Extalia v0.4.288 — Desktop and Web beta

Extalia v0.4.288 — Desktop and npm/Web preview

Desktop/Web artifacts and their checksums are listed on the
v0.4.288 release page.
The npm latest tag identifies the currently published package and may lag
Desktop while registry processing finishes. Run extalia version to confirm
your installed version; issue #91
records registry verification and publication.

This update gathers v0.4.228–v0.4.288 since the previous v0.4.227 release. It
remains a v0.4 preview; it does not declare the v0.5 acceptance gates complete.

Changes since v0.4.227

• Reviewed work continuity: change a Native model connection while retaining
  the same session and history, or hand reviewed working notes and retained
  source evidence to an existing agent conversation. Verified routes and manual
  packets have distinct delivery receipts. Scoped archive access, explicit
  observed project association and reviewed Native workspace moves preserve
  source identity, privacy and destination access boundaries.
• Observed messaging: a shared composer supports queued messages,
  attachments and capability-specific controls across Chat, Observe and the
  Office. Native attachments, source queues and paired cooperative inboxes use
  their actual supported routes. Unknown delivery remains uncertain and is not
  silently resent or rerouted; hooks and transcripts alone do not grant control.
• Skills and Grimoire: browse live public marketplace results, inspect
  immutable package previews and import exact pinned bytes through security
  review. Revision provenance, permissions and source evidence remain visible.
  Imports never approve or activate a candidate. Supported macOS 14+ ARM64
  artifacts pair pinned SkillSpector 2.13.4 and bundled Python with their daemon;
  their v0.4.288 release validation passes the supported scanner and archive gates.
• Deferred Native learning: workspace vault policies can schedule bounded
  post-task curation and saved-team knowledge reviews. Run now/Snooze controls
  show the quiet countdown; foreground work takes priority. Confirmed notes and
  skill candidates have separate receipts, and candidates still require review
  and activation. The learning/artifact backend supports macOS and Linux;
  automatic curation and note/skill staging remain unavailable on Windows.
• Office and application recovery: checked furnished routes, chair and
  fitness contacts, door queues and lift waiting behavior improve movement.
  Camera attention has explicit Follow/Stop controls. Adaptive render budgets,
  hidden-avatar work reduction, cloned-resource cleanup and graphics recovery
  preserve drafts and attachments through scene restarts. Secondary pages load
  on demand, and the Web client reconnects after a Bridge restart.
• Cross-platform verification fixes: destination folder assertions now
  compare structured results across Windows and Unix path encodings. Inbox
  revocation tests wait for actual request admission, and strict Windows Clippy
  validation retains marketplace linked-file rejection.

Install or update

The npm application package installs the local Bridge, Web client and matching
platform daemon together:

npm install -g extalia-vo@0.4.288
extalia

Requires Node.js 22.13+ on the 22.x line, or 23.4+ on newer lines. Keep the global
install outside a pnpm-linked checkout. @latest installs the current published npm version; confirm it with extalia version. A running Bridge must restart
after an update. The static Web ZIP needs a local Bridge or Desktop host to run
agents; the internal @extalia/daemon-* packages are not standalone applications.

Release files

These names follow the release assembly helper. The release includes a complete
checksum inventory; npm registry availability is verified separately.

Target	Files
macOS Apple Silicon	Extalia-0.4.288-mac-arm64.dmg, Extalia-0.4.288-mac-arm64.zip
macOS Intel	Extalia-0.4.288-mac-x64.dmg, Extalia-0.4.288-mac-x64.zip
Windows x64	Extalia-0.4.288-win-x64-setup.exe
Linux x64	Extalia-0.4.288-linux-x86_64.AppImage, Extalia-0.4.288-linux-amd64.deb, Extalia-0.4.288-linux-x64-setup.run
Web client	Extalia-0.4.288-web.zip
npm application	extalia-vo-0.4.288.tgz
npm daemon packages	extalia-daemon-darwin-arm64-0.4.288.tgz, extalia-daemon-darwin-x64-0.4.288.tgz, extalia-daemon-linux-arm64-0.4.288.tgz, extalia-daemon-linux-x64-0.4.288.tgz, extalia-daemon-win32-x64-0.4.288.tgz
Release metadata	latest.yml, latest-linux.yml, Extalia-0.4.288-mac-PREVIEW.txt, SHA256SUMS.txt

