Light Remote MCP v0.9.0-rc.34

Light Remote MCP v0.9.0 Release Candidate

Release-candidate build of the governed cross-platform remote execution and control-plane architecture.

Included in this release candidate

• Device Wall for single-device approval, policy, activity, terminal, and maintenance flows;
• Fleet Wall for governed multi-device routing on entitled plans;
• outbound Windows, macOS, and Linux clients with persistent background agents;
• Windows x64 installer, macOS x64/arm64 packages, and Linux x64/arm64 packages;
• signed device identity, owner-bound sessions, explicit device targeting, and local policy enforcement;
• durable execution, terminal/PTY support, file transfer, Git/filesystem/process helpers, and audit telemetry;
• account/device session authority, OAuth/MCP integration surface, and Vercel bridge packaging;
• independent signed client updater with health gate, rollback, Update, and Force Update paths;
• signed Fleet component delivery with monotonic anti-downgrade protection;
• owner-controlled update promotion: immutable release artifacts, signed channel manifest, SHA/size verification, and fail-closed promotion.

Distribution model

GitHub prerelease assets remain the immutable build origin for the beta/RC channel. Public download artifacts are mirrored to Cloudflare R2 under the versioned light-remote/release/<version>/ prefix, while the signed update manifest remains the client trust pointer. The production Direct endpoint serves only the small distribution manifest/install bootstrap and redirects binary downloads to R2.

This is a prerelease candidate. It is not a claim of stable/general-availability status, and it does not bypass the existing approval, policy, signing, or entitlement boundaries.

RC.31 changes

• native no-console Windows installer watchdog (no visible PowerShell watchdog window);
• oversized device results are budgeted before delivery while preserving command outcome and liveness;
• Cloudflare R2-backed release distribution, removing large binaries from the production VPS;
• one-line Linux terminal/server bootstrap with architecture detection and SHA256 verification.

RC.32 changes

• Linux Server/Terminal one-line installer now follows a NetBird-style two-phase flow: install first, then light-remote up for enrollment;
• fresh headless installs no longer block waiting for account approval during curl | bash;
• new light-remote Linux server CLI provides up/status/connect/disconnect/drain/undrain/wall commands;
• release-to-R2 polling is installed as a system-level timer suitable for headless/rebooted ARM production hosts.

RC.33 changes

• Linux Server/Terminal bootstrap now offers Install, Re-install/Update, and Uninstall/Remove modes;
• Local Wall binding is owner-selected: loopback (default), detected RFC1918 LAN, or detected NetBird CGNAT address with NetBird version shown;
• update/reinstall preserves the existing Local Wall binding unless the owner chooses a new one;
• uninstall removes runtime/services/CLI while preserving enrollment identity by default; --purge removes local identity/state;
• Linux CLI status/up/wall now honor the persisted Local Wall bind instead of assuming 127.0.0.1;
• Direct systemd units no longer allow stale environment files to pin an older server version than the current release.

RC.34 changes

• Local Wall copy actions now fall back to a user-gesture textarea copy path when the modern Clipboard API is unavailable or blocked, including HTTP access over private LAN/NetBird addresses;
• secure-context Clipboard API remains the preferred path, with fallback cleanup and focus restoration covered by regression tests.

Light Remote MCP v0.9.0-rc.33

Light Remote MCP v0.9.0 Release Candidate

Release-candidate build of the governed cross-platform remote execution and control-plane architecture.

Included in this release candidate

• Device Wall for single-device approval, policy, activity, terminal, and maintenance flows;
• Fleet Wall for governed multi-device routing on entitled plans;
• outbound Windows, macOS, and Linux clients with persistent background agents;
• Windows x64 installer, macOS x64/arm64 packages, and Linux x64/arm64 packages;
• signed device identity, owner-bound sessions, explicit device targeting, and local policy enforcement;
• durable execution, terminal/PTY support, file transfer, Git/filesystem/process helpers, and audit telemetry;
• account/device session authority, OAuth/MCP integration surface, and Vercel bridge packaging;
• independent signed client updater with health gate, rollback, Update, and Force Update paths;
• signed Fleet component delivery with monotonic anti-downgrade protection;
• owner-controlled update promotion: immutable release artifacts, signed channel manifest, SHA/size verification, and fail-closed promotion.

