Tags

gen4-final-20260720

v0.1.11

v0.1.10

v0.1.5

v0.7.0

v0.7.0: local AAuth operator authority and action-first CLI

Sidecat 0.7.0 is a source-only minor milestone for the local AAuth operator authority path and the action-first command surface.

It includes the local Person Server operator console, true GitLab OAuth login, credential grant admission and management, grant-bound GitLab push plumbing, refreshed AAuth interaction review UI, and public retirement of noun-grouped sidecat entrypoints.

This is early R&D, not a packaged or production release.

v0.6.2

v0.6.1

v0.6.0

Sidecat 0.6.0

Source-only command surface and JSON payload cleanup minor release.

This release makes the preferred package surface explicit: sidecat run OBJECT JSON_PAYLOAD, sidecat validate OBJECT, and sidecat template OBJECT for declared package directories. JSON payloads are validated before declared package execution, validate replaces lint as the static-check concept for new work, and templates expose machine-readable call shapes generated from package declarations.

This release also carries the 0.5.x cleanup train: retired imperative git proof deleted from the active tree, serious declarative git sidecat-lorem catfood coverage, AAuth local HTTPS Person Server proof on aauth.sidecat.org, and code-owned anti-sprawl guardrails against noun-grouped command drift.

Not a production runtime, stable command surface, stable package API, hosted identity service, official binary package, signed binary artifact, SBOM, or provenance-backed binary distribution. Noun-grouped package compatibility paths still exist as classified debt.

v0.5.0

v0.5.0 source release: declarative package runtime

This minor source milestone cuts the stable checkpoint for the declaration inversion: package.star exports a declaration while Sidecat owns validation, typed argv binding, execution, parsing, contract generation, dry-run strategy, and from-source package execution.

It includes the current sidecat.cli, sidecat.parse, sidecat.vcs, and sidecat.container declaration kits, a thin declarative git package, a non-vcs docker proof, generated contract checks, linter findings, and real ProcessExecutor smoke coverage.

This release is not recommended for use. It is not a production runtime, stable command surface, stable package API, official binary distribution, complete AAuth product, complete federation implementation, or complete Sidebar/Sidebird product.

Known debt accepted for 0.5.0: sidecat package run and sidecat package lint still expose noun-grouped command shape. The 0.6.0 milestone is reserved for the bounded verb-object command language, JSON payload calls, validate-not-lint, git package refresh, git-workbench retirement decision, machine-readable call templates, and guardrails against Gen 2-style command sprawl.

v0.4.0

Sidecat v0.4.0

Source-only core package-authoring ergonomics minor milestone.

This release closes the first core-authoring ergonomics boundary: standard Starlark tool-run and observed result envelopes, fixture recording through sidecat package test --record, a thinner git-workbench user package, a non-git go-toolchain proof package, and guardrails keeping sidecat.* core packages general rather than app-specific.

It carries forward the v0.3.1 AAuth protected git-push proof and remains early public R&D. It is not recommended for use and is not a production runtime, stable command surface, stable package API, hosted service, official binary package, signed binary artifact, SBOM-backed distribution, or provenance-backed binary release.

Main CI for commit a55b0750cb3464a42f338d0cdf4c93067f1d0118 passed in pipeline 2621979742.

v0.3.1

v0.3.0

Sidecat v0.3.0

Source-only package-authoring milestone.

This release marks the first public Sidecat package-authoring source milestone. The main value is the package-authoring pattern: git-workbench is intentionally small, but it is meant to be readable and reusable as a model for wrapping other local CLI tools in Starlark package code.

It includes Starlark core packages, Starlark user packages, manifest-bound host capabilities, repo-backed fixtures, local package registry commands, named fixture selection, and the early git-workbench user package with bounded status, diff, stage, unstage, commit, push, plan, and verify behavior.

This is not recommended for use. It is not a production runtime, stable command surface, stable package API, hosted service, official binary package, signed binary artifact, SBOM-backed distribution, or provenance-backed binary release.

The tag points to 882a95a79915e2d1ee60423e5d59d86d4b7a2a90. Main CI for that commit passed in pipeline 2618317271.

v0.2.0

v0.2.0

Sidecat 0.2.0 source milestone.

This tag marks the first integrated Gen 3 Sidecat source shape:

- Sidecat as an extensible agent workbench.
- Package drafts as reusable moves.
- sidecatd as a federation-aware router and authority-node boundary.
- Sidebar and Sidebird contracts aligned with the governance model.
- Strict custody selected by contract level, not imposed on every action.
- Total tracked Markdown kept under the 15-file cap.

This is a source milestone and historical project marker.
It is not recommended for general use.

Evidence:

- Milestone parent: work_866f7f1eac33011808756ba5c9f135e5.
- Closure audit: work_124062b512638ad1e939d598165a1994.
- Release work: work_0c95ccfd83bef93311f36d9878a8609c.
- Commit: 018f1e8fd61f9feda9a6b1ed68a3da57389e5c7f.
- CI pipeline: https://gitlab.com/sidecat-dev/sidecat/-/pipelines/2616692631.

v0.1.0

Sidecat 0.1.0 source preview

NOT RECOMMENDED FOR USE.

This is Sidecat's first tagged source preview and a historical baseline for the Functional 0.1.0 reorientation. It records the 0.1.0 version identity, MIT license decision, source-only release policy, and deliberate release-documentation guardrail update before the project moves quickly through cleanup and the Starlark-centered redesign work.

This release is source-only. It is the annotated Git tag v0.1.0 plus the source archives GitLab provides for that tag.

This is not a production runtime, stable command surface, hosted service, complete AAuth implementation, complete federation implementation, complete Sidebar/Sidebird product, packaged distribution, signed binary artifact, SBOM-backed release, or provenance-backed binary release.

Verification before corrected tagging: go vet ./..., go test -count=1 -race ./..., make build, SIDECAT_FUZZTIME=8s scripts/check-fuzz-smoke.sh, SIDECAT_BENCHTIME=200x scripts/check-perf-smoke.sh, the multi-process reopen smoke, AAuth mission-flow smoke, work-model walkthrough smoke, 0.1.0 local-operator preview gate, deferral/capability status checks, 0.0.2/0.0.3/0.0.4 corpora, M0 language validation, scripts/check-doc-count.sh, and git diff --check passed on commit 76e31e720d94dc5b87a725792be9d1f45e7443d3.

Release hygiene note: an initial v0.1.0 tag was created at 998c354e6776bfeb0a2be12e555a59b7bfbe2355, but CI correctly failed because adding RELEASES.md crossed the Markdown-count guardrail without a deliberate ceiling update. Before treating the release as complete, the GitLab release/tag was replaced with this corrected tag at 76e31e720d94dc5b87a725792be9d1f45e7443d3.