ArgentAIOS Release Notes

Highlights

• The AI workforce is real. Worker Runtime v2 lands end-to-end: blank-slate ephemeral worker sessions with compiled role profiles (#452), a full lease lifecycle — claim/heartbeat/halt with true runNow semantics (#453), a work_report completion contract that lets a conductor demo COMPLETE on a local gemma model (#450), and a grading store with scorecards and a quantified promotion gate so a worker earns autonomy with evidence, not vibes (#463). The worker wizard mounts straight from the Workforce Board (#440), and local-model workers are viable thanks to native tool-call support with blank-slate prompts (#444, #447).
• One source of truth again. ArgentOS-Business merges back into core — business logic, dashboard surfaces, and runtime live in a single repo and ship together (#435).
• Approvals you can trust. Deny now denies, timeouts actually fire, failed sends fail loud, and toolsAllow is enforced end-to-end (#462). Cron approval buttons render and resolve (#457, #459), with a Telegram text-reply fallback when buttons aren't available, and the approval text-command path is refactored to be provably testable (#458).
• Rust daemons graduate from experiment to credible. Fail-closed bearer token auth on both shadow daemons — no token, no start, no route (#470); argentd answers canary receipt methods over WebSocket (#468); and the authority delegation seam is designed and locked after adversarial review …

Fixes

• Public curl | bash install no longer dies on the pinned pnpm. On a Mac with no compatible system Node, the installer provisions its own private Node runtime — but the pinned-pnpm activation invoked corepack/npm (both #!/usr/bin/env node scripts) without that Node on PATH, so they failed with env: node: No such file or directory and the install fell back to a mismatched global pnpm and aborted. The activation now puts the runtime Node on PATH, disables corepack's non-interactive download prompt (COREPACK_ENABLE_DOWNLOAD_PROMPT=0), and surfaces the corepack error instead of swallowing it.
• Dashboard (port 8080) builds again. The dashboard's vite build imports shared UI source that depends on @noble/ed25519; under the installer's --ignore-workspace install it was unresolved and the build failed. Declared @noble/ed25519 so it resolves for the dashboard bundle.

Highlights

• Argent's kernel learns to notice itself. New kernel-fitness substrate tracks engagement, surfaces "system unavailable" on shutdown, detects artifact-open via atime, and writes a stall composite ledger — the foundation for Argent to know when it's actually being used vs idle. (#388, #390, #391, #392, #393, #394, #395)
• Installer Mac path matures. install.sh now auto-installs Ollama on macOS (#397), the wizard writes kernel.localModel after a local-runtime pick (#398), and argent update rebuilds native modules after dependency installs (#396) so the post-update ABI-mismatch class of error stops showing up.
• Auth recovery hardened across both halves. Dashboard surfaces a recoverable banner instead of silently 401-ing when localStorage hits quota or the api-server rejects a rotated token (#417). Gateway-side tools (doc_panel, workflow-runner, workflow-execution-service) fall back to gateway.auth.token from argent.json so they stop failing with "Invalid token" after a token rotation (#422).
• Memory recall stops burying exact answers. New dominance guardrail in the MemU LLM reranker prevents the LLM from demoting a clearly dominant pre-rerank top in favor of broad identity facts that only sound related (#420 closes #418).
• Performance + correctness wave. AppForge bases.list cache stops the per-web-turn cascade (#409); sessions skillsSnapshot deduplication …

2026.5.6.3

Third micro release on top of v2026.5.6. 17 commits / 11 issues closed, combining the full TinyFish web toolkit (search + fetch + browser + agent), 1Password Service Account as a first-class secrets backend, and the pi-bridge cluster that unblocks the long-pending pi-ai 0.73.1+ bump (#182). No schema changes, no breaking API changes. Safe drop-in upgrade from v2026.5.6.2.

