Skip to content

v0.5.6 — Themis Quality Gate + Production Hardening

Choose a tag to compare

View all tags
@Apegurus Apegurus released this 12 May 12:24
· 160 commits to staging since this release
v0.5.6
e0df431

Highlights

This is the first publish since 0.3.7, bringing two minor versions of work to npm in one release.

🆕 Themis — Independent Audit Quality Gate (5th agent)

A new agent running on openai/gpt-5.4 (different provider family for reasoning diversity) cross-validates the audit pipeline:

  • Compares raw findings against Scribe's deduped output and the final report
  • Performs second-opinion research via Solodit and skill checklists
  • Returns a structured verdict to Argus, who makes the final call

🛡️ Major hardening across 0.4.0 + 0.5.0 + 0.5.6

  • Concurrency fixes: mutex timeout no longer releases lock; CAS race in state assignment; processQueue re-entrancy; bounded session maps
  • Reliability: state persistence rewrite with async mutex; deterministic finding IDs; session isolation; multi-instance EventSink contamination fixes
  • Path safety: containment + URL scheme validation in forge tools and artifact resolver
  • Resource hygiene: signal handler cleanup, exit handler removal on dispose, forge inspect timer cleanup, async file ops replacing blocking sync calls

⚙️ 0.5.6 changes

Fixes

  • Mutate config objects in-place instead of replacing with spread — prevents lost config updates across hooks
  • Defensive guards in tool.execute.after hook prevent MCP tool crashes from propagating
  • Use deduped findings in report pipeline; resolve check_patterns path handling
  • Resolve argus doctor false warnings, gas parser Unicode bug, and lint errors
  • Don't overwrite task tool output — only truncate argus_* tool results
  • Restore production readiness checks accidentally weakened in earlier refactor

Improvements

  • Skill category frontmatter added to 5 protocol-pattern and 6 checklist SKILL.md files — argus doctor now reports accurate category counts
  • Tighten permissive config schema fields
  • Clarify Bun-native package exports in README and package.json
  • Align Argus agent prompts and operator runbook documentation

Install

bun add solidity-argus
# or, register globally in OpenCode:
bunx solidity-argus install

Full changelog

See CHANGELOG.md for all entries between 0.3.6 and 0.5.6.

Package details

Assets 2
Loading