Releases: yanzhao77/ModelForge
Release list
ModelForge v0.1.3-beta.1
ModelForge v0.1.3-beta.1
Local-first AI Agent Runtime Platform — Beta Release Candidate
A single-application, locally-deployable platform covering model management, fine-tuning, and Agent Run/Event/Tool/Policy/MCP/Scheduler/Multi-Agent/Composable Plugin.
What's New in This Release
Chat API Error Contract
- Typed, consistent error responses for chat and streaming endpoints.
OpenAI-Compatible Input Governance
- Input validation, sanitization, and safe error propagation for
/v1/chat/completionsand/v1/responses.
Per-User Concurrency, Rate Limiting & Inference Timeout
- Per-user concurrent request gating, rate limiting with configurable windows, and total inference timeout for streaming and non-streaming requests.
Streaming Request Cancellation & Resource Cleanup
- Proper lease-based lifecycle for streaming requests with guaranteed resource release on cancellation, timeout, or completion.
JWT Development Secret Persistence
- Auto-generated 36-byte JWT secret persisted to
config.yamlon first run, preventing accidental lockout from ephemeral secrets.
Scheduler, Downloader & Runtime Coverage
schedule_service,downloader,openai_api_runtime, andlocal_runtimemodules at 100% test coverage.
Desktop Theme, Accessibility, Empty States & Task Center Fixes
- Improved theme consistency, keyboard navigation, empty-state messaging, and task-center UX.
Docker / PostgreSQL / Alembic Release Validation
- Full CI pipeline for Docker image build, non-root verification, Alembic migration, API smoke test, log secret audit, and SIGTERM graceful shutdown.
Verification Results
| Gate | Result |
|---|---|
| Tests | 866 passed, 3 skipped, 0 failures, 0 warnings |
| Backend coverage threshold | 75% |
| pip-audit (runtime) | 61 packages, 0 vulnerabilities |
| pip-audit (development) | 36 packages, 0 vulnerabilities |
| pip-audit (Docker image) | 62 packages, 0 vulnerabilities |
| Image setuptools | 84.0.0 |
| Image pip | 26.2.1 |
| Lint (ruff) | Clean |
CI
- CI Run: #33463505790
- Candidate SHA:
0cfdd3c335ad219b3badee0014e40e5f9500dddd - Image Digest:
sha256:29779bec15959e48abe49f230271e30234ba64a80d855890305ed01217e467e7 - Database Migration Head:
0002_api_platform - Python: 3.10.21 (CI)
Why 3 Tests Are Skipped
The 3 skipped tests are environment-gated (e.g., require GPU, local Ollama, or AI-specific dependencies not present in CI). They do not represent core Beta quality gates and are excluded from the release candidacy threshold.
Known Boundaries
- Single-application replica only: This release is validated for a single-instance deployment. Multi-replica or horizontal scaling is not covered.
- CPU/GPU local models: Require
requirements-ai.txtto be installed separately (torch,transformers,llama-cpp-python,peft,datasets). Not bundled in the base image. - No production deployment: This is a pre-release candidate. No production deployment has been performed or validated.
Upgrade Notes
- If upgrading from
v0.1.1-beta.1, runalembic upgrade headafter deploying the new code. - The JWT secret is now auto-generated and persisted in
config.yaml. If you have a customJWT_SECRETenvironment variable, it will continue to take precedence. - Docker users: rebuild the image from this tag. The new image includes pip 26.2.1 and setuptools 84.0.0 with 0 known vulnerabilities.
Rollback Notes
- To roll back, redeploy the previous version and run
alembic downgrade -1if needed. - The
0002_api_platformmigration adds columns that are additive; rolling back the code without rolling back the DB should not cause data loss.
Artifacts & Checksums
All release artifacts include SHA-256 checksums in SHA256SUMS. Verify before use:
shasum -a 256 -c SHA256SUMSIncluded Artifacts
| Artifact | Description |
|---|---|
candidate-metadata.json |
Candidate SHA, Python version, timestamp |
pip-audit-runtime.json |
Runtime dependency audit (0 vulnerabilities) |
pip-audit-dev.json |
Development dependency audit (0 vulnerabilities) |
pip-audit-image.json |
Docker image package audit (0 vulnerabilities) |
image-installed-requirements.txt |
Exact packages installed in the Docker image |
sbom-runtime.cdx.json |
CycloneDX SBOM for runtime dependencies |
sbom-image.cdx.json |
CycloneDX SBOM for Docker image packages |
SHA256SUMS |
SHA-256 checksums for all artifacts |
Disclaimer
This is a beta pre-release. It has not been production-deployed, has not been validated with multi-replica configurations, and has not been validated with GPU workloads or all real-world models. Use at your own risk in non-production environments only.
ModelForge v0.1.1-beta.1
ModelForge v0.1.1-beta.1 测试版
本版本是 macOS arm64 桌面客户端 的 GitHub Pre-release,面向受控验收,不适用于生产部署。它包含统一的 Models 工作区、远程 OpenAI 兼容模型配置、Responses API 与 Chat Completions API 适配、简体中文默认界面和中文/英文/日文运行时切换。
下载与校验
请同时下载 ModelForge-macOS-0.1.1-beta.1.zip 与 checksums.txt,并在解压前执行:
shasum -a 256 ModelForge-macOS-0.1.1-beta.1.zip校验结果必须与 checksums.txt 中的值一致。解压后可通过 Finder 打开 ModelForge.app;首次打开可能出现 macOS Gatekeeper 警告。
建议验收范围
请验证登录、无模型时的配置引导、添加或验证远程模型提供商、默认模型切换,以及中文/英文/日文切换。创建 Agent 定义不会自动创建或启动 Agent Run。请不要在测试反馈、截图或日志中提交 API Key、Token 或其他敏感信息。
已知限制
此测试包尚未签名或公证;不包含 Windows/Linux 资产、本地模型、训练数据、GPU 验证或真实训练验证。API Key 仅由后端加密保存,客户端不会回显密钥。若发现问题,请提供 macOS 版本、复现步骤、应用版本和已脱敏日志。