OPC-Fellows v0.8.1

Security hardening for the native occupation plugins.

Fixed

• The occupation tool policy gate now actually denies. The tools/pre-execute listener
  returned bare strings, but the dsh protocol expects a decision object, so gate.kind was
  undefined: deny never applied, the dsh guard was skipped, and later pre-execute listeners
  were short-circuited. Unknown decisions now fall back to next() and the gate returns proper
  PreToolDecision objects.
• The Local API no longer grants writes when no turn can be resolved. It previously fell
  through to writeAllowed: true for the host occupation tools, which bypassed the member
  allowlist and the plan-mode write gate. It is now gated per tool effect: write tools are
  refused, and read-only tools are allowed without write permission.
• Both occupation plugins validate the tool-bridge host and reject anything that is not loopback.
• Member round-context files are written with mode 0600, like the other credential files.
• The local API token is scrubbed from the environment before gh is spawned.

Tests

10 new tests cover the decision object shape, the unknown-input fallback to next(), the
no-turn write refusal, the loopback-only bridge host and the 0600 file mode. They were
verified to fail against the pre-fix code paths. pnpm test 286/286, node tsc clean.

Notes

These are the medium and low findings of a security review of the previous release's native
occupation work; no high-severity issue was found. Nothing here changes how drafts, todos or
notes are stored locally, and no data leaves the machine.

OPC-Fellows v0.8.0

OPC-Fellows v0.8.0

一次能力对齐版本:内核与官方 dsh desktop 启动方式对齐,聊天与看板的体验补齐。

内核

• 对齐 dsh desktop 启动引导,收口 Completions 双通道(llm-overlay / intent-route 落地)
• 附件、桌面 profile、工具事件投影等运行时能力补齐

界面

• 聊天支持引用块与更完整的 Markdown 渲染
• 定时任务改成看板视图,模块页头与中栏消息对齐
• 修复启动不落在"今日"的问题;简报条目可点击
• 修复中文回退到日文字形的问题

安装

• 下载 OPC-Fellows-0.8.0-mac-arm64.dmg,拖进「应用程序」即可(macOS Apple Silicon)
• 本版已签名并通过 Apple 公证,首次打开不需要再执行 xattr -cr
• 仅提供 macOS Apple Silicon;Windows / Linux 暂无

---

OPC-Fellows v0.8.0 (English)

Kernel alignment and UI catch-up release.

• Kernel aligned with the upstream dsh desktop boot; Completions now go through a single
  channel (llm-overlay, intent-route)
• Chat: quoted blocks and fuller Markdown rendering
• Scheduled tasks are now a board view; module headers and the message column line up
• Fixes: startup lands on today, briefing items are clickable, CJK no longer falls back
  to Japanese glyphs

This build is signed and notarized by Apple — no xattr -cr needed on first launch.
Download the dmg from the assets below. macOS Apple Silicon only.

OPC-Fellows v0.7.3

A local-first workbench for a one-person company: a small kernel (shell, todos, module contract) plus occupation plugins. Pick a member (an occupation) or a project (a multi-member job), push work into a session, and the right pane shows the matching context. Your data stays on your own machine.

Stack: Electron 43 + Cordis kernel + DeepSeek Harness runtime. MIT licensed.

Repo vs. this build

This public repo is the public snapshot of the daily-driver product: the kernel and contracts are kept; personal site catalogs, signing identities, and sourcing stacks stay out of the default code (see the note at the top of the README). The artifacts below are built from this repo's main.

Install (macOS / Apple Silicon)

1. Download OPC Agent Team - Solokit-0.7.3-mac-arm64.dmg below.

2. Open it and drag the app into Applications.

3. Gatekeeper will block the first launch — this build is not signed or notarized (the certificate flow is not wired up yet). Allow it once:

   xattr -cr "/Applications/OPC Agent Team - Solokit.app"

   Then right-click → Open (or open -a "OPC Agent Team - Solokit").

4. The .zip works the same way if you prefer it.

What's in it

• Kernel: unified tasks / projects / skills / calendar model; plugins mount through the contract
• Occupation plugins: capability packs per occupation
• Agent sessions: run locally, with a chosen working directory and skill set
• UI: todos board, launcher, inbox, calendar, mail pane, capability list
• Full OSS governance files: LICENSE / CONTRIBUTING (EN + zh-CN) / CODE_OF_CONDUCT / SECURITY.md / CITATION.cff

Known limitations

• macOS arm64 only; no Windows / Linux build yet
• Unsigned and unnotarized — the xattr -cr step above is required, which makes first-run harder than it should be
• The app display name is still “OPC Agent Team - Solokit” — renaming would migrate the userData directory, so it is planned for a later release
• latest-mac.yml is attached so an update feed can be wired up later

Contributing

Issues and PRs welcome. Start with the README Quick start and CONTRIBUTING.