Blog
Celistra Changelog
v0.2.0 — 2026-04-22
- Onboarding wizard rewrite. Three steps: welcome, workspace folder, all permissions on one card with live status badges. Restart-to-apply persists the wizard step.
- Native window UI. Cross-platform onboarding via webview_go (NSWindow / WebView2 / webkit2gtk).
- Tray icon redesign. Programmatically-rendered black logo as a macOS template image — adapts to menu bar appearance. No more brand text in the menu bar.
- Per-agent capability grants. JSON config at
~/.celistra_capabilities.json. Agent-name pattern + source + command match block. - Sandbox audit log streaming. SSE at
/v1/capabilities/log. Live tail in the dashboard's Activity panel. - macOS TCC status detection. Live "Granted / Not granted" badges in the wizard via CGPreflightScreenCaptureAccess + AXIsProcessTrusted + TCC.db file probe.
- Self-restart via syscall.Exec. Daemon re-execs in-place after permission grants — keeps the .app bundle association and PID stable.
v0.1.x — 2025-09 to 2026-03
- Sandbox-exec wrap for every spawn (default ON for new installs).
- Workspace folder picker, default
~/CelistraAgents. - Phase 4 capabilities: screen_capture, accessibility, full_disk_access with Mach service allowlists.
- iOS mobile app — fleet view + haptic approvals (TestFlight).
- Android mobile app — same surface (Play Store).
- 30-day SQLite agent history.
- Tunnel relay migration to
mail.ujex.dev:7000with CAA-pinned Let's Encrypt certs. - celistrad ctl REPL with tab completion and --json one-shot mode.
- Revoke-all-sessions Cloud Function from tray + dashboard account menu.
v0.0.x — Early access
- First public daemon binary, dashboard, pairing flow, fleet view, multi-client PTY fanout, auto-restart with 5/60s ceiling, Firebase ID token + machine secret two-path auth.