Hisar Server 0.1.14

Changes since server-0.1.13:

• feat(agents): let computer-use agents sign in with Hisar (#120)
• Add the docs site and release it as the docs app (#116)
• Recommendation 42: select objects by ID first and refuse ambiguous names (#110)
• Recommendation 49: keep each source vault or collection apart through import review and storage (#109)
• Recommendation 48: label cached and partial exports instead of presenting them as complete (#108)
• Recommendation 53: keep healthy vaults and items usable when one record cannot be read (#107)
• Recommendation 43: print the Emergency Kit QR as plain text, not a custom-scheme link (#106)
• Recommendation 41: let macOS enforce Touch ID on the biometric wrapping key (#105)
• Recommendation 21: sign passkey user verification only after a fresh native check (#103)
• fix(browser): require an unlocked Hisar to pair a browser (recommendation 36, F-36) (#93)
• Recommendation 22: move browser save decisions out of the page (#92)
• fix(server): encrypt the dashboard SMTP password at rest (recommendation 61, D-05) (#90)
• Recommendation 54: page every collection by bytes and refuse unbounded growth with a clear status (#102)
• Recommendation 55: bound pending sign-in and rate-limiter state without discarding live exchanges or rate debt (#101)
• Recommendation 10: refuse to start without matching server secrets, and document paired recovery (#89)
• Recommendation 30: stage new Secret Keys durably before sign-up and key replacement commit (#100)
• Recommendation 20: bind account deletion to the plan the user reviewed (#99)
• Recommendation 12: rotate and delete-move large vaults in bounded atomic stages, and mark rotation after removal (#98)
• fix(server): require explicit key generations once a vault was rotated (S-01, S-24) (#97)
• Recommendation 19: cancel a member sign-up link together with the invitation it came from (#96)
• fix(server): require a fresh single-use proof for admin invites (recommendation 15, F-03) (#91)
• Recommendation 4: require the owner's signed intent before delivering a vault key (#94)
• Recommendation 6: bind login and reauthentication to the server's origin (#86)
• Recommendation 9: require exact-commit tests and attest every release file (#87)
• Security review: fixes that need no product decision (71 fixed, 36 partly fixed) (#85)
• Bump the npm_and_yarn group across 3 directories with 1 update (#84)
• Let coding agents use Hisar secrets without seeing them (omp, Tern, Claude Code, Codex) (#82)

The hisar-server image ghcr.io/tosunlab/hisar-server:0.1.14 for linux/amd64 and linux/arm64. Self-hosting says how to run and upgrade it.

Before deployment, download release-evidence.json and set commit to the full independently reviewed source commit SHA.
Verify the evidence and then its immutable image index digest with a recent GitHub CLI:

gh attestation verify release-evidence.json --repo tosunlab/hisar \
  --signer-workflow tosunlab/hisar/.github/workflows/release.yml \
  --signer-digest "$commit" --source-digest "$commit" --deny-self-hosted-runners
digest=$(jq -r .image.digest release-evidence.json)
gh attestation verify "oci://ghcr.io/tosunlab/hisar-server@$digest" --repo tosunlab/hisar \
  --signer-workflow tosunlab/hisar/.github/workflows/release-server.yml \
  --signer-digest "$commit" --source-digest "$commit" --deny-self-hosted-runners

Authenticate to GHCR when required. Deploy ghcr.io/tosunlab/hisar-server@$digest after verification, not a mutable tag.
The attestation covers the multiarchitecture image index. It does not protect against a compromised authorized builder.

Vault key changes now use bounded staging and atomic activation. Update the apps and CLI before removing vault members or deleting a vault while moving its items. Updated callers require a server with staged transitions and do not fall back to the old aggregate route.

Desktop versions through 0.1.12 and CLI versions through 0.1.6 can still read rotated vaults but cannot change their items, names, grants or deletion state without an explicit key generation. The server returns an instruction to update Hisar. Generation omission remains supported only for never-rotated nonorganization vaults.