Adom Hydrogen (macOS)

• promote hydrogen-macos 0.1.429 to public: "push a new public release" (Kyle Bergstedt)

• promote hydrogen-macos 0.1.428 to public: "test the upgrade from current public to this build once and then if that smoke test clears push to the new public build, make sure the manifests or whatever get updated" (Kyle Bergstedt)

• promote hydrogen-macos 0.1.422 to public: "cut a new public release, make sure to update hte manifest too that says what the current public version is" (Kyle Bergstedt)

• promote hydrogen-macos 0.1.419 to public: "Kyle 2026-10-20: push a private dev version of hydrogen to the wiki that is the same as the current dev version (dev.18) and test it thoroughly on the air to make sure it is working well ... and if it is all good then upload it as the latest public release" (Kyle Bergstedt)
• promote hydrogen-macos 0.1.418 to public: "Kyle 2026-09-30: "build as plain 0.1.418 and push to wiki" / "promote as public"" (Kyle Bergstedt)
• promote hydrogen-macos 0.1.417 to public: "Kyle 2026-09-29: "can you push the latest dev version to the wiki as 0.1.417" — chose "0.1.417 anyway" and "Public, promote now"" (Kyle Bergstedt)
• version.json → 0.1.416 (Kyle Bergstedt)
• promote hydrogen-macos 0.1.375 to public: "Kyle 2026-09-08: recreate this for the macos version to track downloads/installs" (Kyle Bergstedt)

0.1.420: Adom Bridge outlives Hydrogen's exit (remote lifecycle over mesh), per-user KiCad/Fusion detection, fresh-install restore settings fix

Setup: the golden image is read in place through a read-only VM mount of the host cache (no ssh copy; a throttled or firewalled ssh port no longer stalls install), versioned cache filename, managed Node/Python runtimes install on virgin machines, a firewalled VM egress fails once with a clear message, wake heal stands down during setup. Editor: Backspace and the mouse back button can no longer blank the VS Code pane (WebKit back action off on every webview and frame); OSC 52 copies from the Claude Code / Codex TUIs reach the Mac clipboard; Option-drag selects in the terminal when a TUI owns the mouse; context menus dismiss on any outside click or Escape; the last VS Code tab hides Close / Close All. AI accounts popup: Editor toolbar checklist (collapsed disclosure, paired two-column), agent bar gear icon, the extension menu's own customize fold hidden. Fresh install to Welcome ~2 min.

Setup off the critical path: adom-cli + adom-vscode install first (~15 s), the full skills layer installs in the background after the Welcome page (fresh install 1m44s, was 7m20s). Backspace / mouse-back can no longer blank the VS Code pane (WebKit back action off on every webview and frame). Default Wiki tab is the iframe webview signed in via the session cookie; no URL prompt when adding a webview. Removed the ai-threads subsystem (Codex chat no longer resets mid-session). Relay forwards bridge replies whole and accepts app "desktop"; Codex resize lag fixes (0.1.417/0.1.418 work) included. Setup Accessibility copy reworded.

Forum opens signed in as the app's account (SSO handoff cookie); container rename; per-container AI sign-ins; AI Accounts screen on new container; org dialog scroll + filter; profile window sizing.

Fix editor pane-split pile-up during setup; foreground on permission grant; parallelize golden-image + bridge-runtime downloads; coalesce editor reloads.

Light-mode intro glow and drag helper; API keys for Claude Code and Codex; branded Kimi/Codex editor tabs; AI accounts cleanup

Agent bar shows only signed-in agents with brand Kimi/Antigravity icons; Antigravity button opens a terminal tab running agy; agent sign-in appears as soon as the editor is ready; fix editor not resizing after startup.

Insiders tier + fleet ping: login-decided manifest, min_supported_version floor banner, fleet notices, Insiders chip.

0.1.375: public (stripped) build of dev 0.1.374 — claude sign-in fix, kimi subscription login; cloud containers + multi-account are not in this build.

