One of the coolest things about 𝚏𝚡 is that it auto-upgrades, and 𝚌𝚝𝚛𝚕+𝚐 restarts + resumes the chat.

Also, that 0.0.10 is much, much faster for longer sessions 😊 https://t.co/vsf8v0KT3C https://t.co/mnEBbvz529

fx changelog

Source: https://fx.sh/changelog

v0.0.10

Sep 14, 20266.17mibfx now completes turns up to 1.6× faster and starts model requests up to 2.5× faster.

Improvements

• Speed gains vary with session length and usage. Longer sessions improve the most.
• Shell failures now give the model clearer recovery guidance.
• /tracenow provides better diagnostics for session-title issues.
• System notices have a cleaner visual treatment.

Bug Fixes

• Resume recovery now restores shell activity more reliably.
• Scrollback retention is more reliable when resuming long conversations.
• Resolved questions and answers now render cleanly across terminal widths.

Security

• MCP errors now have stronger secret protection.

v0.0.9

Sep 12, 20266.17mibfx can now use a frontier model for steering, then delegate to cheaper models to implement. Subagents keep running while you steer, can have different models and reasoning levels, and take feedback mid-task. We’re accomplishing this without any new commands or concepts, just chat with fx.

Breaking Changes

• For simplicity,\!in the composer is just prompt text now. It no longer starts a terminal session. Commands go through the agent and the usual approval flow.

New Features

• Subagents can use their own model and reasoning effort. Use GPT-6, Astra, or Fable 5.1 to steer, then delegate implementation to Kimi K3.
• You can send feedback to a running named subagent without interrupting its current tool. The final result still comes back to the parent conversation.
• New conversations get a short title from the first prompt. Turn generated session titles off in/settings.
• Pressctrl\+pwhile writing to open the model picker. Your draft and attached images stay where they are.
• ACP clients can set reasoning effort on supported models. They can also replay earlier tool calls as structured events.
• New runnablelibfxexamples forNode.js,browsers,Next.js, andNuxt.

Improvements

• fx \-candfx \-\-continuenow resume the workspace’s remembered conversation without a full session scan.
• Compaction now shows in the activity row. If you send a message while it’s running, it waits, then runs with the compacted context.
• Assistant Markdown now renders nested emphasis, links, code spans, lists, fenced code blocks, and entities the way GitHub does.
• @~,@\., and@\.\.open the home directory, workspace, and parent directory. No trailing slash needed. File suggestions also stay put while you browse and refine them.
• Escape needs a second press within one second to interrupt active work. ctrl+c clears a non-empty composer first; with an empty composer, it interrupts active work, then exits fx on the next press.

Bug Fixes

• Running subagents keep going if a file lookup fails. Follow-up messages also don’t leave named subagents stuck.
• AI Gateway now applies the reasoning effort you selected on chat requests. Prompts with images no longer fail on the v4 endpoint.
• Long replies no longer shuffle transcript rows or overwrite the last character on a full-width terminal line.
• MCP OAuth now works with servers that support PKCE but leavenoneout of their metadata, including Slack MCP.

Security

• Auto mode now checks which terminal session it’s sending input to, including after a resume.
• Auto mode no longer reuses an earlier safety-review decision when judging a later action.
• Auto mode no longer raises false cautions when you use a credential with the service it’s for, or with a local test process.

v0.0.8

Sep 7, 20266.01mibfx is smaller, simpler, and faster. libfx initialization in Node / browser is over 40× faster; fx binary is 2.8% smaller. fx uses a simpler, more reliable shell, context compaction is optimized per model, and steering is now the default.

Breaking Changes

• fx now uses a smaller shell tool with 75% fewer actions (3 vs 12), replacing the old terminal tool.
• Enter now steers active turns instead of queuing follow-ups, and ctrl+enter does the same.
• The subagent interface now has 67% fewer commands (2 vs 6), with direct delegation replacing the ctrl+x manager.
• The memory tool has been removed without deleting existing saved memories.
• createFxAgent() now exposes prompt, checkpoint, and close instead of the old session, model, and config APIs.
• createFxAgent() now takes apiKey and an optional model directly; Agent configuration through env is no longer accepted.
• capability_search replaces the retired skill_search and mcp_search_tools.
• The public --record startup flag has been removed.

