Align the 1.9.0 notes and CHANGELOG entry with the 1.8.2 format (prefixed
bilingual entries), record the session-breaker fix and the sponsor page,
and date the entry to the release day. Remove the ARM64 diagnostics
workflow and its two probe scripts from the release tree; the CI workaround
script stays because the release workflow runs it.
Include cloud settings, panel sizing, command groups, Agent integration settings and runtime input fixes from main. Bind native Codex recovery to the live pane process and preserve verified IDs; add CMD recovery choices and an explicit exit path when identity discovery fails.
Retain the merged Markdown caret, selection and popup fixes and their pinned component revision alongside the session and highlight repairs. Update bilingual release notes for the integrated changes.
Synchronize product crate versions, local dependency constraints, lockfiles, Windows resources and installer defaults. Add bilingual changes and verified contributor credits before CI packaging.
Move the pending activity, input and SSH authentication decisions into their
module-owned notes under the current governance contract. Import the shutdown
draft type directly after the incoming drag-preview cleanup removes its parent
import.
Move native endpoint selection, connections and discovery deadlines to the
platform adapter. Keep identity ranking, signing and fallback policy in the
SSH session module, with one reusable agent wire fixture for both layers.
Run fallback behavior and portable multiline-input regressions on every OS.
Remove unnecessary Windows guards from the platform-independent remote hook
installer. Preserve the existing platform conditional budget and coverage.
Try explicit keys, the system agent, and then resolved keys before password
methods. Share discovery, identity selection, certificate/RSA signing and
fatal transport handling between formal and test connections. Keep strict
modes isolated and place draft passwords in the selected authentication plan.
Bound agent discovery, preserve interactive signing time, and drop failed or
cancelled signing transports before they can enter the session pool. Cover
agent-only login, fallback, native pipe deadlines, signing failures, selectors
and independent jump/target identities with isolated protocol and SSH tests.
Addresses #202.
Keep hook authority separate from screen observations and shell completion.
Install owned native and remote bridges, preserve durable session recovery,
and support Shift+Enter for byte-stream clients without changing native keys.
Addresses #199.
Preserve the committed memory and scrolling work from local main together with
update recovery and the default font rollback. Resolve terminal initialization
at its new lifecycle owner and keep native WSL lookup in the platform layer.
Document the seven history limits, wheel-speed settings, allocation tradeoffs
and connection-specific completion behavior in both release-note languages.
Synchronize package versions and bilingual notes with verified issue references.
Allow releases without PR contributors to omit that section, with positive and
negative format coverage as requested by the maintainer.
Keep native update process operations and default-shell resolution inside the
platform boundary. Preserve transaction authority in the updater and tighten
the platform condition budget to the measured 484.
Persist native AI recovery targets and per-pane launch contexts without treating
command submission as provider confirmation. Keep window partitions and the
active window in the durable session snapshot for immediate and scheduled updates.
Coordinate draft approval, snapshot writes, helper readiness, process exit and
installation with a committed transaction. Reverify packages and retain recovery
state on failure. Isolate acceptance installers from production integrations and
reject same-version setup that leaves the executable unchanged.
Validation: Windows GPUI suite 1552 passed; settings 55 passed; i18n 20 passed;
9 native helper scenarios; 77 installer migration checks and 41 static invariants.
Full interactive packaged upgrade acceptance remains separate.
Preserve the current main updates together with active SSH/WSL completion
ownership and native PowerShell predictions. Renumber the completion ADR
after the existing font ownership decision.
Track completion history, candidates and async directory results by the active
SSH/WSL connection, and restore the parent shell when the connection returns.
Use shared ownership rules in both UI adapters and report expanded arguments
from shell execution hooks. Preserve user PSReadLine prediction settings.
Add regression coverage for context transitions, stale results and actual
Windows ConPTY transport. Validate native SSH, WSL, local PowerShell and SSH
from PowerShell, including cross-environment negatives and native predictions.
History deletion and migration remain outside this change.
Combine custom themes, updater proxies and native resource fixes with the published release source. Preserve independent interface and CJK fonts, selection visibility, saved-session startup and all existing release checks. Remove the retired terminal-view size exception after the capability extraction brought it below the standard limit.
Persist the pending ConPTY lifetime, process snapshot and native font ownership fixes. Keep lifecycle regression tests and the Windows memory stress tool together with the ownership contracts.
Right-clicking a folder has always opened the configured default shell —
usually PowerShell — with no way to ask for a WSL distribution instead.
- `--shell <id>` takes the same ids the `shell` setting uses (`pwsh`, `cmd`,
`wsl:Ubuntu`, or an imported profile's settings id) and applies to the
first tab this process creates. It carries an id rather than a path so
every launch re-resolves the executable.
- The id travels both startup paths: the cold start (`run_shell` →
`WorkspaceStartup::NewTerminal`), and the resident hand-off, which is the
common case on Windows. `tab.new`/`window.create` gained an optional
`shell` field, so clicking the menu while Pebrel is already running adds a
tab to the existing window instead of starting a second process.
- An explicit request never silently degrades. An unresolvable id fails
(`invalid_shell`, or a startup error before any window opens), and a
`wsl:<distro>` id that the registry no longer lists still launches
`wsl.exe -d <distro>`, leaving the complaint to the distribution itself.
The `shell` setting keeps its documented fallback to the platform default.
- The winit shell rejects a shell request instead of ignoring it, so the
caller falls back to a cold GPUI start and still gets the requested shell.
The resolution lives in a new `workspace::shell_launch` module: `main.rs` has
to validate `--shell` before it opens a window, and none of it needs
`NebulaWorkspace` state — `workspace.rs` is also at its line budget, which
this keeps from growing (`architecture/file-budgets.txt`).
The installer registers one context-menu entry per registered WSL
distribution (`PebrelWsl<n>`, skipping `docker-desktop*`) and the uninstaller
reclaims them by key prefix plus the command line it wrote. `--shell` is
passed before `--working-directory`: a drive-root `%V` ends in `\"`, which
would swallow the rest of the line if the directory came first. Both the
string and the order are pinned by installer assertions.
Docs (runtime API schema + control API) and shell completions are updated.
Search filenames on demand with bounded caches and streamed uncached paths.
Cancel obsolete queries, release view-owned results, and execute WSL find directly.
Cover repeated folder and panel cycles with allocation and memory regressions.
Load and downsample background images asynchronously within explicit budgets,
reuse image resources through window resizing, and retire replaced GPU images.
Preserve the original extended-background scrim and opaque text while sharing
fit and alignment rules between renderers. Cover budgets, stale requests,
resource reuse, geometry, and surface opacity with regression tests.
Keep the top Settings tab available until explicitly closed and route numbered
tab shortcuts through workspace actions before terminal input. Preserve custom
shortcut overrides and restore focus when reselecting the current tab.
Add opt-in mouse focus, configurable inactive-pane dimming, Shell and SSH
launcher context menus, and administrator Shell launch inside a new Pebrel
window with isolated control-plane discovery and session persistence.
Refresh Claude artwork and add Trae CLI and Oh My Pi branding. Document the
user-visible behavior in the bilingual Unreleased changelog.
Validation: 337 GPUI tests, 109 platform/runtime/Agent tests, 47 settings tests,
14 i18n contract tests, product compilation, and architecture checks passed.
Interactive UAC and visual acceptance remain manual.
GeekMr