Oh My Herdr v0.4.1

Two-profile catalog and npm distribution preview.

Added

• An exact built-in profile catalog exposes codex-awareness and
  claude-session-identity through omhr profile list and stable --profile-id
  selection across desired-state commands.
• The guarded Claude Code profile configures only Herdr's native session-identity
  boundary, preserves unrelated settings, blocks the known Cursor collision,
  verifies readiness, and rolls back exact original state.
• The dependency-free oh-my-herdr npm package installs the omhr command on
  supported macOS Apple-silicon and Ubuntu 24.04 x86_64 hosts without lifecycle
  scripts or install-time downloads.

Release integrity

• GitHub Release contains both host-native archives, the exact npm tarball, and
  one sorted three-entry checksum manifest.
• Both operating systems independently assemble the same npm tarball, compare
  its embedded executables byte-for-byte with the native release archives, and
  complete install, profile, execution, and uninstall acceptance before publish.
• Native archives and the npm tarball receive GitHub build-provenance
  attestations; the first npm publication bootstraps trusted publishing from the
  exact attested tarball.

Security and compatibility

• The supported runtime remains Herdr 0.8.2 on macOS Apple silicon and Ubuntu
  24.04 x86_64 with glibc 2.39 or newer.
• No plugin lifecycle, agent launch, prompt, provider request, credential access,
  Windows, Linux aarch64, broader Linux runtime, or Homebrew claim is added.

Oh My Herdr v0.3.0

Linux x86_64 compatibility and host-native release preview.

Added

• A scheduled and manually dispatchable least-privilege workflow verifies the
  complete isolated journey on a fresh Ubuntu x86_64 runner with exact pinned
  Herdr 0.8.2 and Codex CLI 0.150.1 release assets.
• The release workflow builds and tests host-native macOS Apple-silicon and Linux
  x86_64 archives before assembling one exact dual-target release.

Release integrity

• Downloaded live-tool assets are size- and SHA-256-verified before extraction or
  execution; unsafe or unexpected Codex archive members fail closed.
• Release assembly rejects missing, extra, duplicate, renamed, or mismatched
  inputs and emits one deterministic two-entry checksum manifest.
• Both archives complete the installed command, guided setup, rollback, privacy,
  preservation, and uninstall journey on their build hosts and receive GitHub
  build-provenance attestations.

Security and compatibility

• Pull-request CI remains hermetic. Live compatibility downloads occur only on a
  schedule, explicit dispatch, or clean tagged release path.
• T020 adds no plugin execution, callback, paid agent task, Windows, Linux
  aarch64, Homebrew, new profile, or live agent-state claim.

Oh My Herdr v0.2.0

Complete-MVP preview with reproducible selected-plugin state and one guided
setup entry point.

Added

• Side-effect-free omhr plugin list reads bounded Herdr 0.8.2 registry metadata
  without invoking Herdr's plugin command or executing plugin code.
• Explicitly selected installed GitHub plugins resolve into deterministic lock
  metadata containing immutable commits, reviewed manifest digests, build argv,
  and executable-surface counts.
• Plugin-bearing apply and verification require an exact lock, managed checkout,
  matching Git HEAD, clean tracked source, tracked manifest, and matching review
  digest before the existing Codex transaction can proceed.
• omhr export emits deterministic portable TOML or JSON bundles consumed by
  plan, apply, and verify on compatible machines with the exact selected
  plugins already installed.
• omhr setup composes diagnosis, deterministic planning, exact review,
  approval-bound apply, bounded verification, and idempotent reapply without
  hiding lower-level failures.

Release integrity

• The packaged binary is tested for its complete command surface, deterministic
  profile and bundle planning, guided preview, exact approval, verification,
  no-change reapply, byte-exact rollback, and unrelated-file preservation.
• Release notes are extracted from only this version section; the archive remains
  checksummed and receives GitHub build-provenance attestation.

Security and compatibility

• No plugin is installed, updated, built, started, invoked, removed, or endorsed.
  Selected-plugin verification proves source integrity only.
• The supported runtime remains Herdr 0.8.2 on macOS Apple silicon. Linux remains
  CI-only, Windows remains unsupported, and Homebrew distribution remains a
  separate gate.

Oh My Herdr v0.1.3

Changelog

All notable changes to Oh My Herdr are documented here. The project follows
Semantic Versioning while the public API is experimental.

0.1.3 - 2026-08-26

External-ownership safety patch for the Codex profile boundary.

Fixed

• Profile mutation rejects every present non-writable managed target before the
  Herdr installer runs, preserving configuration owned by Nix, Home Manager,
  chezmoi, another owner, or a read-only policy.
• Apply rejects a non-writable CODEX_HOME, and apply plus semantic verification
  reject a final-component root symlink instead of following it into another
  configuration root.
• Read-only diagnosis resolves regular relative CODEX_HOME values to the same
  physical managed-hook identity used by apply and verification.

Security and compatibility

• v0.1.2 remains suitable for read-only diagnosis but must be upgraded before
  profile mutation or semantic verification.
• The supported runtime remains Herdr 0.8.2 on macOS Apple silicon; no plugin,
  agent, or platform claim is broadened.

0.1.2 - 2026-08-26

Security-hardening patch for the Herdr 0.8.2 Codex profile boundary.

