https://cybertoolchain.io/tools/goose New releases and features in Goose, tracked by The Cyber Toolchain. en Wed, 12 Aug 2026 16:05:13 GMT https://github.com/aaif-goose/goose/releases/tag/v1.46.0 https://github.com/aaif-goose/goose/releases/tag/v1.46.0 Wed, 12 Aug 2026 16:05:13 GMT Goose v1.46.0 adds hooks with PreToolUse denial, 25+ new providers, `goose review`, major CLI additions, and broad env-var configurability. • Adds `LOCAL_WHISPER_LANGUAGE` environment variable to configure language for multilingual local voice transcription. • Adds `GOOSE_MAX_TOOL_RESPONSE_SIZE` environment variable to configure the maximum size of tool output returned to the agent. • Adds `MAX_CODE_BLOCK_LINES` environment variable to cap the number of lines rendered in code blocks. • Adds `GOOSE_FAST_MODEL` environment variable (consumed by `ModelConfig::with_fast`) to designate a fast model for lightweight tasks. • Adds `GOOSE_DOCS_ROOT` environment variable to redirect documentation lookups for air-gapped deployments. • Adds `GOOSE_OAUTH_CALLBACK_PORT` environment variable to pin a stable OAuth `redirect_uri` port across sessions. • Adds `AZURE_OPENAI_AD_TOKEN` environment variable to support Azure AD (Entra ID) bearer-token authentication for the Azure OpenAI provider. • Adds `_meta.hidden` field to the `ACP session/new` request to create hidden (background) sessions. • Adds Hooks framework with `PreToolUse` denial, letting operators intercept and block tool calls before execution. • Adds `--edit` flag to the session command to edit conversation history before forking a session. • Adds `/goal` slash command for agent self-evaluation before a session concludes. • Adds `/status` slash command to report current session state. • Adds `/model` slash command to switch the active model mid-session. • Adds `goose review` command for local code review workflows. • Adds tab completion and provider switching to the `model` command. • Loads global agent hints from `~/.agents/AGENTS.md` automatically each session. • Adds Markdown as a format option for session export. • Surfaces per-message token count, cost, time-to-first-token (TTFT), and tokens-per-second stats in the UI. • Tracks cache tokens separately for accurate cost reporting. • Streams shell command output to the UI in real time as commands execute. • Adds TLS support for `acp serve`. • Adds a resizable sidebar with a drag handle and persisted width in the desktop UI. • Adds chat history search in the navigation panel. • Adds a search filter to the provider selection grid. • Adds a TUI diff viewer. • Emits GenAI semantic convention attributes in OpenTelemetry (OTEL) spans. • Forwards images and MCP embedded-resource blobs in Anthropic and Google provider formats. • Adds `logo_uri` to OAuth client ID metadata documents (CIMD) so authorization servers can display the goose logo on consent screens. • Adds proactive OAuth token refresh to avoid re-authentication on every session. • Adds `goose://new-session` and `goose://resume` deep links, including support for an initial prompt via `goose://new-session`. • Adds encrypted Nostr session sharing and session import. • Adds Hugging Face OAuth support with a dedicated auth tab in settings. • Supports MLX models in the local inference provider. • Adds Linux Vulkan support for local inference. • Adds a UniFFI SDK for cross-language bindings, Python wheel publishing, and Kotlin FFI with Maven publish. • Adds a quarterly recurrence option to the session scheduler. • Adds Termux detection in the installer to automatically select the musl portable build. • Binds MCP apps to trusted ownership metadata to restrict which extensions can be loaded. • Adds a CLI command to list available skills with their token counts. • Adds an image read tool for ingesting images directly in sessions. • Adds Summon extension peek mode for async background tasks, plus `context` and `working_dir` parameters for delegate tasks. • Adds new providers: Celeris, Friendli, Azure AI Foundry (multi-LLM), OllamaCloud (dynamic model discovery), Sakana AI (Fugu API), iFlytek Spark, Astron MaaS, Fireworks AI, Together AI, OrcaRouter, Perplexity, Alibaba/Qwen (DashScope), Databricks AI Gateway, Scaleway, NEAR AI Cloud, EmpirioLabs, xAI SuperGrok (OAuth subscription), Vercel AI Gateway, Routstr, FuturMix, oMLX, Atomic Chat, Muse Spark 1.1 (Meta Models API), and AWS Bedrock support for OpenAI GPT models via mantle endpoint. • Adds support for OpenRouter request parameters. • Adds new models: GPT-5.6, GPT-5.5, GLM-5.2, Opus5 (with adaptive thinking), claude-sonnet-5, claude-fable-5, Cursor composer-2.5, Cursor-agent (fetched from CLI), latest Gemini models, Gemini 3.x, MiniMax-M3/M2.7, and OVHcloud Qwen3.6-27B. • Adds desktop localizations for French, German, Italian, Portuguese, Indonesian, Malay, Vietnamese, zh-TW, Korean, Spanish, Japanese, Hindi, Russian, Turkish, Simplified Chinese (zh-CN), and language selection in the UI. • Adds structured summary output with template rendering for context compaction. Breaking changes: • The `goose project` command (and its `p` alias) has been removed; CLI project support is no longer available. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goose https://github.com/aaif-goose/goose/releases/tag/v1.45.0 https://github.com/aaif-goose/goose/releases/tag/v1.45.0 Wed, 29 Jul 2026 20:11:39 GMT Goose v1.45.0 adds tab completion for model switching, air-gapped docs support, disabling built-in skills, and Gemini/Opus5 model support. • Adds tab completion and inline provider switching to the `model` command. • Supports latest Gemini models and Opus5 (including adaptive thinking). • Adds `GOOSE_DOCS_ROOT` environment variable for air-gapped / offline documentation access. • Gates tool-call label enrichment on ACP client capability, improving ACP interoperability. • Adds stable identity for agent event messages, enabling reliable message tracking across sessions. Breaking changes: • The ACP scheduler is now disabled by default; deployments relying on scheduled recipe execution must explicitly pass `--enable-scheduler`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goose https://github.com/aaif-goose/goose/releases/tag/v1.44.0 https://github.com/aaif-goose/goose/releases/tag/v1.44.0 Thu, 23 Jul 2026 19:18:27 GMT Goose v1.44.0 adds new model support (GPT-5.6, Gemini, Muse Spark 1.1), new providers, --edit session flag, per-message usage stats, and OllamaCloud integration. • Adds support for latest Gemini models. • Adds Muse Spark 1.1 support via the Meta Models API. • Adds MiniMax-M3 and missing M2.7 model variants. • Adds declarative Sakana AI provider for the OpenAI-compatible Fugu API. • Adds iFlytek Spark and Astron MaaS providers. • Adds Fireworks AI as a declarative provider. • Adds OllamaCloudProvider with dynamic model discovery and context limits. • Adds OpenRouter request parameters support. • New `--edit` session flag to edit a conversation before forking it. • New per-message usage stats UI showing tokens, cost, TTFT, and tokens/second. • Chunks command-classifier input with overlapping windows for improved security robustness. • Adds search filter for the provider grid in the UI. • Adds delete support for custom apps from the Apps UI. • Reconnects desktop ACP sessions automatically after sleep or connection loss. • Adds French, German, Italian, Portuguese, Indonesian, Malay, Vietnamese, and zh-TW desktop locales. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goose https://github.com/aaif-goose/goose/releases/tag/v1.43.0 https://github.com/aaif-goose/goose/releases/tag/v1.43.0 Tue, 14 Jul 2026 09:46:27 GMT Goose v1.43.0 adds per-message cost/token stats, OllamaCloud provider, --edit session flag, TLS for ACP serve, and six new model providers. • Adds `--edit` session flag to edit conversation history before forking a session. • New per-message usage stats UI showing tokens, cost, TTFT, and tok/s for each turn. • New OllamaCloudProvider with dynamic model discovery and automatic context-limit detection. • Adds iFlytek Spark and Astron MaaS as supported providers. • Adds Fireworks AI as a declarative provider. • Adds OpenRouter request parameters support. • Adds OVHcloud Qwen3.6-27B model with 262K context window. • Adds GPT-5.6 family support (gpt-5.6-luna, gpt-5.6-sol, gpt-5.6-terra) with 1,050,000-token context and xhigh reasoning effort. • Adds GLM-5.2 model support. • Adds TLS support for `goose serve` ACP sessions. • Adds streamable HTTP support in the deeplink generator. • Desktop sessions now automatically reconnect after system sleep or connection loss. • Chat sessions are now grouped by project in the navigation panel. • Delete support for custom apps added to the Apps UI. • Desktop localizations added for French, German, Italian, Portuguese, Indonesian, Malay, Vietnamese, and Traditional Chinese. • Provider bindings MVP added to goose-sdk with Python wheel publishing. • Diagnostics output migrated to structured JSON report format. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goose https://github.com/aaif-goose/goose/releases/tag/v1.42.0 https://github.com/aaif-goose/goose/releases/tag/v1.42.0 Mon, 13 Jul 2026 19:33:40 GMT Goose v1.42.0 adds Ollama Cloud provider, per-message token/cost stats UI, project-grouped sessions, and Python SDK provider bindings. • Adds OllamaCloudProvider with dynamic model discovery and automatic context-limit detection. • Adds per-message usage stats in the desktop UI: token counts, cost, time-to-first-token (TTFT), and tokens/sec. • Adds per-message usage and cost tracking with derived session totals. • Groups chat sessions by project in the navigation panel. • Shows project names in the directory-switcher dropdown. • Adds provider bindings MVP to goose-sdk with Python wheel publishing. • Adds AskAI bot hints for follow-up suggestions. • Hardens `goose update` to fail closed when Sigstore/SLSA provenance cannot be verified. • Increases the `/mcp-app-guest` body limit to support larger single-file MCP apps. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goose https://github.com/aaif-goose/goose/releases/tag/v1.41.0 https://github.com/aaif-goose/goose/releases/tag/v1.41.0 Fri, 03 Jul 2026 00:26:40 GMT Goose v1.41.0 adds TLS for ACP, 15+ new providers, hooks, summon sub-agents, and a wave of new CLI commands. • Adds `--edit` session flag to edit a conversation before forking it into a new session. • New `tui` subcommand on goose-cli to launch the terminal UI directly. • Supports TLS for `goose serve` via `--tls`, `--tls-cert-path`, and `--tls-key-path` flags. • Adds iFlytek Spark, Astron MaaS, Fireworks AI, Together AI, OrcaRouter, EmpirioLabs AI, Perplexity, Alibaba (Qwen/DashScope), Scaleway, NEAR AI Cloud, Vercel AI Gateway, Databricks AI Gateway, Routstr, FuturMix, oMLX, Atomic Chat, and xAI SuperGrok OAuth as new providers. • Adds OpenRouter request parameters support for fine-grained API payload control. • OpenAI Responses API `store` param now configurable via `OPENAI_STORE` env var or config. • MLX model support added for the local inference provider. • GLM-5.2 model and `gpt-5.5` (ChatGPT Codex) model support added. • Summon gains peek mode for async background tasks, `context` and `working_dir` parameters for delegate tasks, subagent instructions, and structured metadata for task load results. • Session import functionality added. • OTLP logging schema added for cross-tool detection. • Worktree-aware directory switcher added. • Chat history search feature added. • TUI diff viewer added. • Paginated session list in ACP. • ACP schema now exposes available tools. • ACP thinking effort config option added. • Structured per-provider config block with non-destructive provider switching. • Language selection feature in desktop app with locales for French, German, Italian, Portuguese, Indonesian, Malay, Vietnamese, Traditional Chinese, Spanish, Korean, Japanese, Hindi, Russian, Turkish, and Simplified Chinese. • Stable OAuth redirect URI via `GOOSE_OAUTH_CALLBACK_PORT` environment variable. • Unified thinking effort control across all providers. • Image read tool added. • Open-plugins generalization plus skills support. • Option to disable automatic update downloads. • Last message snippets for ACP sessions. • `GOOSE_FAST_MODEL` environment variable support for specifying a fast model. • Optional `api_key` configuration for declarative OpenAI-engine providers. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goose https://github.com/aaif-goose/goose/releases/tag/v1.40.0 https://github.com/aaif-goose/goose/releases/tag/v1.40.0 Thu, 02 Jul 2026 05:12:00 GMT Goose v1.40.0 adds 13+ new AI providers, hooks system with tool-use denial, local code review, new CLI slash commands, and prompt injection mitigation. • New `/status` slash command in the CLI to check session state at a glance. • New `goose review` subcommand for running local AI-powered code review. • Adds a hooks system for extensibility, including `PreToolUse` denial to block tool calls before execution and blocking `Stop` hook decisions. • Prompt injection mitigation enabled by default. • Supports 13+ new model providers: Together AI, EmpirioLabs, OrcaRouter, NEAR AI Cloud, Perplexity, Alibaba/Qwen via DashScope, Databricks AI Gateway, Scaleway, Vercel AI Gateway, xAI SuperGrok OAuth, OpenAI GPT via AWS Bedrock mantle endpoint, GLM-5.2, and MLX models for local inference. • New `GOOSE_FAST_MODEL` environment variable to designate a fast model for lightweight operations. • Unified thinking effort control and canonical thinking modes across all supported providers. • Cache token tracking for accurate per-session cost reporting. • Encrypted Nostr session sharing. • Peek mode for async background tasks in summon, plus `context` parameter and `working_dir` override for delegate tasks. • New TUI subcommand (`goose-cli tui`) with built-in diff viewer. • Chat history search in the desktop navigation panel. • Session import and deep links (`goose://new-session`, `goose://resume`) including initial prompt support. • Image read tool for ingesting local images. • Streamable HTTP support in the deeplink generator. • Linux musl CLI builds for broader Linux compatibility. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goose https://github.com/aaif-goose/goose/releases/tag/v1.39.0 https://github.com/aaif-goose/goose/releases/tag/v1.39.0 Thu, 25 Jun 2026 22:50:40 GMT Goose v1.39.0 adds /status and /model CLI commands, MLX local inference, 8 new providers, Azure Entra ID auth, and a unified OTLP logging schema. • Adds `/status` slash command to the CLI for quick session status reporting. • Adds `/model` slash command to the CLI for switching models mid-session without restarting. • Adds `--stats` flag to print generation statistics after a run completes. • Supports MLX models for local inference, enabling Apple Silicon on-device model execution. • Supports OpenAI GPT models via AWS Bedrock mantle endpoint. • Adds Azure Entra ID bearer token authentication via `AZURE_OPENAI_AD_TOKEN` environment variable. • Adds EmpirioLabs, OrcaRouter, Together AI, Perplexity, Alibaba (Qwen/DashScope), Databricks AI Gateway, and xAI SuperGrok as new declarative providers. • Adds HuggingFace OAuth support with a dedicated auth tab in settings. • Introduces `GOOSE_SERVER__SECRET_KEY` support at the `goose serve` ACP endpoint for API authentication. • Adds configurable tool output size limit via `GOOSE_MAX_TOOL_RESPONSE_SIZE` environment variable. • Adds configurable per-agent timeout for Open Model Gym via `GYM_AGENT_TIMEOUT` environment variable. • Loads global agent hints automatically from `~/.agents/AGENTS.md`. • Adds an image read tool for processing image files directly in sessions. • Adds peek mode for async background tasks in `summon`, enabling non-blocking status checks. • Adds `context` and `working_dir` override parameters for `summon` delegate tasks. • Adds structured metadata to `summon` task load results for richer programmatic consumption. • Adds a quarterly scheduling option to the task scheduler. • Adds a unified OTLP logging schema for cross-tool detection and observability. • Enables canonical thinking modes configuration and ACP thinking effort config option. • Enables prompt injection mitigation by default for internal users. • Adds `_meta.conversationBefore` for ACP session forking. • Adds ACP session search, list with keyword/type filter, session import, and system prompt setter in the Desktop UI. • Adds MCP extensions support in open plugins. • Enables `goose://new-session` deep link for pre-populated session launch. • Adds Korean, Japanese, Hindi, Spanish, Russian, and Turkish localization support. • Adds CLI command to list skills with token counts. • Surfaces Anthropic stream refusals as visible errors instead of silent failures. • Tracks cache tokens for accurate cost reporting. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goose https://github.com/aaif-goose/goose/releases/tag/v1.38.0 https://github.com/aaif-goose/goose/releases/tag/v1.38.0 Wed, 17 Jun 2026 04:06:52 GMT Goose v1.38.0 adds `goose review`, hooks, 8 new providers, ACP secret-key auth, egress directionality, and a PreToolUse denial hook. • Adds `goose review` command for local AI-powered code review with per-check turn limits and orchestrated subprocesses. • New hooks system with PreToolUse denial hook to intercept and block tool calls before execution. • Adds `GOOSE_SERVER__SECRET_KEY` support at the `goose serve` ACP endpoint for authenticated API access. • Adds egress logging directionality (`outbound`/`inbound`/`unknown`) to security tracing events, enabling data-exfiltration vs. data-fetch distinction. • Unified OTLP logging schema for cross-tool detection across security monitoring pipelines. • New `/model` slash command in CLI sessions for switching models mid-conversation without restarting. • New `/goal` slash command for agent self-evaluation before finishing a task. • Adds `GOOSE_MAX_TOOL_RESPONSE_SIZE` env var to cap tool output size and prevent context bloat. • Adds `GOOSE_DISABLE_TOOL_CALL_SUMMARY` env var to opt out of per-tool-call summary cards. • Adds `GOOSE_OAUTH_CALLBACK_PORT` env var for a stable OAuth redirect URI across sessions. • New image read tool enabling agents to process and reason over image files. • Session import now supports Claude Code, Codex, and Pi `.jsonl` transcript formats in addition to Goose