0.1.373: first public build with the internal-only features (cloud containers, multi-account) compiled out; agent setup overlay, welcome page rewrite, golden image v23.

fix sign-in bouncing back to the login page after approval (main window misclassified as a session window)

spec deviations cleared: per-window sign-in, build containers in their own windows, session restore with geometry, in-place cloud switching, cloud liveness+resize, per-container relay, quit warns about open windows

titlebar double-click and zoom act on the focused window, not the original one

fix cloud windows mirroring the local container (session discarded on port 0) and the resulting layout push storm

fix session/cloud windows landing on a broken sign-in page (Tauri capabilities didn't cover session window labels or ports); stable session origins; wait-codeserver probes the container's real port

fix cloud container windows opening on a 404 (deep link to a route this app doesn't have; cloud repo now rides the session)

cloud containers: open your carbon containers in their own windows — editor via the container's code-server, AI-driven panels via cloud passthrough

per-window accounts: each window authenticates as its own account; New window picker across all accounts; switch/reload events no longer leak between windows

remove the legacy pane focus mode (teal active-pane border + unfocused pointer blocking) that account switching could revive

multi-window sessions: open containers in new windows (own proxy + editor per window), close stops the container, focused-window health/stats

multi-container foundation: per-account container registry + switcher (create/switch/delete), per-machine boot units and locks, port blocks, claims, quit stops all machines

fix self-split drop zones dying mid-drag (tab count snapshotted at drag start)

pane drag UI ported from the Windows line: global drop-zone pill (works over VS Code/webview panes), Escape cancels a drag, persistent splitter divider

Golden v22: Claude Code + Codex baked current with their bundled CLIs on PATH (no duplicates); all wiki fetches canonical.

In-container bridge CLI stays current: pkg-delivered CLI wins the PATH and mirrors over the baked copy at launch.

Claude panel images survive code-server restarts (service-worker prime re-runs after every bounce).

Permissions gate fixed: FDA step can no longer be skipped un-granted (double-advance race + probe arming on the wrong drag).

In-container platform-hygiene timer: Windows-line skills a background update re-delivers are purged within 5 minutes, on fresh installs too.

Main window has a sensible minimum size (900x620) — no more broken layout or white tile artifacts at tiny sizes.

Screen-filled windows follow the Dock: showing/hiding/moving the Dock re-fits the window to the new visible area.

Skip-intro button now clears the macOS Dock (live Dock-inset tracking).

Golden image v21 (112MB lighter, claude CLI shims to the extension bundle); mac containers no longer install Windows bridge skills; skills hygiene cleanup.

Account rows' remove button now reveals only on the hovered row.

Account switching hardened: rotated session tokens tracked per account, mid-switch supersession handled cleanly, navbar identity always follows the chosen account.

Editor theme and fonts now apply on fresh installs, container restarts, and account switches (deferred settings merge re-asserts on workbench paint).

Drop-zone highlight no longer flickers on fast cursor movement; zone changes morph smoothly.

Drag a tab to its own pane's edge to split it, VS Code-style.

Rapid account switches no longer stall ~100s on the outgoing container's shutdown; switch teardown is now bounded with escalation.

Update check from Settings now downloads immediately; the Restart button applies instantly when staged or downloads on click.

Account switching now fully sets up new account workspaces (skills, extensions, config) and reuses a configured snapshot for fast container builds.

0.1.336: the sign-in window can no longer scroll — content is pinned and centered to the fixed window.

0.1.335: update banner moved below the navbar; navbar avatar follows account switches/removals immediately; concise updater settings.

0.1.334: fixes first-time account switching — booting a newly added account's workspace container targeted the wrong rootfs (hardcoded machine path); the boot now follows the active account, and imports are verified before boot.

0.1.333: a manual Check for Updates now downloads (background-stages) the update immediately instead of waiting for the next background poll — the update apply is instant right after checking.

0.1.332: fixes sign-in regressions in 0.1.331 — the auth-intent cache no longer reuses consumed/revoked intents (add-account closed mid-typing; post-logout sign-in looped); add-account always mints a fresh intent.