New Features

• Compaction now keeps recent tool exchanges intact, preserves the full transcript, and continues the same turn in a fresh context window.
• fx can run one-off tasks or continue named agents directly from the conversation.
• The shell now supports up to 64 live executions.
• /mcp now opens a terminal browser for servers, tools, resources, prompts, authentication, and project trust.
• MCP tool images now reach supported models and remain available after resume.
• JavaScript hosts can now add their own tools, MCP clients, and skills across Node, Bun, and browsers.
• The libfx package has no runtime dependencies; host-supplied tools and MCP clients may have their own.
• ACP image prompts now support up to 3.75 MiB per image.
• /provider, /setup, and /login now open the same column picker for providers, sign-in methods, API keys, and Vercel teams.
• libfx now provides listModels() for explicit model discovery without creating an Agent.
• Embedding hosts can use FX_AUTH_MODE=host-managed without reading or writing local provider credentials.
• --full-access and /permissions full-access replace YOLO in the UI and commands; the old aliases still work.
• fx ask --json now reports input and output tokens.
• libfx now supports both ESM imports and CommonJSrequire\(\)in Node.
• Native libfx Agents now run in Next.js 15 and 16 server routes without extra bundler configuration.
• getBackendInfo\(\)now reports available libfx backends and loading errors without creating an Agent.
• fx session recover <id\>can recover damaged conversations into a new session while leaving the original intact.

Improvements

• Native Agent initialization is tens of times faster, dropping from hundreds of milliseconds to single digits.
• Native streaming no longer waits on the polling bridge.
• Synthetic native host-tool round trips measured 3.10 ms in Node and 1.56 ms in Bun at p95.
• In the current benchmark, all 22 measured TUI interactions complete within 15 ms at p95 across 50 samples each.
• CLI startup now takes about 0.5 ms before terminal initialization.
• ctrl+o now shows timestamps, complete tool details, errors, and per-turn token usage in one view.
• Skill and MCP searches now reject weak matches while preserving exact names and technical terms.
• AI Gateway now uses Exa by default for web searches, with Parallel as the fallback.
• AI Gateway caching is now enabled automatically for agent conversations.
• New sessions use shorter 12-character IDs while existing IDs remain resumable.
• File and model pickers remain available while fx is working, and model changes apply to the next turn.
• Steering messages now appear in chat immediately and wait only while a tool is running.
• Codex and Grok model lists refresh in open terminal and ACP sessions without requiring their CLIs.
• Stable Wasm sources compile once per JavaScript realm while each Agent keeps separate state and memory.
• MCP servers now connect independently, and optional servers start only when needed.
• Subagent tasks and replies now appear in chat, with failures and partial results preserved.
• The /resume picker now reuses cached session summaries instead of rescanning every time.
• Terminal tabs now show the fx version and workspace folder.
• libfx now pauses large streams when hosts fall behind instead of losing output.
• ctrl+c now clears the composer first and cancels active work only when the composer is empty.
• Long saved conversations now resume faster, including repeatedfx \-ccontinuation.
• Scoped project instructions now refresh before continued turns, including rules changed since the last tool call.

