v1.1.7

Release notes for ADE v1.1.7 — April 29, 2026

v1.1.7 is one of the largest ADE releases to date — 19 commits, 415 files, ~+48k/-16k lines. Headline beats: an in-chat iOS Simulator panel with auto-resolving visual stream, full Factory Droid ACP chat support alongside Claude / Cursor SDK / Codex, Windows code-signing + sync parity for the Windows desktop build, lane branch switching with a first-class branch selector, Live Activity & Lock Screen widget polish on iOS, and a wholesale removal of the legacy context-packs system in favor of on-demand context doc generation. Plus dozens of smaller fixes across PRs, automations, terminals, sync, and the chat composer. Ships in TestFlight build 9 of 1.1.1.

---

Desktop

iOS Simulator

A full in-chat iOS Simulator surface, attached to chat sessions and driven by the new automations action registry.

• In-chat simulator panel. New ChatIosSimulatorPanel renders a live preview directly inside the chat pane with drag-region capture, point-and-drag interaction (tap/type/swipe/select-point), per-session attach via iosSimulatorService.attachToChatSession, and a chat-composer toggle to open or hide the drawer per session. The AgentChatPane empty-state, chatTranscriptRows, and the new consolidateInterruptedTerminus helper keep the transcript clean when the panel is open.
• Live simulator view. ade ios-sim live-start and the panel both show the running simulator consistently inside ADE.
• Window-state warnings. New iosSimulatorGetWindowState IPC handler probes Simulator.app via System Events and returns { appRunning, visible, windowCount, minimizedWindowCount, capturable, issue } so the renderer can warn when capture is stuck on a hidden, minimized, or missing window. Matching helpers (prepareSimulatorWindowForCapture, followSimulatorWindowUnderAde) keep the Simulator window parked behind ADE for window-capture mode.
• Bounded simctl operations. waitForSimulatorBootStatus (90 s) and installAppOnSimulator (180 s) now share a runSimctlWithTimeout helper. Stuck CoreSimulator failures map to actionable error messages instead of unbounded hangs.
• Hardened mac-utility runner. The runMacUtility helper used by the AppleScript / osascript plumbing now SIGTERMs the child on timeout (escalating to SIGKILL after 250 ms) and removes its event listeners on the resolve path, fixing a leak where timed-out helpers stayed resident.
• CLI surface. ade ios-sim gains launch, live-view, screenshot, input, and inspection commands aligned with the drawer experience.
• Action registry coverage. Simulator actions are reachable from the desktop action registry and the chat-driven automations surface, so agents can launch, stream, tap, and screenshot without leaving chat.

Factory Droid Chat

Factory Droid joins Claude Code and Cursor as a first-class chat provider.

• Droid ACP runtime. droidAcpPool spawns droid exec --output-format acp and pools JSON-RPC connections by lane. Authentication runs through Droid’s CLI plus FACTORY_API_KEY. Dynamic droid/* model descriptors are discovered at runtime with provider-side defaults.
• Shared ACP host client. acpHostClient factors the JSON-RPC handshake, lifecycle probing, and steer-queue plumbing into one well-tested client for Droid and any future ACP provider.
• End-to-end chat wiring. DroidRuntime is plumbed through agentChatService for turn execution, steer queue, interrupts, permission prompts, and persistence. AI status, model picker grouping, providers settings, and runs permissions all learn the new droid provider.
• Pool reliability. Acquires are now serialized per pool key with a shared pending-init lock, so two simultaneous chat opens cannot double-spawn. Stale pool entries are evicted on child close/error. Init/handshake failures kill the process and log the stderr tail. ACP terminal cwds resolve within the lane root, and waitForTerminalExit is capped with a SIGKILL escalation + close wait to avoid stuck terminals.

Windows + Sync

Windows desktop reaches feature parity with macOS for code-signing, sync, and packaging.

