← Back to ai-term.com

AITerm Changelog

Every release, newest first.

0.16.2 Polish

• Clearer first-run prompt. When local AI isn’t set up yet, the “Set Up AI…” action now renders as a button, so it’s obvious you can click it.

0.16.1 Reliability

• Dry-run preview lists the files. The safety preview now shows exactly which files a delete or move would touch — previously it showed the count but the list could render blank.
• Amazon Bedrock works with the latest Claude models. Requests to newer models (via a us.anthropic.* inference profile) no longer fail, and a rejected request now shows the real reason instead of a misleading “API key” message.
• Model ID edits stick. Changing a Bedrock or Azure model / profile id and clicking Apply now saves what you typed.
• Remove saved connections. Right-click a saved connection to delete it.
• Friendlier first run. A clear “Set Up AI…” prompt instead of a raw connection error when local AI isn’t set up yet, plus a status-bar progress indicator while the local model downloads.
• Move to Applications. Launching from the mounted disk image now offers to move AITerm to Applications so automatic updates work.

0.16.0 Handbook

• Built-in user manual. A complete, searchable handbook ships inside AITerm — open it from Help ▸ AITerm Manual and browse every feature.
• Also on the web. The same manual is published at ai-term.com/manual.

0.15.2 Maintenance update

• Behind-the-scenes updates. Internal service endpoints and project links moved to their new home — no change to how AITerm works.

0.15.1 Settings polish & reliability

• Tidier Settings. The Privacy and Security tabs are now left-aligned and scroll properly.
• Reset to Defaults now really resets — per-host SSH profiles, imported policy packs, and the cloud-context level are cleared (after confirmation).
• Under the hood. More robust command-history loading.

0.15.0 “Guardrails”

• Dry-run preview. See exactly which files a delete or move would touch before it runs — or the tool’s own dry run, like rsync -n.
• Safety profiles with teeth. Production and Locked Down make risky commands stop and ask — or block outright; per-host SSH profiles turn a pane red on hosts you mark (authoring is Pro).
• Team policy packs. Import always-block / always-ask rules that can only ever tighten your gate. Importing is free; authoring and export are Pro.
• Tamper-evident audit log. Every command decision and its exit code goes to a hash-chained local log; signed export is Pro.
• Transfer safety. scp and rsync are risk-tiered by direction and scope, so a destructive sync asks first.
• Back up, then run. One click backs a file up before a risky delete.
• History, grown up. Capacity to 10,000 commands, a fuzzy ⌘K palette, and search by meaning (Pro).

0.14.0 “Total Context”

• The AI understands your session. /fix and /explain now get real context — recent commands, exit codes, and (when you allow it) their output.
• “See what the AI sees.” An eye chip shows the exact session context sent after every AI request — redacted for cloud models, exactly as received.
• You control what the cloud sees. A new Privacy setting caps how much session context a cloud model receives; local models always get full context.
• Privacy fix. Each tab’s AI context now comes only from that tab’s own history.

0.13.0 “Navigator”

• Scrollback search (⌘F). Incremental find across your whole scrollback with highlights and a live match count.
• Jump between commands (⌘↑ / ⌘↓) and click a mark to select one command’s exact output.
• Proactive “Fix?” chip. When a command fails, AITerm instantly names the likely cause — entirely on your Mac, no model call. Clicking never runs anything.
• Finish-line notifications. A long command that finishes in the background posts a macOS notification with its exit code.
• fish shell support with the same nonce-authenticated integration as zsh and bash.
• Opt-in crash reports — local first. Nothing is uploaded unless you click; no third-party SDK.

0.12.0 Licensing you can trust

• Pro licenses are now validated server-side and cryptographically signed; the app verifies them locally with an embedded key. About one reconnect a month keeps Pro active; roughly six weeks fully offline before it pauses.

0.11.0 The AI agent

• /agent — multi-step tasks, your approval each step. Describe the goal; it proposes each command and waits for you.
• /auto — opt-in autopilot. Auto-runs only the steps the safety gate can prove are safe and inside your project folder; pauses for anything that deletes, reaches the network, or acts outside it.
• Bounded build trust. An exact-form allowlist lets common build steps (npm install, cargo build…) auto-run — nothing else qualifies.
• Help ▸ Using the Agent explains both modes honestly.

