Skip to content

Threadforge v0.4.6 - Local Session Learning, Mancode Workflow Cutover, Copilot SDK Hooks, and Source-Bound Domain Verification v2

Latest
Latest

Choose a tag to compare

View all tags
@Rangow4562 Rangow4562 released this 30 Oct 14:07
· 11 commits to main since this release
v0.4.6
a5b9e73

Threadforge v0.4.6 — Local Session Learning, Mancode Workflow Cutover, Copilot SDK Hooks & Source-Bound Domain Verification v2

Threadforge v0.4.6 introduces automated local session learning, comprehensive Mancode immutable workflow archive cutover and trajectory sequence hashing, official GitHub Copilot SDK memory and telemetry hooks with shell plan-gate defenses, source-bound domain verification v2 with signed cutover attestations, and portable adapter CLI packaging.

What's New in v0.4.6

1. Local Session Learning & Memory Lifecycle Evolution

  • Learning from Captured Local Sessions (5aae48e): Added capability to extract and propose project memory items directly from locally captured agent sessions without external network transmission.
  • Distinct Feedback Task Reporting (64cc788): Extended memory outcome feedback telemetry to report distinct task counts and outcome breakdowns.
  • Cross-Harness Memory Continuity (1f362d9): Full test coverage of the cross-harness retrieval lifecycle between Codex CLI and OpenCode.
  • Session Revalidation Before Resume (f2dc72b): Strengthened handoff safety by re-verifying session stores and revision tokens prior to resume operations.

2. Mancode Migration Engine & Immutable Workflow Archive

  • Immutable Workflow Archive Migration (2b0dbce, 3a4fa6e): Added native importers and cutover composition for legacy Mancode immutable workflow archives and source sets.
  • Trajectory Sequence Hashing & Plan Structure Hints (e3cc1a2, abbd40d): Cryptographically hashes coding trajectory tool sequences and provides plan structure hints to guarantee verifiable migration integrity.
  • Workflow Evidence Binding (52c8594, 4ced105, d5c9aea, 15f343b): Binds referenced workflow evidence, imports source artifacts, captures Devin Desktop hooks, and detects Beacon Cline plugins.

3. GitHub Copilot SDK Telemetry, Memory & Plan Gate Hardening

  • Copilot SDK Telemetry & Memory Hooks (a6d90e9, 7771694): Added first-class Copilot SDK telemetry hooks and prompt-time memory hooks.
  • Unscoped Task Side-Effect Gating (4fea33e, 56c10ae): Hardened preToolUse task-plan gates to intercept unscoped shell executions and tool calls outside confirmed task plan scopes (copilot-cli-plan-gate-smoke-v2).
  • Project Memory MCP Fallback (12c447d, f0530f0, abecc15): Seamless project memory retrieval fallback via MCP when CLI hooks are disabled or unconfigured.

4. Source-Bound Domain Verification v2 & Signed Cutover Attestations

  • Source-Bound Domain Verification v2 (549f77f, c087935): Introduced v2 domain verification with source-bound validation contracts.
  • Signed Cutover Evaluation Attestations (af859dd): Signed evaluation receipts for cutover assessments, reinforced with strict JSON decoding (4230735), duplicate evidence key rejection (805c4a3), and trusted JSON parsing (8c372a2).
  • AnyJev Authenticated Local Serving Endpoint (8309cc7): Enforced local authentication for decision serving endpoints.

5. Portable Adapter CLI & Ecosystem Version Alignment

  • Portable Host CLI & Package Export Surface (1ce9017, c19a663, cfedbb5, 541a378): Packaged portable host CLI entrypoints, recognized npm bin symlinks, and finalized adapter export surfaces.
  • Goose Procedure Materialization (2cfba77): Materialized approved procedures into .goosehints targets.
  • Version 0.4.6 Alignment: Synchronized version 0.4.6 across Go CLI, MCP server, Python packages (pyproject.toml, uv.lock, anyjev), TypeScript adapter contracts, browser extension, and OpenClaw plugin.

Commit Changelog (v0.4.5..v0.4.6)

  • a5b9e73 chore(release): bump version to 0.4.6
  • 56c10ae test(copilot): verify shell plan-gate callback
  • 4fea33e fix(copilot): gate unscoped task side effects
  • 5aae48e feat(memory): learn from captured local sessions
  • 1f362d9 test(memory): cover Codex-to-OpenCode retrieval lifecycle
  • e3cc1a2 feat(migrate): hash coding trajectory tool sequences
  • 3a4fa6e feat(migrate): compose Mancode source sets for cutover
  • 78dd169 test(migrate): cover Mancode coordination CLI workflow
  • 2b0dbce Add Mancode immutable workflow archive migration
  • abbd40d feat(migrate): add Mancode plan structure hints
  • d5c9aea feat(migrate): import Beacon Devin Desktop hooks
  • 64cc788 feat(memory): report distinct feedback task counts
  • 8309cc7 fix(anyjev): authenticate local serving endpoint
  • f2dc72b fix(handoff): revalidate sessions before resume
  • a6d90e9 feat(adapters): add Copilot SDK telemetry hooks
  • 7771694 feat(adapters): add Copilot SDK memory hook
  • d897113 docs: clarify Mancode continuity parity
  • c55d2f8 docs(migration): document Devin Desktop import gap
  • 541a378 fix(adapters): compile package export surface
  • cfedbb5 fix(adapters): add explicit packaged CLI entry
  • c19a663 fix(adapters): recognize npm bin symlink entry
  • 1ce9017 feat(adapters): package portable host CLI
  • 00b6c73 test(cli): bind v2 split roles to Python contract
  • c087935 fix(cli): validate domain verification v2 responses
  • 549f77f feat(rrsi): add source-bound domain verification v2
  • af859dd feat(cutover): add signed evaluation attestations
  • f0530f0 test(hosts): verify Copilot project memory instructions load
  • 39cc05e docs(hosts): record installed smoke coverage refresh
  • 52c8594 feat(migration): bind referenced Mancode workflow evidence
  • 4ced105 feat(migration): import Mancode source artifacts
  • 15f343b feat(migration): capture Beacon Cline plugin presence
  • 2cfba77 feat(goose): materialize approved project procedures
  • 8c372a2 fix(cutover): share strict JSON trust parsing
  • 4230735 fix(cutover): strictly decode top-level report
  • 805c4a3 fix(cutover): reject duplicate evidence JSON keys
  • abecc15 fix(copilot): disable unsupported CLI memory hook
  • 12c447d test(copilot): verify project memory MCP fallback

Release Assets

Asset Target OS / Arch SHA-256 Digest
threadforge_0.4.6_windows_amd64.zip Windows (amd64) 2e7ec7ff57fc122bb8628cb99b055e86b34d5213f25ba92644946418daa702e7
threadforge_0.4.6_linux_amd64.tar.gz Linux (amd64) 1f981670013f6352d740ec810109380f854206ebd199b9b34db1fdff1a02f72a
threadforge_0.4.6_darwin_arm64.tar.gz macOS (arm64 / Apple Silicon) 222aa57c9c1dd7d139e0434c8d0f0aa2a76afbae5fe9e91996d82c19f823f827
threadforge_0.4.6_darwin_amd64.tar.gz macOS (amd64 / Intel) e676c53dc3d1650735c5cb48924b04ac625f5059c7a8d342a8a1cce8d1e3072f
checksums.txt All platforms Included in release

Full Changelog: v0.4.5...v0.4.6

Assets 7
Loading