Highlights

• TinyFish becomes the recommended default web stack. Free Search + Fetch ship as the first-class default for every account (no API-key wrangling, no credits), and the paid Browser API + Agent API now ship as first-class agent tools alongside them. Operators get a working web stack in 30 seconds; agents can drive a real browser (Playwright/CDP) or describe goals in natural language and have TinyFish navigate / click / fill on their behalf.
• 1Password Service Accounts as a first-class secrets backend. Per-key op://Vault/Item/field references on any entry in service-keys are now detected at resolve time and resolved through the op CLI. Existing literal values continue to work unchanged — fully additive and opt-in per key. Tokens are never logged, output is always masked, and 5-minute in-memory caching keeps the resolver cheap. argent secrets backend 1password setup, doctor, and test <variable> ship with the CLI; argent doctor reports 1Password health only when refs exist. …

2026.5.6.2

Second micro release on top of v2026.5.6. 18 issues closed, all bug fixes, install/update hardening, and ergonomics — no schema changes, no breaking API changes. Safe drop-in upgrade.

Highlights

• Auto-close-on-dev-merge pipeline is live. Issues referenced with closes/fixes/resolves in commits that land on dev now auto-close, even though dev isn't the default branch. Catches the long-standing pain of having to manually close issues after PR merges (#180).
• AOS subctl connector lands. Bridges ArgentOS workflows and the AOS worker harness to subctl — multi-account AI subscription control plane. Mirrors the aos-telegram connector pattern. Read commands work in readonly mode; write commands gated behind mode=write (PR #192).
• Install + update get serious hardening. Five compound install fixes: legacy pnpm symlink sweep, postgres@17 restart-not-start + port-conflict diagnosis with ARGENT_PG_REPURPOSE_EXISTING opt-in, pg_dump snapshot before takeover, dashboard node_modules/react postinstall sweep, and dashboard provider-catalog populated from seed at build time.
• Type-identity work continues. AgentMessage/StreamFn between argent's local pi-types and @mariozechner/pi-agent-core are unified — tsc baseline shrinks 267 → 249. The band-aid in #256 …

2026.5.6.1

A micro release on top of v2026.5.6. 29 issues closed, all bug fixes and ergonomics — no schema changes, no breaking API changes. Safe drop-in upgrade.

Highlights

• argent update is fully unblocked. The tsc --noEmit pre-bundle gate introduced in v2026.5.6 was rejecting updates past dev.36 because its identity comparison didn't account for tsc's environment-dependent error message truncation. The gate now uses a path-length-independent fingerprint, so updates run from any checkout depth.
• Install + update hygiene pass. Eight issues that made fresh installs and in-place updates fragile are fixed: missing LaunchAgents, port-collision during gateway restart, legacy env vars in the gateway plist, residual admin surfaces in public Core, doctor inconsistency during transitions, Google Workspace preflight resolution, gateway-token rotation on update (now preserved), and localStorage quota issues from cron-jobs cache.
• Local-model UX truth-telling. LM Studio dropdown now distinguishes loaded vs catalog-only models (previously listed everything as if usable). New "LM Studio Models" section on the Models page parallels Ollama. Routing-suggestion engine filters to currently-loaded models only. agent_status distinguishes "not-configured" from "configured-but-down" for Ollama.
• Auth that self-heals. auth-profiles.json now repairs itself when the …

2026.4.30

Highlights

• A more reliable personal AI operating system. This release promotes the active Core dev line to the public main branch, bringing the newest gateway, workflow, dashboard, memory, connector, and installer improvements into one stable release.
• Workflows now feel closer to an operator-ready automation surface. The canvas has better run visibility, JSON/YAML import/export, owner-operator templates, richer binding reports, connector-backed destinations, approval records, run history, and clearer failure feedback.
• Reminders become part of the schedule system instead of a separate timer stack. Schedule items can now carry reminder intent and delivery targets, including in-app, voice, Telegram, Slack, email, and DocPanel routes where configured.
• AppForge and Argent Tables move toward a true personal workspace builder. The shell now supports more honest Live/Preview/Declaration labels, native base and table onboarding, typed field editing, saved table views, record add/edit/delete flows, and reload-persistence proof.
• AOS connectors get a large service-key-first expansion. Core now includes readiness metadata and harness-backed connector work across tools such as Slack, Teams, Discord Workflow, Airtable, Buffer, Hootsuite, Monday, Zapier, WordPress, n8n, HubSpot, Make, PayPunch, CallScrub, and more.
• Realtime voice and browser automation foundations move forward. This …

