Skip to content

bolt.gives v3.4.2

Latest
Latest

Choose a tag to compare

View all tags
@embire2 embire2 released this 31 Jul 13:54
v3.4.2
82baff9

bolt.gives v3.4.2

This release isolates project history by authenticated profile, completes the server-side Stripe account-upgrade path, and changes hosted FREE metering so 100 Agent tokens provide approximately 30 minutes of active coding each GMT+2 day.

Highlights

  • Project history, import, export, rename, duplicate, and direct-load operations are scoped to the signed-in profile. Guest projects remain isolated from authenticated accounts.
  • Account upgrades now create a secure server-side Stripe subscription Checkout session. Signed webhooks activate the 10,000-token monthly Custom Domain entitlement.
  • Upgrade buttons use the application's double-submit CSRF transport; live alpha E2E confirmed the authenticated flow reaches Stripe-hosted Checkout instead of looping back to Chat or failing with 403.
  • FREE usage is charged by active agent runtime rather than raw provider tokens, with a 30-minute daily target and an explicit limit modal.
  • Ubuntu/Linux installation now generates independent service secrets, protects the runtime environment, and supports the account billing defaults without embedding Stripe credentials.
  • Private Desktop clients are available for Linux and Windows. They connect to the hosted service, retain the same profile and 100-token FREE allowance, and contain no bundled operator or provider secrets.

Install on Ubuntu/Linux

Run as a normal sudo-capable user, not as root:

curl -fsSL https://raw.githubusercontent.com/embire2/bolt.gives/v3.4.2/install.sh -o install-bolt-gives.sh
chmod +x install-bolt-gives.sh
BRANCH=v3.4.2 ./install-bolt-gives.sh

Desktop downloads

  • bolt.gives-Desktop-3.4.2-x86_64.AppImage
  • bolt.gives-Desktop-3.4.2-amd64.deb
  • bolt.gives-Desktop-Setup-3.4.2-x64.exe
  • bolt.gives-Desktop-3.4.2-SHA256SUMS.txt

Desktop binaries are closed-source, distributed under an all-rights-reserved license, and currently unsigned. Linux packages were launch-smoked; the Windows installer was package-validated but not runtime-tested on Windows.

Verification

  • Typecheck, lint, module boundaries, installer smoke, and production build passed.
  • 1,080 tests passed; 3 skipped.
  • GitHub reports zero open secret-scanning alerts, and configured production secrets do not appear in the release tree.
Assets 3
Loading