v0.1.3 — Public Artifact Hygiene

Public artifact hygiene

v0.1.3 finishes the first public-release cleanup pass after the Windows Agent
went through real cross-device testing.

Fixed

• Replaced test-machine-looking Router URL examples with neutral placeholders.
• Replaced test-machine-looking Windows user/path examples with neutral placeholders.
• Public bundles remain address-free by default; private deployments may
  intentionally prefill a Router URL at package time.
• Preserves the v0.1.1 DevSpace/Agent root synchronization fix.

Public repository polish

• Repositioned CodasSol as a transparent workspace router rather than a generic
  remote desktop or all-in-one Agent platform.
• Expanded security/threat-model documentation.
• Added durable project findings, roadmap thoughts, and release history.

Validation

• Router tests: 19/19 passing.
• Windows ZIP integrity check passes.
• Public router-default.txt is empty by default.
• Installer text scan contains no known test-machine identifiers.

Integrity

A SHA-256 checksum file is attached beside the Windows bundle.

GitHub automatically provides source archives for this tag.

v0.1.2 — Public Bundle Privacy Hotfix

Public bundle privacy hotfix

v0.1.2 keeps the self-contained Windows installer from embedding the build
machine's private LAN Router address in a public release artifact.

Fixed

• Public Windows bundles now leave router-default.txt empty by default.
• The installer prompts for the Router URL when no private default is supplied.
• Private deployments can still prefill a Router URL explicitly with
  CODASSOL_ROUTER_URL at package time.
• No secret or credential was exposed by the previous behavior, but publishing
  private network metadata violated the project's own deployment-boundary rule.

Includes the v0.1.1 root-policy fix

• DevSpace allowedRoots and CodasSol Agent advertised roots stay synchronized.
• Explicit workspace access policy selection.
• Recommended mode exposes the user profile plus fixed non-system drives, not C:\.
• Outbound-only Agent enrollment and per-device credentials.
• Bundled Node.js 22 x64 runtime and private DevSpace installation.

Validation

• Router test suite: 19/19 passing.
• Windows ZIP integrity check passes.
• Release bundle verification confirms no IPv4 Router address is embedded by default.

A SHA-256 checksum file is attached beside the Windows bundle.

v0.1.1 — Windows Root Policy Fix

Windows root-policy synchronization fix

v0.1.1 fixes the access-root mismatch discovered during the first real Mac -> Router ->
Windows workspace test.

Fixed

• DevSpace workspaces.allowedRoots and CodasSol Agent advertised roots are now synchronized.
• Existing DevSpace installations are handled instead of silently keeping stale roots.
• The installer now offers an explicit workspace-access policy:
  1. user profile only;
  2. recommended: user profile + all fixed non-system drives;
  3. fixed non-system drives only;
  4. custom roots.
• The recommended policy does not expose the whole system drive (C:\).
• Removable/network drives are not automatically granted as fixed local roots.
• A small REPAIR-ROOT.cmd path is included for installations created by v0.1.0.

Still included

• Bundled Node.js 22 x64 runtime
• No Git requirement
• No administrator-level global npm changes
• Outbound-only Agent connection
• Pairing token used only for enrollment; a per-device token is issued afterward
• npmmirror -> existing npm/proxy -> official npm fallback
• Post-install verification and current-user autostart

Validation

The Router test suite passes 19/19 tests, including Windows path routing, sticky
workspace-to-device bindings, ambiguity fail-closed behavior, offline fail-closed
behavior, Agent enrollment/heartbeat/job transport, and local DevSpace OAuth.

Integrity

A SHA-256 checksum file is attached beside the Windows bundle.

GitHub automatically provides source archives for this tag.

v0.1.0 — First Windows Agent Bundle (superseded)

First Windows Agent bundle

This is the first self-contained Windows installer for CodasSol Router.

Included

• Bundled Node.js 22 x64 runtime
• Private DevSpace installation under %LOCALAPPDATA%\CodasSol\Agent
• No Git requirement and no global npm registry changes
• Outbound-only Agent enrollment to the Router
• Current-user autostart tasks for DevSpace and CodasSol Agent
• Dependency fallback: npmmirror -> existing npm/proxy settings -> official npm registry

Known issue — superseded by v0.1.1

On a machine that already had a DevSpace configuration, the installer could advertise
C:\Users\<user> to CodasSol Router while DevSpace still enforced a different
allowedRoots list.

Result: the device could enroll and remain online, but a routed open_workspace call
could fail locally with Path is outside allowed roots.

This issue is fail-closed: the mismatch blocks access rather than expanding the
DevSpace permission boundary. No privilege-escalation path is known from this defect.

Use v0.1.1 or later for new installations.

Integrity

A SHA-256 checksum file is attached beside the Windows bundle.

GitHub automatically provides source archives for this tag.