v0.7.0 — Security Hardening, Docs Overhaul, Unified Versioning

What's New in v0.7.0

Security Hardening

• Removed hardcoded passwords from source code — MANAGEMENT_PASSWORD now required via env var
• Purged SQLite database from entire git history (contained API keys from dev)
• Removed Docker socket mount from cortex-api container (root access risk)
• Restricted CORS on Dashboard API to localhost + configured DASHBOARD_URL
• Removed all private project names from codebase — only generic examples remain
• Cleaned tracked artifacts — removed 8 .vsix binaries, 16 compiled .js/.d.ts, dead .gitmodules

Docs Overhaul

• Rewrote database docs — ERD now covers all 25 SQLite tables + 3 Qdrant collections (was 7 fictional tables)
• Rewrote MCP reference — all 25 tools documented with correct cortex_* names (was wrong code.query format)
• Removed STATE.md — all state tracking via cortex memory + knowledge (26 references cleaned across 13 files)
• Rewrote CLAUDE.md (137 → 65 lines) and AGENTS.md (347 → 105 lines) — concise, natural tool guidance
• Updated all workflow skills (/cs v0.7.0, /ce v0.7.0) and agent configs for all IDEs

Backend Fixes

• session_end auto-memory — session summary automatically saved as searchable memory (safety net)
• mem9 LLM routing — now routes through Dashboard API with DB credentials (was failing via CLIProxy)
• mem9 respects EMBEDDING_PROVIDER — local/gemini switch works correctly
• Fixed invalid LLM model — replaced non-existent gemini-3.1-flash-lite-preview with gemini-2.5-flash
• Local embedding as default — free, fast (~10-50ms), no API key needed, 96.7% R@5
• Fixed local embedding UI — dropdown no longer flickers when selecting "Local"

Unified Versioning

All components now share 0.7.x version family:

• version.json, all package.json files, Docker images, skills, workflows, install scripts
• Future: patch bumps (0.7.1) for individual changes, minor bump (0.8.0) syncs everything

Breaking Changes

• MANAGEMENT_PASSWORD environment variable is now required — Docker Compose will fail without it
• CORS on Dashboard API is no longer wildcard — set DASHBOARD_URL env var for your domain

---

Full Changelog: v0.3.0...v0.7.0

v0.3.0 — Conductor v4, Extension v0.2.0, Auto-Review Loop

Cortex Hub v0.3.0

Highlights

• Conductor v4: capability-based delegation, pipeline view, CSS-drawn connectors, animated UI
• Cortex Agent Extension v0.2.0: VS Code / Antigravity extension with real-time task feed via WebSocket
• Auto-Review Loop: completed tasks auto-trigger codex review → rejected → auto-fix → loop
• Settings Page: hub config, notifications, system info (full stack)
• Release Pipeline: ./scripts/release.sh [patch|minor|major]

Conductor Orchestration

• WS capabilities validated against capability-templates.json
• Auto-delegation: splits task across agents when no single agent has all capabilities
• dependsOn support: blocked tasks auto-unblock when dependencies complete
• Pipeline view with parent→subtask tree, status-colored CSS connectors
• Agent cards: IDE-colored icons, capability badges, hover animations

Extension (cortex-agent-0.2.0.vsix)

• Auto-detect API key from MCP configs (Claude, Cursor, Windsurf, Antigravity)
• WS connect with auto-reconnect, data fetching via request.data message
• Sidebar webview: agent status, performance stats, pipeline, task feed
• Agent rename + capability management from webview
• Auto-execute tasks via vscode.lm Language Model API

Agent Script

• Interactive launch wizard
• Antigravity / Gemini as separate engines (different subscriptions)
• Live output streaming via task.progress every 2s
• Quick-start guide when run with no arguments

Bug Fixes

• Token savings summary now correctly sums from enriched data
• resolveCompletionChain called from WS task.complete (blocked tasks were stuck)
• install.sh / install.ps1 detect MCP config across all IDEs
• Unicode rendering in pipeline view

Install / Upgrade

One command deploy:

cd cortex-hub && git pull && docker compose -f infra/docker-compose.yml build --no-cache && docker compose -f infra/docker-compose.yml up -d

Extension install:
Download cortex-agent-0.2.0.vsix below → Cmd+Shift+P → "Extensions: Install from VSIX..."

New install:

curl -fsSL "https://raw.githubusercontent.com/lktiep/cortex-hub/master/scripts/install.sh" | bash