Scout v0.2.108

What's Changed

• 📝 Document the MCP server in the repository README by @arach in #28
• 🔎 Improve npm discovery and agent onboarding for 0.2.108 by @arach in #29

Full Changelog: v0.2.107...v0.2.108

OpenScout macOS 0.2.106

Signed and notarized OpenScout macOS installer.

OpenScout 0.2.105

OpenScout 0.2.105 makes the reviewed Chat spaces and standalone agent CLI available as the supported npm release. Agents can join scoped invitations, post, listen, and reply over HTTP without a local Scout broker or profile. It also includes opt-in JetStream delivery and compact one-shot polling.

Packages: @openscout/scout@0.2.105 and @openscout/protocol@0.2.105.

Source: public oscout/scout commit 4f6679bb04ff580a99a4124d1875ce30cb3b68bd (PR #22; product changes in PR #21). Local signed candidates; no GitHub OIDC provenance is claimed. The attached integrity receipt binds the exact published package bytes.

This npm release does not include a new macOS DMG or the subsequent local menubar Budgets refinements.

OpenScout 0.2.103 — Hudson IPC terminals

Native terminal isolation

The terminal grid and footer shell now run their PTY, parser, scrollback, and Ghostty renderer in the Hudson XPC helper. Scout presents shared GPU frames with AppKit. Hidden panes retain their sessions while pausing frame export; returning to the grid keeps the existing tmux client.

• Preserve input entered while a terminal starts and deliver it in order.
• Release helper sessions when their last owner closes.
• Bound frame and resize retries, and stop stale callbacks from reviving closed sessions.
• Consolidate Home and Scoutbot navigation into one top row, with Reload and Open in Browser controls.
• Verify the patched engine against pinned archive, provenance, and extracted-file hashes during packaging.

Platform and validation

Apple silicon; macOS 26 or later. The release uses the macOS 26.5 SDK and preserves the deployment minimum. Source validation includes the Release app/helper builds, startup/lifetime regression tests, and packaging verification tests.

Known follow-ups include live terminal font/theme changes, full terminal-content accessibility, and cursor-accurate IME candidate placement. Correctness checks do not establish performance parity with standalone Ghostty.

This is a macOS app release. It does not publish an npm package or change the running broker.

OpenScout 0.2.102

OpenScout 0.2.102

This release brings the reviewed product updates into the public CLI, runtime, web interface and signed macOS app.

• Improved machine update planning, verification and operator status commands.
• Realtime voice, live finalization and session discovery fixes.
• Native-area web navigation, search and World view improvements.
• Web TypeScript cleanup: zero baselined type errors.

Install the CLI with bun add -g @openscout/scout@0.2.102, then run scout install --version v0.2.102 for the signed and notarized Mac app. Both OpenScout-0.2.102.dmg and OpenScout.dmg contain the same verified installer.

Public source: c509007, reviewed in PR #19. Validation passed: 6,002 Bun tests, 54 Node tests, full type checks and signed package audit. The npm publisher uses canonical oscout/scout GitHub OIDC provenance.

OpenScout remains intended for high-trust local developer pilots.

OpenScout macOS 0.2.98

Signed and notarized OpenScout macOS installer.

OpenScout macOS 0.2.95

Signed and notarized OpenScout macOS installer.

Scout v0.2.94

Public Scout core 0.2.94.

Published from oscout/scout via GitHub OIDC:

• @openscout/protocol@0.2.94
• @openscout/scout@0.2.94

macOS installer (signed and notarized):

• OpenScout-0.2.94.dmg
• OpenScout.dmg

Source tag matches public main. Native app Sparkle updates continue to follow the private product appcast.

Scout v0.2.92

Scout v0.2.92 ships the canonical public Scout core and baseline web control plane from oscout/scout through npm trusted publishing.\n\nPublished to latest:\n\n- @openscout/protocol@0.2.92: https://www.npmjs.com/package/@openscout/protocol/v/0.2.92\n- @openscout/scout@0.2.92: https://www.npmjs.com/package/@openscout/scout/v/0.2.92\n\nBoth packages carry the exact public merge commit 3ecfa87 and were built by release workflow 32986512226. The attached receipt records the SHA-512 integrity, SHA-256 digest, and byte size of both immutable registry tarballs.\n\nHighlights:\n\n- Makes the public control plane release-ready at 0.2.92 while preserving the one-way public-core/private-product boundary.\n- Removes a duplicated web-server graph and adds fail-closed package-footprint gates; the signed Scout tarball is 8,126,453 bytes with 445 files.\n- Hardens scout install around immutable app release assets, Developer ID and Gatekeeper verification, atomic replacement, rollback, and exact-path process handling.\n- Keeps private macOS/iOS build and DMG tooling out of the public source and CLI surface.\n- Documents the real platform contract: Apple-silicon macOS, plus Linux with a supervised foreground broker.\n- Establishes the public macOS distribution channel with an intentionally empty appcast until the notarized app is published and anonymously verified.\n\nThis package release does not contain the native DMG. OpenScout 0.2.92 for macOS will be published separately as app-v0.2.92 after signing, notarization, stapling, and anonymous verification; the appcast is promoted last.\n\nThis remains the reviewed two-package transition release. Additional public workspaces stay unpublished until their standalone package and composition contracts are ready.

Scout v0.2.91

Scout v0.2.91 is the first supported public package pair released from the canonical oscout/scout source through npm trusted publishing.

Published to latest:

• @openscout/protocol@0.2.91
• @openscout/scout@0.2.91

Both packages carry npm provenance for public merge commit d09c0c4459727a68b7fb90c2e9ad1f8f81e70b0a, built by the canonical release workflow. The attached receipt records the exact retained tarball integrity for the complete pair.

Highlights:

• Establishes Scout as the canonical public core: strong public primitives plus a complete baseline web control plane.
• Defines the sustainable product boundary: private products consume exact released public packages and add native apps, hosted services, advanced operations, and product-specific UI through trusted build-time composition—without copied public packages, source mirrors, synchronization jobs, or reverse dependencies.
• Publishes directly to latest through GitHub OIDC, with the exact candidate bundle uploaded before the first npm mutation.
• Adds fail-closed recovery bound to the exact workflow, public main SHA, release tag, and retained candidate bytes.
• Preserves the broker-owned bounded-working-set direction: large registry state belongs behind the broker and can be rehydrated through a reasonable cache TTL.

This is deliberately the two-package transition release. Public publication of @openscout/agent-sessions, @openscout/runtime, and @openscout/web remains deferred until their standalone exports, pack/install checks, and zero-extension composition contract are ready.

Historical note: 0.2.88 was partial, 0.2.89 produced no npm artifacts, and 0.2.90 was complete only under unpromoted staging tags. Those versions are unsupported and superseded by 0.2.91; they should not be manually completed or promoted.