Canonical SHA-256 checksums for every published build. This page lives at the on-chain
name releases.silentmode.bch; the name pins where it is served from, so a tampered
mirror cannot change what you check against here.
Theseus Navigator 0.3.142
Windows 64-bit · unsigned · 2026-11-03 · Approval prompts from add-ons can now show the add-on's own mark instead of the generic puzzle piece, and a row can carry a coin's mark next to its value (used by Aegis send approvals).
Windows 64-bit · unsigned · 2026-11-03 · Theseus uses less memory when idle: several parts of the window now load only when you first use them, which saves roughly 300 MB on a fresh profile, and the search-engine icons are read from disk once at startup instead of repeatedly. Tabs you have not used for an hour are unloaded and reload when you click them; change the delay or turn this off in Settings under "Unload tabs you have not used". Large file uploads to sites served from a fixed server address now work up to 2 GiB (before, anything over 8 MiB failed on those sites), and a file over the limit gets a clear error instead of a failure. Very long uploads can still be cut off by the site's own server time limit: a 520 MB upload took over 5 minutes and prometheus.x gave up on it.
Windows 64-bit · unsigned · 2026-11-02 · Right-click a favorite and choose Edit to change its address as well as its name, so a site that moved no longer needs deleting and adding again. Updating Theseus now keeps its Start menu shortcut and the tile you pinned there, from this version on (the update that installs this version may still need the tile pinned once more). Large uploads and form submissions to a name served from a fixed server address get up to five minutes to finish instead of being cut off.
Windows 64-bit · unsigned · 2026-11-02 · The AI picker opens larger, sized to its list, with no scrollbars. The YouTube icon in the sidebar shows its white play arrow again. The tab right-click entry "Add to Bookmarks" is now "Save" and puts the page at the end of the list. The Start page's left column of links now has four columns and grows to the height of the cards beside it. A name's saved data is copied into its pinned HTTPS lane without a prompt, unless some of it could not be copied. An add-on's unlock pad and approval dialogs now appear over that add-on's own sidebar panel instead of the whole window. The Claude connector can work in the Dev Panel once you approve it, and it now updates on its own as an extension.
Windows 64-bit · unsigned · 2026-11-02 · Right-click a tab and choose Send to Homepage to pin that page as a link in the Start page's left column. A page already there is not added twice, and Start pages that are open update straight away.
Windows 64-bit · unsigned · 2026-11-01 · The sidebar's Pick AI button works again: the engine list was missing from installed builds, so the button opened nothing. The larger "Claude" chip in the toolbar is gone; the Claude connector add-on keeps its own toolbar icon, and its panel still has Disconnect.
Windows 64-bit · unsigned · 2026-11-01 · Sites that run their own server now open as real https pages pinned to the name's on-chain certificate. Cookies, sign-in sessions, WebSocket and service workers work on them, which they could not on the private bns:// address those sites were served from before; the address bar still shows https. The first time a name moves over, Theseus offers to copy the data the site saved in your browser (wallet seeds, drafts, settings) to the new address, and keeps the old copy; answer once per site. The pinned connection stays off while Tor or an add-on proxy is active. Requests a bns:// page makes to its own name over https now use that name's server, on the default port only. Settings › Registries has a switch for the pinned lane. Right-click menu: Open Dev Panel.
Windows 64-bit · unsigned · 2026-11-01 · Routers and LAN devices open. Typing 192.168.0.1, localhost, an IPv6 address such as [::1]:8080 or a name ending in .local now loads it over http, which is how router, NAS and printer admin pages are served, instead of https. Addresses with an explicit scheme are left alone. Tor and add-on proxies now skip private network ranges and .local names, since a proxy cannot reach your own network. The password vault also locks itself after 30 minutes of machine idle (Settings › Passwords: never, 5, 15, 30 minutes or 1 hour, or any number of minutes), so a signed-in Theseus ID, saved logins and Nostr keys are not left open at an unattended machine. The Nostr add-on (0.2.2) opens Theseus's unlock pad when the vault is locked, including for signing, and add-on credential prompts can re-ask for the PIN even while the vault is open.
