v0.11.6

thlibo v0.11.6

Local-Gemma tool-output compression middleware for Claude
Code + Codex CLI. Inference is delegated to
inferd — thlibo's
installer detects/installs inferd as a sidecar.

Binaries

Cross-platform binaries are attached as tarballs/zip.
Each bundle contains bin/thlibo, README.md,
CHANGELOG.md, and LICENSE.

Verifying signatures

Each archive, SHA256SUMS, and the CycloneDX SBOM are
signed by cosign via Sigstore's keyless flow. No public
key to manage — the identity is anchored in this
workflow's GitHub OIDC token.

cosign verify-blob \
  --certificate-identity \
    "https://github.com/3rg0n/thlibo/.github/workflows/release.yml@refs/tags/v0.11.6" \
  --certificate-oidc-issuer \
    "https://token.actions.githubusercontent.com" \
  --bundle thlibo-linux-amd64.tar.gz.cosign-bundle \
  thlibo-linux-amd64.tar.gz

The transparency-log entry is automatically published to
Rekor (rekor.sigstore.dev); cosign verifies it as part
of the flow above.

SBOM

thlibo-sbom.cdx.json is a CycloneDX SBOM generated from
the repo at the release tag. Signed with cosign like the
archives.

Inferd sidecar

On first run, thlibo install probes for a running inferd
admin socket and consumes it if present; otherwise it
fetches the matching inferd release for the host platform
and runs inferd's installer. The model GGUF is downloaded
once by inferd into a shared per-platform model store.

What's Changed

• fix(codex): match the layer's existing hook representation by @3rg0n in #125
• fix(claudecode): choose the hook script by host, not by matcher name by @3rg0n in #128
• fix(middleware): pass whole structured config documents through untouched by @3rg0n in #130
• release: v0.11.6 — three silent-failure fixes, one of them on the compression path by @3rg0n in #131

Full Changelog: v0.11.5...v0.11.6

v0.11.5

thlibo v0.11.5

Local-Gemma tool-output compression middleware for Claude
Code + Codex CLI. Inference is delegated to
inferd — thlibo's
installer detects/installs inferd as a sidecar.

Binaries

Cross-platform binaries are attached as tarballs/zip.
Each bundle contains bin/thlibo, README.md,
CHANGELOG.md, and LICENSE.

Verifying signatures

Each archive, SHA256SUMS, and the CycloneDX SBOM are
signed by cosign via Sigstore's keyless flow. No public
key to manage — the identity is anchored in this
workflow's GitHub OIDC token.

cosign verify-blob \
  --certificate-identity \
    "https://github.com/3rg0n/thlibo/.github/workflows/release.yml@refs/tags/v0.11.5" \
  --certificate-oidc-issuer \
    "https://token.actions.githubusercontent.com" \
  --bundle thlibo-linux-amd64.tar.gz.cosign-bundle \
  thlibo-linux-amd64.tar.gz

The transparency-log entry is automatically published to
Rekor (rekor.sigstore.dev); cosign verifies it as part
of the flow above.

SBOM

thlibo-sbom.cdx.json is a CycloneDX SBOM generated from
the repo at the release tag. Signed with cosign like the
archives.

Inferd sidecar

On first run, thlibo install probes for a running inferd
admin socket and consumes it if present; otherwise it
fetches the matching inferd release for the host platform
and runs inferd's installer. The model GGUF is downloaded
once by inferd into a shared per-platform model store.

What's Changed

• ci: pin the scanner installs instead of resolving @latest at job time by @3rg0n in #112
• fix(pdf,ci): bound object nesting, fail open on zero pages, revive the CVE gate by @3rg0n in #113
• docs: record that fuzzing cannot catch a stack overflow by @3rg0n in #114
• fix(fuzz): derive the job timeout from fuzztime so a soak can finish by @3rg0n in #115
• test: close the zero-coverage gaps and the Linux autostart hole by @3rg0n in #116
• fix(install): replace the dead APE/WSL hint with a real autostart warning by @3rg0n in #117
• release: v0.11.5 — hardening, dead-advisory removal, and a moved changelog entry by @3rg0n in #118

Full Changelog: v0.11.4...v0.11.5

v0.11.4

thlibo v0.11.4

Local-Gemma tool-output compression middleware for Claude
Code + Codex CLI. Inference is delegated to
inferd — thlibo's
installer detects/installs inferd as a sidecar.

Binaries

Cross-platform binaries are attached as tarballs/zip.
Each bundle contains bin/thlibo, README.md,
CHANGELOG.md, and LICENSE.

