AgentSplice v0.2.3-alpha (experimental alpha)

An experimental alpha. No compatibility claim is made for any client, model, or runtime; support claims require a dated conformance report (docs/CONFORMANCE.md).

What's new. A quieter first start, from a cold test of every installation path the README gives. The gateway no longer warns at every start about an API key variable a local LM Studio does not need: event 1103 is Information now. .NET's HTTP client no longer writes four lines for every request to the runtime, or a stack trace when the runtime is down: the shipped settings set System.Net.Http.HttpClient to Warning, and the gateway's own event 1101 still names a runtime it cannot reach. The image no longer warns about the port its base image sets. Nothing the gateway records, forwards, or answers changes, so upgrading needs nothing but the new package or image. Since 0.2.2-alpha the repository also has a full code of conduct, an issue form for an installation that did not work, and a recording of a real session at the top of the README.

Windows. agentsplice-0.2.3-alpha-win-x64.zip runs on 64-bit Windows 10 or 11 without Docker or a .NET installation. The package is not code signed. See docs/INSTALLATION.md.

Linux. agentsplice-0.2.3-alpha-linux-x64.tar.gz runs on x64 distributions based on glibc 2.34 or later, such as Ubuntu 22.04, Debian 12, or RHEL 9, with OpenSSL 1.1.1 or later, without Docker or a .NET installation. The package is not signed. See docs/INSTALLATION.md.

macOS. agentsplice-0.2.3-alpha-osx-arm64.tar.gz runs on Macs with Apple silicon and macOS 15 or later, without Docker or a .NET installation. Its executable is signed ad hoc, as Apple silicon requires of anything it runs, which names nobody, and it is not notarized: downloaded with a browser, it carries the quarantine mark, and macOS refuses to open it until xattr -dr com.apple.quarantine clears the mark from the extracted folder, once the archive has matched its line in SHA256SUMS. See docs/INSTALLATION.md.

Checking a download. SHA256SUMS lists every asset's SHA-256 digest; check the one you downloaded against its line before extracting it, as docs/INSTALLATION.md shows. GitHub shows each asset's digest too.

Docker. Publishing this release pushes the image to ghcr.io/murillojndem/agent-splice:0.2.3-alpha, for linux/amd64, and adds its digest to these notes. agentsplice-0.2.3-alpha-image-linux-amd64.tar.gz is the same image, for a machine without registry access: check it against SHA256SUMS, then docker load --input it. See docs/INSTALLATION.md.

.NET. The packages carry .NET 10, which Microsoft supports until November 14, 2028, and the image is built on it. Neither an operating system's updates nor .NET installers patch a package: upgrading AgentSplice is how it receives .NET security fixes.

Known limitations.

• Only GET /v1/models and POST /v1/chat/completions are served, and LM Studio is the only runtime provider. The image is linux/amd64 only; the packages are win-x64, linux-x64, and osx-arm64.
• /v1 takes no credential. Any program on the machine can run completions through the gateway, and a gateway bound beyond loopback serves whoever reaches it; startup says so as event 1205. The administrative token protects /api/v1 only.
• The packages configure no administrative token, so every account on the machine can read the stored trace metadata through /api/v1 until one is set (docs/INSTALLATION.md).
• A client that reaches the gateway by a name other than localhost, 127.0.0.1, or [::1] gets 400 until that name is in AllowedHosts.
• Nothing is signed with a developer identity, and nothing is notarized. SHA256SUMS proves a download is intact, not who built it, and Smart App Control can block the Windows package with no way to allow it.
• A failing OTLP export is not reported in the gateway's log (docs/OBSERVABILITY.md).
• The dashboard keeps the administrative token in memory for one tab.

What changed is in CHANGELOG.md at this tag.

Image digest. ghcr.io/murillojndem/agent-splice@sha256:33100166ca6046fe36b638e91c623828ea478147fca15a33491ffcb761ee6b54

AgentSplice v0.2.2-alpha (experimental alpha)

An experimental alpha. No compatibility claim is made for any client, model, or runtime; support claims require a dated conformance report (docs/CONFORMANCE.md).

What's new. A package for Macs with Apple silicon on macOS 15 or later, agentsplice-0.2.2-alpha-osx-arm64.tar.gz, built and smoke-tested by CI on macOS 15 (ADR 0029). The gateway is unchanged from 0.2.1-alpha, so upgrading needs nothing but the new package or image. Since 0.2.1-alpha the repository also has two more dated trace reports: OpenCode through AgentSplice to llama.cpp's llama-server and to Ollama, each with the shipped lmstudio provider (docs/reports/).

