0.5.0-rc.78 Windows legacy data recovery and tool guidance#

Windows setup and removal back up, verify and archive installation-local legacy data before invoking an old uninstaller. Recovery-only mode retains current sessions and copies, and unverified conditions still stop removal. See installation and recovery. SDK preflight errors now include corrective tool guidance; MATLOOK quota errors explain reservation requirements rather than directing users to provider credentials. Reservation algorithms, output budgets and concurrency configuration are not changed by these fixes.

Candidate targets are Mac Apple Silicon, Intel Mac and Windows x64. Publication and native acceptance are recorded for the actual release.

The temporary online service endpoint is https://ai.z-group.cn. The same production account retains its existing local data space. Download the appropriate updated client from the new site; browsers require a new sign-in. See Temporary service domain.

0.5.0-rc.77: Plan review handoff fix#

Fixes a race where plan submission returned success and the turn ended before the review card appeared, causing an unknown-ending error. Failed plan reads or delivery retain a tool error. Stop requests, newer messages and duplicate submissions remain protected; historical operations are not replayed. Upgrade the client and reopen the conversation; see plan submission and approval.

This release targets Mac Apple Silicon and Windows x64. Consult the download center and delivery records for actual installation, native acceptance and publication scope. DeepSeek concurrency and output budgets retain their previously verified settings.

0.5.0-rc.76: Managed-model output budget fix#

Fixes managed models falling back to an 8,192-token output ceiling when output capabilities were missing. Platform budgets now reach macOS and Windows clients and online runtimes, including policy refreshes. This GLM-5.3-Flash-GGUF deployment uses a 32,768-token per-request budget with upstream-default reasoning. Upgrade the client and reopen the conversation; see model output budgets.

This release updates desktop clients, the output-budget server path and bilingual guides. Android and Intel Mac downloads retain their previous versions. Configured limits and remaining context still apply; output is not unlimited, and incomplete tool arguments remain blocked. Consult the download center and delivery records for signing and actual platform acceptance scope.

0.5.0-rc.75: Voice and attachment integration (beta)#

Released on 2026-11-02 for Mac Apple Silicon and Windows x64, with the internally signed Android rc.75-mobile.1 package. Intel Mac retains its previous release. This integrates voice input and local attachment preparation: complete originals, offline indexes, selected-section coverage and cancellation/retry. It fixes large-result truncation, attachment request deadlines and Windows temporary directories, and updates sensitive-header handling dependencies.

Final-media runtime code passed on Mac ARM and Windows 10. The final Android APK passed upgrade, microphone denial/regrant and a full 60-second recording. The final Windows installer upgrade/uninstall lifecycle, real-account voice in the integrated desktop package, Windows microphone, Windows 11 and an extended real-material trial remain unverified. Save your work and quit the old app before selecting the correct platform and architecture in the download center. Mac packages are not Developer ID signed or notarized; Windows is not publisher signed; Android is not a production store release.

Voice requires consent to cloud transcription, review, insertion into a preserved draft and manual sending. Whole-document reading still requires every section; coverage does not guarantee model understanding. No fixed traffic-saving percentage is promised. This publication updates desktop/internal Android downloads and online guides. The existing production speech service stays active; no new headless attachment worker is deployed. Older installers retain their build-time candidate guide; this page and the download center show current release status.

0.5.0-rc.74 Windows uninstall cleanup fix (beta)#

Fixes per-user shortcuts and protocol entries left by older clients after an all-users uninstall. Cleanup checks that the target belongs to the installation being removed; user data is retained. Native Windows 10 installation, uninstall and reinstall passed; all 1,770 data files were byte-identical across uninstall. This publication is Windows x64 only; Mac remains on rc.73. Windows 11 hardware acceptance is still deferred. See installation and removal.

Version settings identify the published installer version next to its SHA-256, so the online release checksum is not mistaken for the installed version checksum.

The verified installer is published unchanged. Its offline guide retains the candidate status recorded at build time; the download center and this page show the latest publication scope.

0.5.0-rc.73 fixes#

This version addresses persistent model occupancy blocking new requests, phone login codes not being sent, and missing phone password recovery. It also updates plan handoffs and automatic tool result checks. Opening a historical conversation also checks existing plan results so legacy uncertainty does not keep blocking the task. Consult delivery evidence for actual publication and desktop-package acceptance status.

