Release 0.26.0: one picker for real vendor CLIs and local models.

Open a project, choose Codex, Claude Code, Cursor, Antigravity, or a GGUF
already on disk, and review the work. Usage stays unavailable unless a
provider actually reports it.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: ShadowfetchStudio

CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## 0.26.0 — Desktop coding agent
+
+- One searchable composer picker with **Subscriptions** and **On this computer**.
+  Rows are Codex, Claude Code, Cursor, Antigravity, and local GGUF/Ollama
+  compatibility targets. Routing uses stable IDs, never display names.
+- New Cursor ACP adapter (`cursor-agent acp`) and Antigravity `agy` stream-json
+  adapter. Grok remains available but is not featured in the primary menu.
+- Usage labels are truthful: unknown is "Usage unavailable", never a made-up
+  percent. Local rows say they run on this computer with no subscription quota.
+- Local GGUF catalog: add a file or folder you already have. Removing an entry
+  does not delete weights. llama.cpp is optional and not auto-downloaded.
+- Images attach only when the selected route actually supports vision. Vendor
+  CLIs reject images until the adapter forwards real image bytes.
+- Quieter home: four suggestion chips, compact tools control, activity timeline.
+  Provider chip stack and permanent Build/Plan/Review/Test tabs are off the
+  default composer. Settings leads with Accounts and Local models.
+
 ## 0.25.0 — "Supreme"
 
 - **Welcome Banner**: redesigned empty-state with 8 smart starter cards (Build a

Cargo.lock

@@ -4,7 +4,7 @@ default-members = ["native/core"]
 resolver = "2"
 
 [workspace.package]
-version = "0.25.0"
+version = "0.26.0"
 edition = "2021"
 rust-version = "1.95"
 license = "MIT"

Cargo.toml

@@ -1,6 +1,6 @@
 # ShadowCode
 
-![version](https://img.shields.io/badge/version-0.25.0-386c51) ![Rust](https://img.shields.io/badge/runtime-Rust%201.95-orange) ![license](https://img.shields.io/badge/license-MIT-green)
+![version](https://img.shields.io/badge/version-0.26.0-386c51) ![Rust](https://img.shields.io/badge/runtime-Rust%201.95-orange) ![license](https://img.shields.io/badge/license-MIT-green)
 
 **Your ideas. Your models. Your machine.**
 
@@ -10,7 +10,8 @@ context, tools, permissions, checkpoints, plans, and verification.
 
 ![ShadowCode workspace](docs/images/workspace-light.png)
 
-**Native 0.25 release:** the `main` branch builds a Rust/Tauri desktop window
+**Native 0.26 release:** one unified model picker (Codex, Claude Code, Cursor,
+Antigravity, and local models). The `main` branch builds a Rust/Tauri desktop window
 with the interface embedded in the executable. It needs no Python runtime or
 browser launcher. See the [native desktop guide](docs/NATIVE_DESKTOP.md)
 and the [goals](docs/NATIVE_GOALS.md) and [model routing](docs/NATIVE_ROUTING.md)
@@ -36,16 +37,16 @@ Integrations and release checks are tracked under the [release gates](docs/NATIV
 
 ## Native AppImage
 
-Download the `v0.25.0` **x86_64 AppImage**
+Download the `v0.26.0` **x86_64 AppImage**
 and its `SHA256SUMS` file from [GitHub releases](https://github.com/Shadowfetchapps/ShadowCode/releases/latest).
 The native application embeds its interface; Python, Node.js and a browser
 launcher are not runtime dependencies. The release targets **Ubuntu 24.04 or
 newer / glibc 2.39+**. Git and a model provider such as Ollama remain external.
 
 ```bash
 sha256sum --ignore-missing -c SHA256SUMS
-chmod +x ShadowCode_0.25.0_amd64.AppImage
-./ShadowCode_0.25.0_amd64.AppImage --appimage-extract-and-run
+chmod +x ShadowCode_0.26.0_amd64.AppImage
+./ShadowCode_0.26.0_amd64.AppImage --appimage-extract-and-run
 ```
 
