Cognate v3.1.0-rc.7

Cognate v3.1.0-rc.7

Production-stabilization candidate for the R23–R26 work. This is a prerelease; installed Windows/macOS acceptance and the remaining live-service checks are still open.

Changes

• Remote AI calls show the destination, model, instructions and complete task payload before sending. Requests can be cancelled; local models remain on-device. Provider output is size/schema/date/ID checked as a whole, malformed advice does not alter the current plan, and accepted estimates retain provider/model/local/time provenance in the atomic task history.
• Native AI requests reject unsafe endpoints and redirects, bound time and response size, cancel active requests, and redact provider error bodies. Offline task capture continues through the deterministic parser.
• Desktop startup restores an existing window on second launch; tray identity and Show behavior are explicit. Updates require a verified pre-update backup and drain database writes before signed installation. Local diagnostics report bounded categories/timing and expose sync health without retaining task data, URLs, prompts or error strings.
• Added a reproducible TypeScript planner/50k-operation benchmark and a real HTTP relay persistence/restart benchmark with retained baseline reports and provisional CI regression ceilings.
• Added adversarial/generated Rust/TypeScript planner parity, six historical SQLite schema/reopen/rollback fixtures, Linux isolated Tauri WebDriver recovery smoke, relay hard-kill/replay verification, and Windows/macOS native Rust contract jobs.

Verification

Local checks: typecheck, 322 Vitest tests across 47 files, 30 Chromium tests, two production PWA tests, 272 Rust/TypeScript parity cases, 44 desktop Rust tests, desktop Clippy with warnings denied, 16 relay tests, relay Clippy, nine isolated Linux native WebDriver checks, measured task/operation/relay regression budgets, production build isolation and release metadata validation.

The blocking branch workflow passed on 2026-10-13: run 38301619235. The tagged workflow also passed all blocking checks and Linux, macOS and Windows packaging: run 38302836329. Linux completed WebView/keychain/recovery smoke; Windows and macOS native contract, lint and planner parity jobs passed. The Linux smoke used com.cognate.smoke, an isolated temporary HOME/keyring and temporary OS data roots; it must not be installed as production Cognate. All six updater signatures verified against the configured public key; all nine updater manifest entries resolve to included assets; downloaded sizes match GitHub metadata; SHA256SUMS verifies all 14 original assets. This remains an unsigned-by-OS prerelease candidate.

Remaining acceptance

Windows/macOS installed webview, tray, notification, keychain and updater/data-restore checks remain open. Native notification click behavior, live AI providers/OAuth, deployed multi-device relay faults/public load, mobile PWA eviction, native/browser startup performance, complete accessibility acceptance and production web deployment remain outside this candidate's verified evidence. Consult the production roadmap and native acceptance matrix. Stable v3.0.3 remains the latest automatic-update release.

Cognate v3.1.0-rc.6

Cognate v3.1.0-rc.6

Production-roadmap candidate for R20, the core R21 planner, and local R22 team workflows. This is a prerelease; production acceptance remains incomplete.

Changes

• Saved plans retain placement and overflow explanations across reloads. Plan status detects changed tasks, calendars and working hours, legacy records and unreadable details. Capture/review actions and persistent errors support recovery after failed planning.
• Keyboard rescheduling uses labelled time/duration inputs, focus trapping/restoration and atomic pin/reflow. Planner controls announce pin state. Narrow layouts keep capture, short task blocks, the editor and backlog reachable.
• Team availability is opt-in, signed by the member, title-free and expires after 15 minutes. Unknown, expired and read-only capacity is excluded explicitly; busy overlaps count once. Tasks assigned to departed members remain unresolved for review.
• Assignment proposals show task/recipient details and bind the device identity, date, share epoch, tasks, roster and planning inputs. One guarded history transaction applies all reviewed assignments; storage failures and stale or edited proposals commit nothing.
• Invite acceptance distinguishes a saved local invitation from pending initial sync. Manual assignments enforce project scope and current owner/editor permissions.

Before upgrading

Export a backup and retain your recovery kit. Existing saved plans appear as needing review until Auto-plan creates a record with freshness inputs. Availability is shared only after choosing “Share my busy times”; older clients do not provide the new availability contract. Team schedules are previews, not calendar reservations.

The v2 sync journal requires a compatible relay. Share rotation requires new invitations; offline edits across rotation still need a transfer policy. This candidate leaves the stable automatic-update channel unchanged. Install it explicitly for evaluation. Updater artifacts are signed; OS signing/notarization remains outside this release configuration.

Verification and remaining work

Local checks passed: typecheck, 299 JavaScript tests across 44 files, 30 Chromium browser tests, two production offline/update tests, 40 desktop Rust tests, desktop Clippy with warnings denied, frontend build and artifact isolation. The unchanged relay has the prior 16-test verification. The tagged workflow repeats blocking checks before Linux amd64, macOS arm64 and Windows x64 packaging.

A full application accessibility/screen-reader and real touch-device audit, deployed independent-device team journeys, live calendar providers and installed OS acceptance remain pending. R23 AI validation, R24–R28 acceptance/performance/mobile work and earlier roadmap acceptance gaps remain. See the production roadmap.

