Changelog

Whats New in v373

Features

• rewrite low-CTR titles and strengthen striking-distance pages from GSC data
• trim the AI catalog video Role Replacement only, images Nano Banana Nova NSFW Img2Img
• NSFW Img2Img RunningHub Img2Img Duck with server-side duck decode
• Seedance 2.0 (BytePlus Ark) Scail2 role replacement as the video backends
• mobile UX fixes schema striking-distance keyword optimization

Bug Fixes

• visual polish, contrast and tap targets GA4 conversion events remove dead docs search
• close mini-app account takeover, forged refunds, cross-tenant references and admin-by-email
• PayPal renewals, subscription-scoped events, idempotent Clerk webhook, cancel-at-period-end
• valid linkbutton nesting, pricing billing clarity, Clerk redirects, lint to zero
• live auto-save toggles, quota placeholders, silent pause failures, render-time ref writes
• return 400 on malformed JSON bodies validate every redirect hop on server-side fetches
• mobile overflow on 69 pages, working share links, macOSDM truth, SEO leftovers
• stale closures, invisible errors, fake notifications, missing confirmations
• stop leaking raw DB errors, close cross-user face read, SSRF and upload-auth gaps
• redirect removed careers pages, replace unbacked Free Migration promise, fix 50-account cost table
• stop apimodulesstatus exposing internal server URLs and raw errors
• list NOWPayments and RunningHub as sub-processors
• send signed-out upgradeadmin users to login, noindex dashboard, harden public API inputs
• align registry dates, prices and plan limits shorten 33 titles replace dead newsletter form
• keyword landing pages drop feature claims the product doesn't have, correct Instagram facts
• secondary and legal pages remove invented stats, reconcile billing, refresh roadmap
• homepage, pricing, download and contact copy now match the plan catalog and real billing
• stop the site-wide homepage canonical leaking onto 404 and unset pages clean manifest, schema, sitemap, robots
• handleGenerate closed over a stale nsfwSourceImage the upload state was never in the useCallback deps, so generate always saw null and demanded a faceimage even right after a successful upload
• uploaded NSFW source image was never appended to the submit form the earlier patch silently missed on indentation, so generate sent no image at all
• NSFW Img2Img had no image input the dashboard only offers the saved-face picker
• workflows with no default prompt (NSFW Img2Img) must require a typed prompt the default-prompt toggle alone must not unlock submit
• RH outputs API returns APIKEY_TASK_IS_RUNNING while rendering treat as keep-waiting, not failure
• accept data-URL image input the fetch helper rejects non-http(s) and the mini-app falls back to data URLs when temp upload fails
• the web dashboard's AI generator had its own workflow list hide retired video workflows there too
• actually hide the retired RH video workflows from both UIs
• voice clone was hitting apiaigenerate with Clerk-only auth 401 for every Telegram user
• remap video_motion nodes workflow republished, NODE_INFO_MISMATCH on every video job
• recover malformed desktop settings
• report local templater failures accurately
• fail closed on brain readiness
• require complete brain module readiness
• align desktop navigation with live features
• restore provider settings integration
• protect desktop provider settings
• preserve adb headroom during companion maintenance

Performance

• cut per-mirror RAM and fix streamlogcat leaks

Overview

• ShadowPhone v3.7.2 - desktop reliability and safer content handling
• Fixes Brain restart races and rejects readiness from stale or failed launches
• Requires a compatible desktop runtime for opt-in temporary Owner-profile storage
• Strengthens Instagram account and media identity checks before publishing or editing profiles
• Reports unsupported Airtablecontent-manager actions and incomplete Drive uploads as failures
• Removes operator-specific configuration and account lists from bundled defaults

Whats New in v371

Bug Fixes

• skip macOS AppleDouble sidecars half of every Mac-sourced folder was guaranteed to fail

Whats New in v370

Features

• dry-run lapsed-subscription sweep fix the RPCs that inverted expiry
• tie API-key automation to the plan expiring trials per-tier daily allowance
• run ShadowPhone entirely from a terminal no dashboard

Bug Fixes

• scheduled reel pushes to secondary profiles have been broken since 2026-07-19
• make every user's APIMCP key actually usable 2 tenant-isolation holes drift killed