0.10.7 Security hardening

• Sharper command-safety checks. The risk classifier now catches remote commands over ssh/mosh, obfuscated interpreter one-liners, and generated payloads piped into a shell.
• The AI gate covers every way you enter text — dictation, the emoji picker, IME, and Services insertions.
• Runbook review fix. A step built from an earlier step’s output is reviewed as the real command, not the placeholder.
• Robustness. Hardened Bedrock streaming and saved-session loading against malformed input.

0.10.6 Paste fix for terminal typing

• Pasting now works when typing directly in the terminal — pasted commands go to the shell line instead of the AI input bar.

0.10.5 Remote-command safety

• The safety gate now vets commands you run on other machines. A risky ssh host '…' gets the same risk badge, confirm, or block — escalated for the larger blast radius.
• Your safety profile is the prod dial. Production or Locked Down blocks destructive remote commands outright; harmless ones run without nagging.
• Hardening fix. Clustered shell commands like bash -lc '…' are vetted too.

0.10.4 Type directly in the terminal

• Click into the terminal to type on the shell line — a clear indicator shows the AI safety gate is bypassed.
• Focus stays where you put it, and drifts back to the AI bar after 15 seconds idle at the prompt.

0.10.3 Shortcuts & settings polish

• Font size shortcuts. ⌘+ / ⌘− resize the terminal text, ⌘0 resets — live in every pane.
• ⌘⇧F runs /fix on your last command.
• Software Update settings fixed and a tidier ⌘/ cheat sheet.

0.10.2 Update settings you can reach

• Fixed: the update notification could get stuck when automatic installs were on; the badge is restored.
• New: Settings ▸ Terminal ▸ Software Update — version, auto-install toggle, and check-for-updates in one place.

0.10.1 Better text selection

• Selection auto-scrolls past the top or bottom edge, so you can select more than one screenful.
• Readable selection highlight — each theme now uses a high-contrast selection color.

0.10.0 Keyboard-shortcut cheat sheet

• New: Keyboard Shortcuts reference. Press ⌘/ (or Help ▸ Keyboard Shortcuts) for a one-look cheat sheet of every shortcut.

0.9.9 “Automatically update” now works

• “Automatically download and install updates” is now honored — the setting sticks across launches instead of resetting every time.

0.9.8 Scrolling in interactive tools

• Scrolling works correctly inside interactive tools. When a full-screen program supports the mouse (vim, htop, fzf, …), the wheel scrolls the program instead of cycling its history.
• Settings: clearer separation between the provider list and the selected provider’s configuration.

0.9.7 Terminal scrolling & settings polish

• The mouse wheel now scrolls full-screen programs — pagers, man pages, and any alternate-screen tool.
• Provider setup is easier to find. Picking a provider scrolls straight to its configuration fields.

0.9.6 Privacy & reliability hardening

• Local (Ollama) always stays on your Mac. The managed Local engine is pinned to loopback, so a stray OLLAMA_HOST can no longer send on-device requests off the machine unredacted.
• Fixes a startup crash with scheme-less OLLAMA_HOST values.
• Tighter subscription-CLI hardening. The Claude Code / Codex helpers no longer inherit unrelated cloud credentials or NODE_OPTIONS.
• Smoother sign-in & fewer stray prompts.

0.9.5 One-click sign-in for Claude Code & Codex

• Sign in / switch account, in the app. A new button opens a tab and runs the official CLI browser login — authenticate or switch accounts without leaving AITerm.

0.9.4 Your subscription in the provider picker

• Claude Code & Codex, front and center. Your Claude or ChatGPT subscription via the official CLI is now a first-class choice in the AI-provider picker (under Pro).

0.9.3 Security hardening & clearer descriptions

• Stronger command-safety checks. More disguised download-and-run commands and command-laundering inside scripting one-liners now trigger the safety confirmation.
• Local AI stays local. The managed Ollama engine always binds to loopback; Managed MLX only connects to AITerm’s own engine.
• Honest provider descriptions and a configuration panel that reliably names the selected provider.

0.9.2 Clearer provider picker

• Right settings for the right provider. The inline configuration panel always names the provider you actually selected.
• Every provider explained with a one-line description; the Bedrock template and your saved Bedrock connection are clearly distinguished.