 Extraction mode works without FUSE. To install into `~/Applications`, add a
@@ -54,7 +55,7 @@ stable `shadow` and `shadowcode` commands, and replace the desktop launcher:
 ```bash
 git clone https://github.com/Shadowfetchapps/ShadowCode.git
 cd ShadowCode
-./scripts/install-appimage.sh /path/to/ShadowCode_0.25.0_amd64.AppImage
+./scripts/install-appimage.sh /path/to/ShadowCode_0.26.0_amd64.AppImage
 ```
 
 Keep `SHA256SUMS` beside the download and the installer verifies its matching

README.md

@@ -96,6 +96,14 @@ coordination sidecars. Directory capabilities confine database/sidecar paths;
 query work, concurrent readers and output are bounded. Cancellation interrupts
 SQLite and releases its connection; an OS filesystem stall may delay return.
 
+## Vendor subscription CLIs
+
+Codex, Claude Code, Cursor, and Antigravity run as official local CLIs.
+ShadowCode does not scrape cookies, extract OAuth tokens, or treat a Gemini API
+key as Antigravity subscription access. Disconnecting ShadowCode does not always
+log out a shared native CLI — use that vendor's own logout when you want the
+CLI session gone.
+
 ## Secrets and transcript content
 
 Keys belong in `~/.config/shadow-agent/secrets.env` with mode 600 (recommended on this

