Skip to content

Intentloom 1.0.0

Choose a tag to compare

View all tags
@vitala89 vitala89 released this 30 Jul 21:10
· 112 commits to main since this release
v1.0.0
a148f2f

First stable release of Intentloom: a local-first, offline-first control layer for reliable agentic software engineering.

Install

npm install --global intentloom
# or pin it
npm install --global intentloom@1.0.0

intentloom@1.0.0 is published to npm and holds both the latest and next dist-tags. RELEASE_STATE.md is the authoritative record of what is published.

This artifact was published manually before the trusted-publishing release workflow existed, so it carries no npm provenance attestation and cannot gain one retroactively. A local build reproduces the published tarball byte for byte (shasum 434fcb624ddb3706502a29ad96b27aee36df675c), which establishes reproducibility, not provenance. Later releases publish through release.yml and carry provenance automatically.

Added

  • First stable release: local-first, offline-first AI agent control layer and process intelligence platform.
  • Full local protocol contract v1: intentloom.doctor.v1, intentloom.inspect.v1, intentloom.diff.v1, intentloom.timeline.v1.
  • Multi-adapter merging and rule generation for Claude Code, Codex, Cursor, and Copilot.
  • CLI (intentloom), published to npm. MCP stdio server (intentloom-mcp) and local daemon (intentloomd), both built from source in this repository and not published as npm artifacts.
  • Process intelligence suite: workflow variant summaries, duration metrics, conformance trends, repetition analysis, and transition interval tracking.
  • Bounded security model: security and supply-chain audit sign-off, dependency review, CodeQL static analysis, and Dependabot updates.

Verification

Compatibility verified on macOS, Linux, and Windows across Node.js 22 and 24 (run 30529498050, 6/6 green). CodeQL green for both actions and javascript-typescript (run 30529497908).

Known security disposition

Dependabot alert #2 (glib@0.18.5, transitive, medium) is open under an approved temporary exception expiring 2026-10-29. It reaches only the desktop Tauri/WebKitGTK dependency graph; no direct glib or VariantStrIter use exists in the source.

Corrections since publication

This release note originally stated that 1.0.0 was not on npm, and listed the MCP server as intentloom mcp serve --stdio. Both were corrected on 2026-07-31: the package is published and the default install, and no mcp command exists on the CLI. The release scope itself is unchanged.

Full changelog: https://github.com/vitala89/Intentloom/blob/main/CHANGELOG.md

Assets 2
Loading