Unreleased: 0.5.0-rc.72 duplicate-execution protection candidate#

Fixes an unconfirmed operation being executed again while its previous result is waiting to be saved or broadcast. Duplicate calls are blocked before execution, including when uncertainty arrives during a permission wait. Original records, approvals, permissions and usage are preserved. Refreshing status or reopening the app never automatically resumes work. See pending actions.

The repair has been verified in an isolated Windows 10 engineering copy; final installation media need separate acceptance. Frozen rc.71 media do not contain this fix and are not a release target. Installation/upgrade/rollback, Windows 11, real-account, distribution-signing, notarization and CI gates remain pending wherever conditions are unavailable. This is not a publication announcement.

Unreleased: 0.5.0-rc.71 pending-actions candidate#

“Pending actions” replaces “Review tool results”, showing task and target names first, with invocation IDs and original errors in the details. MATLOOK checks execution status and reads existing results for confirmed-ended native file writes. Verifiable results are reused while unknown actions stay protected against duplicate execution. Users no longer attest to executor termination. Recording an outcome does not resume work or change the original approval or permissions. See pending actions.

This candidate retains rc.70 Python cache protection and existing functionality. Mac source-build desktop acceptance has passed in isolation; the new package requires separate installation, upgrade and rollback acceptance. Windows, real-account, Keychain, signing/notarization and CI gates remain subject to their actual evidence. It has not been released. Existing rc.70 media retain their original identity and acceptance scope.

Unreleased: 0.5.0-rc.70 Python resource protection candidate#

Fixes offline document tools and Python scripts rewriting caches inside the installed application, which affected application integrity checks. Existing workflows, tool permissions and local data are preserved. No data cleanup or new Python dependency download is required. New isolated installation and upgrade acceptance is required; real-account, Windows hardware, distribution signing and notarization checks remain pending. This is not a publication announcement.

Unreleased: 0.5.0-rc.69 integration candidate#

This candidate combines diagnostics repairs, voice drafts, local startup/background settings and remote model labels. Installers are being rebuilt. This is not a publication announcement, and earlier rc.68 acceptance does not verify the new package. Downloads, automatic updates, signing and platform status depend on the final delivery manifest.

Request endings, stopping and manual tool-result checks preserve original text, approval and execution evidence. Admin diagnostics show an exact stack origin when available; historical unknown origins remain unknown.
Voice input requires explicit consent, microphone permission and a configured online service. Review the transcript, insert it into the draft and send manually. Typing remains available without the service.
Startup/background settings preserve startup opt-outs. Keep running after close and background login startup are separate, initially disabled settings. An unavailable tray restores a visible window.
Remote model lists retain display names supplied by the owning computer. A label does not change the execution computer or model capabilities.
Windows setup stops installation or removal when historical data is found inside an existing installation. Choosing another destination does not bypass the check. This candidate does not migrate that data automatically.

Outstanding Windows installation/upgrade, system scaling, real-account and distribution-signing acceptance remains pending. The complete integrated package needs new acceptance.

Unreleased: 0.5.0-rc.68 diagnostics repair candidate#

Candidate installers are being prepared locally with the normal product identity and offline resources. They have not been published to downloads or automatic updates. Real-account, Windows 11 and other unavailable acceptance scenarios remain pending. Signing, notarization and final acceptance status are recorded in the delivery manifest.

The new source preview replaces “Review tool results” with “Pending actions”. MATLOOK checks execution records first and verifies workspace file results for confirmed-ended native writes. Verified results are reused; unknown states stay protected. Users no longer attest to executor termination, and checks never automatically resume work. See pending actions. This change is not in the existing rc.70 media and has not been released; historical acceptance scopes remain unchanged.

Connection checks also distinguish a missing model, an API route returning 404 and a gateway returning a web page. HTTP 200 or a working model catalogue does not establish a valid generation; check the selected API protocol against the connection configuration. External diagnostic archives provide source locations only when the stack has an exact recorded build origin and matching symbols. Historical stacks with unknown origins remain unresolved. Reports from an older or rolled-back app do not borrow another build's origin to generate a source location.

