Skip to content

Backpack Runtime v0.2.0-alpha.6

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Sep 15:26
· 3 commits to main since this release
v0.2.0-alpha.6
22c214c

Backpack Runtime v0.2.0-alpha.6

This prerelease hardens Cloud coding-agent tool execution on Windows. Agent
launch, Cloud, and desktop compatibility remain experimental.

Install

Windows x64:

irm https://backpack.run/install.ps1 | iex

Linux x64 and macOS arm64 preview:

curl -fsSL https://backpack.run/install.sh | sh

Existing prerelease installations can update with:

backpack update --prerelease

Highlights

  • Bounds coding-agent output reservations to one quarter of the advertised
    context, capped at 8192 tokens, preserving input space for instructions,
    tool schemas, history, and tool results.
  • Enforces that output ceiling in the authenticated Anthropic Messages proxy,
    preventing stale clients from requesting an impossible output allocation.
  • Uses OpenAI Codex's documented per-launch windows.sandbox="unelevated"
    fallback on native Windows when current Codex elevated-sandbox setup fails.
    The override does not modify the user's Codex configuration.
  • Passes real Qwen3-Coder 30B A3B Cloud tool loops with installed Codex and
    Claude Code binaries on Windows.
  • Continues deriving model context from the live Cloud catalog. The worker is
    qualified at 262,144 tokens, while production currently advertises 32,768;
    Runtime will adopt 262,144 automatically when that catalog is promoted.

Security note

The Codex unelevated Windows sandbox retains ACL-based filesystem restrictions
but has weaker user and network isolation than Codex's preferred elevated
sandbox. Backpack prints this warning at launch. Agent permission and approval
controls remain active, and Backpack never adds permission-bypass flags.

Known limitations

  • Backpack Cloud is a private alpha and requires an entitled account.
  • Agent launch and desktop-app routing remain experimental.
  • OpenCode and both desktop-app paths require broader real-application
    qualification.
  • The public Cloud catalog remains authoritative; production continues to
    advertise 32,768 tokens until the pending control-plane deployment occurs.
  • Windows amd64 is the supported alpha platform. Linux amd64 and macOS arm64
    remain previews.

Include sanitized backpack doctor --json output in bug reports. Report
vulnerabilities privately through GitHub Security Advisories.

Assets 6
Loading