CLI / Stream Deck) now switch to the owning tab and focus the terminal, entirely in-window — no OS-window stealing.
• 🧠 Maximus structured extraction — tool-result extraction uses JSON-schema structured output, reliable across models.

Terminal & panes

• Pane focus fix: terminal_focus selects the pane's tab and focuses it; consent requests switch to the target pane so the prompt is visible.
• Panes/tabs are addressed by name or id only — the positional a/b/c labels are gone (they confused agents).
• Web panes show load status in the label (404 / Unreachable / page title / host) instead of a placeholder; split + remount fixes.
• Picker: cd via the shell-state dispatcher, recent-path filtering.

Identity & consent

• New request_access tool cleanly separates identity (who you are) from access (consent to act on a pane).
• Consent panel is a contained card; consent-wait timing fixed; secret-redaction hardening.

Windows polish

• Taskbar/window/tray icon fixes: AppUserModelId set before window creation, tray uses icon.ico, explicit window.setIcon(), PNG→nativeImage decode.

Build & CI

• Windows signing degrades gracefully to unsigned (with a loud warning) if Azure Trusted Signing is unavailable, so an outage never blocks the macOS/Linux release.
• fail-fast: false + resilient release gate — one platform failing no longer drops the others.

Downloads

• Windows: Hyperia-Terminal-0.12.7-x64.exe (signed)
• macOS: Hyperia-Terminal-0.12.7-mac-x64.dmg · …-mac-arm64.dmg (signed + notarized)
• Linux: Hyperia-Terminal-0.12.7-x86_64.AppImage · Hyperia-Terminal-0.12.7-amd64.deb

This release provides certificate signing for Mac and Windows as well as native Mac chip support for newer OSs.

Lots of new fixes, including colored tabs, shell pickers, Stickys notes and more.