v1.0.18

Respire CLI 1.0.18

Stable release.

Changes since v1.0.16.

Features

• feat: add desktop host account RPC without credential arguments (#170) — * feat: expose host account RPC over bounded standard input (cd61f9f9)
• feat(sync): recover compacted snapshots and release CLI 1.0.17 (#169) [manual-release] — * feat(sync): recover paging after server history compaction (1dcc602c)
• feat(runtime): ship opt-in user supervision and recovery fixes (#147) — Add default-off current-user sign-in supervision for Windows, macOS and Linux, with coordinated runtime lifecycle and verified process ownership. Integrate reviewed undecodable-head recovery and reset fixes. Validation: three-platform native lifecycle and fault acceptance, 132 CLI unit tests, 54 storage tests and 90.08% CLI line coverage. (1813cc74)
• feat(runtime): bound crash retries and test interrupted managed transitions (5cc9b80d)
• feat: connect foreground runtime commands and fenced user lifecycle (57045fa0)
• feat: prepare opt-in user runtime registration and ownership adapters (59fbaed1)
• feat: add bounded authenticated private SDK reader (#128) (0dcb613c)

Fixes

• fix(ci): serialize legacy macOS upgrade seeding for CLI 1.0.18 (#171) [manual-release] — The immutable 1.0.6 baseline timed out during model preparation in two parallel upgrade runs. Keep every baseline and assertion, but avoid competing macOS model loads. Prepare CLI 1.0.18 without moving the failed 1.0.17 tag. [manual-release] (8a162295)
• fix: preserve tracked RPC budgets and executable chain guidance (#156) [manual-release] — fix: preserve tracked RPC budgets and executable chain guidance (a5118088)
• fix: classify tracked RPC commands and keep chain examples executable (1d4cbe0a)
• fix(rpc): give reembed/sync/import the long RPC budget (#153) — Full-store re-embeds, first-sync uploads and batch imports legitimately exceed the 120s default, but the timeout table only widened the budget for model.install/install-m3/activate. Match the leading subcommand instead of the first two non-flag tokens so a target path argument no longer hides the verb. (52bc5261)
• fix(sync): preserve confirmed diary branches until explicit conflict resolution (2ed1524b)
• fix: open diary cache through canonical library directories (08e8e4a8)
• fix: preserve bounded diary retrieval and cancellation contracts (5ad66eed)
• fix(diary): preserve full-text matches and guard derived cache commits (58a1cd27)
• fix(windows): recover suspended runtime with verified native identity [manual-release] — Merge audited PR #148 after final CLI CI and all three native lifecycle checks passed. Full DEV.8 release regression will run against this exact merged source using the existing explicit empty-draft recovery workflow. (fb2ef353)
• fix(windows): verify suspended runtime identity with native process queries (4c6065a6)
• fix(runtime): bind supervisor process tree and test parent failure (8dbaf591)
• fix(runtime): supervise Windows foreground child with bounded retries (220888a4)
• fix(sync): advance recovery beyond inspected remote timestamp (454dd24e)
• fix(runtime): report supervised Windows failures as failure status (eeb68075)
• fix(runtime): allocate dispatcher stack independent of shell (e68f5705)
• fix(runtime): retain explicit background network opt-outs (44930da0)
• fix(runtime): verify effective Limited scheduler principal (2d291a35)
• fix(runtime): validate encoding-neutral scheduler XML (2aab3ee4)
• fix(runtime): bound task errors and recover failed registration (d441fb3c)
• fix(runtime): use literal service commands and bounded module-free task control (04e0ff4d)
• fix(runtime): validate native supervision and interrupted-state recovery (253b8ba6)
• fix(runtime): preserve managed off-mode and verify literal service paths (3ca728be)
• fix(runtime): address native service acceptance failures and collect actual coverage (cebbeddc)
• fix(runtime): coordinate managed binary updates and explicit recovery (a26728c0)
• fix(runtime): fence interrupted managed lifecycle and validate loaded service state (9a1cc8d5)
• fix: invalidate acknowledged recovery decisions on snapshot reset (7ab15324)
• fix(cli): document and verify Windows host sign-in startup (#136) — * fix(cli): document and validate host sign-in startup (3fd5a2b8)
• fix(cli): stabilize JSON receipts, diary titles and capability discovery (#135) — * fix(cli): stabilize write receipts, diary titles and feature discovery (3f6dd8a9)
• fix(cli): isolate index threads and require a matching Core SDK (#125) — * fix(cli): isolate index thread policy and reject incompatible Core SDKs (87f92c2d)

