TaskWraith 1.8.2

TaskWraith 1.8.2

TaskWraith 1.8.2 hardens the workbench's execution core: Kimi Code moves to a
contained ACP transport by default, scheduled workflows gain end-to-end
occurrence authority, and the iPhone/iPad companion can now operate workflows
directly.

Highlights

• Kimi Code runs through a contained ACP transport — now the default.
  Sessions run in an isolated provider home while TaskWraith holds workspace
  file authority through its brokered read/write/edit tools, with per-tool
  approvals matching the stdio providers and the TaskWraith gateway MCP served
  over HTTP. Setup copy is transport-aware, per-run thinking flows through ACP
  configuration, and the usage meter reads the Kimi Code OAuth credential —
  refresh-token rotation persists back to the CLI home so later logins stay
  valid.
• Kimi Code HighSpeed. Kimi K2.7 Code offers Standard and HighSpeed tiers
  through the familiar Fast control across solo, Ensemble, queued, and remote
  runs.
• Workflow controls from the iPhone/iPad companion. Scheduled workflows can
  be paused, resumed, or run immediately from iOS, with every write action
  authorized against the host's native consent and authority checks.
• Scheduled workflow occurrences dispatch exactly once. Occurrence
  lifecycles are transacted with single-owner claims, journaled transitions,
  and bounded retries; launches fail closed when preflight, admission, lease,
  or provider authority cannot be established.
• Usage and presentation. Usage surfaces show the provider's detected
  account plan, the sidebar usage card gets a calmer bounded-glass treatment,
  and provider colours are contrast-balanced across light and dark on desktop
  and iOS — including upstream-brand overrides for Ollama-hosted models.

Reliability and safety

• Transcript navigation keeps the reader's place across chat switches, popouts,
  and remounts; expanded Ensemble rounds stay expanded per chat; explicit input
  owns scroll-away while live follow survives layout clamps. Fan-out activity
  stays in one first-anchored viewport and directed steers stay
  single-recipient.
• Multiview lifecycle state stays with its pane and chat; concurrent chat saves
  are serialized and revision-aware; queued chat updates survive hydration;
  only persisted due tasks dispatch; scheduled Ensemble rounds reserve fresh
  state; workspace execution targets stay pinned from startup.
• Transcript media and attachments keep durable ownership — atomic grant
  batches (forks and AV outputs included), fail-safe ledger locking, file-based
  large-asset ingestion, and asynchronous staging.
• iOS: the type-out reveal drains fully on stream exit, scoped to its run; the
  composer diff pill avoids a first-frame layout livelock; app notices stay in
  First Launch.
• Provider edge cases: Grok recovers denied tools without weakening Read-Only,
  Kimi speed tiers resolve through CLI aliases, Codex reasoning controls stay
  pinned to the dispatched run, and Codex session/weekly quota windows keep the
  right labels. Sandboxed packaged builds keep their capability handoff and
  boot cleanly.
• Security: run authority is reconstructed from canonical state rather than
  renderer payloads; built-in Git actions treat repository configuration as
  untrusted; native provider file/shell tools stay brokered; remote favicon
  fetches are pinned and bounded; the Kimi Code contained transport is
  deny-walled (no network tools, no server-side filesystem/exec tools,
  fail-closed generation gate, no project-config code execution at session
  start); scheduled and unattended workflow authority is native-owned with an
  authenticated occurrence WAL, persisted elevation revocations, and
  whitelisted runnable template fields.

See CHANGELOG.md in the tagged source for the complete public notes.

Artifact record

• Tag / commit: v1.8.2 → 6820393a (macOS artifacts built from this commit;
  169 commits of work ahead of v1.8.1; the iOS build-number bump follows on
  as c7bc0f0a7).
• macOS: notarized universal .dmg + .zip (Developer ID Application:
  Christopher Izatt, 8CZML8FK2D). DMG notarization submission
  fe916a93-4a6b-4a0c-aacd-bc8b43558e0e (Accepted); stapled and verified with
  spctl (source=Notarized Developer ID) + stapler. latest-mac.yml
  published for stable-channel auto-update.
  • SHA-256 .dmg: 84ec7e88cb2a5cdfb7f898ee76f493ffb703decb8b707194db69032fc0229a00
  • SHA-256 .zip: 8e29cdd8f2c1d484ec2e5e6bf2b5664037763c55117df9f22d95ccc4edd58cff
• iOS/TestFlight: 0.1.0 (77) uploaded to App Store Connect, delivery UUID
  f386601b-8e6a-4d49-8e47-e1cc1faab965 (processing).
• Windows/Linux: attached via CI workflow dispatch after this release
  (unsigned x64/arm64 setup.exe; Linux AppImage + .deb).
• Source verification: whole suite green before bump — 945 files / 11,743
  tests; iOS Kit swift test 414; swift bridge 88; validate:release all
  steps.