April Core stabilization release

This release moves the last several days of Core stabilization work onto the stable update rail. It is bigger than the short changelog summary: the range from v2026.4.18.3 to v2026.4.25.1 includes Marketplace becoming a real Core capability, the public install/update path being repaired, Core dashboard surfaces being restored, a large docs vault being published, provider routing fixes, migration tools, and the first observable Rust shadow runtime lane.

Marketplace and Core tools

• Marketplace is now a first-class Core tool surface, not a docs-only or legacy skill path.
• Marketplace browse/install claims now require real marketplace evidence, preventing the agent from claiming package availability without tool-backed proof.
• Legacy ClawHub paths were retired from the Core tool flow in favor of argent marketplace.
• Marketplace package installs now support connector harnesses.
• Cognee ships as an AOS Core connector with a machine-readable connector artifact and runtime validation.
• Personal Skills are visible in public Core again.
• Core family agents are exposed without requiring manual subagent allowlists.
• Public Core tools now default to allowed unless the operator explicitly denies or marks them ask-first.

Install, update, and release rail

• Hosted installs now stay outside pnpm workspace resolution, keep clean source checkouts, and identify the current Core build correctly. …

Summary

This release ships a major upgrade to the Argent macOS app and Core runtime, including Personal Skills, a cleaner Core Intent experience, and a more stable day-to-day local runtime. The result is a sharper operator experience, better learned behavior over time, and a signed/notarized Mac app release that is ready to install.

Highlights

• Personal Skills Argent can now learn operator-specific procedures as reusable Personal Skills. These skills can be captured from real work, reviewed, reinforced through successful usage, and surfaced back into runtime behavior so the system gets more aligned over time.

• Intent Lite for Core Core now includes the slimmed-down Safety Rules intent experience, giving operators a simpler, more approachable control surface without requiring the full advanced governance console.

• macOS App Improvements The Swift menubar app has been rebuilt and shipped as a signed and notarized release. This update improves launch reliability, menu bar behavior, dashboard access, and local gateway attachment.

Improvements

• Improved Personal Skill lifecycle behavior, including candidate review, procedural structure, usage reinforcement, and decay.
• Improved runtime handling of learned operator procedures so relevant Personal Skills can influence execution more consistently.
• Improved packaged macOS app connection behavior when local auth state has gone stale. …

Summary

This release updates the Swift macOS Argent app and stabilizes the local runtime path before the planned Rust gateway work. It restores a usable Core surface, closes the recent conversation crash lane, and ships the current signed macOS app artifact as the latest public build.

What Changed

• Updated the Swift macOS Argent app and shipped a new signed Argent.app / DMG artifact.
• Restored the Core-safe Intent surface so Core shows the slimmed-down Safety Rules experience instead of exposing the full governance pane.
• Tightened agent prompt/runtime behavior so workspace notes no longer imply tools that are not actually callable in the current session.
• Exported the current validated private ArgentOS state into public Core and aligned the public version to 2026.4.18.1.

