AHVM v0.3.15

AHVM v0.3.15

Adds an experimental Pi Durable runtime to the Ubuntu development image, alongside OpenCode. AHVM Cloud and the mobile app can select the agent when creating a conversation. Pi uses a separate ChatGPT/Codex subscription sign-in.

• Pinned Pi Durable, Pi AI and Chord 1.0.2 with per-conversation durable state.
• Root-owned tool scopes stop and join shell descendants, including detached children, without stopping sibling conversations.
• Validated streamed answers, tools, questions, interruption, duplicate admission, credential cleanup and continuation after a cold restart on replicated storage.
• OpenCode remains the default; existing VM disks are unchanged. Pi requires the new Ubuntu image and matching Cloud backend.

Apple Silicon macOS executables are Developer ID signed and Apple notarized. Linux x86_64 packages retain the glibc 2.35 baseline. Release checksums and the Git tag are signed; the update catalog is separately signed.

AHVM remains available under the standard MIT License without a revenue cap. Upstream components retain their licenses.

AHVM v0.3.14

AHVM now uses the standard MIT License. The former company revenue cap and paid commercial software license requirement are removed. Commercial use is permitted under MIT; upstream and bundled third-party licenses and notices remain in place.

AHVM v0.3.13

Storage and lifecycle fixes

• Release disk quota and reusable VM names after verified local retirement. R2 object cleanup remains durable and continues under the old immutable volume identity.
• Preserve the original lifecycle failure status and error, including actionable quota failures, instead of hiding it behind a generic conflict.
• Pack up to sixteen changed 64-KiB blocks into 1-MiB immutable private data objects for new compatible replicated disks. Existing roots and shared base images retain their formats.
• Delete retired remote objects in S3 batches of up to 1,000 keys, with per-key error validation and empty-prefix confirmation.
• Make compaction yield to VM wake during uploads and retries, and check cancellation before publication.

Rollout requirements

Upgrade the volume supervisor and workers together, then the daemon, apply ahvm-site migration 0024, and deploy the Cloud API from PR #68. A client-only upgrade does not change backend quota release or cleanup. Packed roots require compatible readers; preserve storage state when upgrading and do not downgrade to older storage binaries.

Qualification and signing

Rust checks, tests, privileged volume tests and CLI contracts cover the merged fixes. The Cloud companion passed 329 tests and type/build checks. A dedicated real-R2 probe confirmed pack correctness and batch deletion; it is not a full-image latency benchmark.

The macOS CLI and desktop viewer are Developer ID signed and Apple notarized. The update catalog is Ed25519 signed and the Homebrew formula uses verified release SHA-256 digests.

Changes: #117 and mariobm/ahvm-site#68.

AHVM v0.3.12

AHVM v0.3.12 hardens guest device handling and VM lifecycle isolation.

• Validate guest GPU mappings before changing host memory mappings, and reject malformed vsock/TSI packets with bounded payload handling.
• Keep admitted operations, shell/desktop streams and preview forwarding tied to their original VM owner and identity, including deletion, cancellation and name reuse.
• Retain snapshot quota until physical cleanup succeeds, complete cleanup after canceled requests, and recover interrupted snapshot publication/deletion on daemon startup.
• Reclaim unused lifecycle locks so repeated requests do not grow the daemon's lock registry indefinitely.

Upgrade Homebrew clients with brew upgrade mariobm/ahvm/ahvm, curl-installed clients with ahvm upgrade, and registered self-hosted servers with ahvm host upgrade <name>. These fixes require the new server runtime; a client update alone does not apply them. Existing VM workers must be stopped and started on the updated runtime to receive the device fixes. No new guest image is required. AHVM Cloud is upgraded by its operator.

Apple Silicon CLI and desktop viewer are Developer ID signed and Apple notarized. Linux x86_64 packages target glibc 2.35 or newer.

Validation: Rust CI, packaged CLI contracts, native device regressions and isolated real-VM networking/lifecycle checks passed. The real-VM checks covered authenticated previews, streaming, WebSocket revocation, stop/start, daemon adoption, snapshot restore and physical snapshot deletion.

AHVM v0.3.11

AHVM v0.3.11 improves desktop connections and adds the runtime support used by durable Cloud agent jobs.

• Choose desktop resolution per connection: ahvm desktop omarchy --resolution 1080p selects 1920×1080. The default stays 1280×720; use --resolution 720p to switch back. Clear stale VNC sockets and start the desktop relay together with VNC to fix blank/disconnected viewer launches.
• Keep managed agent jobs awake independently of a connected client. Restore activity protection after a daemon restart, stop idle VMs after work finishes, and configure the agent idle-stop duration. Failed controllers are fenced before their activity protection is released.
• Fix volume admission after repeated VM deletion: fully reclaimed records no longer consume the active-volume record limit. Preserve deletion records and identity fences; no schema migration or tombstone deletion is needed.
• Update image builders for the complete Omarchy 4.0.4 desktop and released OpenCode 2.0.18 in Ubuntu. Guest images are published separately through the signed image catalog; existing VM disks are unchanged.

Validation: release-source CI passed Rust formatting/linting, workspace tests, CLI contracts, privileged volume tests and the preboot placement model. Linux x86_64 packages were built in the established glibc 2.35 environment and passed packaged CLI contracts. Apple Silicon CLI and desktop viewer are Developer ID signed and Apple notarized.

Upgrade Homebrew clients with brew upgrade mariobm/ahvm/ahvm, curl-installed clients with ahvm upgrade, and registered self-hosted servers with ahvm host upgrade <name>. Managed-agent and volume-admission fixes require the new server runtime. AHVM Cloud is upgraded by its operator.

AHVM v0.3.10

Fix networking diagnostics and replicated-storage recovery for self-hosted and AHVM Cloud VMs.