Cognate v3.1.0-rc.5

Cognate v3.1.0-rc.5

Production stabilization release candidate covering the R01–R19 implementation work. This is a prerelease; production acceptance remains incomplete.

Changes

• Map the Windows MSI version to numeric 3.1.0.5 while retaining application version 3.1.0-rc.5.

• Validate matching release versions on Windows CRLF and Unix LF checkouts; reject mismatched release tags.

• Keep relay poll admission compatible with current Rust linting without changing capacity limits.

• Fix Auto-plan startup race by awaiting database initialization before reading the planning snapshot. Supersedes the unpublished first candidate whose CI exposed this issue.

• Atomic task, project, plan and history writes in SQLite and IndexedDB; guarded imports, history audits and explicit repair.

• Verified WAL-safe backups, retained browser migration snapshots and encrypted identity/data recovery kits.

• Calendar recurrence, timezones, DST, detached exceptions and freshness/coverage warnings; atomic reflow with persisted rationale.

• Signed immutable sync batches, durable outbox/cursors, actor verification, encrypted browser secrets and fail-closed desktop keychain storage.

• Signed project invitations and owner-controlled read-key epoch rotation.

• Durable bounded relay journal, admission limits, health/metrics and TLS/systemd deployment templates.

• Loopback OAuth callback and token lifecycle guards; complete offline PWA precache and safe update/rollback behavior.

Before upgrading

Export a local backup and retain your recovery kit. The v2 sync journal requires a compatible relay; legacy live blobs and invitations are not silently migrated. Workspace key/endpoint changes are blocked where signed history needs migration. Share rotation requires new invitations; offline edits across rotation still need a transfer policy.

This prerelease does not replace the stable release used by automatic updates. Install it explicitly to evaluate it. Updater artifacts are signed; OS signing/notarization remains outside this release configuration.

Validation and remaining work

Local checks passed: 283 JavaScript tests, 24 browser tests, 2 production PWA tests, 53 Rust tests, typecheck, builds, artifact isolation and Clippy. The tagged workflow repeats blocking checks before packaging Linux, macOS and Windows installers.

Live Google/Microsoft OAuth, installed OS/keychain/callback and mobile tests, journal compaction, legacy sync migration and public staging fault/load tests remain pending. See the production roadmap for the full ledger. R20–R28 remain open.

Release artifact verification

The tagged release workflow passed its test gate and all three packaging jobs. Assets target Linux amd64, macOS Apple Silicon and Windows x64. All six updater artifacts were independently verified against the updater public key embedded in the app. The manifest contains nine verified platform/package entries. SHA256SUMS covers all 14 original release assets. Installed-platform and production acceptance remain pending.

Superseded source-only candidate v3.1.0-rc.2

Full Changelog: v3.0.3...v3.1.0-rc.2

Cognate- v3.03

See the assets below to download and install this version. The app auto-updates from this release.

Cognate v3.0.2

See the assets below to download and install this version. The app auto-updates from this release.

Cognate- v3.0.0

Cognate v3.0.0: The Autopilot Planner

Cognate v3.0.0 is our biggest milestone yet. We have transitioned Cognate from a local-only CRUD task manager into an unbreakable, collaborative, and auto-planning productivity ecosystem. This release ships the core pillars of our "Autopilot Planner" roadmap (Acts 0–4), keeping privacy at the center.

🚀 The Autopilot Planner Engine

• Deterministic Rust Scheduler: An offline constraint-based scheduler that dynamically schedules your tasks into calendar- and energy-aware time blocks.
• Today/Plan View: A visual time-blocking calendar where dragging tasks recalculates your schedule and updates details in real-time.
• Calendar Sync (Read-Only): Native busy-time calendar integration via Google/Outlook OAuth token-exchange and .ics feed subscriptions.
• Auto-Reflow: Automatic calendar and task slip detection with intelligent plan adjustment and notifications.

🔐 E2E-Encrypted Sync Spine & Collaboration

• CRDT Op-Log: Replaced direct storage writes with a conflict-free replicated data type (CRDT) op-log as the source of truth, yielding reliable offline-first convergence.
• Zero-Knowledge Relay: A lightweight, high-performance E2E-encrypted relay server (cognate-relay) where the server stores only ciphertext.
• Real-time Team Workspaces: Instantly share projects, track presence, comment on tasks, and delegate work with role-based access control (RBAC).

🛡️ Core Stability & Safety (Act 0)

• Automatic Backups: Scheduled, timestamped SQLite database backups and a one-click restore/recovery manager.
• Undo/Redo & Trash: Soft-deletes with an inverse-op Undo/Redo stack for all task management activities.
• Production-Grade QA: A comprehensive Playwright E2E test suite running on CI to catch regressions.

🧠 Private Local AI & Productivity Moat

• Bring-Your-Own-Model: Fully offline planning and schedule summaries using local AI endpoints (Ollama / llama.cpp).
• Chief of Staff Advisor: A proactive advisor offering morning briefs, weekly reviews, and workload balance warnings.
• Natural Language Quick-Add: Quick capture syntax (e.g., "call Sam tmrw 5pm 30m #work") to instantly schedule tasks.
• Closed-loop Energy Model: Pomodoro focus outcomes feed back into the planning engine to optimize future day layouts.

v2.0.0

release v2.0.0:[auth done, ui/ux improvements]