Skip to content

Releases: Seriora-Research/seri-agent

seri 0.1.3

Choose a tag to compare

@lzvxck lzvxck released this 07 Sep 20:28
fc66fe2

seri 0.1.3

Since v0.1.2. seri --version reports seri 0.1.3. Refresh a compiled install with seri update, or pin this tag with SERI_VERSION=v0.1.3.

Hosted accounts

The production binary does not offer seri login or signup. Billing is not ready, so a compiled seri is BYOK (and Grok / ChatGPT subscriptions) only.

  • Splash is Continue only. No Log in / Sign up.
  • /login and /signup are hidden from completions and refuse if invoked.
  • /setup omits the seri hosted-account row. Grok and Codex OAuth stay.
  • A leftover auth.json from an older binary does not talk to the hosted gateway.
  • Source checkouts without the bake still offer hosted accounts, so local bun run dev can keep exercising that path.

To turn hosted accounts back on later, drop or flip SERI_BAKED_HOSTED_ACCOUNTS=false in compile.ts and cut a new release.

Install

macOS and Linux:

curl -fsSL https://seri-agent.seriora.ai/install.sh | bash

Windows (PowerShell, no admin):

irm https://seri-agent.seriora.ai/install.ps1 | iex

Then seri --version / seri doctor / seri update.

seri 0.1.2

Choose a tag to compare

@lzvxck lzvxck released this 07 Sep 19:40
2c7ee5e

seri 0.1.2

Since v0.1.1. seri --version reports seri 0.1.2. Refresh a compiled install with seri update, or pin this tag with SERI_VERSION=v0.1.2.

TUI

  • Edit and write hunks paint red/green in the transcript, the approval box, and the live preview. Each edit block shows as the tool-call arrives, with a gutter and +N −M counts for the hunk and the turn.
  • Chrome uses platform ink and accent (selected rows, tabs, input caret).
  • Settled reasoning keeps only the latest span. Failed edits and writes stay on the live tree instead of vanishing with the tool group.

Permissions and sandbox

  • Paths outside the working directory default-deny. A live yes is run-scoped and never becomes a standing grant. Subagents share the parent's latch.
  • --permission-prompts none skips the interactive prompt (scheduled/unattended).
  • permissions.autoModeOnBlock is ask or deny.
  • Auto still denies IMDS, egress-evasion, and cross-tenant probes. --dangerously-skip-permissions does not lift that screen.
  • Auto denies packing repo or user content into mermaid.ink / kroki.io URLs unless this turn asked for the render.
  • Path denials in permissions.yaml match before a missing glob/grep/read is probed, including ./, absolute, and .. spellings. Non-string deny entries warn by index; seri doctor surfaces those first.
  • Bang shell has explicit sandbox tiers: sandboxed, unsandboxed, host, refused.
  • Linux seccomp denies io_uring. macOS Seatbelt loopback allow is 127.0.0.1 and ::1, never mapped IPv6.
  • Checkpoint git spawns set core.fsmonitor=false so a global helper cannot run on index refresh.

Setup, memory, Codex

  • Guided setup stays closed when the default pair already reroutes to a keyed native (OpenRouter Claude plus an Anthropic key can already run a turn).
  • Guided setup stays open when the persisted default is unpayable (a Codex grant with no model cannot pay groq's implicit default).
  • /compact streams on a ChatGPT (Codex) subscription instead of using generateText, which that host rejects.
  • The archivist no longer sits on the turn path. The tool-count pass runs in the background; the loop waits only before compact. It no longer writes tool-use constraints as facts.

Caps and daemon

  • read_file and MCP flattenContent cap at 30k characters, same as shell streams.
  • rg stderr is bounded without killing a search that already has matches.
  • Attended daemon turns close MCP clients when the turn ends.
  • daemon_events no longer stores text-delta / reasoning-delta rows. Live subscribers still get every delta; reconnect uses in-memory replay.

Faster internals

  • Codex requests no longer parse and rewrite the full conversation body on every fetch.
  • Compaction persist keeps suffix row ids instead of rewriting the whole session.
  • Token estimate between compactions is a running sum, not a full-history walk.

Install

macOS and Linux:

curl -fsSL https://seri-agent.seriora.ai/install.sh | bash

Windows (PowerShell, no admin):

irm https://seri-agent.seriora.ai/install.ps1 | iex

Then seri --version / seri doctor / seri update.

v0.1.1

Choose a tag to compare

@github-actions github-actions released this 05 Sep 06:45
1b1330c
Merge pull request #28 from Seriora-Research/dev

Dev

seri 0.1.0

Choose a tag to compare

@cursor cursor released this 05 Sep 06:02
a107509

seri 0.1.0

This is the first public binary of seri, a coding-agent CLI. It ships as one file for Windows, macOS, and Linux — no runtime to install, no WSL2, no Docker. seri --version reports seri 0.1.0.

seri is code-first, not code-only. Coding is what this release is built for. It asks before it writes. Its edits are reversible. You pay with your own API key, a hosted seri account, or a Grok or ChatGPT (Codex) subscription.

Start here

Product seri-agent.seriora.ai
Documentation docs.seriora.ai
Install docs.seriora.ai/get-started/installation
First session docs.seriora.ai/get-started/quickstart
Slash commands docs.seriora.ai/reference/commands
Launch flags docs.seriora.ai/reference/cli
Lab seriora.ai
Account portal.seriora.ai
Source this repository

Install

macOS and Linux:

curl -fsSL https://seri-agent.seriora.ai/install.sh | bash

Windows (PowerShell, no admin):

irm https://seri-agent.seriora.ai/install.ps1 | iex

That puts the binary on ~/.local/bin (macOS/Linux) or ~\.seri\bin (Windows). The scripts never edit your shell config. If you would rather not pipe to a shell, download an asset below, make it executable, and put it on your PATH.

Each asset is listed in SHA256SUMS. That checksum catches a truncated or corrupted download. It does not catch a compromised release, because the sums sit next to the binaries they describe.

Refresh a compiled install with seri update. Pin this tag with SERI_VERSION=v0.1.0. A source checkout (bun run dev) is refused.

Then:

seri --version
seri doctor
seri

seri with no task opens the session. /setup is where you add a key or connect a plan.

What ships in 0.1.0

  • Permission gate on every OS: read-only / approve-each / auto, cycled with /mode. approve-each is the default.
  • Checkpoints independent of your git history: /undo, /rewind, /restore.
  • Plan mode in the TUI: /plan or Ctrl+O. A command-line task never enters plan mode.
  • Six providers: Groq, OpenRouter, Anthropic, OpenAI, Google, xAI. Switch with /model without dropping the conversation.
  • Three ways to pay: BYOK (/setup), hosted seri (/login, portal.seriora.ai), or a Grok / ChatGPT (Codex) subscription.
  • Extensions as files: agents, skills, rules, MCP servers, and hooks under .seri/ or the profile.
  • Local daemon: seri serve and seri exec.
  • seri doctor: local install and config report. No session, no model.
  • seri update: replace this binary from GitHub Releases after checking SHA256SUMS.

seri -- doctor and seri -- update are tasks, not verbs. Extra words after doctor or update are a usage error.

Binaries

  • seri-linux-x64
  • seri-linux-arm64
  • seri-darwin-x64
  • seri-darwin-arm64
  • seri-windows-x64.exe
  • SHA256SUMS