Whats New in v369

Bug Fixes

• the adb 'recovery' was killing the mirror one cause behind all three symptoms

Whats New in v368

Bug Fixes

• desktop API calls hit the apex and arrived with NO credentials every create died 'Unauthorized'

Whats New in v367

Features

• stop probing an unreachable tailnet abort a run whose device died

Whats New in v366

Bug Fixes

• background maintenance no longer holds the phone 66 of the time

Whats New in v365

Bug Fixes

• your own create no longer reports itself as 'another action' stop the recheck storm

Whats New in v364

Bug Fixes

• retry flaky SMSPool balance current-user probes so a blip can't abort a create

Whats New in v363

Bug Fixes

• a flaky package check no longer aborts create with 'Instagram is not ready'

Whats New in v362

Bug Fixes

• sidebar survives a mirror that reopens after a run auto-retry stuck preflight

Whats New in v361

Bug Fixes

• stop the wireless reconciler flooding adb break the v3.6.0 restart-defer deadlock

Whats New in v360

Bug Fixes

• sidebar never vanishes mid-run watchdog can't kill the transport under a live create

Whats New in v3536

Bug Fixes

• guarded owner-switch choke-point phone can never flip to Owner mid-run

Whats New in v3535

Bug Fixes

• sidebar rides its mirror's z-order instead of floating above every window
• dedicated sync lane transient retries so fleet load can't kill create-IG preflight

Whats New in v3534

Features

• guided spotlight tour after onboarding hide Workflows tab industry gate

Bug Fixes

• stop stale desktop tokens from 401ing account APIs revive device_profiles sync
• use linked cli for large release uploads
• stream release fallback to storage host
• detect wrapped resumable auth failures
• fall back when resumable uploads reject auth
• use direct storage host for release uploads
• authenticate resumable release uploads

Overview

• ShadowPhone v3.5.33 - permanent ADB process protection
• Prevents stalled ADB commands from multiplying into thousands of processes or exhausting RAM
• Caps concurrent ADB work at 8 commands with a bounded 64-command queue and immediate overload protection
• Terminates timed-out and cancelled commands without spawning a taskkill process per command
• Adds automatic stale-client cleanup, timeout circuit breaking, cooldown recovery, and clean app shutdown
• Applies the same protection across device scans, profiles, mirroring, uploads, diagnostics, watchdogs, and automation modules

Whats New in v3532

Whats New in v3531

• Reorganized the attached mirror drawer into Activity, Account, Schedule, and Diagnostics with contextual controls and keyboard navigation.
• Kept Activity updates isolated to their matching phone and Android profile so progress never crosses between attached mirrors.
• Fixed fresh Instagram profiles being rejected as unverifiable by safely recognizing verified signup screens as zero accounts during the pre-purchase account-capacity check.
• Added a real Recheck capacity action with safe, specific failure details while preserving the five-account limit and no-charge fail-closed behavior. Verified rechecks show the live account count and remaining slots before any SMS purchase.

Whats New in v3530

Fixed

• Removed the three volume controls from the classic attached mirror sidebar.
• Fixed the live-logs arrow so it opens a dedicated 360px drawer beside the controls instead of merely widening or overlaying the sidebar.
• Kept recent launcher history and incoming live events visible inside a bounded, scrollable log surface.

3529 2026-07-23 mirror and schedule reliability

• Restored the native scrcpy mirror as the only local mirror experience, with the classic sidebar attached beside the phone instead of a streamed replacement.
• Stabilized sidebar attachment, resizing, dismissal, and bounded live logs removed the outdated manual mirror-quality buttons while keeping automatic USBTailscale quality selection.
• Protected the GrapheneOS Owner profile from normal switching, renaming, nickname changes, and deletion, and now verify newly created profile IDs against the phone before continuing.
• Hardened scrcpy process tracking by PID, minimized-window handling, canonical USB identity, and Tailscale failover without duplicating one phone in the fleet.
• Corrected Schedule enabled, disabled, and unscheduled counts aligned health with local calendar dates and kept Next Fires and health filters consistent.
• Locked scheduled runs to their assigned phone, Android profile, and Instagram account so later queue changes cannot reroute them.
• Made Schedule saves await confirmation, retain failed drafts, prevent duplicate saves, and expose clear success or failure feedback.
• Improved the Schedule roster layout and first-account setup flow so controls remain reachable without an obscuring bottom overlay.