Distribution model

GitHub prerelease assets remain the immutable build origin for the beta/RC channel. Public download artifacts are mirrored to Cloudflare R2 under the versioned light-remote/release/<version>/ prefix, while the signed update manifest remains the client trust pointer. The production Direct endpoint serves only the small distribution manifest/install bootstrap and redirects binary downloads to R2.

This is a prerelease candidate. It is not a claim of stable/general-availability status, and it does not bypass the existing approval, policy, signing, or entitlement boundaries.

RC.31 changes

• native no-console Windows installer watchdog (no visible PowerShell watchdog window);
• oversized device results are budgeted before delivery while preserving command outcome and liveness;
• Cloudflare R2-backed release distribution, removing large binaries from the production VPS;
• one-line Linux terminal/server bootstrap with architecture detection and SHA256 verification.

RC.32 changes

• Linux Server/Terminal one-line installer now follows a NetBird-style two-phase flow: install first, then light-remote up for enrollment;
• fresh headless installs no longer block waiting for account approval during curl | bash;
• new light-remote Linux server CLI provides up/status/connect/disconnect/drain/undrain/wall commands;
• release-to-R2 polling is installed as a system-level timer suitable for headless/rebooted ARM production hosts.

RC.33 changes

• Linux Server/Terminal bootstrap now offers Install, Re-install/Update, and Uninstall/Remove modes;
• Local Wall binding is owner-selected: loopback (default), detected RFC1918 LAN, or detected NetBird CGNAT address with NetBird version shown;
• update/reinstall preserves the existing Local Wall binding unless the owner chooses a new one;
• uninstall removes runtime/services/CLI while preserving enrollment identity by default; --purge removes local identity/state;
• Linux CLI status/up/wall now honor the persisted Local Wall bind instead of assuming 127.0.0.1;
• Direct systemd units no longer allow stale environment files to pin an older server version than the current release.

Light Remote MCP v0.9.0-rc.32

Light Remote MCP v0.9.0 Release Candidate

Release-candidate build of the governed cross-platform remote execution and control-plane architecture.

Included in this release candidate

• Device Wall for single-device approval, policy, activity, terminal, and maintenance flows;
• Fleet Wall for governed multi-device routing on entitled plans;
• outbound Windows, macOS, and Linux clients with persistent background agents;
• Windows x64 installer, macOS x64/arm64 packages, and Linux x64/arm64 packages;
• signed device identity, owner-bound sessions, explicit device targeting, and local policy enforcement;
• durable execution, terminal/PTY support, file transfer, Git/filesystem/process helpers, and audit telemetry;
• account/device session authority, OAuth/MCP integration surface, and Vercel bridge packaging;
• independent signed client updater with health gate, rollback, Update, and Force Update paths;
• signed Fleet component delivery with monotonic anti-downgrade protection;
• owner-controlled update promotion: immutable release artifacts, signed channel manifest, SHA/size verification, and fail-closed promotion.

Distribution model

GitHub prerelease assets remain the immutable build origin for the beta/RC channel. Public download artifacts are mirrored to Cloudflare R2 under the versioned light-remote/release/<version>/ prefix, while the signed update manifest remains the client trust pointer. The production Direct endpoint serves only the small distribution manifest/install bootstrap and redirects binary downloads to R2.

This is a prerelease candidate. It is not a claim of stable/general-availability status, and it does not bypass the existing approval, policy, signing, or entitlement boundaries.

RC.31 changes

• native no-console Windows installer watchdog (no visible PowerShell watchdog window);
• oversized device results are budgeted before delivery while preserving command outcome and liveness;
• Cloudflare R2-backed release distribution, removing large binaries from the production VPS;
• one-line Linux terminal/server bootstrap with architecture detection and SHA256 verification.

RC.32 changes

• Linux Server/Terminal one-line installer now follows a NetBird-style two-phase flow: install first, then light-remote up for enrollment;
• fresh headless installs no longer block waiting for account approval during curl | bash;
• new light-remote Linux server CLI provides up/status/connect/disconnect/drain/undrain/wall commands;
• release-to-R2 polling is installed as a system-level timer suitable for headless/rebooted ARM production hosts.

Light Remote MCP v0.9.0-rc.31

Light Remote MCP v0.9.0 Release Candidate

Release-candidate build of the governed cross-platform remote execution and control-plane architecture.

