Changelog

0.10.0 — 2026-10-30

• Add bounded private-content stdin guidance and upgrade-state fixtures.
• Add an opt-in QML plain-text check with named rich-text exceptions and Qt rendering tests.
• Omit authoring-agent instructions from generated desktop-plugin checkouts; preserve developer docs and verify cloning and repeated initialization.
• Reject multiline PlainText expressions and ambiguous rich-text exception IDs.
• Keep the Qt rendering fixture optional and the existing required CI jobs unchanged.
• Document optional live testing on an already paired Omarchy computer.
• Refresh pinned CI actions and clarify existing path-policy code.
• Align manifests, installation examples and submission materials with v0.10.0.

0.9.0 — 2026-10-17

• Align with the Quattro Agents-panel Plugin starter and built-in guide; add a local clone route.
• Fix generated Qt 6.12 palette qualification and accept all six current bar sections.
• Document plugin-owned translations, live language switching, plurals and RTL.
• Shorten all twelve portable skill entry points; retain conditional mechanics in references and keep agent/harness setup in optional adapters.
• Refresh reviewed Omarchy pins and add creation-flow, tray and localisation evaluation cases.
• Read generated Unicode fixtures explicitly as UTF-8 on Windows.
• Update release metadata and installation examples for v0.9.0.

0.8.0 — 2026-10-06

• Ship the complete plugin repository template inside the scaffold skill at a reviewed commit, with file hashes, modes and generated-project provenance.
• Add offline Node.js scaffolding for GitHub-ready bar widgets, retaining the existing six-kind generator and refusing existing destinations.
• Include the starter in individual installs and every installable archive; verify generation from those payloads in the cross-platform CI matrix.
• Apply documented path fixes to generated projects for Windows and folders with spaces while preserving the original bundled snapshot.
• Update release metadata and installation examples for v0.8.0.

0.7.0 — 2026-10-04

• Review marketplace changes and Hancore feedback through 3 October: form-error reporting, repository migration resolution, refresh delays, manual setup and active versus withdrawn findings.
• Define narrow reusable boundary contracts with proportionate CI enforcement; add opt-in QML/JS capability denial without changing marketplace policy.
• Fix generated panel, overlay and menu Text sinks to use PlainText, and cover nested JS networking in advisory discovery.
• Refresh marketplace contract pins and add executable intake/subject drift tracking; keep the submission forms unchanged.
• Prepare portable, OpenAI and Claude packages and submission metadata for v0.7.0.

0.6.1 — 2026-09-29

• Document Quattro's scoped third-party host interfaces, detached snapshots and replacement-bar service limits without implying a QML sandbox.
• Explain retained keepLoaded services and when code changes require a shell restart; add scoped compatibility exercises for the affected workflows.
• Distinguish upstream commit movement from changed contract content, retaining exact pinned-content checks and failing on unavailable or changed documents.
• Refresh all nine reviewed contract pins; marketplace, Workbench and skill specification documents are unchanged. Keep the twelve-skill bundle.

0.6.0 — 2026-09-25

• Clarify which skill owns widgets and panels, shared QML and services, debugging and testing, and release preparation versus marketplace publishing.
• Keep standalone review references synchronized while moving agent and broker specifics into the service process-safety guide; guard the two shared pairs against drift in the test suite.
• Preserve the twelve independently installable skills and the generated OpenAI adapter, with no change to the Omarchy manifest or marketplace contract.

0.5.1 — 2026-09-24

• Refresh reviewed marketplace contracts, accept the VPN tag and track the verification form/workflow, including eligible installer-only review reuse.

• Add local-API authority, loaded-tree identity, non-destructive installation, exact toolchain/provenance and cancellation regression guidance.

• Add functional payload/entry-point checks and targeted behavioral scenarios; distinguish guidance and model exercises from executed desktop tests.

• Accept Quattro's multiselect settings in strict plugin validation, backed by its pinned Indicators manifest and regression tests.

• Let release preflight accept an explicit trusted validator path when the host installs skills in renamed or separate directories, without weakening checks.

0.5.0 — 2026-09-21

• Recommend Omakit for reusable Run/Store helpers, local marketplace checks and submission preparation.
• Check prior art before new builds and establish personal, public-repository or marketplace intent early, with a small first feature and observable criteria.
• Guide implementation through concrete examples and relevant fixture checks.
• Define release readiness, configuration migration/recovery and evidence for each supported CPU architecture.
• Recommend the community security skill and OmaVM as optional companions.
• Verify current marketplace mechanics, candidate SHA and authenticated submission boundaries as the marketplace evolves.
• Synchronize canonical and packaged skills; add three operator-run behavioral scenarios without claiming they have been executed.

0.4.1 — 2026-09-20

• Incorporate 20 September marketplace review evidence for dependency/CI pinning, agent integrations, independent privileged trust, image/aggregate limits and stale backend releases.
• Add advisory discovery of workflow action references/permissions and distributed agent configuration directories, with behavioral regression fixtures.
• Explain validator-pattern capability warnings without suppressing disclosures.
• Keep workflow scanning responsive on large whitespace inputs.
• Clarify plugin/theme ownership and keep installed references self-contained.