0.1.331: multi-account — several signed-in accounts with per-account workspace containers, profile-menu switcher, add-account window with private consent; reworked first-run (three-prompt tutorial, permissions overview + required perms stage with live grant sensing, sign-in after permissions); Tahoe-native app icon (no white plate in small views); seamless draggable sign-in window; Bridge installs first so it's ready for the permissions stage.

model-agnostic setup (no claude-auth step or banner); Perplexity-style login: native Google sign-in sheet, compact draggable window centered on the active display, signing-in animation; permissions phase in its own window (red dot only); tray deferred until tutorial done; setup survives app close; cmd+W closes tabs not the app; browser picker and input automation removed; UI selection guards

• version.json → 0.1.272 (Kyle Bergstedt)

• version.json → 0.1.271 (Kyle Bergstedt)

• version.json → 0.1.270 (Kyle Bergstedt)

0.1.270: the renamed world — hydrogen/bridge naming throughout, golden image v20 (adom-bridge in-machine CLI), perplexity-style first-run with once-per-install onboarding, full-bleed app icon

Restart button hardened (synchronous stop, boot liveness probe, relay re-ensure), auth-proxy token fix, /ad/health + Ports dialog macOS fixes, webview-storage wipe works on macOS, fusion bridge 1.8.5 bundled

Branded quit dialog with remember-choice (On Close setting), rebuilt About dialog with macOS fields + macos wiki links, launch-time relay re-ensure

John's 0.1.293-301 platform-neutral fixes ported (API Explorer LED race, BOM-tolerant setup-flags, dock: launch reveal + real address bar after takeover + no dead /exec probe, shell target ranking). Fixes the titlebar double-click maximize double-fire. The DMG ships 'Uninstall Hydrogen Desktop.app' — a signed, notarized uninstaller with tiered prompts that only removes what is HD's: app always, workspace VM opt-in (only the hd-builder Lima instance, never your own VMs), Adom Desktop opt-in. (Replaces 0.1.190, whose script-based uninstaller was Gatekeeper-blocked on other Macs.)

John's 0.1.293-301 platform-neutral fixes ported (API Explorer LED race, BOM-tolerant setup-flags, dock: launch reveal + real address bar after takeover + no dead /exec probe, shell target ranking). Fixes the titlebar double-click maximize double-fire. The DMG now ships 'Uninstall Hydrogen Desktop.tool' — a tiered uninstaller that only removes what is HD's: app always, workspace VM opt-in (only the hd-builder Lima instance, never your own VMs), Adom Desktop opt-in.

John's dock (app-launcher rail) + Hero Deck + Adom Studio themes on macOS, with the design-token stylesheet. Claude: activity-bar icon opens the sessions list, chats open as editor tabs, extension auto-updates (setup installs latest; known-broken 2.1.179-2.1.212 removed on sight). AD is adopted into embedded mode (Dock icon hides with AD >=1.9.183). Traffic lights centered in the header; top banners clear them. Browser picker: only installed browsers, real Safari icon, pup's brand tile, Enter-selects. Dark native scrollbars. Idle log volume cut ~99%. Replaces the withdrawn 0.1.177 (workbench init crash).

John's dock (app-launcher rail) + Hero Deck + Adom Studio themes ported to macOS. AD is now adopted into embedded mode (Dock-icon hide works with AD >=1.9.182). AD update apply no longer races the respawn loop. Idle log volume cut ~99% (frame-eval/heartbeat/reconnect now log events, not steady state). install_node served natively on macOS.

KiCad/Fusion bridges: fixes the same PATH trap as 0.1.175's Node fix — HD could not see a Homebrew Python and silently fell back to KiCad's bundled Python 3.9, which the bridges can't run on (opaque TypeError instead of a clear error). All interpreter lookups now share one version-verified resolver

fixes the fresh-Mac node deadlock: HD reported Node 'not installed' for a Homebrew node it couldn't see on a GUI app's PATH, while its installer saw that same node and installed nothing — all node lookups now share one resolver (PATH + mac install dirs + Adom Desktop's runtime tree + HD's own)

