0.3.7

.github/workflows/daily-dev-prerelease.yml

@@ -46,6 +46,14 @@ jobs:
           release_name="Kun Dev ${dev_version}"
           head_sha="$(git rev-parse HEAD)"
 
+          node -e '
+            const semver = require("semver")
+            const [appVersion, devVersion] = process.argv.slice(1)
+            if (!/^\d{8}\.\d{4}$/.test(devVersion)) throw new Error(`invalid daily dev version: ${devVersion}`)
+            if (!semver.valid(appVersion)) throw new Error(`invalid daily app SemVer: ${appVersion}`)
+            if (!semver.prerelease(appVersion)?.some((part) => String(part).startsWith("dev-"))) throw new Error(`daily app version is not a dev prerelease: ${appVersion}`)
+          ' "${app_version}" "${dev_version}"
+
           {
             echo "app_version=${app_version}"
             echo "dev_version=${dev_version}"
@@ -95,6 +103,18 @@ jobs:
       - name: Build macOS packages
         run: npm run dist:mac
 
+      - name: Smoke packaged update handoff (host-native macOS)
+        timeout-minutes: 20
+        shell: bash
+        run: |
+          set -euo pipefail
+          if [[ "$(node -p 'process.arch')" == "arm64" ]]; then
+            resources="dist/mac-arm64/Kun.app/Contents/Resources"
+          else
+            resources="dist/mac/Kun.app/Contents/Resources"
+          fi
+          npm run smoke:packaged-update-handoff -- --resources "${resources}"
+
       - name: Upload macOS artifacts
         uses: actions/upload-artifact@v4
         with:
@@ -138,9 +158,36 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
+      - name: Test Windows update rollback failpoints
+        env:
+          KUN_INSTALLER_TEST_ARTIFACT_ROOT: ${{ github.workspace }}\artifacts\windows-installer-transaction
+        run: npx vitest run src/main/windows-installer-migration.transaction.test.ts
+
+      - name: Upload Windows transaction diagnostics
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: daily-windows-installer-transaction-diagnostics
+          if-no-files-found: warn
+          retention-days: 7
+          path: |
+            artifacts/windows-installer-transaction/**/diagnostic.log
+            artifacts/windows-installer-transaction/**/journal.json
+            artifacts/windows-installer-transaction/**/transaction.json
+            artifacts/windows-installer-transaction/**/result-*.txt
+            artifacts/windows-installer-transaction/**/fixture-summary.json
+
       - name: Build Windows installer
         run: npm run dist:win
 
+      - name: Smoke Windows installer migration
+        timeout-minutes: 60
+        run: npm run smoke:windows-installer-migration -- -InstallerPath (Get-ChildItem dist/Kun-*-win-x64.exe | Select-Object -First 1 -ExpandProperty FullName)
+
+      - name: Smoke packaged update handoff (Windows)
+        timeout-minutes: 20
+        run: npm run smoke:packaged-update-handoff -- --resources dist/win-unpacked/resources
+
       - name: Upload Windows artifacts
         uses: actions/upload-artifact@v4
         with:
@@ -183,14 +230,24 @@ jobs:
       - name: Install Linux packaging dependencies
         run: |
           sudo apt-get update
-          sudo apt-get install -y --no-install-recommends libarchive-tools rpm fakeroot dpkg build-essential python3
+          sudo apt-get install -y --no-install-recommends libarchive-tools rpm fakeroot dpkg build-essential python3 xvfb xauth
 
       - name: Install dependencies
         run: npm ci
 
       - name: Build Linux AppImage
         run: npm run dist:linux
 
+      - name: Smoke packaged update handoff (Linux x64)
+        timeout-minutes: 20
+        env:
+          KUN_CI_ALLOW_NO_SANDBOX: '1'
+        run: |
+          # Exercise the packaged Chromium sandbox instead of bypassing it.
+          sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+          node ./scripts/configure-linux-chrome-sandbox.cjs --resources dist/linux-unpacked/resources
+          npm run smoke:packaged-update-handoff -- --resources dist/linux-unpacked/resources
+
       - name: Upload Linux artifacts
         uses: actions/upload-artifact@v4
         with:
@@ -234,7 +291,7 @@ jobs:
       - name: Install Linux packaging dependencies
         run: |
           sudo apt-get update
-          sudo apt-get install -y --no-install-recommends libarchive-tools rpm fakeroot dpkg build-essential python3 cmake file
+          sudo apt-get install -y --no-install-recommends libarchive-tools rpm fakeroot dpkg build-essential python3 cmake file xvfb xauth
 
       - name: Install dependencies
         run: npm ci
@@ -249,6 +306,15 @@ jobs:
           --arch arm64
           --dist dist
 
+      - name: Smoke packaged update handoff (Linux ARM64)
+        timeout-minutes: 20
+        env:
+          KUN_CI_ALLOW_NO_SANDBOX: '1'
+        run: |
+          sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+          node ./scripts/configure-linux-chrome-sandbox.cjs --resources dist/linux-arm64-unpacked/resources
+          npm run smoke:packaged-update-handoff -- --resources dist/linux-arm64-unpacked/resources
+
       - name: Upload Linux ARM64 artifacts
         uses: actions/upload-artifact@v4
         with:

.github/workflows/pr-checks.yml

@@ -39,14 +39,24 @@ jobs:
       - name: Install Linux packaging dependencies
         run: |
           sudo apt-get update
-          sudo apt-get install -y --no-install-recommends libarchive-tools rpm fakeroot dpkg build-essential python3
+          sudo apt-get install -y --no-install-recommends libarchive-tools rpm fakeroot dpkg build-essential python3 xvfb xauth
 
       - name: Install root dependencies
         run: npm ci
 
       - name: Build Linux AppImage
         run: npm run dist:linux
 
+      - name: Smoke packaged update handoff (Linux x64)
+        timeout-minutes: 20
+        env:
+          KUN_CI_ALLOW_NO_SANDBOX: '1'
+        run: |
+          # Exercise the packaged Chromium sandbox instead of bypassing it.
+          sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+          node ./scripts/configure-linux-chrome-sandbox.cjs --resources dist/linux-unpacked/resources
+          npm run smoke:packaged-update-handoff -- --resources dist/linux-unpacked/resources
+
       - name: Upload Linux package
         uses: actions/upload-artifact@v4
         with:
@@ -78,7 +88,7 @@ jobs:
       - name: Install Linux packaging dependencies
         run: |
           sudo apt-get update
-          sudo apt-get install -y --no-install-recommends libarchive-tools rpm fakeroot dpkg build-essential python3 cmake file
+          sudo apt-get install -y --no-install-recommends libarchive-tools rpm fakeroot dpkg build-essential python3 cmake file xvfb xauth
 
       - name: Install root dependencies
         run: npm ci
@@ -110,6 +120,15 @@ jobs:
           --arch arm64
           --dist dist
 
+      - name: Smoke packaged update handoff (Linux ARM64)
+        timeout-minutes: 20
+        env:
+          KUN_CI_ALLOW_NO_SANDBOX: '1'
+        run: |
+          sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+          node ./scripts/configure-linux-chrome-sandbox.cjs --resources dist/linux-arm64-unpacked/resources
+          npm run smoke:packaged-update-handoff -- --resources dist/linux-arm64-unpacked/resources
+
       - name: Upload Linux ARM64 PR package
         uses: actions/upload-artifact@v4
         with:
@@ -155,6 +174,18 @@ jobs:
       - name: Build ad-hoc macOS packages (x64 and arm64)
         run: npm run dist:mac
 
+      - name: Smoke packaged update handoff (host-native macOS)
+        timeout-minutes: 20
+        shell: bash
+        run: |
+          set -euo pipefail
+          if [[ "$(node -p 'process.arch')" == "arm64" ]]; then
+            resources="dist/mac-arm64/Kun.app/Contents/Resources"
+          else
+            resources="dist/mac/Kun.app/Contents/Resources"
+          fi
+          npm run smoke:packaged-update-handoff -- --resources "${resources}"
+
       - name: Upload ad-hoc macOS PR packages
         uses: actions/upload-artifact@v4
         with:
@@ -206,9 +237,36 @@ jobs:
             --commit $env:GITHUB_SHA `
             --target win32-x64 `
             --output dist/tui-pr
+      - name: Test Windows update rollback failpoints
+        env:
+          KUN_INSTALLER_TEST_ARTIFACT_ROOT: ${{ github.workspace }}\artifacts\windows-installer-transaction
+        run: npx vitest run src/main/windows-installer-migration.transaction.test.ts
+
+      - name: Upload Windows transaction diagnostics
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: pr-windows-installer-transaction-diagnostics
+          if-no-files-found: warn
+          retention-days: 3
+          path: |
+            artifacts/windows-installer-transaction/**/diagnostic.log
+            artifacts/windows-installer-transaction/**/journal.json
+            artifacts/windows-installer-transaction/**/transaction.json
+            artifacts/windows-installer-transaction/**/result-*.txt
+            artifacts/windows-installer-transaction/**/fixture-summary.json
+
       - name: Build Windows NSIS installer
         run: npm run dist:win
 
+      - name: Smoke Windows installer migration
+        timeout-minutes: 60
+        run: npm run smoke:windows-installer-migration -- -InstallerPath (Get-ChildItem dist/Kun-*-win-x64.exe | Select-Object -First 1 -ExpandProperty FullName)
+
+      - name: Smoke packaged update handoff (Windows)
+        timeout-minutes: 20
+        run: npm run smoke:packaged-update-handoff -- --resources dist/win-unpacked/resources
+
       - name: Upload Windows PR package
         uses: actions/upload-artifact@v4
         with:

.github/workflows/release.yml

@@ -132,6 +132,18 @@ jobs:
       - name: Build signed macOS packages
         run: npm run dist:mac:signed
 
