spaceapp.devDocsGitHub ↗Get SpaceApp ↗
Documentation / Help & reference
SPACEAPP DOCUMENTATION

Changelog

Launcher and runtime versions, newest first.

Versions of the run-spaceapp launcher and its runtime images, newest first, copied from the versioned sections of the launcher's CHANGELOG.md. The newest release is 1.1.4 (2026-10-13). Unreleased changes are not listed. Where a version number appears more than once in the source file, only its newest entry is kept. A few entries describe candidates that were replaced before they reached npm; their notes say so.

1.1.x releases#

1.1.4 — 2026-10-13#

  • A CLI pane in a room without a project starts in its own /workspaces/<room> directory, so a first prompt such as "build me a page" can write files.
  • The app shows "Update available: vX" when a newer release exists and opens the update command with a Copy button.
  • The setup wizard's Ready step offers three first prompts to copy.
  • Browser errors are reported to the installation's own API (error name and bundle location only) so they appear in its logs.
  • Opt-in first_answer telemetry: with telemetry Yes, one anonymous event is sent the first time an agent finishes an answer (event, random id, version, CPU architecture, date). Nothing is sent with telemetry No.
  • An explicit SPACEAPP_TELEMETRY during a fresh install is now stored with the installation, so later updates keep that choice for the first_answer event.
  • Quieter request logs; fast-uri 4 for fastify's JSON serializer.
  • The application is updated to the current SpaceApp source (sanitized export of aa53bc0a8d). The core image now includes the Space Gateway tree-sitter grammars (MIT, listed in THIRD_PARTY_NOTICES.md).

1.1.3 — 2026-10-12#

  • The first OpenCode task no longer stops at a "/tmp" permission prompt: the first run authorizes only OpenCode's private scratch directory, and the bootstrap instructions send temporary files there. Other paths outside the workspace still ask.
  • The application is updated to the current SpaceApp source (sanitized export of 6377b5b491), including guided setup on every screen size and session revocations that survive restarts. The gateway's Antigravity sign-in uses an owner-supplied OAuth client, as the API already did.
  • Contributors: npm run check works on a fresh clone, npm test runs the public test suite, the offline smoke and dependency-boundary check are included, and README and CONTRIBUTING link only to files in this repository.

1.1.2 — 2026-10-12#

  • The setup wizard and Help no longer promise the retired DeepSeek V4 Flash model, and the documentation matches the launcher: the Big Pickle starter model with its first-launch check, profile sizes, @latest commands, the 12-character owner password, telemetry, and what stays on your machine when a remote model provider is used.
  • Check the first-run free OpenCode model with a real tool call: the model must read a small file with its read tool and answer with the random token inside it. Big Pickle is tried first; when it fails, the newest free tool-capable models are tried. Before, a plain text reply was enough, so a model could be chosen that then failed upstream as soon as a task used tools.
  • Pin the optional Headroom companion image to a reviewed digest (headroom-codex-lb:code-5b15319@sha256:491c856a…) instead of the moving code tag, so installs and updates with companions enabled run the same image every time.

1.1.1 — 2026-10-11#

  • Respect the telemetry answer in the install wizard. The first-install ping is now sent only when the owner answers Yes (the default is No) or sets SPACEAPP_TELEMETRY to 1, true, yes or on. Before, the ping was sent unless SPACEAPP_TELEMETRY disabled it, whatever the answer.
  • Fix fresh installs with the small profile, which 1.0.36 and 1.1.0 rolled back after waiting 10 minutes: readiness again treats the deliberately disabled workflow worker as ready (restores the 1.0.31 fix that a later source export dropped).
  • Security: update @modelcontextprotocol/sdk to 1.32.1 and pin patched proxy-addr 2.0.8 (IP spoofing through IPv4-mapped IPv6 trust subnets), @fastify/busboy 3.2.2 (multipart denial of service and header injection), source-map-js 1.2.2 and http-cache-semantics 4.3.0. Runtime images are rebuilt with these versions.
  • Security: runtime images replace npm's bundled postcss-selector-parser with 7.1.6 (CVE-2026-104844). GHSA-2mjx-qc3c-rqvc in the rustls copy compiled into @temporalio/core-bridge 1.24.0 is ignored until a Temporal SDK release fixes it: SpaceApp reaches Temporal only over the private compose network without TLS.

1.1.0 — 2026-10-02#

  • ship latest sanitized Space app source @ b73eb79ac7 (1133 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

1.0.x releases#

1.0.36 — 2026-10-02#

  • ship latest sanitized Space app source @ 08f2d1adbd (947 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

1.0.35 — 2026-10-01#

  • Apply the candidate Compose template to the installed runtime during updates, after preserving the previous template in the recovery checkpoint. This removes legacy startup overrides from upgraded installations as well as fresh installs.
  • Verify upgrades from a legacy Compose template use the new template before starting services and preserve the old template for recovery.

