Colonizer v0.2.13

Colonizer v0.2.13

What's new

• Checking the placeholder dotfiles no longer puts a finished colony on a security hold. The exec policy's secret-paths rule now also lets through commands that only learn a secret path's name or size: stat, wc -c, test -s and [ -s x ] join git check-ignore, ls and test -e, and such a command may fold stderr in with 2>&1, discard output to /dev/null and pipe into head, tail, sort, uniq or wc (with no path of their own). Anything that reads the bytes (cat, head .env, grep, cp, source, base64, wc -l, a pipe into cat or xargs) is still refused. An exec-policy denial now names the path its rule matched as its target instead of the first path in the command, so cd /workspace && … no longer makes the workspace root the refused target. The watchdog's deny-then-reach signature resolves paths against the workspace and counts a later call only when it names the refused path, something under it or a glob that matches it; a call that only names an ancestor (cd /workspace, ls /workspace) does not, and neither does a write to the colony's own /harness/out after a refusal there. (#1079, #1153)
• Every menu has the Spotlight look, and chat is one key away. The model menu, Colonize, the workspace switcher, the notifications and the composer's repository picker are now built on one frosted SpotlightPanel (a search box, sections with small headers, a solid accent selection row, a footer of key hints, ↑ ↓ ⇥ ↵ and Esc the same everywhere, a bottom sheet on a phone). The model menu lists Roles, Providers (credits and reset) and Quick switches; Colonize is one panel with the task box, repository, model and options as chips; workspaces are grouped as Pinned, Recent and All; notifications as Needs you, Updates and Done. A new round Ask button (and ⌘J / Ctrl-J) opens a compact chat panel on every view but Chat, with the colony you are on attached, and a colony page gets an "Ask about this colony" action. Settings still merge and every call is unchanged. (#1228)
• A test the colony broke gets a fix round even when the base commit fails the same check for another reason. Verification used to compare the head with the base commit check by check, so when cargo test failed on the base for any reason, a different test failing only on the colony's branch counted as preexisting and the colony was parked with preexisting_failure instead of being sent the failure. It now compares the failing tests themselves wherever the run names them (cargo's test … FAILED lines and closing failures: list, vitest and jest marks, node --test's ✖, durations ignored), and falls back to the check only when a side names none. A test failing on the branch alone contradicts the claim and is sent for a fix round, and a fix round is sent whenever the change has a failure of its own, even if another check is inconclusive. A colony is held as preexisting_failure only when every failure is shared with the base, and the hold now names the checks and tests that fail there. (#1231)

Prebuilt Colonizer for Linux x86_64 (with KVM) and Apple Silicon Macs, built from 61fa8d3.

curl -fsSL https://colonizer.dev/install.sh | sh

The installer checks the archive against SHA256SUMS. It fetches the Claude Agent SDK from the npm registry, and on a Mac the Linux build of Claude Code, from Anthropic's own channels: neither is in the release. Guide: https://colonizer.dev/docs/install

Each artifact, SHA256SUMS included, also carries a build-provenance attestation recording the commit that built it. Verify one with:

gh attestation verify colonizer-<platform>.tar.gz --repo Colonizer-dev/harness

Here is linux-x86_64 or darwin-arm64.

Apple Silicon Macs can also use Colonizer-arm64.dmg: an unsigned app, so macOS asks you to approve it once (System Settings > Privacy & Security > Open Anyway). The curl installer above is the recommended path.

23ced90d97fcbc943d21aa931bc7b965cc63aa84d06a48af7960f6026e980d1b  colonizer-darwin-arm64.tar.gz
c11e54ff7311054436982bdda1115a68adafb1155bd4455b05b4c1738ee378b2  colonizer-linux-x86_64.tar.gz
764cfc92b5d2b430fea937c5f8911165499e497d3851a3923dd760c803d2d2c9  Colonizer-arm64.dmg
4293bed20d991fb79164e457163a058fb362f10e480c0588e0edac4d3ffd7b4b  install.sh