Offline import repair preview: PDF and image recognition read the Chinese and English OCR language data shipped with the app, preventing desktop workers from treating local paths as network addresses. No language download is required; original files remain available.

When a tool is cancelled or the wait ends before its final result arrives, the repair preview preserves structured unknown execution state. Check the executor and existing result first: ending a wait does not establish that side effects stopped. A late real result can still update the original invocation evidence.

A menu bar/tray entry offers Open MATLOOK, local sync status and explicit Quit. Keep running after windows close and background login startup are independent options, both initially off. Unavailable trays preserve a visible window, and existing startup opt-outs remain respected. Local development validation is in progress; no installer has been released, and Windows hardware and system-reboot acceptance are pending. See Settings.

MATLOOK is validating default startup at system sign-in, with an off switch and live system status in Settings → App → Startup. Opt-outs and existing window-close behavior are preserved. No installer with this feature has been released, and Windows hardware and system-reboot acceptance remain pending. See Settings.

0.5.0-rc.67: Desktop security update#

The macOS Apple Silicon, macOS Intel and Windows 10/11 x64 installers move to Electron 43.8.1, including the block for affected certificates. Request and body-parsing dependencies use the audited versions. Existing local data, tools, knowledge, terminal and editor features, and the rc.66 model-notice fixes are preserved.

Save your work and quit the old app before installing the package for your system and architecture from the download center. Keep your existing local data directory. General upgrade announcements include members and administrators. Android remains on rc.66-mobile.1. This is a release candidate; macOS packages have no Developer ID signing or notarization, and Windows packages have no publisher signature.

0.5.0-rc.66: model fallback and utility selection fixes#

Fallback notices display separately from assistant text, tool summaries and conversation titles. Utility defaults follow the selected conversation model unless a valid override exists. Notices distinguish recovery backoff, unavailable execution slots and request failures, once per transition per turn. Local utility calls do not automatically switch to another online provider.

Delivery targets are macOS Apple Silicon, macOS Intel, Windows 10/11 x64 and the Android internal companion package rc.66-mobile.1. Android retains the existing internal certificate for in-place upgrades. This release excludes speech input and other unfinished changes. macOS is not Developer ID signed or notarized; Windows is not publisher signed. See Connect & choose models.

This release also includes a security patch for the validation dependency while preserving existing tool definitions and data formats.

Server follow-up, 2026-10-24: general upgrade announcements reach active members and administrators. Customer-group and fixed-audience notices keep their existing scope. The download page labels packages by their actual stable or beta channel, including when the API falls back to beta. Insufficient upstream credit now prompts users to contact an administrator or choose another authorized model, rather than retrying repeatedly. A server update does not replace installed desktop apps; older installers retain their build-time offline guide, while this correction is available online. See Connect & choose models. Server request and body-parsing dependencies are also updated.

0.5.0-rc.65-speech.1: speech staging preview#

Phone and desktop dictation is in development: consent to cloud transcription, review the text, insert it into the draft and send manually. It requires a configured speech service and a new client; this is not a claim of public availability. See Voice input.

0.5.0-rc.65: Customer operations and subscription administration#

rc.65 provides installers for macOS Apple Silicon (ARM64), macOS Intel (x64) and Windows 10/11 x64, alongside customer operations and subscription administration and the offline guide. Android retains its existing version. Admin pages were exercised against an isolated service in a native Electron window. That workflow acceptance is recorded separately from package-content checks and does not establish native Windows or live-payment acceptance.

Large customer audiences: global grouping work and exceptions support combined filters and complete candidate counts. Manual synchronization processes only the reviewed page and respects locks and manual management. Group subscription and quota batches prepare a fixed audience in the background, with saved progress available for later review and execution.
Future subscriptions: administrators can review and save a future plan change while current benefits remain in place until execution. Order, subscription or active-usage conflicts block the change with a reason.
Operational ownership: customer managers, channels, projects, contracts and tags stay independent of policy groups and subscriptions. Combine filters, save views, assign managers or add/remove tags in bulk.
Complete task history and traceability: filter customer bulk tasks by operator, dates, action and result, page through outcomes, and export all matching task summaries. Permission checks, audit records and failed-item retries remain part of the workflow.

