chore: complete v0.0.19 changelog

On macOS, app.focus({ steal: true }) activates the entire application,
causing the window manager to switch back to whichever Space the app was
originally launched on. Replace it with targeted window-level focus and
add visibleOnAllWorkspaces to ensure Spotlight appears on the current
Space without triggering a desktop switch.

.github/workflows/release.yml

@@ -263,7 +263,10 @@ jobs:
                       const yaml = require('js-yaml');
                       const x64 = yaml.load(fs.readFileSync('$X64_YML', 'utf8'));
                       const arm = yaml.load(fs.readFileSync('$ARM_YML', 'utf8'));
-                      x64.files = [...(x64.files || []), ...(arm.files || [])];
+                      const all = [...(x64.files || []), ...(arm.files || [])];
+                      const map = new Map();
+                      for (const f of all) map.set(f.url, f);
+                      x64.files = [...map.values()];
                       const out = yaml.dump(x64, { lineWidth: -1 });
                       fs.writeFileSync('$X64_YML', out);
                       console.log(out);
@@ -286,7 +289,10 @@ jobs:
                       const yaml = require('js-yaml');
                       const x64 = yaml.load(fs.readFileSync('$X64_YML', 'utf8'));
                       const arm = yaml.load(fs.readFileSync('$ARM_YML', 'utf8'));
-                      x64.files = [...(x64.files || []), ...(arm.files || [])];
+                      const all = [...(x64.files || []), ...(arm.files || [])];
+                      const map = new Map();
+                      for (const f of all) map.set(f.url, f);
+                      x64.files = [...map.values()];
                       const out = yaml.dump(x64, { lineWidth: -1 });
                       fs.writeFileSync('$X64_YML', out);
                       console.log(out);
@@ -309,7 +315,10 @@ jobs:
                       const yaml = require('js-yaml');
                       const x64 = yaml.load(fs.readFileSync('$X64_YML', 'utf8'));
                       const arm = yaml.load(fs.readFileSync('$ARM_YML', 'utf8'));
-                      x64.files = [...(x64.files || []), ...(arm.files || [])];
+                      const all = [...(x64.files || []), ...(arm.files || [])];
+                      const map = new Map();
+                      for (const f of all) map.set(f.url, f);
+                      x64.files = [...map.values()];
                       const out = yaml.dump(x64, { lineWidth: -1 });
                       fs.writeFileSync('$X64_YML', out);
                       console.log(out);
@@ -320,6 +329,72 @@ jobs:
                     ls -la windows-*-*/latest.yml 2>/dev/null || true
                   fi
 
+            - name: Reconcile update manifest hashes
+              run: |
+                  # Recompute SHA512 from actual artifact files to ensure manifests
+                  # match the real binaries (fixes signed/unsigned hash mismatches)
+                  node -e "
+                    const fs = require('fs');
+                    const crypto = require('crypto');
+                    const yaml = require('js-yaml');
+                    const path = require('path');
+
+                    const manifests = [
+                      { prefix: 'macos-latest-', file: 'latest-mac.yml' },
+                      { prefix: 'ubuntu-',        file: 'latest-linux.yml' },
+                      { prefix: 'windows-',       file: 'latest.yml' },
+                    ];
+
+                    const allDirs = fs.readdirSync('.').filter(d => {
+                      try { return fs.statSync(d).isDirectory(); } catch { return false; }
+                    });
+
+                    for (const { prefix, file } of manifests) {
+                      const dirs = allDirs.filter(d => d.startsWith(prefix));
+                      let ymlPath = null;
+                      for (const dir of dirs) {
+                        const p = path.join(dir, file);
+                        if (fs.existsSync(p)) { ymlPath = p; break; }
+                      }
+                      if (!ymlPath) { console.log('No ' + file + ' found, skipping'); continue; }
+
+                      const manifest = yaml.load(fs.readFileSync(ymlPath, 'utf8'));
+                      let fixed = 0;
+
+                      for (const entry of manifest.files) {
+                        for (const dir of dirs) {
+                          const filePath = path.join(dir, entry.url);
+                          if (fs.existsSync(filePath)) {
+                            const buf = fs.readFileSync(filePath);
+                            const hash = crypto.createHash('sha512').update(buf).digest('base64');
+                            if (hash !== entry.sha512) {
+                              console.log('[' + file + '] Fix: ' + entry.url);
+                              entry.sha512 = hash;
+                              entry.size = buf.length;
+                              fixed++;
+                            }
+                            break;
+                          }
+                        }
+                      }
+
+                      if (manifest.path) {
+                        for (const dir of dirs) {
+                          const filePath = path.join(dir, manifest.path);
+                          if (fs.existsSync(filePath)) {
+                            const buf = fs.readFileSync(filePath);
+                            manifest.sha512 = crypto.createHash('sha512').update(buf).digest('base64');
+                            break;
+                          }
+                        }
+                      }
+
+                      const out = yaml.dump(manifest, { lineWidth: -1 });
+                      fs.writeFileSync(ymlPath, out);
+                      console.log('[' + file + '] ' + (fixed ? 'Fixed ' + fixed + ' entries' : 'All hashes OK'));
+                    }
+                  "
+
             - name: Create Release
               uses: softprops/action-gh-release@v2
               env:

