DesireCore v10.0.130

Release Date: 2026-08-30

New Features

• Decision Workspace: The task board now includes a governed human-in-the-loop decision workspace. You can describe decisions in business language, let the agent make a proposal, and then personally confirm, request changes, or give final approval. Version history, evidence, and reliability validation are preserved throughout.
• Compute Service Governance: Agents can view, start, stop, and sync model services within the authorized scope. You can also configure credentials for self-managed services, and secrets are never exposed to agents.
• Deterministic External Browser Opening: Before opening external web pages, the agent first checks the local browser installation and port status. It opens a page directly only when the browser is ready and short-term authorization has been obtained. If the browser is not installed or the port is not open, it clearly prompts you to handle it manually and does not mistakenly execute system commands.

Fixes

• When creating or updating a project, the selected directory now appears immediately in the working directory root dropdown, and team shared directories are synced as well. After deleting the currently selected directory, the file workbench no longer incorrectly shows the empty “no working directory” state, and the chat input area and resource panel refresh accordingly.
• Fixed an issue where an agent with local uncommitted changes was still blocked after clicking “Update anyway.” You can now choose “Save and update,” and only real conflicts open the conflict resolver. Sync can resume after interruption, and normal write, commit, and run requests are safely rejected while sync is in progress.
• Fixed an issue where the “Full Disk Access” authorization prompt on macOS could block the agent service from starting at launch.
• Fixed an issue where the last command of an external browser script could be falsely reported as failed when the total budget was tightened, and an issue where skill-specific tools could occasionally be lost or authorization scope could unexpectedly expand during multi-turn conversations.
• Fixed abnormal status and model selectability display for keyless model services, and completed missing error messages.
• Fixed a path validation flaw in working directory-related endpoints to prevent authenticated users from writing configuration files outside the allowed scope.

Improvements

• Secrets and sensitive parameters are now automatically masked in approvals, logs, receipts, conversation history, and tool cards. Without your explicit permission, agents cannot read the plaintext.
• Agent sync risk assessment and status refresh are now consistent across the top bar, more menu, marketplace, and publish entry, and converge to the same state even after operating in multiple windows.
• Permissions for opening an external browser and reading web pages are now separated. When the port is closed, it only prompts you to start it manually and does not trigger system commands or repeated model requests.