Curator v0.14.0-rc.1

Предварительный релиз Curator с поддержкой внешних CLI-репозиториев по протоколу schema 7.

• Добавлены schema 7 repository/build-модели, подстановки и lifecycle внешних сборок.
• Публикуются архивы, checksums, SBOM и подписи для проверки целостности.

Точный коммит: af471504aafd0ea5ea16f712469883ddde8b827e.

v0.13.0

Changelog

• cfffd7c: Add declarative compiled skill builds (@ivanopcode)

Verify what you downloaded

gh attestation verify <artifact> --owner relux-works
cosign verify-blob \
  --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity-regexp 'github.com/relux-works/curator' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  checksums.txt

v0.12.5

Changelog

• ddf2323: Support agent-skill manifests (@ivanopcode)
• 17804ce: Pin landed rc.3 protocol (@ivanopcode)

Verify what you downloaded

gh attestation verify <artifact> --owner relux-works
cosign verify-blob \
  --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity-regexp 'github.com/relux-works/curator' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  checksums.txt

v0.12.4

Changelog

• f2ec1c7: Board: notarization live in v0.1.1, item resolved (@ivanopcode)
• 7831495: Adopt the open-protocol framing after the spec rename (@ivanopcode)
• 99ec5c4: Consume the authoritative protocol suite (@ivanopcode)
• 2f40220: Activate PowerShell environments on every prompt (@ivanopcode)
• df5f826: Pin the authoritative conformance suite (@ivanopcode)
• 314b252: Make conformance checks portable on Windows (@ivanopcode)
• cd631d2: Merge Curator Protocol conformance (@ivanopcode)
• 0f63a8d: Enforce Curator protocol semantics (@ivanopcode)
• ecb6c1a: Merge Curator protocol conformance (@ivanopcode)
• ada48a8: Harden registry client production behavior (@ivanopcode)
• 190882f: Harden optional shell activation (@ivanopcode)
• 6358d14: Make managed commands shell-neutral (@ivanopcode)
• 7adce17: Record shell onboarding regression work (@ivanopcode)
• 7cde9b9: Merge pull request #6 from relux-works/agent/seamless-shell-onboarding (@ivanopcode)
• 3a773b0: Merge remote-tracking branch 'origin/main' into agent/registry-client-production (@ivanopcode)
• d8e7cf3: Fix registry client lint (@ivanopcode)
• e423ce3: Pin conformance suite after shell onboarding (@ivanopcode)
• 75e802a: Merge pull request #5 from relux-works/agent/registry-client-production (@ivanopcode)
• b52c084: Implement seamless manager lifecycle (@ivanopcode)
• 32f60fc: Make dry-run fixture portable on Windows (@ivanopcode)
• a78545c: Pin landed manager lifecycle specification (@ivanopcode)
• 20fd90c: Merge pull request #7 from relux-works/agent/seamless-manager-lifecycle (@ivanopcode)

Verify what you downloaded

gh attestation verify <artifact> --owner relux-works
cosign verify-blob \
  --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity-regexp 'github.com/relux-works/curator' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  checksums.txt

v0.1.1

Changelog

• 15834fa: Board: close release-pipeline; note the notarization activation item (@ivanopcode)
• fee0ffb: Activate macOS notarization (@ivanopcode)

Verify what you downloaded

gh attestation verify <artifact> --owner relux-works
cosign verify-blob \
  --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity-regexp 'github.com/relux-works/curator' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  checksums.txt

