v0.1.32

KodaX Space v0.1.32

Added

• F121 released-action daemon adaptation - Completed the v0.1.31 Coder action inventory and explicit v0.1.32 owner classification. Shared daemon routes now cover session live/history/mutations, settings convergence, queue, AskUser, revisioned permission grants, Workflow observation/control, Learning Center commands, bounded Skill/slash catalogs, MCP tool discovery/reload, and Runtime-configured External Agent Actor/Turns; remaining Space product responsibilities stay explicit host-provider routes.
• F122 Project Source Library and incremental ingestion - Added a durable project-scoped source catalog with stable logical identities and immutable versions, backed-up v1-to-v2 migration, file and directory ingestion, bounded PDF/DOCX/PPTX/XLSX structured extraction, per-project FTS5 indexing, explicit Available/Selected/Used state, refresh/retry/rename recovery, cancellation safety, and storage-budget enforcement.
• F123 stable evidence citations - Added content-bound citation IDs, immutable evidence snapshots, durable citation and trace metadata independent of the rebuildable index, truthful page/slide/sheet/paragraph/line locators, current/stale/missing access decisions, and an accessible evidence-detail surface that never redirects an old citation to mutable content.
• F124 Partner Context Broker - Added Partner-only automatic grounded recall over permitted project material and accepted project knowledge with project-grounded, selected-only, and general scopes, exact selected/used/version traces, bounded evidence packs, prompt-injection delimiters, conflict and unavailable-retrieval notices, and independent rollback gates without routing Partner through the Coder daemon.
• Runtime-issued exact permission grants - Coder permission prompts now surface Allow always only when KodaX supplies a safe concrete grant suggestion. Space preserves the opaque suggestion ID, presents only a redacted label, and never expands it into a broad shell, tool, or session rule.
• Reliable attachment projection - The visible transcript keeps file links while Coder receives Electron-validated native absolute paths; pasted-image artifacts now carry the final normalized media type so mixed clipboard and picker images remain valid multimodal input.
• F135 vetted Space builtin skills - Ships frontend-slides and huashu-design as automatically registered builtin skills outside app.asar, with reproducible upstream revisions, approved license hashes, reviewable Space patches, exact per-file integrity locks, and package-smoke enforcement. Space's ordered Huashu adaptation removes default promotional watermark/signature markup and instructions while preserving the upstream MIT license and authorship; the locally installed pdf, pptx, xlsx, and docx skills remain excluded because their current license does not permit redistribution.
• F136 controllable Windows background Runtime host - Adds a notification-area owner that survives after the last Space window is destroyed, reports bounded Runtime/task/other-client state, reopens a fresh window, closes only the UI, quits Space while preserving Runtime, or requests a safety-gated complete exit.
• Background Session attention projection - Adds accessible waiting indicators, project-level waiting counts, and sidebar prioritization so permission or AskUser requests from background Sessions remain discoverable without consuming or misrouting their durable queue entries.

