agorise/morphit
agorise/morphit
Watch
1
0
Fork
You've already forked morphit
 0
Code Issues Pull requests Projects Releases 105 Packages Wiki Activity Actions 1
105 releases 105 tags
  • v1.9.13 7598d3cbff

    Morphit v1.9.13
    All checks were successful
    morphit-ci / TypeScript typecheck (sweep all workspaces) (push) Successful in 48s
    Details
    morphit-ci / apps/web svelte-check (svelte-kit sync + svelte-aware tsc) (push) Successful in 40s
    Details
    morphit-ci / Integration tests (real Postgres 16) (push) Successful in 41s
    Details
    morphit-ci / ansible-lint (playbook quality gate) (push) Successful in 16s
    Details
    morphit-ci / Smoke suite (run-smokes.sh, triple-pulse) (push) Successful in 28m25s
    Details
    morphit-release / Build + publish release tarball (push) Successful in 29m33s
    Details
    Stable

    agorise released this 2026-08-01 20:47:55 +00:00 | 9 commits to main since this release

    Signed by agorise
    GPG key ID: 53524E1F1017EB9C

    Morphit v1.9.13

    Theme: the warrant-canary upload survives upgrades on a root-owned install — for real this time.

    v1.9.12 was meant to keep the canary upload working across upgrades without
    re-fixing folder permissions by hand. On a root-owned /opt/morphit install it
    didn't: the upgrade read the served folder's ownership from the freshly-extracted
    (root-owned) tree instead of your previous install, found no non-root owner to
    preserve, and left the folder root-owned. This release fixes that, and also
    removes an internal chat-debugging facility that is no longer needed.

    Fixed

    Canary upload no longer breaks on upgrade (root-owned installs). If you serve
    Morphit from a root-owned /opt/morphit and sign your canary on a separate
    machine, every upgrade used to re-root the served folder, so your next canary
    upload failed with "permission denied" until you fixed the ownership by hand. The
    upgrade now reads the folder's owner from your previous install — where your
    ownership actually lives — and restores it, so the upload just works.

    One-time note for this upgrade: an upgrade runs the version you're upgrading
    from, so the fix takes effect on the next upgrade after this one. On a
    root-owned install, run sudo chown -R <your-ssh-user> /opt/morphit/apps/web/build
    once more right after you upgrade to v1.9.13 — and you won't need it again after
    that.

    Changed

    Removed the chat delivery debug tracer. The opt-in chat tracer (the
    ?chatdebug / morphit.debug.chat toggle) built during an earlier chat
    investigation is gone — the investigation is resolved, and removing it drops a
    console-debug path from production and trims the footprint. No effect on normal
    use.

    Notes

    • No database migrations. No breaking changes.
    • Home-hosted (user-owned install) nodes were never affected by the canary bug and
      need nothing here.
    • The canary's signing model is unchanged: signed with your own PGP key, off the
      served box when you want it that way, so it goes stale exactly when it should.
    Downloads