v0.1.0

Changelog

• 74ae52f: Add the release pipeline (Ivan Oparin oparin@me.com)
• 3efdbca: Make platform-specific tests portable (Ivan Oparin oparin@me.com)
• 00d94d5: Board: open release-pipeline (Ivan Oparin oparin@me.com)
• d60f8d0: Record conformance correction evidence (Ivan Oparin oparin@me.com)
• df1fa9f: Complete the reviewed CLI workflows (Ivan Oparin oparin@me.com)
• edbf4fc: Exercise shell activation and skill validation (Ivan Oparin oparin@me.com)
• 23fc6b3: Reject unsuccessful registry HTTP responses (Ivan Oparin oparin@me.com)
• b8a7efb: Add an independent marker golden gate (Ivan Oparin oparin@me.com)
• 15fffdb: Enforce install validation and marker interoperability (Ivan Oparin oparin@me.com)
• 253b295: Document the v0.1 conformance review (Ivan Oparin oparin@me.com)
• 95df479: README: v0.1 development complete, all phases done (Ivan Oparin oparin@me.com)
• 32c40a8: Lint: staticcheck quick fixes (De Morgan, Fprintf) (Ivan Oparin oparin@me.com)
• 76938c4: Lint: document gosec exclusions for tool-owned trees, comment UI enums (Ivan Oparin oparin@me.com)
• cf24f24: Lint: use the latest golangci-lint build for Go 1.25 (Ivan Oparin oparin@me.com)
• de350b6: CI: byte-exact snapshots everywhere, lint v2 for Go 1.25 (Ivan Oparin oparin@me.com)
• ea4b7e6: Add the terminal UI (Ivan Oparin oparin@me.com)
• a2c1ff9: Keep golden fixtures byte-exact across platforms (Ivan Oparin oparin@me.com)
• 5e4597c: Add the interoperability golden gate (Ivan Oparin oparin@me.com)
• 3cb874c: Add shell hooks and the full CLI surface (Ivan Oparin oparin@me.com)
• f2a56ea: Board: open shell-and-cli (Ivan Oparin oparin@me.com)
• 4bf5c8e: Add the audit gate (Ivan Oparin oparin@me.com)
• 872c5b0: Board: open audit-gate (Ivan Oparin oparin@me.com)
• d29e1f2: Lint: rename unused handler parameters (Ivan Oparin oparin@me.com)
• 2ea2fdc: Implement the audit registry client (Ivan Oparin oparin@me.com)
• facf5ae: Verify MCP server requirements against agent surfaces (Ivan Oparin oparin@me.com)
• 9c54f6f: Board: open mcp-requirements and registry-client (Ivan Oparin oparin@me.com)
• ee7f2d1: Add scopes: consumers with GC, hybrid, and global (Ivan Oparin oparin@me.com)
• c2389e0: Board: open scopes-and-gc with three stories (Ivan Oparin oparin@me.com)
• a99730b: Lint: exclude gosec G306 for deliberately shareable artifacts (Ivan Oparin oparin@me.com)
• 6d20f10: Orchestrate installation in the normative phase order (Ivan Oparin oparin@me.com)
• db55752: Add locale rendering, the gitignore gate, and env files (Ivan Oparin oparin@me.com)
• 669fe11: Add the runtime store, command shims, and managed adapters (Ivan Oparin oparin@me.com)
• d5bc128: Add the context whitelist and install markers (Ivan Oparin oparin@me.com)
• 53afa07: Board: open install-engine with seven stories (Ivan Oparin oparin@me.com)
• 0acfb6e: Resolve dependency closures with activation semantics (Ivan Oparin oparin@me.com)
• d891e74: Board: open closure-and-activation (Ivan Oparin oparin@me.com)
• 56952b7: Bound extracted snapshot files to 512 MiB (Ivan Oparin oparin@me.com)
• 5e183d5: Move the machine home to ~/.curator (Ivan Oparin oparin@me.com)
• 56cf460: Add git operations and the snapshot cache (Ivan Oparin oparin@me.com)
• cb370c0: Add canonical source identity and the content hash (Ivan Oparin oparin@me.com)
• 663816e: Board: open sources-and-identity with four stories (Ivan Oparin oparin@me.com)
• 6a9afd9: Parse the machine and system configuration (Ivan Oparin oparin@me.com)
• 1dabf2c: Parse the project manifest and dev substitutions (Ivan Oparin oparin@me.com)
• 19dd887: Parse the skill manifest: schemas 1 through 5 (Ivan Oparin oparin@me.com)
• 99f02a0: Add identifier validation and the typed validation error (Ivan Oparin oparin@me.com)
• e393945: Board: close bootstrap-and-ci, open protocol-formats with four stories (Ivan Oparin oparin@me.com)
• da1de9e: Target Go 1.24 in go.mod (Ivan Oparin oparin@me.com)
• 5ff63ed: Add CONTRIBUTING with the working agreements (Ivan Oparin oparin@me.com)
• 38ff67b: Add CI: three-OS test matrix, lint, naming gate (Ivan Oparin oparin@me.com)
• 1968a75: Add the Go module, curator CLI skeleton, and Makefile (Ivan Oparin oparin@me.com)
• 1f033d0: Board: open bootstrap-and-ci with three stories (Ivan Oparin oparin@me.com)
• 96f479a: Wire agent tooling: skill-go-testing-tools (Ivan Oparin oparin@me.com)
• b246c75: Task board: twelve epics mapping the implementation phases (Ivan Oparin oparin@me.com)
• ad764e8: Plan: state the naming rule without triggering it (Ivan Oparin oparin@me.com)
• a7b3d76: Add the implementation plan (Ivan Oparin oparin@me.com)
• ab88a7b: Bootstrap: Apache-2.0 license, notice, readme, gitignore (Ivan Oparin oparin@me.com)

Verify what you downloaded

gh attestation verify <artifact> --owner relux-works
cosign verify-blob \
  --certificate checksums.txt.pem --signature checksums.txt.sig \
  --certificate-identity-regexp 'github.com/relux-works/curator' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  checksums.txt