See Administrators: customer operations and subscription tasks for controls and recovery steps, and Accounts, subscriptions and quota for customer entry points and entitlement boundaries.

0.5.0-rc.64: Two experience fixes#

Clearer concurrency notice: when all concurrency slots are busy the app used to suggest downloading the desktop app, which does not apply to customers who already have a paid plan. It now says "concurrency is full, retry shortly or close another running conversation".

Shortening retention no longer affects existing data: changing a customer group's retention window (or moving a customer into a group with a shorter window) can only extend, never pull forward, the expiry of existing sessions and files, so data is not pushed into quarantine early.

0.5.0-rc.63: Web concurrency follows your plan#

Web concurrency is now plan-based: previously every regular account on the web was limited by its customer-group concurrency value, so customers who bought Plus/Pro/Max could still be capped lower on the web. Active paid subscriptions now run at the plan's concurrency, and only accounts without a subscription use the customer-group value.

A retired plan no longer reappears: fixed an issue where retiring a plan version still let an older version act as the live offer and keep showing on the plan page.

Two same-named fields were also renamed in the console: the customer group's "online experience file space" (temporary web files) versus the plan's "cloud sync space" (phone remote mirror).

0.5.0-rc.62: Tool-failure recovery, model queueing and network attribution#

Repeated tool failures now pause explicitly: if the same tool keeps failing within one turn (unknown tool, rejected arguments, permission denied), the app shows "工具恢复已暂停" and ends that turn instead of retrying blindly. Send a new message to continue — no need to start a new conversation.

Cancellation and unknown results are no longer treated as "retry immediately": after you press stop, the run is cancelled; if the remote state cannot be confirmed, it is marked for review instead of being retried, so you do not risk duplicate side effects or double charges.

Busy models queue instead of failing: when several sessions share one model connection and capacity is saturated, requests wait in a queue, and your available credits are not frozen while waiting. After a timeout you can keep reading the original response instead of replaying the same request.

Generation health is shown separately from connectivity: a model list that loads and an HTTP 200 do not prove generation works. Repeated generation failures trigger a brief circuit breaker with limited recovery, and the two states are reported separately.

Network errors point at the right stage: connection failures now distinguish DNS resolution, connection setup and certificate validation, so you can tell whether the local network, a proxy or the service is at fault.

Subscriptions and credits: plan prices and monthly allowances have been adjusted; the plan page shows both the list price and the current price, with annual plans prorated. Accounts without a paid plan can now purchase monthly or annual plans directly.

0.5.0-rc.61: Consistent colors across platforms and a false-error fix#

Consistent window colors on Windows and macOS: Windows 10/11 no longer uses system transparency materials (Mica/Acrylic); all three platforms now paint the same opaque theme canvas. Previously the Windows window background varied with the OS version and looked different from macOS; it is now unified (verified on a real Windows machine).

Fix for repeated false errors: Sending a new message while the model was still working (for example, right after submitting a plan) could trigger the "模型请求已结束，但没有收到可显示的答复" error repeatedly. The handover is now silent and the model continues with your new message; if you ever see that notice, simply retry — no need to check the model service.

Choose Share in a conversation menu to create a read-only web link (ai.matlook.com/s/…). Anyone with the link can follow the full conversation in a browser — no installation or sign-in required. Links stay valid for 30 days; Refresh share updates the content and restarts the clock, and Stop sharing disables the link immediately.

Sharing uploads a text snapshot of the conversation only; local attachments are not included. Conversations you never shared stay entirely on your computer.

The share page title and notice now use MATLOOK branding, with a sign-in pointer to ai.matlook.com; legacy product names were removed from session-expiry prompts and example text.

The admin console gains full plan-draft lifecycle management (editing, retirement, archiving and history rollback); existing subscriptions, orders and credits are unaffected.

When a remote computer is selected, conversations can be renamed and assigned to projects. Skills, sources and knowledge follow that computer's workspace. Knowledge edits keep version history; local-only knowledge stays on its owning computer. The computer must be online with workspace sync enabled. Update both controller and executor for the new features.

Remote artifacts support preview and download to the local computer, with a 512 MB desktop original-file limit. Existing files are not overwritten. Slow transfers support bounded chunk retries and cancellation; failures preserve message drafts and show an error.

