Repository navigation
Kintsugi v0.4.5
Kintsugi v0.4.5
The 23 October upstream batch updates Agent recovery, terminals, Files and Changes while retaining Kintsugi's credential, network and release safeguards.
v0.4.4 failed CI before image publication and was not published. This release separates root installer checks from unprivileged helper fixtures.
Agent and terminals
- Pi, chord and code mode advance together to 1.4.0; Bun advances to 1.4.4.
- Agent gains queued follow-ups, recovery and crash controls, with script-file support. Extra provider suggestion inference and automatic review commits remain excluded.
- A local Go workspace helper handles terminal processes and file metadata over a Unix socket. Mutual TLS uses an identity derived from the existing gateway credential, stored outside workspace-user mounts. Namespace checks and a separate socket mount bind access to the workspace; ingress and egress mounts remain read-only.
- Existing persisted bash operations retain their backend and recovery receipts. New terminal operations use a separate task identity, avoiding command replay during migration. Terminal viewers, Stop, reconnect and the mobile key accessory use the shared terminal transport. History limits are applied before pane creation for older tmux versions; local terminal-process caches follow the data directory and reset during cleanup.
Files and Changes
Pierre 1.6.1 adds the updated editor, highlighting and link handling. Changes gains buckets and commit/range links. Office, CSV/TSV and Draw.io previews, explicit Review delivery, ast-grep and browser-local centred timestamps are retained.
Uniform Go runtime
All eleven shipped runtime executables are rebuilt with Go 1.26.10 on native AMD64 and ARM64, including Docker CLI, Buildx, Compose and Ubuntu's patched runc. Binary metadata and EROFS smoke tests passed before publication. App, System and workspace builds share the immutable runtime manifest sha256:927bea2d5276f87de04d7934b19124c48f9bd1c877743cace382bd5271ffbfe4.
Existing CLI/plugin versions, Ubuntu runc patches and licence notices are retained. Go build/module caches and unused BuildKit cache mounts were cleared without deleting images, volumes or workspace data.
Verification and operation
Release verification runs frozen installs, lint/types, asset builds and the bounded full suite from a clean checkout. Manual checks cover terminal lifecycle, Pierre autosave, Markdown file references and CSV preview. Composer layout passed 89/89 checks across six explicitly partial desktop/mobile Chrome scenarios. Tab delivered byte 9 with simulated keyboard visibility. Production inference and physical/iOS soft keyboards are not live-qualified; the live Pi setup requires a connected provider and enabled model.
One-shot limits, caller identity and credential grants, explicit plan/Review boundaries, network restrictions and DNS pinning, custom sources, version pins and paired rollback are unchanged. No application environment variable is added. System capability remains 3, app minimum 0, network-policy reader 2 and resource-policy reader 1.
Publication advances latest only; stable stays at v0.4.1. No installation is updated or restarted. Before downgrading, stop active scripts and agents and back up app data; image rollback does not restore journals or settings.
Adapted from Lucas Meijer's AgentsInTheCloud through 063c8b202355ac23c7cf683b3ce0571d5ab33d4c. Lucas Meijer and Larry Hudson attribution and MIT notices remain intact.