Skip to content

v0.9.0 — terminal UI default, security harden, native Linux install

Latest
Latest

Choose a tag to compare

View all tags
@Legendarylibr Legendarylibr released this 17 Aug 20:45
v0.9.0
7e430b6
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Summary

Changes since v0.8.0 (43 commits / PRs #464–#484).

start no longer opens a browser. The default workspace is seiso tui: a Forge-shaped terminal UI with live Hugging Face Hub search, local chat, and studio command launch. The React Forge app remains available as an opt-in API (SEISO_UI=forge start or seiso forge).

This release also clears several open dependency CVEs (PyJWT instead of python-jose/ecdsa, cryptography 50), hardens tool/KB injection defenses, and fixes native Linux install/start loops.

Project direction

Seiso stays a local-first stack: chat, fine-tune, post-train, compress, and export on your hardware. Day-to-day interaction is now the terminal UI so launch does not pay for a browser tab or the Forge SPA.

Limitations — not functional yet, do not use

Treat pay/mesh/Ark as docs / scaffolding only. Do not run them for production work, real funds, or trusted multi-node jobs:

Surface Flag Status
Sats marketplace (seiso pay) SEISO_ALLOW_PAY=1 Experimental. Faucet/sim only until settlement clients land.
Buzz mesh (seiso mesh) SEISO_ALLOW_MESH=1 Experimental. Not ready for real multi-node jobs.
Ark backends SEISO_ARK_BACKEND=bark|second|ark Not implemented — selecting these errors until a client is bundled.

What's new

Terminal UI (default start) (#484)

  • seiso tui — Forge sidebar, Dashboard, Hub, Chat, studio pages, Settings
  • Hub searches Hugging Face live (catalog + GGUF repos), not only files already on disk
  • /search, /download N, /open N, /unload, /run configs/…
  • start / installer autostart launch the TUI (no browser)
  • Optional web API: SEISO_UI=forge start

Security (#469, #470, #472)

  • Replace python-jose/ecdsa with PyJWT
  • Bump cryptography to 50.0.0 (CVE-2026-69247)
  • Harden tool / knowledge-base injection defenses without content censorship

Native Linux install / start (#466, #467, #469)

  • Harden the cross-machine native Linux install path
  • Stop start from false reinstall loops
  • Prefer npm for Forge UI with a safer Bun fallback

Training / review (#473, #474)

  • Address 2026-08-06 full-tree review findings
  • DPO cosine LR scheduler after warmup; raise code-verification test timeout floor

Housekeeping (#464, #465, #468, #471, #475, #476, #480, #482, #483)

  • Dependabot: ruff 0.16.3, @xyflow/react 12.11.3, React type bumps
  • Safe Python lock refresh (huggingface-hub, peft, kernels)
  • Revert a broad deps bump that did not stick (#475 / #476)
  • README touch-up

Full changelog: v0.8.0...v0.9.0

Assets 2
Loading