Tome v0.4.0

Tome v0.4.0

New

Voice, on-device and out of the box

Voice is now Apple on-device speech recognition on macOS by default — no setup, no brew install, no model download. Talk hands-free from the topbar 🎤 button, or push-to-talk from the chat composer's 🎙; audio never leaves the machine. whisper.cpp stays as the fully-local fallback for offline/air-gap and Linux, and the engine is selectable in Preferences → Voice (Auto / Apple on-device / whisper.cpp).

• Streaming transcription with live partial results, so the assistant starts answering faster.
• Interrupt while it's thinking — just start talking (barge-in now works mid-turn, not only over speech).
• A voice persona that keeps replies short, conversational, and speakable.
• Faster first-word text-to-speech (replies are chunked one sentence at a time).
• A one-click download for the whisper speech model when you choose that engine.

Internal

• A new STT engine abstraction (auto/apple/whisper) resolved consistently across status, engine selection, and transcription, with new streaming commands behind a session worker that keeps Objective-C state off the async runtime.
• objc2-speech integration mirroring the existing Touch ID pattern; on-device recognition is enforced (requiresOnDeviceRecognition) and gated on availability.
• Hardened WAV parsing (magic-byte + size validation) and a bounded recognition wait.
• Version bump to 0.4.0; README and threat-model docs updated for the new engine and the explicit-user-action model-download egress.

Tome v0.3.0

Highlights

Tome v0.3.0 turns flows into a first-class automation tool and drops the misleading "air gap" terminology for the technically accurate "egress" — the allowlist proxy that actually governs what your agents can reach.

What's new

Flow products pipeline

• Run products. Every terminal node's output is copied to out/<runId>/ with a manifest.json (flow sha256, run id, containment state, git head/dirty, per-product sha256), a fresh out/latest/, and an appended runs-index.json.
• Fail-closed contracts. A node that exits 0 still fails the run if it didn't actually write every output it declared.
• Export destinations. Export a finished run to a destination you've consented to once — consent is hash-pinned and revocable.
• Schedules. Run a flow on its own (daily, UTC). Scheduled runs are always contained, and a schedule suspends itself the moment its flow file changes on disk.
• Headless runner. tome-runner executes a .flow.json to completion outside the desktop app — on a server, under systemd --user timers, producing the same products and manifests. See docs/remote-runner.md.

Containment → egress

• The "air gap" framing is gone. The sandbox denies direct network egress (raw sockets, SSH, DNS); the only route out is a per-pane allowlist proxy limited to model-provider domains. The concept is now named egress across the codebase.
• Migrating users keep their passphrase/TOTP/consents — old airgap*.json files are renamed in place on first boot.
• Existing repos' committed .tome/airgap.json still resolve (with .tome/egress.json preferred).

Assistant

• DeepSeek (V4 Pro / Flash) and a custom any-provider endpoint (any OpenAI- or Anthropic-compatible base URL + model + key).
• Requesty routing shortcut (REQUESTY_API_KEY) for Claude Opus.

Mentor mode + Viibi

• New mentor mode: a gate overlay that judges your work against bundled skills, with a review report.
• Viibi, the status-bar mascot, reflects live app state (gated, blocked, running).

Docs

• New GitHub Pages landing page (zwaneldmz.github.io/tome/), a bespoke hero banner, and a rewritten README.
• Documentation and code comments aligned to the Google developer documentation style guide.

Fixes

• Layout restore for saved pane arrangements.
• CI hardening: cargo-audit gate, rust-cache, clippy/rustfmt drift, and the h2 supply-chain bump (RUSTSEC-2026-0258).

Downloads

Unsigned builds — verify against the SHA256SUMS manifests before opening. macOS: xattr -dr com.apple.quarantine /Applications/Tome.app after a fresh copy.

Tome v0.2.0

Tome v0.2.0 — first Tauri release

The Rust + Tauri rewrite of Tome. AI coding agents run in sandboxed terminal panes behind a network air gap — macOS seatbelt (sandbox-exec) and Linux bubblewrap network namespaces — with only an allowlisted loopback proxy between the agent and model-provider APIs. Pane grid with real popout OS windows, editors, documents, the conductor assistant, and flow DAGs.

These builds are unsigned (Apple Developer ID credentials are not configured yet). Gatekeeper will block first launch on macOS — right-click → Open, or remove the quarantine attribute:

xattr -dr com.apple.quarantine /Applications/Tome.app

Verifying your download

1. Checksums — download SHA256SUMS-macos-latest / SHA256SUMS-ubuntu-22.04 from the assets and compare:

   shasum -a 256 -c SHA256SUMS-macos-latest

2. Build provenance — the release workflow attested both checksum manifests with a Sigstore certificate whose identity is this exact workflow at this exact tag:

   • Rekor transparency log entry: https://search.sigstore.dev/?logIndex=2466844666
   • Signer identity: https://github.com/zwaneldmz/tome/.github/workflows/release-tauri.yml@refs/tags/v0.2.0
   • Workflow run: https://github.com/zwaneldmz/tome/actions/runs/31811496478

   You can inspect the certificate yourself:

   curl -s "https://rekor.sigstore.dev/api/v1/log/entries?logIndex=2466844666" |
     python3 -c "import json,sys,base64; e=json.load(sys.stdin); k=list(e)[0]; \
       b=json.loads(base64.b64decode(e[k]['body'])); \
       print(base64.b64decode(b['spec']['signatures'][0]['verifier']).decode())" |
     openssl x509 -noout -ext subjectAltName

Platform notes

• macOS: universal binary (Apple Silicon + Intel). Touch ID unlock works out of the box.
• Linux: x86_64 .deb / .rpm / .AppImage. Sandboxing needs bubblewrap (sudo apt install bubblewrap); on distros that restrict unprivileged user namespaces, see docs/THREATMODEL.md. Without bwrap, panes fall back to network-only containment.

Tome v0.1.0

First public release of Tome — run your coding agents behind an air gap, in one workspace. Agents, terminals, editors, documents, and an assistant in one grid.

Highlights

• Workspace grid — terminals, editors, documents, and agent panes side by side; light/dark following the system
• Air gap — network confinement for agent sessions, with team-level config and policy presets
• Flows — draw agent workflow diagrams (.flow.json), edit nodes/edges visually, and run them as topologically-ordered agent terminals with user-gated prompts (no auto-submit)
• Conductor — orchestrate agents, including flow-kind panes
• File tree — browse, create files/folders, drag & drop
• Language servers — diagnostics, hover, go-to-definition
• Security event log — see what agents did, summarized
• 181 tests passing

Install (macOS, Apple Silicon)

Download Tome-0.1.0-arm64.dmg, drag Tome to Applications.

Note: this build is not notarized (signing lands in a later release). macOS will warn on first launch. Either allow it via System Settings → Privacy & Security → Open Anyway, or clear the quarantine flag:

xattr -d com.apple.quarantine /Applications/Tome.app

Intel builds and notarization are on the roadmap.