Windows 64-bit · unsigned · 2026-11-01 · Add-ons that ask you to unlock now show who is asking. The unlock pad carries the add-on’s own icon and says Unlock Aegis Wallet, Unlock Pithos and so on, while your PIN or master password is still typed into Theseus and checked by Theseus; the add-on only learns that the vault opened. Add-ons can tell this pad is available (vault.unlockPromptBranded), so Aegis can retire its own PIN screen without ever seeing your PIN.
Windows 64-bit · unsigned · 2026-11-01 · Nostr keys from your Theseus ID. When a Nostr app asks who you are (window.nostr), Theseus now offers a key only that site sees (the default), your One ID's Nostr key, or your Hermes identity, each shown with its npub. These keys come from your Theseus ID, so vaults made without a recovery phrase get a Nostr identity too, and they are never the key that signs you in, so your notes can't be traced to your accounts. Settings › Theseus ID lists them with Copy npub, switch to One ID or a private key, New key and Forget; a replaced key never comes back. Sites you already allowed keep their npub. A site asking you to sign a Nostr login for a different site is now asked about every time. Nostr add-on 0.2.0.
Windows 64-bit · unsigned · 2026-10-30 · Startpage layout reverted to the pre-0.3.131 default — hero on top, slots and SM cards sharing one row of panels at the same height — plus the two tweaks the user had baked in: the slot column is chromeless (icons float on the page background, no panel box) and default icon size is "large" (60 px tiles). Game.X takes SilentMode.X's slot in SM cards; SilentMode.X moves to the quick-links strip. Nostr add-on grows per-site identities (0.1.1): first-time approval modal picks between the Hermes identity (one npub for everything) or a site-specific HKDF-derived npub, so Nostr clients can't cross-correlate your activity. Silent Mode Mail retired as an extension — now a Sidebar quicklink; existing mail/ addon folders auto-retire to addons-backups on first boot. Claude connector no longer rotates its bearer on every server stop (0.2.2) — the Theseus-quit / toggle-off auto-rotation was invalidating already-registered Claudes every time; only the explicit Revoke token button rotates now, so a Theseus upgrade keeps your connected Claudes working. Sidebar panel apps blank to about:blank after 2 min idle to free RAM. Light theme palette flips under body.light. moveItem drops the pinned-slot anchor when a link moves to the cards grid (fixes the "link → card doesn't stick" symptom).
Windows 64-bit · unsigned · 2026-10-30 · Silent Mode Mail is now a Sidebar quicklink instead of an extension — the old 0.1.0 panel was a black screen (iframe + X-Frame-Options: DENY), and conceptually it belongs under Settings → Sidebar next to Telegram and X, not under Extensions. Existing installs of the mail/ extension are auto-retired on first boot to addons-backups/. Nostr NIP-07 signer (new bundled add-on nostr/) lands properly — the 0.3.130 build missed it because the folder was untracked and the clean-worktree build didn't see it. Startpage sidebar panel apps now blank after two minutes of being closed to free their render tree (iframes, media, listeners) — fast reopen within the window still reuses the loaded page. Home cards: SilentMode.X moved to the quick-links strip, Game.X takes its slot in the Silent Mode cards (stub description until game.x goes live). Startpage light theme flips the full palette under body.light so hero titles, card text, slot labels and ctx-menus read correctly on the light background preset; before this only @media (prefers-color-scheme: light) would flip them. Theseus v0.3.131 — What's new link is back under the search tip.
Windows 64-bit · unsigned · 2026-10-29 · Startpage sidebar runs the full page height alongside the Theseus title + search box, with 3 columns of slots that fill the whole sidebar panel. Any empty cell doubles as the "add link" surface — click to open the Add-link modal with that cell pre-pinned, so new links land exactly where the click did. Empty cells render as semi-transparent dashed outlines that line up with filled slots instead of a dedicated + button, and the slot grid grows/shrinks row count with the window so it never ends half-way. A "Theseus v0.3.X — What's new" link appears under the search-tip, pointing at the release notes. Chrome searchbox no longer auto-expands on focus (it was pulling the drag handle with it); the URL / search ratio is capped at 75/25 so a wide URL bar can't swallow the search field. Claude connector add-on bumped so the Microsoft Store install of Claude Desktop is detected (the earlier bundled fix wasn't reaching users because the add-on version string hadn't moved), and the add-on-panel approvals section now reaches installed users along with the Claude-Desktop detection.
