1.8.8b11 — the second walk

An opt-in preview. Stable remains 1.8.7; the Personal Wiki becomes long-term supported in 1.9.0.

1.8.8b9 carried what five testers found installing 1.8.8b7 into empty profiles. The same five walks were then run again against b9 as published. The fixes held: a stale approval on a second device is refused, a visitor sees only their own runs, the install line resolves stable dependencies. This preview is what the second walk found.

1.8.8b10 was tagged with these changes but never built: co ai's prompt library linked 18 design records that #1707 had stopped shipping, and the wheel built from the source package met the dangling links. The links are gone, a test checks every link inside the package, and this is the same release under the next number.

The browser always answers

• Every co browser command now ends within its deadline: 120 seconds, or its own --timeout plus 15. When Chrome's cookie store waits on a macOS Keychain prompt, co browser cookies --all and save_state used to hang forever and, one by one, fill the daemon until even close was refused. They now stop and say what they waited on; a client that leaves takes its command with it; and status, close, tab ls and tab close are never answered "busy" (#1709).
• The daemon no longer asks Chrome for its cookies after every command with no time limit, which leaked one connection per command; co browser status answers within seconds; a selector that matches nothing, a missing script or page, and a bad URL are failures with a non-zero exit (#1704, #1709).
• Read commands such as get_current_url no longer start a daemon when none is running, so a later --headless is not silently ignored.

Hosting

• A device that joined a session in the first seconds after the host started missed the whole next turn — also on 1.8.7. It joins the session's viewers before its Home page renders now (#1708).
• connect() after a host restart mid-turn raises TurnLostError naming the session instead of "Auth error: Agent not connected"; a slow on_approval is declined at the deadline instead of leaving the host waiting; a script with no terminal is told to pass on_onboard= instead of hitting EOFError.
• co trust add refuses anything that is not an address. The host.md Quick Start runs as written.

First run

• The benchmark example co benchmark list prints carries its own data, and co eval run stops an attempt at 10 steps (--max-iterations raises it). On the co create template the old example cost about $1.00 for five cases; co eval run now says what it will run before the first model call and suggests --runs 1 (#1707).
• co create into an existing folder and co deploy with no agent.py exit 1, and co create now refuses the folder before a first run makes a keypair and signs up for an account.
• connect() with no identity says to run co init. Planning notes and internal design records no longer ship in the wheel.

Consent

• co wiki start asks again whenever what it showed you changed — the model provider, the permissions, the schedule — instead of only when a source is added; the summary names the login the runner really uses (#1706).
• co claude run stops the Claude process it started when it is terminated, instead of leaving it running unsupervised.
• co wiki init --name makes your own page without a mailbox.

Still open

• The web client (@connectonion/react 0.4.4-rc.6) must send request_id before a session open on two browsers can answer approvals; until then that case is refused rather than guessed.
• co auth status still signs you in, as on 1.8.7; its fix (#1693) is in review.

Install

python -m pip install --upgrade 'connectonion==1.8.8b11'
co --version