Skip to content

v1.24.1

Choose a tag to compare

View all tags
@marmutapp marmutapp released this 24 Jul 07:06
· 18 commits to main since this release
v1.24.1
b303ddf

Added

  • feat(terminal): generic terminal→session correlation sweep. Closes the
    Session Cockpit gap where only claude-code (out-of-band, 0.95 confidence)
    and codex (rollout discovery, 0.75) could link a dashboard-launched
    terminal to its observer session — every other launcher stayed
    uncorrelated. A 10s daemon-side, tool-agnostic discovery pass
    (termsvc.Correlate) now links any LIVE uncorrelated run to a UNIQUE
    candidate session (matched on tool + project root + a launch-time window
    of [−5s, +30m]) at SourceDiscovered 0.75 confidence — unique-or-abstain
    with a 2-tick dwell before committing a link, and tick-wide abstention on
    any unsound tick (hit caps, transient failures) rather than a partial or
    best-guess link. Both sides are revalidated immediately before a link
    commits; store queries use julianday-precise window arithmetic;
    dashboard-handoff runs are resolved via the source session's own project
    root; a new integration reverse map (launcher-verb → tool) normalizes the
    match. Open Session Cockpit panels self-heal through the existing 15s
    link poll — no frontend change needed.
  • feat(dashboard): themed tooltips. Finished the migration to the
    existing floating-ui Tooltip primitive across the sidebar collapsed
    rail, terminal toolbars (⊙ Session/Files/Git, focus/grid/minimize/close,
    size-mode, standing-secret), the Launch Dock, and the New Terminal
    dialog — aria-labels preserved or added throughout, and the Playwright
    specs flipped from title to aria-label assertions in lockstep. Native
    <option> titles are deliberately kept as-is, and the terminal-resize
    modal hint deliberately stays a native title (a persistent tooltip
    hovering a live terminal is worse than a native one).
  • feat(dashboard): Tailscale setup flow. The Configuration card's "Pair
    a device" action now gates on tailnet reachability: disabled with the
    exact missing step plus a "Go to Tailscale setup" scroll-link when the
    tailnet is known-unreachable, and enabled-with-caution when serve status
    can't be detected on older Tailscale CLIs. Device-side guidance was added
    to the serve-active step and the QR reveal ("install Tailscale on your
    phone/device and sign into the same tailnet", with iOS/Android/download
    links). The HTTPS-consent (enable_url) path now states plainly that
    approval alone does not start serving, and offers a Retry serve action.
    docs/remote-access.md updated to match.

Notes

  • Adversarial review: two codex GPT-5.6 passes (all findings fixed) plus an
    independent Claude Opus pass (verdict SHIP; its remaining findings —
    bounding the forward correlation window at 30 minutes, reconciling the
    remote-language e2e case, reverting the resize-hint tooltip, and a
    watcher-lag accessibility fix — were all applied). codex usage stayed
    capped through this work (resets 2026-07-28); the Opus substitution was
    operator-approved.

Downloads

Pre-built binaries for each supported platform are attached below. Linux variants bundle antigravity-bridge.exe next to the observer binary for WSL2 users of the Antigravity adapter.

Platform Asset
Linux x86_64 observer-v1.24.1-linux-x64.tar.gz
Linux arm64 observer-v1.24.1-linux-arm64.tar.gz
macOS x86_64 (Intel) observer-v1.24.1-darwin-x64.tar.gz
macOS arm64 (Apple Silicon) observer-v1.24.1-darwin-arm64.tar.gz
Windows x86_64 observer-v1.24.1-win32-x64.zip

Verify with sha256sum -c SHA256SUMS (or shasum -a 256 -c SHA256SUMS on macOS) from the directory containing the downloads.

Also available via npm: npm install -g @superbased/observer@1.24.1

Org server (Docker)

The self-hosted org server ships as a Docker image and as per-platform observer-org-v1.24.1-* archives (attached below).

docker pull ghcr.io/superbasedapp/observer-org:v1.24.1

The image is keyless-signed with cosign. Verify it:

cosign verify ghcr.io/superbasedapp/observer-org:v1.24.1 \
  --certificate-identity-regexp 'https://github.com/marmutapp/superbased-observer-private/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Supply chain

CycloneDX SBOMs are attached: observer.cdx.json and observer-org.cdx.json.

SLSA Level 3 build provenance for the binaries is attached below as a *.intoto.jsonl attestation. The build runs on the private origin repo, so pass that as the source when verifying an extracted binary with slsa-verifier v2.7.0 or newer (older versions fail with unexpected tlog entry type: expected intoto:0.0.2, got dsse:0.0.1):

slsa-verifier verify-artifact ./observer \
  --provenance-path *.intoto.jsonl \
  --source-uri github.com/marmutapp/superbased-observer-private
Assets 16
Loading