What Windows Native shipped.

The UI cases run on winwright 1.1.3, which takes the foreground at launch, so the nudge is gone and the tab case soaked alone passed 20 of 20.

The tab case passed 300 of 300 guest runs on winwright 1.1.2, the repair firing on two; run-tests-vm -Soak repeats any one case on one build.

Only the focused pane blinks; the others draw a steady hollow cursor and ask for no blink frames, and in a split tab the focused pane is framed in the accent.

A default window shows the menu bar under the title bar, menuBar now defaulting to Always; Alt and Hidden stay, and Block G's criterion names the menu bar as part of a default window.

Document all sessions as PDF, in the palette, writes every saved session whatever the sidebar selected; the sidebar's own menus still document the session, folder or rows chosen there.

The cases name the checkout by {root/}, stage the agent feed and request as written now, and bring the menu bar up by an Alt tap, all on winwright 1.1.2.

A UI case Ctrl+clicks two sessions and a folder, Shift+clicks a range and reads each row chosen; the set they stand for is still read in process.

A UI case retitles a tab short and then long and claims its close cross is drawn inside it and not empty, so QS312's geometry is proven in the guest.

Install into WSL in Settings finds a distribution's claude and installs a plugin naming quickshell.exe by its /mnt path, measured answering tools/list.

Traced to winwright: both typos are WW310's last-character substitution, which its resend cannot repair on a terminal; filed there as WW545, nothing for the client.

Remove the agent account from the session menu: the removal shown, run in the person's tab under their sudo, and the session's own identity and key forgotten.

On Windows the wall is WSL2 with its sandbox and the Windows gateway as MCP server, measured; firewall rules by program or user lost (design recorded in docs/design/agent-gateway/README.md).

The echo-delay test reads until a byte count or its patience, skips naming cmd's rate when too little printed, and still fails a parser that falls behind.

On a Windows server exec goes through PowerShell to CreateProcess, quoted as Windows reads it back, so a space, quote, % or & arrives byte for byte.

An Alt tap shows a menu bar built from the palette's own bindings, every action under a heading with its keys; a default window still holds no menu.

A connected recent card gives its when a row of its own and wraps Go to tab under New connection, so a restored window cuts neither button.

Traced on the fixture's bash: it redraws its prompt in place with no line feed; the prompt moves down only by lines the client's reflow wraps, and shows once.

UI cases in the guest middle-click a tab closed and right-click Close tabs to the right, now that winwright 1.1.1 names a click's button.

Settings offers a Claude Code plugin quickshell writes itself: the gateway, the hook and a skill installed in one answer, refused by a gateway of another version.

Open Claude Code runs it in a local pane wired to the gateway and hook; Send to Claude types a pane's selection or screen into it under its session and tags.

The agent signs in on a certificate quickshell signs for minutes per connection; its key alone and an expired certificate are refused by the server.

Set up an agent account from the session menu: the exact script shown, run in the person's tab under their sudo, and the identity recorded on the session.

The hook keeps an agent's tools off its policy and approvals; a policy changed outside quickshell holds every call until accepted (design recorded in docs/design/agent-gateway/README.md).

After an agent reads server text, every change asks, even a granted one, until the person trusts it again in the palette (design recorded in docs/design/agent-gateway/README.md).

An ask shows in a quickshell dialog, each call as its words with session, tags and diff; the answer binds to the batch hash, may grant (design recorded in docs/design/agent-gateway/README.md).

Each gateway call is judged first: a read runs, a mutation asks or is refused by tag level, and a grant or break-glass admits it (design recorded in docs/design/agent-gateway/README.md).

Each gateway run shows in quickshell as a read-only tab badged agent, every call and its result in it, behind the tab in use (design recorded in docs/design/agent-gateway/README.md).

The app tests may skip three on a clean desk, PuTTY's and MobaXterm's two real-file readers, so CI is held to what a runner without either has.

The recording test waits until the echoed line is on the pane's screen before stopping, so a fast run no longer records only ConPTY's escapes.

A MobaXterm folder named exactly prod, production or prd imports tagged prod, named in the preview first (design recorded in docs/SESSIONS.md).

A ChaCha20 vault and a KDBX 4 AES-KDF vault written here open in keepassxc-cli and read back through KdbxReader.

An export can carry each key file sessions name, once with its .pub, read back unchanged by KeePassXC, and a kept vault keeps them (design recorded in docs/SESSIONS.md).