Changed

• KodaX SDK 0.7.76 baseline - Updated both root and Desktop workspaces to exact @kodax-ai/kodax@0.7.76. The dependency resolves to the npm-published package with official Registry integrity and no developer-machine file: path.
• Shared Coder contract baseline - Requires KodaX 0.7.76, Runtime Auto LLM guardrail v3, permission:grant-admin, unified Actor/Turn, Learning Center, interrupt input, context compaction v3, transcript paging/search, and the released daemon capability surface; missing contracts fail closed rather than selecting a hidden inline Coder owner.
• Truthful split ownership - Updated capability reporting, manuals, and the application kodax_manual self-description for the 0.7.76 boundary: Runtime owns the consumed Coder services and exact grant candidates, while Partner, MCP process/log management, Workflow library/start/admin, Space Reference Agent execution, and product artifacts remain Space host-provider responsibilities.
• Kimi Code direct K3 routing - Consumes the KodaX 0.7.76 provider catalog where kimi-code defaults to the direct k3-256k wire model, K3 reasoning defaults to high, the k3 1M route remains selectable, and both K2.7 Code subscription routes remain available.
• Explicit Auto LLM session settings - Space now uses KodaX's typed resolveAutoModeSettings() resolver for engine, classifier model, timeout, and speculativeWindowMs; it projects missing values into revisioned Runtime settings, preserves another trusted client's explicit value, and exposes bounded timing/terminal-phase diagnostics.
• Official KodaX 0.7.76 Registry synchronization - Reinstalled the npm-published package, pinned its official Registry URL, SRI (sha512-SgMNwa5S…kWzN0lw==), and tarball SHA256 (F247511A…0E299021), and retained the Coder daemon contract at contextCompaction:3, transcriptPaging:1, transcriptSearch:1, interrupt input v1, Actor control v1, and Auto LLM guardrail v3. All 133 published files match the Registry tarball.
• Auditable builtin-skill checkout - Builtin sources now pin exact Git commits and force canonical LF checkout bytes, so Windows core.autocrlf cannot generate a lock that fails on clean Linux/macOS CI.
• Agent mailbox and exact-history capability reporting - Added a distinct runtime.transcript.search Space capability and updated the user/developer manuals, capability ledger, release design, and injected kodax_manual topics. Model wait_agent is documented as mailbox control; Space/SDK progress remains event telemetry and does not imply an Actor capability-version bump.
• Non-empty CLI auto-resume contract - Verified the public findMostRecentResumableSession() REPL export: it scans a bounded 1000-session window, skips empty ACP placeholders, and returns no candidate when every session is empty. Space keeps its own explicit project/session picker and does not create a second Session owner.
• Deterministic Space Auto selector - The desktop selector now displays Auto[LLM] or Auto[RULES] immediately, accepts rapid consecutive changes without dropping them behind a busy gate, and converges to the last user action while retaining Runtime-owned sticky rules fallback.
• Session-scoped human interaction presentation - Permission and AskUser queues stay globally durable, but only the active Session's request is shown as a modal. The current Session and background Sessions awaiting input are prioritized before the sidebar cap; Settings also remains available from both navigation and Files mode.
• Explicit close and exit semantics - On Windows, the title-bar close destroys BrowserWindow/renderer resources while the tray keeps the lightweight Electron main host and daemon client visible. Complete exit disconnects Space before asking Runtime to stop and never force-stops active/queued/pending work or a daemon retained by another client.

