Unpin v1.2.0

Unpin v1.2.0

v1.2.0 adds portable Agent Plugin package discovery and control across the
CLI, terminal TUI, native macOS workbench, and MCP planning surface.

Highlights

• Installed Agent Plugin packages now appear as one package inventory derived
  from Unpin's existing provider discovery. No second package store is created.
• Claude global and project activation anchors and Codex global activation
  anchors can be enabled or disabled through reviewed Unpin changes.
• The CLI and TUI can list, inspect, filter, and control packages. The desktop
  app adds a sortable and filterable Packages workbench in Light and Dark
  appearances, with first-run guidance and exact CLI handoffs.
• MCP remains no-write. Agents can list packages, inspect package state, and
  prepare a human-action handoff, while apply stays in the CLI, TUI, or desktop
  review flow.
• Package changes expand into exact native activation identities and retain
  selected-provider reach, fingerprint and drift checks, locking, confirmation,
  backup, audit, restore, and recovery protections.
• Incomplete or symlinked package caches fail closed. Unsupported provider and
  layer combinations remain visible as diagnostics instead of being treated as
  actionable.

Upgrading from v1.1.0

Use unpin update check to inspect the candidate and unpin update apply to
install it after confirmation, or download and verify the matching archive from
this release. The stable macOS certificate and the dev.unpin.cli,
dev.unpin.workbench, and dev.unpin.workbench.bridge identifiers are
unchanged. A verified update therefore preserves the designated requirements
used by existing Keychain Always Allow grants.

Artifacts

The release provides three CLI archives and two native desktop archives:

• unpin-v1.2.0-aarch64-apple-darwin.tar.gz
• unpin-v1.2.0-x86_64-apple-darwin.tar.gz
• unpin-v1.2.0-x86_64-unknown-linux-gnu.tar.gz
• unpin-desktop-v1.2.0-aarch64-apple-darwin.tar.gz
• unpin-desktop-v1.2.0-x86_64-apple-darwin.tar.gz

Every archive has a CycloneDX SBOM, GitHub build-provenance and SBOM
attestations, and an entry in SHA256SUMS.

Trust boundary

The stable personal certificate preserves code identity for Keychain access;
it is not an Apple Developer ID certificate and the artifacts are not
notarized. It therefore does not establish Gatekeeper trust. Verify checksums
and GitHub attestations before using Finder's Control-click Open flow. Do
not disable Gatekeeper or strip quarantine metadata. The release uses timestamp
mode none and does not claim secure timestamping for the personal self-signed
certificate. Full instructions are in the desktop guide, and
certificate expiry and rotation are covered in the release
guide.

Verification

This is an ordinary program release. Publication remains blocked until the
exact merged release commit passes the locked Rust workspace checks, macOS
XCTest suite, live Pi and OpenCode validation, and finalized provider matrix.
The draft artifacts must then pass complete checksum, attestation, stable
signature, exact-identifier, designated-requirement, bridge-handshake, and
fresh-download verification. The approved provider-matrix evidence bundle is
attached before publication.

Known limitations

• Agent Plugin activation is currently actionable for Claude global/project
  and Codex global anchors. Other detected provider/layer combinations are
  diagnostic.
• MCP can inspect and prepare package changes but cannot apply them.
• No Developer ID signing or notarization.
• Desktop support remains macOS-only and architecture-specific.
• crates.io, Homebrew, Linux ARM64, and Windows distribution remain deferred.