Repository navigation
Stoke v0.2.2
Maintenance and trust-boundary fixes since v0.2.1.
Changes
- Streamed OpenAI Responses disclose the selected node; subscription streams disclose billing mode without inventing a dollar cost before final usage.
- Durable budget admission is atomic across concurrent requests while preserving the established budget-refusal response.
- Built-in privacy filters handle nested content and multiline private keys; audit logging uses metadata-only defaults and owner-only files.
- HTTP webhook credential and destination boundaries are hardened.
- Optional JavaScript plugin chains compose their results correctly and have feature-gated regression coverage.
- Installer replacement failures restore the previous binaries; rollback and uninstall commands are available.
- Documentation, routing/federation proof harnesses, and Actions storage retention have been updated.
Distribution and limits
The release matrix is macOS ARM64/x64 and Linux ARM64/x64, with stoke and stoke-cli in each archive. Default prebuilt binaries do not include the optional V8/JavaScript feature; build with --features js-plugins to enable it. The optional Headroom companion is included only in the macOS ARM64 package and requires its separately pinned Python environment.
Platform compilation and deterministic CI are not a claim of real-provider or native runtime testing on every platform. macOS binaries are not Developer ID-signed or notarized. Provider credentials, local models, and subscription entitlements are not supplied by this release. No general savings or quality-equivalence claim is made.
Install and rollback
After publication, install the exact version:
curl -sSf https://stokegate.com/install | sh -s -- --version v0.2.2The GitHub release contains SHA-256 sidecars and a manifest identifying the exact source commit. Verify the checksum before deploying. Existing configuration is retained. The installer preserves the previous binary pair; restore it with:
curl -sSf https://stokegate.com/install | sh -s -- --rollbackFor a clean downgrade, pin --version v0.2.1. Do not delete or reconcile the durable ledger merely to downgrade.
Release gates
The current .github/workflows/ci.yml defines core build/unit/smoke checks, optional macOS ARM64 Headroom packaging checks, and cargo test --locked --features js-plugins. The release workflow builds all four archives. Stable publication requires all checks to pass and the exact archive inventory, manifest source identity, and checksums to be verified. Source preparation alone is not publication.
Webhook contract migration
Webhook JSON no longer includes the raw gateway api_key; it supplies a stable opaque key_id instead. Update consumers that relied on api_key. The identifier is not an authentication credential. See the updated webhook guide.
Verified release provenance
- Source:
c16c955eb68a15b469eebb91b7ad2c62b898568d. - CI: core, Headroom, and JS-plugin checks passed.
- Release builds: all four targets passed.
- Stable promotion: exact nightly source, inventory and checksums verified.
- All nine versioned assets and four latest-download archives were downloaded independently and matched the verified CI bytes.