Skip to content

Changelog

Only user-visible changes are listed here, most recent first. For the full history, see the repository.

  • Unified CLI install. One installer endpoint (https://api.consortium.dev/install) that resolves the channel-correct package, plus real update advisories for the CLI — the download page and in-product hints now always show the right install line.
  • Provider accounts. Hold multiple accounts per vendor (OAuth subscriptions and API keys), synced end-to-end encrypted across your devices, with per-session account selection and optional per-credential server escrow for managed machines. Supersedes the single-key connect flow.
  • Passkey protection for web and desktop. Your encryption seed at rest can now be wrapped by a WebAuthn PRF passkey, with an unlock gate at boot — a settings toggle.
  • BYOK tool-capability filter and runner stream polish in the app’s session view.
  • Sessions sync overhaul. Strict message ordering with gap recovery, on-device message cache for instant session open, optimistic sends with per-session idempotency, and faster session start.
  • Two-factor authentication hardening. Durable recovery codes with step-up verification and administrative reset.

The External API (/external/v1) with PATs, OAuth 2.0 + PKCE, webhooks, and official SDKs; organizations with role-based access; Drive with encrypted file storage; the desktop app with bundled daemon; automations. See the repository history for details.