Tejus v0.8.13 release notes.

Google sign-in hardened end to end: every callback must echo a one-time cryptographic check, and the token-injection path that browsers could poke at is gone entirely.

Workspace trust: the first time you open a folder, Tejus asks whether you trust it. Untrusted folders never auto-run project scripts (typecheck/lint/test after agent edits) and disable auto-approve — so opening someone else's repository is safe by default.

MCP tools now always show an approval card before running, like every other mutating tool.

The agent treats file, terminal, web and tool content strictly as data — instructions hidden inside a repository or web page are ignored and flagged.

The web-fetch safety filter now also blocks IPv4-mapped IPv6 and NAT64 addresses that could have reached local services.

No more white screens: if a panel crashes, Tejus shows a recovery card with Reload — and you can send us a crash report with one click (only when you click; nothing is sent automatically).

New in the Help menu: Send feedback… and Email support… — tell us what broke without leaving the app.

The daily free limit is now enforced accurately even when many requests run in parallel, with clearer messages and a per-user rate limit that keeps the free tier fair for everyone.

SHA-256 checksums and a signing notice on the download page, so you can verify what you install.

Screen readers now announce streaming AI output and status changes; animations respect your reduced-motion preference.