Included in this release candidate

• Device Wall for single-device approval, policy, activity, terminal, and maintenance flows;
• Fleet Wall for governed multi-device routing on entitled plans;
• outbound Windows, macOS, and Linux clients with persistent background agents;
• Windows x64 installer, macOS x64/arm64 packages, and Linux x64/arm64 packages;
• signed device identity, owner-bound sessions, explicit device targeting, and local policy enforcement;
• durable execution, terminal/PTY support, file transfer, Git/filesystem/process helpers, and audit telemetry;
• account/device session authority, OAuth/MCP integration surface, and Vercel bridge packaging;
• independent signed client updater with health gate, rollback, Update, and Force Update paths;
• signed Fleet component delivery with monotonic anti-downgrade protection;
• owner-controlled update promotion: immutable release artifacts, signed channel manifest, SHA/size verification, and fail-closed promotion.

Distribution model

GitHub prerelease assets remain the immutable build origin for the beta/RC channel. Public download artifacts are mirrored to Cloudflare R2 under the versioned light-remote/release/<version>/ prefix, while the signed update manifest remains the client trust pointer. The production Direct endpoint serves only the small distribution manifest/install bootstrap and redirects binary downloads to R2.

This is a prerelease candidate. It is not a claim of stable/general-availability status, and it does not bypass the existing approval, policy, signing, or entitlement boundaries.

RC.31 changes

• native no-console Windows installer watchdog (no visible PowerShell watchdog window);
• oversized device results are budgeted before delivery while preserving command outcome and liveness;
• Cloudflare R2-backed release distribution, removing large binaries from the production VPS;
• one-line Linux terminal/server bootstrap with architecture detection and SHA256 verification.

Light Remote Fleet Wall 0.9.0-rc.31

Fleet Wall component hotfix for Light Remote Core 0.9.0-rc.30. Core version is unchanged.

Light Remote Windows hotfix 0.9.0-rc.30

Windows-only RC.30 hotfix built from d6e8037. Restores Wall Cascadia typography and fixes Tray Open Fleet routing. Core semantic version remains 0.9.0-rc.30 for same-version signed update reconciliation.

Light Remote MCP v0.9.0-rc.30

Light Remote MCP v0.9.0 Release Candidate

Release-candidate build of the governed cross-platform remote execution and control-plane architecture.

Included in this release candidate

• Device Wall for single-device approval, policy, activity, terminal, and maintenance flows;
• Fleet Wall for governed multi-device routing on entitled plans;
• outbound Windows, macOS, and Linux clients with persistent background agents;
• Windows x64 installer, macOS x64/arm64 packages, and Linux x64/arm64 packages;
• signed device identity, owner-bound sessions, explicit device targeting, and local policy enforcement;
• durable execution, terminal/PTY support, file transfer, Git/filesystem/process helpers, and audit telemetry;
• account/device session authority, OAuth/MCP integration surface, and Vercel bridge packaging;
• independent signed client updater with health gate, rollback, Update, and Force Update paths;
• signed Fleet component delivery with monotonic anti-downgrade protection;
• owner-controlled update promotion: immutable release artifacts, signed channel manifest, SHA/size verification, and fail-closed promotion.

Distribution model

GitHub prerelease assets are the immutable binary origin for the beta/RC channel. The signed update manifest is the client trust pointer. Vercel remains a thin public bridge/control-plane adapter and is not used as a binary CDN.

This is a prerelease candidate. It is not a claim of stable/general-availability status, and it does not bypass the existing approval, policy, signing, or entitlement boundaries.

Light Remote MCP v0.9.1-beta.5

Light Remote MCP v0.9.1-beta.5

Golden-stack stabilization beta reconstructed from the proven deployed behavior while keeping the stable release source clean and reproducible.

beta5 hotfixes

• Fixes the portable version-compat regression test so it no longer treats the previous beta as a newer client after version bumps.
• Fixes Windows post-install ordering so the rollback installer cache exists before the fail-closed task bootstrap and updater reconciliation run.
• Fixes the Local Wall getting stuck at connecting / loading device / loading sessions because the browser attempted to call the server-only materialIcon() helper while creating the Settings button.
• Adds a regression check that rejects any client-side Settings reference to materialIcon().
• Windows task migration now verifies legacy-task removal and the exact LightRemoteDeviceAgent action (GptOperator.Client.exe --agent-host).
• Installer background-task bootstrap is now fatal on failure instead of allowing setup to appear successful with a broken scheduled task.