Windows 64-bit · unsigned · 2026-10-29 · Claude connector now reaches add-on sidebar panels — Aegis, Hermes, Pithos, any other panel an add-on puts in the sidebar. list_tabs surfaces each open panel as a tab with kind "panel" plus addon and panelId fields; screenshot / snapshot / click / type / paste_html / wait_for all drive them with the same CDP toolbox a web tab uses, under a per-add-on approval ("Let Claude control the Aegis panel?"). navigate, activate_tab and close_tab refuse panels — the user owns panel visibility. The connector panel splits site approvals from add-on-panel approvals into their own sections, each with a one-click Remove button. Sidebar web apps (Telegram, X, WhatsApp, the AI chat) were already reachable as the sidebar tab.
Windows 64-bit · unsigned · 2026-10-28 · Searchbox in the chrome toolbar now expands while you type so a longer query stays readable. When the URL bar has been dragged wide, the search field used to pin to its minimum width and clip anything past a handful of characters; it now takes extra room from the URL bar on focus and springs back when you leave the field.
Windows 64-bit · unsigned · 2026-10-28 · System section tightens: Ariadne's Thread row jumps straight to its sub-page and carries an on/off toggle in the System row itself. Names & Certificates row gets a master toggle that enables or disables every optional resolver together (BNS stays on). Aegis row removed from System (it already has its own top-level nav entry). About plug-ins link moved out of the System header into the Ariadne sub-page where it belongs. Mozilla CA bundle and Russian National CA are both always on now (the Russian CA is scoped to the Russian TLD set), so the Certificate trust UI toggles are gone. Theseus ID and Names & Certificates sub-pages gain a Back arrow in the header matching plug-in sub-pages.
Windows 64-bit · unsigned · 2026-10-28 · Claude connector now detects the Microsoft Store install of Claude Desktop. The Store app's AppData is virtualised under %LOCALAPPDATA%\Packages\Claude_<id>\LocalCache\Roaming\Claude\, which Theseus's old classic-%APPDATA%\Claude\ check missed — the panel said Not installed on this computer even with Claude Desktop running. The config path now prefers the Store location when a Claude_<id> package is present, and the installed signal also accepts %LOCALAPPDATA%\AnthropicClaude\, %LOCALAPPDATA%\Programs\Claude\ and Program Files\Claude\.
Windows 64-bit · unsigned · 2026-10-27 · Claude connector gains a simultaneous-session cap. New row on the panel with three radios — 1 only / Multi / No limit — and a number for the exact cap when Multi is picked (1-100). The server refuses an initialize past the cap with 429, so the client surfaces a clear message to the user. Default stays No limit.
Windows 64-bit · unsigned · 2026-10-27 · Open-with menu now reads just "Theseus Navigator" — the per-extension long label ("Theseus HTML Document") is dropped. File associations register on first launch automatically — the Settings toggle is gone. Right-click an .html, .htm, .pdf, .svg or .xhtml file and Theseus is in the Open-with menu without a flipped switch. Settings sidebar: Plug-ins is renamed System and now holds Names & Certificates as a chevron row — the Names & Certificates nav entry at top level is removed.
Windows 64-bit · unsigned · 2026-10-27 · Error page's Did-you-mean row gains a 🔎 Search '<host>' chip that falls back to the default search engine; shown even when no URL alternative surfaces. Search and AI engines settings pages lead with the curated catalog visible by default — the + Show more button sits at the bottom and reveals the wider bank + the custom-URL form. Shield (adblocker) and Cookie Pop-ups (consent) now also apply to the sidebar AI panel and the quick-link app panels; the inject gate used to require a web tab, so the sparkle-opened chat still showed every banner.
Windows 64-bit · unsigned · 2026-10-27 · Settings restructured: Theseus ID moved inside General; Ariadne's Thread and Aegis are their own top-level nav entries; General leads with four one-line rows (Default browser, Theseus Shield, Startup, Updates); the always-on BNS row is dropped from Names & Certificates; Hermes and Pithos drop out of Extensions and show in a new Theseus-native-apps card at the top of Sidebar; the document editors sort last in Extensions and in the toolbar add-on row. AI engines get their own Settings page separate from Search, with Default picker, catalog and Add form. The Pick-AI overlay is borderless and rounded, with an Edit button in the header. Pithos now appears in the Sidebar card without needing a first launch. The error page's Did-you-mean row surfaces alternative-TLD swaps on DNS failures (my.mynymbox.com → my.mynymbox.io, mynymbox.io, …) alongside the existing BCNR warm-index matches. Engine icons prefer the real brand favicon over the bundled tile once it's fetched.