Other changes

• ci: await background indexing before model installation acceptance (#168) — Faster report writes exposed model install racing the index scheduled by MCP fixtures. Poll the owned runtime for a ready index and inactive model task without cancellation, fail on invalid states, and share the original command deadline. (63fd648f)
• [manual-release] Automate tag releases and accelerate full acceptance (#167) — * ci: automate tagged releases and speed up full acceptance (553447d2)
• [manual-release] ci: cache Rust dependencies for source checks (#166) — Reuse third-party Cargo dependencies in separate ordinary and instrumented caches while rebuilding workspace code and rerunning every check. Preserve restored timestamps so Cargo fingerprints remain reusable. Keep source jobs read-only and save validated archives in an isolated write-only job. (8406da7c)
• [manual-release] Use the relocated DEV API for release acceptance (#165) — Replace active api.dev.rsrs.rs acceptance destinations with api-dev.rsrs.rs and recognize the new API origin in browser login. Preserve the server-advertised DEV dashboard and fixed historical recovery checks. (c6f9d5a3)
• [manual-release] Restore native Windows ARM64 CLI packages (#164) — * [manual-release] Restore native Windows ARM64 CLI packages (e4b108c3)
• [manual-release] ci: speed up password hashing and coverage artifacts (#162) — Optimize only third-party sha2 in dev/test while retaining unoptimized workspace code, debug assertions, overflow checks, unchanged KDF algorithms/iterations, all tests and the 90% line coverage gate. Release profiles are unchanged. (d3ecb982)
• [manual-release] ci: parallelize coverage and dispatch npm after acceptance (#161) — Split the full coverage test inventory into three isolated runners, merge current-run counters and executable mappings, and keep the 90% line coverage gate and all independent checks. (6802b1d1)
• [manual-release] feat: restore native Linux ARM64 GNU and musl delivery (#159) — * wip: pin original preparation proof before guarded import (7a716f6c)
• [manual-release] fix: preserve draft publication identity and durable intent (#160) — * fix: preserve draft tags and discover durable publication intents (22833773)
• ci: publish exact verified preparation with registered consumers (#158) [manual-release] — * wip: pin original preparation proof before guarded import (55a4976f)
• ci: attest complete unpublished release preparation (#157) [manual-release] — ci: bind prepared release artifacts to complete validation (9359d866)
• ci: attest exact unpublished release preparation and reserve alias versions (7c2c5214)
• Merge remote-tracking branch 'origin/main' into fix/dev12-command-contracts (d40be3e0)
• ci: parallelize independent source and release checks (#155) [manual-release] — ci: parallelize independent source and release checks (0c091042)
• test: reject mismatched migration join report files (dd994e23)
• ci: measure validation through the latest required completion (bf95484e)
• Merge remote-tracking branch 'origin/main' into ci/parallel-release-checks — # Conflicts: # .github/workflows/ci.yml # .github/workflows/release.yml # docs/release-validation.md # npm/scripts/publication-acceptance.mjs (6ad953dd)
• ci: reduce source debug metadata without weakening test checks (079e16ef)