Verifying signatures

Each archive, SHA256SUMS, and the CycloneDX SBOM are
signed by cosign via Sigstore's keyless flow. No public
key to manage — the identity is anchored in this
workflow's GitHub OIDC token.

cosign verify-blob \
  --certificate-identity \
    "https://github.com/3rg0n/thlibo/.github/workflows/release.yml@refs/tags/v0.11.4" \
  --certificate-oidc-issuer \
    "https://token.actions.githubusercontent.com" \
  --bundle thlibo-linux-amd64.tar.gz.cosign-bundle \
  thlibo-linux-amd64.tar.gz

The transparency-log entry is automatically published to
Rekor (rekor.sigstore.dev); cosign verifies it as part
of the flow above.

SBOM

thlibo-sbom.cdx.json is a CycloneDX SBOM generated from
the repo at the release tag. Signed with cosign like the
archives.

Inferd sidecar

On first run, thlibo install probes for a running inferd
admin socket and consumes it if present; otherwise it
fetches the matching inferd release for the host platform
and runs inferd's installer. The model GGUF is downloaded
once by inferd into a shared per-platform model store.

What's Changed

• docs(threat-model): record surface drift since the v0.1.0 snapshot by @3rg0n in #105
• fix(cordon): bound the k-NN scoring pass by CORDON_TIMEOUT by @3rg0n in #106
• docs(site): stop crediting Python for the native PDF path by @3rg0n in #107
• ci: run the internal/pdf fuzz targets nightly by @3rg0n in #108
• perf(processors): benchmark pdf-filter and cordon, with ceiling tests by @3rg0n in #109
• test(install,pdfocr): cover archive-extraction guards and render bounds by @3rg0n in #110
• release: v0.11.4 — nightly fuzzing, benchmarks, coverage floors, cordon timeout fix by @3rg0n in #111

Full Changelog: v0.11.3...v0.11.4

v0.11.3

thlibo v0.11.3

Local-Gemma tool-output compression middleware for Claude
Code + Codex CLI. Inference is delegated to
inferd — thlibo's
installer detects/installs inferd as a sidecar.

Binaries

Cross-platform binaries are attached as tarballs/zip.
Each bundle contains bin/thlibo, README.md,
CHANGELOG.md, and LICENSE.

Verifying signatures

Each archive, SHA256SUMS, and the CycloneDX SBOM are
signed by cosign via Sigstore's keyless flow. No public
key to manage — the identity is anchored in this
workflow's GitHub OIDC token.

cosign verify-blob \
  --certificate-identity \
    "https://github.com/3rg0n/thlibo/.github/workflows/release.yml@refs/tags/v0.11.3" \
  --certificate-oidc-issuer \
    "https://token.actions.githubusercontent.com" \
  --bundle thlibo-linux-amd64.tar.gz.cosign-bundle \
  thlibo-linux-amd64.tar.gz

The transparency-log entry is automatically published to
Rekor (rekor.sigstore.dev); cosign verifies it as part
of the flow above.

SBOM

thlibo-sbom.cdx.json is a CycloneDX SBOM generated from
the repo at the release tag. Signed with cosign like the
archives.

Inferd sidecar

On first run, thlibo install probes for a running inferd
admin socket and consumes it if present; otherwise it
fetches the matching inferd release for the host platform
and runs inferd's installer. The model GGUF is downloaded
once by inferd into a shared per-platform model store.

What's Changed

• refactor: bound every inference call, cut the routing prompt 95% by @3rg0n in #95
• fix(processors): rank fast-path signatures above line shapes (#97) by @3rg0n in #99
• fix(pdf-to-md): fail open to original bytes, not an error payload by @3rg0n in #101
• feat(pdf,cordon): native Go pdf-filter + Page.Images(), cordon-filter port, CI injection fix by @3rg0n in #103
• release: v0.11.3 — native Go PDF + cordon, Python off the compression path by @3rg0n in #104

Full Changelog: v0.11.2...v0.11.3

v0.11.3-rc.2

thlibo v0.11.3-rc.2

Local-Gemma tool-output compression middleware for Claude
Code + Codex CLI. Inference is delegated to
inferd — thlibo's
installer detects/installs inferd as a sidecar.

Binaries

Cross-platform binaries are attached as tarballs/zip.
Each bundle contains bin/thlibo, README.md,
CHANGELOG.md, and LICENSE.

Verifying signatures

Each archive, SHA256SUMS, and the CycloneDX SBOM are
signed by cosign via Sigstore's keyless flow. No public
key to manage — the identity is anchored in this
workflow's GitHub OIDC token.

cosign verify-blob \
  --certificate-identity \
    "https://github.com/3rg0n/thlibo/.github/workflows/release.yml@refs/tags/v0.11.3-rc.2" \
  --certificate-oidc-issuer \
    "https://token.actions.githubusercontent.com" \
  --bundle thlibo-linux-amd64.tar.gz.cosign-bundle \
  thlibo-linux-amd64.tar.gz

The transparency-log entry is automatically published to
Rekor (rekor.sigstore.dev); cosign verifies it as part
of the flow above.

