🔮Augur v1.15.0

Added

• VisibleSecurity AUGUR_KEYSTORE=file keeps every key in a file on any computer. The key store is the operating system’s — the Windows credential store, the macOS Keychain, or the Secret Service on Linux — and falls back to a file only where none of those answers. Setting the variable uses that file everywhere, which is what a computer with no keychain service needs, and it holds the key in plain text, so the file is written with mode 0600 inside a 0700 folder and its whole contents replaced through a temporary file and a rename. Where keys are kept has the details.
• VisibleProviders Augur’s own Claude sign-in ships with Augur again. Run augur login claude and paste the code Claude shows, or sign in from the Claude card in Settings. Augur keeps only the refresh token in the operating system’s key store; the access token stays in memory.
• VisiblePlatform Prose requests can wait in a queue and run as one batch. augur prose add queues a request from flags or a JSON file, list and status show the queue, run submits a due batch in the background, and approve releases an urgent request. A batch is due at 10 normal requests or once the oldest has waited 24 hours, and the new service settings proseBatchSize, proseBatchHours, proseRoute, and proseAutoRun change the thresholds, the route, and whether the service starts due batches by itself. MCP clients get augur_prose_add, augur_prose_list, and augur_prose_status. Running and approving stay with the owner, and the MCP server can do neither.
• VisiblePlatform Models can follow a series, and newer releases show up as offers. augur alias set <label> --kind <kind> --pattern <glob> puts a model in a series. The service looks for newer matches every aliasRefreshHours hours (24 by default, 0 to stop) and whenever augur alias refresh runs. Before a newer model becomes an offer, Augur checks the pinned host and the input kinds, and on API routes it sends a short test job with no tools. Embedding series get a notice instead of an offer. augur alias accept queues the new id for the owner and moves the matching routes in routes.json, augur alias reject drops the offer, and MCP clients can read it all with alias_list. Offers need listing dates, which only OpenRouter provides, because the Codex cache has none and Copilot has no listing.
• VisiblePlatform A role limits a pick to the models it names. augur roles set <name> --activity <activity> --candidates <labels> sets up a role, and augur pick --role <name> ranks only its candidates. With --caller-chooses, the first pick lists the candidates the rules allow and a second pick with --model <label> records the choice. augur_pick takes role and model for the same thing. Role and series edits wait for the owner, and augur_policy_edit refuses them.
• VisiblePlatform Jobs can run with no tools at all. The none tool tier works on openai-api, anthropic-api and fal-api routes, and the adapters that cannot hold a job to reading refuse it with read_not_enforceable. augur_run does not offer it.
• VisiblePlatform New activity for turning one image into another. Its id is image_to_image.
• VisiblePlatform Premium models wait for the owner. A model in the new gate.premium setting is picked only when the caller names it. Every pick and run now records whether a person or an automation asked, set with --caller interactive|automated or AUGUR_CALLER, and automation never gets a premium model. A job hands its own intent to the commands it runs through AUGUR_CALLER; on a delegating route, a child job is automated whenever its root job was; and the agent token always counts as automated. People still get the gate.paceLift models unnamed while their provider runs gate.open points behind pace, until it is back within gate.close. Each gate event becomes a line in gate-ledger.jsonl in ~/.augur, without task text. augur gate status, augur gate report and augur gate record read and add to it, the gate_status and gate_report MCP tools read it, and the dashboard and the terminal app’s usage page show each provider’s gate.
• VisiblePlatform A surplus window opens the premium models before a reset wastes the allowance. Providers in gate.surplus.countdown get one once their weekly reset is gate.surplus.hours away or closer and at least gate.surplus.open points are unused. It closes under gate.surplus.close or at the reset. The budget is unused points minus gate.surplus.margin, and every completed premium job draws on it. While the window is open on a fresh reading and has budget left, a person can pick and run that provider’s gate.paceLift models without naming them. augur gate status, augur balance, the dashboard and the terminal app show either the unused points, the time until the window opens, or that it is open or spent until the reset.
• VisiblePlatform Premium work can wait in a backlog for a surplus window. augur backlog add puts an item in premium-backlog.jsonl in ~/.augur, optionally with an estimate in points of the provider’s weekly allowance. Once the provider’s window can cover that estimate, the service runs the item as an automated job under the usual rules, one per provider at a time and earliest deadline first. Items refused for a passing reason, a paused model or a spent quota for example, stay in the queue; items still waiting at their deadline expire. Agents add items with the agent token or the augur_backlog_add tool, and those wait for the owner’s augur backlog approve. augur backlog list, status, run, run --dry-run and drop do the rest. No MCP tool approves, runs, releases or drops an item.
• VisiblePlatform Backlog items that wait for your approval are easy to see. The dashboard lists each one with an Approve button, the terminal app’s usage page lists them with their ids, and augur gate status ends with their count.
• VisiblePlatform You get an alert when premium work needs you. One alert covers each backlog item that waits for approval, and another covers a surplus window with under 12 hours left, budget unspent and nothing queued. They reach system notifications, the app’s feed and the phone, and they clear once the cause is gone.

Changed

• VisiblePlatform The shipped balance treats image_to_image as everyday work. Its depth defaults to everyday, as generate_images does, and depth.image_to_image changes it.
• VisiblePlatform Sol, Opus, Grok and their Copilot versions now wait for the owner by default. Both profiles ship gate.premium with codex/sol, claude/opus, xai/grok, copilot/gpt-6.1-sol, copilot/claude-opus-5.5, copilot/grok-4.7 and copilot/gemini-4-argon, and gate.paceLift with codex/sol, xai/grok and claude/opus. The pace lift opens at 20 points behind and closes under 10. Surplus windows cover Claude and Grok, opening 12 hours before the reset with 10 points unused and closing under 5, with 5 points held back.
• VisiblePlatform The MCP server and other agent-token callers count as automated. Their picks leave out every model in gate.premium, and a run on one is refused with the cheapest allowed route named instead.
• InternalPlatform The alias and backlog files share one file lock. The alias lock now also takes over a lock left by a process that is gone, and creates its folder when it is missing.
• VisiblePlatform augur balance has Notes and Surplus windows sections. Notes lists ignored settings, such as a Copilot label in gate.paceLift or a Codex or Copilot entry in gate.surplus.countdown. When the owner runs it, it also saves the gate’s current state; an agent’s call only reads it.

Fixed

• VisibleUI Setup onboarding no longer clips its choice explanations or step labels. Long copy wraps within its column at wide and narrow terminal sizes, and the duplicated keyboard instructions have been removed from the screen body.