• ci: separate npm acceptance from public verification (#154) [manual-release] — Require exact successful npm submissions before public Release; verify registry propagation and isolated installation independently. Preserve durable cross-run version intent, strict write-attempt guards and post-consumer cleanup fences. Validated with 132 Node tests, 35 wrapper cases, exact-head CI and independent review. (a2a0b064)
• ci: keep offline ownership checks with their workspace dependencies (9a319d51)
• ci: bind every fenced package to the planned version (4216d8b7)
• ci: bind every fenced package to the planned version (c48ae7b6)
• ci: fence immutable npm versions across Release runs (7ee7c628)
• ci: fence immutable npm versions across Release runs (bc976e07)
• ci: support explicit source checks on dependency branches (8a3f072f)
• ci: keep readiness waits outside publication locks and report phase timings (cb93b780)
• ci: separate workspace tests from CLI coverage (9e6d22ed)
• ci: run independent contracts and native migration fixtures in parallel (df80ec5b)
• ci: require an existing source tag for public verification (d0a0359f)
• ci: verify public receipts after terminal publication failures (919c2a6e)
• ci: require acceptance protocol before scoped npm writes (e2f2723e)
• ci: retain no-submission journals through preflight failures (960a2e45)
• ci: separate npm acceptance from public verification (7816ebf1)
• wip: preserve DEV12 RPC timeout regression reproduction (c5d83895)
• docs: 提示词补查因及果——承重命中先跑 chain，勿以标题当全貌 (#151) — --titles 与 show 各只到一层，深因远果只在 chain --depth 1-3： 在 respire.md 加 Causal chain 段与「查因及果（硬）」，lite 同步一句， WorkBuddy 参考块第 1 条一并点明。原有硬约束未删未弱化。 (d9990509)
• Merge PR #152: preserve confirmed diary branches during sync conflicts — Preserve unresolved live diary working copies while retaining canonical sync history and explicit CAS resolution. Keep real-model, readonly/drain and account-isolation gates, and run GNU coverage alongside native validation with a fail-closed aggregate. (1829b86d)
• ci: run GNU coverage alongside native model validation (c69a4a48)
• test(diary): apply bounded model preparation to profile readiness (9445e2bd)
• test(diary): separate model preparation from inference observation budget (2d19e9d1)
• Merge PR #150: add bounded diary fragment retrieval — Add diary-search and diary-fragment CLI/MCP interfaces, full-body diary matching, guarded background indexing, and exact-source cross-platform real-model validation. (5a0c086a)
• test: prepare ordinary index before diary cancellation probe (9e10e35c)
• test: verify diary cache content stays fenced after readonly acknowledgement (0f3336c4)
• test: exercise real-model diary retrieval and bounded scale fixtures (55afda86)
• test: cover diary isolation and runtime commit fences (ae4836ac)
• 同步：整合官方运行时更新并保留日记检索草案 (611b4da6)
• 功能：增加有界日记片段检索与来源定位草案 (8eea6d43)
• test(release): recognize existing index-load progress phase [manual-release] — Merge audited PR #149 after exact-head full CLI CI and progress-contract negative controls passed. No product code changes. DEV.8 will rerun all normal release gates on this exact merged source after its prior run terminates. (b0c1f74a)
• test(release): accept the existing index-load progress phase (66270bf8)
• test(windows): verify full process instances through crash and profile recovery (f04b9531)
• test(windows): retain exited owner handles across restart identity checks (70e21c67)
• test(windows): exercise the lifecycle restart in off-mode suspension recovery (6e61446f)
• Preserve explicit stalled-inference recovery outside healthy managed restart (beefa4f3)