Free macOS builds use verified ad-hoc signatures, are not Apple-notarized and
may show an unidentified-developer warning. They update by manual download;
there is no macOS preview auto-update feed. Verify downloads
against that release's SHA256SUMS.txt. See packaging for platform
requirements and release modes.

Scope and limitations

• Scanner execution is unavailable on Intel macOS, Windows and Linux pending
  verified native isolation. Missing, incomplete or malicious inspections leave
  candidates unavailable. Eligible instruction-only packages need separate
  digest-bound approval and activation; code/tool packages retain evaluation
  requirements. A bundled scanner is not completion of general Python workers,
  complete effect-time authority or full workspace/agent ACLs.
• Existing native conversations require supported, verified controls or explicit
  cooperative pairing. Manual-ready, queued and submitted receipts do not prove
  a model read the packet, completed work or settled an external operation.
  Real-provider certification, long-duration soaks and hardware FPS/memory
  acceptance remain separate from CI, builds and controlled fixtures.
• The opt-in CoreStore upgrades through schema 14 with its pre-migration backup.
  Older binaries refuse newer schemas; keep a profile backup before downgrading.
• Application source is MIT. Bundled scene assets keep their individual licenses,
  including non-commercial vehicles; the runtime commercial-assets switch does
  not remove those files. Read the asset notices
  before reuse or commercial distribution.

See handover,
automatic learning,
marketplace review and the
PRD tracker for
capability boundaries and remaining work.

Verification

The source passed all ten PR CI checks and the merged-main CI. All twelve Release jobs passed, including packaged clean-machine checks and all four Mac archive architecture/signature gates. Local source verification passed 9,230 TypeScript and 576 Rust tests, lint, typechecks and builds; 26 optional TypeScript tests were skipped.

The npm publication archive preserves all application files from CI; only the private publication flag and reviewed CLI README change. Exact registry digests and a temporary-profile installation are recorded in issue #91. The public model inventory contains 133 registered GLBs totaling 152,104,948 bytes (about 145 MiB) before compression.

Registry validation: all six npm package SHA-512/SHA-1 digests match the uploaded archives. An isolated global-prefix installation from npm passed CLI version/doctor, the matched daemon, scanner binding/deep signatures, Web bootstrap/authenticated host snapshot and graceful SIGINT shutdown. The installer used a temporary profile and no existing agent configuration.

Extalia v0.4.227 — Desktop and npm/Web preview

Extalia v0.4.227 — Desktop and npm/Web preview

This release gathers the v0.4.172–v0.4.227 updates. It remains a v0.4 preview;
it does not complete the v0.5 scanner, Python worker, or effect-time authority
gates.

Highlights

• Observed Codex conversations: Observe and Office can send messages through
  the original native conversation, and can answer supported newly received
  requests through Codex's existing public interfaces. Permission-hook setup is
  explicitly reviewed and remains subject to user-controlled trust and modes.
  Extalia does not start another Codex session or silently grant permissions.
• Conversation tools: paired tools can return answers to the existing source
  conversation through expiring, one-use reply channels. Unsupported or late
  requests remain with the source app. The repeated composer hint is removed,
  and structured user replies display their answers instead of raw payload text.
  The compact prompt places its send icon beside the input.
• Missions and teams: project review, Native session setup, exact mission
  cancellation, bounded Native teams, and Hermes profile-aware team limits are
  available with explicit runtime and connection boundaries. Failed or uncertain
  operations retain their status instead of being silently retried.
• Knowledge and skills: the Knowledge graph includes filtered 2D/3D
  exploration, while Grimoire provides searchable books and paged skill
  registry browsing. These are browsing and routing aids; they do not grant
  vault-wide access, activate skills, or replace scanner and consent checks.
• Native controls: workspace folder boundaries, bounded memory/context
  controls, task/status evidence, and safer recovery records improve visibility
  and admission checks. Recorded preparation or cancellation is not proof that
  external processes or writes have settled; complete effect-time authority and
  recovery closure remain future work.
• Office and setup: the Office adds a responsive 24-seat team workspace,
  improved character navigation and automatic camera behavior. Installers offer
  guided macOS and Windows setup and an offline per-user Linux setup.