1.0.34 — 2026-10-01#

  • Start the core from its immutable image entrypoint. Remove the legacy startup rewrite of compiled API configuration, which could leave a damaged writable-layer file after a VM restart. Public configuration already disables the agent tools writer.
  • Include the upgrade recovery and gRPC security fixes from the unpublished 1.0.32 and 1.0.33 candidates.

1.0.33 — 2026-10-01#

  • Update the shared gRPC dependency to 1.14.5 to resolve certificate authorization and error disclosure advisories rejected by the release audit.
  • Include the tested stopped-PostgreSQL and complete update-staging fixes from the unpublished 1.0.32 candidate.

1.0.32 — 2026-10-01#

  • Start and wait for the existing PostgreSQL database before upgrade checkpoints, including when Docker or the database was initially stopped. Preserve existing data and pause application writers before the dump.
  • Write the complete temporary Compose configuration before registry image pulls in the update command.
  • Add regression coverage for both install-based upgrades and the update command.

1.0.31 — 2026-09-30#

  • Remove dependency JavaScript/CSS source maps from runtime images after compilation to keep AMD64 and ARM64 within the existing image size budgets.

1.0.30 — 2026-09-30#

  • Wait for Temporal's default namespace before starting workflow workers, and restart workflow initialization when enabling a larger profile.
  • Remove inactive workflow/browser containers during repair and failed-install recovery while preserving their data volumes.

1.0.29 — 2026-09-30#

  • Make readiness explicitly recognize disabled background workers in the small public profile, while still requiring enabled workers and preserving live/private defaults.

1.0.28 — 2026-09-30#

  • Choose small, medium or large from CPU, RAM and disk, check Docker allocations, and keep existing profiles on upgrades.
  • Omit Temporal/background workers and managed Chromium from small; retain legacy profiles and optional providers.
  • Check incremental upgrade storage using cached/shared image layers, database checkpoint size and headroom; recheck before cutover without deleting user data.

1.0.27 — 2026-09-30#

  • Wait for the upgraded application to become ready before verifying its checkpoint and reporting success; preserve current data and recovery information if readiness fails.

1.0.26 — 2026-09-30#

  • Make the mocked update contract test independent of any real SpaceApp listener on the test machine.

1.0.25 — 2026-09-30#

  • Allow 2 GiB for the light CLI service so two native OpenCode panes can initialize without exhausting the previous 1536 MiB limit.

1.0.24 — 2026-09-30#

  • Update Temporal SDK to remove the vulnerable native HTTP/3 dependency found by the container scan.

1.0.23 — 2026-09-30#

  • Update the server and bundled npm dependencies to fix the vulnerabilities rejected by the release pipeline.

1.0.22 — 2026-09-30#

  • Reject real Google OAuth credentials while allowing short example placeholders in the settings form.

1.0.21 — 2026-09-30#

  • Require owner-supplied Antigravity OAuth client settings and reject embedded Google OAuth clients in public exports.

1.0.20 — 2026-09-30#

  • Open the installed macOS Docker application by absolute path, report native launch rejection, and allow ten minutes for first engine startup.

1.0.19 — 2026-09-30#

  • Describe verified checkpoints and data-preserving recovery accurately in install and update confirmations.

1.0.18 — 2026-09-30#

  • Finish Linux setup promptly when its browser stays running; keep the opened browser alive and report immediate launch failures.

1.0.17 — 2026-09-30#

  • Load installation instructions and durable memory into OpenCode automatically; authorize only the private memory directory while preserving owner permission policies.
  • Explain the free OpenCode first step before optional provider credentials.

1.0.16 — 2026-09-30#

  • Preserve the current database after a partially failed upgrade; retain its verified checkpoint for explicit recovery.
  • Open the bundled OpenCode without managed credentials and select a working free model at first launch.

1.0.14 — 2026-09-30#

  • Keep public owner authentication mandatory after setup; preserve this rule on source sync.
  • Verify non-empty database checkpoints, pause writers during snapshot, restore secrets and check recovery readiness.
  • Start stopped Docker during install/repair; support preloaded images for lab acceptance.
  • Install optional provider CLIs on first use and discover a working free OpenCode model.