AD verbs stop being shadowed: any desktop_* verb HD doesn't implement is now forwarded to Adom Desktop instead of reporting 'not available on macOS' (adom-desktop runtimes works again); HD also reuses AD's already-downloaded Node/Python runtime instead of fetching its own copy

fresh-Mac pup fix: a browser_* command with no Node now installs HD's managed Node runtime automatically instead of telling you to install Node manually (the old short-circuit ran ahead of the auto-installer, and the runtime HD had already downloaded wasn't detected); plus silenced code-server's open-external popup during claude auth (0.1.172) and the pane-resize fix (0.1.171)

silence code-server's open-external popup during claude auth (auto-confirms it so the auth link still opens, user never sees it); plus pane-resize fix (0.1.171) + runtime auto-kick + pup 1.9.85 (0.1.170)

code-server pane resize fix: WKWebView drops resize events into resized iframes — HD now dispatches them into the same-origin editor iframe, so the whole workbench relayouts (was: only the search bar followed)

fresh-install fix: bridge spawns auto-install the managed node/python runtime on demand (pup no longer dead-ends on a box without node); bundled pup seed refreshed 1.0.14 -> 1.9.85 (mac-capable)

port of main through 0.1.267 (wiki-live lightbulb prompts, no setup re-pop after updates, lightbulb by logo, assisted sign-in opt-in, AD toggles wired) + same-origin code-server (VS Code tabs survive restarts) + workspace split/close fix + pkg-first bridge skills + fusion mac seed

settings: HD sections always visible again; admin gate moved to the logo-menu Admin section (Setup Steps / Virgin Reset / Browser Picker Manager) behind a one-time Settings checkbox

rebuild of 0.1.166 content (claude-code ext 2.1.218, golden v15, settings cleanup + admin gate)

claude-code ext 2.1.218 (blank-panel crash fixed upstream), one Claude sidebar icon, golden v15, settings cleanup + admin gate

eda install harness: tour never skips missing kicad/fusion (hd-eda-install skill + install-don't-skip prompts), bundled bridge skill packages (kicad-tour, fusion-*) now install into the machine, mac desktop_open_url verb, browser-picker profile names/avatars (0.1.164)

browser picker: real per-profile names + avatars from Chrome Local State info_cache (rows all said the browser name; local profiles had no name/picture); includes fusion bridge seed 1.8.3 refresh

fixes 0.1.162 black screen (undeclared ctx-tooltip vars killed the Svelte scheduler on first render). Full port of main through 0.1.258: iframe Webview default + External Webview (native) opt-in per John's 7cf4dc6b reversal, frame-block handoff card, HTML lightbulb menu + Speak Adom prompt, rich tab tooltips, title-bar menu polish, tab follows page title, persisted 1h/24h permission grants

port of main through 0.1.258: iframe Webview default + External Webview (native) opt-in, frame-block handoff card, HTML lightbulb menu + Speak Adom prompt, rich tab tooltips, title-bar menu polish, tab follows page title, persisted 1h/24h permission grants; plus native-webview arc + single-panel heal + durable session from 0.1.160/161

Setup banners now display below the nav bar instead of over the traffic lights (unified-titlebar follow-up).

Hardened Claude sign-in gate: setup now waits at the auth step until sign-in genuinely completes (credential-verified, walk-away-proof, restart-resistant) — prompts can never run unauthenticated. Plus all 0.1.157 fresh-install fixes.

Fresh-install fixes: bridge runtimes auto-provisioned (Node + Python when the system lacks them), KiCad bridge 0.10.0 with full macOS support bundled, setup cascade matches Windows (demos in the lightbulb menu, end-to-end verify gate), file explorer collapsed by default, Adom Desktop stays hidden.

Unified macOS titlebar: traffic lights merged into the app header (drag + double-click zoom respecting System Settings), owner/repo breadcrumb and capture buttons hidden to match Windows, samples button styling fixed.

Adom Desktop: periodic re-converge so stale Macs upgrade themselves, live :47200 version verification, and quarantine-strip on install.

Windows-parity batch: in-HD permission prompt, sample-prompts + lightbulb progress card, fullscreen exit affordance, native code-server reload detection, wiki auto-login, working Settings toggles, adom-cli non-login-shell env fix.