exports. • Encrypted Nostr session sharing for secure cross-device session transfer. • Supports 8 new providers: Perplexity, Alibaba/Qwen via DashScope, Databricks AI Gateway, NEAR AI Cloud, Scaleway, Routstr, Vercel AI Gateway, and xAI SuperGrok OAuth. • Adds Hugging Face OAuth support with a new Settings > Auth tab for credential management. • Canonical thinking modes available across all supported providers. • Steering messages via ACP enable mid-session behavioral guidance from ACP clients. • ACP session management (list, search, filter by keyword/type, paginate, get session info) now available in Desktop and via API. • New Scholar Sidekick MCP extension for research workflows. • Linux musl CLI builds for glibc-free deployments. • Windows CUDA release artifacts for GPU-accelerated local inference. • Nushell terminal and tab-completion support. • Quarterly scheduling option for recurring recipes. • New `goose://resume` and `goose://new-session` deep links for Desktop session navigation. • Projects as backend sources with system prompt injection for scoped agent contexts. • Opt-in `GOOSE_FAST_MODEL` env var honored in `ModelConfig::with_fast` for fast-model overrides. • Harbor eval runner for structured agent benchmarking. • CLI command to list skills with token counts for context budget planning. • TUI command (`goose tui`) and TUI diff viewer added to goose-cli. • Configurable `MAX_CODE_BLOCK_LINES` via env var to control output verbosity. • Minimal UniFFI setup enabling cross-language SDK bindings. • Simplified Chinese (zh-CN) UI translation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goose https://github.com/aaif-goose/goose/releases/tag/v1.37.0 https://github.com/aaif-goose/goose/releases/tag/v1.37.0 Wed, 03 Jun 2026 19:37:45 GMT Goose v1.37.0 adds 9+ new providers, PreToolUse hooks, `goose review`, `/model` switching, skills listing, and encrypted session sharing. • Adds `goose review` command for local code review directly from the CLI. • Adds `/model` slash command to switch the active model mid-session without restarting. • Adds `goose skills list` subcommand to display all installed skills with token counts. • Adds PreToolUse denial hooks so practitioners can intercept and block tool calls before execution. • Adds a Hooks system for event-driven automation around agent actions. • Adds `/goal` slash command for agent self-evaluation before finishing a task. • Adds configurable tool output size limit via `GOOSE_MAX_TOOL_RESPONSE_SIZE` environment variable. • Adds encrypted Nostr session sharing for secure cross-device session handoff. • Adds xAI SuperGrok OAuth subscription provider. • Adds Databricks AI Gateway (`databricks_v2`) provider with routing across OpenAI Responses, Anthropic Messages, and MLflow chat completions. • Adds Perplexity as a declarative OpenAI-compatible provider. • Adds Alibaba (Qwen via DashScope) declarative provider. • Adds NEAR AI Cloud, Scaleway, Routstr, FuturMix, oMLX, Atomic Chat, and Vercel AI Gateway as new declarative providers. • Adds Scholar Sidekick MCP extension. • Adds GitHub Copilot /responses API support. • Adds Linux Vulkan support for local inference. • Adds `goose://resume` and `goose://new-session` deep links for desktop session management. • Adds quarterly scheduling option for the recipe scheduler. • Adds optional `--parameters` flag to scheduled recipes. • Adds ACP session system prompt setter for programmatic prompt injection. • Adds ACP session list pagination. • Exposes raw provider supported models over ACP. • Adds `GOOSE_FAST_MODEL` env var to configure the fast model in `ModelConfig::with_fast`. • Adds configurable `MAX_CODE_BLOCK_LINES` via environment variable. • Adds `GOOSE_OAUTH_CALLBACK_PORT` env var for a stable OAuth redirect URI. • Adds proactive OAuth token refresh to avoid re-authentication on every session. • Adds TUI command (`goose tui`) gated behind a `tui` feature flag. • Adds TUI diff viewer for reviewing file changes in the terminal UI. • Adds Nushell terminal and shell completion support. • Adds Russian language and Turkish desktop locale support. • Adds Simplified Chinese (zh-CN) translation. • Adds Harbor eval runner for benchmarking. • Adds summon subagent instructions for multi-agent orchestration. • Adds slash commands (built-in, skill, recipe) in the ACP server. • Adds projects as backend sources with system prompt injection. • Groups consecutive tool calls into one summarized chain card in the UI. • Strips chain-of-thought markers from custom provider output automatically. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/goose