OmniRush changelog

New

• Long chats have a Load earlier messages button at the top.

Improved

• Computer use works on a display of its own with its own cursor, so your mouse, keyboard and clipboard stay yours.

Fixed

• Undo and revert no longer remove chat turns or file changes without asking. Undo works only from the chat itself and ignores a held key, Revert and Edit say what they will take back, and hidden messages go only after you confirm a send.

New

• See a command's output in the chat, while it runs and when it is done.
• How your allowance works: a help page for your daily tokens and the Good session checklist.
• Settings > General > Storage > Free up space removes files older versions left behind.

Improved

• Windows: after an update installs when you quit, the app opens again on the new version, and its shortcuts stay in place.
• The built-in browser keeps working when you switch away, and asks for approval the way computer use does.
• Clearer browser sign-in card: using your existing sign-ins is optional.
• The window and the message box fit on short screens.
• A shorter notice for settings not loaded from a project's config, and the chat title is no longer covered in the header.
• The run status note shows only when something needs you (waiting for an answer, a message not yet confirmed, a retry), not during routine work.

Fixed

• Computer use: "Allow for this chat" now applies to that one chat only, and a Deny withdraws the app's approval everywhere it was given.
• Computer use from the terminal: copy the CLI connection again in the desktop app (its file was renamed).
• Windows: messages that mention a local file send again.
• Library: opening an item and going back works again (the page no longer gets stuck).
• A chat saved with a model that is no longer available switches to the default OmniRush model and says so, instead of leaving Send disabled.

Fixed

• The Mac app starts again. Desktop 3.6.7 and 3.6.9 stopped on macOS with "The bundled engine was changed".

Also in this release (from 3.6.9)

• Security: commands the agent runs no longer receive the app's own keys.
• Security: approvals, permission mode, project settings, plugins, MCP servers and keys can only be changed from the app's own window, not with a key read from disk.
• Computer use: no approval on each step; one Allow per app per chat. In Normal mode it still asks before paying or buying and before typing a password.

Security

• A project's MCP settings can no longer hand the app's keys or files outside the project to an MCP server, and no local MCP server starts unless the app's checks are running.
• Better masking of access keys that tools print with escaped characters.

New

• What's new: see what changed in each release from the sidebar, the Help menu or the command palette, and a short note after each update.
• Themes: eight presets with light and dark versions, and your own theme in Settings › Appearance with a live preview and contrast checks. Share it as a code or a file; the editor, terminal and chat all follow it.
• Computer use: the agent can operate an app window you approve (screenshots, clicks, typing), with a stop control and approvals that follow your permission mode. Off until it is enabled for your account.
• Editor: search, problems and language features, a split editor, editor settings, Markdown and image preview, and a Git change gutter. Format on save asks once before running a project's own formatter.

Improved

• Only OmniRush models are offered. Other providers, and your own opencode plugins and custom tools, stay off.
• Fewer repeated failed edits: when an edit can't find its text, the agent now sees the file's current lines.
• The reasoning effort shown in the model picker is always the one used.
• The session quality status now sits inside its chip instead of above the chat.

Security

• Git hooks run by the editor's git panel and by parallel tasks no longer receive the app's own sign-in tokens.

Fixed

• MCP servers get the display, browser, Git, Volta and package settings they need again (for example a browser server on Linux, or Python tools with a custom cache), while the app's own tokens and credentials stay hidden from them.

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.6.5...v3.6.6

Security

• MCP servers no longer receive the app's own sign-in tokens or other private settings from its environment.

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.6.4...v3.6.5

Security

• The folder access check no longer reads runtime settings or an environment file from the shared temporary folder, so another account on the same computer can't run code through it.

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.6.3...v3.6.4

Security

• A project's own plugins, language servers and formatters are no longer loaded from its configuration.
• MCP servers start through the system's own npx and uvx, never a copy inside the project.

Added

• Permission modes: Careful asks before every file change and command, Normal (the default) asks only before risky actions, Auto never asks.
• A notification when a task finishes or waits for your approval.
• Chat and IDE layouts.
• Figma designs through a supported MCP server.

Fixed

• Session sharing is turned off; it used an outside service that has shut down.
• A calmer start screen: the greeting and the composer, with your recent chats in one line below it.
• Long answers are kept in sync while they run.
• The handoff question is asked once per chat, only when the chat is idle; a failed handoff can be retried.
• Undo keeps your editor saves and refreshes open files.
• Skills you added are kept when you update.
• The approval buttons fit in a narrow chat.

