Retulo 0.4.0rc2 — Standalone core and bounded release checks

Retulo 0.4.0rc2

Local workspaces for AI agents, with incremental workflows and reusable recipes.

This candidate removes a private memory-system bridge from the public package.
Retulo provides 24 task, file, workflow and recipe tools through its CLI and MCP.
It remains independent of an additional orchestration runtime. Existing local
configuration files must contain only the documented core settings; unsupported
keys fail with a configuration error and are not executed.

Security correction

The development release inspector previously parsed every TAR/ZIP metadata
record before applying its 10,000-member limit. A deliberately supplied hostile
archive could therefore waste developer-process memory and CPU. ZIP and ZIP64
central records are now counted before ZipFile construction; TAR physical
headers, extension bodies, nesting, total bytes and effective PAX metadata are
bounded as they are parsed. Sparse TAR forms are rejected by the inspector.
The inspector never extracts archives. This issue concerns manually invoked
release checks; it does not introduce a runtime network endpoint.

Preserved functionality

• Stable task UUIDs and explicit continuation across conversations.
• Reserved paths, immutable output versions, integrity and revision checks.
• v1 tasks, opt-in v2 workflows, scoped regeneration and execution history.
• Typed, version-pinned recipes that create new tasks with fresh checks.
• Preview-first Codex installation and guarded snapshot restoration.
• English, Chinese and Korean documentation with the existing visual design.

See qualification for the exact checks and their scope.
Download the candidate release
or browse the documentation site.

Scope

The qualified target is macOS with a local filesystem and Python 3.11 or later.
A wheel contains the CLI/MCP core; install the Codex integration from the source
package. Review and trust the exact hook definitions in the client. Tests do not
establish user approval or automatic adoption by an already-connected client.
The core does not launch models, execute recipe commands, watch folders or publish
results. Other operating systems, NAS and multi-host operation are not qualified.

Validated locally: 367 regression tests each on Python 3.11.15 and 3.14.4; 27 archive boundary tests on each; isolated install/MCP/restore; actual continuity and workflow/recipe examples; source, sdist and wheel inspection. The wheel has 24 core tools and no private bridge module.

This prerelease supersedes v0.4.0rc1. Use the attached sdist for the Codex integration and the wheel for CLI/MCP core. PyPI publication is not part of this release.

Hosted verification for commit bf7e727d2d88b5307a367c59ce25c20e8a4e24ad: Release checks, macOS Python 3.11 and 3.14 and documentation deployment both passed.