Skip to content

Cloister 0.4.2

Latest
Latest

Choose a tag to compare

View all tags
@yi427 yi427 released this 12 Oct 08:50
v0.4.2
69e9255
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Cloister 0.4.2 fixes routine Host Exec audit messages appearing in interactive Claude and Codex input areas. The embedded bridge previously echoed an audit summary to stderr after every execution, sharing the Agent terminal. Routine lifecycle records now stay in the existing owner-only JSONL audit file. Command output remains available through MCP, and audit-write failure diagnostics remain visible.

Profile V7/V8, tool schemas, authentication, and execution policies are unchanged. Base tools remain Node.js 24.19.0 and Rust 1.97.1. Agent software continues to be installed and updated independently.

Upgrade

brew update
brew upgrade yi427/tap/cloister
cloister profile upgrade --dry-run
cloister profile upgrade
cloister check

Restart existing Agent sessions after upgrading. Their Host MCP bridges run in the CLI process that launched them; reconnecting an old session does not replace that process.

Direct source installation is also supported:

cargo install --locked --git https://github.com/yi427/Cloister.git --tag v0.4.2 cloister

Verified on 2026-10-12

  • Local make verify and the staged-snapshot pre-commit gate passed all 231 tests and Clippy. The new regression reproduces the terminal-output failure before the fix and passes afterward for Claude and Codex with successful and nonzero command exits, real authenticated local HTTP MCP calls, preserved command output, and persisted lifecycle records.
  • Fix PR #12 and release-commit Verify passed.
  • Release image publication passed. Anonymous GHCR access verified Linux ARM64 manifests for 0.4.2 and 0.4, the intended source revision, and the unchanged immutable SHA image.
  • A clean temporary source installation from the exact v0.4.2 tag succeeded with --locked and reported cloister 0.4.2.
  • Apple container 1.5.0 and the exact release image passed initialization and readiness, including actual Guest-to-Host connectivity, with no warnings.
  • Codex 0.162.1 and Claude Code 2.1.296 passed first-use installation, offline reuse, explicit update, exact-version launch, controlled update-failure fallback, concurrent-session port separation, and bridge cleanup.
  • Actual Claude Code 2.1.296 in the release image loaded all five Host tools from both the tag-installed and Homebrew-installed bridges. These checks used isolated state and the client's control protocol; no real credentials or model requests were used.
  • Both installed CLI artifacts passed PTY checks for successful and nonzero Host executions: no routine audit echo reached the Agent terminal, while MCP output and file auditing remained intact.
  • Homebrew strict online audit, source upgrade, and brew test passed locally. The macOS/Linux tap CI passed, and tap PR #4 is merged with the 0.4.2 Formula.

Release commit: 69e92550c8d868fb775383ff029a5d5473289d11.

Exact image: ghcr.io/yi427/cloister:0.4.2, index digest sha256:9d4009522ea6c6692ab168f38c732a2ed50ddcef41b2c43fd6be50492eac1230.

Source archive SHA-256: 11e58c726ba1a18e669c8bd9e2eb25e778a91ba1b028856de405c51cf82ae21b.

Security boundary and coverage

On-demand execution grants the macOS user's authority; purpose text and Guest-first guidance influence behavior without containing Host access. The selected workspace remains a live read-write Host bind mount. Host credential directories and privileged sockets are never mounted silently.

The client checks establish tool discovery for the recorded Claude version. The PTY checks use a simulated container with a real local MCP client; they establish terminal-output behavior for the installed artifacts. These checks do not certify authenticated model routing, Skill selection, or approval behavior in future independently updated Agents. This release has no prebuilt binary attachments.

Assets 2
Loading