Whats New in v3528

Features

• add lightweight fleet professional verification
• verify professional state across every account
• unify instagram profile editing in desktop
• add verified instagram profile edit flow
• migrate renamed instagram account identity

Bug Fixes

• harden mirror account creation
• opt out of Instagram promotional emails
• hold Instagram account context through transient screens
• recover Instagram UI dumps and safety prompts
• complete and verify Instagram business conversion
• classify Instagram verification blockers during fleet scans
• fail closed on Instagram verification screens
• harden live Instagram profile editing
• detect instagram 438 account switchers live
• recover interrupted instagram identity migrations
• sync renamed account identity across cloud and desktop
• preserve fleet identity and insight attribution
• verify instagram professional profile edits
• verify instagram account switcher scans

Whats New in v3527

Bug Fixes

• keep remote mirror controls attached
• make sidebar account creation usable
• harden classic mirror sidebar docking
• restore native scrcpy mirror launches

Refactors

• remove desktop streamed mirror workspace

Whats New in v3526

Features

• canonicalize attached mirror launches
• modernize the attached phone workspace

Bug Fixes

• preserve verified mirror context on refocus
• keep current mirror account visible
• authenticate desktop device ownership checks
• authorize mirror transport aliases by hardware
• bound remote mirror peer discovery
• verify remote mirror hardware identity
• heal invalid sidebar Tailnet metadata
• preserve real Tailnet identity in sidebar state
• recover remote mirror identity
• contain mirror account folders
• secure mirror workspace file actions
• isolate mirror workspace actions
• keep mirror account context authoritative
• block account creation on full live profiles
• keep Windows release changelogs complete

Whats New in v3525

Bug Fixes

• harden Instagram account creation on live phones
• share release changelog generation

Whats New in v3524

Bug Fixes

• Handle Instagram notification-onboarding variants without getting stuck
• Retry live profile identity checks before reporting an account-creation mismatch
• Keep already-published macOS releases green when optional GitHub artifact storage is full

Whats New in v3523

Whats New in v3522

Bug Fixes

• preserve selected story media
• recover exact Instagram story selection

Whats New in v3521

Bug Fixes

• fail closed on missing Instagram profile tab
• publish reliable Instagram account switching

Whats New in v3520

Features

• signup-only header clearer macOS 'damaged app' fix
• ship macOS download buttons (unsigned) on the site
• persist RH session tokens to Supabase reload on boot
• honest IG validation via external resolver
• permanent Instagram fix via pluggable off-Railway resolver
• paste social video URL(s) as reference for video gens (desktop bot)
• resolve social video URLs (TikTokYouTubeIG) as reference videos
• overhaul AI pipeline reliability UX (Telegram bot desktop)
• beautiful Discord notifications for signups payments

Bug Fixes

• harden automation release workflows
• handle Android 17 foreground focus
• dismiss Instagram feed preview overlays
• make scheduled publishing deterministic
• bind scheduled runs to exact content
• scope account deletion to schedule tenant
• serialize and humanize device input
• verify exact Instagram DM delivery
• prevent account content replay
• classify Instagram popups before acting
• verify exact Instagram follow targets
• quarantine uncertain feed and story posts
• stabilize exact reel publishing
• enforce portal capability revocation
• distinguish story replies from ad CTAs
• secure collaborator invite lifecycle
• recognize cold-launch Instagram home surface
• verify ADB-only Instagram home entry
• preserve exact hash fallback failures
• enforce Tailscale bridge identity policy
• thread exact media identity through runs
• prove exact Instagram media selection
• preserve exact content transfer identity
• serialize scheduled phone automation
• recover legacy running schedules
• recover from Instagram verification walls
• return post-claim schedule state
• preserve claimed schedule rows
• claim scheduled runs atomically
• preserve portal hardware provenance
• enforce typed portal device identity
• verify portal device ownership
• close portal security review gaps
• secure remote VA portal controls
• own local brain lifecycle across app exits
• fail closed on Tailscale and bridge state
• enforce global route isolation and repost rotation
• close module dispatch bypasses
• enforce Instagram module contract parity
• align slot content preparation with post routing
• honor schedule slot content routing
• restore deterministic automation test baseline
• detect CPU arch install matching build (Intel vs Apple Silicon)
• persist terminal FAILEDCANCELLED states to Supabase
• drop nonexistent columns from ai_job_trackers persist payload
• desktop delivery incident Nova jobs finish on RunningHub but never reach desktop
• allow Clerk workers under CSP
• harden SEO crawlability and public claims
• harden queue system event loop, submit idempotency, delivery recovery
• align SEO schema with product truth
• remove fabricated editorial personas
• scope structured data to visible content
• harden Instagram detection truth checks
• harden public ban-risk truth checks
• close public truth contract gaps
• align public SEO facts with the product
• derive pricing schema from plan catalog
• centralize public plan truth
• consolidate canonical SEO signals
• allow required GA4 collection origins
• restore analytics and cacheable homepage