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.6.2...v3.6.3

Security

• MCP servers defined in a project's own configuration no longer start on their own. Only supported servers start, at a supported version, working inside the project; others are listed with the reason they were skipped.

Added

• A code editor beside the chat.
• Review your changes and fix what the review found; undo the last turn while keeping your own later edits, and redo it; see the chat's changes and status.
• Parallel tasks, each in its own copy of the project, and a home screen with recent projects and chats and a search of past chats.
• The agent checks its own changes with the project's checks, keeps project notes in AGENTS.md, sees code diagnostics after edits, and writes fuller summaries when a long chat is compacted. Each can be switched off in Settings.

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.6.1...v3.6.2

Added

• Send feedback from the sidebar, the Help menu or the command palette.
• Web search for the model, when it is available for your account. Searches and their sources are shown in the chat.

Fixed

• A chat stops before the first prompt when the project folder can't be written to, and says why and how to fix it, with a button to choose another folder.

Changed

• The unused web search setting was removed.

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.6.0...v3.6.1

Fixed

• Limit and policy messages are shown once and are not sent again automatically.
• Signing out keeps unsent uploads for your next sign-in to the same account.
• Chats resumed after signing in again continue project sync where it left off.
• Neutral wording in the instructions sent to the model.

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.5.9...v3.6.0

Changed

• Measurement for sponsored messages; nothing is shown until they are switched on.

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.5.8...v3.5.9

Changed

• Usage analytics now go to OmniRush's own analytics project and are linked to your account; see the Privacy Policy.
• Earlier third-party analytics key removed.

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.5.7...v3.5.8

Added

• Room for occasional sponsored messages (off for now)

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.5.6...v3.5.7

Fixed

• Sandbox reconnects after it stops while the app is open
• Large dependency installs no longer fail a turn in the sandbox
• Tool calls are closed correctly when a run is stopped or the app quits
• Security fixes for links, deep links and the developer tools port

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.5.5...v3.5.6

What's Changed

• fix: let Esc end automatic compaction by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/204
• fix: recover local store on start by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/205

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.5.4...v3.5.5

What's Changed

• feat: start failure help and reset by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/203

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.5.3...v3.5.4

What's Changed

• fix: keep source files in project copies by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/199
• fix: number closing state by last turn by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/200

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.5.2...v3.5.3

What's Changed

• feat: automatic context compaction by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/197

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.5.1...v3.5.2

What's Changed

• fix: windows start by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/196

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.5.0...v3.5.1

What's Changed

• feat: buildathon promo and updates feed by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/193

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.4.12...v3.5.0

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.4.11...v3.4.12

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.4.10...v3.4.11

What's Changed

• feat: buildathon countdown and tracks by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/192

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.4.9...v3.4.10

OmniRush.ai 3.4.9

• Every package install is recorded with the command that ran it, including sub-agents and background commands, so projects rebuild more faithfully.
• Chats keep their last turn even if the app closes unexpectedly.
• Workflow steps run reliably.

OmniRush.ai 3.4.8

• Finished chats are recorded right away: a chat you leave open after a turn is saved as finished within a minute, without having to quit the app.
• Uploads use the current format from the first run.
• Project copies are retried after a short server outage.

OmniRush.ai 3.4.7

• Your computer stays awake while the agent works, so long tasks aren't cut short by sleep. It only holds while a task runs; the screen can still turn off and lock. Turn it off in Settings → General.
• Prompts always go through when other tools on your computer have their own MCP servers configured.

OmniRush.ai 3.4.6

• The sandbox follows your settings while the app is open: a change to the sandbox default now reaches running apps within minutes.
• Clearer sandbox records: each chat notes whether it ran in the sandbox and why.

OmniRush.ai 3.4.5

• Projects with builds for your machine stay on your machine. On macOS and Windows, a project that already has native builds (node_modules, a Python venv, compiled programs) keeps running on your computer, so those builds keep working. Clean projects use the Linux sandbox.
• Clear sandbox messages: chats that run in the sandbox say so in one line, with how to switch it off.
• Clearer macOS sandbox setup advice.