One menu-bar icon: Adom Desktop now runs embedded (no second tray icon; its menu lives in HD's tray, quits with HD). Skip-the-demo-prompts button in setup. Claude Code sidebar icons hidden (top-bar button only).

Title bar and About now report the installed version correctly (0.1.151 showed v0.1.150); removed the InstaPCB setup step.

Editor-only app (web views removed), native fullscreen, bundled self-provisioning bridges (pup/kicad/fusion incl. fusion macOS port), Adom Desktop installed + kept alive as a first-class companion, login-replay backdoor removed, tab-menu Reload, streamlined setup (no Accessibility/Screen Recording gates).

Setup shows live progress during long install phases (heartbeats + golden-image download percentages), and the installer dmg gains a drag-to-Applications arrow that keeps native label colors in light and dark mode. Notarized.

Setup now shows live progress during the long install phases: still-working heartbeats every 10s while the Lima VM provisions/boots and the workspace image imports, and download percentages every 5s for the 600MB golden image. The installer dmg also gets a proper drag-to-Applications arrow. Notarized.

Fixes Adom workspace authentication: the API key is now injected right after Adom sign-in and re-verified on every launch, so adom-cli no longer 401s after signing in late or rebooting the workspace. Notarized.

Fixes the blank Claude Code panel on fresh installs: the workspace now uses a code-server whose editor doesn't crash the Claude extension (VS Code 1.101+ broke it). Notarized.

Fixes the blank Claude Code panel: the editor extension is now pinned to the code-server-compatible build at runtime and re-checked every launch, so a marketplace auto-update to an incompatible version can no longer break it. Notarized.

Silences macOS Sequoia's monthly screen-recording 'bypass the system window picker' dialog (HD pushes its own re-nag date far into the future on launch). Notarized.

Fresh installs use golden image v13: the Claude Code extension can no longer be clobbered by the CLI's auto-install (the cause of the blank panel on v11/v12/0.1.142-143). Notarized.

Fresh installs use golden image v12: Claude Code extension pinned to the code-server-compatible build (v11/0.1.142 baked an incompatible latest that blanked the Claude panel). Runtime pin enforcement hardened. Notarized.

Fresh installs now use golden image v11: adom-wiki replaces the retired adompkg throughout, native arm64 Claude Code, and the shot/statusline helpers baked in. Notarized.

Setup now seeds ten demo conversations (parts search, KiCad, Fusion 360, Altium, pup, native browsers, Google Workspace, chip-fetcher, adom-tsci) after Welcome. Notarized.

Pane-divider drags no longer die over the editor iframe (the resize bug), and fresh installs land on a clean editor load (final reload after setup). Notarized.

First notarized build (Gatekeeper-clean download). Quit now keeps the workspace running by default (pause-style) — terminals and Claude sessions survive across app restarts. Stop remains an option; crash-recovery journal hardened.

Workspace state journal + adom-restore: terminal and Claude sessions recover after quit, crash, or power loss

First wiki-published release: updates + DMGs now ship from wiki.adom.inc (adom/hydrogen-desktop-macos); GitHub hd-lima-image hd-app releases retired.

Catch-up release from 0.1.98 (source: adom-inc/hd-lima-image hd-app releases). Highlights: skills-converge migrated adompkg -> adom-wiki and setup now runs the bootstrap deploy chain so baked skills actually refresh (0.1.107/0.1.135); Claude auth pre-seeded onboarding + new re-auth/consent flows (0.1.112); Developer ID signing with hardened runtime, HD takes the workspace-relay seat on macOS, dynamic bridge platform (0.1.128); self-update banner + in-workspace tooling updater (0.1.129); quit confirms and stops the workspace VM (0.1.130) and launch auto-restarts it (0.1.131); setup auto-resumes after late sign-in + single-flight auth (0.1.132); screencapture resolved by absolute path (0.1.133); fresh-install apt retries on slow networks (0.1.134). DMG is signed but not notarized - right-click Open once, or pkg install drops quarantine.