Windows 64-bit · unsigned · 2026-10-27 · Settings › General has a new Default handling section (Windows). Toggle to make Theseus the default browser (opens Windows' Default apps so you confirm it there — Windows reserves that choice for the user), and a separate toggle to put Theseus in the Open-with menu for .html, .htm, .pdf, .svg and .xhtml files. Everything is written under HKCU, no admin prompt. Theseus also now opens a file path or URL you pass on the command line as a new tab — which is what Windows calls when you pick Theseus from an Open-with menu.
Windows 64-bit · unsigned · 2026-10-27 · Pick AI button opens its list again — a close-on-click-away handler the overlay inherited from 0.3.106 was closing the pop the moment it opened, so from 0.3.106 through 0.3.119 Pick AI looked like a no-op. Fixed to use the same server-side click-away contract the search engine picker uses. Also: DuckDuckGo AI renamed to Duck AI (duck.ai is Duck's own name for the chat UI, and it reads cleaner next to the DuckDuckGo search entry).
Windows 64-bit · unsigned · 2026-10-27 · The toolbar magnifier dropdown no longer mixes LLMs in with the search engines — pick an AI through the Pick-AI button on the sidebar strip instead. The LLM list itself is reordered by rough global popularity (ChatGPT, Gemini, Grok, Perplexity) and gains three new engines: DuckDuckGo AI (truly anonymous, no sign-up, serves GPT-4o mini + Claude 3 Haiku + Llama + Mistral behind one URL), Yandex Alisa (Russian), and Qwen (Alibaba's Tongyi chat — email sign-up, the strongest non-mainland-phone access to a Chinese model). All three ship with bundled icons.
Windows 64-bit · unsigned · 2026-10-27 · AI engine icons now load from a bundled set on disk instead of being fetched from each engine's favicon over the network. Fewer requests at startup, correct icons in the picker on first open, and nothing to render if the engine's host is unreachable. Phind is dropped from the enabled defaults — its web UI currently returns a Vercel 404 at the root — so the Open AI launcher now opens Perplexity by default. Phind stays in the catalog but marked frozen, so it won't be re-added automatically.
Windows 64-bit · unsigned · 2026-10-27 · A navigation to a .com / .net / .io / country-code TLD that fails DNS now shows the DNS-flavoured This name did not resolve page instead of the BCNR-flavoured That name is not registered page. The old framing pushed a Register on Sirius action for sites that are almost certainly real clearnet domains whose DNS temporarily broke (hostile Wi-Fi AAAA mangling is the usual cause). Non-ICANN TLDs (.bch, .x, …) keep the register-first framing.
Windows 64-bit · unsigned · 2026-10-27 · Pick AI is now its own strip button next to the AI launch button, not a chevron badge glued onto it. Launch button opens the current engine in the panel; Pick button (three-row list glyph) opens the picker overlay to switch engines. Right-click on the launch button still opens the picker as a shortcut. Also: the Claude connector chip in the toolbar gets a max-width + ellipsis + flex-shrink so a long Claude N tabs string no longer squeezes the search box text out of view.
Windows 64-bit · unsigned · 2026-10-26 · Pick AI engine chevron on the sidebar AI button is now a visible acid-coloured badge (grew from a 10 px grey ghost in the corner) so the way to switch engines is actually discoverable. Click or Enter still opens the picker overlay; right-click on the main AI icon still works too. The sidebar strip and the picker also refresh their icons the moment a favicon fetch finishes — previously they kept the sym emoji until some other state change re-emitted.
Windows 64-bit · unsigned · bundled Node runtime · 2026-10-01 · Every subsystem is now individually switchable and reports its own state. New endpoint http://127.0.0.1/api/status returns a full state report (daemon version + startup + policy + permitted TLDs + ports + upstream + gateway; index size + warm-start source; per-source enabled/lastAttempt/lastSuccess/lastError/counters for snapshotHttps + electrumWss + perQueryLookup + diskCache + localApi). C:\ProgramData\Ariadne\policy.json extended with a `sources.<name>.enabled` block (hot-reloaded every 5 s alongside the collision policy) -- flip any source off to isolate a path or measure without it. Turning localApi off returns 503 with a hint pointing at the config file. Turning diskCache off skips writing bns-name-snapshot.json AND skips reading it at warm-start. Turning snapshotHttps off skips the HTTPS refresh; electrumWss off skips the WSS refresh; perQueryLookup off skips the per-query /api/name/ fallback. Includes 0.1.12 (orphan-safe upgrade + /api/tlds + /api/name/:n + /api/registry). Upgrades in place.
