v0.12.1

TX9 v0.12.1

A patch release for Hermes gateway compatibility, CI reliability, and
release-site development tooling.

Changes

• Recognize Hermes PM's isolated Python gateway bootstrap alongside existing
  console/script entrypoints. Health checks, startup adoption, and stop/disable
  now identify the same child, including one whose supervisor has exited.
  Capture wrappers, command shims, and unrelated Python processes remain excluded.
• Browser cleanup regressions accept Linux missing-process errors when a
  process disappears while its /proc entry is being read. Gateway fixtures
  also clean unrecorded detached children after failures or interruption.
• Patch Miniflare's development-only Sharp dependency to 0.35.5 for
  CVE-2026-96889.
  The scoped override keeps the existing Wrangler and Miniflare versions and
  restores the release's required dependency-audit gate.

Updating

Run tx9 upgrade for the host CLI and tx9 upgrade <box> for each selected
box. The gateway helper ships in the embedded guest assets and takes effect
when the box is rebuilt/upgraded. Box upgrades start the recreated container
and retain portable volumes; preserve custom image-owned Hermes checkouts
and launchers before upgrading.

A checked version bump merged to main publishes the matching tag, binaries,
and checksums through the existing release workflow. Worker deployment
remains a separate operation.

Validation

Full make check and the Node 24 site gates passed, including all 14 Worker
API tests and a clean dependency audit. The patched native Sharp API passed
an SVG-to-PNG resize check. All four release targets build with CGO disabled;
Linux AMD64 reports 0.12.1, and every binary embeds the reviewed gateway helper
and existing provisioning pins.

What's Changed

• BUGFIX: Recognize isolated Hermes gateway bootstraps by @bmdavis419 in #39
• BUGFIX: Prepare v0.12.1 Hermes compatibility release by @bmdavis419 in #38

Full Changelog: v0.12.0...v0.12.1

v0.12.0

TX9 v0.12.0

A reliability, performance, and usability release for Docker agent boxes.

Highlights

• Faster log queries: choose the requested tail before redaction and avoid
  needless grep serialization. A controlled 25,000-event fixture improved
  from 6.91 seconds to 0.31 seconds.
• Safer pause, gateway disable, and custom-service reloads: startup and stop
  share locks, queued starters recheck policy, and failed stops cannot launch
  duplicate workers.
• More reliable backups and restores: preserve existing files, clean only
  newly created partial output, recover failed backup pauses, and reuse
  successful archive parent validation.
• Fresh Hermes installs use a verified stable installer and matching source
  pin. Browser replacements pass staged navigation checks first; broken
  Executor launchers can be repaired.
• Cached image asset refreshes avoid copying unchanged Hermes environments:
  the measured layer fell from 1.74 GB to 34.4 MB.
• Linux release executables are static, including the native AMD64 build,
  and run on musl-based hosts.

Other fixes

• Correct command help exit codes, literal flag separators, missing values,
  extra arguments, early create validation, and image-tag pruning.
• Preserve immutable images and inspected running state during mount changes;
  validate access across combined supplemental groups.
• Preserve long state values and whitespace, and wait for final Docker exec
  status after output closes.
• Keep rotated-only log histories, correct Python-style and short-offset
  timestamps, handle malformed values, and prevent FIFO log destinations
  from hanging capture.
• Preserve existing MCP configuration when prerequisites fail, persist
  credentials privately and literally, and avoid unnecessary rewiring.
• Inspect active Hermes state without counting backups/caches repeatedly;
  support relative browser probe paths and report failed disk measurements
  as unavailable.
• Handle compatible checksum-manifest formats, normalized installer origins,
  oversized update metadata, and stalled requests.

Release site

The included Worker changes add streamed download resumption, correct range
and validator responses, fixed-width accessible copy feedback, and corrected
usage examples. They take effect when the Worker is deployed. Publishing the
CLI release updates GitHub assets and the R2 release pointer; it does not
itself deploy the Worker.

Updating

Run tx9 upgrade to update the host CLI. Run tx9 upgrade <box> to rebuild
and recreate a selected box with the new embedded guest assets. Existing
portable data remains on its volume; the upgrade is an explicit operation.

Hermes fresh provisioning is pinned to published stable v2026.9.24. Existing
usable installs are retained. A separately invoked upstream hermes update
can adopt its newer package-manager architecture; that migration was not
validated in this release pass.

Validation

The release pass includes full project checks, Go race tests, 14 Worker tests,
clean code reviews, a default Hermes-enabled Linux AMD64 image build, and
real encrypted backup/restore plus custom-service pause/resume. All four
release platforms cross-compile; native Linux also runs on musl.

ARM64/macOS runtime execution, provider-backed messaging, and mobile browser
acceptance remain unverified. See the complete audit
for per-fix evidence and controlled benchmark details.

What's Changed

• BUGFIX: Prepare v0.12.0 reliability and performance release by @bmdavis419 in #37

Full Changelog: v0.11.0...v0.12.0

v0.11.0

What's Changed

• feat(browser): install image-owned Chromium for Hermes by @bmdavis419 in #36

Full Changelog: v0.10.1...v0.11.0

v0.10.1

What's Changed

• fix(selfupdate): bound the binary download by stall, not wall clock by @bmdavis419 in #34
• test: give the parent-death check ten seconds and dump the survivor by @bmdavis419 in #35

Full Changelog: v0.10.0...v0.10.1

v0.10.0

What's Changed

• Set up Cursor Cloud dev environment for tx9 by @bmdavis419 in #26
• BUGFIX: close credential, archive, and Docker lifecycle safety gaps by @bmdavis419 in #28
• BUGFIX: preserve runtime state and reduce repeated Docker and log work by @bmdavis419 in #29
• BUGFIX: validate release API requests and honor download cache validators by @bmdavis419 in #30
• CHORE: refresh dependencies and harden check and release tooling by @bmdavis419 in #31
• DOCS: record audit findings, validation, and remaining product decisions by @bmdavis419 in #32
• fix: install Hermes [messaging] extra as an editable install by @bmdavis419 in #33

Full Changelog: v0.9.0...v0.10.0

v0.9.0

What's Changed

• fix: recover Hermes from stale nested tx9-logs mirror FDs by @bmdavis419 in #27

Full Changelog: v0.8.0...v0.9.0

v0.8.0

What's Changed

• feat: supervise portable custom box services by @bmdavis419 in #25

Full Changelog: v0.7.0...v0.8.0

v0.7.0

What's Changed

• fix: cut log noise and add severity-based searching by @bmdavis419 in #23

Full Changelog: v0.6.0...v0.7.0

v0.6.0

What's Changed

• Add box observability and resource controls by @bmdavis419 in #22

Full Changelog: v0.5.0...v0.6.0

v0.5.0

What's Changed

• fix: support noninteractive Hermes runtime by @bmdavis419 in #21
• feat: add persistent agent host mounts by @bmdavis419 in #20

Full Changelog: v0.4.0...v0.5.0