Reliability baseline

• Preserves signed lr1 Vercel client continuity used by the recovered production bridge.
• Adds late-result recovery for abandoned Fleet commands, preventing valid delayed device results from being lost after the in-memory command entry has expired.
• Packages the result-delivery helper required by that recovery path.
• Keeps compatibility with the 0.9.0-rc.26 transition floor while beta5 is validated.

Wall polish

• Ordinary commands without a native PTY/FS/SEARCH/PROCESS/SCP badge now receive a neutral silver/black badge.
• Settings now has a matching icon.
• Copy cmd, Copy output, Copy raw, Copy visible, pairing, connect/disconnect, pause/resume, enrollment and navigation actions report through the Wall's own feedback UI.
• Refresh A performs a short 360-degree spin and reports completion.
• Manual held/orphan session cleanup is restored. Nothing is auto-closed, and sessions with active jobs cannot be closed from the cleanup UI.

Stable release scope

• Stable/Core source and packages exclude the experimental computer-use runtime.
• The experimental computer-use line remains isolated on its development branch for later work.
• The Netlify backup runtime remains retired; its former ARM ports stay reserved for intentional future reuse.

Promotion

This prerelease does not replace the recovered production Vercel/ARM golden runtime or promote the signed client update channel automatically. Promotion follows CI plus real-device A/B acceptance.

Light Remote MCP v0.9.1-beta.2

Light Remote MCP v0.9.1-beta.2

Golden-stack stabilization beta reconstructed from the proven deployed behavior while keeping the stable release source clean and reproducible.

Reliability baseline

• Preserves signed lr1 Vercel client continuity used by the recovered production bridge.
• Adds late-result recovery for abandoned Fleet commands, preventing valid delayed device results from being lost after the in-memory command entry has expired.
• Packages the result-delivery helper required by that recovery path.
• Keeps compatibility with the 0.9.0-rc.26 transition floor while beta2 is validated.

Wall polish

• Ordinary commands without a native PTY/FS/SEARCH/PROCESS/SCP badge now receive a neutral silver/black badge.
• Settings now has a matching icon.
• Copy cmd, Copy output, Copy raw, Copy visible, pairing, connect/disconnect, pause/resume, enrollment and navigation actions report through the Wall's own feedback UI.
• Refresh A performs a short 360-degree spin and reports completion.
• Manual held/orphan session cleanup is restored. Nothing is auto-closed, and sessions with active jobs cannot be closed from the cleanup UI.

Stable release scope

• Stable/Core source and packages exclude the experimental computer-use runtime.
• The experimental computer-use line remains isolated on its development branch for later work.
• The Netlify backup runtime remains retired; its former ARM ports stay reserved for intentional future reuse.

Promotion

This prerelease does not replace the recovered production Vercel/ARM golden runtime or promote the signed client update channel automatically. Promotion follows CI plus real-device A/B acceptance.

Light Remote MCP v0.9.1-beta.1

Light Remote MCP v0.9.1-beta.1

Stable/Core normalization beta.

Scope

• Core remote execution, Local Wall, Fleet, pairing/helper, updater and normal distribution paths.
• HTTP 410 stale hard-lease handling retained.
• Vercel Agent-client 401 transport hardening, deterministic connection helper and deploy continuity retained.
• Transition compatibility floor is 0.9.0-rc.26 so the current proven clients remain supported during rollout.
• Current Wall UI retained: Cascadia Mono, native operation labels, risk badges, shell/terminal syntax rendering, activity history, UTF-8 preservation and binary-output suppression.
• Real Remote is intentionally excluded from this beta.
• The Netlify backup lane is retired and excluded from this beta.

Provenance

• Clean pre-Real-Remote base: bf20fc0.
• 410 fix anchor: c21df07.
• 401 transport anchor: 05c3bb1.
• connection-helper determinism: 5d70192.
• Vercel client continuity: bf20fc0.
• UI/Core patchset: 8546864, 40dca94, fea2097, 95f32b9, 57e6411.
• Desktop/Real Remote residues from the historical UI branch were explicitly removed before release.

Distribution

The prerelease is expected to include Windows x64 full/compact installers, macOS x64/arm64 packages, Linux x64/arm64 client packages and debs, Linux Server/Hub x64/arm64 bundles, the Vercel bridge bundle, and a universal Fleet Wall module.

Signed update channels are not promoted until immutable release artifacts pass size/SHA verification and real-device acceptance.