Goose v1.44.0

Security fixes

• Arbitrary command execution in goose CLI via goose review (via git core.fsmonitor config) - GHSA-r5pp-p5r8-466r (credit to @0xmagic0)

✨ Features

• Support for latest Gemini models #10630

• Pass working_dir to the Stop hook context #10296

• Declarative Sakana AI provider for OpenAI-compatible Fugu API #10357

• Model interactions viewer restored #10205

• Chunk command-classifier input with overlapping windows for security #10416

• Search filter for provider grid #10437

• Muse Spark 1.1 support via Meta Models API #10432

• GPT-5.6 support #10384

• Reconnect desktop ACP sessions after sleep and connection loss #10411

• Per-message usage stats UI (tokens, cost, TTFT, tok/s) #10210

• OllamaCloudProvider with dynamic model discovery and context limits #10264

• Delete support for custom apps from Apps UI #10127

• --edit session flag to edit conversation before forking #9799

• iFlytek Spark and Astron MaaS providers #9837

• Fireworks AI declarative provider #9990

• OpenRouter request parameters support #9276

• French, German, Italian, Portuguese, Indonesian, Malay, Vietnamese, zh-TW desktop locales #10072

• MiniMax-M3 and missing M2.7 variants #10431

🐛 Bug Fixes

• Preserve command arguments through extension forms #10527

• Enforce manual approval for code mode #10528

• Confine app file operations #10481

• Preserve featured model size on delete and backfill missing sizes #10422

• Preserve recursive schema types with pctx 0.4.1 #10572

• Create inventory tables atomically with schema version #10586

• Rewrite oneOf to anyOf in tool schemas for OpenAI-compatible backends #10571

• Allow custom model as default for non-local providers #10438

• Require absolute goose path roots #10454

• Scope smart approval by request #10457

• Preserve fixed subrecipe values #10452

• Bundle git in Flatpak so hermit can clone its package registry #10511

• Expose AGENT_SESSION_ID to shell commands #10428

• Forward image content chunks to client during live session #10485

• Dispatch Code Mode callbacks on main runtime to prevent hangs #10484

• Protect OAuth token caches #10516

• Preserve content audience boundaries #10493

• Bound scheduled recipe validation #10509

• Return JSON-RPC errors from dispatch handlers instead of killing connection #10499

• Isolate prepare tools test state #10504

• Avoid local inference Metal teardown crash #10508

• Enable indexmap serde support for musl builds #10507

• Scroll chat to latest reply on session resume #10501

• Secure large response spill files #10482

• Register LiteLLM with refresh_only inventory so model picker lists models #10489

• Limit provider selector height in CLI #10420

• Tighten existing secrets file permissions #10453

• Classify image access capabilities #10451

• Preserve one-time permission scope #10450

• Register goose:// scheme handler in Flatpak desktop entry #10461

• Reject duplicate recipe parameter keys #10448

• Synchronously kill orphaned goose serve backends on GUI close #10292

• Break self-referential $ref cycles before Code Mode schema #10469

• Stop multiline paste auto-submitting line-by-line on Windows #10326

• Hide nested config values in Configuration Editor #10390