This stable patch release packages the fixes merged after 4.1.1, through PR #355, plus release preparation #357.
Highlights
- Reliable run updates and inspection. Serialize concurrent writes to the same run, publish JSON snapshots atomically, inspect partial runs, and calculate progress from current revisions and evidence. Busy same-run requests return a retry error.
- Stronger delivery and review checks. Bind accepted results, TDD/review evidence, declared files, selected Skills, and transitive prerequisites to the approved work. Preserve accepted state when a submission is invalid or evidence becomes stale.
- Stable workspace and Skill identity. Preserve follow-up instructions and frozen workspaces, rebind relocated memory records, enforce Skill path/content bindings, and keep Git provenance scoped to the actual source checkout.
- Host-aware Skill discovery. Honor native Codex invocation/disablement policy, configured Codex homes, enabled plugin versions, and export boundaries. Cache parsed Skill metadata while continuing to hash resources and apply current host policy; rebuild damaged cache entries.
- Safer install and update. Validate the declared runtime inventory and managed entrypoint before applying changes. Preserve detected local edits/deletions and retain journals/backups for conflicted transactions.
- Align package versions, maintenance metadata and all generated distribution manifests at 4.1.2. Refresh release tests to match current archive names and conflict-safe removal guidance.
Installation and update
Requires Python 3.10+. Download vibe-skills-4.1.2-public.zip from this Release, check its SHA-256 against SHA256SUMS.txt, and extract it outside the managed Skills directory. Run from the extracted folder:
pwsh -NoProfile -File .\install.ps1 -SkillsDir "$HOME\.agents\skills"
pwsh -NoProfile -File .\check.ps1 -SkillsDir "$HOME\.agents\skills"bash ./install.sh --skills-dir "$HOME/.agents/skills"
bash ./check.sh --skills-dir "$HOME/.agents/skills"For an existing installation, run update.ps1 or update.sh from the new extracted release against the same Skills directory, then run check. Preserve local changes before retrying a drifted installation. A pending install transaction requires preserving and inspecting the installed directory, journal and backups as described in the included install guide.
Validation
- Release commit:
bd103814. - Published-tag release proof: PASS — 225 tests and 93 subtests passed; all four formal command proofs passed. No missing proofs or declared artifacts.
- Source runtime CI: all six Windows/Ubuntu/host jobs passed. Local Windows release validation: 223 passed, 2 platform skips; version packaging and consistency gates: 9/9 each.
- Independently downloaded the final workflow-built ZIP. All 502 payload files match the released Git tree byte for byte; embedded/external bundle metadata, payload digest and GitHub asset digests agree.
- Final ZIP passed four isolated lifecycle scenarios: fresh installation and 4.1.1 → 4.1.2 upgrade on Windows/Python 3.10 and WSL Ubuntu/Python 3.12. Install → check → update → check → installed canonical bootstrap → check → uninstall all passed. All 287 receipt-owned files matched; an unmanaged Skill and isolated host settings were preserved.
- Attached
installation-proof.json,SHA256SUMS.txt,release-bundle.json,proof-bundle.json, and generatedcurrent-stateJSON/Markdown alongside the public ZIP. The checksum file covers all six other assets.
ZIP SHA-256: 91807452d9aed882218bf36e650037802b7c0c212519869e60b501644af0db65.
Migration notes
- Overlapping updates to one run now return a busy/retry error. Retry after the active update finishes; independent runs continue separately.
- Changed or missing inputs, incomplete review/TDD evidence, and conflicting result identities require recovery or corrected evidence before completion.
- Existing 4.1.0 SkillsBench figures remain historical results; this release introduces no benchmark-performance claim.