Portal 4.0.17 (withdrawn — use 4.0.19)
Caution
This release was withdrawn on 2026-08-12 and is no longer installable. Use 4.0.19 instead — 4.0.18 was withdrawn as well.
4.0.17 refused every Socket.IO handshake on all five namespaces. Signed-in users were held at "Refreshing workspace access…" indefinitely and could not reach the Portal, and every live stream — alerts, metrics, OpenClaw status, agent jobs — silently stopped. There is no workaround from the browser.
The signed artifacts have been removed from this release and from https://bridgesllm.ai/releases/4.0.17/, which now returns 404. The tag and source history are left intact deliberately: they record what shipped. Anyone already running 4.0.17 must update from the command line — curl -fsSL https://bridgesllm.ai/install.sh | sudo bash -s -- --update — because 4.0.17 also shipped a broken update launcher that cannot install anything from the Dashboard.
Portal 4.0.17 — reliability and recovery
Fixed
- Sign-in now converges safely across browser tabs, and revoked or expired sessions stay revoked across reloads and live transports.
- Agent Chat steering reaches the exact active run shown in the browser across Codex and provider-neutral OpenClaw runs, including Anthropic-backed turns.
- Updates now fail before downtime when the candidate cannot restart cleanly, preserve App and Project continuity, and report actionable recovery state. Startup recovery no longer quarantines a clean Portal for timestamp-only Project-directory churn.
- OpenClaw question-bridge updates now attest the replacement tool and settlement methods before compatibility activation, then require the complete active-run bridge before commit.
- Legacy Projects can enter Project Chat without losing their deployed App identity or existing share URLs.
- Contained Project dependency updates now have a crash-resumable Owner recovery path with strict identity, backup, and promotion evidence checks.
- Backups distinguish Complete recovery archives from Salvage-only output and verify selected recovery evidence before guarded operations.
- Shared App authentication and App API proxy failures now preserve truthful, bounded error behavior.
Update
curl -fsSL https://bridgesllm.ai/install.sh | sudo bash -s -- --updatePortal 4.0.17 contains all earlier 4.0.x fixes. The exact 4.0.16 → 4.0.17 updater path was validated on the test box, followed by two clean Portal restarts.
Release integrity. The signed artifact at https://bridgesllm.ai/releases/4.0.17/portal.tar.gz is sha256:bdc6907b8b41f335a7f6ded86d2ce2d08d30fb330b9c6e6da20503f58c93f43f. This release also attaches the exact signed manifest, detached signatures, and installer bytes served by the release origin.
Tag history note. This repository is a squashed source export. Releases 4.0.4, 4.0.9, and 4.0.10 shipped without a matching export at the time, so those historical tags cannot be backfilled honestly and remain deliberately absent.