Fixes

• Fixed packaged macOS app left-click/menu bar behavior.
• Fixed stale packaged-app gateway auth fallback so rejected cached device tokens retry correctly.
• Fixed false-positive gateway restarts when toggling the consciousness kernel by comparing nested config arrays/objects structurally.
• Fixed recent assistant crash paths that were surfacing as Cannot read properties of undefined (reading 'filter') during normal conversation.
• Fixed the operator-lane Atera availability mismatch so the agent degrades honestly instead of inventing unavailable legacy ticket-query tools. …

Summary

ArgentOS Core is now a real cross-platform release. v2026.4.11.1 turns Linux into a first-class install target alongside macOS, hardens scheduled workflow reliability, and ships a cleaner public Core surface by stripping out company-specific packs and proprietary connector surfaces that did not belong in the public runtime.

Highlights

• Linux is now a real Core install target

  • Public Core is documented and validated on Ubuntu with the hosted shell installer.
  • The Linux path now reflects the real topology users should expect: user systemd, Gateway on 18789, Dashboard API on 9242, PostgreSQL 17 on 5433, and Redis on 6380.

• Validated on real hardware, not just CI

  • This release was validated on an Apple M3 Ultra Mac Studio and an Ubuntu host running the full dedicated PG17 + Redis stack.

• Cleaner public Core boundary

  • Company-specific dashboard packs were removed from Core.
  • Proprietary Holace, CallScrub, ClientSync, Lion Report, and PayPunch connector surfaces were removed from the public Core candidate.

• Scheduled workflows are safer by default

  • Summary-only cron jobs no longer fail just because they do not specify an outbound delivery target.

What Users Get

• A clearer hosted install story on both macOS and Linux.
• A public Core surface that is cleaner and more aligned with the open-source runtime.
• More reliable scheduled task behavior for isolated agent jobs. …

Summary

Fresh public-core installs now bring up the dashboard API contract correctly, so the dashboard no longer comes up half-alive with missing settings routes.

What changed

• restore dedicated dashboard API bootstrap during the hosted installer flow
• persist the dashboard API skip flag through gateway service env generation
• verify the installer route contract for:
  • /api/health
  • /api/settings/dashboard/surface-profile
  • /api/settings/load-profile
  • /api/settings/auth-profiles
• sync the live website installer to the same recovery logic
• bump the public core runtime version to 2026.3.30.4 so the CLI matches the release tag

User-visible fix

Fresh installs should no longer show 404/400/500 failures for dashboard startup routes such as surface profile, load profile, auth profiles, and related settings fetches while chat still works.

Validation

• pnpm install --frozen-lockfile
• pnpm test src/install-hosted-dashboard-api.test.ts src/dashboard-surface-profile.test.ts
• pnpm build
• website: pnpm install --frozen-lockfile && pnpm build

Upgrade notes

• existing users can update with: argent update
• fresh installs from https://argentos.ai/install.sh now include the same dashboard API recovery path

Summary

This release restores the native macOS Swift app handoff to the public Core installer while preserving the fresh-install recovery fixes from v2026.3.30.2.

What Changed

• The public Core macOS installer downloads and installs Argent.app again.
• The first-run handoff now offers Argent.app as the primary macOS experience again.
• Browser/dashboard handoff remains available as a fallback if the native app launch fails.
• The PostgreSQL schema bootstrap and master-key recovery fixes from v2026.3.30.2 remain in place.

Fixes

• Fixed the regression introduced by removing Argent.app from the public Core installer path.
• Fixed the macOS first-run flow so Public Core once again includes the Swift app as part of Core.

Known Issues

• Older machines still using a pre-2026.3.29.32 updater may require one final manual sync if they hit the earlier restore control-ui updater bug.
• Fresh installs still depend on the hosted installer and website installer staying in sync; this release includes that same-session website sync.

Upgrade Notes

• Existing users can update with argent update.
• On macOS, fresh installs should again offer the native Argent.app path instead of browser-only handoff.
• Public tag: v2026.3.30.3
• Public commit: 1d8c65cea602094fc0b1d3063f2eaa3857440f11

Summary

This release fixes a fresh-install regression in the public hosted installer so a new Core install does not finish in a partially initialized state.