Fixed

• Native-free Partner PDF text Workers - Partner source PDF extraction now uses pdfjs's non-rendering parser path instead of eagerly loading the unused @napi-rs/canvas N-API module in every short-lived Worker. Text, page locators, parser limits, and Worker isolation remain unchanged, while Windows full-test jobs no longer risk a native 0xC0000005 during Canvas module unload.
• Project HTML File Viewer first-input readiness - Project previews now capture trusted input inside the preview document until authored classic and module scripts finish initialization, bind the reported state to the exact preview URL, and replace the iframe when the document changes. A visible control can no longer consume its first click before its handler exists, inherit readiness from the preceding document, or lose that click to a lagging cross-process iframe hit-test update; release E2E treats retries as investigation evidence rather than hiding the race.
• Interactive Artifact first-input readiness - Interactive HTML frames now capture trusted input until their authored document finishes parsing, then remove the in-document gate before reporting readiness; ready state and iframe lifetime remain bound to the exact Artifact version. Slow runners can no longer lose the first click between control parsing and handler installation, unlock a new version with a stale message, or race a parent-side pointer-events transition; the Electron journey uses the same explicit readiness contract without arbitrary sleeps.
• Paint-committed preview readiness - Interactive Artifacts and Project HTML previews now retain the trusted-input gate through two child paint frames and publish renderer readiness only after two parent paint frames. Windows out-of-process frames can no longer expose data-ready=true before their interactive hit-test surface is committed, and pending readiness from a replaced document is cancelled.
• Single-click Task Dock opening on narrow windows - The manual right-sidebar toggle now checks the real viewport before selecting its width mode. On a 1024-pixel Windows runner the first click opens a balanced dock instead of choosing the default width and being hidden immediately by responsive layout.
• Clean-build Windows tray icon - Runtime icon generation is now a prerequisite of the shared Electron main build, covering clean development, smoke, E2E, and release builds. A fresh checkout can no longer disable the Windows background tray because ignored generated icon files were absent.
• Windows extraction Worker teardown - A successful PDF or Office extraction now lets its Worker exit naturally before the caller settles, with a bounded termination fallback for a stuck Worker. This removes a Windows native-module teardown race that could crash the unit-test process with 0xC0000005 after every assertion had passed.
• Cross-platform Runtime identity verification - Ubuntu Electron E2E now runs inside an ephemeral D-Bus Secret Service with a real gnome-keyring, so the suite exercises the same fail-closed OS-keychain boundary as production instead of silently running without the shared Coder Runtime. External-agent status also preserves a bounded Runtime diagnostic, and the A2A regression requires successful capability negotiation before inspecting Settings.
• Auto permission semantics - Auto[rules] now allows modeled edits inside the workspace without a confirmation dialog while outside/protected/unmodelled effects remain fail-closed. Auto[LLM] rejects a missing classifier model locally without a Provider request, AskUser prompt, denial/circuit-breaker mutation, or downgrade to rules.
• Published dependency integrity - The 0.7.76 lock entry matches the official npm Registry package and contains no sibling-checkout path; clean Registry-only installation is reproducible.
• Daemon child isolation and admission recovery - The published launcher filters test-runner imports/loaders from daemon child execArgv; normal Space shutdown no longer aborts an accepted daemon run during admission, and transient unhealthy-owner startup windows now reconnect with bounded backoff.
• Stale Runtime behavior after upgrade - Space rejects daemon identities older than 0.7.76 with an actionable restart diagnostic. /auto-denials reports the effective Runtime version, classifier model, timeout, speculative window, and bounded classifier timing facts.
• Multi-client settings race - Auto LLM convergence retries bounded revision conflicts against a fresh Runtime snapshot and cannot overwrite another trusted client's classifier configuration or speculative window.
• No-session file review and attachment MIME mismatch - Project files now use the file-viewer path without synthetic Artifact/session fields, while image persistence returns the canonical media type rather than a stale clipboard MIME label.
• KodaX 0.7.76 Runtime behavior - The final artifact retains idle-yield user-prompt transcript reporting, crash-recoverable root completion delivery, resident Goal lifecycle contracts, root/child live projection isolation, audited Windows non-interactive child-process hiding, and corrected Sidecar optional-follow-up/budget terminal semantics.
• Compaction checkpoint and PowerShell boundary closure - The latest artifact reuses the exact producer checkpoint bytes, including recovery guidance, so the compaction entry, first-kept pointer, and post-compact attachments remain on one active lineage while legacy suffix-free checkpoints still resume. Auto[rules] now escalates PowerShell bracket wildcards on path parameters while preserving exact bracket-bearing filenames supplied through -LiteralPath or -PSPath.
• Final 0.7.74 release-review closures - Continue-most-recent now restores the complete saved interactive state; imperative manual compaction reconciles exact flat Session history into lineage before creating its island; and a failed durable interrupt-delivery event keeps the input queued, rethrows persistence failure, and emits bounded content-free diagnostics.
• Transcript and clipboard correctness - Restored assistant/tool-leading history now uses a non-rendered structural anchor instead of fabricating an empty user bubble, and clipboard ingestion prefers the canonical file list so one image cannot enter through duplicate browser representations.
• UI continuity and accessibility - Files mode retains the shared Settings footer; full filenames remain available to assistive technology; network preview status tooltips reflect the current state; and temporarily hidden Partner Sources preserve their mounted state.
• Windows 10/11 live-window taskbar identity - Main and standalone Artifact windows use an explicit runtime icon.ico plus window-level AppID/relaunch details. Portable relaunch metadata now points to the persistent outer executable instead of its disposable %TEMP% extraction, and an exact stale KodaX Start Menu shortcut is repaired without touching valid or unrelated user shortcuts. Package smoke verifies the runtime file plus Setup, Portable, and unpacked application PE resources.
• Other-instance indicator truthfulness - The sidebar now labels SDK-discovered CLI or other Space processes as Other KodaX instances, explains their ownership, and refuses to route unknown peer IDs into empty orphan conversations; locally known Sessions remain openable.
• E2E daemon teardown race - Isolated Electron fixtures now repeat ownership-validated daemon cleanup after the app closes, catching a replacement PID created by an in-flight Runtime reconnect and preventing successful suites from ending with a worker teardown timeout.
• Isolated-test Runtime credential leak - E2E and packaged boot fixtures now delete only the OS-keychain Runtime client credential named by their own allowlisted temporary profile before removing that profile. Failed launches use the same bounded cleanup path, packaged boot failures report the Runtime initialization reason, and repeated test runs no longer exhaust Windows Credential Manager or strand test daemons.
• Same-version stale daemon recovery - A resident daemon with the expected SemVer but missing a required capability is no longer retried forever. Space may retire it and reconnect only after Runtime inspection proves there is no active/queued/pending work and no other attached client.
• Invisible resident process after window close - Closing Space on Windows now leaves a visible tray control surface rather than an unexplained background owner; tray initialization failure falls back to ordinary quit-on-close behavior.
• Managed-task finalization interrupt loss - Space closes interrupt admission when the authoritative managed-task phase reaches verifying or completed, returning interrupt_window_closed before Runtime can accept an input after the last root queue-drain boundary.
• Persistent AskUser questions - User questions no longer inherit a countdown or auto-dismiss timeout; they remain pending until the user answers, explicitly dismisses, or the owning Run terminates.
• Composer history boundaries - Up/Down history navigation now takes over only at the absolute collapsed-caret boundary, preserving native multiline and soft-wrapped textarea movement.
• Historical failed-input placement - Terminal failed interrupt bubbles are merged at their failure timestamp while live pending/accepted queue overlays remain at the active transcript tail.
• Complete untracked-directory review - The right-side Changes tree now expands wholly untracked directories into their individual files instead of counting and displaying the directory as one opaque row; Unicode-safe paths and the 200-file truncation guard remain intact.
• Windows query console flashes - KodaX 0.7.76 retains Runtime Worker non-interactive child-process hiding and packaged-host query-path auditing while preserving explicit editor, terminal, and PTY interaction.