OmniRush.ai 3.4.4

• Clearer Linux sandbox setup: a simple card per project with live download progress, an Advanced section for the backend, and one clear next step for your OS when a sandbox runtime is missing.
• Your existing chats keep working as they are when the sandbox is turned on; new chats get the sandbox.
• Git works inside the sandbox with your own name and email.
• Bigger projects count: project copies now go up to 2 GiB (was 256 MiB), with a free-space check so a small disk never fills up.
• Every project-copy decision now has a plain reason, and a short tip after a turn suggests a follow-up.
• Faster sandbox start, and sandboxes from other users or re-cloned folders are handled cleanly.

What's Changed

• fix: updates for older desktop builds by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/168
• fix: let prompts through and steer a running turn by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/169

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.3.8...v3.4.3

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.4.1...v3.4.2

What's new

• The sandbox works out of the box. Sandbox images are now published and pinned, so turning on the Linux sandbox for a project sets itself up on Linux, macOS (Apple silicon and Intel) and Windows, with nothing to build or sign in to.
• Windows can use OmniRush's own WSL image for the sandbox.

Fixes

• The bubblewrap check no longer leaves a folder behind each time it runs.

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.4.0...v3.4.1

Sandbox images for box version 2026.10.2: the OmniRush WSL image for Windows, and box-pins.json with the pinned image digests. The Linux images are ghcr.io/omnirush-ai/box-{base,go,rust,java,ruby}:2026.10.2.

What's new

• An optional Linux sandbox for each project. Turn it on for a project, and the agent's commands run in a Linux sandbox kept for that project, while the app, your chats and your files stay on your computer. Packages installed in the sandbox are still there next time.
• The best sandbox tool on each computer. Linux: bubblewrap, Podman or Docker. macOS: OrbStack, colima, Docker Desktop, Rancher Desktop or Podman, with Apple's container when you choose it. Windows: WSL containers, the OmniRush WSL distro, Docker Desktop or Podman. Settings shows which one is used and why, and lets you pick your own.
• Same versions, every time. Package installs the agent runs (npm, pip, cargo, apt and more) go through light wrappers in the agent's own shell, so a project can be set up again with the same versions. Your own terminal is never changed.

Fixes

• Files that background commands finish writing after a turn ends are picked up before your next message.
• Reopened chats keep counting their turns from where they left off.
• Very large turns, such as ones that install many packages, are kept whole.
• Fewer routine notifications, and quieter voice recording.

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.3.7...v3.4.0

What's Changed

• fix: keep local config values intact by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/111
• Defer watched Git scans while preserving capture baselines by @Slendywy in https://github.com/omnirush-ai/omnirush-gui/pull/105
• feat: disable MCP outside isolated Harbor tasks by @Slendywy in https://github.com/omnirush-ai/omnirush-gui/pull/112
• Correlate gateway retries and streamed failures by @Slendywy in https://github.com/omnirush-ai/omnirush-gui/pull/113
• fix(gateway): pass request IDs through attachment retries by @Slendywy in https://github.com/omnirush-ai/omnirush-gui/pull/158

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.3.6...v3.3.7

What's Changed

• fix: remove leftover windows and docker notes by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/152

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.3.5...v3.3.6

What's Changed

• fix: treat windows like other systems by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/151

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.3.4...v3.3.5

What's Changed

• fix: restart to update finishes by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/130
• feat: polished mac installer window by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/131
• feat: installer art and omnirush name by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/132
• feat: server checklist and finish guard by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/133
• feat: shared upload rules v3 by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/134
• fix: keep queued uploads and steady their keys by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/135
• fix: restart sync worker with backoff by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/136
• fix: recover unfinished turns by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/137
• feat: good status in the checklist by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/138
• fix: follow the backend's upload features by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/140
• feat: confirm ended chats with the server by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/141
• fix: keep the queue while signed out by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/142
• fix: stricter literal check by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/143
• fix: hide windows account names in paths by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/139
• fix: one event form per upload schema by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/146
• fix: label lines without a value by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/144
• fix: repair damaged session store rows by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/147
• fix: end the turn when the queue wait runs out by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/149
• fix: catch more key shapes by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/148
• fix: read schema 2 events from trace.json in the observer test by @ogsamrat in https://github.com/omnirush-ai/omnirush-gui/pull/150

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.3.3...v3.3.4

OmniRush.ai 3.3.3

• Fewer interruptions: the one-time files notice is gone.
• Tidier records: each upload and app launch now notes the app and engine version.

Signed and notarized for macOS (Apple Silicon); Windows x64 and Linux builds included.

Full Changelog: https://github.com/omnirush-ai/omnirush-gui/compare/v3.3.2...v3.3.3