1.0.13 — 2026-09-30#

  • ship latest sanitized Space app source @ 3fc3d38778 (913 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

1.0.12 — 2026-09-30#

  • ship latest sanitized Space app source @ 3fc3d38778 (880 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

1.0.2 — 2026-09-13#

  • ship latest Space app source @ 6622b05164 (661 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

1.0.1 — 2026-09-13#

  • ship latest Space app source @ 6c26385c8a (661 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

0.1.x releases#

0.1.32 — 2026-09-13#

  • ship latest Space app source @ 6f92a078b7 (661 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

0.1.31 — 2026-09-02#

  • ship latest Space app source @ bcd800cd99 (523 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

0.1.30 — 2026-08-20#

  • ship latest Space app source @ db2e8d3f07 (520 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

0.1.29 — 2026-08-16#

  • ship latest Space app source @ 04e338fa85 (510 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

0.1.28 — 2026-08-15#

  • ship latest Space app source @ 9a9cb79fa8 (504 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

0.1.27 — 2026-08-14#

  • ship latest Space app source @ e3a625f854 (499 files, sanitized);

  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

  • fix(run-spaceapp): wizard answers on non-TTY stdin (Windows npx/PowerShell) are read up to the first newline instead of draining the stream to EOF, so the "y" confirmation no longer looks frozen and "Please answer y or n." loops are gone;

  • fix(run-spaceapp): free-disk inspection stats the nearest existing ancestor, so a clean Linux install without an existing ~/.config no longer crashes with ENOENT;

  • fix(run-spaceapp): after a failed image pull on Windows, print an actionable hint about Docker Desktop's credential helper requiring an interactive Windows session (SSH/CI installs).

0.1.26 — 2026-08-14#

  • ship latest Space app source @ f918c46430 (498 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

0.1.25 — 2026-08-14#

  • ship latest Space app source @ f918c46430 (498 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

0.1.24 — 2026-08-13#

  • ship latest Space app source @ b24ecc406b (494 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

0.1.23 — 2026-08-12#

  • ship latest Space app source @ bfe12cdca6 (493 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

0.1.22 — 2026-08-12#

  • ship latest Space app source @ 507bb2c132 (492 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

0.1.21 — 2026-08-12#

  • ship latest Space app source @ 75078f4b52 (491 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

0.1.20 — 2026-08-12#

  • ship latest Space app source @ 387a17abc7 (491 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

0.1.19 — 2026-08-12#

  • ship latest Space app source @ 32e1b9f467 (489 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

0.1.18 — 2026-08-12#

  • ship latest Space app source @ b36e8720ad (471 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

0.1.17 — 2026-08-07#

  • ship latest Space app source @ 978010385d (417 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

0.1.16 — 2026-08-06#

  • ship latest Space app source @ 729236f8e8 (407 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

0.1.15 — 2026-08-06#

  • ship latest Space app source @ 729236f8e8 (407 files, sanitized);
  • cross-platform installer for Windows, macOS, and Linux (npm run-spaceapp + GHCR images).

0.1.15-hostroot.2 — 2026-07-28#

  • publish matching core and cli images for linux/amd64 so the personal candidate can run host-root CLI sessions on x64 Linux;
  • reuse the existing signed browser manifest without rebuilding the browser;
  • reject the personal candidate on arm64 before Docker image pulls.

0.1.15-hostroot.1 — 2026-07-27#

  • accept the 7.4 GiB usable memory reported by an 8 GB-class CachyOS laptop for the default light profile;
  • wait up to ten minutes for first-start readiness, print service status every 30 seconds, and show recent startup logs every two minutes;
  • keep the host-root CLI daemon at UID 0 while sharing its 0660, root:spaceapp Unix socket with the non-root core service;
  • automatically print final service status and logs before a failed install rolls containers back while retaining persistent volumes;
  • keep readiness polling active when an intermediate Docker status or log diagnostic cannot be collected;
  • keep the first-owner setup usable at normal browser zoom on short laptop viewports by making the setup shell vertically scrollable;
  • accept owner passwords from 6 through 500 characters consistently in setup and password reset flows;
  • preserve the real error from Linux Docker-group re-entry instead of adding the inaccurate claim that installation stopped before image download.

0.1.14 — 2026-07-27#

  • remove an already-running managed browser container when an existing standard installation moves to the default light profile, while preserving browser storage and every other persistent Docker volume;
  • keep the cleanup idempotent so light refreshes also repair state left by the superseded, unpromoted 0.1.13 npm candidate without running Compose down;
  • supersede 0.1.13, which remained off npm latest after Windows clean-room acceptance exposed Docker Compose retaining a disabled-profile service.

0.1.13 — 2026-07-26#

  • qualify every universal launcher invocation as npx --yes run-spaceapp@latest so npm resolves the current published launcher instead of reusing a matching stale local or cached package;
  • make the same command a visible clean-install, stale-update, and idempotent refresh path with launcher version, SpaceApp version, profile transition, and persistent-state preservation output;
  • use the reliable universal prefix in public follow-up examples and launcher recovery guidance while keeping global installation optional.

0.1.12 — 2026-07-26#

  • bypass the Microsoft Edge first-run experience when the Windows installer opens the local owner-setup page after a clean installation.