CHANGELOG.md

@@ -5,6 +5,15 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.0.19] - 2026-05-06
+
+### Fixed
+
+- **Spotlight Pulls to First Desktop on macOS.** Spotlight no longer switches Spaces when triggered from a non-primary desktop. The window is now visible on all workspaces, and `app.focus({ steal: true })` — which activated the entire app and caused the Space switch — has been replaced with targeted window-level focus (#179).
+- **Gray Screen When Connecting to Server on Linux.** Replaced the `--disable-gpu` Chromium flag with `--in-process-gpu`, which keeps the display compositor alive so `<webview>` guest surfaces actually paint instead of showing a gray rectangle. The previous flag fixed GPU process crashes but broke webview rendering on Debian and Ubuntu (#178).
+- **Open Terminal Fails Silently Without Python.** Open Terminal now automatically installs Python when it's missing instead of throwing an opaque error. Progress status is surfaced in the UI during installation.
+- **Corrupt Auto-Update Manifests.** Fixed the release workflow to deduplicate artifact entries during manifest merging, preventing SHA512 checksum mismatches that caused updates to fail silently.
+
 ## [0.0.18] - 2026-05-05
 
 ### Fixed

package.json

@@ -1,6 +1,6 @@
 {
   "name": "open-webui",
-  "version": "0.0.18",
+  "version": "0.0.19",
   "license": "AGPL-3.0",
   "description": "Open WebUI Desktop",
   "main": "./out/main/index.js",

src/main/index.ts

@@ -106,14 +106,26 @@ if (process.platform === 'linux') {
   // to work (the portal is enabled by default in Chromium 134+ / Electron 33+).
   app.commandLine.appendSwitch('ozone-platform-hint', 'auto')
 
-  // Disable GPU acceleration entirely on Linux.  This prevents the GPU
-  // process from spawning, which avoids shared-memory allocation failures
-  // in /dev/shm or /tmp that crash the renderer on Ubuntu 24.04+, certain
-  // Wayland compositors, and AppArmor-restricted environments.  The lighter
-  // --disable-gpu-compositing flag is insufficient because the GPU process
-  // still starts and attempts shared-memory IPC.  Users confirmed that
-  // --disable-gpu resolves both the crash and grey/blank screen (#119, #157).
-  app.commandLine.appendSwitch('disable-gpu')
+  // Run the GPU service in-process instead of in a separate sandboxed
+  // process.  The out-of-process GPU crashes on Ubuntu 24.04+, certain
+  // Wayland compositors, and AppArmor-restricted environments because of
+  // shared-memory allocation failures in /dev/shm or /tmp (#119, #157).
+  //
+  // Previous attempts:
+  //   --disable-gpu-compositing  → GPU process still spawns & crashes.
+  //   --disable-gpu              → fixes crashes but kills the display
+  //                                compositor, so <webview> guest surfaces
+  //                                are never painted (gray rectangle #178).
+  //
+  // --in-process-gpu moves the GPU thread into the browser process, which
+  // sidesteps the cross-process shared-memory IPC entirely while keeping
+  // the display compositor alive so webview content renders normally.
+  app.commandLine.appendSwitch('in-process-gpu')
+
+  // Disable the GPU sandbox — it is the sandbox setup that triggers the
+  // shared-memory failures.  With --in-process-gpu the GPU thread lives
+  // in the browser process which is already un-sandboxed (--no-sandbox).
+  app.commandLine.appendSwitch('disable-gpu-sandbox')
 }
 
