Releases.

The agent reliability release. Tool calls stop corrupting, structured output lands at full speculative speed, and agent sessions stop paying re-prefill taxes.

• Tool-call arguments no longer collapse to {}. The intermittent argument corruption behind failed agent edits is root-caused and fixed in both parsing lanes, validated over 168 live agent turns with zero collapses. Nested edits arrays arrive intact.
• Structured output at full speed. response_format with a JSON schema is enforced by grammar masks that compose with MTP speculative decoding: valid JSON, decode parity within noise, under five milliseconds of masking per request. Opt-in strict mode grammar-forces every tool call to a declared tool with schema-valid arguments. Contributed by PhilipJohnBasile.
• Sessions survive history rewrites. When an agent client compacts its transcript, a common-prefix fallback keeps the session identity and its warm cache instead of forcing a cold re-prefill.
• Leaner agent turns. The injected tool contract instructs whole-file reads and bans echoing file contents into visible text. Reasoning share of generated tokens dropped from 75 percent to under 30 in live sessions.
• Silent hangs are contained. A heartbeat watchdog turns a frozen stream into a structured five-minute failure instead of an infinite hang.
• Sharp edges filed. 5-bit and other non-divisor quantizations load correctly (by Jonathangadeaharder), parallel_tool_calls is honored, interrupted downloads are detected as incomplete (by titan550), vision works on a bare pip install, and context-copy drafting can never run past a stop token.

The copy-drafting and small-Mac release. The model now drafts from your prompt as well as its MTP head, and the 4B pair is fixed and fast.

• Context-copy drafting, on by default. When the model restates something already in your context (the function it is editing, a config block, a quote), whole spans are proposed as copy blocks and verified in one pass. Measured +53% on edit-heavy agent turns at temperature 0.6, parity on novel text. Exact at any temperature. Contributed by lBroth.
• The 4B models actually work now. The old 4B drafted at zero acceptance for everyone. The engine heals existing downloads at load (no re-download), the Speed 4B is rebuilt at 227.8 tok/s, and a new Quality 4B ships at 191.7 tok/s with a 2.2x MTP multiplier. Macs under 16 GB finally get first-class recommendations.
• Tune can no longer persist garbage. A zero-acceptance depth can never win or be saved, and poisoned records from earlier versions are quarantined automatically.
• Forge your own FP16 models. New precision option with M1/M2 auto-select.
• SSD session cache crash fixed. The writer thread no longer touches the GPU.
• MoE launches at its measured depth. The 35B-A3B default corrected from the ceiling to measured D2 (by davidtai).

The community-fixes release. Memory is bounded by default, the agent session cache is fixed end to end, and the app startup hang is closed. Most of this release started as community reports.

• Memory is bounded by default. The MLX allocator cache gets a RAM-tiered cap, the per-session admission gate is re-clamped on smaller machines, the paged KV pool stops growing past the context window, and a new --memory-budget flag fits MTPLX inside a declared RAM envelope.
• Agent sessions stay warm. Prefix reuse survives every tool turn, follow-ups on hybrid models restore near the divergence point (0.4s instead of 33.8s on a 22k prompt), and warm state now survives daemon restarts. Cache hits show up in standard usage fields.
• Penalties work in quickstart chat. Presence and frequency penalties were silent no-ops in the batched lane. Small models benefit most.
• The startup hang is gone. Runtime installs run off the main thread and every subprocess wait has a deadline watchdog.
• Hermes Desktop from the app. The Hermes tile launches Hermes Desktop when installed, pinned to the MTPLX backend.
• Two new native backends. qwen3_5_mtp and hy_v3, both community contributions.
• 8 to 10% faster decode under load. The model-owner thread is QoS pinned so background apps stop taxing generation.

The agent-reliability release. The repetition marathons in long agent sessions are fixed at the source, and the biggest quality-of-life issues since 2.0.1 are closed.

• Repetition marathons fixed. Multi-turn reasoning history now renders on Qwen's trained contract (scoped to the active round). The captured looping session went from 3/4 marathons to 4/4 immediate healthy tool calls; root-caused to context construction, not quantization.
• Serve on any host and port from the app. LAN serving (0.0.0.0) no longer misreports ports or kills healthy daemons, and the app explains the API-key requirement up front.
• Warm prefix reuse for every agent client. Pi, Claude Code, Cline, and custom harnesses get the block-prefix warm restores that were gated to OpenCode.
• Settings Off means Off. The SSD session cache setting is passed explicitly, so an explicit Off stays off and session-bank stops growing back. The runtime venv self-heals after updates.
• Community fixes. Streaming reasoning-tag leak fix by @Osamaali313, quickstart host/port rendering by @hasegaw, and a bounded Ctrl-C shutdown under open streams.

Turbo for every Mac. The v2 turbo default now covers every dense model on every Apple Silicon generation, with a load-time kernel safety net.

• M1 and M2 get their speedup. The FP16 27B those Macs route to now defaults to turbo: decode up 19-31% across 0.5k-32k context, roughly 2x over plain autoregressive decode.
• New 6-bit kernels. The 9B tier gains 33-62% decode and 43% faster 2k prefill under turbo.
• New model: Optimized Quality FP16. The missing M1/M2 quality artifact, wired into the picker and the chip-aware routing.
• Kernels prove themselves on your machine. Every turbo lane self-checks against stock MLX at load and falls back per lane if anything disagrees. Worst case is 2.0.0 speed, never wrong output.
• Verified on real M1 hardware. Kernel exactness plus a live turbo smoke now run in CI on M1 runners.

The coding-agent release. Long agent sessions in OpenCode, Pi, Hermes, and Claude Code that stay fast, stay warm, and do not fall over.

• Session cache v2. KV state survives restarts on SSD; a 100k-token session restores in ~2s. Tool-call turns chain warm instead of re-prefilling minutes per turn.
• Turbo decode, on by default. New verify kernels and compiled verify: 27B Optimized-Speed ~45 to 58-60 tok/s, Optimized-Quality 31-36 to 43-44 tok/s on M5 Max.
• Long context. 64k decode +12%, 128k from 17 to 20+ tok/s, peak memory down 8-16 GB. Stock PyPI MLX, no fork, any Apple Silicon Mac.
• Stability. The app no longer kills a healthy engine mid-session; fresh installs no longer crash at model load; SSD restores are corruption-free.
• Agent protocol pass. OpenCode plan-to-build keeps its cache and tools; presence/frequency penalties end-to-end; honest model identity for third-party builds.
• Chat. Markdown renders live while streaming; one compact activity strip per turn with grouped tool rounds and sources.
• Memory that fits your Mac. Cache budgets scale to the machine, with explicit RAM and SSD limits in Settings.
• Vision under MTP tells the truth. No more fabricated differences between similar screenshots.
• Fans behave. Ramp on request arrival, RPM-verified, held through post-response cache work.