Connector 1.1.3

A security fix. Your connector installs it on its own, usually within a day, without the usual two-day wait. If you turned updates off, ovenlight doctor flags the older release once the connector's daily check has found 1.1.3, and ovenlight update on lets it install.

• Only Ovenlight sends feedback. A script on an app's page, such as one the page loads from another site, could send feedback in the name of whoever was viewing the page. If you were the one viewing, your coding agent would take that feedback as your own note, not as a guest's words it treats as untrusted. The connector now refuses feedback from web pages. Feedback sent from the Ovenlight app on your phone works as before.
• More reaches your agent marked as untrusted. The page address sent with feedback can be set by the page itself, so it's now marked too, as guests' notes are. When your agent runs ovenlight feedback (with or without --json) or ovenlight status --json in a terminal, those mark the same text its tools do. ovenlight logs now marks an app's output too, since part of what an app prints is chosen by whoever opens it. ovenlight status now shows who sent the latest feedback, without the notes, which ovenlight feedback lists. A coding agent session already open when 1.1.3 installs keeps the old tools until you start a new one.

Downloads

• macOS, for Apple silicon and Intel, notarized
• Linux amd64 and arm64
• Windows x64 and Arm, signed by Snowy Ghost LLC
• SHA256SUMS and its signature: Install a release by hand has the steps to check them, with 1.1.3 as the release.

Connector 1.1.2

A small release of fixes. Your connector installs it on its own, two days after it first sees it.

• New apps start clean. An app made with ovenlight new no longer shows "false" under People while its list is empty.
• Doctor knows a Mac that never sleeps. Once you turn sleep off with sudo pmset -a disablesleep 1, which keeps a laptop serving with its lid closed, ovenlight doctor says the Mac never sleeps instead of warning about its idle timer. A laptop with its lid closed
• Publishing says where an app opens. When you or your coding agent publish an app, the connector says its address opens in Ovenlight on your phone, and in a browser only on a device running the Tailscale app signed in to your own Tailscale account. Your agent also hears when an app still needs the command that starts it, which you set in a terminal.
• Your agent's tools say what they do. Each tool the connector gives your coding agent now has a plain title, such as "Publish an app", and says whether it only reads or can change or remove something, so the app running your agent can tell which calls to check with you first.
• A quieter Mac install. The install no longer prints launchctl's Bootstrap failed: 5: Input/output error when its next try works. It still shows the error if every try fails.
• Tailscale sees Ovenlight's name. Each app's node now names Ovenlight in the device information it sends Tailscale, as other tsnet programs such as golinks do. What goes to Tailscale

On 1.0.9 or earlier? ovenlight version shows which release you have. Those releases don't update themselves. Run the install command for your computer once. It keeps your apps, and the connector updates itself from then on.

Downloads

• macOS, for Apple silicon and Intel, notarized
• Linux amd64 and arm64
• Windows x64 and Arm, signed by Snowy Ghost LLC
• SHA256SUMS and its signature: Install a release by hand has the steps to check them, with 1.1.2 as the release.

Connector 1.1.1

The connector now updates itself. 1.1.1 has the same code as 1.1.0, released so that a 1.1.0 connector has an update to install on its own.

On 1.0.9 or earlier? ovenlight version shows which release you have. Those releases don't update themselves. Run the install command for your computer once. It keeps your apps, and the connector updates itself from then on. On a Mac, the install may print Bootstrap failed: 5: Input/output error before it finishes: it still installs fine, so don't run it again as root. The next release stops printing it.

What's new since 1.0.9

• Updates install themselves. The connector checks once a day and installs a new release two days after it first sees it, at a quiet moment in the night. A fix for a security problem in your release goes in at the first quiet moment, day or night. ovenlight status shows what's waiting, and ovenlight update off turns updates off. How updates work
• Only releases we signed. The connector installs a release only when its index is signed by a release key built into the connector. If the new release doesn't serve your apps again within 10 minutes, it goes back to the one before. What it checks
• Fixes give your system's own commands. When the connector is stopped or stuck, ovenlight doctor and ovenlight check now give your system's start or restart command, where they used to send you to the install script. A connector that's running but doesn't answer gets the restart, and the start fix says where a crash left its reason.

Downloads

• macOS, for Apple silicon and Intel, notarized
• Linux amd64 and arm64
• Windows x64 and Arm, signed by Snowy Ghost LLC
• SHA256SUMS and its signature: Install a release by hand has the steps to check them, with 1.1.1 as the release.