 // ─── GPU Crash Recovery ─────────────────────────────────
@@ -295,6 +307,9 @@ function createSpotlightWindow(): BrowserWindow {
     hasShadow: false,
     show: false,
     focusable: true,
+    // Ensure the window appears on whichever Space/desktop the user is
+    // currently on, rather than pulling them back to the primary Space.
+    visibleOnAllWorkspaces: true,
     icon: path.join(__dirname, 'assets/icon.png'),
     webPreferences: {
       preload: join(__dirname, '../preload/spotlight-preload.js'),
@@ -331,8 +346,12 @@ function createSpotlightWindow(): BrowserWindow {
 }
 
 function showAndFocusSpotlight(win: BrowserWindow, initialQuery?: string): void {
+  // On macOS, avoid `app.focus({ steal: true })` — it activates the whole
+  // application and causes the window manager to switch back to whichever
+  // Space the app was originally launched on (#179).  Instead, ensure the
+  // window is visible on all workspaces and focus it directly.
   if (process.platform === 'darwin') {
-    app.focus({ steal: true })
+    win.setVisibleOnAllWorkspaces(true, { skipTransformProcessType: true })
   }
 
   // Reposition fullscreen window to the active display
@@ -1828,7 +1847,9 @@ if (!gotTheLock) {
     ipcMain.handle('open-terminal:start', async () => {
       try {
         sendToRenderer('status:open-terminal', 'starting')
-        const result = await startOpenTerminal(CONFIG?.openTerminal?.port ?? null)
+        const result = await startOpenTerminal(CONFIG?.openTerminal?.port ?? null, (status) => {
+          sendToRenderer('status:open-terminal-setup', status)
+        })
         sendToRenderer('status:open-terminal', 'started')
         sendToRenderer('open-terminal:ready', result)
         // Notify webview to register terminal server at system level
@@ -2099,7 +2120,9 @@ if (!gotTheLock) {
     if (CONFIG?.openTerminal?.enabled) {
       try {
         sendToRenderer('status:open-terminal', 'starting')
-        const result = await startOpenTerminal(CONFIG?.openTerminal?.port ?? null)
+        const result = await startOpenTerminal(CONFIG?.openTerminal?.port ?? null, (status) => {
+          sendToRenderer('status:open-terminal-setup', status)
+        })
         sendToRenderer('status:open-terminal', 'started')
         sendToRenderer('open-terminal:ready', result)
       } catch (error) {

src/main/utils/open-terminal.ts

@@ -10,6 +10,7 @@ import {
   installPackage,
   isPackageInstalled,
   isPythonInstalled,
+  installPython,
   portInUse
 } from './index'
 import { ServiceLock, isProcessAlive } from './service-lock'
@@ -38,7 +39,8 @@ export const getOpenTerminalPty = (): pty.IPty | null => ptyProcess
 export const getOpenTerminalLog = (): string[] => logBuffer
 
 export const startOpenTerminal = async (
-  port: number | null = null
+  port: number | null = null,
+  onStatus?: (status: string) => void
 ): Promise<{ url: string; apiKey: string; pid: number }> => {
   if (!lock.acquire()) {
     return { url, apiKey, pid }
@@ -46,9 +48,27 @@ export const startOpenTerminal = async (
 
   await stopOpenTerminal()
 
