Skip to content

v0.8.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 14 Jul 19:50
v0.8.0
3c72c96

Credential brokering now covers Gemini and Codex, Tart sandboxes get
guest-network health detection (no more silent "agent can't reach its
API" states), and Codex 0.144 works out of the box. One breaking change;
see docs/BREAKING-CHANGES.md.

Breaking changes (docs/BREAKING-CHANGES.md)

  • Credential brokering is now the default for Gemini and Codex API keys,
    matching Claude: the real key stays host-side with a per-sandbox
    injector; inside the sandbox the key env var holds only a placeholder
    (Gemini is redirected via GOOGLE_GEMINI_BASE_URL, Codex via
    openai_base_url in ~/.codex/config.toml). Normal agent use is
    unaffected, but custom scripts reading GEMINI_API_KEY or
    OPENAI_API_KEY inside the sandbox now see the placeholder. OAuth and
    subscription logins are unaffected, and brokering is skipped under
    --network-none. Opt out per sandbox with --no-broker.

Features

  • Tart (macOS VM) guest-network health detection. A running Tart VM can
    lose its vmnet networking (macOS tears the session down under it; the
    agent inside just spins on ConnectionRefused while everything looks
    "active"). yoloai now detects this and says what to do:
    • yoloai doctor reports per-VM network liveness, includes a
      net_liveness section in --json, and exits non-zero on a confirmed
      wedge, with the exact recovery command.
    • yoloai ls shows the sandbox as "active (net-dead)" or
      "idle (net-dead)"; yoloai sandbox info gains a "Net health:"
      line; both --json documents carry net_health fields.
    • Both failure modes are caught: the guest stuck on a 169.254.x.x
      link-local address, and the subtler stale-DHCP-lease case where the
      guest holds a normal-looking address on a subnet no host bridge
      serves anymore.
    • Detection only: nothing is restarted automatically. Recovery is
      always "yoloai stop && yoloai start " (agent session
      state on disk survives).
  • yoloai doctor now runs advisory version-floor checks for runc and
    crun (crun >= 1.28), with working install links.
  • The sandbox base image now includes rsync (used by in-place reset);
    the image rebuilds automatically on next use.

Fixes

  • Codex: an API-key launch without brokering now writes auth.json, so
    the key actually authenticates. The workdir is marked trusted at
    launch, so Codex 0.144 no longer exits at its folder-trust prompt
    before the agent ever starts.

Developer / CI

  • The smoke-test harness fails fast on a net-dead Tart sandbox: a
    pre-flight check aborts the Tart lanes with a named cause when the
    host's vmnet is wedged, and an in-loop probe raises within seconds
    instead of waiting out multi-minute sentinel timeouts. Failure
    autopsies fingerprint the condition and skip pointless retries.
  • The nightly govulncheck audit runs green again and lives in its own
    workflow.
  • Contributor docs: the Tart vmnet wedge (both variants, plus the
    subnet-flapping behavior behind it) is documented in
    docs/contributors/backend-idiosyncrasies.md with a symptom index.

Install: download the archive for your platform below and extract the yoloai binary,
brew install kstenerud/tap/yoloai, or go install github.com/kstenerud/yoloai/cmd/yoloai@latest.
Verify with checksums.txt (+ the cosign signature / build provenance).

Assets 17
Loading