SBOM

thlibo-sbom.cdx.json is a CycloneDX SBOM generated from
the repo at the release tag. Signed with cosign like the
archives.

Inferd sidecar

On first run, thlibo install probes for a running inferd
admin socket and consumes it if present; otherwise it
fetches the matching inferd release for the host platform
and runs inferd's installer. The model GGUF is downloaded
once by inferd into a shared per-platform model store.

What's Changed

• fix(processors): rank fast-path signatures above line shapes (#97) by @3rg0n in #99

Full Changelog: v0.11.3-rc.1...v0.11.3-rc.2

v0.11.3-rc.1

thlibo v0.11.3-rc.1

Local-Gemma tool-output compression middleware for Claude
Code + Codex CLI. Inference is delegated to
inferd — thlibo's
installer detects/installs inferd as a sidecar.

Binaries

Cross-platform binaries are attached as tarballs/zip.
Each bundle contains bin/thlibo, README.md,
CHANGELOG.md, and LICENSE.

Verifying signatures

Each archive, SHA256SUMS, and the CycloneDX SBOM are
signed by cosign via Sigstore's keyless flow. No public
key to manage — the identity is anchored in this
workflow's GitHub OIDC token.

cosign verify-blob \
  --certificate-identity \
    "https://github.com/3rg0n/thlibo/.github/workflows/release.yml@refs/tags/v0.11.3-rc.1" \
  --certificate-oidc-issuer \
    "https://token.actions.githubusercontent.com" \
  --bundle thlibo-linux-amd64.tar.gz.cosign-bundle \
  thlibo-linux-amd64.tar.gz

The transparency-log entry is automatically published to
Rekor (rekor.sigstore.dev); cosign verifies it as part
of the flow above.

SBOM

thlibo-sbom.cdx.json is a CycloneDX SBOM generated from
the repo at the release tag. Signed with cosign like the
archives.

Inferd sidecar

On first run, thlibo install probes for a running inferd
admin socket and consumes it if present; otherwise it
fetches the matching inferd release for the host platform
and runs inferd's installer. The model GGUF is downloaded
once by inferd into a shared per-platform model store.

What's Changed

• refactor: bound every inference call, cut the routing prompt 95% by @3rg0n in #95

Full Changelog: v0.11.2...v0.11.3-rc.1

v0.11.2

thlibo v0.11.2

Local-Gemma tool-output compression middleware for Claude
Code + Codex CLI. Inference is delegated to
inferd — thlibo's
installer detects/installs inferd as a sidecar.

Binaries

Cross-platform binaries are attached as tarballs/zip.
Each bundle contains bin/thlibo, README.md,
CHANGELOG.md, and LICENSE.

Verifying signatures

Each archive, SHA256SUMS, and the CycloneDX SBOM are
signed by cosign via Sigstore's keyless flow. No public
key to manage — the identity is anchored in this
workflow's GitHub OIDC token.

cosign verify-blob \
  --certificate-identity \
    "https://github.com/3rg0n/thlibo/.github/workflows/release.yml@refs/tags/v0.11.2" \
  --certificate-oidc-issuer \
    "https://token.actions.githubusercontent.com" \
  --bundle thlibo-linux-amd64.tar.gz.cosign-bundle \
  thlibo-linux-amd64.tar.gz

The transparency-log entry is automatically published to
Rekor (rekor.sigstore.dev); cosign verifies it as part
of the flow above.

SBOM

thlibo-sbom.cdx.json is a CycloneDX SBOM generated from
the repo at the release tag. Signed with cosign like the
archives.

Inferd sidecar

On first run, thlibo install probes for a running inferd
admin socket and consumes it if present; otherwise it
fetches the matching inferd release for the host platform
and runs inferd's installer. The model GGUF is downloaded
once by inferd into a shared per-platform model store.

What's Changed

• fix(pdf-to-md): stop inflating slide decks — reject layout grids, strip repeated furniture by @3rg0n in #93
• release: v0.11.2 — pdf-to-md slide-deck fix by @3rg0n in #94

Full Changelog: v0.11.1...v0.11.2

v0.11.1

thlibo v0.11.1

Local-Gemma tool-output compression middleware for Claude
Code + Codex CLI. Inference is delegated to
inferd — thlibo's
installer detects/installs inferd as a sidecar.

Binaries

Cross-platform binaries are attached as tarballs/zip.
Each bundle contains bin/thlibo, README.md,
CHANGELOG.md, and LICENSE.