What Changed

• The hosted installer now creates the PostgreSQL schema tables during post-install instead of warning and continuing.
• The installer now uses the daemon install path to bootstrap the master encryption key on fresh machines.
• Public Core includes the new ensure-pg-tables helper scripts used by the installer recovery path.
• The public runtime version is bumped to 2026.3.30.2.

Fixes

• Fixed fresh hosted installs that could complete without the required PostgreSQL tables.
• Fixed fresh hosted installs that could complete without a usable master key for secrets.
• Fixed the installer success path so it hard-stops with actionable diagnostics instead of claiming success after a broken bootstrap.

Known Issues

• Older machines still using a pre-2026.3.29.32 updater may require one final manual sync if they hit the earlier restore control-ui updater bug.
• The website installer must be kept in lockstep with hosted installer changes; that sync is being shipped in the same release session.

Upgrade Notes

• Existing users can update with argent update.
• This release is primarily a fresh-install/installer-path repair; no manual migration is expected for healthy existing installs.
• Public tag: v2026.3.30.2
• Public commit: 9f407f7c52f4d0aaf397212ae950f2b25c90bfbe

Summary

This release ships the public Core installer fixes for GitHub issue #89 and GitHub issue #90, removes the licensed macOS app handoff from the public Core hosted installer, and bumps the public runtime version so installed builds report 2026.3.30.1 cleanly.

What Changed

• Hardened the hosted installer's corepack detection so it no longer treats a broken corepack shim as usable pnpm.
• Switched the public macOS hosted install handoff to the local dashboard/browser flow instead of downloading or launching /Applications/Argent.app.
• Preserved public-Core source-install compatibility after export by rewriting argentos@workspace:* references back to link:../.. in the affected extension and package manifests.
• Bumped the public Core runtime version to 2026.3.30.1 so the shipped binary and the public tag match.

Fixes

• Fixed hosted installer failures that printed Internal Error: not found: corepack when corepack existed but could not serve pnpm.
• Fixed public-Core pnpm install failures caused by exported manifests resolving argentos@workspace:* inside the public workspace.
• Fixed the public hosted installer so it no longer installs or launches the licensed Argent.app bundle.

Known Issues

• Machines still running an updater older than 2026.3.29.32 may need one final manual sync before future argent update runs are fully self-healing. …

Public Core family-agent visibility repair.

Included:

• Org Chart and Workflow Map no longer filter out main
• unassigned family agents now land in a visible Core lane instead of disappearing
• argent remains the center/root node rather than duplicating into team clusters
• source-level lock tests added so main/family visibility and operations-vs-workforce routing cannot silently regress

Validation:

• pnpm test src/dashboard-surface-profile.test.ts
• pnpm build
• cd dashboard && npx vite build
• same build checks passed in argentos-core

Public Core contract repair release.

Included:

• restore Gateway and Database settings surfaces in Public Core
• keep Workloads in Operations while keeping Workforce out of Core
• unblock Public Core API routes required by the dashboard for gateway/database/load-profile
• add PostgreSQL base-schema bootstrap in PgAdapter.init() so memory, knowledge, and MemU do not fail on partial PostgreSQL installs
• preserve the existing auth/proxy fixes from earlier releases

Validation:

• pnpm test src/dashboard-surface-profile.test.ts
• pnpm build
• cd dashboard && npx vite build
• same build checks passed in argentos-core

Public Core surface lock release.

What changed:

• stop Public Core from falling back to full surface mode when /api/settings/agent/raw-config is blocked
• add a dedicated dashboard surface profile endpoint for safe Core startup
• restore main alignment docs by resolving the configured workspace path / ~/.argentos/workspace instead of only legacy workspace-main
• remove the business workload/jobs lane from Public Core operations tabs
• add Core surface contract coverage for operations tab allowlisting

Validated with:

• pnpm test src/dashboard-surface-profile.test.ts
• pnpm build
• cd dashboard && npx vite build