Windows session credentials now use system encryption independent of Chromium profiles, addressing login loops after account switching. Legacy encrypted credentials are backed up before migration; projects, conversations and knowledge are retained. Full Windows interactive acceptance is deferred and is recorded as a release limitation.

0.5.0-rc.58: Workspace names and device archives#

Use the pencil in the workspace selector, or Rename workspace in the compact menu. Renaming only changes the display name; existing projects, conversations and knowledge remain intact.

Device connectivity and workspace sync are shown separately. Archive unused devices and restore them from the archived list. Archiving does not delete remote data or revoke credentials.

0.5.0-rc.57: Protection against repeated knowledge reads#

When a model repeatedly reads the same knowledge note without changed content, MATLOOK pauses the turn with an explanation and preserves existing results and conversation history. The pause does not delete knowledge or automatically restart the same loop. Review the existing results and send a new instruction to continue.

A successful read already records the destination evidence for the turn; repeated confirmation is unnecessary. Knowledge drafts still require human review. This release preserves the existing legacy-data restoration safeguards and does not clear account data.

0.5.0-rc.56: Restore legacy data after upgrading#

Signed-in accounts are prompted when unclaimed legacy workspaces remain. Confirm ownership to create a verified backup and copy; originals are retained.
A completed restore opens the restored workspace instead of the empty workspace created during upgrade.
Internal dependency links and Python virtual-environment interpreter references are preserved. Project source, attachments and deliverables are not rewritten as application state.
Empty knowledge indexes and database-read failures no longer block restoration. Existing knowledge, model settings and workspaces are not overwritten.
Insufficient space or migration failure prevents activation of an incomplete copy. Retry in Settings → Account → Import legacy data. Restore additional workspaces and global libraries individually after confirming ownership.
Do not uninstall, clear application data or delete legacy folders to resolve an empty workspace. Accounts already restored can continue normally.

rc.54: Less repeated context on the first Agent turn#

OpenAI-compatible agents read complete built-in operating manuals and non-core session tool schemas on demand. All guides, tools and existing permission checks remain available, including local offline functions. Configured model context limits and conversation history are preserved. New material still requires model computation. Update the client and the desktop or ECS that actually executes tasks; updating a server does not replace another computer's Agent.

rc.53: Desktop account connection recovery#

Valid sign-in credentials continue to reach online models after a transient heartbeat failure. Retry the conversation or sync model policy in account settings to reconnect; background verification also retries with bounded delays. Expired or revoked credentials still require renewal or sign-in. See account connectivity troubleshooting.

Customer announcements and upgrade alerts#

Desktop upgrade alerts check available packages for the device, version and release channel under Settings → Version updates. Customer announcements explain product changes, service changes and maintenance; the two are managed separately. They appear in desktop Settings → Messages, the web account center and mobile Messages.

Expanding a mobile announcement records it as read. If synchronization fails, use Mark as read to retry after reconnecting. Offline reading is not counted as successful synchronization. After a successful retry, the unread marker and the related failure notice disappear.
Fetched means a client requested the announcement; Download clicks do not prove installation. Check Devices and online status for installed versions.
Publishing packages can prepare an announcement draft, publish an announcement, or record a reason for not notifying customers. Stable releases require a published announcement or a skip reason. Internal test releases may be covered by a later combined announcement.
Automatic drafts reuse release notes and list only available package targets. Operator-edited drafts and published announcements are preserved.
Newly eligible customers can also retrieve published announcements. Paused announcements are hidden.

0.5.0-rc.52#

Reduces initial web downloads and per-conversation permission requests, adds project/conversation creation from another desktop with idempotent receipt confirmation, and keeps a confirmed Subscription and quota entry visible during temporary refresh failures. See remote access, account and billing and troubleshooting.

0.5.0-rc.51#

Reasoning-only output exhaustion is classified accurately and receives at most one recovery within declared capabilities and user limits. Configure model capabilities and budgets; connection edits preserve settings, and length-limit guidance identifies the actual output condition. Windows fixes a false failure during bundled Git initialization cleanup.

Verified using an isolated Windows 10 x64 QA installation and synthetic macOS scenarios. Windows 11, Intel Mac hardware and real provider endpoints have not received dedicated retesting. Upgrade both clients and the ECS execution server; Android remains rc.48-mobile.2.

