What changed, and when.

Highlights

• CryoZen everywhere. The application, its setup and sign-in screens, the packaged macOS and Windows icons, and the landing page all carry the CryoZen name and mark now, matching cryozen.ai. An installation from the previous name keeps working untouched: your data directory, saved sessions, signed-in state, stored mail, and vector collections all carry over on their own.
• A new default theme. The interface ships in the CryoZen ice palette. Secondary text, link colors, and glyphs on colored buttons are now derived per theme against a real contrast check. Each palette gets the strongest muting and the most on-palette link color it can afford at a 4.5:1 contrast ratio. A theme or accent color you chose yourself is preserved.
• Native installers for every platform. macOS on Apple Silicon and Intel, a Windows installer with silent-install support, and Linux AppImage, deb, rpm, and portable builds. Every artifact is installed and launched on its own operating system before the release publishes, so a build that cannot start never ships.
• Sign in and connect from one place. Email and password sign-in works on a fresh install. Google, Microsoft, and GitHub sign-in switch on once you register an OAuth app of your own. Link a provider to the account you already have from the settings panel. Mail, calendar, contacts, and model providers all connect from one integrations catalog.

Install

• macOS: CryoZen.dmg (Apple Silicon) or CryoZen-Intel.dmg
• Windows: CryoZen-Setup-x64.exe (installer, /S for silent) or CryoZen-Windows-Portable.zip
• Linux: CryoZen-x86_64.AppImage, cryozen_amd64.deb, cryozen.x86_64.rpm, or CryoZen-Linux-Portable.tar.gz
• Docker: ghcr.io/shreejitverma/cryozen:1.1.0 (linux/amd64, linux/arm64)

Verify any download against SHA256SUMS.txt. Full instructions: https://cryozen.ai/download