Install or update

Install the CLI package, which includes the Web client, local Bridge, and the
matching platform daemon:

npm install -g extalia-vo@latest
extalia

Requires Node.js 22.13+ on the 22.x line, or 23.4+ on newer lines. Do not install
inside a pnpm-linked checkout. Desktop installers target macOS Apple Silicon
and Intel, Windows x64, and Linux x64. The Web ZIP needs a local Bridge or
Desktop host for agent execution.

macOS preview builds are ad-hoc signed, not notarized, and may show Apple's
unidentified-developer warning. They use manual downloads for updates. Linux
AppImage runtime dependencies still apply. Consult SHA256SUMS.txt in a
published release to verify downloaded files.

Scope and limitations

• Observed Codex controls require a supported existing native connection and
  operate on that original conversation. Extalia does not create a source
  session or permission grant. Hook trust, permission modes, and real Desktop
  activation remain user-controlled; some permission tools may still require
  Codex itself. Unsupported endpoints and late requests remain in the source
  application.
• v0.5 production scanner evidence, embedded Python distribution and
  supervision, complete effect-time authority, and full workspace/agent ACLs
  are not declared complete. A successful build or smoke check does not close
  those product gates.
• Public scene assets retain their individual notices and restrictions. This
  release note makes no broader license verification or redistribution claim.

Extalia v0.4.171

Extalia v0.4.171 — Desktop and npm/Web beta

This beta brings the accumulated Native, knowledge, connection and shared office
updates into one Desktop/Web release. It remains in the v0.4 milestone; the
production v0.5 scanner/Python and complete permission/ownership gates are not
declared complete.

Since v0.4.157

v0.4.157 was tagged but never published (its macOS archive check failed on the
hosted runner). This release carries everything listed below plus:

• Office: campus traffic on one connected road network with turning cars,
  unique casual outfits with shareable formal wear, randomized detailed hair
  (Randomize hair), and a loading screen that follows real model loading.
• Splash: day and night loops re-rendered from the current campus; the night
  loop no longer flickers (rendered on a hardware GPU).
• Assets: public models with lossless WebP textures, 2K data maps and
  quantized skin weights, about 29 MB smaller; the Bridge answers conditional
  requests so the Web client stops re-downloading models.
• Connect agent apps: one change at a time across Desktop, Bridge and CLI with
  a write-ahead journal; interrupted changes can be reviewed and rolled back.
• Release gate: bounded diagnostics for Mac archive architecture checks.

Install or update

The npm application includes the Web client, local Bridge and matching platform
daemon. Install the application rather than a daemon package alone:

npm install -g extalia-vo@latest
extalia

Requires Node.js 22.13+ on the 22.x line, or 23.4+ on newer lines. Contributors
continue using pnpm in the source checkout. Test npm installs in an isolated
prefix, not inside the pnpm-linked project.

Desktop installers are provided for macOS Apple Silicon/Intel, Windows x64 and
Linux x64. The standalone Web ZIP contains the client; agent execution still
needs the local Bridge or Desktop host. All release files have entries in
SHA256SUMS.txt.

macOS builds are free ad-hoc signed previews, not Apple-notarized apps. They
can show an unidentified-developer warning. If you trust the official download,
use System Settings → Privacy & Security → Open Anyway after the first launch
attempt. Preview Mac builds use manual downloads for updates. Strict app/archive
signature checks remain required; no installer disables Gatekeeper.

