v0.3.5

Wombat v0.3.5

This release adds bounded access to recorded Codex activity and original conversation evidence for daily work reports and follow-up questions.

Highlights

• Find recorded activity by date, project, task or turn, including observations without Token usage records. Keep recorded activity separate from verified completed work.
• Locate user and assistant messages, or inspect messages around a recorded tool operation. Read selected original text in bounded batches with context and continuation; conversation bodies stay out of the index.
• Search literal text within selected tasks or projects and continue unfinished scans. Compare fixed views to identify new files, appended observations and changed source generations.
• Use the same generated conversation contract through the Agent CLI and authorized Web API. The Codex Skill combines activity and selected text with usage facts to support daily work reports.

Install or update

macOS and Linux:

curl -fsSL https://raw.githubusercontent.com/YannByte/wombat/main/scripts/install/install.sh | sh

Windows PowerShell:

& ([scriptblock]::Create((irm https://raw.githubusercontent.com/YannByte/wombat/main/scripts/install/install.ps1)))

Update an installer-managed copy:

wombat update --check
wombat update

Supported archives: darwin-arm64, darwin-x64, linux-x64, linux-arm64, win32-x64.

Known limitations

• Codex is the only production data source in this release; support for other agents is planned.
• Original-text access supports selected message mappings and text parts. Unknown mappings, non-text content and delta-stream assembly remain explicit gaps; there is no new transcript panel in the Web dashboard.
• Conversation reads verify selected source text blocks and reject changed, replaced, missing or unavailable sources. A successful snippet does not prove that the complete source file is unchanged. Changes require a valid fixed baseline and do not establish additional work or savings.
• API costs are estimates. Unpriced or partial data stays explicit and is separate from subscription allowance.
• This release changes derived event, message-observation and source-watermark formats. Older indexes require a rebuild and are preserved without migration or automatic deletion. Follow the documented format recovery and preserve user decisions. A different WOMBAT_DATA_HOME creates an isolated store; it does not repair the old store or transfer its decisions.
• Timing describes recorded activity and can be partial or provisional. It does not establish why work was slow, code quality, token savings, or model performance.
• A sharing summary removes direct identifiers but does not guarantee anonymity. Preview it before sharing.
• First rebuilding and ordinary source catch-up can still use substantial memory and temporary disk space. The aggregate cache limit is not a process-memory ceiling, and full replay or large detail requests remain expensive. Persisting aggregates also adds write work.
• Complete requests on the measured real corpus still exceeded 100 ms. Repeated compact requests can be faster, but the strict latency target remains unfinished.
• Native Codex plugin discovery and Hook registration require a compatible local Codex. Windows Hook collection remains unverified.

Verification and security

All five archives were built and exercised on their target platforms from commit 8b5ba6e41c1676369d296a2eb32759e53e433c45. Installers and updates verify the published size and SHA-256 digest before switching versions. GitHub provides build provenance attestations for the platform archives. Wombat reads local sources without changing them; network behavior and native handoff follow the documented privacy boundaries.

Feedback and changes

Report problems in GitHub Issues. Private security reports should follow the security policy.

Changes since v0.3.4: compare v0.3.4...v0.3.5