Kestrel 0.8.0

One Kestrel everywhere

Kestrel 0.8.0 is the unified Beta release across Runtime, Protocol, SDK, adapters, CLI/TUI, Desktop, Kestrel One, Memory, observability, and workspace skills.

Highlights

• One shared 0.8 contract across every Kestrel surface.
• Mission Control projects, work items, attempts, evidence, review, and acceptance replace the legacy Board/Task action model.
• Durable conversation recovery, stable cursors, recovery option identifiers, and action-bound approvals.
• Public @kestrel-agents/memory, expanded trace correlation, and improved Desktop onboarding and Local Core recovery.
• Kestrel One source is public and versioned at v0.8.0; Lumi-hosted access remains invitation-only.

Install

npm install -g @kestrel-agents/kestrel@latest

The unified suite is 0.8.0. The npm Runtime/CLI package is 0.8.2 because two packaging-only corrections were published during the release cut; its Protocol, Memory, and Workspace Skills contracts remain exactly 0.8.0.

macOS arm64 users can alternatively download the standalone CLI archive or the signed and notarized Desktop DMG/ZIP attached below. Desktop 0.8.0 is a manual update; the stable OTA channel remains on 0.7.0 pending the 0.8.1 OTA proof.

Breaking changes

• Removed legacy Board/Task project actions.
• Removed project.snapshot.update and SDK updateProjectSnapshot.
• Use mission_control.project.get and mission_control.action.execute for Mission Control state and actions.

See the repository documentation for the complete 0.7-to-0.8 upgrade guide and compatibility matrix.

Full changelog: v0.7.0...v0.8.0

Kestrel Desktop 0.7.0

Kestrel Desktop 0.7.0

Kestrel Desktop 0.7.0 is the stable Desktop release for Macs with Apple silicon.

Download

• DMG: recommended for normal installation
• ZIP: portable archive and update payload
• SHA256SUMS.txt: checksums for the published artifacts

Requirements: macOS 13 or later on Apple silicon.

The application is signed with a Developer ID certificate, notarized by Apple, stapled, and accepted by Gatekeeper.

Desktop release notes

• Packages Kestrel Desktop, Local Core, and the local PGlite database into one application.
• Adds manual update checks, downloads, and explicit restart-and-install.
• Refuses to restart for an update while Desktop or Local Core work is active; active work is not cancelled to install an update.
• Uses the stable Desktop update channel at https://updates.lumicorp.ai/desktop/stable/arm64.

Desktop 0.7 currently supports macOS arm64 only.

Kestrel package line

The separately versioned public Runtime, Protocol, SDK, Next.js, AI SDK, Observability, and Workspace Skills packages are also available on the coordinated 0.7.0 npm line. Kestrel One remains invitation-managed and is released independently.

The Desktop-specific source tag is desktop-v0.7.0. The root v0.7.0 tag identifies the public package release line.

Checksums

41522085677b0f311db0e7a4798765b9c98665f3dcd2afe777f21c084c84c3a2  Kestrel-0.7.0-mac-arm64.dmg
14e619c2703047d8eba3923ea78ba574fa03fd2c42e6ac326b536c96a0ee33f7  Kestrel-0.7.0-mac-arm64.zip

See the Desktop installation guide and release status.

Kestrel Desktop 0.6.0

Kestrel Desktop 0.6.0 for Apple Silicon Macs.

This release includes the current Local Core-owned Desktop runtime and static Vite renderer.

Asset: Kestrel-0.6.0-darwin-arm64.zip
SHA-256: 3a793c07b42796bfec68b32d324cd2da82510a7e7e0b4e176259df73d85af851

Important: this archive is ad-hoc signed and not notarized. macOS may require an explicit local security override to open it.

Kestrel Desktop 0.5.1

Kestrel Desktop 0.5.1 is the compatibility bridge required before the repository and renderer cutover.

Included

• Kestrel-0.5.1-darwin-arm64.zip: the bridge release. It keeps the legacy renderer, copies only allowlisted local UI state into Kestrel Local Core, and preserves an existing 0.5.0-beta.0 Core manifest for rollback.
• SHA-256 checksum file.

The independently published 0.5.0 recovery companion retains bridge protocol 1 and the old renderer while repairing packaging and process safety.

Both apps bundle their own self-contained Postgres runtime. No external database installation is required.

These compatibility artifacts were transferred byte-for-byte from their verified private provenance releases. Their release source and build evidence remain in the read-only provenance archive; this tag marks the canonical public distribution record.

Verification

• Bridge SHA-256: 50e9eacdbe332cf55888bc8c64a620df6ff3fc8a296fa24d20d28ecbbcd6610b
• Recovery SHA-256: 48a7bba44636a09ff2eaa8bf487a11ed477fccfe6aa03ae06a1685ad99b12f38
• Verified on macOS 26.5.1 (25F80), Darwin arm64.
• Full sequence passed against an isolated copy of the existing Desktop profile: recovery 0.5.0 -> bridge 0.5.1 -> recovery 0.5.0.
• All three launches reached ready with a healthy managed database; bridge versions were 1 -> 2 -> 1.
• Eight local-state keys were byte-identical. The task graph differed only in 79 valid updatedAt timestamps and was otherwise structurally identical.
• TUI state was byte-identical before and after. App, Local Core, Postgres, renderer, and helper process audits were empty between launches and at completion.

Distribution Trust

These artifacts are ad-hoc signed and are not Apple Developer ID signed or notarized because the build host has no Developer ID or notarization credentials. Their internal signatures pass strict verification, but macOS distribution trust is not implied.

Kestrel Desktop 0.5.0 Recovery

Kestrel Desktop 0.5.0 Recovery is the rollback companion for the 0.5.1 state bridge.

Included

• Kestrel-0.5.0-beta.0-recovery-darwin-arm64.zip
• SHA-256 checksum file

The app retains bridge protocol 1 and the legacy renderer while repairing packaging and process cleanup. It bundles its own PostgreSQL runtime; no external database installation is required.

This compatibility artifact was transferred byte-for-byte from the verified private provenance release. Its release source and build evidence remain in the read-only provenance archive; this tag marks its canonical public distribution record.

Verification

• SHA-256: 48a7bba44636a09ff2eaa8bf487a11ed477fccfe6aa03ae06a1685ad99b12f38
• Verified on macOS 26.5.1 (25F80), Darwin arm64.
• Verified as both ends of the isolated recovery 0.5.0 -> bridge 0.5.1 -> recovery 0.5.0 sequence.
• Local UI and TUI state remained compatible, and all owned app, Local Core, PostgreSQL, renderer, and helper processes were stopped between launches.

Distribution Trust

This artifact is ad-hoc signed and is not Apple Developer ID signed or notarized because the build host has no Developer ID or notarization credentials. Its internal signature passes strict verification, but macOS distribution trust is not implied.