Retulo 0.5.0rc1 — one-command install and agent setup

Retulo 0.5.0rc1

Install Retulo without keeping a source checkout or manually creating a virtual environment:

curl -fsSL https://thestack-ai.github.io/retulo/install.sh | sh
retulo setup codex --project /absolute/path/to/project --apply
# Or: retulo setup claude --project /absolute/path/to/project --apply

If the installer reports that the executable directory is missing from PATH, use its printed export command first. It does not edit shell profiles.

• A checksum-verified release wheel runs in a persistent uv tool environment. Missing uv is installed privately; uv can obtain Python automatically. This release is distributed on GitHub, not npm or PyPI.
• The wheel includes Codex and Claude Code integration templates, guarded setup, diagnosis and disconnection. Agent settings use the installed runtime, independent of a source directory.
• Setup and disconnect default to previews; --apply writes changes. Existing unrelated settings and core workspaces are preserved. Claude setup manages project .mcp.json and a marked CLAUDE.md block; Codex setup manages the user-level MCP connection, skill, guidance and context hooks.
• retulo doctor codex|claude --project /absolute/path/to/project --connect checks the configured local MCP server without an AI model call.
• Isolated Python execution prevents project files and PYTHONPATH from shadowing Retulo. Unowned entries, edited components and incomplete installation records fail safely.
• English, Simplified Chinese and Korean READMEs and the documentation site describe the same packaged workflow. See the installation guide for custom paths and development installation.

Qualification includes regression checks, source/distribution inspection, an independent installer review, fresh installed-wheel task/version/restore checks, both SDK MCP connections, persistent bootstrap/reinstall, Codex CLI configuration parsing and Claude Code CLI health checking. Client trust and a complete agent conversation adopting the workflow remain separate checks. No AI model calls were made for these integration probes. Windows and network filesystems are not qualified by this release.

Assets include the universal Python wheel, source distribution, install.sh and SHA256SUMS. For downloaded assets, verify with shasum -a 256 -c SHA256SUMS on macOS or sha256sum -c SHA256SUMS on Linux.

Retulo 0.4.0rc2 — Standalone core and bounded release checks

Retulo 0.4.0rc2

Local workspaces for AI agents, with incremental workflows and reusable recipes.

This candidate removes a private memory-system bridge from the public package.
Retulo provides 24 task, file, workflow and recipe tools through its CLI and MCP.
It remains independent of an additional orchestration runtime. Existing local
configuration files must contain only the documented core settings; unsupported
keys fail with a configuration error and are not executed.

Security correction

The development release inspector previously parsed every TAR/ZIP metadata
record before applying its 10,000-member limit. A deliberately supplied hostile
archive could therefore waste developer-process memory and CPU. ZIP and ZIP64
central records are now counted before ZipFile construction; TAR physical
headers, extension bodies, nesting, total bytes and effective PAX metadata are
bounded as they are parsed. Sparse TAR forms are rejected by the inspector.
The inspector never extracts archives. This issue concerns manually invoked
release checks; it does not introduce a runtime network endpoint.

Preserved functionality

• Stable task UUIDs and explicit continuation across conversations.
• Reserved paths, immutable output versions, integrity and revision checks.
• v1 tasks, opt-in v2 workflows, scoped regeneration and execution history.
• Typed, version-pinned recipes that create new tasks with fresh checks.
• Preview-first Codex installation and guarded snapshot restoration.
• English, Chinese and Korean documentation with the existing visual design.

See qualification for the exact checks and their scope.
Download the candidate release
or browse the documentation site.

Scope

The qualified target is macOS with a local filesystem and Python 3.11 or later.
A wheel contains the CLI/MCP core; install the Codex integration from the source
package. Review and trust the exact hook definitions in the client. Tests do not
establish user approval or automatic adoption by an already-connected client.
The core does not launch models, execute recipe commands, watch folders or publish
results. Other operating systems, NAS and multi-host operation are not qualified.

Validated locally: 367 regression tests each on Python 3.11.15 and 3.14.4; 27 archive boundary tests on each; isolated install/MCP/restore; actual continuity and workflow/recipe examples; source, sdist and wheel inspection. The wheel has 24 core tools and no private bridge module.

This prerelease supersedes v0.4.0rc1. Use the attached sdist for the Codex integration and the wheel for CLI/MCP core. PyPI publication is not part of this release.

Hosted verification for commit bf7e727d2d88b5307a367c59ce25c20e8a4e24ad: Release checks, macOS Python 3.11 and 3.14 and documentation deployment both passed.

Retulo 0.4.0rc1 — Local workspaces for AI agents

Superseded by v0.4.0rc2. Use rc2 for the standalone public core and corrected archive-inspection limits. This earlier candidate is retained for history.

Retulo gives AI agents a durable local workspace for file-producing work. Keep sources, output versions, decisions, progress and checks together; continue an identified task across conversations, rebuild affected steps and reuse versioned workflow recipes.

Start here

• English README · 简体中文 · 한국어
• Documentation
• Download and extract retulo-0.4.0rc1.tar.gz, then follow its source-install instructions. The wheel contains the CLI/MCP core; the source archive also includes the Codex integration installer, examples, and guides.

Included

• Stable task identity and workspace continuity; original sources and numbered output versions.
• Separate file integrity, content-check and approval records.
• Declared workflow inputs and affected-step rebuilds with fixed execution snapshots.
• Versioned recipes that create new tasks with fresh checks and no inherited approvals.
• CLI and 29 MCP tools; preview-first Codex integration and guarded restoration.
• Runnable continuity and HTML/SVG report examples; English, Chinese and Korean documentation.

Validation and scope

GitHub-hosted macOS checks pass on Python 3.11 and 3.14, including 379 tests on each version, isolated installation/lifecycle/restore and package inspection. Actual CLI examples preserve the earlier outputs and sources. See the qualification record and exact Actions runs.

This is a preview release qualified for a local macOS filesystem. Your current agent runs the tools; the core does not call models, launch agents, execute recipe commands or publish results. Main Brain and external orchestrators are optional. Existing Codex clients must trust and connect the new integration. The operating installation is not replaced by downloading the package. PyPI installation and other OS/NAS/multi-host compatibility are not claimed.

MIT licensed. Dependency notices and license files are included. SHA256SUMS covers the attached wheel and sdist.