Skip to content

v2.4.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 04 Aug 10:45
· 368 commits to main since this release
v2.4.1
752be53

Highlights

CAO 2.4 expands the orchestration platform across workflows, live agent UI,
memory, profiles, and operations.

  • AG-UI protocol and generative UI add typed event streaming, approval
    flows, session timelines, cross-provider synchronization, dashboards, and a
    reusable L2 construct library (#436, #485).
  • Knowledge graph tooling adds memory-backed graph providers, OKF,
    Obsidian, and GraphML exports, projection caching, API routes, and interactive
    graph views in the Web UI and MCP Apps (#416, #424, #442).
  • Script-tier workflows gain a stable run surface, author shim,
    parameterized runtime inputs, examples, validation, and authoring guidance
    (#399, #450).
  • Opt-in self-learning adds outcome capture, retrospection, worker-scoped
    lessons, and controlled instruction promotion. Learning remains disabled by
    default (#515).
  • Profile discovery and management foundations add capability-ranked
    cao profile find, the find_profiles MCP tool, read-only profile search
    and template APIs, and a shared atomic local-store persistence service
    (#438, #523, #543).

Added

  • Typed memory relationships with durable relationship storage and integration
    coverage (#524).
  • Explicit Kiro v2/KAS engine selection with capability probing and
    fail-closed rejection before terminal allocation (#470).
  • cao update, with source-aware update behavior and documentation (#445).
  • CAO_HOME_DIR for relocating CAO data outside the default ~/.aws
    directory (#467).
  • Explicit model overrides for handoff and assign (#501).
  • Session output readback through the operations MCP server (#422).
  • Agent-profile routing skill for capability-based delegation (#486).
  • AI-DLC portfolio orchestration and headless CI examples (#521).
  • A full Docusaurus documentation site, interactive courses, improved README
    navigation, and Simplified Chinese documentation (#439, #472, #531, #536).

Improved

  • Modernized the herdr backend for herdr 0.7.x, including broadcast events,
    API snapshots, and native environment handling (#502).
  • Increased terminal status-detection capacity and hardened stale-output,
    tall-screen, and provider-dialog handling across Claude Code, Codex, Kiro,
    Antigravity, and OpenCode (#425, #478, #480, #481, #482, #483, #488, #496,
    #517, #527).
  • Made profile and memory writes atomic and inter-process safe, with bounded
    graph linting and repaired metadata projections after database replacement
    (#449, #492, #507, #543).
  • Added repository-wide Markdown link validation and expanded security,
    workflow, AG-UI, graph, self-learning, and operations documentation (#474).

Fixed

  • Self-healing FIFO liveness detection now recovers stalled and cold-start
    terminal forwarding (#397).
  • Web terminal attachment now respects the configured backend (#417).
  • Handoff workers inherit the supervisor working directory (#423).
  • Provider installation honors frontmatter precedence correctly (#431).
  • Deferred worker initialization verifies startup and avoids re-submitting
    input into already-running workers (#479, #496).
  • Terminal creation and cleanup paths now remove orphaned windows and roll back
    incomplete database records (#421, #446).
  • Release version bumping no longer overwrites the configured mypy Python
    version, and devcontainer feature versions stay synchronized (#419, #435).

Security

  • Added secret scanning, recurrence tests, and a leak-response runbook (#477).
  • Blocked cross-site WebSocket hijacking by validating terminal WebSocket
    origins (#533).
  • Hardened workflow path containment and resolved CodeQL path-injection alerts
    without weakening the existing byte-cap and single-read guarantees (#461).
  • Enabled and tested Jinja2 autoescaping for agent-profile scaffolding (#429,
    #434, #462).
  • Validated Codex MCP server names and safely escaped command, argument, and
    environment overrides (#404, #426).
  • Stopped logging terminal input payloads at INFO and validated terminal IDs
    before MCP API requests (#427, #475).
  • Updated vulnerable PostCSS and MCP dependencies (#455, #530, #535).

Contributors

Thank you to everyone who contributed to this release:

@CAN1177, @MarkusWohlmuth, @adgdei, @alexmercenary, @anilkmr-a2z,
@call-me-ram, @fanhongy, @guojing1217, @gutosantos82, @haofeif, @klabulan,
@mmm1h, @nightcityblade, @plauzy, @roryhardy, @saprative, @sujoydc, and
@tedswinyar.

Upgrade

Using uv:

uv tool install --force "cli-agent-orchestrator==2.4.0"

Using pip:

pip install --upgrade "cli-agent-orchestrator==2.4.0"

Verify:

cao --version

Notes

  • Self-learning and AG-UI remain opt-in.
  • KAS is capability-probed and rejected before terminal allocation when the
    installed Kiro CLI does not support it.
  • The Rust rewrite of cao tui from issue #321 / PR #547 is not included in
    v2.4.0 and is planned for a later release.

Dependency patch

  • build(deps): bump cryptography from 48.0.1 to 50.0.0 by @dependabot[bot] in #548
  • build(deps): bump fast-uri from 3.1.4 to 3.1.5 in /docusaurus by @dependabot[bot] in #549
  • build(deps): bump postcss from 8.5.21 to 8.5.25 in /docusaurus by @dependabot[bot] in #550
  • fix(deps): force fast-uri 3.1.5 in aidlc-portfolio examples by @fanhongy in #552

Full Changelog: v2.4.0...v2.4.1

Contributors

sujoydc, roryhardy, and 17 other contributors
Assets 2
Loading