## Houston 0.4.10

The big consolidation release. Native Windows ARM64 alongside the existing Mac universal and Windows x64 builds. A reimagined first-run that walks new users from cold app to a working assistant, then turns the resulting work into a reusable Skill and a daily Routine. Per-workspace `WORKSPACE.md` + `USER.md` context that gets injected into every agent's system prompt. A Linear-style keyboard layer with a command palette and arrow nav on boards. The ability to share an agent with a friend as a single `.houstonagent` file. Plus a stack of Windows reliability fixes from a month of live testing.

### What's new

- **Native Windows ARM64.** First ever ARM64 MSI. Composio runs as a real aarch64 binary (built from the `houston-windows-support` fork with a bun:ffi fallback for Bun's missing TinyCC on Windows-on-ARM). PortableGit ships per arch and auto-extracts on first launch, and `CLAUDE_CODE_GIT_BASH_PATH` is exported globally so every Claude Code spawn site inherits it. No more "install Git for Windows" hand-holding; no more emulated x64.
- **Share an agent with a friend.** A new "Share with a friend" action on any agent row packages CLAUDE.md plus chosen skills, routines, and learnings into a single `.houstonagent` file. Optional Houston-driven anonymize pass redacts emails, paths, handles, and phones with side-by-side diffs you accept per item. Recipient opens New Agent, picks "From a friend", confirms name, color, and provider, and the agent shows up in the sidebar.
- **Create a skill from scratch.** A third tab on Add Skill next to Skills.sh and GitHub. Title auto-slugs, body is markdown, collision-aware.
- **Per-workspace context: `WORKSPACE.md` + `USER.md`.** Two markdown files at the root of each workspace feed every agent's system prompt at session start. `WORKSPACE.md` is about the company, product, and customers (shared by every agent in the workspace). `USER.md` is about you: role, goals, preferences. Edit them from new Settings tabs that mirror the agent Instructions UX exactly. Agents can write them through the normal file-write tool when you tell them something new about yourself.
- **Reimagined first-run: Try, Skill, Routine, Summary.** The day-plan mission turns into a reusable Skill (`plan-my-working-day`) plus a daily Routine that calls that Skill at the time you pick, ending on a celebration screen that lists your new Skill and Routine. Same chat surface throughout, Skip always available, defaults to your connected Google or Outlook toolkits.
- **Keyboard shortcuts + command palette.** Linear-style power-user layer:
  - `⌘K` command palette (agents, recent missions, top-level actions)
  - `⌘N` new mission scoped to the current board
  - `⌘M` Mission Control
  - `⌘[` / `⌘]` cycle agents
  - `↑↓←→` move across the kanban grid
  - `?` cheatsheet

  Selected mission card picks up the comet-glow treatment and hydrates straight into the chat composer ready to type.
- **Two-model picker + integration-style provider cards.** Anthropic: Opus + Sonnet (default Sonnet). OpenAI: Codex via your ChatGPT plan, default model reverted from gpt-5.5 to the stable lineup after a rejection-card surfaced "GPT-5.5 not in your plan" cleanly instead of failing silently. Provider cards now match the Composio integration style: one click to sign in, one click to sign out.
- **Per-mission model selection persists.** Picking a different model on one mission no longer cascades to siblings. Each mission stores its own provider + model in `activity.json`.
- **Settings: 3 sections + Report bug.** Workspace (name, language, timezone, theme), AI provider, Connect phone, plus a Report bug section that submits straight into Linear and surfaces the returned issue ID inline.
- **Privacy + Terms pages on the website.** Linked from every footer.

### Reliability

A month of live Windows testing surfaced a long list of issues:

- **Windows ARM64 claude-code now auto-installs** instead of failing with "unknown host platform".
- **Windows first-launch crash loop** caused by PortableGit extraction edge cases is gone; the engine extracts the SFX natively before any `claude.exe` spawn.
- **Windows OAuth sign-in** now completes via implicit-flow callback in addition to PKCE (PKCE alone failed silently on some Microsoft tenants).
- **Single-instance Tauri** so the OAuth deep-link reaches the already-open Houston window instead of spawning a fresh process that doesn't know about the original sign-in.
- **Persistent session storage** with surfaced storage errors and a "Send logs" CTA when things go sideways.
- **Skip-tutorial escape hatch** for accounts that get stuck mid-flow.
- **"A local tool failed to start" on user-clicked Stop** is gone. The engine no longer misreports a graceful cancellation as a crash.
- **Stale codex global config no longer kills sessions.** The engine passes `-c model_reasoning_effort=medium` explicitly so an `xhigh` left in your `~/.codex/config.toml` from a newer CLI cannot blow up the session.
- **Bundled codex bumped to 0.130.0**, which is the version `gpt-5.5` requires server-side.
- **No more 5 to 10 second "frozen" feeling at session start.** The parser now anchors on codex's `turn.started` event instead of waiting for the first reasoning token.
- **Claude 401 errors stop showing "Something got stuck"** and surface as a real re-auth card.
- **Auth gate updates on sign-in.** Session is now written into the React Query cache after `setSession` so the gate flips immediately.
- **Onboarding dead-zones killed**: missing `providers.json` keys, the Activity empty-state flash, the tutorial waiting-state hang.
- **Windows clickable file links + Markdown preview** in the New files section.
- **Light / dark mode**: hardcoded color values across the UI replaced with semantic CSS tokens so dark mode actually looks dark.
- **PostHog instrumentation** for growth (`user_signed_in`, `user_signed_out`), activation (`onboarding_started`, `onboarding_completed`), and engagement (`session_completed`), all scoped per workspace and agent.

### Before you upgrade

- **Mac:** quit Houston before installing. macOS does not always replace a running app cleanly. If in doubt, remove `/Applications/Houston.app` and drag the new copy in.
- **Windows x64:** auto-update from 0.4.7 or 0.4.9 should pull you forward automatically. The MSI is still not OS-code-signed (SignPath integration is on the roadmap). One SmartScreen "Run anyway" prompt on first install only.
- **Windows ARM64:** this is the first ARM64 build. There is no auto-update path from an emulated x64 install. Download the ARM64 MSI manually, uninstall the x64 build first, then install the ARM64 one. Future ARM64 to ARM64 updates apply automatically.

### If you are on 0.4.5 or later (Mac / Windows x64)

Houston should detect 0.4.10, download it, install it, and relaunch into the new version on its own.

### If you are on 0.4.2 or earlier (Mac)

Auto-update will not pull you forward from those builds. Quit Houston, drag a fresh DMG over `/Applications/Houston.app`, and reopen. After that one manual step you are back on the healthy updater path and future versions apply automatically.

### Known limitations

- **Windows MSI not yet OS-code-signed.** SignPath integration still pending. One SmartScreen "Run anyway" click on first install only, both x64 and ARM64.
- **"Continue with Microsoft" sign-in for Houston itself remains hidden** while we reconcile the Supabase Azure provider with the production callback URL. Google sign-in is unaffected. The Microsoft 365 + Outlook tutorial path is unaffected.
- **Mobile companion is still beta.** Expect occasional reconnect hiccups. Keep your Mac awake while using it.
