Changelog

Features

• Per-session and per-cron model selection. Choose the model for a session or a scheduled job from a free-text model field on the cron form; the choice threads all the way through to the agent runner.
• boss rename. Rename a session from the CLI, with the same action exposed over MCP.
• Full chat control via MCP, CLI, and the hosted gateway. Manage and steer chats programmatically from any of the three surfaces.
• Clearer cron settings. Repo-settings automation toggles are grouped under an “Automations” heading, with more descriptive save/cancel labels.
• Stronger plugin trust. Plugins are now verified against a signed, SHA-256 manifest and a trusted-path ownership check before they load.

Improvements

• Finalize and repair errors are surfaced directly in the TUI and the web session list, so there is no more digging through logs to find out why a run stopped.
• Session environments are hardened with canonical BOSS_* variables set on every chat, and the session-context prompt is drift-proofed.

Fixes

• Paste now works in every TUI text field.
• The cron list is ordered alphabetically by name.
• Cron finalize is gated on the run actually completing, and stranded runs are recovered when a Stop-hook signal is lost.

Features

• Inline repo configuration. Set a repository’s options right on the add wizard, then open straight into its settings so the add and edit forms stay in sync.
• Agent-suggested titles. Cron finalize proposes meaningful PR and session titles instead of leaving the defaults.
• Honest auto-merge. A clearer auto-merge label plus a per-repository “automatically fix checks” toggle.
• Public security page. The marketing site gains a security page and footer link.

Improvements

• Repo automation toggles are aligned across the add and edit screens.
• A new bs-sweep-plan cron skill for scheduled planning work.

Fixes

• A successful repo add now routes to settings even if a background refresh fails.
• Stranded cron runs (logless or with a dead agent) are reliably reaped, and pausing a session now halts all repair, not just failing checks.

Features

• Steady-state reconciliation. The daemon continuously reconciles its read model to prevent phantom sessions from appearing.
• “Automate your environment” section. The homepage explains per-repo setup scripts so new users understand environment automation at a glance.

Fixes

• The cron form keeps its save action visible while you scroll.
• Each daemon derives a stable identity from a persisted machine UUID, making session ownership more reliable across restarts.

Features

• TUI agent mode for proof. A new stdio bridge lets the proof tooling drive the terminal UI to capture evidence of TUI changes.
• Video post-processing for terminal recordings. Proof now post-processes TUI videos for clearer playback.
• Automatic format-on-commit. A husky pre-commit hook formats staged files so commits stay consistent.

Fixes

• Cron sessions with no GitHub origin are cleaned up automatically.
• Read-model sessions are correctly scoped to live sessions.

Features

• bs-security-sweep skill. A read-only dry-run mode for surfacing security findings, plus a write path that proposes a fix, opens a PR, and watches the repair flow.
• Cross-run cap. The sweep limits how much it changes across runs so automated work stays reviewable.

Fixes

• Cron “no change” outcomes now correctly publish their session deletes.

Features

• Web settings shell. A left-nav settings area for Appearance, Billing, and Repositories, with the Stripe billing portal reachable in one click.
• Theme switcher. Choose Light, Dark, or System in the web app.
• “Initializing” session status. The TUI and web wizards clearly show when a new session is still running its setup script.
• More followable proof videos. Recordings gain slow-motion, captions, and ripple cues.

Fixes

• Theme selection survives a failed localStorage write and syncs across tabs.
• The Billing entry only appears for active or past-due accounts, and routes unsubscribed users to subscribe.

Features

• Durable cron completion. A new agent-log idle check determines when a cron run has finished, and cron overlap only blocks while a prior agent is truly active.
• Cross-model review. The implementation skill adds a Codex “outside voice” review round to catch issues the primary reviewer misses.
• Agent-driven browser proof. A new proof runner plus gallery and evidence links in the PR comment.

Improvements

• Mobile session UX and merged/archived session handling are refined.

Fixes

• Numerous cron reliability fixes: stale run pointers are cleared on start, finalize won’t reset a newer run, and live worktree locks are protected from stale takeover.

Features

• Hosted MCP gateway. Connect to Bossanova over an authenticated MCP gateway running through the orchestrator.
• Per-chat session context. Each chat is seeded with its boss session context, and cron chats are explicitly marked autonomous.
• Generated /boss command reference. The /boss skill’s command reference is generated directly from the CLI so it never drifts.

Improvements

• After merging, the TUI stays on the session detail instead of jumping away.
• Broad web and mobile UI/layout polish.

Fixes

• Several cron finalize correctness fixes around PR readiness and tag pushing.

Features

• Local MCP server and boss mcp commands. Run an MCP server locally and manage it with new subcommands and an installable background agent.
• Video proof capture. The proof tooling can record browser sessions and capture the terminal UI as video via VHS, embedded inline.
• Idle tracker sessions. Tracker sessions can start idle, awaiting a manual run.

Fixes

• GitHub login is guarded against email collisions (fail-closed), with case-insensitive lookup and a unique email index.
• Non-discoverable plugins are kept out of the agent picker.

Features

• Existing-PR and issue-tracker session types. Create a session from an open PR or a Linear/Sentry issue, in both the TUI and web, with live issue search.
• Graceful offline streaming. When a daemon is offline, the web app receives a clear “daemon offline” stream instead of hanging.

Improvements

• The bs-linear-implement skill is restructured (de-nested) for clarity.

Fixes

• WorkOS token refresh is single-flighted across stream openers to avoid redundant refreshes.
• Dependabot PRs are auto-merged after a completed repair session.
• New-session issue search no longer loops, and shows “Loading” on first load.