KodaX Space v0.1.39

KodaX 0.7.85 Registry alignment - Root/Desktop manifests and every
lockfile view now resolve the exact published package
(sha512-6iDF3dgz1WehkaLGDgIBBa0r2cpTalR4SMiCEw6QVEsyBDS9zwvTQ5zBoI/VDaMFdyCyHUUs7ZLVatkeBRaj/Q==).
Coder startup now requires both actorSettlementConvergence:1 and
sessionEventJournal:1. Session observations retain the complete
(sessionId, journalEpoch, seq) cursor and reset local watermarks when the
journal epoch changes instead of comparing sequence numbers across Sessions.
Coder startup now requires KodaX Runtime capability
actorSettlementConvergence:1; Space will not claim compatibility from the
package version alone.
When the active Run is durability-unknown, every composer entry point queues
the next query as after-turn input. The draft is cleared only after Runtime
acknowledges that exact queued continuation.
Ambiguous composer sends retain their operation identity across intervening
drafts. Main-process deduplication runs before attachment validation, so an
accepted query with a lost IPC reply cannot be duplicated or fail merely
because its draft image was already cleaned up.
KodaX 0.7.85 safety semantics are reflected in compatibility probes: Agent
Home/root mutations are non-authorizable, and opaque shell execution must
have real OS containment rather than an approval-only fallback.

Stop now carries the visible exact runId through renderer, IPC, host, and
Runtime receipt validation, preventing a stale click from targeting a
successor Run.
A terminal Runtime event no longer prunes a live query/output turn without
exact canonical folding proof. Manual recovery therefore keeps the submitted
query and streamed output visible when its canonical Session commit is
absent.
Durability-unknown UI remains active and stoppable, but now describes the
factual automatic repair instead of promising an unspecified Space refresh.
Same-runtime Actor self-fence is surfaced as settlement persistence failure;
genuine actor_owner_conflict remains reserved for a different live owner.

Full workspace tests, typecheck, lint, production Windows packaging, package
smoke, and packaged boot smoke pass against the exact Registry 0.7.85 bytes.
The package probe starts a real daemon, observes a real Session, and validates
its complete Session journal cursor.

Installation Notes

Unsigned installers: first launch may trigger OS trust prompts.

Windows: use Setup.exe for normal install, Portable.exe for no-install launch, or the matching .zip fallback if the browser blocks direct .exe downloads.
Windows SmartScreen: click "More info" -> "Run anyway"
macOS: Gatekeeper -> right-click -> Open -> confirm
Linux: chmod +x *.AppImage then run; or sudo dpkg -i *.deb

KodaX Space is a local-first tool for trusted users; installers remain unsigned for this release.

SHA-512 checksums are included in the uploaded latest*.yml electron-updater manifests; GitHub also exposes a SHA-256 digest for each release asset.

Full Changelog: v0.1.38...v0.1.39