v0.12.0

TX9 v0.12.0

A reliability, performance, and usability release for Docker agent boxes.

Highlights

• Faster log queries: choose the requested tail before redaction and avoid
  needless grep serialization. A controlled 25,000-event fixture improved
  from 6.91 seconds to 0.31 seconds.
• Safer pause, gateway disable, and custom-service reloads: startup and stop
  share locks, queued starters recheck policy, and failed stops cannot launch
  duplicate workers.
• More reliable backups and restores: preserve existing files, clean only
  newly created partial output, recover failed backup pauses, and reuse
  successful archive parent validation.
• Fresh Hermes installs use a verified stable installer and matching source
  pin. Browser replacements pass staged navigation checks first; broken
  Executor launchers can be repaired.
• Cached image asset refreshes avoid copying unchanged Hermes environments:
  the measured layer fell from 1.74 GB to 34.4 MB.
• Linux release executables are static, including the native AMD64 build,
  and run on musl-based hosts.

Other fixes

• Correct command help exit codes, literal flag separators, missing values,
  extra arguments, early create validation, and image-tag pruning.
• Preserve immutable images and inspected running state during mount changes;
  validate access across combined supplemental groups.
• Preserve long state values and whitespace, and wait for final Docker exec
  status after output closes.
• Keep rotated-only log histories, correct Python-style and short-offset
  timestamps, handle malformed values, and prevent FIFO log destinations
  from hanging capture.
• Preserve existing MCP configuration when prerequisites fail, persist
  credentials privately and literally, and avoid unnecessary rewiring.
• Inspect active Hermes state without counting backups/caches repeatedly;
  support relative browser probe paths and report failed disk measurements
  as unavailable.
• Handle compatible checksum-manifest formats, normalized installer origins,
  oversized update metadata, and stalled requests.

Release site

The included Worker changes add streamed download resumption, correct range
and validator responses, fixed-width accessible copy feedback, and corrected
usage examples. They take effect when the Worker is deployed. Publishing the
CLI release updates GitHub assets and the R2 release pointer; it does not
itself deploy the Worker.

Updating

Run tx9 upgrade to update the host CLI. Run tx9 upgrade <box> to rebuild
and recreate a selected box with the new embedded guest assets. Existing
portable data remains on its volume; the upgrade is an explicit operation.

Hermes fresh provisioning is pinned to published stable v2026.9.24. Existing
usable installs are retained. A separately invoked upstream hermes update
can adopt its newer package-manager architecture; that migration was not
validated in this release pass.

Validation

The release pass includes full project checks, Go race tests, 14 Worker tests,
clean code reviews, a default Hermes-enabled Linux AMD64 image build, and
real encrypted backup/restore plus custom-service pause/resume. All four
release platforms cross-compile; native Linux also runs on musl.

ARM64/macOS runtime execution, provider-backed messaging, and mobile browser
acceptance remain unverified. See the complete audit
for per-fix evidence and controlled benchmark details.

What's Changed

• BUGFIX: Prepare v0.12.0 reliability and performance release by @bmdavis419 in #37

Full Changelog: v0.11.0...v0.12.0