ThinkWatch Core 0.89.2

This release improves credential detection, native system proxy support and compatibility with Mistral responses.

• Reduce credential false positives in source code and pool logs. Comma-separated values require a quoted credential field name, unquoted recovery phrases stop at code delimiters, and Rust numeric types and short numeric lookup keys are excluded. Explicit credentials and quoted secret values remain covered.
• Preserve structural array indices in security hit paths while continuing to mask request-derived field names.
• Upstreams configured to use the system proxy can now read native macOS and Windows proxy settings. Applying or reloading configuration rebuilds those clients to refresh the settings. Direct and explicitly configured proxy modes retain their own routing behavior.
• Accept both string and typed array content in streaming and non-streaming Chat responses, including Mistral text and thinking chunks. Text is forwarded incrementally, and thinking stays separate from visible text.
• Restore placeholders split across array text fragments or transitions between string and array content before response format conversion. Thinking content and signatures remain untouched.

The Mistral changes fix reproduced content-loss cases; they do not establish the cause of every delay or truncation reported in Lite issue #407. System proxy settings are refreshed when configuration is applied or reloaded, rather than watched continuously.

The control-plane protocol and request-store schema are unchanged. No configuration or database migration is required.

Downloads

Platform	Binary	Archive for server installation
Linux, x86_64	twcore-x86_64-unknown-linux-gnu	twcore-x86_64-unknown-linux-gnu.tar.gz
Linux, aarch64	twcore-aarch64-unknown-linux-gnu	twcore-aarch64-unknown-linux-gnu.tar.gz
macOS, Apple silicon	twcore-aarch64-apple-darwin	—
Windows, x64	twcore-x86_64-pc-windows-msvc.exe	—
Windows, ARM64	twcore-aarch64-pc-windows-msvc.exe	—

Each file is published with a .sha256 file beside it. A Linux archive contains twcore, the systemd unit twcore.service and LICENSE. ThinkWatch Lite includes its own copy of twcore; the files here are for running core separately, such as on a server.

Server installation

On Linux (x86_64 or aarch64), the install script sets up twcore as a systemd service. This installs 0.89.2:

curl -fsSL https://raw.githubusercontent.com/ThinkWatchProject/ThinkWatch-Core/main/scripts/install.sh | sudo sh -s -- --version 0.89.2

An installation made with the script switches to 0.89.2 with:

sudo twcore upgrade --version 0.89.2 --restart

Configuration, the remote control port and connecting ThinkWatch Lite are described in docs/server.md.

Verifying a download

A .sha256 file holds the SHA-256 of the file followed by its name. With both files in the current directory, on Linux:

sha256sum -c twcore-x86_64-unknown-linux-gnu.tar.gz.sha256

On macOS:

shasum -a 256 -c twcore-aarch64-apple-darwin.sha256

On Windows, in PowerShell, the following prints True when the binary matches:

(Get-FileHash .\twcore-x86_64-pc-windows-msvc.exe).Hash -eq (Get-Content .\twcore-x86_64-pc-windows-msvc.exe.sha256).Split()[0]

The install script and twcore upgrade check the SHA-256 themselves.

What's Changed

• chore(release): prepare Core 0.89.2 by @fylorn in #395

Full Changelog: v0.89.1...v0.89.2