0.4.0 — 2026-09-14

Includes the fixes prepared for the unpublished v0.3.2 draft.

• Add commit-pinned Omarchy identity/category and compatibility badges with the official icon.

• Standardise compact README badge rows: CI, licence, identity, then compatibility.

• Apply the badge row to this repository and document consistent height and mobile wrapping.

• Define compatibility as the installed Omarchy version, reported by omarchy-version.

• Pair badge categories with consistent GitHub topics for project discovery.

• Catch privilege-tool mentions in documentation before marketplace submission, including negated prose and real commands on the same line.

• Explain documentation-only capability warnings and distinguish compatibility, security review, maintainer approval and publication at the exact candidate SHA.

• Pin the marketplace security policy and synchronize portable/OpenAI guidance.

• Document skill workflows and evidence handoffs, including stale-candidate and marketplace-review behavioral cases; these cases are not recorded model runs.

• Align version metadata, installation examples and submission materials with v0.4.0.

0.3.1 — 2026-09-12

• Add native Claude Code packaging and adoption documentation.
• Incorporate marketplace reviewer evidence into targeted pre-submission guidance.
• Allow the release workflow to create a new annotated tag after exact-commit checks.
• Update marketplace submission categories and tag labels against a pinned upstream form.
• Add advisory checks and a reviewer-response evidence table for recurring findings.
• Require strict Claude manifest validation in CI alongside the cross-platform matrix.
• Align release metadata, installation examples and submission materials with v0.3.1.

0.3.0

• Review all twelve skills against OpenAI Astra and Anthropic Fable guidance.

• Preserve authorized task scope, settled decisions and evidence-backed progress.

• Make testing proportional, helper paths explicit and Workbench registration optional.

• Fix host-conformance text output and Codex ancestor/duplicate discovery.

• Add provider guidance, dated reviews and ten behavioral evaluation cases.

• Generate agent-neutral Workbench environment probes and a capability-gated validation workflow.

• Generate the schema-one Plugin Workbench project definition by default.

• Register ./tests/run as an explicit, initially untrusted Workbench check.

• Pin and verify the upstream Workbench authoring contract.

• Document the separately versioned builder and local-lifecycle companion boundary.

0.2.3 — 2026-08-31

• Validate every GitHub Actions workflow with pinned actionlint and include workflow validation in the stable required CI gate.
• Repair draft-release recovery by inspecting unpublished drafts through the GitHub CLI instead of a REST tag endpoint that excludes draft releases.
• Retry newly created draft asset downloads with bounded backoff before the byte-for-byte release comparison, while preserving exact tag/main binding and owner-controlled publication.

0.2.2 — 2026-08-31

• Add transactional install, update, diff, recovery, and conservative uninstall with receipts, locks, symlink/hardlink defenses, and managed-file integrity.
• Add read-only discovery diagnostics for Codex, Cursor, Gemini CLI, Claude Code, and OpenCode, plus a deny-by-default OpenCode live-conformance probe.
• Build byte-reproducible archives from one exact Git tree with release/source manifests, SPDX 2.3 SBOM, and complete SHA-256 coverage.
• Add exact-tree secret, binary, symlink, QML capability, and trust-boundary scanning without presenting static findings as a security guarantee.
• Harden scaffolding and validation against duplicate JSON keys, oversized or special files, unsafe ancestors, dynamic QML behavior, and unpinned actions.
• Bind tagged release preflights to annotated local/remote tags, the remote default branch, historical reachability, downloaded assets, and checksums.
• Add PR-only contribution policy, immutable action pins, a Linux/macOS/Windows CI matrix, CodeQL, upstream-contract drift checks, and draft-only release automation with owner-controlled publication.
• Expand installation, removal, reviewer, submission, and release documentation while keeping provider and live-host claims evidence-bounded.

0.2.1 — 2026-08-30

• Add an explicit OpenCode installer target using its native project and global Agent Skills directories.
• Add OpenCode installation and idempotency coverage to the host matrix.
• Document that OpenCode can also discover the shared .agents/skills target.

0.2.0 — 2026-08-30

• Add a provider-neutral Agent Plugins 1.0.0 package at the repository root.
• Make the twelve canonical skills free of provider-specific metadata.
• Add safe project/user installers for shared Agent Skills, Codex, Cursor, Gemini CLI, Claude Code, and custom destinations.
• Preserve the existing OpenAI plugin as a thin adapter with deterministic source synchronisation and drift checks.
• Add offline portable-manifest validation, conflict/idempotency tests, and a deterministic Agent Plugin release archive.
• Document the exact portability, runtime, safety, and live-evaluation boundary.

0.1.0 — 2026-08-29

• Add twelve routed skills covering the complete Omarchy 4 Quattro plugin lifecycle.
• Add a repository generator for all six current shell plugin kinds.
• Add structural, path, symlink, QML, and advisory security validation.
• Add read-only diagnostics, deterministic demos, release preflight, and marketplace submission tooling.
• Add migration guidance for separating legacy machine integration from Quattro shell surfaces.
• Add repeatable tests, submission archives, artwork, policies, and reviewer materials.