v0.3.7

Changelog

Features

• dcb09c7 feat(attribution): record which model produced each memory, note, and session
• 5cb1d1b feat(codex): add MCP instructions and native skills
• c55b770 feat(console): harness and model attribution pills on sessions, memories, notes, and the feed
• 8a33a02 feat(hooks): cap Codex hook context below the output spill threshold
• 9f4ebb6 feat(hooks): integrate Codex subagent lifecycle
• 63b7067 feat(install): detect the agent clients instead of defaulting to Claude
• 01929d5 feat(security): land the 2026-07 audit hardening (M1-M3 and low-severity fixes)

Fixes

• 2ce7fd1 fix(console): resolve provenance stamps by shape and stop pinning mutable session fields
• 90a41c6 fix(doctor): judge hooks against the recorded seam path, not the running binary's sibling
• 8fdf28e fix(hooks): adopt hand-written tilde hook commands instead of duplicating
• 931881a fix(hooks): classify definitions exactly
• 1bd5de5 fix(hooks): keep item ids on a truncated Codex injection
• 57ba0b1 fix(hooks): prepare the plan-context block once for telemetry and response
• 5b44b35 fix(hooks): reject an unknown hook client instead of defaulting to Claude
• 6c1e77d fix(install): pass an explicit --client from make install
• 5cc83d4 fix(install): probe for --client before passing it to a pinned binary
• 2d37071 fix(install): warn when a pinned 0.3.3-0.3.6 binary bundles no skills
• e3d47ed fix(release): ignore the CI-generated sigs/ so goreleaser sees a clean tree
• 8658df3 fix(release): pin cosign to the v2 line so the sign stage survives cosign v3
• 5521017 fix(scripts): pin --client claude in the scene-fixture harness
• 93848ce fix(scripts): reject traversal skill names before rm -rf
• f14b4b0 fix(seamlessd): degrade skill install instead of aborting install-hooks
• ed38e92 fix(seamlessd): keep MCP stderr out of JSON
• b1ad1cf fix(seamlessd): reconcile Codex MCP registration
• b8e4cea fix(seamlessd): report Codex operational truth
• 2758e0d fix(sessions): key ambient sessions by full external identity
• 7ae643a fix(skills): restore disable-model-invocation on seam-onboard
• df9350b fix(skills): stop double-wrapping the mkdir error

Other

• 11a8588 Merge branch 'worktree-review-backlog-fixes'