Skip to content

StackKits v0.48.0

Choose a tag to compare

View all tags
@stackkits-release-publisher-v2 stackkits-release-publisher-v2 released this 28 Sep 07:23
· 43 commits to main since this release
v0.48.0
56cf4a1

Highlights

  • Private AI grows into a full local AI lab: pick Open WebUI or AnythingLLM as the chat, add web search, document parsing, a Hermes assistant, an OpenHands agent harness under gVisor and ComfyUI for images and video, on the CPU or on NVIDIA and AMD GPUs.
  • Use your homelab model from kombify AI: an optional connector next to Ollama links it to your kombify AI as your own model endpoint. It dials out, so no inbound port opens, Ollama stays unpublished and requests on it do not count against your Cloud AI allowance.
  • Sign-in and identity for more apps: Paperless-ngx, Media and Smart Home sign in through Pocket ID, Files provisions household accounts, and existing Basement domains migrate with signed recovery.
  • Safer state and lifecycle: OpenTofu state and plans are encrypted with owner custody, retried Apply recovers interrupted runs, and upgrades bind to the verified source inventory.

Added

  • ai: agent-harness module installs OpenHands under gVisor
  • ai: AnythingLLM as chat alternative; Ollama, Open WebUI, ComfyUI are the core
  • ai: AnythingLLM installs as the chat alternative of the ai workload
  • ai: assistant module installs Hermes Agent with a pinned policy
  • ai: capability-module contract for Private AI
  • ai: ComfyUI runs on the CPU without an accelerator profile
  • ai: GPU enablement for Private AI (NVIDIA CDI, AMD ROCm)
  • ai: image-video module installs ComfyUI on an NVIDIA GPU
  • ai: optional kombify AI connector next to the Private AI Ollama
  • ai: speech module wires kombify SpeechKit with local providers, kept recorded
  • ai: web-search and document-parsing modules install and wire into Open WebUI
  • backup: verify signed managed restore-drill renewals
  • identity: apps reach Pocket ID server-side; Paperless-ngx signs in with OIDC
  • identity: automate Media and Smart Home OIDC bootstrap
  • identity: migrate existing Basement domains with signed recovery
  • identity: provision Files household accounts through admitted adapters
  • network: Basement default domain lab.home; refuse a domain that is its own public suffix
  • opentofu: encrypt state and plans with owner custody
  • photos: Immich add-ons install with Immich-issued API keys; fix route ordering with 3+ routes
  • smart-home: owner-chosen LAN listeners and device passthrough; Mosquitto and Zigbee2MQTT install
  • tofu: package pinned Komodo provider offline

Fixed

  • access: bind generated app ACLs to their Core owner
  • ai: ComfyUI stops on SIGINT and AnythingLLM runs under init so quiescence no longer waits for SIGKILL
  • backup: accept Apache's graceful stop signal in snapshot quiescence
  • backup: carry the configuration forward on apply and name the remedy when it binds an earlier Apply
  • backup: make Private AI backup, export and service control work
  • bootstrap: enforce application identity and preserve checkpoint custody
  • compat: import activated restore qualification
  • files: accept automatic owner custody for household provisioning
  • files: preserve successful household setup
  • identity: activation links use the PocketID one-time code route
  • identity: hold one lock across domain migration
  • identity: resolve Cloud custody for owner step-up
  • identity: route Cloud issuer discovery over the core network
  • identity: upgrade PocketID while preserving existing custody
  • init: honor the declared Basement OpenTofu default
  • installer: resume an interrupted Cloud install from any directory
  • lifecycle: a retried Apply recovers a recovery-required Apply
  • media: accept omitted nullable SSO port
  • media: compare Jellyfin account links as UUIDs
  • migration: quiesce authenticated source runtime before domain bridge
  • opentofu: bind offline providers and Day 2 state custody
  • opentofu: verify encrypted runtime state
  • owner: reissue a fresh owner activation link and retire the previous one
  • release: compare archive legal files with public source root
  • release: ship MPL notices with bundled tools
  • restore: complete bootstrap while preserving restored identity
  • runtime: verify public TLS after workload routes exist
  • service: a new plan supersedes running-only service desired state
  • setup: admit and record setup for ComfyUI model presets and Immich add-ons
  • setup: preserve successful Files bootstrap
  • smart-home: retain PKCE with pinned OIDC schema
  • tofu: select provider locks per root declaration
  • upgrade: bind attested source to sealed Plan inventory
  • upgrade: preserve legacy source inventory compatibility
  • upgrade: target and rollback generate resolve the verified Inventory
  • vault: restore mandatory SMTP email verification
  • verify: probe a route's declared HTTP health-gate path
  • webmcp: page complete catalog discovery within output budget
  • webmcp: project GPU accelerator profiles; remove committed generator staging dir
  • website: keep nav dropdowns open on touch and tablet

Source commit: 3f35df6760d023e61cc3b7c2ef08aa41b41e3fac

Assets 56
Loading