The first release cut from the public repository.
Two fixes about the client describing itself accurately, and two about it not breaking quietly.
The receipt no longer claims Vinci billed a turn it did not. Every receipt ended with "Billed total in Platform." — including turns run entirely on your own provider key, where the credential never reaches us and neither does the charge. The line now follows the provider that actually served the turn, and says nothing when none was recorded.
The header no longer says "signed in" after you sign out. /logout removed the credential while the header and the composer badge went on reporting a connection, directly above the authentication picker. That badge is how you tell a managed turn from one on your own key.
A guard-blocked run is no longer recorded as a read-only success. When the command guard stopped a destructive shell command, the outcome record still said DONE and described it as "the requested read-only task completed without project changes". The run had accomplished nothing.
The installer refuses a VINCI_BIN_DIR inside VINCI_HOME. That combination made the launcher a symlink to itself, and every later vinci call failed with "too many levels of symbolic links" — an error naming neither path.
Install
curl -fsSL https://vinci.getsimpledirect.com/install | shThe installer verifies a signed manifest before unpacking. If you would rather check by hand, the artifact attached here is byte-identical to the one the installer fetches:
sha256 852dbb71a44f0300e89bc2f3f32cfaef8a780c5bc78cc16f44d461b6ad75b10d
size 50428931
source https://vinci-assets.s3.ca-central-1.amazonaws.com/vinci-code/vinci-code-0.0.50.tgz
Signing happens in a private repository, so the release is cut there and mirrored here. The attached tarball was downloaded from the published URL and its checksum compared against the signed manifest before upload.