• Record fixed restart stages and verify managed recovery routing (b2bb9735)
• Restart healthy managed owners through the service coordinator and bound Windows inspection (7c445756)
• Integrate reviewed conflict recovery into the opt-in runtime release (48ec34b5)
• Test tampered startup registration rejection without changing evidence (599d6fe6)
• Confirm lost shutdown acknowledgements and inspect owned Windows processes natively (1cb1de34)
• test(runtime): diagnose actual supervisor crash policy (589b86ad)
• test(runtime): identify strict scheduler readback failures (ea62dd19)
• test(runtime): exercise opt-in supervision on three native platforms (1e2f3401)
• Merge remote-tracking branch 'origin/main' into fix/undecodable-head-recovery-review (8ef2e29e)
• Merge pull request #145 from risense-ai/fix/cicd-publication-recovery — ci: bound npm registry retries and fix PTY cleanup race (708ea394)
• ci: tolerate reaped descendants during PTY fixture cleanup checks (ef8a5e73)
• ci: release transient registry HTTP response bodies before retry (827c2c1b)
• ci: retain observed npm version identity across propagation misses (1dc52a2a)
• ci: share one deadline across registry publication read stages (30809482)
• ci: bound registry preflight and tag read retries without resubmitting (2b8896fa)
• ci: retry transient registry reads within publication deadline (a6bb30cd)
• Procedural memory P0-P2 with how-to routing, run-log verdicts and coverage-widened doctor fixture (#137) — * feat: procedural recall routing, run receipts, and skill template audit (698fe9d2)
• 修复：为不可解析的远端修订增加受控恢复草案 — 保留本地修改和版本并发校验，使用持久幂等键避免重复恢复累积冲突。已完成代码复核与 SQL 事务检查；Rust 回归用例因缺少官方 Core SDK 尚未执行，需维护者验证后决定合并。 (afd86fa4)
• [manual-release] fix: preserve witness and MCP release fixtures (#143) — * fix: preserve witness chains in legacy migration fixtures (d5001f8c)
• Integrate scientist memory safety and opt-in feedback research mechanisms (#142) — * Add verified local snapshots with controlled restore and sync quarantine (157dd870)
• ci: isolate private SDK download from token-free native builds (#129) — * ci: isolate private SDK credentials from native source validation (9d358bc9)
• chore: retire CLI SDK crate publication (#127) — * chore: retire CLI SDK crate publication (86a4180d)
• ci: clean consumed release artifacts after a one-hour grace period (#126) — * ci: clean opted-in release artifacts after all consumers finish (a37063ef)
• Merge pull request #124 from risense-ai/fix/index-rebuild-limits — cli: make long index rebuilds survivable (4495fb86)
• cli: make long index rebuilds survivable — A full-library m3 rebuild could not finish: every Core call was killed at 365s, `model activate` / `reembed` were killed after a hard 30 minutes, and indexing ran single-threaded. The result was a store stuck at "index 0%" with semantic recall silently falling back to word matching. (5a241376)
• docs: retrieval feedback, witness log, snapshot, and MCP policy proposals (#123) — Co-authored-by: fslong <470657570@qq.com> (fe501f89)
• docs(prompt): require fact-extracted titles in English rules, anchor and WorkBuddy skill (#117) — The Chinese policy (三·五) mandates event-fact titles since 1.0.12, but the English contract section, the 铁锚 line placeholder and the WorkBuddy skill only said "Pass title", leaving the extraction rule unstated on those surfaces. Recall injects titles first, so agents need the constraint where they read it: extract subject + action + key entity/result (12-24 chars), never a bare topic label. (0e28708b)

