Tags

Tags give the ability to mark specific points in history as being important

v1.5.4
protected

9ecb7ec2 · fix(installer): whitelist os.tmpdir() in pack-hub-extension system-path blocklist · May 26, 2026
```
v1.5.4 — pack-hub-extension CLI for Wayland Hub integration
```

v1.5.3

protected

11ee6bfe · chore(v1.5.3): bump versions for release · May 26, 2026

v1.5.3 -- IJFW Brain backend + agents-md DISCIPLINE block

Highlights:
- Wave 5B: per-domain discipline templates (code|narrative|business|design|research)
- populateDisciplineBlock wired into wave-state checkpointWave
- AGENTS.md.tmpl adds 5th IJFW-managed marker block (DISCIPLINE)
- Hardened path guards: BOM/whitespace, symlink, size cap, filesystem-root rejection
- mergeFile no-op short-circuit (idempotent writes)
- Skipping v1.5.2 (never published to npm)

19 commits since v1.5.2 baseline. Full audit cycle: 28 cross-audit findings + 5 final-audit items closed end-to-end. 0 todo markers, 0 accidental deferments.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

v1.5.1

protected

75561d3a · release(v1.5.1): version bump 1.5.0→1.5.1 + CHANGELOG + CI publish-job cleanup · May 22, 2026

v1.5.1 — "Honest Surfaces" (correctness + honesty release)

Corrects v1.5.0 surface drift: lying CLI commands, orphan libraries with
no runtime caller, count claims that disagreed file-to-file, and the
memory-moat flagship (Obsidian indexing + A-Mem auto-linking) wired into
a function the production write path never called.

4 audit rounds + 3 Trident cross-audits. ~50 commits. Adds Antigravity
as platform #15 (IDE + agy CLI). Full surface 2477 pass / 0 fail / 1 skip;
preflight 11/11.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

v1.5.0
protected

0119e0c3 · ci(v1.5.0): drop environment:production from publish jobs · May 21, 2026

v1.4.4

protected

9f950c26 · fix(release-1.4.4): smoke-gate cleanup · May 18, 2026

v1.4.4: Workflow + Subagent Discipline (Wave 10 N1-N10 + Trident r13 fix-wave)

v1.4.3
protected

21066f75 · fix(v1.4.3): skip Windows-incompatible test scenarios · May 18, 2026
```
v1.4.3 — Trust Model + Sandbox Completion
```

v1.4.1

protected

d9322f2d · registry(v1.4.1): sign initial publisher registry with meta-key · May 17, 2026

v1.4.1 - Open Ecosystem Completion

Eight items (B6-B13) folded back from v1.5.0 backlog: hosted publisher
key registry, tier-2 hooks for 4 more platforms (Codex/Gemini/Hermes/
Wayland), key rotation + revocation distribution, dashboard tile
expansion, 3 new pattern detectors, TTY-aware untrusted confirmation,
macOS CI promoted to required gate, 3 round-10 NOTE remediations.

W8.1 patch wave closed all 7 Trident round 11 findings (2 HIGH + 4
MEDIUM/NOTE). Additional CI patch waves resolved:
  - asdf shim PATH conflict on macOS Python (5d83dcb)
  - Windows USERPROFILE isolation + cross-platform path traversal (a4f5f56)
  - Brew node@22 PATH on macOS (32c24f5)

Quality at HEAD:
  - 1155/1155 mcp-server tests + 22 new pytest cases (hermes + wayland)
  - Preflight 11/11
  - GitLab CI: Linux + Windows + macOS all green simultaneously
  - Trident r11: 3/3 PASS after W8.1
  - MCP tool count: 10 (unchanged)
  - Zero new prod deps

Registry signed and deployed at:
  https://therealseandonahoe.gitlab.io/ijfw/registry/publishers/v1.json
Meta-key fingerprint: 2b0e1a8382c3184740b42d8befaf68926189aa46989ee6ae97a0314d753d3919

v1.4.0
protected

f57b779b · chore(preflight): clear oxlint + eslint-security blockers for v1.4.0 publish · May 17, 2026
v1.3.2
protected

d3fd460b · fix(preflight): use deterministic npm audit gate · May 15, 2026

Release: v1.3.2
```
Release v1.3.2
```
v1.3.1
protected

5e029bce · chore: publish 1.3.1 without provenance · May 12, 2026
```
v1.3.1
```
v1.3.0
protected

a38382ed · chore: clear preflight blockers (shellcheck SC1073 + oxlint warnings + gitleaks scope) · May 09, 2026
v1.2.10
protected

204d6eca · chore(1.2.10): unblock publish -- gitleaks ignore test-redactor placeholder,... · May 06, 2026

v1.2.9

protected

bafa0e0e · release: 1.2.9 -- deep audit ship across CLI, install, dashboard, hooks · May 05, 2026

v1.2.9 -- deep audit ship across CLI, install, dashboard, hooks

Multi-agent audit ran 5 specialist Claude reviewers in parallel against
customer-facing surfaces. Trident pair was double-blocked tonight (codex
oauth refresh / gemini quota). Critical and High items shipped here;
Mediums/Lows persisted in .planning/1.2.9/REVIEW-*.md for 1.2.10.

Highlights:
- ijfw dashboard now works for npm-installed users (findCliAsset on 6 paths)
- Windows install.ps1: data-loss fix (Move-Item) + origin self-heal + IJFW_HOME plumbing
- scripts/install.sh: C\Windows\System32 typo (one-char fix)
- Dashboard panels read the actual server payload (cost_usd, window_minutes, SSE)
- session-end memorize captures stderr; signal files only clear on success
- post-tool-use.js + pre-tool-use.sh log silent-failure paths
- Plugin manifests aligned at 1.2.9 across 5 trees

E2E smoke: ALL GATES PASSED. Dashboard smoke: 9/9 PASS.

v1.2.8

protected

4e9d9d3b · release: 1.2.8 -- ijfw update self-completes on every platform · May 05, 2026

v1.2.8 -- ijfw update self-completes on every platform

- npm-global update path auto-invokes ijfw-install so the MCP payload
  is refreshed on the same command.
- cloneOrPull self-heals stale origin URLs across host migrations.

Both bugs surfaced in John H.'s Windows debug session -- the same
ticket that produced 1.2.7. Thanks again, John.

E2E smoke: ALL GATES PASSED.

v1.2.7

protected

6c8f08e3 · release: 1.2.7 -- Windows update fix + GitLab migration (credit John H.) · May 05, 2026

v1.2.7 -- Windows update fix + GitLab migration

Bug report credit: John H.
Two Windows-only fixes:
- npm spawnSync needs shell:true for .cmd resolution (ijfw update broken)
- install.ps1 sweeps stale POSIX launchers (ijfw opened in Notepad)

Plus canonical home moved to gitlab.com/therealseandonahoe/ijfw.