SECURITY.md

@@ -140,8 +140,8 @@ From the repository root, build both package formats with:
 ```sh
 node scripts/build-native.mjs
 node scripts/check-native-package.mjs \
-  target/release/bundle/appimage/ShadowCode_0.24.0_amd64.AppImage \
-  target/release/bundle/deb/ShadowCode_0.24.0_amd64.deb
+  target/release/bundle/appimage/ShadowCode_0.26.0_amd64.AppImage \
+  target/release/bundle/deb/ShadowCode_0.26.0_amd64.deb
 node scripts/test-native-runtime.mjs
 node --test scripts/test-native-source-fetch.mjs
 node scripts/test-native-runtime-sources.mjs

docs/NATIVE_DESKTOP.md

@@ -1,3 +1,12 @@
+ShadowCode 0.26.0 is a desktop coding agent: open a project, pick one
+execution target, describe the task, watch it work. The composer has a single
+searchable picker for Codex, Claude Code, Cursor, Antigravity, and local
+models. Usage is shown only when a provider actually reports it. Local GGUF
+files you already have can be added to a catalog; weights are never deleted or
+auto-downloaded.
+
+Downloads: `ShadowCode_0.26.0_amd64.AppImage`, `ShadowCode_0.26.0_amd64.deb`.
+
 ShadowCode 0.25.0 ("Supreme") delivers a major flagship UX upgrade designed
 to simplify the onboarding flow and elevate workspace feel.
 

docs/RELEASE_NOTES.md

@@ -1,13 +1,13 @@
 # Native release procedure
 
-This procedure publishes the Rust/Tauri 0.25 application. The tag workflow is
+This procedure publishes the Rust/Tauri 0.26 application. The tag workflow is
 the release authority: it does not build, upload, or mention the legacy Python
 wheel, source distribution, portable archive, or browser launcher.
 
 ## Prepare the release
 
 1. Update the shared version in `Cargo.toml` and `src-tauri/tauri.conf.json`.
-   They must match the tag exactly, for example `v0.25.0`.
+   They must match the tag exactly, for example `v0.26.0`.
 2. Update `CHANGELOG.md`, `docs/RELEASE_NOTES.md`, README download commands and
    native migration/verification records with only evidence that is current for
    the tagged commit.

docs/RELEASING.md

@@ -0,0 +1,25 @@
+# ShadowCode 0.26 product simplification
+
+Visual target: the two six-panel desktop boards (home, unified picker, accounts, activity, review, local models). Names, percents, and pass counts in those boards are layout examples only.
+
+## Status
+
+- [x] Inspect origin/main (0.25.0 already shipped) and keep reliable vendor CLI code
+- [x] One searchable composer picker: Subscriptions + On this computer
+- [x] Cursor ACP adapter (`cursor-agent acp`) and Antigravity `agy` stream-json adapter
+- [x] Keep Grok adapter; do not feature it in the primary picker
+- [x] Truthful usage snapshots (unknown/stale/shared; never invent percents)
+- [x] Built-in GGUF catalog + optional llama.cpp spawn (no auto-download)
+- [x] Image attach only when the selected route actually supports vision
+- [x] Compact activity timeline; Mode tabs / chip stack off the default composer
+- [x] Accounts + Local models settings (official login commands, no password forms)
+- [x] Deterministic tests for picker, usage, image rejection, cancel, new protocols
+- [x] Version 0.26.0, docs, AppImage install, push origin/main
+
+## Honest limits
+
+- Antigravity 1.2.8 has no `usage` command; quota stays "Usage unavailable"
+- Cursor `about` reports plan tier, not remaining allowance — do not render a percent
+- llama.cpp is not bundled; Ready only after the user points at a verified binary and a GGUF they already have
+- Ollama tags stay optional compatibility rows, never treated as GGUF
+- Vendor CLIs own their tool loops; images on those routes are rejected until the adapter passes real image bytes

docs/SIMPLIFICATION_CHECKLIST.md

@@ -0,0 +1,52 @@
+# 0.26 simplification report
+
+ShadowCode is a local desktop coding agent again: one window, one picker, real
+backends. This supersedes the remote agent-management direction.
+
+## What changed
+
+- Composer has one searchable picker (Subscriptions / On this computer) plus
+  Connect account and Add local model.
+- Cursor uses official ACP (`cursor-agent acp`). Antigravity uses official `agy`
+  `--print --output-format stream-json`. Codex and Claude Code adapters are
+  unchanged in protocol. Grok ACP remains but is not featured.
+- Usage never invents percents. Unknown is "Usage unavailable".
+- Local GGUF catalog (user-selected files/folders only). llama.cpp is optional.
+  Ollama stays compatibility-only and is not treated as GGUF.
+- Home is a quiet welcome with four prompt chips. Activity is one timeline.
+  Settings starts with Accounts and Local models.
+
+## Subscription integrations (this machine)
+
+| Adapter | Runtime | Discovery | Usage | Notes |
+| --- | --- | --- | --- | --- |
+| Codex | `codex` 0.155.0-alpha.16 | Doctor + optional `codex models` | Unavailable unless official JSON reports remaining | app-server unchanged |
+| Claude Code | `claude` 2.1.278 | Doctor (`auth status`) | Unavailable | official stream-json; disable flag remains |
+| Cursor | `cursor-agent` 2026.09.15-d2fe57e | `--list-models` when Ready | `about` shows plan tier only — not rendered as a percent | `cursor-agent status` for login |
+| Antigravity | `agy` 1.2.8 | `agy models` when Ready | No `usage` command on 1.2.8 | GUI `antigravity` is not the CLI |
+| Grok | kept | not featured | — | existing ACP adapter |
+
+## Local models
+
+- GGUF magic is required. Removing a catalog row does not delete the file.
+- This machine has Ollama tags `qwen3:14b`, `gpt-oss:20b`,
+  `huihui_ai/gemma-4-abliterated:12b`. Those blobs are not auto-imported as GGUF.
+- No `llama-cli` / `llama-server` on PATH. Local GGUF rows stay Setup required
+  until the user points at an official binary. Not proven against a live GGUF
+  load on this box.
+- Hardware probe can read CPU/RAM and `nvidia-smi` when present.
+
+## Tests and packaging
+
+See the release commit message and CI logs. Required local commands:
+`cargo build -p shadowcode-desktop --locked`,
+`cargo test -p shadowcode-core --tests --locked`,
+UI vitest + tsc on Node 22.22.3, `pytest tests/` if the venv exists,
+`scripts/test-install-appimage.sh`.
+
+## Genuine limits
+
+- No hosted ShadowCode account or cloud orchestration.
+- Vendor image bytes are not forwarded yet; those routes reject attachments.
+- Antigravity quota API is not in CLI 1.2.8.
+- llama.cpp inference is catalog + setup, not a proven in-process engine.