Skip to content

Release 2.18.2 - #68

Merged
robertbackhaus-a11y merged 5 commits into
mainfrom
release/2.18.2
Sep 12, 2026
Merged

robertbackhaus-a11y merged 5 commits into
mainfrom
release/2.18.2

Conversation

@robertbackhaus-a11y

Copy link
Copy Markdown
Owner

Release 2.18.2: runtime stability, central lifecycle wiring, Open Terminal lifecycle fixes, OpenWebUI secret-key persistence, WSL/SearXNG keeper stabilization, delivery/reconcile version updates.

Fixes a real, reproduced defect: Complete Installer step 18/18 ("KI-Stack
Desktop Control") failed with "Desktop-Control-Validierung fehlgeschlagen."
even though the same Install/Validate payload succeeded when run standalone.
Runs Desktop Control Install/Upgrade/Repair and the immediately following
Validate in a fresh pwsh process from Complete Installer, isolated from the
shared orchestrator process. Adds an optional, transaction-scoped
BackupRoot to Install-KIDesktopControl/Invoke-KIStackDesktopControl.ps1, and
makes Assert-KICompletePathAwareTransaction skip the BackupPath check only
for a Failed step whose rollbackStatus is already Completed.

Also fixes a real, reproduced Open WebUI startup defect found while
verifying the above: open-webui==0.11.3's own `serve` entrypoint
(open_webui/__init__.py) falls back to `Path.cwd() / '.webui_secret_key'`
whenever WEBUI_SECRET_KEY is not already set as an environment variable.
None of the KI-Stack starter chain ever changed directory, so starting the
stack from a shell whose current directory is C:\Windows\System32 (e.g. an
elevated shell opened the usual Windows way) made Open WebUI try, and
without admin rights fail, to write its persistent secret key there.
Open WebUI's separate WEBUI_SECRET_KEY_FILE env var is only honored by its
start.sh/start_windows.bat launchers, neither of which this starter uses,
so the fix instead has the generated Start-KIStack-OpenWebUI.cmd read
WEBUI_SECRET_KEY from a persistent, TargetRoot-scoped file
(<TargetRoot>\state\openwebui\.webui_secret_key, generated once,
cryptographically random, reused on every later start) and sets an
explicit, stable working directory, regardless of the caller's own CWD. A
legitimate pre-existing key at <TargetRoot>\.webui_secret_key (the path the
Desktop shortcut's WorkingDirectory=$TargetRoot convention would have
produced) is migrated and reused rather than replaced.

A follow-up real-target test then found that this second fix never actually
reached an existing installation: Complete Installer's compliance check for
the 'applications' component compares its Contracts/COMPONENTS.json pin
against the release string recorded in an existing target's own
modules/applications/installation.json, and the module's generated-content
change shipped without bumping that version -- so any already-installed
target stayed permanently reported compliant/Skip at the old version and
never received the regenerated Start-KIStack-OpenWebUI.cmd. Applications
advances from 1.4.11 to 1.4.12 (module.json, the release marker
Install-KIModuleApplications writes, the Contracts/COMPONENTS.json pin, the
embedded preflight/version-lock reference copies, and the README/Technical
Documentation tables), which makes Complete Installer correctly plan
Upgrade/Repair (never Skip) for an existing 1.4.11 target and re-run
Install-KIModuleApplications for real -- verified with a hermetic,
network-free fixture (a real venv with a planted open-webui==0.11.3
dist-info) proving the regenerated starter, the bumped marker, and
untouched pre-existing Applications/OpenWebUI data, plus a Complete
Installer planning-level proof of Skip -> Upgrade -> Skip using real
installation.json/components.json fixtures.

Complete Installer advances from 2.18.0 to 2.18.1. Desktop Control stays
0.1.0; WinApp stays 0.6.1; Cutover Runtime stays 1.6.14.
@robertbackhaus-a11y
robertbackhaus-a11y merged commit 94d8380 into main Sep 12, 2026
8 checks passed
@robertbackhaus-a11y
robertbackhaus-a11y deleted the release/2.18.2 branch September 12, 2026 16:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant