Skip to content

v1.10.0

Choose a tag to compare

View all tags
@marmutapp marmutapp released this 23 Jun 18:12
· 16 commits to main since this release
v1.10.0
3e92a93

Added

  • Teams (org) dashboard overhaul. The org admin dashboard now shows
    significantly more by default and matches the primary dashboard's UI.
    Ported the web/ design system into the org dashboard (web2/) and
    added a family of content-free, role-scoped rollups + pages: an
    enriched Overview (tokens, cache, reliability, errors, latency, tool/
    model mix, activity), People, Tools/Models/Activity,
    Telemetry (native-console vendor analytics), Sessions (scoped,
    audited, per-session drill-down), Optimize/Routing (savings +
    advise-vs-enforce), Live (who's working now), Movers, a
    print-friendly Cost report, Suggestions (content-free advisor),
    a global tool filter, and a ⌘K command palette.
  • Audited message-content viewer. GET /api/org/sessions/{id}/messages
    surfaces the captured native-OTel message bodies (prompts / tool input/
    output) for a session — but only where the node already opted to share
    them (full_content / admin_managed). It is a read of already-shipped
    data: no new agent wire column and no agent migration. Viewing it is a
    distinct, deeper audited disclosure (view_session_messages), scoped
    like the session detail (out-of-scope ⇒ 404).
  • Admin-configurable message-content retention ([dashboard.content_retention] .otel_content_days, default 0 = keep forever): a daily server-side sweep
    that NULLs old otel_content bodies while keeping their content hashes.

Notes

  • Privacy posture unchanged: content-free aggregation by default;
    per-developer disclosures (People / Sessions / Live / messages) are
    audited; project identity is the hash, never the raw path; the
    never-read body columns stay off the push seam. No remote content
    toggle — content sharing remains node-side opt-in / admin-provisioned.

Downloads

Pre-built binaries for each supported platform are attached below. Linux variants bundle antigravity-bridge.exe next to the observer binary for WSL2 users of the Antigravity adapter.

Platform Asset
Linux x86_64 observer-v1.10.0-linux-x64.tar.gz
Linux arm64 observer-v1.10.0-linux-arm64.tar.gz
macOS x86_64 (Intel) observer-v1.10.0-darwin-x64.tar.gz
macOS arm64 (Apple Silicon) observer-v1.10.0-darwin-arm64.tar.gz
Windows x86_64 observer-v1.10.0-win32-x64.zip

Verify with sha256sum -c SHA256SUMS (or shasum -a 256 -c SHA256SUMS on macOS) from the directory containing the downloads.

Also available via npm: npm install -g @superbased/observer@1.10.0

Org server (Docker)

The self-hosted org server ships as a Docker image and as per-platform observer-org-v1.10.0-* archives (attached below).

docker pull ghcr.io/marmutapp/observer-org:v1.10.0

The image is keyless-signed with cosign. Verify it:

cosign verify ghcr.io/marmutapp/observer-org:v1.10.0 \
  --certificate-identity-regexp 'https://github.com/marmutapp/superbased-observer-private/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Supply chain

CycloneDX SBOMs are attached: observer.cdx.json and observer-org.cdx.json.

SLSA Level 3 build provenance for the binaries is attached below as a *.intoto.jsonl attestation. The build runs on the private origin repo, so pass that as the source when verifying an extracted binary with slsa-verifier v2.7.0 or newer (older versions fail with unexpected tlog entry type: expected intoto:0.0.2, got dsse:0.0.1):

slsa-verifier verify-artifact ./observer \
  --provenance-path *.intoto.jsonl \
  --source-uri github.com/marmutapp/superbased-observer-private
Assets 16
Loading