v0.7.3

thlibo v0.7.3

Local-Gemma tool-output compression middleware for Claude
Code + Codex CLI. Inference is delegated to
inferd — thlibo's
installer detects/installs inferd as a sidecar.

Binaries

Cross-platform binaries are attached as tarballs/zip.
Each bundle contains bin/thlibo, README.md,
CHANGELOG.md, and LICENSE.

Verifying signatures

Each archive, SHA256SUMS, and the CycloneDX SBOM are
signed by cosign via Sigstore's keyless flow. No public
key to manage — the identity is anchored in this
workflow's GitHub OIDC token.

cosign verify-blob \
  --certificate-identity \
    "https://github.com/3rg0n/thlibo/.github/workflows/release.yml@refs/tags/v0.7.3" \
  --certificate-oidc-issuer \
    "https://token.actions.githubusercontent.com" \
  --bundle thlibo-linux-amd64.tar.gz.cosign-bundle \
  thlibo-linux-amd64.tar.gz

The transparency-log entry is automatically published to
Rekor (rekor.sigstore.dev); cosign verifies it as part
of the flow above.

SBOM

thlibo-sbom.cdx.json is a CycloneDX SBOM generated from
the repo at the release tag. Signed with cosign like the
archives.

Inferd sidecar

On first run, thlibo install probes for a running inferd
admin socket and consumes it if present; otherwise it
fetches the matching inferd release for the host platform
and runs inferd's installer. The model GGUF is downloaded
once by inferd into a shared per-platform model store.

What's Changed

• feat(update): v0.7.3 auto-update notification — headless detection, thlibo upgrade, macOS toast by @3rg0n in #30

Full Changelog: v0.7.2...v0.7.3