Android 5.0+ (API 21) · self-signed release key · 2026-10-22 · In the Grid tab-switcher, the + New tab card is now the same size as a real tab card instead of collapsing to roughly half the height. The two sit on the same baseline so the grid reads as one surface. Same signing key; installs over 0.46.
Android 5.0+ (API 21) · self-signed release key · 2026-10-22 · Hold any card on the LIVE row for a moment, then drag it between other cards to reorder — same gesture FAVORITES already use. The new order persists across restarts. Short tap-and-hold still opens the edit menu. Internally, a store-side unit test harness (63 assertions covering drag bounds, corrupt-prefs fallback, round-trip persistence) now guards this and the FAVORITES reorder from regressing. Same signing key; installs over 0.45.
Windows 64-bit · unsigned · 2026-10-08 · In Theseus, Send on Telegram and Send on WhatsApp open Theseus's own Telegram and WhatsApp apps at their share screens; the share menu shows the real Telegram, WhatsApp and X icons. The sidebar's Full page button is gone (the panel's Maximize does the same).
Linux 64-bit · unsigned · 2026-10-08 · In Theseus, Send on Telegram and Send on WhatsApp open Theseus's own Telegram and WhatsApp apps at their share screens; the share menu shows the real Telegram, WhatsApp and X icons. The sidebar's Full page button is gone (the panel's Maximize does the same).
Windows 64-bit · unsigned · 2026-10-07 · Share opens a menu: copy the public link, open it, or send it on X, Telegram or WhatsApp. Shared links open on a page with a preview and a Download button. Pithos fills wide windows, a renamed user updates in every open view, and pithos.sia in Theseus asks for the vault PIN after a lock and reopens once it is unlocked.
Linux 64-bit · unsigned · 2026-10-08 · Share opens a menu: copy the public link, open it, or send it on X, Telegram or WhatsApp. Shared links open on a page with a preview and a Download button. Pithos fills wide windows and a renamed user updates in every open view.
Android 5.0+ (API 21) · signed · 2026-10-26 · Invite Friends: tapping a contact opens the system SMS composer pre-addressed to that number with the invite text ready to send; Share Hermes link stays as the chooser. Sign-out shows the 12-word recovery phrase AND the nsec when both exist on the device; nsec-only imports show the nsec with a note explaining why no 12 words are sealed.
Android 5.0+ (API 21) · signed · 2026-10-26 · Profile: Name / Surname / Username are three independent fields. The old code conflated the @handle with the real-name slot, so profile rows surfaced an npub as the "Name" value when no name was set. Each row is now empty with its own placeholder, and username publishes to kind:0 `name` separately from the `display_name` (First Last). Chats + contacts prefer First+Last, fall back to @username only when no name is on file. Room v8 destructive migration — chats and messages persist, cached profiles rebuild from relays.
Android 5.0+ (API 21) · signed · 2026-10-26 · Auto-download updates (banner downloads + sha256-verifies the new APK the moment one is available; Update is now a one-tap install confirm). Contacts: Telegram-style Search Contacts field + Invite Friends shortcut; new Invite Friends screen opens the system share sheet with a prepared hermes.x link. NIP-42 AUTH wired on inbox subscriptions. About -> Source code links through navigate.st/bns/hermes.x so stock browsers reach the page.
Recent releases only. Every older build is archived on Sia under
dl-archive/ and its checksum stays in this repository's history.
How to verify. After downloading, compute the file's SHA-256 and compare it to
the value above — on Windows: certutil -hashfile <file> SHA256;
on Android, hash the downloaded .apk on a computer before you move
it to the phone, or use any file-hashing app. Nothing here is signed by an authority your device
already trusts — by design — so it will warn about an unrecognized app; the checksum is the
real check. The machine-readable manifest is at
releases-manifest.json.