Native control and teams

• Durable original planned-task records and planning-lifetime receipts preserve
  unresolved execution evidence across restart. They do not prove that remote
  processes, child work or writers have safely stopped.
• Recovery inspection, action-intent records, lease/reaper and isolation
  foundations retain fail-closed admission behavior. Full effect-time authority,
  physical settlement and automatic recovery closure remain later gates.
• Progressive workspace memory uses a bounded catalog, literal search and paged
  reads; workers retain read-only recall. Built-in recall and opt-in concise
  response guidance do not install Claude-Mem or Caveman.

Skills and knowledge

• External skill metadata and every skill read require current registry scanner
  evidence. Legacy consent records review only; canonical built-ins cannot be
  overridden by an external name/source flag.
• Choose Learn as skill for a Native message, or start with /learn-skill,
  to propose one generated candidate with host-bound provenance into the user's
  Skills library. Existing write approval policy applies; no worker, approval or
  activation permission is inferred from the prompt.
• Production SkillSpector remains unavailable. Imported/generated candidates
  remain quarantined. Inspection records may report scanner-unavailable; they are
  not clean-scan claims. The generated package is what is inspected, not a
  certification of the original URL or every referenced file.
• Skills dependency/category/intent routing previews are read-only diagnostics,
  never dispatch authority. Mission-worker skill parity remains open.
• The bounded Obsidian-compatible 3D graph includes folder/kind/tag/time and
  neighbourhood filters with consistent search, counts and selected-note views.
  These do not grant whole-vault model access or complete cross-agent ACLs.

Connections, messages and shared UI

• Hardened connector transactions and observation lifecycle handling distinguish
  unavailable sources from working agents. External configuration changes still
  require preview, approval, backup and undo; startup performs no silent injection.
• Shared Chat, Observe and character-dialog messages render richer links,
  attachments, questions, approvals and task results while retaining inert source
  data. Opening a character directly preserves the user's camera framing; board
  shortcuts locate the character.
• Per-message learning choices and uploaded files survive a failed first-session
  handoff without letting stale navigation select or overwrite a newer draft.

Office assets and distribution limits

The shared public inventory contains 106 registered GLBs, totaling
691,568,420 bytes (about 660 MiB) before archive compression. Garment and
wardrobe models account for most of this increase; download and first-use asset
loading can take time. A successful build is not a measured FPS guarantee.

Models retain individual MIT, RenderHub, CC-BY, non-commercial CC and Sketchfab
licenses. Five vehicle models have non-commercial restrictions. The commercial
switch changes runtime selection but does not omit those files from packages.
Source code's MIT license does not relicense the models. See the complete
asset notices before reuse.
Private source archives, local visual-review entries and Python bytecode are
excluded from the release checkout.

The Rust store migrates through schema 12. Older binaries refuse newer store
schemas; keep a profile backup before attempting a downgrade. Desktop and Bridge
share the same profile directory. No release action changes another agent app's
configuration or rewrites a real user profile.

Production embedded Python, pinned scanner artifacts/report normalization,
supervised worker sandboxing and complete workspace/agent ACL remain open in
#54 and the
PRD tracker.

Extalia v0.4.112 (Beta Tester Preview)

Extalia v0.4.112 — Beta Tester Preview

Web/npm and Desktop now bundle the same 28 registered Blender models, including the existing detailed avatars and hairstyles. The release also improves Desktop startup recovery after the Bridge releases the shared profile. Automated rendering gates now validate Linux, Windows and macOS explicitly, with appropriate test-only graphics backends.

Install the web Bridge

npm install -g extalia-vo@0.4.112
extalia

The matching daemon is installed automatically. Do not install the internal @extalia/daemon-* packages manually. Node.js 22.13+ in the 22.x line, or 23.4+ in newer lines, is required. Linux requires glibc 2.35 or newer.