0.1.11 — 2026-07-26#

  • make npx --yes run-spaceapp install the same one-command installer on Linux, macOS, and Windows 11 Command Prompt;
  • expose a package-name-matching run-spaceapp executable so npm can resolve the launcher reliably through npx;
  • default automatic installs to the supported 8 GB light profile on every host while retaining the standard browser profile as an explicit opt-in;
  • synchronize an existing installation to the installed launcher and image version on a repeated install, preserving data, credentials, secrets, and the previous version for rollback;
  • detect the clean-Windows WSL2 reboot boundary, register a one-time pinned installer resume, and continue automatically after the user signs back in;
  • document the Windows restricted-PowerShell interception and direct users to the Command Prompt profile where the universal command works unchanged.

0.1.10 — 2026-07-26#

  • hide the browser-heavy 150–250 GB dedicated-storage warning when the automatic 8 GB light profile has browser sessions disabled;
  • retain the dedicated-storage readiness warning for the standard profile, where managed browser sessions are enabled.

0.1.9 — 2026-07-25#

  • make spaceapp open degrade cleanly on headless systems by printing the exact manual URL and returning success when the native browser opener is unavailable;
  • supersede the unpromoted 0.1.8 candidate after clean-room acceptance exposed the missing-opener contract gap.

0.1.8 — 2026-07-25#

  • wait for application readiness before reporting installation success or opening the browser;
  • issue and print a fresh database-accepted first-owner token at the end of every successful unclaimed installation, with exact paste and recovery instructions;
  • discover Docker Desktop's trusted CLI directory on every Windows and macOS launcher invocation, including doctor, status, and uninstall;
  • distinguish missing Docker CLI/Compose from a stopped engine and make Docker exit 127 visible for every runtime command;
  • report uninstall progress, retained state, repeat-safe success, volume purge results, and the separate global npm removal command;
  • add command contracts for every entry exposed by spaceapp help and supersede the unpromoted 0.1.7 candidate.

0.1.6 — 2026-07-24#

  • fix Windows one-command setup by preferring the hash-pinned Docker.DockerDesktop Windows Package Manager manifest;
  • retain the official Docker direct download with Authenticode verification as a fallback when Windows Package Manager is unavailable.

0.1.5 — 2026-07-24#

  • fix release verification for compact multi-platform OCI attestations so large browser SBOMs no longer exceed the verifier process buffer;
  • remove CodeQL command, JavaScript, and redirect injection paths;
  • prove global and per-route API rate-limit ordering with runtime regression coverage;
  • update React, React DOM, Lucide, Vite, and release workflow actions while preserving immutable full-SHA action pins;
  • keep TypeScript 5.9 until the TypeScript 7 compiler API is stable enough for the release security tests.

0.1.4 — 2026-07-24#

  • install and start signed Docker Desktop automatically on Windows and macOS when it is missing, with explicit license confirmation;
  • elevate WSL2 setup through the Windows UAC prompt and stop safely for a required restart before downloading Docker Desktop;
  • install Docker Engine, Buildx, and Compose automatically from official Docker repositories on Ubuntu, Debian, Fedora, RHEL, and CentOS;
  • require a ready Docker engine before pulling SpaceApp images and safely continue Linux installation through newly granted docker group membership;
  • pin the Node 22.23.0 multi-architecture base image by OCI digest and install the fixed Debian liblzma5 package in every image stage;
  • update Temporal and MCP HTTP dependencies to reviewed security releases;
  • prevent container privilege escalation with no-new-privileges;
  • block fixable Medium, High, and Critical findings while preserving complete weekly Trivy evidence for upstream-unfixed vulnerabilities;
  • publish protected GHCR and npm artifacts through a manual, main-only OIDC workflow with SBOM, provenance, immutable-tag preflight, and no npm token.

0.1.3 — 2026-07-24#

  • complete headless Linux installation successfully when no native browser opener is installed, while printing the local SpaceApp URL for manual use.

0.1.2 — 2026-07-24#

  • accept nominal 8 GB hosts whose guest operating system reports slightly less than 8 GiB;
  • report the optional browser host as disabled in the light profile so readiness and container health become green without starting Chromium.

0.1.0 — 2026-07-23#

Initial public release:

  • single-owner, self-hosted Agent Room application;
  • one-command Docker installation for Linux, macOS, and Windows 11/WSL2;
  • run-spaceapp npm launcher with automatic light and standard profiles;
  • supported 8 GB light profile with bounded service resources;
  • pinned multi-architecture core, browser, and CLI container images;
  • isolated provider credentials and generic starter memory;
  • sanitized clean-history public source export and release gates;
  • portable backup, restore, update, and rollback commands;
  • no telemetry by default.
Generated from launcher 1.1.4. CHANGELOG.md on GitHub ↗