Skip to content

Cloister 0.4.1

Choose a tag to compare

View all tags
@yi427 yi427 released this 12 Oct 08:00
· 1 commit to main since this release
v0.4.1
75ba927
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Cloister 0.4.1 fixes Host MCP tool discovery in strict clients such as Claude Code 2.1.296. Previously, cloister_host could connect while Claude rejected tools/list because ttlMs and cacheScope were missing. The bridge now returns ttlMs: 0 and cacheScope: "private" with its five tools.

Profile V7/V8, tool schemas, approval metadata, authentication, and execution policies are unchanged. Base tools remain Node.js 24.19.0 and Rust 1.97.1. Agent software continues to be installed and updated independently.

Upgrade

brew update
brew upgrade yi427/tap/cloister
cloister profile upgrade --dry-run
cloister profile upgrade
cloister check

Restart existing Agent sessions after upgrading. Their Host MCP bridges run in the CLI process that launched them; reconnecting an old session does not replace that process.

Direct source installation is also supported:

cargo install --locked --git https://github.com/yi427/Cloister.git --tag v0.4.1 cloister

Verified on 2026-10-12

  • make verify and the staged-snapshot pre-commit gate passed all 230 tests and Clippy. The new authenticated HTTP regression test fails before the fix and passes after it.
  • Fix PR #11 and release-commit Verify passed.
  • Release image publication passed. Anonymous GHCR access verified Linux ARM64 manifests for 0.4.1 and 0.4, the intended source revision, and the unchanged immutable SHA image.
  • A clean temporary source installation from the exact v0.4.1 tag succeeded with --locked and reported cloister 0.4.1.
  • Apple container 1.5.0 and the exact release image passed initialization and readiness, including actual Guest-to-Host connectivity, with no warnings.
  • Codex 0.162.1 and Claude Code 2.1.296 passed first-use installation, offline reuse, explicit update, exact-version launch, controlled update-failure fallback, concurrent-session port separation, and bridge cleanup.
  • Actual Claude Code 2.1.296 in the release image loaded all five Host tools from both the tag-installed and Homebrew-installed bridges. These checks used isolated state and the client's control protocol; no real credentials or model requests were used.
  • Homebrew strict online audit, source upgrade, and brew test passed locally. The macOS/Linux tap CI passed, and tap PR #3 is merged with the 0.4.1 Formula.

Release commit: 75ba927a615d616bc6e7eb9684b2b2b07d5d199b.

Exact image: ghcr.io/yi427/cloister:0.4.1, index digest sha256:7e75c0265eda78648dab2590d94ba273bc60478043a5c1629a6c56195e29f6cf.

Source archive SHA-256: f56169a8e68d97149f2a51549eb6881561ff47d00f8ef0e7362ab1b978e1881b.

Security boundary and coverage

On-demand execution grants the macOS user's authority; purpose text and Guest-first guidance influence behavior without containing Host access. The selected workspace remains a live read-write Host bind mount. Host credential directories and privileged sockets are never mounted silently.

The client checks establish tool discovery for the recorded Claude version. They do not certify authenticated model routing, Skill selection, or approval behavior in future independently updated Agents. This release has no prebuilt binary attachments.

Assets 2
Loading