v0.11.3

thlibo v0.11.3

Local-Gemma tool-output compression middleware for Claude
Code + Codex CLI. Inference is delegated to
inferd — thlibo's
installer detects/installs inferd as a sidecar.

Binaries

Cross-platform binaries are attached as tarballs/zip.
Each bundle contains bin/thlibo, README.md,
CHANGELOG.md, and LICENSE.

Verifying signatures

Each archive, SHA256SUMS, and the CycloneDX SBOM are
signed by cosign via Sigstore's keyless flow. No public
key to manage — the identity is anchored in this
workflow's GitHub OIDC token.

cosign verify-blob \
  --certificate-identity \
    "https://github.com/3rg0n/thlibo/.github/workflows/release.yml@refs/tags/v0.11.3" \
  --certificate-oidc-issuer \
    "https://token.actions.githubusercontent.com" \
  --bundle thlibo-linux-amd64.tar.gz.cosign-bundle \
  thlibo-linux-amd64.tar.gz

The transparency-log entry is automatically published to
Rekor (rekor.sigstore.dev); cosign verifies it as part
of the flow above.

SBOM

thlibo-sbom.cdx.json is a CycloneDX SBOM generated from
the repo at the release tag. Signed with cosign like the
archives.

Inferd sidecar

On first run, thlibo install probes for a running inferd
admin socket and consumes it if present; otherwise it
fetches the matching inferd release for the host platform
and runs inferd's installer. The model GGUF is downloaded
once by inferd into a shared per-platform model store.

What's Changed

• refactor: bound every inference call, cut the routing prompt 95% by @3rg0n in #95
• fix(processors): rank fast-path signatures above line shapes (#97) by @3rg0n in #99
• fix(pdf-to-md): fail open to original bytes, not an error payload by @3rg0n in #101
• feat(pdf,cordon): native Go pdf-filter + Page.Images(), cordon-filter port, CI injection fix by @3rg0n in #103
• release: v0.11.3 — native Go PDF + cordon, Python off the compression path by @3rg0n in #104

Full Changelog: v0.11.2...v0.11.3