Skip to content

v2.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 28 Aug 23:06
· 23 commits to main since this release
v2.0.0
7f7e300

Retro Web UI v2.0.0

v2.0.0 adds the first public Retro Web UI desktop application. It is a
Windows XP-style orchestration layer over the existing deterministic Core/CLI,
the Retro Web UI Skill, and the user's local Codex App Server session. It does
not introduce a separate semantic-conversion engine or ask for an OpenAI API
key.

Desktop workflow

The GUI lets users select a project and, when analysis finds multiple frontend
applications, choose the exact application. It exposes all four themes,
captures the behavior baseline, streams Codex planning and edits, presents
command/file/permission approvals with scope and risk, supports interrupt and
reconnect, and finishes with behavior comparison, audit, target verification,
Git diff, result classification, and Before/After evidence.

Codex integration uses local stdio JSONL and the current App Server lifecycle:
availability and version discovery, initialize, account/config/model reads,
thread/turn creation, streamed item events, correlated approval responses,
interruption, durable thread resume, and shutdown. Authentication remains owned
by the installed Codex CLI and the user's ChatGPT sign-in. Credentials, device
codes, login URLs, and account identifiers are neither requested nor persisted
by Retro Web UI.

Safety and compatibility

  • Core/CLI remains canonical for framework and monorepo detection, behavior
    artifacts, theme bundling, audit, verification, manifest compatibility, and
    shared contracts.
  • The selected application is canonicalized as the only agent write root;
    symlink traversal and outside-root selection are rejected.
  • Dirty Git state and modified files remain visible. Existing unrelated changes
    are never reverted automatically.
  • Target commands require an explicit approval showing argv, working directory,
    reason, and risk. Development/watch servers are not inferred as finite
    verification.
  • Complete, review-required, verification-failed, behavior-incompatible,
    interrupted, authentication-required, and unsupported states stay distinct.

The existing v1.1.0 Skill/CLI layouts and legacy helpers remain available. The
version increase reflects the new user-facing desktop product and App Server
contract, not a claim of universal framework support. Behavior hashes and
static audit remain review guardrails rather than proof of semantic equivalence.

Native packages

Release assets include:

  • macOS arm64 application ZIP (strictly verified ad-hoc signature; not notarized)
  • Windows x86_64 application ZIP (unsigned; not Authenticode signed)
  • Linux x86_64 tarball (requires a normal desktop display stack, glibc,
    libstdc++, and libEGL)
  • standalone Skill ZIP, Python wheel, and source distribution
  • SHA-256 files and per-platform native build reports

Python and Qt are bundled in native packages; Codex is deliberately not
bundled. Install and sign in to a compatible Codex CLI first. Native archives
include project and third-party notices, GPLv3/LGPLv3 texts, corresponding Qt
source locations, and a machine-readable component inventory. There is no
auto-updater in this release.

Evidence

The final candidate is gated by Python 3.9 minimum support, three-OS CLI and GUI
tests, reproducible wheel/sdist and Skill packaging, four-theme validation,
framework fixture builds, browser interaction/render smokes, native compilation
and startup on Windows/macOS/Linux, local macOS native App Server startup, fake
failure streams, and two real App Server/Skill conversions including pinned
TodoMVC examples/javascript-es6.

The TodoMVC conversion retained its generated JavaScript hash, behavior signals,
hash route, and browser console cleanliness; an upstream baseline todo-entry
failure is explicitly excluded from the conversion pass. Detailed scope,
failure classification, package sizes, and limitations are in the
desktop GUI engineering report.

The locked SvelteKit fixture still carries one low-severity development-only
cookie@0.6.0 advisory. npm audit --omit=dev reports zero production
vulnerabilities, and the fixture dependency is absent from every release asset.

Install

Install Codex and sign in with ChatGPT, then download the native archive for
your operating system from this release. Extract it and run Retro Web UI GUI.
Unsigned/ad-hoc packages may require the operating system's explicit local-app
approval. Do not bypass warnings for an archive whose SHA-256 does not match the
published checksum.

Install the versioned Skill for Codex discovery:

$skill-installer install https://github.com/ririri-rgb/retro-web-ui/tree/v2.0.0/skills/retro-web-ui

CLI-only users can install the wheel without Qt:

python3 -m venv .venv
.venv/bin/python -m pip install retro_web_ui_skill-2.0.0-py3-none-any.whl
.venv/bin/retro-web-ui info --json

On Windows use .venv\Scripts\python and
.venv\Scripts\retro-web-ui. Installing the CLI wheel does not copy the Skill
into Codex's Skill directory.

Assets 17
Loading