AgenticNetOS 2.38.0

Changed

• Default Ollama model lineup is now glm-5.2 + kimi-k3 (deployment/.env.template, all compose files, agentic-net-desktop). Default/low/medium tiers default to glm-5.2:cloud, high/thinking to kimi-k3:cloud (previously a deepseek-v4/llama3.2 mix that no longer matched any real deployment). Explicit env values override as before.

Added

• Desktop: tray glyph matches the brand icon (agentic-net-desktop). The tray icon and the Linux application icon now draw the three connected places of the Agentic-Nets icon instead of a single place with two tokens — monochrome per platform theme, dimmed while starting, red corner badge when a service needs attention.

• Desktop: Windows parity + release-built msi (agentic-net-desktop, .github/workflows/desktop-windows.yml). The launcher now behaves on Windows like everywhere else: Start at Login writes a Startup-folder entry, self-update resolves the windows-<arch>.msi asset and launches the verified installer (per-user, fixed UpgradeCode so it upgrades in place), the tray glyph follows the Windows taskbar theme, and the installed-binary lookup knows the Windows jpackage layout. build-windows.ps1 gains the missing Maven wrapper and runs in GitHub Actions per release using the release assets (no Docker, no Windows hardware), attaching the msi to the release; sign-windows-asset.sh (private ci repo) folds its checksum into the signed manifest so Windows self-updates stay inside the pinned-key trust chain. Command transitions on Windows need a bash on PATH (Git Bash); MCP-first usage does not.

• Desktop: LLM provider settings in Studio (agentic-net-desktop, gui). The Settings page gains a "Desktop LLM" card (visible only under Desktop Lite): provider (disabled/Ollama/Claude), Ollama base URL, default + low/medium/high/thinking tier models, and the Anthropic key (stored 0600 in desktop.properties, returned masked, blank never wipes it). Saving goes through a new launcher-served loopback API (/desktop-api/llm-settings, gateway-JWT-authenticated, DNS-rebind-guarded) that rewrites desktop.properties comments-preserved and restarts just the master child (~10s) with the new environment — no file editing, no full-stack restart. The tray gains "LLM Settings" deep-linking into the authenticated Studio settings page.

• Desktop: Linux menu entry + Start at Login (agentic-net-desktop). First launch inside a Linux desktop session installs a per-user application-menu entry with the brand-glyph icon (packages stay free of xdg postinst hooks, so headless installs keep configuring cleanly), and the tray gains a "Start at Login" toggle — XDG autostart on Linux, a LaunchAgent on macOS.

• Desktop: one-click Studio login, signed updates, notarization hooks (agentic-net-desktop, SECURITY.md). "Open Studio" now signs the user in automatically: the tray mints a single-use 60-second link, the built-in Studio server exchanges the admin secret for a JWT entirely server-side (the secret never reaches the browser) and seeds the GUI's own session storage — no more copying the admin secret; replayed, forged and DNS-rebound requests are refused, and the desktop gateway issues day-long tokens so Studio stays signed in. Release checksums now carry a detached Ed25519 signature verified against a key pinned in the launcher and the clone-and-build scripts (published in SECURITY.md): the self-updater and release-asset fetchers refuse unsigned or tampered releases, so a compromised download channel can no longer feed updates to existing installs. build-desktop.sh gains Developer ID signing + notarytool/stapler hooks (AGENTICOS_MAC_SIGN_IDENTITY, AGENTICOS_NOTARY_PROFILE) that activate when the credentials exist, and the macOS update applier verifies the staged app's code signature before swapping.

• AgenticNetOS Desktop Lite (agentic-net-desktop, open launcher scaffolding under BSL). One installer provides Studio and a tray-supervised local runtime on bundled Java/Node runtimes, with no Docker or host runtime installation. It starts the file-backed encrypted vault, node, deterministic master, gateway, one direct-mode executor, and the Streamable HTTP MCP server in health-gated order; partial startup is rolled back. Studio is served at :4200 with the same gateway proxy paths as production. Every listener is fixed to loopback, settings and generated tokens are user-only on POSIX, and state under ~/.agenticos/ survives updates. This is explicitly the quick local creator/operator profile, not the recommended production deployment.