+      - name: Smoke packaged update handoff (host-native macOS)
+        timeout-minutes: 20
+        shell: bash
+        run: |
+          set -euo pipefail
+          if [[ "$(node -p 'process.arch')" == "arm64" ]]; then
+            resources="dist/mac-arm64/Kun.app/Contents/Resources"
+          else
+            resources="dist/mac/Kun.app/Contents/Resources"
+          fi
+          npm run smoke:packaged-update-handoff -- --resources "${resources}"
+
       - name: Upload macOS artifacts
         uses: actions/upload-artifact@v4
         with:
@@ -173,9 +185,36 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
+      - name: Test Windows update rollback failpoints
+        env:
+          KUN_INSTALLER_TEST_ARTIFACT_ROOT: ${{ github.workspace }}\artifacts\windows-installer-transaction
+        run: npx vitest run src/main/windows-installer-migration.transaction.test.ts
+
+      - name: Upload Windows transaction diagnostics
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: release-windows-installer-transaction-diagnostics
+          if-no-files-found: warn
+          retention-days: 7
+          path: |
+            artifacts/windows-installer-transaction/**/diagnostic.log
+            artifacts/windows-installer-transaction/**/journal.json
+            artifacts/windows-installer-transaction/**/transaction.json
+            artifacts/windows-installer-transaction/**/result-*.txt
+            artifacts/windows-installer-transaction/**/fixture-summary.json
+
       - name: Build Windows installer
         run: npm run dist:win
 
+      - name: Smoke Windows installer migration
+        timeout-minutes: 60
+        run: npm run smoke:windows-installer-migration -- -InstallerPath (Get-ChildItem dist/Kun-*-win-x64.exe | Select-Object -First 1 -ExpandProperty FullName)
+
+      - name: Smoke packaged update handoff (Windows)
+        timeout-minutes: 20
+        run: npm run smoke:packaged-update-handoff -- --resources dist/win-unpacked/resources
+
       - name: Upload Windows artifacts
         uses: actions/upload-artifact@v4
         with:
@@ -218,14 +257,25 @@ jobs:
           sudo apt-get update
           # build-essential + python3: node-pty ships no Linux prebuild, so it
           # must be compiled from source against Electron's ABI during dist.
-          sudo apt-get install -y --no-install-recommends libarchive-tools rpm fakeroot dpkg build-essential python3
+          sudo apt-get install -y --no-install-recommends libarchive-tools rpm fakeroot dpkg build-essential python3 xvfb xauth
 
       - name: Install dependencies
         run: npm ci
 
       - name: Build Linux AppImage
         run: npm run dist:linux
 
+      - name: Smoke packaged update handoff (Linux x64)
+        timeout-minutes: 20
+        env:
+          KUN_CI_ALLOW_NO_SANDBOX: '1'
+        run: |
+          # Keep Chromium's sandbox under test. GitHub-hosted Ubuntu restricts
+          # unprivileged user namespaces through AppArmor by default.
+          sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+          node ./scripts/configure-linux-chrome-sandbox.cjs --resources dist/linux-unpacked/resources
+          npm run smoke:packaged-update-handoff -- --resources dist/linux-unpacked/resources
+
       - name: Upload Linux artifacts
         uses: actions/upload-artifact@v4
         with:
@@ -267,7 +317,7 @@ jobs:
       - name: Install Linux packaging dependencies
         run: |
           sudo apt-get update
-          sudo apt-get install -y --no-install-recommends libarchive-tools rpm fakeroot dpkg build-essential python3 cmake file
+          sudo apt-get install -y --no-install-recommends libarchive-tools rpm fakeroot dpkg build-essential python3 cmake file xvfb xauth
 
       - name: Install dependencies
         run: npm ci
@@ -282,6 +332,15 @@ jobs:
           --arch arm64
           --dist dist
 
+      - name: Smoke packaged update handoff (Linux ARM64)
+        timeout-minutes: 20
+        env:
+          KUN_CI_ALLOW_NO_SANDBOX: '1'
+        run: |
+          sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+          node ./scripts/configure-linux-chrome-sandbox.cjs --resources dist/linux-arm64-unpacked/resources
+          npm run smoke:packaged-update-handoff -- --resources dist/linux-arm64-unpacked/resources
+
       - name: Upload Linux ARM64 artifacts
         uses: actions/upload-artifact@v4
         with:

THIRD_PARTY_NOTICES.md

@@ -1,5 +1,14 @@
 # Third-Party Notices
 
+## diagram-design adapted Skill
+
+Kun includes a compact, DESIGN.md-integrated adaptation of the MIT-licensed
+`diagram-design` version 2.6 project supplied with this integration. The
+selection grammar, connector rules, HTML/SVG output contract, and selected
+MIT-licensed icon primitives are adapted for Kun's progressive Skill loading
+and existing HTML/canvas/SVG artifact pipeline. The complete license is shipped
+at `resources/bundled-skills/diagram-design/LICENSE`.
+
 ## agent-skills adapted subagent instructions
 
 Kun includes standalone subagent instructions adapted from the `agents/` and