Verifying signatures

Each archive, SHA256SUMS, and the CycloneDX SBOM are
signed by cosign via Sigstore's keyless flow. No public
key to manage — the identity is anchored in this
workflow's GitHub OIDC token.

cosign verify-blob \
  --certificate-identity \
    "https://github.com/3rg0n/thlibo/.github/workflows/release.yml@refs/tags/v0.11.1" \
  --certificate-oidc-issuer \
    "https://token.actions.githubusercontent.com" \
  --bundle thlibo-linux-amd64.tar.gz.cosign-bundle \
  thlibo-linux-amd64.tar.gz

The transparency-log entry is automatically published to
Rekor (rekor.sigstore.dev); cosign verifies it as part
of the flow above.

SBOM

thlibo-sbom.cdx.json is a CycloneDX SBOM generated from
the repo at the release tag. Signed with cosign like the
archives.

Inferd sidecar

On first run, thlibo install probes for a running inferd
admin socket and consumes it if present; otherwise it
fetches the matching inferd release for the host platform
and runs inferd's installer. The model GGUF is downloaded
once by inferd into a shared per-platform model store.

What's Changed

• fix(install): resolve "latest" via web redirect, not the rate-limited API by @3rg0n in #90
• release: v0.11.1 — installer 403 fix by @3rg0n in #91

Full Changelog: v0.11.0...v0.11.1

v0.11.0

thlibo v0.11.0

Local-Gemma tool-output compression middleware for Claude
Code + Codex CLI. Inference is delegated to
inferd — thlibo's
installer detects/installs inferd as a sidecar.

Binaries

Cross-platform binaries are attached as tarballs/zip.
Each bundle contains bin/thlibo, README.md,
CHANGELOG.md, and LICENSE.

Verifying signatures

Each archive, SHA256SUMS, and the CycloneDX SBOM are
signed by cosign via Sigstore's keyless flow. No public
key to manage — the identity is anchored in this
workflow's GitHub OIDC token.

cosign verify-blob \
  --certificate-identity \
    "https://github.com/3rg0n/thlibo/.github/workflows/release.yml@refs/tags/v0.11.0" \
  --certificate-oidc-issuer \
    "https://token.actions.githubusercontent.com" \
  --bundle thlibo-linux-amd64.tar.gz.cosign-bundle \
  thlibo-linux-amd64.tar.gz

The transparency-log entry is automatically published to
Rekor (rekor.sigstore.dev); cosign verifies it as part
of the flow above.

SBOM

thlibo-sbom.cdx.json is a CycloneDX SBOM generated from
the repo at the release tag. Signed with cosign like the
archives.

Inferd sidecar

On first run, thlibo install probes for a running inferd
admin socket and consumes it if present; otherwise it
fetches the matching inferd release for the host platform
and runs inferd's installer. The model GGUF is downloaded
once by inferd into a shared per-platform model store.

What's Changed

• docs: add AGENTS.md pointer + record branch protection by @3rg0n in #84
• feat: optional OpenTelemetry emission (metrics + events) — ADR 0011 by @3rg0n in #86
• docs: OTel collector setup gotchas (ADR 0011) by @3rg0n in #87
• release: v0.11.0 — optional OpenTelemetry emission by @3rg0n in #88

Full Changelog: v0.10.1...v0.11.0

v0.10.1

thlibo v0.10.1

Local-Gemma tool-output compression middleware for Claude
Code + Codex CLI. Inference is delegated to
inferd — thlibo's
installer detects/installs inferd as a sidecar.

Binaries

Cross-platform binaries are attached as tarballs/zip.
Each bundle contains bin/thlibo, README.md,
CHANGELOG.md, and LICENSE.

Verifying signatures

Each archive, SHA256SUMS, and the CycloneDX SBOM are
signed by cosign via Sigstore's keyless flow. No public
key to manage — the identity is anchored in this
workflow's GitHub OIDC token.

cosign verify-blob \
  --certificate-identity \
    "https://github.com/3rg0n/thlibo/.github/workflows/release.yml@refs/tags/v0.10.1" \
  --certificate-oidc-issuer \
    "https://token.actions.githubusercontent.com" \
  --bundle thlibo-linux-amd64.tar.gz.cosign-bundle \
  thlibo-linux-amd64.tar.gz

The transparency-log entry is automatically published to
Rekor (rekor.sigstore.dev); cosign verifies it as part
of the flow above.

SBOM

thlibo-sbom.cdx.json is a CycloneDX SBOM generated from
the repo at the release tag. Signed with cosign like the
archives.

Inferd sidecar

On first run, thlibo install probes for a running inferd
admin socket and consumes it if present; otherwise it
fetches the matching inferd release for the host platform
and runs inferd's installer. The model GGUF is downloaded
once by inferd into a shared per-platform model store.

What's Changed

• docs(site): add mhtml-filter to the chart + before/after example by @3rg0n in #82
• ci(actions): bump the github-actions group across 1 directory with 5 updates by @dependabot[bot] in #58
• fix(middleware): fall open to original when a processor returns empty output (closes #36) by @3rg0n in #83

Full Changelog: v0.10.0...v0.10.1