Bug Fixes

• Models with native image support no longer receive the redundant vision tool.
• Terminal fx ask now loads approved MCP servers before the first model request.
• The footer now shows Fast mode only when it matches the active model.
• fx now keeps replies in the language of the latest user request.
• AI Gateway requests can run for up to 30 minutes, and timed-out streams pause instead of retrying automatically.
• Partial command output and known process status are preserved when output reading fails.
• Forced shell termination now stops waiting after 6 seconds and reports when termination cannot be confirmed.
• Tools that fail before execution now show why they did not run.
• Cancelling an ACP prompt now stops the work instead of leaving it running.
• Gateway, Codex, and Grok no longer fall back to another credential source when the selected one is unavailable.
• New sessions remain saved when another fx process is updating session history.
• Older sessions now upgrade without losing conversation history or tool output.
• Explicitly requested skills now load completely and show their status before the reply begins.
• Cancellation feedback now appears immediately after esc, while completed tool results remain intact.
• Invalid shell requests now explain the argument problem and suggest a correction only when the repair is unambiguous.
• Recovered responses no longer join text from separate attempts or repeat completed tool calls.
• Provider selection remains responsive while credentials and models load, and sign-in can resume after logout, cancellation, or credential failures.
• Large session reads no longer block concurrent saves.
• Cancelled libfx prompts stop waiting on host tools and cannot affect later turns.
• Native streaming preserves Unicode split across output chunks and continues after delayed cleanup.
• Closed libfx Agents now release native threads, notification descriptors, and Wasm instances.
• Pending MCP authentication no longer blocks a newer reload.
• ctrl+o history now survives ctrl+l, terminal resizing, reopening, compaction, and resume without missing or duplicate entries.
• Provider streams and parallel tool calls no longer lose or duplicate text, reasoning, and tool results.
• Prompt images now survive tool calls and resume without falsely exhausting context.
• Image recovery now uses saved attachments after restart, even if the original files move or change.
• Missing or corrupt saved images now report an error without discarding the pending request.
• Manual compaction now refreshes the selected login and keeps the conversation unchanged if sign-in fails.
• Cancelled tools no longer prevent manual or automatic compaction, including after resume.
• Long reasoning sessions no longer hit false context limits or leave too little room for compaction.
• fx \-cnow skips incomplete sessions and reports errors for the selected session instead of opening an older conversation.
• Missing or incompatible usage data no longer blocks valid conversations from resuming; unavailable historical totals are marked explicitly.
• Session recovery now handles corrupt usage data and reports unreadable saved state instead of claiming no repair is needed.
• Suspending fx withCtrl\+Znow keeps the session locked, preventing another process from changing it before foregrounding.
• Failed session writes preserve existing history and pause work when saving cannot be confirmed.
• Completed turns remain saved after rendering failures, and save failures on exit now return an error.
• Multiline steering around tool completion no longer crashes fx or loses the submitted message.
• Web searches no longer fail when the model restarts its streamed reply after a tool call.
• Failed or interrupted subagents no longer appear as successful empty replies.
• libfx checkpoints now preserve reasoning and provider tool results, including responses without visible text.
• Promised Wasm assets now load correctly in Node, and CommonJS deployments retain their native addon.
• Embedded terminals now clean up after startup failures and cancel pending requests when output fails.
• Credential recovery guidance now names the selected source and explains how to repair it.

Security

• Auto mode now reviews the exact pending action and no longer warns on benign work because command text appeared in tool output.
• Symbolic credential references remain reviewable, while literal values stay masked and blocked.
• ACP requests must target the active session, and managed child sessions stay private to their parent.
• MCP resources and prompts enter the composer only after an explicit Insert action.
• OAuth discovery accepts a single trailing-slash difference while keeping authorization responses exact.
• Importing libfx does not connect MCP, scan skills, spawn processes, or read files.
• Command output is escaped before reaching the model or terminal.
• Host-owned instructions are the complete libfx system context; libfx adds no hidden coding prompt.
• Browser sign-in reports success only after the credential is saved, and unusable refresh credentials are retired.
• libfx sends Agent network requests only through the host-provided fetch function.
• Inherited fx tracing settings no longer create unexpected libfx output or trace files.
• Resuming legacy sessions no longer restores old credential references or sends unfinished requests under unverified credentials.
• Internal subagent sessions stay out of latest-session selection.
• Conflicting provider tool records are rejected before execution.

Ecosystem highlights

• Cal.com
• Clerk
• Kernel
• Knock
• MongoDB
• Neon
• Plain
• Prisma
• Sentry
• Stagehand
• Supabase
• Upstash

v0.0.7

Aug 29, 20266.19mibMCP is safer, easier to manage and more compatible; project servers require explicit trust,fx mcpis now a top-level command,Ctrl\+Entercan steer active turns and fx uses eight fewer tools to preserve context.