Verification

• The installed-package compatibility probe runs against the npm Registry package and requires KodaX 0.7.76, runtimeAutoModeGuardrail: 3, permission:grant-admin, interrupt input, Actor control v1, compaction v3, transcript paging/search, typed Auto LLM resolution, exact concrete-grant reuse, workspace-edit auto-allow, and prompt-free missing-model rejection.
• The process-distinct shared-daemon probe starts its settings-event delivery deadline only after its peer has confirmed the mutation, so slow runner startup cannot be misreported as an SDK event failure while a genuinely missing event still fails within a bounded interval.
• Focused Runtime, Sidecar, Windows child-process, permission, attachment, clipboard, schema, Kimi provider-catalog, and queue regressions cover the 0.7.76 contracts alongside the F122-F124 source/index/citation/recall suite.
• Builtin-skill verification rejects license drift, symlinks, unsafe source content, stale patches, broken or escaping local Markdown links, case-insensitive forbidden promotional text, non-Git release locks, and any packaged file-set or byte mismatch. Huashu is regenerated through three ordered reviewed patches (no-watermark baseline, builtin portability, and removal of remaining promotional signatures); branded demo finales are neutralized to YOUR BRAND, and the current snapshot contains exactly 260 Space builtin files plus the 8 restored SDK builtin Markdown files.
• Focused tray/daemon-control unit coverage verifies bounded status projection, packaged CLI resolution, fail-closed stop parsing, blocker preservation, and stale-daemon recovery; Electron E2E verifies that close destroys the renderer, the tray reopens a functional window, and final shutdown does not leak the fixture.
• Runtime credential cleanup coverage rejects production paths and non-Runtime accounts; a focused three-app Electron run leaves both the Runtime credential count and isolated-daemon count unchanged.
• Release verification requires workspace type checks, lint, full tests, production renderer/main smoke build, dependency deduplication, packaging, and packaged Electron boot before the v0.1.32 tag is created.

---

Installation Notes

Unsigned installers: first launch may trigger OS trust prompts.

• Windows: use Setup.exe for normal install, Portable.exe for no-install launch, or the matching .zip fallback if the browser blocks direct .exe downloads.
• Windows SmartScreen: click "More info" -> "Run anyway"
• macOS: Gatekeeper -> right-click -> Open -> confirm
• Linux: chmod +x *.AppImage then run; or sudo dpkg -i *.deb

KodaX Space is a local-first tool for trusted users; installers remain unsigned for this release.

Verify Checksums

SHA-512 checksums are included in the uploaded latest*.yml electron-updater manifests; GitHub also exposes a SHA-256 digest for each release asset.

Full Changelog: v0.1.31...v0.1.32