-  if (!isPythonInstalled()) throw new Error('Python is not installed')
+  if (!isPythonInstalled()) {
+    log.info('Python not installed — installing automatically for Open Terminal…')
+    onStatus?.('Installing Python…')
+    try {
+      const ok = await installPython(undefined, onStatus)
+      if (!ok) throw new Error('Python installation returned false')
+    } catch (err) {
+      throw new Error(
+        `Python is required for Open Terminal but installation failed: ${err?.message ?? err}`
+      )
+    }
+    if (!isPythonInstalled()) {
+      throw new Error(
+        'Python was installed but could not be verified. Please restart the app and try again.'
+      )
+    }
+  }
+
   if (!isPackageInstalled('open-terminal')) {
     log.info('open-terminal not installed, attempting install...')
+    onStatus?.('Installing Open Terminal package…')
     try {
       await installPackage('open-terminal')
     } catch (err) {

src/renderer/src/lib/components/Main/Connections.svelte

@@ -62,6 +62,7 @@
   let llamaCppStatus = $state<string | null>(null)
   let llamaCppInfo = $state<{ url?: string; pid?: number } | null>(null)
   let llamaCppSetupStatus = $state('')
+  let openTerminalSetupStatus = $state('')
 
   const startInstall = async (options?: { installOpenTerminal?: boolean; installLlamaCpp?: boolean; installDir?: string }) => {
     installPhase = 'working'
@@ -432,7 +433,8 @@
 
       // ── Desktop-only state (not forwarded to webviews) ─
       if (data.type === 'status:open-terminal') { openTerminalStatus = data.data; return }
-      if (data.type === 'open-terminal:ready') { openTerminalInfo = data.data; openTerminalStatus = 'started'; return }
+      if (data.type === 'status:open-terminal-setup') { openTerminalSetupStatus = data.data ?? ''; return }
+      if (data.type === 'open-terminal:ready') { openTerminalInfo = data.data; openTerminalStatus = 'started'; openTerminalSetupStatus = ''; return }
       if (data.type === 'status:llamacpp') { llamaCppStatus = data.data; return }
       if (data.type === 'status:llamacpp-setup') { llamaCppSetupStatus = data.data ?? ''; return }
       if (data.type === 'llamacpp:ready') { llamaCppInfo = data.data; llamaCppStatus = 'started'; llamaCppSetupStatus = ''; return }
@@ -486,8 +488,10 @@
       await window.electronAPI.stopOpenTerminal()
       openTerminalStatus = null
       openTerminalInfo = null
+      openTerminalSetupStatus = ''
     } else {
       openTerminalStatus = 'starting'
+      openTerminalSetupStatus = ''
       const result = await window.electronAPI.startOpenTerminal()
       if (result) {
         openTerminalInfo = result
@@ -495,6 +499,7 @@
       } else {
         openTerminalStatus = 'failed'
       }
+      openTerminalSetupStatus = ''
     }
   }
 
@@ -580,7 +585,7 @@
       statusText={activeLog === 'server'
         ? (serverStatus === 'starting' ? 'Starting Open WebUI…' : serverStatus === 'running' && !serverReachable ? 'Waiting for server…' : installStatus || '')
         : activeLog === 'open-terminal'
-          ? (openTerminalStatus === 'stopping' ? 'Stopping Open Terminal…' : openTerminalStatus === 'starting' ? 'Starting Open Terminal…' : '')
+          ? (openTerminalStatus === 'stopping' ? 'Stopping Open Terminal…' : openTerminalSetupStatus || (openTerminalStatus === 'starting' ? 'Starting Open Terminal…' : ''))
           : (llamaCppStatus === 'stopping' ? 'Stopping llama-server…' : llamaCppSetupStatus || (llamaCppStatus === 'starting' ? 'Starting llama-server…' : llamaCppStatus === 'setting-up' ? 'Setting up llama.cpp…' : ''))}
       connectPty={getConnectPty(activeLog)}
       disconnectPty={getDisconnectPty(activeLog)}