Windows. agentsplice-0.2.2-alpha-win-x64.zip runs on 64-bit Windows 10 or 11 without Docker or a .NET installation. The package is not code signed. See docs/INSTALLATION.md.

Linux. agentsplice-0.2.2-alpha-linux-x64.tar.gz runs on x64 distributions based on glibc 2.34 or later, such as Ubuntu 22.04, Debian 12, or RHEL 9, with OpenSSL 1.1.1 or later, without Docker or a .NET installation. The package is not signed. See docs/INSTALLATION.md.

macOS. agentsplice-0.2.2-alpha-osx-arm64.tar.gz runs on Macs with Apple silicon and macOS 15 or later, without Docker or a .NET installation. Its executable is signed ad hoc, as Apple silicon requires of anything it runs, which names nobody, and it is not notarized: downloaded with a browser, it carries the quarantine mark, and macOS refuses to open it until xattr -dr com.apple.quarantine clears the mark from the extracted folder, once the archive has matched its line in SHA256SUMS. See docs/INSTALLATION.md.

Checking a download. SHA256SUMS lists every asset's SHA-256 digest; check the one you downloaded against its line before extracting it, as docs/INSTALLATION.md shows. GitHub shows each asset's digest too.

Docker. Publishing this release pushes the image to ghcr.io/murillojndem/agent-splice:0.2.2-alpha, for linux/amd64, and adds its digest to these notes. agentsplice-0.2.2-alpha-image-linux-amd64.tar.gz is the same image, for a machine without registry access: check it against SHA256SUMS, then docker load --input it. See docs/INSTALLATION.md.

.NET. The packages carry .NET 10, which Microsoft supports until November 14, 2028, and the image is built on it. Neither an operating system's updates nor .NET installers patch a package: upgrading AgentSplice is how it receives .NET security fixes.

Known limitations.

• Only GET /v1/models and POST /v1/chat/completions are served, and LM Studio is the only runtime provider. The image is linux/amd64 only; the packages are win-x64, linux-x64, and osx-arm64.
• /v1 takes no credential. Any program on the machine can run completions through the gateway, and a gateway bound beyond loopback serves whoever reaches it; startup says so as event 1205. The administrative token protects /api/v1 only.
• The packages configure no administrative token, so every account on the machine can read the stored trace metadata through /api/v1 until one is set (docs/INSTALLATION.md).
• A client that reaches the gateway by a name other than localhost, 127.0.0.1, or [::1] gets 400 until that name is in AllowedHosts.
• Nothing is signed with a developer identity, and nothing is notarized. SHA256SUMS proves a download is intact, not who built it, and Smart App Control can block the Windows package with no way to allow it.
• A failing OTLP export is not reported in the gateway's log (docs/OBSERVABILITY.md).
• The dashboard keeps the administrative token in memory for one tab.

What changed is in CHANGELOG.md at this tag.

Image digest. ghcr.io/murillojndem/agent-splice@sha256:58c39805aa8f1a3e6b7925fdef2e6ea39e448aacd558d887f165e619180ea37d

AgentSplice v0.2.1-alpha (experimental alpha)

An experimental alpha. No compatibility claim is made for any client, model, or runtime; support claims require a dated conformance report (docs/CONFORMANCE.md).

What's new. The wait for a stream's first byte has its own budget, timeouts:firstByte, 5 minutes by default, so a long prompt on local hardware is no longer cut as a stalled stream; timeouts:idleStream, 60 seconds, now bounds only the gaps after a stream's first byte, and timeouts:responseHeaders defaults to 5 minutes rather than 30 seconds (ADR 0028). Upgrading: a configuration whose timeouts:total is under 5 minutes must now also set timeouts:responseHeaders and timeouts:firstByte no higher than it, or the gateway refuses to start.

Windows. agentsplice-0.2.1-alpha-win-x64.zip runs on 64-bit Windows 10 or 11 without Docker or a .NET installation. The package is not code signed. See docs/INSTALLATION.md.

Linux. agentsplice-0.2.1-alpha-linux-x64.tar.gz runs on x64 distributions based on glibc 2.34 or later, such as Ubuntu 22.04, Debian 12, or RHEL 9, with OpenSSL 1.1.1 or later, without Docker or a .NET installation. The package is not signed. See docs/INSTALLATION.md.

