Skip to content

v0.1.18

Choose a tag to compare

@gsvprharsha gsvprharsha released this 17 Aug 10:57
· 106 commits to main since this release

Tempest v0.1.18

macOS builds are now signed with a Developer ID and notarized by Apple — first-launch on Mac no longer needs the right-click-Open workaround. BYOK API keys move out of localStorage into the OS credential manager. Automations get a revamped detail page and a headless run path. Canvas gets a multi-select alignment bar, generating-state beams, and readable title pills at zoomed-out levels. Atlas learns to promote inline WHY: / NOTE: / HACK: / TODO: comments into first-class rationale nodes.

What's in this release

macOS: signed and notarized DMGs

The GitHub Actions release pipeline now signs the arm64 and x86_64 .dmg and .app bundles with our Developer ID certificate and submits them to Apple's notary service on every tagged release. Gatekeeper accepts the app on first launch — no more "Tempest can't be opened because Apple cannot check it for malicious software" dialog, no right-click-Open dance. Nothing else about the macOS build changed; the auto-updater signature (TAURI_SIGNING_*) is separate and unaffected.

Security: BYOK keys moved to the OS credential manager

BYOK API keys (OpenAI, Anthropic, DeepSeek, Moonshot, OpenRouter) previously lived in localStorage as plaintext. They now go into Windows Credential Manager, macOS Keychain, or Linux Secret Service via the keyring crate. A small secrets Tauri module handles get/set/delete; ApiKeysSection, BYOKPage, the chat backend, and the Warp backend all read/write through the new store. Existing keys in localStorage are not automatically migrated — re-enter them once on this version and they'll be stored in the OS store from then on.

Automations: revamped detail page + headless runs

AutomationDetailPage was reshaped into a sidebar layout (agent / model / next run / run count on the left, output on the right) and the SchedulePicker was rebuilt shadcn-style with label-left / control-right rows and an SpSelect frequency picker. A new run_automation_command Tauri command executes an automation headlessly (non-interactive, one-shot), and AgentConfig gained a printArgs field for wiring headless -p-style invocation per agent.

Canvas: multi-select alignment, generating beams, badge nodes, readable pills

  • Multi-alignment bar appears when multiple canvas nodes are selected — align left/center/right and top/middle/bottom in one click.
  • Generating beams on chat-node edges — the connector animates while the chat node is producing output, giving you a visual pulse for in-flight work.
  • Multi-connection badge on NodeConnector — small counter node when more than one edge terminates at the same handle.
  • Readable title pills at zoom-outChatNode / TextNode titles stay legible when the canvas is zoomed far out, via a scale counter hook.

Atlas: WHY/NOTE/HACK/TODO comments become rationale nodes

A language-agnostic post-pass in extractFromSource lifts inline WHY: / NOTE: / HACK: / TODO: comments into first-class rationale nodes and links each to the nearest enclosing symbol via a new explains edge. Runs after every language extractor from one seam, so every grammar picks it up for free with no per-language wiring. Rationale nodes ride the same hybrid retrieval as code (embeddable + FTS seed kind), so their prose surfaces against queries like "why does X do Y". No migration needed — nodes.kind is TEXT and existing FTS triggers are kind-agnostic.

Atlas: regex hardening

Three regexes in the extraction path were rewritten to eliminate catastrophic backtracking on pathological input. Prevents CPU spikes during indexing when a file contains long unbroken identifier-like runs.

Platform Support

Platform Status
Windows 11 (x64) Supported. Pre-built binary available. MSI and NSIS installers.
macOS Supported. Now signed + notarized. Separate arm64 and x86_64 DMGs.
Linux Supported. x86_64 and arm64 AppImage + deb.

Windows requires WebView2 (bundled automatically when necessary).

Database Branches (from v0.1.5) additionally require Docker; without it the feature stays dormant and everything else works normally.

Atlas semantic search (from v0.1.10) downloads a ~25 MB embedding model on first opt-in.

What's next

Threads polish continuing, Hephaestus hardening across all three OSes, Automations out of beta, keyboard-native everything. warpLLM streaming and tool-use land when the upstream SDK does — until then the Warp backend stays experimental.