Commits

Commit	Change
8a162295	fix(ci): serialize legacy macOS upgrade seeding for CLI 1.0.18 (#171) [manual-release]
cd61f9f9	feat: add desktop host account RPC without credential arguments (#170)
1dcc602c	feat(sync): recover compacted snapshots and release CLI 1.0.17 (#169) [manual-release]
63fd648f	ci: await background indexing before model installation acceptance (#168)
553447d2	[manual-release] Automate tag releases and accelerate full acceptance (#167)
8406da7c	[manual-release] ci: cache Rust dependencies for source checks (#166)
c6f9d5a3	[manual-release] Use the relocated DEV API for release acceptance (#165)
e4b108c3	[manual-release] Restore native Windows ARM64 CLI packages (#164)
d3ecb982	[manual-release] ci: speed up password hashing and coverage artifacts (#162)
6802b1d1	[manual-release] ci: parallelize coverage and dispatch npm after acceptance (#161)
7a716f6c	[manual-release] feat: restore native Linux ARM64 GNU and musl delivery (#159)
22833773	[manual-release] fix: preserve draft publication identity and durable intent (#160)
55a4976f	ci: publish exact verified preparation with registered consumers (#158) [manual-release]
9359d866	ci: attest complete unpublished release preparation (#157) [manual-release]
a5118088	fix: preserve tracked RPC budgets and executable chain guidance (#156) [manual-release]
7c2c5214	ci: attest exact unpublished release preparation and reserve alias versions
d40be3e0	Merge remote-tracking branch 'origin/main' into fix/dev12-command-contracts
0c091042	ci: parallelize independent source and release checks (#155) [manual-release]
1d4cbe0a	fix: classify tracked RPC commands and keep chain examples executable
dd994e23	test: reject mismatched migration join report files
bf95484e	ci: measure validation through the latest required completion
6ad953dd	Merge remote-tracking branch 'origin/main' into ci/parallel-release-checks
079e16ef	ci: reduce source debug metadata without weakening test checks
a2a0b064	ci: separate npm acceptance from public verification (#154) [manual-release]
9a319d51	ci: keep offline ownership checks with their workspace dependencies
4216d8b7	ci: bind every fenced package to the planned version
c48ae7b6	ci: bind every fenced package to the planned version
7ee7c628	ci: fence immutable npm versions across Release runs
bc976e07	ci: fence immutable npm versions across Release runs
8a3f072f	ci: support explicit source checks on dependency branches
cb93b780	ci: keep readiness waits outside publication locks and report phase timings
9e6d22ed	ci: separate workspace tests from CLI coverage
df80ec5b	ci: run independent contracts and native migration fixtures in parallel
d0a0359f	ci: require an existing source tag for public verification
919c2a6e	ci: verify public receipts after terminal publication failures
e2f2723e	ci: require acceptance protocol before scoped npm writes
960a2e45	ci: retain no-submission journals through preflight failures
7816ebf1	ci: separate npm acceptance from public verification
c5d83895	wip: preserve DEV12 RPC timeout regression reproduction
d9990509	docs: 提示词补查因及果——承重命中先跑 chain，勿以标题当全貌 (#151)
1829b86d	Merge PR #152: preserve confirmed diary branches during sync conflicts
52bc5261	fix(rpc): give reembed/sync/import the long RPC budget (#153)
c69a4a48	ci: run GNU coverage alongside native model validation
9445e2bd	test(diary): apply bounded model preparation to profile readiness
2d19e9d1	test(diary): separate model preparation from inference observation budget
2ed1524b	fix(sync): preserve confirmed diary branches until explicit conflict resolution
5a0c086a	Merge PR #150: add bounded diary fragment retrieval
9e10e35c	test: prepare ordinary index before diary cancellation probe
08e8e4a8	fix: open diary cache through canonical library directories
0f3336c4	test: verify diary cache content stays fenced after readonly acknowledgement
55afda86	test: exercise real-model diary retrieval and bounded scale fixtures
ae4836ac	test: cover diary isolation and runtime commit fences
5ad66eed	fix: preserve bounded diary retrieval and cancellation contracts
58a1cd27	fix(diary): preserve full-text matches and guard derived cache commits
611b4da6	同步：整合官方运行时更新并保留日记检索草案
8eea6d43	功能：增加有界日记片段检索与来源定位草案
b0c1f74a	test(release): recognize existing index-load progress phase [manual-release]
66270bf8	test(release): accept the existing index-load progress phase
fb2ef353	fix(windows): recover suspended runtime with verified native identity [manual-release]
f04b9531	test(windows): verify full process instances through crash and profile recovery