Breaking Changes

• Model selection:/modelnow handles the full selection flow, from quick choices to the complete catalog.
• **Fewer filesystem tools:**fx now advertises eight fewer tools for better accuracy and more context, withterminalhandling core filesystem operations.

New Features

• **Active-turn steering:**While fx is working,Ctrl\+Entersteers the active turn at the next model boundary.Enterstill queues an ordinary follow-up, and late steering becomes the next queued turn.
• Collapsed tool calls:/settingsnow includesCollapse tool calls, which shows one summary per tool-call group in the main transcript. Individual calls remain available in the full transcript withCtrl\+O.
• **Project MCP configuration:**Workspaces can now define project MCP servers in\.mcp\.jsonalongside profile servers.
• Top-level MCP management:fx mcpis now a top-level command withadd,list,path,remove,auth,logout, andtrust.
• **Capability discovery:**fx can now search installed skills and configured MCP tools together from a natural-language request, then load or select the exact match before use.
• Passive MCP listings:fx mcp listreports configuration and saved authentication without connecting to servers. Add\-\-connectfor live discovery and health checks.
• **Structured final output:**Infx ask \-\-json,outputcontains all assistant Markdown andfinal\_outputcontains only a completed final response. Interrupted, failed, and background turns return an emptyfinal\_output.
• **ACP session discovery:**ACPsession/listnow lists sessions across workspaces whencwdis omitted, includes saved titles, and paginates results in groups of 100.

Improvements

• **Transcript visibility:**Menus now open inline, so the transcript stays visible while you browse.
• **Focused menus:**Menus now use category, scope, and provider filters to show more relevant options.
• **Usage visibility:**Usage data now loads without blocking the interface and tracks token and request totals without double counting.
• MCP diagnostics:fx statusandfx doctornow report configured servers and project configuration errors without starting servers or loading credentials.
• MCP profile compatibility:~/\.fx/mcp\.jsonnow acceptsmcpServersas an alias formcp, while every write usesmcp.
• **Live turn feedback:**Submitted prompts, turn progress, elapsed time, and token usage now stay visible throughout the turn.
• **Smoother response streaming:**Assistant output now appears in complete blocks instead of character by character.
• **Code blocks:**Code blocks now use solid horizontal rules instead of side rails, keeping language labels and copied source clean.
• **Subscription sign-in:**Sign-in stays clear and usable on compact terminals, while manual code entry appears only when needed.
• **Automatic reviews:**Automatic permission reviews now allow more time before reporting that review is unavailable.
• **System prompt overrides:**Command help now documents temporary system-prompt replacement while keeping tool, skill, project, and runtime context.

Bug Fixes

• **Transcript stability:**Streaming responses no longer move scrollback or rewrite completed output.
• **Environment compatibility:**Interactive input now works correctly on WSL, and browser-hosted fx stops unsupported network work instead of retrying it.
• **Retry recovery:**Automatic retries now show progress, clear stale state, and stop silent Gateway attempts.
• **Terminal cleanup:**Timed-out and cancelled commands stop cleanly, keep accurate outcomes after resume, and avoid unsafe retries when completion cannot be confirmed.
• **Terminal recovery:**Sessions recover from host shutdown, accept input without a helper restart, and return control when the turn ends.
• **Saved tool output:**Saved results remain readable when a generated handle omits its file suffix.
• **MCP reliability:**MCP servers now start, stop, reconnect, and report errors more consistently across modern and legacy implementations.
• **Subagents and approvals:**Subagents keep their reasoning settings, and visible child approvals continue receiving input while the view refreshes.
• **ACP responses:**ACP clients receive clean Markdown, and resumed responses no longer repeat text already delivered.
• Undo safety:/undonow keeps the original file intact when a restore cannot be completed and refuses attempts redirected through a new symlink.