  • MCP-first, no server model required. A fresh profile sets llm.provider=disabled. Newly deployed llm/agent lanes then inherit external execution automatically unless an explicit transition/net/session/model policy overrides it. Master still owns token binding/consumption, inscriptions, schedules, policy, accounting, and the event trail while Codex, Claude, or another connected MCP model performs the reasoning. MCP health/readiness treats DISABLED as an intentional capability mode, not an outage. The tray copies ready Codex config.toml, Claude Code, or generic MCP endpoint credentials; server-side Ollama/Claude remains an advanced opt-in.
  • Packaging and updates. macOS .dmg and Linux .deb/.rpm packages cover x64/arm64; the Windows script produces MSI with WiX or an app-image without it. Clone builds resolve closed node/master/GUI artifacts from private source, then checksum-verified release assets, then Docker Hub only as fallback. The tray downloads only assets listed in SHA256SUMS.txt; macOS updates stage and validate a new app before a transactional swap with rollback, while Linux copies the correct apt/dnf command because root is required.
  • Release integrity. Real publication requires clean source trees whose heads match the release tag. A BUILD_PROVENANCE.txt records the core, public, and CI commits plus every staged component hash; --skip-builds refuses a different version, commit, or artifact. The desktop launcher is now part of the public Java CI matrix. Signing/notarization and a published Windows build remain release-infrastructure work.

• Self-contained credential backend — the vault no longer needs OpenBao (agentic-net-vault — new service/CredentialStore.java seam with service/FileCredentialStore.java, config/VaultProperties.java, application.properties). VAULT_BACKEND=file switches the vault from the external OpenBao server to AES-256-GCM encrypted local files (one per {modelId}/{transitionId}, key auto-generated 0600 under ~/.agenticos/vault/, paths overridable via VAULT_FILE_PATH / VAULT_FILE_KEY_FILE). The REST contract and metadata shape are unchanged, so the master works against either backend without modification. Built for the desktop/light install where a secrets server is one moving part too many. Properties: the model/transition ids are bound into the ciphertext as AAD, so an envelope copied between transitions refuses to decrypt; reads fail closed (502) on a wrong key or corrupt file instead of reporting "not found"; versions increment per write like KV2. Default backend remains openbao — existing deployments are untouched.

• MCP HTTP transport is supervisable (agentic-net-mcp — bin/agenticnets-mcp.ts, src/config.ts). Three small gaps that mattered once a desktop launcher supervises the process: AGENTICOS_MCP_HTTP_HOST chooses the bind interface (default stays 0.0.0.0 for compose; a desktop bundle sets 127.0.0.1 so the endpoint is not LAN-reachable), GET /health answers 200 {"status":"ok"} before the bearer check (content-free liveness for healthchecks — previously the server had no probe at all), and a failed listen (port in use) now logs a clear one-liner and exits instead of dying with an uncaught stack. SIGTERM/SIGINT close the server gracefully with a 3s drain cap.

---

AgenticNetOS Desktop Lite

The fast local creator/operator profile: node, deterministic master, gateway,
executor, encrypted local credential vault (no OpenBao), MCP endpoint, and
Studio — supervised by a tray app on bundled Java/Node runtimes. No Docker,
host Java/Node installation, API key, or server-side LLM is required. Connect
an MCP client and let its model build, schedule, inspect, and execute nets.
This loopback-only profile is not the recommended production deployment.

macOS: open the .dmg, accept the license, drag AgenticNetOS to Applications.
First launch of this unsigned build: right-click the app and choose "Open", or allow
it under System Settings → Privacy & Security → "Open Anyway". Verify the download
against SHA256SUMS.txt first.

Linux (Debian/Ubuntu): sudo apt install ./AgenticNetOS-<version>-linux-<arch>.deb,
then run /opt/agenticnetos/bin/AgenticNetOS. An
.rpm is provided for Fedora/RHEL. On servers without a desktop the app runs headless;
the tray is optional.

Windows: not yet published — planned.

Build it yourself: agentic-net-desktop/scripts/build.sh (or build-windows.ps1)
in the repository bundles an installer for your machine from this release's
standalone binaries (agentic-net-node-*.jar, agentic-net-master-*.jar,
agentic-net-gui-*.zip below — EULA applies), no Docker needed.

Connect an MCP client: the tray copies a ready Codex config.toml block,
Claude Code command, or generic MCP URL + bearer token. Studio: tray menu →
"Open Studio" (login secret is one click away under "Copy Studio Admin Secret").
Server-run AI lanes can be enabled later, but fresh installs use
llm.provider=disabled, so new AI lanes default to MCP external fires and need
no server model.

Data lives in ~/.agenticos/ and survives updates. The bundled node, master and
gui binaries are covered by the EULA shown at install (also in the app dir);
everything else is BSL 1.1.