• v0.0.1-rc.21 d535b586fa

    Carol v0.0.1-rc.21
    All checks were successful
    Secrets / gitleaks (push) Successful in 9s
    Release / Build, sign, and publish (push) Successful in 2m18s
    Release (Android) / Build, sign, attach (push) Successful in 17m37s
    Pre-release

    james released this 2026-06-29 11:23:44 +00:00 | 57 commits to main since this release

    Signed by james
    SSH key fingerprint: SHA256:vAv/s1UqS+brNCXATCv/JPKIc/j94WCgmQAszXM+m8s

    0.0.1-rc.21 — 2026-06-29

    Bug fixes

    • typecheck export test + regenerate api-client types (966ca62)

    Chores

    • regenerate types for the proposal-read endpoint (2a95954)

    Documentation

    • ADR-0030 agent tool surface granularity and naming (dc61bd2)
    • ADR-0029 agent runtime architecture (fcccf01)

    Features

    • built-in chat UI — streaming chat panel + inline write confirmations (874f046)
    • conversation + agent hooks + pure SSE streaming transport (2f40657)
    • GET /api/agent/proposals/{id} — read a proposed agent write (1c9c2e4)
    • streaming agent turns — LlmClient.stream() + SSE chat endpoint (729d3fd)
    • server-side agent loop + conversations/messages schema (e844c96)
    • LLM provider adapters — Anthropic + OpenAI-compatible (32c903d)
    • per-user LLM provider config with encrypted API-key storage (39d43b9)
    • streamable-HTTP MCP server endpoint (/api/mcp, PAT-authed) (2872ec6)
    • shared agent domain tool registry, proposals, and commit path (6b3898e)
    • export user domain data as a tar.gz archive (a185ab2)
    • surface per-OIDC-instance status on /api/health (0710cb0)
    • implement invite and admin-approval registration policies (2c49295)

    Other

    • Merge pull request 'feat(client): built-in chat UI — streaming chat panel + inline write confirmations' (#347) from 346-chat-ui into main (d535b58)
    • Merge pull request 'feat(api-client): conversation + agent hooks + pure SSE streaming transport' (#345) from 344-api-client-agent-hooks into main (664a2fb)
    • Merge pull request 'feat(api): GET /api/agent/proposals/{id} — read a proposed agent write' (#343) from 342-proposal-read-endpoint into main (af007e4)
    • Merge pull request 'feat(api): streaming agent turns — LlmClient.stream() + SSE chat endpoint' (#341) from 340-agent-streaming into main (8b75832)
    • Merge pull request 'feat(api): server-side agent loop + conversations/messages schema' (#339) from 338-agent-loop into main (393cba3)
    • Merge pull request 'feat(api): LLM provider adapters — Anthropic + OpenAI-compatible' (#337) from 336-llm-provider-adapters into main (5e3b1e9)
    • Merge pull request 'feat(api): per-user LLM provider config with encrypted API-key storage' (#334) from 333-llm-provider-config into main (4b68097)
    • Merge pull request 'feat(api): streamable-HTTP MCP server endpoint (/api/mcp, PAT-authed)' (#332) from 331-mcp-endpoint into main (2a17d97)
    • Merge pull request 'feat(api): shared agent domain tool registry, proposals, and commit path' (#330) from 51-domain-tool-surface into main (46026b7)
    • Merge pull request 'test(e2e): Playwright harness and smoke suite' (#329) from test/e2e-playwright-foundation into main (29f466c)
    • Merge pull request 'docs(adr): ADR-0030 agent tool surface granularity and naming' (#328) from 50-adr-tool-surface into main (271e954)
    • Merge pull request 'docs(adr): ADR-0029 agent runtime architecture' (#324) from 48-adr-agent-runtime into main (15d3866)
    • Merge pull request 'feat(api): export user domain data as a tar.gz archive' (#322) from feat/data-export into main (d13f7ca)
    • Merge pull request 'feat(api): surface per-OIDC-instance status on /api/health' (#323) from 214-oidc-health into main (d51af86)
    • Merge pull request 'feat(auth): implement invite and admin-approval registration policies' (#321) from 219-registration-policies into main (f1d8337)

    Tests

    • silence njsscan hardcoded-password finding on test fixture (82b0468)
    • add Playwright harness and smoke suite (65a3196)

    Verifying the image

    cosign verify \
      --key https://forge.wynning.tech/james/carol/raw/branch/main/cosign.pub \
      forge.wynning.tech/james/carol@sha256:9ff1726d19ba6fbc8d8e42dcbf03d0db9c997559a6afe5c10e932eb0fee0b8fd
    
    cosign verify-attestation \
      --type slsaprovenance1 \
      --key https://forge.wynning.tech/james/carol/raw/branch/main/cosign.pub \
      forge.wynning.tech/james/carol@sha256:9ff1726d19ba6fbc8d8e42dcbf03d0db9c997559a6afe5c10e932eb0fee0b8fd
    
    Downloads