AgenticNetOS 2.39.0

Hardening wave driven by a field report from an MCP client that built a real
scheduled data pipeline: everything below removes a way the platform could
mislead or endanger unattended work.

Added

• Desktop Lite MCP is focused by default (agentic-net-desktop, agentic-net-mcp). The bundled server registers the curated lowercase product surface instead of also exposing the full native uppercase catalog; standalone/server deployments remain backward-compatible with all, and advanced Desktop users can opt back in with AGENTICOS_NATIVE_TOOLS=all.
• Batch authoring and cleanup tools (agentic-net-mcp). add_transitions creates similar lanes sequentially with explicit per-item partial-success results, while delete_tokens requires an ArcQL query, caps a run at 100 tokens, and reports every matched/deleted id.
• Bounded FOREACH batches (agentic-net-mcp, agentic-net-executor). add_transition(mode:"FOREACH", batchSize:n) writes LIMIT n plus take:ALL, reports the exact per-fire semantics, and the command executor now runs once per bound driver token instead of discarding all but the first.
• Scheduler and HTTP guidance for model-free MCP operation (agentic-net-mcp). The connected model is taught fail-closed scheduling, IANA cron timezones, armed-vs-fired telemetry, stopped schedules, safe smoke fires, raw response.text/diagnostic response.meta, and CSV processing recipes.

Changed

• fire_once safely tests running deterministic lanes (agentic-net-mcp). It defaults preserveRunning:true, so a connected Claude/Codex session no longer needs the risky stop/fire/start sequence; lifecycle is unchanged, although the action's own side effects still happen.
• Scheduler status explains unattended work (agentic-net-mcp). It passes through timezone, local next-fire time, honest fire/outcome timestamps and counters, headlines stopped and invalid schedules, and keeps intentional stops as readiness warnings rather than declaring the whole installation unusable.
• Large nested token values truncate structurally (agentic-net-mcp). JSON values that exceed preview limits become a parseable __truncated__ object with byte count and preview instead of a broken JSON fragment.

Fixed

• preserveRunning actually reaches the master (agentic-net-cli). MasterApi.fireOnce and the agent FIRE_ONCE tool now forward the flag (and advertise it in the native tool schema); previously the MCP's default lifecycle-safe smoke test silently degraded to the legacy 409-while-running because the CLI dropped the parameter.
• One Desktop executor discovers and serves every model (agentic-net-executor, agentic-net-desktop). Wildcard model discovery polls continuously, status distinguishes READY/STANDBY/UNAVAILABLE, and MCP describes STANDBY as command-capable capacity rather than a failure—so a model created after startup does not silently lose command transitions.
• Per-model protocol journals and MCP duties are discoverable (agentic-net-mcp, agentic-net-desktop). Connected sessions are explicitly told to service external LLM/agent fires, choose a fresh model for a substantial domain, use local headless command lanes where appropriate, and write/read structured protocol entries that open from the tray.

---

AgenticNetOS Desktop Lite

The fast local creator/operator profile: node, deterministic master, gateway,
executor, encrypted local credential vault (no OpenBao), MCP endpoint, and
Studio — supervised by a tray app on bundled Java/Node runtimes. No Docker,
host Java/Node installation, API key, or server-side LLM is required. Connect
an MCP client and let its model build, schedule, inspect, and execute nets.
This loopback-only profile is not the recommended production deployment.

macOS: open the .dmg, accept the license, drag AgenticNetOS to Applications.
First launch of this unsigned build: right-click the app and choose "Open", or allow
it under System Settings → Privacy & Security → "Open Anyway". Verify the download
against SHA256SUMS.txt first.

Linux (Debian/Ubuntu): sudo apt install ./AgenticNetOS-<version>-linux-<arch>.deb,
then run /opt/agenticnetos/bin/AgenticNetOS. An
.rpm is provided for Fedora/RHEL. On servers without a desktop the app runs headless;
the tray is optional.

Windows: not yet published — planned.

Build it yourself: agentic-net-desktop/scripts/build.sh (or build-windows.ps1)
in the repository bundles an installer for your machine from this release's
standalone binaries (agentic-net-node-*.jar, agentic-net-master-*.jar,
agentic-net-gui-*.zip below — EULA applies), no Docker needed.

Connect an MCP client: the tray copies a ready Codex config.toml block,
Claude Code command, or generic MCP URL + bearer token. Studio: tray menu →
"Open Studio" (login secret is one click away under "Copy Studio Admin Secret").
Server-run AI lanes can be enabled later, but fresh installs use
llm.provider=disabled, so new AI lanes default to MCP external fires and need
no server model.

Data lives in ~/.agenticos/ and survives updates. The bundled node, master and
gui binaries are covered by the EULA shown at install (also in the app dir);
everything else is BSL 1.1.