Colonizer v0.2.22

Colonizer v0.2.22

What's new

• A colony, or a bench run, can run entirely on Pi. POST /api/sessions takes agent_module to run one colony on a named agent module (pi, opencode, claude-code, …) whatever the org's pick, refused with 400 unknown_agent when no install has it. With agent_module: pi and a Claude model in model_override, Pi runs on the colony's Claude account (the stored subscription token or key, reachable only at api.anthropic.com). The cockpit's agent/model menu chooses the agent and model for new colonies, lists only the models the owner enabled in Settings → Models (PUT /api/models/enabled), and sends the chosen Claude account, and node scripts/bench.mjs run --agent pi --model claude-opus-5-5 --claude-account <name> launches a bench on it, tagged with the agent that ran it. Harness-side summaries, the shadow review and the autonomy judge still use the install's models (#403)
• The cockpit now shows why queued colonies wait when the host has capacity. New /api/status.queue
• DNS rebinding protection for webhook and subscription deliveries. A webhook address pointing at a public-looking domain name no longer opens the mothership to DNS rebinding attacks, where the name answers with the checked public address at validation time but rebinds to 127.0.0.1 or another private address when the connection is made. This required two changes: a pinned DNS resolver enforces that every address a domain resolves to remains public or allowlisted across the full request lifetime; and owner-created webhooks and subscriptions (not scoped-token-limited ones) can point to private addresses on allowlisted hostnames. The redirect policy's per-hop lookup keeps its existing check as a second layer (#1377)
• Issue intake scans with the PromptDecode engine, not only the in-repository scanner. Before auto mode queues an issue, its title, body and trusted comments are read by promptdecode-core 0.1.0 (crates.io, MIT OR Apache-2.0), which now also catches variation-selector payloads. The in-repository scanner still covers zero-width runs, HTML comments and base64 payloads, which the engine does not. Each scan records every engine that ran, and if the engine fails on a text, the in-repository scanner reads it instead and the scan says so. Nothing is stripped: a finding still holds the issue for review with its decoded text shown. (#1485)
• Security runs: Strix can be a red-team hunter, and Shannon and Strix always run the security preset. A red-team run can name Strix, which drives its pinned PyPI wheel in one colony against the repository and an optional https staging host the owner declares; its SARIF report is filed as findings. Strix needs a Docker daemon for its sandbox and colonies have none yet, so its start is refused with that reason, shown on its card in the wizard. Shannon and Strix are security scanners: the wizard hides the security/bugs choice for them, an unset preset means security, and "preset": "general" is refused with a message saying why. (#1487)

Prebuilt Colonizer for Linux x86_64 (with KVM) and Apple Silicon Macs, built from 96c55bf.

curl -fsSL https://colonizer.dev/install.sh | sh

The installer checks the archive against SHA256SUMS. It fetches the Claude Agent SDK from the npm registry, and on a Mac the Linux build of Claude Code, from Anthropic's own channels: neither is in the release. Guide: https://colonizer.dev/docs/install

Each artifact, SHA256SUMS included, also carries a build-provenance attestation recording the commit that built it. Verify one with:

gh attestation verify colonizer-<platform>.tar.gz --repo Colonizer-dev/harness

Here is linux-x86_64 or darwin-arm64.

The observability add-on rides along as colonizer-observability-.tar.gz for the same platforms; the installer puts it beside the colonizer binary, and the checksums and the attestation above cover it too.

Apple Silicon Macs can also use Colonizer-arm64.dmg: an unsigned app, so macOS asks you to approve it once (System Settings > Privacy & Security > Open Anyway). The curl installer above is the recommended path.

6efec9aaa680b7b8b64f76992d8b3ab895f69b8fbfeb92187ddf15f463190216  colonizer-darwin-arm64.tar.gz
759fb31a43ef28cc49d692c438a511336a3555e05b3022233f27778910c13a27  colonizer-linux-x86_64.tar.gz
3e474f1d4951c5512aed6cd4dc1783540383088628d746918bad468657163afa  colonizer-observability-darwin-arm64.tar.gz
1c33e7c8c0057b7ae02449ee0ded983269e5f1cc2688ee931d70bbdfcc16890c  colonizer-observability-linux-x86_64.tar.gz
87a608949f5d7a3115da990d2c91555f78df0cf8a10635be1e02a3baf684416b  Colonizer-arm64.dmg
a65be2043bbd94aa8d5e1e122113ae3d3945120bf4b2771fc300298a06e60f4e  install.sh