v0.0.2-rc5

Installer entrypoints for Waired v0.0.2-rc5.
Linux: curl -fsSL https://github.com/waired-ai/waired-agent/releases/latest/download/install.sh | sh
macOS: curl -fsSL https://github.com/waired-ai/waired-agent/releases/latest/download/install.sh | sh
Windows: iwr -useb https://github.com/waired-ai/waired-agent/releases/latest/download/install.ps1 | iex

Linux .deb packages live in Google Artifact Registry; install.sh adds the apt repo.
macOS binaries (waired-darwin-{amd64,arm64}.tar.gz + .sha256, unsigned ad-hoc) are
attached here; the same install.sh detects Darwin, installs Ollama, and registers
a per-user launchd LaunchAgent.
Windows binaries (waired-windows-amd64.zip + .sha256) and the GUI installer
(WairedSetup--x64.exe, unsigned -- see SmartScreen note in docs) are
attached here.

What's Changed

• feat(management): harden loopback API against DNS-rebinding and CSRF (waired#836) by @gen16k in #66
• fix(tray): single-instance guard so repeated launches don't stack tray icons (waired#807) by @gen16k in #72
• fix(installer): re-land #55/#57/#58 onto main; waired init owns Claude routing; fix ollama version parse by @gen16k in #73
• fix(tray): model-switch feedback + switching grace state + StatusMsg + Peers row (waired#808) by @gen16k in #74
• feat(management): local IPC socket for mutating API writes (waired#838, PR A: transport) by @gen16k in #75
• feat(claude-proxy): advertise /model route-directives on the anthropic route (#52) by @gen16k in #77
• fix(inference): route AMD integrated GPUs to Vulkan+igpu, not ROCm (#40, #68) by @gen16k in #78
• feat(proto): Public Share v1 wire contract for proto/v0.2.0 (waired#816) by @gen16k in #84
• fix(inference): inject home dir into legacy-model migration so its test is portable (#82) by @gen16k in #85
• fix(proxy/hostsfile): serialize concurrent Add/Remove with an in-process mutex (#83) by @gen16k in #86
• ci(proto): concurrent proto development — auto patch tags + additive-only guard by @gen16k in #89
• ci: move CI off self-hosted runners now that the repo is public by @gen16k in #88
• docs: compress the concurrent-proto rules in CLAUDE.md by @gen16k in #91
• feat(cli,tray): send management writes over the local IPC socket (waired#838, PR B: clients + enforcement) by @gen16k in #79
• ci(installtest): re-enable Defender before the AMSI canary on hosted windows by @gen16k in #92
• feat(mesh): Public Share foreign-peer wiring + bounded nonce cache (waired#821 first half) by @gen16k in #93
• feat(management): Public Share consumer settings + versioned consent (waired#826) by @gen16k in #94
• test(installtest): assert the management write socket on macOS and Windows (waired#838) by @gen16k in #95
• fix(mgmt): give each agent instance its own IPC endpoint, and never steal a live one (waired#838) by @gen16k in #96
• feat(proto): desired-state + setup-progress wire types for NAVI onboarding (waired#835) by @gen16k in #98
• feat(inference): detach the explicit benchmark into a persisted single-flight job (waired#835 §12) by @gen16k in #99
• feat(cli): confirm before waired models rm (waired#845 §8.2) by @gen16k in #100
• feat(inference): serving-side Public Share gate chain — public admission, owner priority, kill switch (waired#824) by @gen16k in #102
• refactor(catalog): move the catalog data layer into proto/catalog (SSoT for CP tier resolution) by @gen16k in #101
• feat(agent): desired-state applier + setup-progress reporter for NAVI onboarding (waired#835 §6/§7) by @gen16k in #103
• feat(proto): NetworkMapPeer.NetworkID — home network of CP-injected cross-network peers (waired#820) by @gen16k in #104
• feat(agent): Public Share provider toggle sync — management routes, CP push, revoke-on-disable, mesh auto-enable (waired#825) by @gen16k in #105