Security

• **Signed macOS releases:**Stable macOS releases are now signed and notarized before packaging.
• **Project MCP protections:**Project servers and environment values remain inactive until approval, tool calls are checked again before reaching a server, and ambiguous configuration writes are refused.
• **MCP credentials:**Valid credentials remain usable across non-expiring tokens and macOS accounts without a default Keychain, while malformed or rejected credentials are reported correctly.

Ecosystem highlights

• Notion
• Exa
• Hugging Face

v0.0.6

Aug 25, 20266.12mibAuto mode is safer, faster, and more token-efficient; approval workflows are up to 23% faster, and the macOS arm64 binary is 0.3% smaller (6.12 MiB vs 6.13 MiB).

Breaking Changes

• Terminal presentation:/appearance,/input, and/maxxinghave been removed along with their saved settings. fx now uses the same input and transcript layout everywhere.
• Foreground command timeouts:terminal\.execcalls now requiretimeout\_msbetween 1 millisecond and 10 minutes. Useterminal\.startfor services, watchers, GUI apps, and other long-running work.

New Features

• Remote MCP servers:/mcp add \-\-transport http <name\> <url\>now saves or replaces a remote Streamable HTTP server and reloads MCP immediately. The existing local stdio form is unchanged.
• **Retained command output:**Captured command output can now be read later withread\_tool\_result, including after a saved session resumes. With\-\-no\-save, output remains available until fx exits.

Improvements

• **Auto mode review prompts:**Auto mode now uses fewer tokens when reviewing unresolved actions.
• **Native binary size:**The macOS arm64 binary is 0.3% smaller (6.12 MiB vs 6.13 MiB).
• **Gateway defaults:**New Gateway sessions now use Kimi K3 with Fast mode enabled by default.
• Setup hub:/setupnow groups sign-in methods under Connections and shows the current provider, Vercel team, and credential source. Child screens return to the setup hub, and active sign-in controls remain visible in compact terminals.
• **Provider model preferences:**Gateway, Codex, and Grok now keep separate saved model selections, so switching providers no longer replaces another provider’s preferred model.
• **Subscription session longevity:**Codex and Grok sessions remain usable beyond 64 consecutive requests.
• **Usage tracking:**Rejected completions no longer appear in usage tracking, and duplicate completion callbacks are recorded once.
• **MCP discovery:**MCP searches still find the selected tool when a request includes surrounding context, and another server’s authentication failure no longer replaces an empty search result.
• **MCP authentication:**MCP authentication stays responsive while configuration reloads or logout is in progress, and pending authentication stops when MCP reloads or fx exits.
• **Linked skill errors:**Linked skill errors now distinguish an unavailable linked directory from an unreadableSKILL\.mdand explain whether to repair, remove, or authorize the link.
• Live permission modes:Shift\+Tabpermission-mode changes now apply to later tool calls in the current turn. Actions already in progress keep the mode under which they were admitted.
• **Tool action summaries:**Denied and deferred tool rows now show the actual command or target, and those details and denial labels survive session resume.

Bug Fixes

• **Terminal resize:**Terminal resizing no longer leaves empty scrollback behind.
• **Subscription sign-in:**Codex and Grok sign-ins now survive unrelated, stalled, reset, or stale browser connections. Grok authorization codes can also be pasted when the browser cannot return to fx.
• **OAuth callback pages:**OAuth callbacks now show a completion or failure page after returning from the browser.
• **Nested rebuilds:**Interactive terminal helpers continue working after a nested rebuild replaces the fx binary on disk.
• **Terminal recovery:**fx recovery no longer pauses commands already running in tmux.
• **Terminal cancellation:**Terminal cancellation no longer reports failure when the command exits during cancellation.
• **MCP resource compatibility:**MCP resources and prompts no longer fail on servers that require their configured name.
• **MCP credential recovery:**MCP credentials with no advertised scopes remain usable after restart. Malformed stored entries no longer prevent valid servers from loading and are removed on the next successful credential write.
• **MCP stdio environments:**Configured MCP stdio environment variables now override inherited values without discarding the rest of the child environment.
• **Captured command failures:**Captured command output remains readable after timeout or cancellation. Output-capture failures now fail the tool call instead of returning an incomplete result.
• **Resumed review labels:**TheSafety cautionandReview unavailablelabels now survive session resume.

