This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+13 more
Affected surfaces
Summary
AI summaryUpdates hcom v0.7.11, Install hcom 0.7.11, and https://github.com/bloodcarter across a mixed release.
Full changelog
hcom v0.7.11
-
Remote device control — launch, kill, resume, fork, term, transcript, and config work across devices via
name:DEVICEaddressing.hcom <tool> --device <name> --dir <path>runs agents on remote machines. -
Relay security — XChaCha20-Poly1305 encryption, replay protection, PSK fingerprint in
hcom relay status, dedicatedhcom relay tokencommand, device join/leave/reconnect events, online vs. seen device buckets. Breaking: old tokens are rejected; runhcom relay newand reshare the token. -
Native Codex hooks — five stdin handlers replace the
codex-notifybinary. Codex launches receive the same automatic message delivery as Claude and Gemini. -
Hook install respects
CLAUDE_CONFIG_DIR,GEMINI_CLI_HOME, andCODEX_HOME(#19); cleanup fixes for stale Claude permissions, Codex matchers, and OpenCode path resolution. -
hcom bundle preparefalls back to stopped snapshots when the agent's instance row is gone (#20 by @bloodcarter). -
Various fixes and polish.
Full Changelog: https://github.com/aannoo/hcom/compare/v0.7.10...v0.7.11
Install hcom 0.7.11
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/aannoo/hcom/releases/download/v0.7.11/hcom-installer.sh | sh
Install prebuilt binaries via Homebrew
brew install aannoo/hcom/hcom
Download hcom 0.7.11
| File | Platform | Checksum |
|--------|----------|----------|
| hcom-aarch64-apple-darwin.tar.gz | Apple Silicon macOS | checksum |
| hcom-x86_64-apple-darwin.tar.gz | Intel macOS | checksum |
| hcom-aarch64-linux-android.tar.gz | Android | checksum |
| hcom-aarch64-unknown-linux-gnu.tar.gz | ARM64 Linux | checksum |
| hcom-x86_64-unknown-linux-gnu.tar.gz | x64 Linux | checksum |
| hcom-aarch64-unknown-linux-musl.tar.gz | ARM64 MUSL Linux | checksum |
| hcom-x86_64-unknown-linux-musl.tar.gz | x64 MUSL Linux | checksum |
Breaking Changes
- Old relay authentication tokens are rejected; required migration via `hcom relay new` and resharing the updated token.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About hcom
Hooks Claude Code, Antigravity, Codex, OpenCode, Kilo, and Cursor into a shared messaging and event bus; agents message, observe, and spawn each other mid-turn without changing how you use them. TUI dashboard, collision detection, cross-device relay. Rust, MIT.
Related context
Related tools
Beta — feedback welcome: [email protected]