70e21c67	test(windows): retain exited owner handles across restart identity checks
6e61446f	test(windows): exercise the lifecycle restart in off-mode suspension recovery
4c6065a6	fix(windows): verify suspended runtime identity with native process queries
1813cc74	feat(runtime): ship opt-in user supervision and recovery fixes (#147)
beefa4f3	Preserve explicit stalled-inference recovery outside healthy managed restart
b2bb9735	Record fixed restart stages and verify managed recovery routing
7c445756	Restart healthy managed owners through the service coordinator and bound Windows inspection
48ec34b5	Integrate reviewed conflict recovery into the opt-in runtime release
599d6fe6	Test tampered startup registration rejection without changing evidence
1cb1de34	Confirm lost shutdown acknowledgements and inspect owned Windows processes natively
8dbaf591	fix(runtime): bind supervisor process tree and test parent failure
220888a4	fix(runtime): supervise Windows foreground child with bounded retries
454dd24e	fix(sync): advance recovery beyond inspected remote timestamp
eeb68075	fix(runtime): report supervised Windows failures as failure status
e68f5705	fix(runtime): allocate dispatcher stack independent of shell
589b86ad	test(runtime): diagnose actual supervisor crash policy
44930da0	fix(runtime): retain explicit background network opt-outs
2d291a35	fix(runtime): verify effective Limited scheduler principal
ea62dd19	test(runtime): identify strict scheduler readback failures
2aab3ee4	fix(runtime): validate encoding-neutral scheduler XML
d441fb3c	fix(runtime): bound task errors and recover failed registration
04e0ff4d	fix(runtime): use literal service commands and bounded module-free task control
253b8ba6	fix(runtime): validate native supervision and interrupted-state recovery
3ca728be	fix(runtime): preserve managed off-mode and verify literal service paths
cebbeddc	fix(runtime): address native service acceptance failures and collect actual coverage
1e2f3401	test(runtime): exercise opt-in supervision on three native platforms
5cc9b80d	feat(runtime): bound crash retries and test interrupted managed transitions
a26728c0	fix(runtime): coordinate managed binary updates and explicit recovery
9a1cc8d5	fix(runtime): fence interrupted managed lifecycle and validate loaded service state
57045fa0	feat: connect foreground runtime commands and fenced user lifecycle
59fbaed1	feat: prepare opt-in user runtime registration and ownership adapters
7ab15324	fix: invalidate acknowledged recovery decisions on snapshot reset
8ef2e29e	Merge remote-tracking branch 'origin/main' into fix/undecodable-head-recovery-review
708ea394	Merge pull request #145 from risense-ai/fix/cicd-publication-recovery
ef8a5e73	ci: tolerate reaped descendants during PTY fixture cleanup checks
827c2c1b	ci: release transient registry HTTP response bodies before retry
1dc52a2a	ci: retain observed npm version identity across propagation misses
30809482	ci: share one deadline across registry publication read stages
2b8896fa	ci: bound registry preflight and tag read retries without resubmitting
a6bb30cd	ci: retry transient registry reads within publication deadline
698fe9d2	Procedural memory P0-P2 with how-to routing, run-log verdicts and coverage-widened doctor fixture (#137)
afd86fa4	修复：为不可解析的远端修订增加受控恢复草案
d5001f8c	[manual-release] fix: preserve witness and MCP release fixtures (#143)
157dd870	Integrate scientist memory safety and opt-in feedback research mechanisms (#142)
3fd5a2b8	fix(cli): document and verify Windows host sign-in startup (#136)
3f6dd8a9	fix(cli): stabilize JSON receipts, diary titles and capability discovery (#135)
87f92c2d	fix(cli): isolate index threads and require a matching Core SDK (#125)
9d358bc9	ci: isolate private SDK download from token-free native builds (#129)
0dcb613c	feat: add bounded authenticated private SDK reader (#128)
86a4180d	chore: retire CLI SDK crate publication (#127)
a37063ef	ci: clean consumed release artifacts after a one-hour grace period (#126)
4495fb86	Merge pull request #124 from risense-ai/fix/index-rebuild-limits
5a241376	cli: make long index rebuilds survivable
fe501f89	docs: retrieval feedback, witness log, snapshot, and MCP policy proposals (#123)
0e28708b	docs(prompt): require fact-extracted titles in English rules, anchor and WorkBuddy skill (#117)

Full comparison

Install

npm install -g rsrs-cli@1.0.18 --registry=https://registry.npmjs.org
rsrs --version

Source and validation

• Source: 8a162295973021eb62aad9e8da4abeaa48936f9a.
• Publication requires the existing platform, CLI and development API acceptance gates.
• Release workflow.