More Macs, chat plans, and Codex accounts

Added

• Switch between Plan and Agent in chat, review saved plan revisions, and implement the chosen plan without losing an unsent message.
• Connect multiple Codex accounts, choose workspace or agent backups, and continue with a confirmed context handoff when an account reaches its limit.
• Connect a Linux or Mac machine over SSH from the Chat or Code plus menu, then use its folder with Claude Code, Codex, or a terminal.
• Switch providers between turns in an existing chat, carrying recent conversation context while preserving its history and token usage.

Changed

• Settings now takes over the sidebar for its own navigation and hides the Agent / Code / Chat switch while open, instead of leaving the workspace list and mode pills on screen where clicking them did nothing.
• Chat mode opens with a message box even before you add a folder: a new thread runs on its own until you add one, and the draft offers Add a folder as the next step instead of blocking you behind it.
• The pane header's plus menu lists only the agents installed on this Mac (or on the SSH host), plus the pane kinds this workspace can open, instead of greying out every provider you don't have.
• The fullscreen toggle leaves the pane header when a pane is the only one in its tab; it returns as soon as there is a sibling to hide.
• Run BridgeMind on macOS 14 Sonoma and later on Apple silicon and Intel with one universal installer; on-device speech and Hey Bridge require macOS 26 Tahoe.
• The sidebar account row no longer shows your name or email; it keeps the avatar, plan, and credits, and identity lives in Settings.

Fixed

• Releases automatically verify the signed installer on Sonoma, Sequoia, and Tahoe for Apple silicon and Intel before publishing, without waiting for a manual test report.
• Removing a worktree stops its Chat-mode agents before the checkout is removed.
• Saving a file through a symlink no longer overwrites changes saved from another open document without a conflict.
• Failed agent-mail starts keep the message queued and wait for an explicit retry instead of creating endless failed chats.
• Hanging up cancels pending voice prompt delivery and prevents old action updates from appearing in a new call.
• Restoring an archived chat keeps its recovery copy until live history has saved successfully.
• Changes previews work when the workspace is a subfolder of a Git repository.
• Changes previews include staged files and working edits before a repository's first commit.
• Invalid or oversized routine intervals and cron steps return a validation error instead of crashing the app.
• Codex agent chats keep earlier replies and tool results when a resumed conversation starts another turn.
• Closing a terminal during session restoration prevents its queued shell or agent from starting afterward.
• Restoring a chat archived during a reply or approval makes it ready for a new message and settles interrupted work.
• Cancelling sign-in leaves you signed out and cannot interrupt a replacement sign-in attempt.
• Agents starting their first turns together share a working plugin connection.
• Remote sync keeps long chat histories within its message limit while retaining the conversation list and history counts.
• Weekend cron ranges ending in Sunday stay on the requested days instead of running every day.
• Choosing a Codex account in a conversation keeps its backup-account controls available.
• Adding a local folder from either Chat sidebar action keeps your unsent message and attachments in the open chat instead of replacing the draft or switching to Code.
• An update the app downloaded while you kept it open no longer installs behind a newer release: if a newer build ships before you restart, the app drops the stale download and fetches the latest one, so the restart lands on the newest version.
• Speech startup failures give a recovery message without asking you to download an Apple Speech model that already shows Ready.
• Opening an SSH workspace from the installed app finds its secure sign-in helper without requiring a source checkout.
• Bridge acknowledges “Hey Bridge” out loud when the voice call is ready, so you know when to give your request.
• Fable 5.1 runs the exact model shown in Agent and Chat mode while preserving saved Fable selections.
• Use installed Apple Speech models for dictation even when already reserved, and keep shared languages available while switching between dictation and wake-word listening.
• Mac downloads use one universal installer for Apple silicon and Intel, with requirements matched to the published release.

Security

• Deleted-chat archives redact private plugin payloads and restrict the archive file to its owner.
• Keep read-only and one-time approvals from granting broader access, expire pending approvals correctly, and limit unattended runs to automatic edits.
• Prevent repository status checks and model links from running unapproved commands or opening application protocols; reject oversized media and unsafe file reads.
• Protect replacement sign-ins from stale refresh failures, constrain development auth overrides, and authenticate release archives before CDN publishing.
• Disconnecting a plugin also invalidates turns still preparing access to that account.