Skip to content

v1.25.0

Choose a tag to compare

View all tags
@marmutapp marmutapp released this 24 Jul 13:21
· 9 commits to main since this release
v1.25.0
db11d4d

Added

  • feat(terminal): dashboard-launched terminals joinable by default.
    /api/attach/sessions widened to every live daemon-owned run kind
    (fresh/handoff/attach/resume) — a terminal launched from the dashboard is
    now itself a Jump-in candidate, not just an --attach session. A handoff
    terminal's row keys by the FORKED session (not the source it continued
    from), so it's joined from the fork's session detail once correlation links
    it. JumpInButton's copy and newest-row selection (picking the most
    recently created live row when more than one matches a session) were
    updated to match the wider row set.
  • feat(attach): attach-by-default for all 19 CLI launchers. Every
    observer <verb> launcher (claude, codex, opencode, cursor, copilot-cli,
    kilo, cline-cli, hermes, gemini, openclaw, pi, antigravity-cli, qwen, kiro,
    grok, kimi, devin, qoder, goose) now attaches by default the same way
    claude/codex have — a shared launcher gate plus 19 new integration-registry
    Attach rows (tool key → launcher verb). Auto-resume-on-daemon-restart stays
    gated to the two tools with a verified native resume (claude, codex) — every
    other launcher gets an honest degraded-mortality notice instead (a daemon
    restart ends the session outright; observer <verb> --continue-from <session-id> is the manual fork fallback). Proxy env forwarding and
    [terminal.attach].route_proxy / --no-proxy remain claude/codex-scoped —
    every other tool's daemon-spawned inner launcher handles its own
    base-URL routing itself. Note the attached child inherits the DAEMON's
    environment, not the launching shell's — a credential exported only in the
    launching shell won't reach it (config-file/OAuth auth unaffected; export
    it where observer start runs, or use --no-attach). JumpInButton's verb map extended to cover
    all 19 tools.

Downloads

Pre-built binaries for each supported platform are attached below. Linux variants bundle antigravity-bridge.exe next to the observer binary for WSL2 users of the Antigravity adapter.

Platform Asset
Linux x86_64 observer-v1.25.0-linux-x64.tar.gz
Linux arm64 observer-v1.25.0-linux-arm64.tar.gz
macOS x86_64 (Intel) observer-v1.25.0-darwin-x64.tar.gz
macOS arm64 (Apple Silicon) observer-v1.25.0-darwin-arm64.tar.gz
Windows x86_64 observer-v1.25.0-win32-x64.zip

Verify with sha256sum -c SHA256SUMS (or shasum -a 256 -c SHA256SUMS on macOS) from the directory containing the downloads.

Also available via npm: npm install -g @superbased/observer@1.25.0

Org server (Docker)

The self-hosted org server ships as a Docker image and as per-platform observer-org-v1.25.0-* archives (attached below).

docker pull ghcr.io/superbasedapp/observer-org:v1.25.0

The image is keyless-signed with cosign. Verify it:

cosign verify ghcr.io/superbasedapp/observer-org:v1.25.0 \
  --certificate-identity-regexp 'https://github.com/marmutapp/superbased-observer-private/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Supply chain

CycloneDX SBOMs are attached: observer.cdx.json and observer-org.cdx.json.

SLSA Level 3 build provenance for the binaries is attached below as a *.intoto.jsonl attestation. The build runs on the private origin repo, so pass that as the source when verifying an extracted binary with slsa-verifier v2.7.0 or newer (older versions fail with unexpected tlog entry type: expected intoto:0.0.2, got dsse:0.0.1):

slsa-verifier verify-artifact ./observer \
  --provenance-path *.intoto.jsonl \
  --source-uri github.com/marmutapp/superbased-observer-private
Assets 16
Loading