• Add real public IPv4 ping support through the per-VM gateway. Host/private destinations remain blocked, replies are matched to requests, and echo traffic is bounded. No new guest image or raw-socket capability is needed; Linux hosts must permit the service user's group in net.ipv4.ping_group_range.
• Keep replicated-volume recovery and disk cleanup working when many deleted VM records remain. Bound recovery thread creation, prioritize unfinished work and handle thread creation failures without losing the supervisor loop.
• Fix a foreground-start race during background collector cancellation that could incorrectly return volume busy.

Verified on agent_house: Omarchy public and gateway ping, MTU-sized packets, HTTPS, replicated-disk persistence and gateway replacement without restarting the desktop. The collector-handoff regression passed 500 consecutive Linux runs; all 115 Linux volume tests passed (12 privileged/opt-in tests excluded from that count).

Apple Silicon CLI and desktop viewer are Developer ID signed and Apple notarized. Linux x86_64 client/server packages target glibc 2.35 or newer. Guest images are downloaded separately.

Upgrade a Homebrew client with brew upgrade mariobm/ahvm/ahvm, or a curl-installed client with ahvm upgrade. Upgrade a registered self-hosted server with ahvm host upgrade <name>. The networking and storage fixes require the new server runtime; upgrading only the client is insufficient. AHVM Cloud is upgraded by its operator.

AHVM v0.3.9

Fix the native desktop viewer's encrypted Cloud connection. The viewer now explicitly selects its TLS crypto provider, preventing a startup panic while retaining native certificate verification.

Omarchy desktops are available through AHVM Cloud for workspaces with desktop preview access: 2 vCPUs, 8 GiB RAM and a 40-GiB replicated disk. The viewer automatically wakes a stopped desktop. Disk files survive cold restart; open applications and RAM do not.

Qualification: authenticated Cloud connection and nonblank 1280×720 desktop, guest HTTPS, and a saved file retained across cold restart. Stop-to-connected native viewer took 23.44 seconds in one run on the pilot host; this is not a latency guarantee. GPU rendering remains an opt-in preview for trusted workloads.

Apple Silicon CLI and viewer are Developer ID signed and Apple notarized. Linux x86_64 client/server packages are included; guest images are downloaded separately.

Upgrade with brew upgrade mariobm/ahvm/ahvm, or ahvm upgrade for a curl-installed client. Cloud desktop users should use v0.3.9 or newer.

AHVM v0.3.8

Omarchy desktops can now be provisioned through AHVM Cloud's replicated-storage lifecycle for workspaces with desktop preview access. The Cloud profile uses 2 vCPUs and 8 GiB RAM; self-hosted defaults remain unchanged.

• Preserve the selected desktop image and immutable digest across lifecycle retries.
• Let the native viewer wait for a cold Cloud desktop to wake, including bounded retries when the service asks it to wait.
• Apply configured API bandwidth pacing to desktop streams alongside existing stream limits.
• Document replicated Omarchy qualification and the deployment requirements.

On the qualified Intel host, prepared-image creation took about 27 seconds and cold start after local disk eviction about 24 seconds. Disk files persisted and VNC display/input worked after restart. These are single-run host measurements, not latency guarantees. Cold restart opens a new desktop session; GPU RAM state is not restored. GPU rendering remains an opt-in preview for trusted workloads.

Apple Silicon CLI and viewer are Developer ID signed and Apple notarized. Linux x86_64 client/server packages remain available; guest images are downloaded separately.

Update with brew upgrade mariobm/ahvm/ahvm, or ahvm upgrade for a curl-installed client.

AHVM v0.3.7

AHVM v0.3.7 makes Cloud and self-hosted CLI commands use a saved connection and adds passive usage metrics for the Cloud dashboards.

One connection workflow

• ahvm login selects Cloud when no default exists. Existing SSH defaults are preserved.
• Switch with ahvm use cloud or ahvm use home.
• Inspect your selection with ahvm context and list connections with ahvm contexts.
• Override one command with ahvm --context home list.
• Direct --endpoint requests never use Cloud credentials.
• Commands show their destination. An unconfigured CLI asks interactive users to choose; scripts fail with setup instructions instead of silently targeting localhost.
• Legacy --cloud, --host, and host use remain supported. Interactive create still opens Bash.

Metrics

The daemon exposes passive host CPU/memory, VM resource counters and replication backlog for authenticated administration. The Cloud dashboard retains 24 hours of history and removes VM measurements when a VM is deleted. Self-hosted installations do not send metrics to AHVM Cloud automatically.

Updating

Homebrew: brew update && brew upgrade mariobm/ahvm/ahvm.
Standalone: ahvm upgrade.
Existing Cloud users: run ahvm use cloud once after updating, then use ordinary ahvm create, shell, and delete commands.

macOS artifacts support Apple Silicon and are Developer ID signed and notarized. Linux artifacts support x86_64 with glibc 2.35+. Guest images are unchanged and distributed separately.

AHVM v0.3.6

Non-root Ubuntu shells

New Ubuntu development images open interactive ahvm create and ahvm shell sessions as ahvm, in /workspace, with a colored Bash prompt. Use sudo for guest administration. Uploaded workspace files remain editable from the non-root account.

The guest agent and explicit API exec remain privileged for network and system operations. Existing VM disks and credentials are not migrated. The new behavior requires the updated Ubuntu image; legacy images retain their previous Bash fallback.

Includes the signed and notarized Apple Silicon Mac client, Linux client and Linux server artifacts. Guest images are downloaded separately from the signed catalog.

Validation: CLI contract tests, Rust CI and real KVM Ubuntu image checks for tools, sudo, HTTPS, PTY, workspace permissions and stop/start persistence.