Ctrl+Shift+F12 stops every agent: each gateway cancels its jobs, closes its connections and refuses calls until let run again (design recorded in docs/design/agent-gateway/README.md).

Each gateway call is a hash-chained audit line, and quickshell --audit prints a run's changes and names a removed line (design recorded in docs/design/agent-gateway/README.md).

quickshell --agent-hook denies an agent's ssh, scp, rsync, git or paramiko call, naming the gateway tool to use instead (design recorded in docs/design/agent-gateway/README.md).

A tab holding a session tagged prod, by its own tag or a folder's, shows prod in the danger colour, and every tag is the tab's item type (design recorded in docs/SESSIONS.md).

Every gateway answer passes a redactor that hides keys, tokens and password assignments and counts them (design recorded in docs/design/agent-gateway/README.md).

exec answers within a byte budget, head and tail kept and the cut named, and output_page and output_grep reach the rest (design recorded in docs/design/agent-gateway/README.md).

job_start runs a command detached, kept on the server, so a later gateway reads its output by cursor and its exit code (design recorded in docs/design/agent-gateway/README.md).

exec runs with no input, pager or apt dialog, so nothing waits for a person, and a sudo password or y/N is named (design recorded in docs/design/agent-gateway/README.md).

read_file and edit_file read a remote text file and change one exact piece of it, the original kept beside it, the diff returned (design recorded in docs/design/agent-gateway/README.md).

quickshell --mcp serves hosts_list and exec: argv byte-exact on a kept connection, streams apart, off unless agentGateway (design recorded in docs/design/agent-gateway/README.md).

The approval section settles plans bound to a hash, a dialog the agent cannot fake, a measured ask budget, and both open questions (design recorded in docs/design/agent-gateway/README.md).

The judging section picks a small managed parser, an argument-checked allowlist, narrow unwrapping and a zero-false-allow gate (design recorded in docs/design/agent-gateway/README.md).

The policy section fixes tags, three levels, grants that must end, a file only the person writes, an example and three open questions (design recorded in docs/design/agent-gateway/README.md).

The agent gateway is in scope on the owner's answer: off by default, its own process, no network, nothing on the terminal's path (design recorded in docs/design/agent-gateway/README.md).

docs/design/agent-gateway/README.md opens with the threat model: six harms, who causes them, three layers and what each honestly stops (design recorded in docs/design/agent-gateway/README.md).

Every tab shows its place on the strip before its title, the Alt digit that reaches it, renumbered when a tab is added, closed or moved (design recorded in docs/KEYS.md).

The session bar's Split keeps its click beside and has a chevron offering Split right and Split down, each naming its chord (design recorded in docs/SESSIONS.md).

A split tab's panes each carry a close cross above them, Ctrl+Shift+W closes the focused pane before the tab, and Close pane is in the palette (design recorded in docs/KEYS.md).

A resize to the size a pane already has tells the far end nothing, and none writes input, so a split no longer prompts a pane it did not resize.

Document as PDF, in the sidebar's menu and the palette, writes the chosen sessions with every value's origin, jump hops, forwards and key fingerprints, and no secret.

Ctrl+click, Shift+click and Ctrl+A choose several sidebar rows, and the window reports the set, a chosen folder standing for every session under it (design recorded in docs/SESSIONS.md).

A card or sidebar row whose session is open offers Go to tab, which puts that tab on screen, and New connection beside it (design recorded in docs/SESSIONS.md).

A tab's close cross is drawn at 10 points after every title, inside its tab; the theme's button padding had left it no room to paint.

A tab's menu offers Close, Close other tabs and Close tabs to the right, asking once for every live session it would end; the last two are palette commands too (design recorded in docs/KEYS.md).

A middle click on a tab closes that tab, asking first for a live session, and leaves the tab on screen, or Home, where it was (design recorded in docs/KEYS.md).

A split of a server's pane opens the same saved session in the new pane over a connection of its own, and a split of a local pane is still a local shell.

Import saved passwords reads a KDBX 4 or 3.1 vault, ours or KeePassXC's, and remembers each matching session's password, asking before replacing one (design recorded in docs/SESSIONS.md).

With Keep this file up to date ticked, the vault is rewritten on every password or session change, from a DPAPI-kept key (design recorded in docs/SETTINGS.md).

Export saved passwords, in the palette, writes every session and its saved password to a KDBX 4 vault after Windows Hello (design recorded in docs/SESSIONS.md).