Security

• **Exact-action reviews:**Auto mode reviews each unresolved action against the current request and relevant results from the current turn. A clear review applies only to that exact unchanged action and is checked again before execution.
• **Blocked cautions:**Cautioned or unavailable actions remain blocked without opening a permission prompt or ending the turn.
• **Untrusted tool output:**Actions copied from untrusted tool output remain blocked unless the user’s request independently authorizes them.
• **Current-branch pushes:**Explicit pushes to the current branch use the branch reported by the local Git checkout rather than repository text.
• **Provider recovery authority:**After restart, fx continues unfinished Codex or Grok work only for the account that started it. If that account cannot be verified, fx preserves completed work and sends nothing.
• **Sensitive command output:**Command output flagged as sensitive is not saved with the session, including secrets split across output chunks or oversized lines.
• **OAuth callback validation:**OAuth authorization denials and successes apply only when the callback state matches the active sign-in attempt, and Grok browser callbacks accept only the expected xAI origin.
• **MCP issuer validation:**MCP sign-in stops before exchanging a token or saving credentials when the authorization response comes from a different issuer than the server advertised.

Ecosystem highlights

• Neon
• Supabase
• Prisma
• Kernel
• Stagehand

v0.0.5

Aug 21, 20266.13mib### Breaking Changes

• **Host command execution:**Run approved captured, background, and monitor commands as ordinary host subprocesses, and retire sandbox configuration, status fields, and commands
• **Interactive provider switching:**Move provider selection to/setupand remove the/providerslash command while keeping the top-levelfx providercommand

New Features

• **Codex subscriptions:**Sign in with an eligible subscription throughfx login codex, then use authenticated Codex models for interactive sessions,fx ask, native ACP, images, subagents, and automatic reviews
• **Grok subscriptions:**Sign in with an eligible Grok subscription throughfx login grok, then use authenticated xAI models, effort levels, images, local tools, persistent sessions, and automatic reviews
• **Workspace status line:**Opt in to the active workspace path and Git branch through/settings,/statusline workspace, orstatusLine\.workspace
• **fx-native workspace skills:**Discover project skills from\.fx/skillsbefore other workspace and compatibility roots
• **External skill authorities:**Allow symlinked skills under explicitly trusted external directories throughFX\_SKILL\_SYMLINK\_AUTHORITIES

Improvements

• **Provider setup:**Activate a catalog-valid model after subscription login, reauthenticate logged-out providers through/setup, and show Codex authorization as a clickable terminal link
• **Provider model catalogs:**Show provider-advertised models, context windows, and effort levels in/modeland the status line
• **Session listings:**Show saved session names, readable UTC timestamps, language names, and singular turn counts while preserving the existing JSON fields
• **Session cache reads:**Keep session listings and latest-session resume responsive while another session defers cache publication
• **Terminal tab titles:**Label interactive tabs with the session or workspace and active model, keep them current across rename, resume, and model changes, and clear them on exit
• **Terminal activity:**Keep each command or shell attached to its terminal activity row through completion, distinguish graceful close from force close, and hide no-opcd \. &&prefixes
• **Terminal action arguments:**Advertise only the fields relevant to the selected action and limit unsavedfx asksessions toterminal\.exec
• **Auto mode reads:**Run routine read-only commands and hardened Git inspection directly without automatic review
• **Automatic denial recovery:**Return destructive actions to the agent for replanning and finish repeated no-progress denials as normal assistant output instead of opening a permission prompt
• **One-off subagents:**Keep active one-off subagents visible, deliver one final result, and retire them after completion while leaving persistent subagents reusable
• **Startup preferences:**Show saved reasoning effort and Fast mode immediately while model capabilities load
• **Dev build identity:**Add the commit and\[dev\]marker to dev-channel welcome headers without changing stable release headers
• **MCP reload feedback:**Replace internal health details with concise server availability and recovery guidance
• **Help layout:**Keep command descriptions close to command names on wide terminals
• **Native binary size:**Reduce the macOS arm64 release footprint while preserving existing behavior
• **Stable upgrades:**Restore forward-only version ordering across manual, automatic, and Ctrl+G upgrades