0.5.0-rc.50#

Sources with many tools now use on-demand tool discovery and invocation to reduce context overhead. Source activation resumes the task while preserving permissions, plans and stop requests. Context or output-budget failures produce explicit errors. Update both ECS and the desktop that executes tasks; Android remains rc.48-mobile.2.

0.5.0-rc.49#

Fixes browser window lifecycle, bounded recovery after incomplete long-chat summaries and cancellation. Proxy retries account for business errors and request acceptance. Desktop adds optional cross-device resources, knowledge originals and a separate encrypted static-credential vault; see Settings & backups. Android remains rc.48-mobile.2.

0.5.0-rc.48#

The mobile chat header now uses two compact rows with computer, workspace and model settings in a dialog. Preview images, PDF, Excel and Office text, or save/open originals on Android. Update both the host desktop and mobile app; first access requires the host online. See Remote access.

0.5.0-rc.45#

Windows packages bundle Git/Bash with compatible archive settings and installer initialization checks. Desktop users can preview administrator-published skills, MCP and API templates and choose what to add. Users supply their own credentials; same-name local resources are preserved. See Installation, Skills and Sources. The release verification record states actual Windows installation, upgrade and offline coverage.

0.5.0-rc.44#

Approvals now distinguish directories and specific operations. Follow-up instructions, stop and plan handoffs are more reliable, with automation loop protection. Large tool results retain their originals; context usage is separate from cumulative usage. Web settings scroll independently and the shell is preloaded to reduce serial startup waits.

See Permissions and plan approvals. Existing projects, conversations and local model connections remain available after upgrading, subject to account and operating-system permissions.

0.5.0-rc.43#

RC43 adds the guide entry points and bilingual offline help described here. Account and quota behavior was reviewed against RC42. Check Settings → Version updates for the installed desktop version. A server upgrade does not replace the installation on your computer.

Find help quickly#

The login and welcome pages link to the guide. A persistent guide button sits at the bottom left of the workbench. The top-right question mark offers online guides and offline help. Models, knowledge, permissions and desktop synchronization provide relevant topic links.

Accounts, subscriptions and quota#

RC37 through RC42 introduced and refined subscription and quota features. Available plans, payment methods and team accounts depend on account permissions and platform rollout settings. Use the account center for current quota, prices and order status.

Offline help and online guides#

New builds include both guide languages and demonstration screenshots in the desktop installation. Existing bundled help topics remain available. Offline content matches the guide revision at build time; online guides can receive later corrections. Older installations retain their original help entry points.

Guide component 1.1.0 · October 10, 2026#

Adds online entry points, bilingual offline reading, version notes and an account/quota guide. HTML, search, Markdown and sitemaps are generated together. Older demonstration screenshots remain identified by their original version.

Missing instructions after an upgrade#

Check your version and execution target, then read the platform scope of the relevant guide. Send the version, guide URL and steps through account feedback. Hide customer materials and credentials.

Offline reading tips#

Chapter links in offline help stay inside the client, and practice files can be saved locally. After changing the guide language, the User guide button opens the same online chapter in that language. Additional legacy help remains in Chinese. Chapter screenshots are also included in the installer and load without a network connection.

rc.55: account data and administrator policies#

Desktop projects, chats, knowledge, skills and local connections are now separated by signed-in account and service address. Switching accounts saves data and restarts the app. If tasks are running, you can wait or explicitly stop them before switching.

Existing shared data stays in its original location and is not assigned automatically. Open Settings → Account → Local account data → Import historical data and confirm ownership. MATLOOK copies and verifies a backup before enabling the account copy; originals are retained. Import workspaces, knowledge, skills and model credentials separately. Credentials require a separate confirmation.

You can manually sync selected resources between devices on the same account. Sharing static credentials requires a separately enabled encrypted vault and an offline recovery file. Never upload that recovery file into chats or the ordinary resource library.

Administrators retain their primary policy group. The administrator menu in permission management now lets authorized operators change that policy. Customer management can include administrators or all accounts subject to management permissions. This update also retains rc.54 connection recovery, streaming and deployed billing fixes.