Checking a download. SHA256SUMS lists every asset's SHA-256 digest; check the one you downloaded against its line before extracting it, as docs/INSTALLATION.md shows. GitHub shows each asset's digest too.

Docker. Publishing this release pushes the image to ghcr.io/murillojndem/agent-splice:0.2.1-alpha, for linux/amd64, and adds its digest to these notes. agentsplice-0.2.1-alpha-image-linux-amd64.tar.gz is the same image, for a machine without registry access: check it against SHA256SUMS, then docker load --input it. See docs/INSTALLATION.md.

.NET. The packages carry .NET 10, which Microsoft supports until November 14, 2028, and the image is built on it. Windows Update and .NET installers never patch a package: upgrading AgentSplice is how it receives .NET security fixes.

Known limitations.

• Only GET /v1/models and POST /v1/chat/completions are served, and LM Studio is the only runtime provider. The image is linux/amd64 only; the packages are win-x64 and linux-x64.
• /v1 takes no credential. Any program on the machine can run completions through the gateway, and a gateway bound beyond loopback serves whoever reaches it; startup says so as event 1205. The administrative token protects /api/v1 only.
• The packages configure no administrative token, so every account on the machine can read the stored trace metadata through /api/v1 until one is set (docs/INSTALLATION.md).
• A client that reaches the gateway by a name other than localhost, 127.0.0.1, or [::1] gets 400 until that name is in AllowedHosts.
• Nothing is signed. SHA256SUMS proves a download is intact, not who built it, and Smart App Control can block the Windows package with no way to allow it.
• A failing OTLP export is not reported in the gateway's log (docs/OBSERVABILITY.md).
• The dashboard keeps the administrative token in memory for one tab.

What changed is in CHANGELOG.md at this tag.

Image digest. ghcr.io/murillojndem/agent-splice@sha256:eea91f42774cad0d0a398f347320c404b7e292fcc9aa13cd9b9cfc9db0647e3a

AgentSplice v0.2.0-alpha (experimental alpha)

An experimental alpha. No compatibility claim is made for any client, model, or runtime; support claims require a dated conformance report (docs/CONFORMANCE.md).

Windows. agentsplice-0.2.0-alpha-win-x64.zip runs on 64-bit Windows 10 or 11 without Docker or a .NET installation. The package is not code signed. See docs/INSTALLATION.md.

Linux. agentsplice-0.2.0-alpha-linux-x64.tar.gz runs on x64 distributions based on glibc 2.34 or later, such as Ubuntu 22.04, Debian 12, or RHEL 9, with OpenSSL 1.1.1 or later, without Docker or a .NET installation. The package is not signed. See docs/INSTALLATION.md.

Checking a download. SHA256SUMS lists every asset's SHA-256 digest; check the one you downloaded against its line before extracting it, as docs/INSTALLATION.md shows. GitHub shows each asset's digest too.

Docker. Publishing this release pushes the image to ghcr.io/murillojndem/agent-splice:0.2.0-alpha, for linux/amd64, and adds its digest to these notes. agentsplice-0.2.0-alpha-image-linux-amd64.tar.gz is the same image, for a machine without registry access: check it against SHA256SUMS, then docker load --input it. See docs/INSTALLATION.md.

.NET. The packages carry .NET 10, which Microsoft supports until November 14, 2028, and the image is built on it. Windows Update and .NET installers never patch a package: upgrading AgentSplice is how it receives .NET security fixes.

Known limitations.

• Only GET /v1/models and POST /v1/chat/completions are served, and LM Studio is the only runtime provider. The image is linux/amd64 only; the packages are win-x64 and linux-x64.
• /v1 takes no credential. Any program on the machine can run completions through the gateway, and a gateway bound beyond loopback serves whoever reaches it; startup says so as event 1205. The administrative token protects /api/v1 only.
• The packages configure no administrative token, so every account on the machine can read the stored trace metadata through /api/v1 until one is set (docs/INSTALLATION.md).
• A client that reaches the gateway by a name other than localhost, 127.0.0.1, or [::1] gets 400 until that name is in AllowedHosts.
• Nothing is signed. SHA256SUMS proves a download is intact, not who built it, and Smart App Control can block the Windows package with no way to allow it.
• A failing OTLP export is not reported in the gateway's log (docs/OBSERVABILITY.md).
• The dashboard keeps the administrative token in memory for one tab.

What changed is in CHANGELOG.md at this tag.

Image digest. ghcr.io/murillojndem/agent-splice@sha256:24179f92a50522d213674f7f5914302212378007b6bf88e3bedace0c4be173c6