KdbxWriter writes KDBX 4 vaults, key file and attachments included, that keepassxc-cli 2.7.12 opens field for field (design recorded in src/Quickshell.Transport/Kdbx.cs).

The sessions sidebar opens with every folder folded, one click opens one, and a copy or a move opens the folder it put its session in.

The Explorer drop is a UI case in browser.cases.json: a file dragged from the host's pane lands in an Explorer folder and is read back byte for byte, and the hand-driven test is gone.

Silent Setup skips the tasks and preflight pages, so a blocked machine exits 7 from PrepareToInstall and /MERGETASKS holds; measured exit 7, nothing installed, on the test guest.

publish-release.ps1 runs wingetcreate submit after the release exists when WINGET_TOKEN is set, and skips without failing on a draft, stale manifests or a missing token.

build\winget carries manifests for alegauss.FreeWilly, rewritten from the built installer by update-winget.ps1 during update-release; winget validate passes on v1.0.15.

The UI cases run on winwright 1.1.0, and a survivor's red names its case from the engine instead of a pairing guessed by launch order.

Every guest tool takes winwright's desk mutex before it touches the VM, and a second run waits naming the holder, so two suites never share the desk.

A window maximised from its first paint is remembered without a rectangle, and a file already holding -2147483648 opens maximised instead of crashing.

A folder in the sessions sidebar folds on one click, the second press of a double-click is ignored, and a session still connects on a double-click.

The UI-case assembly runs one class at a time, so the drop run's real input no longer shares the desk with CasesRun's windows.

A survivor's red also says whether it went soon after the kill or Windows could not end it, which is what a stop that failed after a kill can mean.

A MobaXterm jump comes across as user@host:port from its three fields, two jumps as an OpenSSH chain; JumpHost takes that chain, and the guest opens a session through two hops.

A MobaXterm import carries the jump host into the session's own, keeps nested folders nested, and asks for the file where none is where MobaXterm keeps it.

The window's import reads PuTTY's sessions as well as MobaXterm's, each previewed and written on its own under a folder named for its client.

The import preview names what each session left behind, grouped with the sessions that had it, and the store carries it as a comment above each session that later writes keep.

A session offers Pageant through its window after the OpenSSH agent; in the guest a saved session with no key opens on the sshd with a key only Pageant 0.77 holds.

A skip naming a tools/provision-guest-*.ps1 script is waived and listed off the guest, and counted in it, where run-tests-vm sets QUICKSHELL_GUEST.

Windows OpenSSH 9.5 in the guest negotiates curve25519, ed25519, aes128-ctr and hmac-sha2-256, and cmd draws through the console host: a row in the matrix.

A guest run ends what a cut-off run left running, its batch and then this client's processes, each said by name and pid, before it syncs.

quickshell is MIT: LICENSE at the root, PackageLicenseExpression set, the README and site say so, and the bundled MIT and ISC libraries are credited in the archive.

tabs.cases.json finds each tab by its published state, TabItem[status="Local"], left behind and right on screen, read in the guest on winwright 1.0.2.

connected.cases.json reads a live tab's session bar, Connected, forward chip and status in the guest, over a Windows sshd on 127.0.0.1:2240 that provision-guest-sshd.ps1 sets up.

A new window opens on Home and starts no shell, startWith Shell or --tabs, --panes, --session open a shell; a Home start is timed at Home's first frame.

In the guest a file dragged from the host's pane onto an Explorer folder lands there byte for byte, by real input; a C# test until a case can drop on another window (QS292).

A real Pageant 0.77 in the guest lists the key through its window, signs what the key verifies, and opens a session on the guest's sshd with nothing else offered.

docs/SWITCHING.md says what comes across, what quickshell does and refuses with what to use instead, and compares it with MobaXterm 26.5 from a documented guest run.

A Direct2D reference still blank after its redraws is drawn on a device built from scratch, and where that is blank too the pass is a skip with its reason, not a failure.

The site and llms.txt say what has shipped: pre-release 0.1.0, unsigned, no release yet, 160 MB, golden images on NVIDIA and WARP, no agent forwarding, reconnect as delivered.

A guest run turns VMware's clipboard sharing off for its whole length and back on after, so a picture copied on the host mid-run no longer skips the clipboard case.