Fixed

• Profile mutation checks the selected herdr executable is exactly 0.8.2
  before invoking its installer, and verification cannot pass on another version.
• Staged and live herdr-agent-state.sh files must match the reviewed Herdr 0.8.2
  integration-v8 SHA-256 and exact executable mode; markers alone are rejected.
• Managed SessionStart hooks use an exact path-aware command, type, timeout, and
  object shape, preserving unrelated commands that contain similar words.
• Output-capture failures terminate the complete command process group even when
  the parent process has already exited.

Security and compatibility

• The immutable v0.1.1 candidate stopped before packaging when its committed
  third-party notice failed the release integrity check; it has no release assets.
• v0.1.0 users should upgrade before applying or verifying the Codex profile.
• Read-only diagnosis remains available for other Herdr versions; mutation
  remains limited to Herdr 0.8.2 on macOS Apple silicon.

0.1.0 - 2026-08-26

First public preview for macOS on Apple silicon with Herdr 0.8.2.

Added

• Read-only omhr doctor with bounded Herdr and Codex discovery, stable
  diagnostics, remediation ownership, and versioned JSON.
• Portable Codex awareness profile with deterministic plan output.
• Exact preview and approval-bound apply using private upstream staging,
  preconditions, backups, atomic writes, and a transaction journal.
• Configuration-readiness verification, idempotent reapply, drift rejection, and
  guarded byte-exact rollback.
• Checksummed Apple silicon archive, build-provenance attestation, install and
  uninstall smoke tests, compatibility evidence, and public support workflows.

Security and compatibility

• No third-party Herdr plugin is installed or executed.
• Unknown Herdr versions remain read-only.
• Existing Codex notify and unrelated hooks are preserved.
• Portable reports omit credentials, prompts, transcripts, source snippets,
  private paths, configuration values, hook arguments, and raw command output.
• Linux is CI-only; Windows and live state or delivery verification are not
  supported in this preview.

Oh My Herdr v0.1.2

Changelog

All notable changes to Oh My Herdr are documented here. The project follows
Semantic Versioning while the public API is experimental.

0.1.2 - 2026-08-26

Security-hardening patch for the Herdr 0.8.2 Codex profile boundary.

Fixed

• Profile mutation checks the selected herdr executable is exactly 0.8.2
  before invoking its installer, and verification cannot pass on another version.
• Staged and live herdr-agent-state.sh files must match the reviewed Herdr 0.8.2
  integration-v8 SHA-256 and exact executable mode; markers alone are rejected.
• Managed SessionStart hooks use an exact path-aware command, type, timeout, and
  object shape, preserving unrelated commands that contain similar words.
• Output-capture failures terminate the complete command process group even when
  the parent process has already exited.

Security and compatibility

• The immutable v0.1.1 candidate stopped before packaging when its committed
  third-party notice failed the release integrity check; it has no release assets.
• v0.1.0 users should upgrade before applying or verifying the Codex profile.
• Read-only diagnosis remains available for other Herdr versions; mutation
  remains limited to Herdr 0.8.2 on macOS Apple silicon.

0.1.0 - 2026-08-26

First public preview for macOS on Apple silicon with Herdr 0.8.2.

Added

• Read-only omhr doctor with bounded Herdr and Codex discovery, stable
  diagnostics, remediation ownership, and versioned JSON.
• Portable Codex awareness profile with deterministic plan output.
• Exact preview and approval-bound apply using private upstream staging,
  preconditions, backups, atomic writes, and a transaction journal.
• Configuration-readiness verification, idempotent reapply, drift rejection, and
  guarded byte-exact rollback.
• Checksummed Apple silicon archive, build-provenance attestation, install and
  uninstall smoke tests, compatibility evidence, and public support workflows.

Security and compatibility

• No third-party Herdr plugin is installed or executed.
• Unknown Herdr versions remain read-only.
• Existing Codex notify and unrelated hooks are preserved.
• Portable reports omit credentials, prompts, transcripts, source snippets,
  private paths, configuration values, hook arguments, and raw command output.
• Linux is CI-only; Windows and live state or delivery verification are not
  supported in this preview.

Oh My Herdr v0.1.0

Changelog

All notable changes to Oh My Herdr are documented here. The project follows
Semantic Versioning while the public API is experimental.

0.1.0 - 2026-08-26

First public preview for macOS on Apple silicon with Herdr 0.8.2.

Added

• Read-only omhr doctor with bounded Herdr and Codex discovery, stable
  diagnostics, remediation ownership, and versioned JSON.
• Portable Codex awareness profile with deterministic plan output.
• Exact preview and approval-bound apply using private upstream staging,
  preconditions, backups, atomic writes, and a transaction journal.
• Configuration-readiness verification, idempotent reapply, drift rejection, and
  guarded byte-exact rollback.
• Checksummed Apple silicon archive, build-provenance attestation, install and
  uninstall smoke tests, compatibility evidence, and public support workflows.

Security and compatibility

• No third-party Herdr plugin is installed or executed.
• Unknown Herdr versions remain read-only.
• Existing Codex notify and unrelated hooks are preserved.
• Portable reports omit credentials, prompts, transcripts, source snippets,
  private paths, configuration values, hook arguments, and raw command output.
• Linux is CI-only; Windows and live state or delivery verification are not
  supported in this preview.