Skip to content

Extalia v0.4.288 — Desktop and Web beta

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Nov 06:25
· 7 commits to main since this release
v0.4.288
42ac169
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Extalia v0.4.288 — Desktop and npm/Web preview

Desktop/Web artifacts and their checksums are listed on the
v0.4.288 release page.
The npm latest tag identifies the currently published package and may lag
Desktop while registry processing finishes. Run extalia version to confirm
your installed version; issue #91
records registry verification and publication.

This update gathers v0.4.228–v0.4.288 since the previous v0.4.227 release. It
remains a v0.4 preview; it does not declare the v0.5 acceptance gates complete.

Changes since v0.4.227

  • Reviewed work continuity: change a Native model connection while retaining
    the same session and history, or hand reviewed working notes and retained
    source evidence to an existing agent conversation. Verified routes and manual
    packets have distinct delivery receipts. Scoped archive access, explicit
    observed project association and reviewed Native workspace moves preserve
    source identity, privacy and destination access boundaries.
  • Observed messaging: a shared composer supports queued messages,
    attachments and capability-specific controls across Chat, Observe and the
    Office. Native attachments, source queues and paired cooperative inboxes use
    their actual supported routes. Unknown delivery remains uncertain and is not
    silently resent or rerouted; hooks and transcripts alone do not grant control.
  • Skills and Grimoire: browse live public marketplace results, inspect
    immutable package previews and import exact pinned bytes through security
    review. Revision provenance, permissions and source evidence remain visible.
    Imports never approve or activate a candidate. Supported macOS 14+ ARM64
    artifacts pair pinned SkillSpector 2.13.4 and bundled Python with their daemon;
    their v0.4.288 release validation passes the supported scanner and archive gates.
  • Deferred Native learning: workspace vault policies can schedule bounded
    post-task curation and saved-team knowledge reviews. Run now/Snooze controls
    show the quiet countdown; foreground work takes priority. Confirmed notes and
    skill candidates have separate receipts, and candidates still require review
    and activation. The learning/artifact backend supports macOS and Linux;
    automatic curation and note/skill staging remain unavailable on Windows.
  • Office and application recovery: checked furnished routes, chair and
    fitness contacts, door queues and lift waiting behavior improve movement.
    Camera attention has explicit Follow/Stop controls. Adaptive render budgets,
    hidden-avatar work reduction, cloned-resource cleanup and graphics recovery
    preserve drafts and attachments through scene restarts. Secondary pages load
    on demand, and the Web client reconnects after a Bridge restart.
  • Cross-platform verification fixes: destination folder assertions now
    compare structured results across Windows and Unix path encodings. Inbox
    revocation tests wait for actual request admission, and strict Windows Clippy
    validation retains marketplace linked-file rejection.

Install or update

The npm application package installs the local Bridge, Web client and matching
platform daemon together:

npm install -g extalia-vo@0.4.288
extalia

Requires Node.js 22.13+ on the 22.x line, or 23.4+ on newer lines. Keep the global
install outside a pnpm-linked checkout. @latest installs the current published npm version; confirm it with extalia version. A running Bridge must restart
after an update. The static Web ZIP needs a local Bridge or Desktop host to run
agents; the internal @extalia/daemon-* packages are not standalone applications.

Release files

These names follow the release assembly helper. The release includes a complete
checksum inventory; npm registry availability is verified separately.

Target Files
macOS Apple Silicon Extalia-0.4.288-mac-arm64.dmg, Extalia-0.4.288-mac-arm64.zip
macOS Intel Extalia-0.4.288-mac-x64.dmg, Extalia-0.4.288-mac-x64.zip
Windows x64 Extalia-0.4.288-win-x64-setup.exe
Linux x64 Extalia-0.4.288-linux-x86_64.AppImage, Extalia-0.4.288-linux-amd64.deb, Extalia-0.4.288-linux-x64-setup.run
Web client Extalia-0.4.288-web.zip
npm application extalia-vo-0.4.288.tgz
npm daemon packages extalia-daemon-darwin-arm64-0.4.288.tgz, extalia-daemon-darwin-x64-0.4.288.tgz, extalia-daemon-linux-arm64-0.4.288.tgz, extalia-daemon-linux-x64-0.4.288.tgz, extalia-daemon-win32-x64-0.4.288.tgz
Release metadata latest.yml, latest-linux.yml, Extalia-0.4.288-mac-PREVIEW.txt, SHA256SUMS.txt

Free macOS builds use verified ad-hoc signatures, are not Apple-notarized and
may show an unidentified-developer warning. They update by manual download;
there is no macOS preview auto-update feed. Verify downloads
against that release's SHA256SUMS.txt. See packaging for platform
requirements and release modes.

Scope and limitations

  • Scanner execution is unavailable on Intel macOS, Windows and Linux pending
    verified native isolation. Missing, incomplete or malicious inspections leave
    candidates unavailable. Eligible instruction-only packages need separate
    digest-bound approval and activation; code/tool packages retain evaluation
    requirements. A bundled scanner is not completion of general Python workers,
    complete effect-time authority or full workspace/agent ACLs.
  • Existing native conversations require supported, verified controls or explicit
    cooperative pairing. Manual-ready, queued and submitted receipts do not prove
    a model read the packet, completed work or settled an external operation.
    Real-provider certification, long-duration soaks and hardware FPS/memory
    acceptance remain separate from CI, builds and controlled fixtures.
  • The opt-in CoreStore upgrades through schema 14 with its pre-migration backup.
    Older binaries refuse newer schemas; keep a profile backup before downgrading.
  • Application source is MIT. Bundled scene assets keep their individual licenses,
    including non-commercial vehicles; the runtime commercial-assets switch does
    not remove those files. Read the asset notices
    before reuse or commercial distribution.

See handover,
automatic learning,
marketplace review and the
PRD tracker for
capability boundaries and remaining work.

Verification

The source passed all ten PR CI checks and the merged-main CI. All twelve Release jobs passed, including packaged clean-machine checks and all four Mac archive architecture/signature gates. Local source verification passed 9,230 TypeScript and 576 Rust tests, lint, typechecks and builds; 26 optional TypeScript tests were skipped.

The npm publication archive preserves all application files from CI; only the private publication flag and reviewed CLI README change. Exact registry digests and a temporary-profile installation are recorded in issue #91. The public model inventory contains 133 registered GLBs totaling 152,104,948 bytes (about 145 MiB) before compression.

Registry validation: all six npm package SHA-512/SHA-1 digests match the uploaded archives. An isolated global-prefix installation from npm passed CLI version/doctor, the matched daemon, scanner binding/deep signatures, Web bootstrap/authenticated host snapshot and graceful SIGINT shutdown. The installer used a temporary profile and no existing agent configuration.

Assets 22
Loading