Skip to content

v1.9.0

Choose a tag to compare

View all tags
@jaschadub jaschadub released this 29 Mar 22:11
· 50 commits to main since this release
v1.9.0
63ac245
This commit was signed with the committer’s verified signature.
symbibot Symbi Bot
GPG key ID: 7B0BF546C173D14B
Verified
Learn about vigilant mode.

What's New in v1.9.0

ToolClad Integration

  • Declarative .clad.toml tool contracts with manifest loading, argument validation, and command execution
  • HTTP backend and MCP proxy backend with secrets injection
  • SessionExecutor and BrowserExecutor for ToolClad v0.4.0+ spec
  • Built-in tool manifests for whois, nmap, dig, and curl

symbi tools CLI

  • Scope enforcement, Cedar policy generation, and hot-reload file watcher

Production Hardening

  • Bounded channels, health probes, secrets TTL
  • Cedar policy reload, audit export, and rate limiting
  • W3C traceparent propagation for distributed tracing

Security Fixes

  • Critical DoS vector mitigation
  • JWT validation hardening
  • Environment variable leakage prevention
  • Sandbox guard improvements

Other

  • A2UI v0.2.0 update
  • BrowserDef v0.5.1 with connect, extract_mode, default engine
  • Concurrency, resource exhaustion, and memory efficiency fixes

Crate Versions

Crate Version
symbi 1.9.0
symbi-dsl 1.9.0
symbi-runtime 1.9.0
symbi-channel-adapter 0.1.2
repl-core 1.9.0
repl-proto 1.9.0
repl-cli 1.9.0
repl-lsp 1.9.0

Full Changelog: https://github.com/ThirdKeyAI/Symbiont/blob/main/CHANGELOG.md

Pre-Built Binaries

Note: Pre-built binaries are tested but considered less reliable than installing via cargo install symbi or Docker (ghcr.io/thirdkeyai/symbi). If you encounter issues, please try those methods first.

Quick Install

macOS / Linux:

curl -fsSL https://raw.githubusercontent.com/thirdkeyai/symbiont/main/scripts/install.sh | bash

Homebrew (macOS):

brew tap thirdkeyai/tap
brew install symbi

Manual download:
Download the appropriate binary for your platform from the assets below. Verify checksums with checksums.txt.

Verification

Each binary is signed with Sigstore cosign. Verify with:

cosign verify-blob --certificate symbi-*.pem --signature symbi-*.sig symbi-*.tar.gz \
  --certificate-identity-regexp="https://github.com/ThirdKeyAI/Symbiont" \
  --certificate-oidc-issuer="https://token.actions.githubusercontent.com"

SHA256 checksums are in checksums.txt (also signed).

Assets 17
Loading