diff --git a/CHANGELOG.md b/CHANGELOG.md
index eb8cbba..30e79fd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,48 @@ All notable changes to Quantum are documented here. Versions follow
 [ChronVer](https://chronver.org); the format follows
 [Keep a Changelog](https://keepachangelog.com).
 
+## 2026.07.23
+
+Quantum grows an agent interface and a native desktop app.
+
+### mcp server
+
+- MCP server at `/mcp` (Streamable HTTP) so AI agents can work the ledger:
+  nine read tools (accounts, transactions, categorization history, monthly
+  report, net worth, categories, rules, rule probe, sync status) and six
+  write tools (categorize, create category, create rule, enable/disable rule,
+  apply rules, trigger sync — rate-limited to one run per 15 minutes)
+- Bearer API tokens minted in Settings ("Connect an agent"): labeled, scoped
+  read-only or read & write, shown once and stored hashed, individually
+  revocable, with last-used tracking
+- Agent work is honest provenance: a distinct `agent` event source attributed
+  to the acting token — never to a person — and an agent can never overwrite
+  a category a person set by hand
+
+### desktop app
+
+- Quantum now packages as a native desktop app (Deno's `deno desktop`, bundled
+  Chromium), with a first-launch choice between two modes
+- Local mode: just you, on this computer — no login, no server; your data
+  lives in the OS application-data directory; sync runs at launch and every
+  six hours while the app is open; a loopback MCP endpoint (published in
+  `agent.json`) serves local agents with the same token auth
+- Remote mode: the app is a thin native window onto your self-hosted Quantum
+  server, signing in with the server's normal cookie login. Nothing is stored
+  locally. (The embedded browser profile is not yet persistent, so remote
+  mode asks you to sign in again each launch.)
+- Disconnect (bottom of Settings) returns the app to the mode-selection
+  screen; nothing is deleted, and choosing Local again picks your data right
+  back up
+- Versioned desktop artifacts for Windows (zip), macOS Apple-silicon
+  (tar.gz), and Linux (AppImage), cross-compiled from one host — currently
+  unsigned, and untested on real macOS/Linux hardware
+
+### ci
+
+- the release image build reads the version from package.json instead of a
+  CI ref variable
+
 ## 2026.07.16
 
 First packaged release of Quantum — a self-hosted personal finance app
diff --git a/package.json b/package.json
index d797391..37e6641 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
 	"name": "quantum",
 	"private": true,
-	"version": "2026.07.16",
+	"version": "2026.07.23",
 	"license": "AGPL-3.0-or-later",
 	"type": "module",
 	"scripts": {