TaskFlow v1.0.6

[1.0.6] — 2026-09-17

Added

• CodeBuddy as a third host: .codebuddy-plugin/plugin.json and .codebuddy-plugin/marketplace.json, installable through the CodeBuddy Code CLI (codebuddy plugin marketplace add then codebuddy plugin install), and hooks/hooks-codebuddy.json wiring SessionStart through ${CODEBUDDY_PLUGIN_ROOT}. The CodeBuddy IDE client does not implement these commands, so the plugin is exercised through the CLI.
• hooks/todo-check — reports a Todo entry a merge dropped, by comparing every - ID: a merge commit's parents held against the result. A hosted-platform merge runs server-side where the merge driver cannot go, so the check runs after the fact; its range form audits every merge in a push, and the todo-merge-audit CI job runs it on every push to main and on every pull request.
• hooks/release-check — compares the version literals a release has to move (both plugin manifests, the newest CHANGELOG.md section, the claude plugin list sample in each README) and confirms each marketplace ref resolves to the commit its sha names. The release CI job runs it on every change, so a README sample or CHANGELOG section left on the previous version is caught at the commit that left it rather than at the next release.
• RELEASE.md records why a release is two commits, and its validation checklist now carries hooks/release-check in place of the inline Python manifest dump.

Fixed

• hooks/release-check reads each catalog's pin from inside its source object instead of scanning the whole file, so a second entry carrying ref/sha can no longer displace the value being checked, and it validates the X.Y.Z shape of all three manifests rather than only the one without a cachebuster suffix.
• hooks/archive clears the Todo item's Next action to None — completed and archived. instead of leaving the pre-completion action in place. promote writes an action that is only true before completion, so every archived entry claimed outstanding work; the archive transaction now asserts the field was cleared.

Compatibility

• No runtime or installation change. The runtime floor, the hook set, and the plugin wiring are unchanged from 1.0.5; updating an existing installation needs no migration or dependency installation.
• CodeBuddy is CLI-only. The CodeBuddy IDE client does not implement plugin subcommands, so the plugin is installed and validated through the CodeBuddy Code CLI.
• A release is two commits by construction. The marketplace pin names a commit that cannot exist before the tag does, so the pin lands as a second commit after the tag. Claude Code verifies the pin at install time and refuses a mismatch as sha_pin_mismatch; it clones by the pinned commit rather than by the tag, which is what keeps an installation on the reviewed release if the tag is ever moved.
• This is the first release that carries hooks/release-check and the archive Next action rule, so it is the first release either one governs.

Verification

• bash hooks/smoke-test — passed on Ubuntu, macOS, and Windows GitHub Actions runners.
• bash hooks/release-check . — passed.
• python3 evals/runner.py — passed.
• TaskFlow Skill validator — passed.