v0.30.2

v0.30.2 — Paperclip Governance Integration

🎯 Highlights

This release ships first-class Paperclip integration with full hierarchical governance, human-in-the-loop approvals, and tamper-evident audit logging. The @magneto-ai/paperclip-plugin is now published to npm and uses the official @paperclipai/plugin-sdk.

✨ New Features

Paperclip Plugin (@magneto-ai/paperclip-plugin@0.1.0)

• Official SDK integration: Built on @paperclipai/plugin-sdk@2026.517.0
• 8 core Magneto tools exposed as Paperclip tools:
  • magneto.think — Structured chain-of-thought reasoning
  • magneto.review — Graph-aware code review with trace links
  • magneto.ship — Release automation (sync, test, PR)
  • magneto.audit — Read & verify tamper-evident audit log
  • magneto.guard — Combined /careful + /freeze safety
  • magneto.trace — Requirement ↔ design ↔ code ↔ test graph
  • magneto.codex.review — Multi-LLM convergence-scored review
  • magneto.plan-ceo-review — CEO-level business readiness gate

Governance & Compliance

• ApprovalBridge — Bridges Magneto's approval workflow to Paperclip governance events with risk assessment
• AgentGovernance — Hierarchical role-based permissions for the full agent tree (CEO → Architect → Backend/Frontend/QA, etc.) with delegation chains and compliance policies
• AuditBridge — Periodic sync of .magneto/audit.jsonl to Paperclip Activity for full traceability

Documentation

• New: packages/paperclip-plugin/docs/HIERARCHICAL-GOVERNANCE.md
• New: packages/paperclip-plugin/examples/company-with-governance.yaml — full governance config example
• Updated main README.md with Paperclip governance section

🔧 Improvements

• TypeScript ESM (NodeNext) module resolution across the plugin
• All imports use .js extensions for ESM compliance
• params: unknown casting pattern matches SDK ToolRunContext signature

📦 Install

# Magneto CLI
npm install -g magneto-ai@0.30.2

# Paperclip plugin
npm install @magneto-ai/paperclip-plugin@0.1.0