Desktop downloads

This release provides macOS Apple Silicon (mac-arm64), macOS Intel (mac-x64) and Linux x64 installers. The Windows installer is withheld because its packaged scene-readiness test has not passed. The Windows daemon remains available for the CLI.

These free macOS previews are ad-hoc signed and have passed strict integrity checks, but are not Developer ID signed or notarized. macOS may show an unidentified-developer warning. If you trust this download, follow Apple's manual Open Anyway instructions: https://support.apple.com/en-gb/102445. Preview updates are manual. Windows builds may also show a publisher warning.

The Bridge and Desktop share a profile. Stop the Bridge before launching Desktop with that same profile; startup can be retried after the profile is released.

Assets and validation

Original scene models and code retain MIT licensing. Existing avatar models retain their separate RenderHub Extended Use notices; they are included as components of Extalia, without a grant for standalone model reuse. Candidate body sources and remaining attribution limits are documented in the bundled third-party notices.

Local validation: 278 suites, 3,156 tests passed and one skipped; clean source build without private local assets; mounted macOS arm64 DMG host/Office/F1–F3 smoke; strict DMG/ZIP signature verification. Linux installers passed the CI packaged-smoke gate. Mac installers were rebuilt locally from the tagged source with the same CI-produced daemon binaries: all four DMG/ZIP archives passed architecture and strict signature checks, and the native arm64 app passed packaged smoke with and without the daemon. The CI Mac archive-verification failure remains under investigation; its unchecked artifacts are not distributed here.

Known validation limitation

Full Windows CI still has existing host integration test failures and Windows-only Rust lint warnings; this is not a passing full Windows unit/lint suite. The Desktop rendering and release packaged-smoke gates are checked separately.

Extalia v0.4.109 (Beta Tester Preview)

macOS update: The v0.4.109 Mac installer has an invalid ad-hoc signature. Use the validated free Mac preview in v0.4.112 instead.

🚀 Extalia v0.4.109 — Beta Tester Preview

This release provides multi-platform desktop installers (Windows, macOS, Linux) and Web deployment packages for testers.

---

📦 Download Assets

🪟 Windows

• Installer (x64): Extalia-0.4.109-win-x64-setup.exe

🍎 macOS

• Apple Silicon (M1/M2/M3/M4, arm64):
  • DMG: Extalia-0.4.109-mac-arm64.dmg
  • Portable ZIP: Extalia-0.4.109-mac-arm64.zip
• Intel Mac (x64):
  • DMG: Extalia-0.4.109-mac-x64.dmg
  • Portable ZIP: Extalia-0.4.109-mac-x64.zip

🐧 Linux

• AppImage (Universal x64): Extalia-0.4.109-linux-x86_64.AppImage
• Debian / Ubuntu (.deb x64): Extalia-0.4.109-linux-amd64.deb

🌐 Web & CLI Bridge

• Static Web Client (Deploy to any web host / static server): extalia-web-0.4.109.zip
• Local Web Bridge CLI (npm tarball): extalia-vo-0.4.109.tgz
  • Install locally via npm: npm install -g extalia-vo-0.4.109.tgz && extalia

---

✨ Key Capabilities in this Preview

• Autonomous Multi-Agent Orchestration: Extalia Native autonomous DAG task scheduler with bounded concurrency and model routing.
• Living 3D Virtual Office: 3-floor interactive campus, glass elevator controller, stairs, kinematic avatars, desk work poses, smart screen photometry, and facility staff.
• Task-based Spatial Dispatch: Automatically dispatches agents executing skill_manage or skill curation tools to the Library / Skills workstation (Floor 1).
• Zero-Config Hooks: Seamless connection and background observation for Codex, Claude Code, Gemini CLI, Hermes (post_llm_call), and Antigravity.
• Local-First Security: Zero credential leakage with OS keychain integration and private SQLite WAL event storage.
• Authoritative Recovery (Gate 3.3A): Read-only Rust mission snapshot inspection and resilient terminal shadow projection repair.