TODO Flow v0.0.5

TODO Flow v0.0.5 adds declared verification-input identity, durable process cleanup, bounded worker-terminal lifecycle and supported native Orca/Codex sessions.

Changes

• Verification inputs: init --verify-identity declares files, selected environment names and a nonce. Changed or unavailable inputs invalidate cached success; legacy evidence requires fresh verification. Existing configuration is preserved.
• Process and terminal lifecycle: preserve ownership and exit evidence, account for terminal capacity, retire checked idle Orca/tmux terminals, and retain uncertain resources for inspection before replacement.
• Native Orca sessions: use owned managed workspaces and isolated Codex App Server sessions with exact thread/turn associations and fresh review provenance. CLI launch status and the dashboard expose the actual execution mode and compatibility reason.
• Scope guidance: planning, work, review and starter templates tie required conditions to the selected outcome and affected invariants, preserve user tradeoffs and keep optional improvements separate.

Install and update

Requires Python 3.11+, uv, Git and ripgrep. Workers need an authenticated Claude or Codex CLI; GitHub integration needs authenticated gh.

uv tool install https://github.com/JakeB-5/todo-flow/releases/download/v0.0.5/todo_flow-0.0.5-py3-none-any.whl
todo-flow --version

For an existing uv-tool installation, stop drivers and dashboards normally, download the wheel and SHA256SUMS, verify the checksum, then run:

todo-flow upgrade --wheel /absolute/downloads/todo_flow-0.0.5-py3-none-any.whl --dry-run
todo-flow upgrade --wheel /absolute/downloads/todo_flow-0.0.5-py3-none-any.whl

Follow the update guide to update each project's installed skills. State/configuration formats and worker/skill protocols are unchanged. init --verify-identity applies to new state; an upgrade does not rewrite existing project configuration.

Compatibility and validation

Native sessions currently recognize Codex CLI 0.157.1. Existing checkouts, unverified versions, unsupported authentication storage and missing review provenance retain an explicitly reported compatibility route. The new native route has local synthetic protocol/process coverage; real-model/external live acceptance has not been performed. See operations.

• 524 Python tests and 12 dashboard localization/behavior tests passed locally; Python lint/format and JavaScript syntax checks passed.
• Clean wheel installation verified both CLI versions, bundled skill templates, dashboard translations and the license. The source distribution matches the release checkout and excludes local state and design documents.
• Published 0.0.4 → 0.0.5 engine upgrade, skill update/rollback and engine rollback passed in an isolated installation; canonical state, queued work and language bindings were preserved.
• Synthetic future-version tests passed active-dashboard exclusion, failed-update rollback and recovery with the CLI missing.
• Release CI passed all four Linux/macOS × Python 3.11/3.13 jobs, including Python tests, dashboard checks, builds and isolated update/recovery checks.

The wheel, source distribution and SHA256SUMS are attached. Synthetic future-version wheels used by update tests are excluded. Distribution is through GitHub Releases. See the changelog.