Bug Fixes

• **Oversized images:**Normalize large macOS image snapshots without changing the originals and reject attachments locally when a bounded snapshot cannot be prepared
• **Corrupt memory stores:**Report malformed, oversized, or unreadable stores and preserve their original bytes instead of overwriting them
• **Non-regular file reads:**Reject FIFOs and other non-regularread\_filetargets before they can block
• **Malformed tool loops:**End a turn after three consecutive malformed-only tool batches and reset recovery after a valid batch
• **Terminal null placeholders:**Treat textual"null"values as absent for unused terminal fields while preserving real command text that contains the word
• **Terminal keyboard input:**Ignore unknown completed escape sequences and handle Ghostty kitty Escape reports with Caps Lock, Num Lock, and event suffixes
• **Credential fallback:**Continue to a stored API key when savedfx logincredentials cannot load or refresh while keeping the login failure available for diagnostics
• **Vision recovery:**Retry replay-safe requests once after a post-Vision assistant-prefill rejection
• **Thinking status:**Keep the Thinking indicator and elapsed timer visible while automatic command review runs
• **Terminal helper compatibility:**Reject unsupported start, signal, and force-close requests from stale terminal helpers without losing unrelated sessions
• **WASM project context:**Skip unavailable local project-instruction probes in browser hosts while preserving host-supplied context
• **Idle terminal traffic:**Stop polling the terminal theme while idle and continue retinting after supported theme notifications

Security

• **Command approval patterns:**Restrict wildcard command allows to static shell words and keep destructive shell commands and file deletion outside automatic review
• **macOS login storage:**Store nativefx loginsessions in Keychain with verified migration, refresh, restart, and logout behavior
• **MCP configuration writes:**Save~/\.fx/mcp\.jsonatomically with private permissions, reject linked targets, and preserve the previous configuration when a write fails
• **MCP session retirement:**Keep retired HTTP session IDs alive until in-flight requests drain
• **Provider response limits:**Reject oversized Codex and Grok catalogs, streams, tool data, and replay state while keeping later input usable
• **ACP permission validation:**Validate permission input before writing JSON-RPC frames

v0.0.4

Aug 19, 20266.39mib### New Features

• **Session resume command:**Resume the latest workspace session or an exact session ID withfx session resume
• **Headless permission prompts:**Add\-\-prompt\-permissionsso JSON and quietfx askruns can request Y/N approval on a TTY while keeping stdout clean

Improvements

• **Auto mode permissions:**Run routine reversible development commands and new-file creation directly, then ask for human approval after repeated automatic review denials
• **Command discovery:**Rank exact, prefix, and substring slash-command matches and highlight the selected help description
• **Terminal attention bells:**Emit one terminal bell when fx pauses for permission or other input so terminal multiplexers can flag waiting panes
• **Transcript scrollback:**Preserve retained transcript rows in native scrollback across pruning, resize, and reflow

Bug Fixes

• **Session cache contention:**Continue same-workspace session writes and keep listing and resume results current while another process holds the latest-session cache lock
• **Reasoning effort settings:**Change reasoning effort without crashing or replacing the selected model
• **Web redirects:**Follow HTTP 303 redirects inweb\_fetch
• **Command output separation:**End command output that lacks a trailing newline before rendering the nextfx asktool header
• **Skill discovery:**Show one entry for skills reached through symlinked compatibility roots while preserving distinct same-name skills
• **libfx session transitions:**Cancel active cooperative turns before starting a fresh session so the terminal remains responsive
• **Memory activity:**Presentmemory listas a read instead of a write
• **Unsupported login shells:**Fall back to zsh on macOS or Bash elsewhere when the configured login shell is unsupported
• **Process cleanup:**Cancel and reap headless terminal commands on SIGTERM, preserve signal status, and tolerate short-lived Linux processes disappearing during cleanup
• **Model output limits:**Omit invalid limits that consume a model’s full context window
• **Terminal lease transitions:**Reject write payloads on lease acquisition, release, and revocation before session state changes

v0.0.3

Aug 18, 2026### Improvements

• **JSON recovery progress:**Report retry, recovery, and safety-pause status on stderr duringfx ask \-\-jsonwhile keeping stdout parseable
• **Notification sounds:**Improve six notification sounds for clearer, more consistent playback while keeping the click sound unchanged