Other Changes

• seo improve snippets for page-one opportunities
• seo(tier2) 2 free tools 5 alternative pages 3 compare pages reframe page
• seo(tier1) fix keyword cannibalization repair internal linking (240-page audit)

Whats New in v3519

Bug Fixes

• harden scrcpy watchdog local brain (v3.5.19)

Whats New in v3518

Features

• stream onoff toggle stop scrcpy auto-reopen on manual close
• per-phone Run Mirror buttons on each device card
• real Stripe referrer reward (customer-balance free month)

Whats New in v3517

Features

• Phones cockpit merge, browser-signup-only gate, VPSSettings, kill Crisp, honestfixed affiliates
• one-key device browser control rail (Devices tab)

Bug Fixes

• deviceprofile dropdowns clipped by glass-surface overflow
• make slowapi optional so source-mode brains don't hard-crash

Whats New in v3516

Features

• v3.5.16 simutil-inspired suite (wireless pairing, logcat, plugins, control-center)

Bug Fixes

• ad-hoc sign unsigned build so it's not damaged on Apple Silicon
• copiesN produced 1 output stale-closure on copies

Other Changes

• seo 9 new high-intent pages (comparisons best-of guides) homepage compare links

Whats New in v3515

Features

• v3.5.15 copies-per-input, auto-scroll logs, sticky run bar

Whats New in v3514

Features

• v3.5.14 100x-safe. Tested vs MPEG-7 signature chromaprint at scale

Whats New in v3513

Features

• v3.5.13 kill handler-name tell, cross-output uniqueness, GPS alt, content-id

Whats New in v3512

Features

• v3.5.12 per-output original-vs-spoofed detection rate ffprobe

Bug Fixes

• real anti-detection strip encoder tell, iPhone naming, fix SSIM, add pHash

Whats New in v3511

Bug Fixes

• v3.5.11 exiftool moved to SourceForge fix resolver URL zip detect

Whats New in v3510

Bug Fixes

• v3.5.10 video engine dead exiftool URL (404) broke setup

Whats New in v359

Bug Fixes

• v3.5.9 ensure Python deps on source-mode fallback
• dedup device by hw_serial mobile landing overflow

Whats New in v358

Bug Fixes

• v3.5.8 close pre-run owner-swap gap (switch-profile brain wait)

Whats New in v357

Bug Fixes

• v3.5.7 tap Next on Allow IG to access your device NUX screen
• disband GmailCSV creation tutorials teach smspool warm-up
• desktop admin dashboard MRRARRactive-subs on real Stripe data

Whats New in v356

Bug Fixes

• v3.5.6 kill post-create profile-swap race live ops log panel

Whats New in v355

Features

• Subscriptions tab MRRARRby-planARPU on real Stripe data too
• real Stripe-verified revenue dashboard (kill fake DBprice MRR PayPal widget)
• Stripe subscription rail (checkout webhook portal), replace PayPalcrypto UI

Bug Fixes

• close 5 verified vulns from deep audit

Other Changes

• seo add Anyro founder schema linked to anyrxo.comperson
• seo kill doubled-brand SERP titles metadata gaps (GSC-driven sweep)
• seo add Anyro founder backlink to anyrxo.com

Whats New in v354

Bug Fixes

• runningModules leak on 429403 wedged the queue forever

Whats New in v353

Bug Fixes

• start-user before restoreswitch isDestroyed send guards

Whats New in v352

Bug Fixes

• shared per-phone lock so nothing collides with an in-flight run

Whats New in v351

Bug Fixes

• stop companion auto-installer switching device to owner mid-run
• asset proxy 403 allow the content Supabase project host