The executable carries the client's own mark at 16 to 256 px, drawn per size by tools\make-icon.py, so the window, taskbar, shortcut and uninstall entry show it.

A local tab whose shell wrote its own executable's path is named as the shell: Command Prompt, Windows PowerShell, PowerShell or WSL; any other title shows as written.

The terminal sits 18 in from the sides and 14 from top and bottom, in the focused pane's own background, repainted with a new scheme or OSC 11, and the grid shrinks to fit inside.

Home is the design's: the 26px heading and its line, quick connect in one row with a Sign in with drop-down that asks for a key file, and three start-point cards.

Home's cards are the design's: Recent with Show all sessions, three columns, a server tile, name over address, folder and tag chips, the time and a 28-high Connect.

The sidebar is the design's: a ghost panel fold, 32-high rows indented 8 plus 22 a level, a drawn terminal glyph on sessions, the accent at a tenth when selected, a Files and Tunnels rail.

MobaXterm's _ProfileDir_, _MyDocuments_, _AppDataDir_ and _CurrentDrive_ expand on import and when a key is offered, and a named key that is not there is said in the pane.

A store whose root node has a name opens every session the sidebar lists: the root's name is kept in the file and is never part of a path.

Every guest run brings its reports back, green or red, and the summary says how many of the declared UI cases ran; a short count is red.

Connect to an address takes user@host[:port] or an ssh_config host, saves it as a session unless unticked, and opens it by the path a saved session takes.

The session dialog offers Sign in with as three segments over Key and Credential, folds the rest into summarised groups, and Test connection signs in and says why not, unsaved.

A remote tab shows a session bar (name, user@host:port via its jump host, a Connected/Reconnecting/Disconnected chip, a chip per forward, Files, Split, More) and a status bar under it.

A sidebar lists saved sessions as a tree, searches them, marks the ones a tab holds Connected, and folds to a remembered rail (design recorded in docs/design/friendly-shell/README.md).

reference-build-msvc.ps1 builds the WebEngine Qt client from e4e482e7; measure-startup exits 0 on it, 208.6 MB of Chromium present (design recorded in tools/measure-startup/README.md).

The tab-strip case accepts cmd's own Administrator prefix before the first tab's title, so it passes on an elevated runner and on an ordinary desk.

fuzz.ps1 and release.ps1 hash with .NET's SHA256, so they reach their verdict when CI's pwsh starts them under Windows PowerShell.

A Release run launches the Release client: the UI cases point winwright at the configuration their own assembly was built in.

The settings-reference test finds the same headings on a CRLF checkout as on an LF one, and a test now checks both.

The echo-delay test reads at two and eight megabytes, keeping its four-to-one ratio, and a timeout now says how many megabytes were parsed.

A composition is placed by where the cursor is and only its caret blinks, so the text being typed stays on screen and its blink is one cell.

A mark starting a read joins the cell just written where they make one cluster, so a byte-at-a-time stream leaves the screen a whole one does.

A stream run reads the Controllers tab's rumble intensity and haptic override from the store and hands them to the haptics player and the actuator matrix.

The console's haptic intensity reaches the haptics player as it arrives, and Off now silences both the rumble fold and the actuator waveform, stopping a rumbling pad once.

release.yml builds through compile.cmd and package.cmd on a runner, refuses a tag the exe disagrees with, and drafts the release with the installer and SHA256SUMS.txt.

The live video receiver now gets the slice parser and the run's IDR flag, so a P-frame without its reference is dropped, its gap reported and a FEC failure asks for a keyframe.

CFunction now finds block-commented definitions and bodies whose comment braces do not balance, and a test sweeps lib/src and shim for both on every run.

Remote forward channels are answered here with a 2 MB window granted as bytes are delivered, so an unread one leaves the shell up (design recorded in src/Quickshell.Transport/RemoteChannels.cs).

Printable ASCII is written a row's worth at a time, and emulate on cat-log reads about 190 MB/s where it read 31 to 43 that day (design recorded in benchmarks/results/replay-xps.md).

Figure 6 is 160 MB, argued from the account: 126 MB is the window and the device, and a connected session now settles at 142 to 145 MB (design recorded in docs/PERFORMANCE.md).

A field the store does not have is refused by name and line, and a setting beside the host is told to move under settings, so nothing connects on defaults.

A local or SOCKS forward nobody reads no longer freezes the connection: its window is granted as bytes reach the user (design recorded in src/Quickshell.Transport/ChannelWindow.cs).