Bug Fixes

• **Memory actions:**Reject unsupported memory actions before execution instead of reporting a successful no-op
• **Memory clearing:**Succeed when memory is already absent, but report real deletion failures instead of claiming memories were cleared
• **Background URLs:**Refuse/background openfor stopped or stale tasks so saved URLs cannot open an unrelated process after port reuse
• **Model catalogs:**Reject malformed catalog responses with a nonzero exit instead of treating them as an empty model list
• **Skill creation:**Show invalid/skills createnames inline and keep the current session, transcript, and composer usable
• **GLM 5.2 responses:**Restore responses for fx login sessions without changing requests for other models

v0.0.2

Aug 18, 2026### New Features

• **Unified terminal execution:**Run captured foreground commands and durable interactive sessions through theterminaltool, with the user’s shell profile loaded by default andcleanas an explicit opt-out
• **Saved session permissions:**Store exact allow or deny rules with/permissions remember, list them by stable ID, and remove them with/permissions revoke
• **MCP server awareness:**Show the agent the configured server aliases, availability, and visible tool counts so it can find and use MCP capabilities

Improvements

• **Auto mode recovery:**Let the agent revise its plan after denied, timed-out, or invalid reviews and return a tools-disabled response after repeated blocks instead of stalling for approval
• **Trusted auto mode actions:**Allow bounded reads, hardened read-only Git commands, and prepared workspace edits to proceed without extra review while keeping ambiguous or sensitive actions gated
• **MCP connection reliability:**Connect to legacy stdio servers, cancel stalled reloads, and report the requiredoauth\.issueroverride when issuers do not match
• **MCP failure handling:**Show concise server errors and stop a third matching failed call before it runs
• **Terminal action recovery:**Reject invalid terminal fields before running anything and return one complete correction without repeating the same repair loop
• **Fast mode default:**Keepzai/glm\-5\.2as the default model for new sessions, but leave Fast mode disabled unless explicitly enabled. Preserve saved preferences and/fast

Bug Fixes

• **WebAssembly terminal input:**Keep input responsive during continuous streams, queue follow-up prompts until the active response completes, and preserve the queued prompt text
• **Terminal job cleanup:**Force-close descendant jobs spawned by any Linux thread and returnsession\_lostwhen fx cannot confirm complete cleanup

v0.0.1

Aug 17, 2026### New Features

• **Answers about fx:**Consult the current public documentation before answering questions about fx

Improvements

• **Scoped project instructions:**Continue safe read-only inspections after loading more specific project instructions and defer only affected state-changing tools
• **Light terminal readability:**Improve syntax highlighting and help contrast on light terminal backgrounds while keeping redirected and structured output uncolored
• **Transcript review navigation:**Preserve tail following, scroll bookmarks, and expanded command history when switching between Ctrl+O Review and Full detail
• **Linked project guidance:**Load project instruction and workspace skill symlinks when their targets remain within their allowed scope
• **Tool scrollback:**Keep completed tool groups in native scrollback while later tools are still running

Bug Fixes

• **Wrapped diff layout:**Keep wrapped file-diff rows aligned with their gutters across Inline, Review, and Full detail
• **Inline picker layout:**Keep the transcript and composer adjacent when closing inline pickers instead of leaving a blank band in the frame
• **Native Node.js fetch lifecycle:**Keep native sessions reusable after early response completion, cancel only the matching host fetch, and reject incompatible addon versions before startup
• **Terminal cleanup:**Allow tmux sessions a bounded settling period after shutdown while retaining strict ownership checks