• Code-signed Windows builds. release-core.yml now plumbs Windows code-signing secrets into the build, configures signtoolOptions (electron-builder 26.x layout — signingHashAlgorithms and rfc3161TimeStampServer live under win.signtoolOptions), and emits validated ADE-<ver>-win-x64.exe + blockmap + latest.yml artifacts. validate-win-artifacts.mjs checks the produced asset set so a partial win build never makes it into a draft.
• Windows install path + wrappers. New ade-cli-install-path.cmd uses setlocal enabledelayedexpansion so HOMEDRIVE/HOMEPATH fallbacks resolve correctly, and ade-cli-windows-wrapper.cmd executes cmd.exe /d /s /c "..." so spaced paths work; the WM_SETTINGCHANGE encoded-command block is preserved as a documented rem block. ptyService aligns with the wrapped form.
• forceHostRole lock. syncService carries a forceHostRole flag so a desktop hosting phone sync can’t be silently demoted to viewer by stale on-disk state. main.ts serializes reconcileSyncHostContexts so async runs land in order.
• Sync host backpressure. syncHostService.send() centralizes the backpressure check; the previous CONNECTING silent fall-through is gone — callers now get an explicit error instead of a swallowed promise. encodedEnvelopeBytes() exposes envelope size for upstream throttling, and dedup-by-deviceId on hello/state read prevents stuck duplicate peers.
• Project icon override + atomic config. setProjectIconOverride is wrapped in try/catch, iconSearchRoots is cached by mtime, and .ade/ade.yaml writes use atomic write-rename so a crash mid-write can’t corrupt project state.
• Browser mock snapshot. export-browser-mock-ade-snapshot.mjs produces the renderer mock fixtures used by the mock-mode browser preview; output is gitignored.

Lanes + PRs

Lane branch switching, deep-link stability, and PR-flow polish.

• Lane branch selector. Lanes now expose an explicit branch switch flow. gitOperationsService and laneService.switchBranch clean up stale per-PR rows on swap (UPDATE → DELETE; lane_id is NOT NULL). branchSwitch test suites cover the new contract end-to-end.
• CLI checkout flags. ade git checkout-branch learns --start-point / --from / --base-ref. adeRpcServer.git.checkout_branch declares its required schema fields, keeps optionals optional, and rejects unknown checkout modes with invalidParams.
• Lane URL deep-link stability. The lane deep-link useEffect now reads from a single urlLaneDeeplinks memo (laneId / laneIds / focus / inspectorTab parsed in one place), with a content-stable availableLaneIdsKey string trigger and a derived availableLaneIds array. Drops the inline split round-trip while keeping referential stability across lane refreshes.
• Lane picker. Branch creation in the lane picker is now expandable inline.
• Tabs keep work surface alive. PersistentWorkSurface and WorkViewArea now keep terminals and chat panes mounted across tab reroutes — the HTML hidden attribute strips from the a11y tree, so the redundant aria-hidden was dropped. AgentChatPane’s 5-second refreshAvailableModels poll suspends when mounted-but-hidden in a background tab; streaming subscriptions stay live so background sessions remain in sync.
• PR draft filter on iOS. Mirrors the desktop draft filter for the phone PR list.

Automations

Per-action overrides, lane-mode execution, and a renderer chrome rewrite landed in v1.1.6 carry forward; this release adds the polish.

• Composer iOS-sim toggle. The chat composer learns a per-session toggle to open or hide the simulator drawer; eager-create attach is gated behind that toggle so opening a session that doesn’t need the simulator stays cheap.
• Clipboard image paste fallback. AgentChatComposer reads clipboardData.items when clipboardData.files is empty, so screenshot / image paste works on macOS where the file path comes through items only. Includes a contract test pinning the fallback.
• AgentChatMessageList chip parser. Token-boundary check tightened so subagentStoppedCount chips and similar markers no longer match inside unrelated word sequences.
• ChatWorkLogBlock empty-output guard. A trim() check on entry.output keeps the work-log row from rendering an empty pill.
• TerminalView WebGL restore. pendingWebGLRestore now survives renderer changes, so a context loss during a re-render still restores the WebGL renderer correctly.

Context + Cleanup

The legacy context-packs system is gone; context-doc generation replaces it on demand.

• contextDocBuilder / contextDocService. New main-process service builds a project context doc on demand from current code state. Replaces the prior contextPacks plumbing in the chat service, orchestrator, prompts, and settings UI. chat/context.mdx documents the new flow on the Mintlify side.
• Removed. contextDocBuilder (old), contextShared, ContextSection, context-packs/* docs, plus dependent-file cleanups in the orchestrator, chat service, prompts, and feature docs.
• Settings UI. Context-pack settings panels are gone; chat now picks context per turn rather than per pack.
• Web index entry. Removed an unused apps/web index entry that referenced the old packs surface.

Quality

CI fixes, review remediation, and a tighter test surface.