• feat(agent): background Public Share grant acquirer/renewer + sender-side DstNetworkID stamping (waired#821) by @gen16k in #106
• fix(router): resolve engine-native model names on the serving leg of a peer hop (#107) by @gen16k in #108
• feat(agent): executor lease + real engine_install statuses + pull re-admission (waired#835 N3) by @gen16k in #109
• feat(router): Public Share public-candidate partitioning — gate, ordering, pseudonyms, acquire demand, nudge (waired#827) by @gen16k in #110
• feat(cli): attach as the setup executor, suppress terminal prompts during browser setup, hold residency (waired#835 N3) — re-land of #111 by @gen16k in #114
• feat(gateway): capture engine-reported token counts on every surface (waired#829, 1/2) by @gen16k in #112
• feat(agent): report Public Share usage to the control plane (waired#829, 2/2) by @gen16k in #113
• feat(cli): install the engine as the setup executor on the daemon path (waired#835 §11) by @gen16k in #115
• fix(cli): install the engine on the daemon path without a browser wizard (waired#835 §11) by @gen16k in #117
• feat(tray): Public Share management client + labelled confirm dialog (waired#833 E3b, PR1) by @gen16k in #118
• feat(cli): waired public group + read-only public status (waired#832 E3a, PR1) by @gen16k in #121
• build(installer): start the daemon before waired init so first-run takes the daemon path (waired#835 §11.2) by @gen16k in #119
• feat(tray): Public share submenu + served consent dialog + kill switch (waired#833 E3b, PR2) by @gen16k in #123
• feat(tray): one-shot Public Share nudge toast (waired#833 E3b, PR3) by @gen16k in #125
• feat(cli): waired public share / unshare (waired#832 E3a, PR2) by @gen16k in #122
• feat(cli): first-use consent flow + waired public use (waired#832 E3a, PR3) by @gen16k in #124
• docs(site): Public Share user docs — /public-share disclosure page + Privacy rewrite (waired#834 E4) by @gen16k in #126
• test(installtest): 3-OS daemon-path setup-executor engine install leg (waired#835 §9/§11) by @gen16k in #127
• fix(inference): refuse serving requests from non-consumer grant peers (waired#896) by @gen16k in #129
• fix(public-share): make the kill switch actually stop everything; stop leaking owner capacity on healthz by @gen16k in #148
• feat(proto): publish host-fit facts on HardwareSummary (unified_memory, usable_vram_mb, gpu vendor) by @gen16k in #143
• fix(agent): hold the setup model pull until the engine is installed by @gen16k in #145
• docs(site): rebuild the user documentation around the real setup journey, and enforce the Japanese mirror in CI by @gen16k in #147
• ci: fail a PR that changes a user-visible surface without touching docs-site by @gen16k in #150
• fix(public-share): raise the owner-priority latch from the owner's own local inference (waired#899) by @gen16k in #149
• fix(public-share): consent dialog defaults to Cancel; status reports the guest limit; darwin tray gets a PR gate (waired#901) by @gen16k in #151
• feat(agent): install vLLM from the setup executor, Linux+NVIDIA-gated (waired#835) by @gen16k in #154
• feat(inference): enable vLLM auto-selection now that #557 serving is wired (#153) by @gen16k in #155
• ci(installtest): nightly GPU vLLM install+serve lane on a self-hosted L4 (waired#835) by @gen16k in #156
• feat(agent): debug logging — live log-level toggle (service + tray), config CLI, log collection, installer flag by @gen16k in #159
• feat: add debug-level logging across the zero-coverage packages (#157) by @gen16k in #160
• fix(public-share): renew grants by traffic, acquire on demand K=1 (waired#898) by @gen16k in #158
• feat(cli): add --mask-pii to waired logs by @gen16k in #162

Full Changelog: v0.0.2-rc4...v0.0.2-rc5