0.9.1 Provider settings polish

• Real download progress for Managed MLX setup.
• Cleaner provider picker — grouped Local / Cloud / Pro / Custom, with the selected provider’s settings inline.
• Accurate engine status, clearer Bedrock save errors, and a quick switcher that lists every active provider with its models.

0.9.0 Amazon Bedrock & Managed MLX

• Amazon Bedrock (Pro). Claude and other Bedrock models through your own AWS account — profiles, SSO, assumed roles, or keys, with per-region model discovery and streaming.
• Managed MLX (Pro, macOS 14+). Apple-Silicon-native local AI: a one-tap, on-device inference engine that runs entirely on your Mac.
• Private by default. Local engines keep every prompt on-device; cloud providers receive secret-redacted requests.

0.8.1 Security & polish

• Security and reliability fixes following the 0.8.0 release — tighter key handling and redaction, safer engine downloads.

0.8.0 Private local AI & a generous Free tier

• Private local AI, set up for you. AITerm downloads and runs a small on-device model — no account, fully offline once installed. Already have Ollama? It just uses it.
• Connect almost anything. One-tap presets for OpenRouter, Groq, DeepSeek, xAI, Mistral, Gemini, Perplexity, Cerebras, and more — or your own server.
• Free forever. The native AI terminal — command loop, /fix & /explain, tabs, splits, workspaces, the safety gate, local AI, and BYO cloud key — is now free. Pro adds subscriptions, runbooks, /agent, and Azure OpenAI.

0.7.1 Security & reliability hardening

• Sharper command safety check for dangerous commands disguised inside eval or scripting one-liners.
• No more lockouts on a network blip — license hiccups fall back to your offline grace period.
• Saved API keys are safe across updates, and runbook suggestions never save secrets.

0.7.0 Saved workspaces

• Save your layout and bring it back. Save tabs and split panes as a named workspace and reopen it anytime — every pane in its own folder.
• Picks up where you left off. Your last session is restored automatically on launch (toggle it off anytime).
• Manage your workspaces — rename or delete from the workspace manager.

0.6.1 Fewer update prompts

• Updates stop nagging for your login password. Saved API keys now carry a team-stable Keychain partition, so future updates read them silently.

0.6.0 Split panes

• Split panes. Several shells side-by-side in one tab: ⌘D splits right, ⌘⇧D splits down, ⌘⌥arrows move focus.
• Numbered tabs with a clearly highlighted active tab.
• Smarter input. ⌃C interrupts the running command while keeping your draft.
• Passive runbook capture. After a clean run, AITerm quietly offers to save the commands as a runbook.

0.5.1 Smoother updates

• Updates no longer install silently — the “Update ready — Install & Relaunch” pill waits for you.
• Fewer Keychain password prompts on update.

0.5.0 Tabs

• Tabs are here. Multiple terminals in one window — each tab its own real shell, history, and AI session. ⌘T new, ⌘W close, ⌘1–9 to switch.
• Your safety profile and audit log span every tab — a command approved in one tab only ever runs in that tab.

0.4.9

• Update notice fixed: the “Update ready — Install & Relaunch” pill now actually appears when a new version is published (the 0.4.7 wiring was inverted).

0.4.8

• Cleaner runbook capture: repeated ls/pwd/clear and duplicate lines are dropped, so you get a tidy, replayable sequence.

0.4.7

• Updates that actually land: a subtle “Update ready — Install & Relaunch” pill in the status bar instead of silent background staging.
• Rollback suggestions for destructive commands when a conservative undo or backup-first step exists.
• Project-aware AI: /fix and /explain factor in your repo, branch, and language.
• Runbook output chaining ({{step1.output}}) and history search.

0.4.6

• Fixed a bug where a second window showed another view of the same shell and sent typing to the original window.

0.4.5

• Safety Profiles: Personal, Work, Production, and Locked Down — stricter profiles escalate confirmations and block more at the command gate.
• Smarter /fix: original vs. proposed fix side by side, with one-click save to a runbook.

0.4.4

• Capture runbooks from your history: press ⌘⌥R to save recent commands as a reusable runbook — repeated values become {{variables}} automatically.
• Starter runbooks so your library isn’t empty on day one.

0.4.3

• Fixed a rare data-migration edge case where an interrupted upgrade could ask a licensed user to re-activate — the app now keeps your existing license and retries the move safely.