A monitor-covering chain flips independently on the reference desk, echoing at a 24 ms median against 33 windowed; the non-goal names it (design recorded in benchmarks/results/photon-h.md).

Parse is pinned to one P-core with eight streams a pass, and the baseline retaken on 2026-10-07 derives a parse threshold of 1.5 % where it was 20.9.

The whole path has a figure argued from the transport: emulate at least 100 MB/s on cat-log, the rate one SSH session delivers over loopback.

A fast host now waits for the reader: the shell's 2 MB window is granted back as read, and ten unread seconds hold 1.4 MB, not 3 GB (design recorded in src/Quickshell.Transport/ChannelWindow.cs).

A connected client is measured idle: one pane 0.62 % of a core and 172 MB, a session 0.96 % and 211 MB, GPU time read too (design recorded in benchmarks/results/idle-h.md).

Timed beside MobaXterm on the reference machine by one observer, quickshell's window is up at 612 ms warm against 894; its prompt reads 657 ms (design recorded in benchmarks/results/startup-h.md).

The site's lockfile resolves source-map-js 1.2.2 for both vite and tailwind, npm audit finds nothing, and the site builds.

A tab dragged along the strip moves under the pointer, and the palette's Go to the last tab used switches by order of use, which Ctrl+Tab leaves positional.

Keys typed while a pane's session opens are kept, bounded, and handed over first and in order once it attaches, so a fast first command no longer loses its start.

Only sequences that move the cursor or change the grid cancel an owed wrap, as xterm's ResetWrap sites do, so a full-width line that changes colour at its end still wraps.

The running check reads the kernel's image path, so a copy started a moment before an install or uninstall is found and refused instead of being missed.

Mode 5 swaps the default colours in the palette lookup and redraws on each edge, so the visual bell vim and readline send now flashes; esctest went from 465 to 466 passed.

A session's credential name now keys its remembered password and FontSize is a non-goal out of the dialog, so no session field is shown and then ignored.

Every class the line listed now passes or is named by a non-goal, DECSCL's levels by a new one; esctest went from 458 to 465 passed across the parts.

DECSCUSR is drawn and reported, DECRQSS answers every setting held, DECID answers, and the VT220 identity is kept by a non-goal; esctest went from 454 to 458 passed.

BS and CUB follow xterm's CursorBack: 45 walks back through a wrapped line, 1045 crosses any row, and an owed wrap is honoured; esctest went from 444 to 454 passed.

HPR and VPR move the cursor right and down to the screen's edge, ignoring margins and origin mode; esctest went from 436 to 444 passed.

Every private DSR is answered, hardware this client lacks reported as absent, and DECXCPR's shape follows the claimed VT level; esctest went from 425 to 436 passed.

Each screen has its own saved cursor, DECRC with nothing saved homes and resets DECOM, DECSTR does xterm's list, and XTSAVE/XTRESTORE work; esctest went from 407 to 425 passed.

DECFRA fills, DECERA erases and DECCRA copies a rectangle, clipped and origin-relative as xterm's, and DECSACE is held and reported; esctest went from 388 to 407 passed.

DECRQM answers xterm's ignored modes as permanently reset, KAM and SRM by decision, and DECNKM and DECBKM as real modes; esctest went from 373 to 388 passed.

Every CSI t report is answered from the pane, titles read back empty, the title stack works, and moves and resizes are refused by a non-goal; esctest rose from 359 to 373 passed.

DECSCA, SPA and EPA protect cells; DECSED, DECSEL and DECSERA skip them as xterm does, ED, EL and ECH respect ISO protection, and esctest rose from 323 to 359 passed.

OSC 4, 5 and 10 to 19 answer a colour query in xterm's form, 104, 105 and 110 to 119 reset to the session's scheme, and XTGETTCAP answers Co; esctest passes 323.

DECLRMM and DECSLRM set a column region every cursor, edit, scroll and wrap respects, with DECIC, DECDC, DECBI and DECFI; esctest passes 299 where it passed 231.

Dark text on a light theme carries Direct2D's ink within 1 % in both antialiasing modes, and light-on-dark is drawn as before (design recorded in docs/measurements/contrast.md).

A nightly CI workflow runs the fuzz campaign with its corpus cached between runs, and CI warns on every push once the last campaign is over a week old.

A tab moves out into a window of its own with its sessions connected, and closing one of several windows ends only its own sessions.