• Build-win signtool layout. signingHashAlgorithms / rfc3161TimeStampServer moved under win.signtoolOptions to match electron-builder 26.x. Restores green builds on the build-win-release job.
• build-mac-release validation. validate-mac-artifacts.mjs checks the produced asset set so an asymmetric desktop release can’t slip through; the release pipeline gates on it.
• ptyService test alignment. Test now expects the wrapped cmd.exe /d /s /c "..." form introduced for Windows path safety.
• Health-sweep test budget. aiOrchestratorService health-sweep test bumps wait budget 40 → 200 (1 s → 5 s) and per-test timeout 10 s → 15 s for CI loadiness.
• subagentStoppedCount render guard. AgentChatMessageList now uses (count ?? 0) > 0 so the literal 0 can never reach the DOM.
• runMacUtility listener leak. Event listeners are removed and the timeout is cleared on every resolve path; SIGTERM/SIGKILL fire on timeout instead of leaving the child running.
• simulatorWindowName regex tightening. Word-boundary anchors so ios doesn’t match unrelated window titles like “kiosk”, reducing false thumbnails in the picker.

---

iOS

Live Activity + Lock Screen

Widget surfaces get a polish pass after several rounds of feedback.

• Attention overrides cooldown. LiveActivityCoordinator lets explicit attention signals override the dismissal cooldown, so an agent flagging an issue isn’t suppressed by a recent dismissal.
• Awaiting / idle fallback. ADESharedModels derives awaiting-input and idle counts from agents when keys are absent in the shared snapshot — older snapshots produced by previous app versions decode cleanly instead of showing zeros.
• Preview fixtures scrubbed. ADEWidgetPreviewData no longer carries real workspace data; previews now use synthetic content.
• Dead failed-agent UI removed. ADEWorkspaceWidgetViews had unreachable failed-agent branches; gone.
• Layout pass. ADELiveActivityViews, ADELockScreenWidget, and ADEWorkspaceWidgetViews get a layout / spacing / typography pass across compact, expanded, and lock-screen variants.
• Control widget + previews. ADEControlWidget cleanup; ADELiveActivityPreviews adds previews for the new states; ADELiveActivity plumbs a few more attention payloads through to the Live Activity view.

Sync + Pairing

Multi-host pairing keeps tightening.

• Profile dedup with recency. shouldPreferProfile picks the newer / Tailscale-preferring / has-last-successful-address profile when two map to the same storage key. Used during legacy [HostConnectionProfile]-array migration so collisions don’t fall to last-write-wins, plus a paranoia dedup pass before encoding.
• Cross-key dedup. deduplicatedProfiles now matches on hostIdentity, lastHostDeviceId, hostName:port, and lastSuccessfulAddress:port simultaneously, so duplicate profiles across keys collapse into one.
• Tailnet detection. profileHasTailnetRoute checks tailscaleAddress, lastSuccessfulAddress (via syncIsTailscaleRoute), and savedAddressCandidates, treating tailnet routes encoded in any field as equivalent.
• Dead reconnect path removed. reconnectToSavedHost and its only helper profile(forSavedHost:) are gone — both unreachable post-rebase, flagged by Greptile.
• Reduced-load support. New iOS support for the host’s reduced-load mode, with desktop-side test coverage in iosSyncReducedLoad paths.
• Saved-host count in pairing. SettingsPairingSection shows the saved-host count so the user can see what’s about to be cleared.
• Legacy host key prune. SyncService prunes legacy host keys on load and removes the stale saved profile on a failure path. KeychainService token lookup is scoped to the active host.

Chat + Work

Refinements to the iOS chat composer and Work surface.

• Composer state extraction. WorkChatComposerDraftInput extracts draft state into a WorkChatComposerDraftState: ObservableObject and splits TextField + SendButton into sibling subviews (WorkChatComposerTextField, WorkChatComposerSendButton). Stop button stays on the parent. Token insertion behavior preserved (auto-spacing); restore-on-failure preserved.
• Timeline tool-group fallback. WorkTimelineHelpers now emits a tool-group when no file paths can be extracted, so the timeline doesn’t render an empty container.
• Work session refinements. Carry-overs from #216: session grouping, Work-surface keep-alive parity with the desktop tab fix, smaller polish on the Work / Chat split.

Other

Smaller fixes that did not warrant their own section.

• Mobile UI fixes. Layout polish across Work and Lanes from a hand pass on the device after the renderer changes landed.
• Tests. ADETests rebalanced — 256 lines of churn covering the composer extraction, profile dedup, Live Activity coordinator, and timeline fallback.