Founding Bot X 0.4.0

Security

• On Windows, a chat message with an image or file link on a network path (\\host\share) could make Founding Bot X send your Windows sign-in hash to that host without a click. Network paths now only open inside the thread's project.

New

• Claude's idle compaction has a default in Settings, with overrides per Claude instance.
• When Claude asks for approval in full access, the request says why.
• Automation messages show as compact rows in the timeline.
• Webhook filters can match any item in a list with a [] path wildcard.
• GitCafe pull requests can request reviewers and add labels, and show line counts.
• ChatGPT Business usage limits offer a request you can copy to your admin.
• Exported telemetry includes how long runs take and how they end.

Fixes

• Project scripts and setup actions receive FOUNDINGBOT_X_PROJECT_ROOT and FOUNDINGBOT_X_WORKTREE_PATH, and agents and terminals no longer see T3 Code's setting names.
• Pull requests from forks check out to foundingbot-x/pr-<number>/<branch>.
• A Claude agent stops when the server that started it stops.
• SSH hosts no longer keep every old runtime after desktop updates.
• Removing a worktree on Windows no longer deletes what its junctions point to.
• Clones retry over HTTPS when the SSH key is refused.
• Pushes the remote refuses, and failed provider updates, say why.
• Answered questions say "already answered" instead of "not found".
• Agents get a short, current model list instead of the full catalog.
• Codex keeps every file of a multi-file patch.
• OpenCode shows its own out-of-funds message, and cancelled todos no longer keep its todo list running.
• Arabic and Hebrew text reads and navigates right to left.
• File mentions like posts.$postId.tsx or [id].tsx stay chips, and typing a price no longer opens the skill menu.
• Streaming replies re-render less of the window, so long threads stay smooth.
• GitLab 15.7 to 17.10 merge request diffs load, and Azure DevOps repositories with a space in the name list their pull requests.
• JetBrains IDEs open file links at the right column.
• The mobile app fixes a crash when opening a pull request and a possible freeze after closing search, and improves iPad and iPhone Duo layouts.

Upgrading

Update from 0.3.0 as usual: the desktop app updates itself, and foundingbot-x update updates the command line. If a project script reads T3CODE_PROJECT_ROOT or T3CODE_WORKTREE_PATH, switch it to the FOUNDINGBOT_X_ names. Developers running from source need Node 26.12.1.