What's Changed

• chore(deps): bump @anthropic-ai/sdk from 0.98.0 to 0.111.0
• chore(deps): bump eslint from 8.57.1 to 10.7.0
• chore(deps): bump prettier from 3.8.3 to 3.9.5
• chore(deps): bump actions/setup-node from 4 to 6
• chore(deps): bump actions/github-script from 7 to 9
• chore(deps): bump actions/download-artifact from 4 to 8
• chore(deps): bump docker/setup-buildx-action from 3 to 4
• chore(deps): bump actions/setup-python from 5 to 6
• chore(deps): update pydantic requirement from >=2.0 to >=2.13.4
• chore(deps): bump markitdown from 0.1.5 to 0.1.6
• chore(deps): bump @antithesishq/bombadil from 0.3.2 to 0.6.1
• chore(deps): update pydantic-settings requirement from >=2.0 to >=2.14.2
• fix: make Srijan boot and build from a clean clone (B1+B2+B14)
• ci: repair the PR/issue description-check workflows (core + path)
• style(ruff): clear remaining findings — ruff check . green (B3 PR 2b-cleanup)
• fix(security): block symlink-name bypass of the agent file-tool deny list
• fix(security): expand file-tool deny list to RCE/credential class + case-fold
• test(ci): honest coverage gate + environment-independent mac-bundle test (B3 2c)
• Fix/ruff e402
• chore(ruff): land the reviewed ruff stack on main (recovery for #27-#32)
• fix: ship the Shakti model catalog (clears the last red CI job — hwfit)
• refactor(rename 1/12): shastra/ → landing/ (+ RENAME_MAP.md)
• fix(security): expand file-tool deny list to RCE/credential class + c…
• refactor(rename 2/12): vyavastha/ → config/ (SearXNG config dir)
• fix(test): remove duplicate parametrize blocking the local suite (pre-existing, from #34)
• refactor(rename 3/12): complete sahayaka/ → pairing/ (remove duplicate, repoint imports)
• Build/Run acceptance pass + fix /api/ready auth-gating (F1) + B19 harness
• fix(ci): grant contents:read so description-check workflows can checkout (private repo)
• refactor(rename 4/12): sangam/ → integrations/ (external-agent bundles)
• refactor(rename 5/12): sevaka/ → mcp_servers/ (built-in MCP microservers)
• fix(security): restore allow-scripts in iframe sandboxes broken by Sanskritization
• fix(docs): correct bundle helper path srijan/vidhi → srijan/scripts (completes #46)
• refactor(rename 6/12): vidhi/ → cli/ (CLI + ops scripts)
• refactor(rename 7/12): yantra/ → engines/ (pluggable capability engines)
• refactor(rename 8/12): dharma/ → core/ (foundation: DB, auth, middleware)
• refactor(rename 9/12): dwara/ → routers/ + *_dwara.py → *_router.py
• refactor(rename 10-12/12): sutra→services, darshana→frontend, pariksha→tests
• fix(frontend): restore CSS/JS tokens the Sanskritization corrupted (fonts, images, viewers)
• test(e2e): expand acceptance harness to full feature surface + enable Acceptance E2E in CI
• fix(frontend): repoint compare-mode web search to /api/anveshana (was 404)
• docs: add ARCHITECTURE.md; fold in and remove RENAME_MAP.md
• fix(assets): ship the brand logo + PWA icons (broken image on every fresh install)
• fix(landing): restore src= image/video attributes (Sanskritized to sutra=)
• fix(assets): ship the image-editor build/ source modules (editor broken on fresh install)
• fix(frontend): memory/brain settings use /api/prefs (was 404 on /api/vyavastha)
• fix(vendor): restore vendored libraries corrupted by the Sanskritization
• docs: AUTH_ONBOARDING_DESIGN.md (Phase A — design for sign-off, no code)
• fix(security): remove silent email-based OAuth account-linking (account takeover) [SECURITY — line-by-line review]
• fix(ci): PR-description check must fail only on the description, not side-effects (B20)
• fix(security): OAuth account creation obeys the signup policy — closed/invite/open [SECURITY]
• feat(dev): one-command local quickstart + seeded verified admin (fixes Docker data-dir persistence)
• docs: INTEGRATIONS_DESIGN.md (Phase A) - integration framework inventory + design
• chore(deps): bump actions/setup-node from 6 to 7
• chore(deps): bump actions/upload-artifact from 4 to 7
• chore(deps): bump docker/build-push-action from 5 to 7
• chore(deps): bump softprops/action-gh-release from 2 to 3
• chore(deps): bump @anthropic-ai/sdk from 0.111.0 to 0.112.3
• docs(pitch): add seed pitch decks (developer + enterprise) in HTML, PDF, and PPTX
• chore(deps): bump actions/checkout from 4 to 7
• feat(auth): add Microsoft sign-in and PKCE to social login
• chore(deps): bump docker/setup-qemu-action from 3 to 4
• chore(deps): bump docker/metadata-action from 5 to 6
• chore(deps): bump actions/setup-python from 6 to 7
• chore(deps): bump actions/checkout from 4 to 7
• chore(deps): bump docker/login-action from 3 to 4
• chore(deps): bump prettier from 3.9.5 to 3.9.6
• chore(deps): bump eslint from 10.7.0 to 10.8.0
• chore(deps): bump @anthropic-ai/sdk from 0.112.3 to 0.115.0
• chore(deps): bump brace-expansion from 5.0.7 to 5.0.8
• feat(integrations): link Google, Microsoft, and Apple accounts and mirror their data locally
• feat(integrations): unified adapter catalog, GitHub sign-in with account linking, and SSH host-key pinning
• feat: rename Srijan to CryoZen with full backward compatibility
• fix(docs): add a task-organized docs tree and repair the defects writing it uncovered
• docs(pitch): rework the CryoZen seed decks and add fit verification
• chore(deps): update mcp requirement from <2 to <3
• chore(deps): bump markitdown from 0.1.6 to 0.1.7
• chore(deps): bump globals from 16.5.0 to 17.8.0
• chore(deps): bump brace-expansion from 5.0.8 to 5.0.9
• chore(deps): bump globals from 17.8.0 to 17.9.0
• fix(release): build the artifact names the release workflow uploads
• chore(deps): bump eslint from 10.8.0 to 10.8.1
• chore(deps): update pydantic-settings requirement from >=2.14.2 to >=2.15.0
• chore(deps): bump @anthropic-ai/sdk from 0.115.0 to 0.116.0
• chore(deps): update mcp requirement from <2 to <3
• feat(packaging): native installers for macOS, Windows, and Linux with version-locked releases
• feat(release): tag-driven multi-platform release pipeline with install verification and public mirror
• chore(deps): bump globals from 17.9.0 to 17.11.0
• chore(deps): bump @antithesishq/bombadil from 0.6.1 to 0.7.0
• chore(deps): bump @anthropic-ai/sdk from 0.116.0 to 0.120.0
• [TECH][TECH-2026-0001] Bootstrap the .cryozen product control plane
• build(packaging): retry the macOS DMG detach and reap smoke test stragglers
• fix(packaging): guard the Intel macOS bundle against a mismatched OpenSSL
• feat(cli): add the cryozen product control plane and release verifier
• docs(cryozen): record the three 2026-08-24 merges in the control plane
• docs(release): record the v1.0.1-rc.2 rehearsal and its publish block
• docs: propose an allowlisted public documentation surface in ADR-2026-006
• feat(frontend): unify CryoZen branding across theme tokens, assets, and copy
• docs(pitch): rebuild both seed decks around verified product evidence
• docs(release): add the v1.1.0 highlights and exempt release fragments from the H1 gate

New Contributors

• @dependabot[bot] made their first contribution