Coven v0.0.48

What's Changed

• Added coven run --think and --speed fast|balanced|thorough as launch hints alongside --model. Claude launches map the hints to --effort; unsupported harnesses warn and continue. See issue #246 and PR #254.
• Made events_fts backfill resilient for large histories: bounded batches, completion tracking in store_meta, non-fatal SQLITE_BUSY handling, and read-only connection busy_timeout. This prevents search-index backfill from blocking agent dispatch. See issue #249 and PR #254.
• Updated CLI docs, Windows install guidance, and release notes for the new run flags and Windows package status.

Install

npm install -g @opencoven/cli@0.0.48
coven --version

Published npm packages:

• @opencoven/cli@0.0.48
• @opencoven/cli-macos@0.0.48
• @opencoven/cli-linux-x64@0.0.48
• @opencoven/cli-windows@0.0.48

Release Assets

This release includes native CLI binaries from the successful tag workflow:

• coven-v0.0.48-macos-aarch64.tar.gz
• coven-v0.0.48-linux-x64.tar.gz
• coven-v0.0.48-windows-x64.zip
• SHA256SUMS

Verification

• Signed annotated tag: v0.0.48
• Commit: 2dc3c804e17af61c339b684fc1568dfe5ff24745
• GitHub Actions release workflow succeeded: https://github.com/OpenCoven/coven/actions/runs/28126538933
• Published npm versions verified at 0.0.48 for the wrapper and all three platform packages.
• Local release-doc worktree baseline: cargo test -p coven-cli passed.

Full changelog: v0.0.47...v0.0.48

Coven v0.0.42

What's Changed

• PowerShell-native coven-code install guidance for Windows users. When the interactive Coven UI needs coven-code, Windows now shows the npm install path, the install.ps1 installer, and PowerShell-compatible COVEN_LEGACY_TUI fallback syntax instead of Unix curl | bash commands.
• macOS and Linux guidance still points to the existing install.sh | bash path.
• Release notes were updated in the docs changelog under the week of June 18, 2026.

Install

npm install -g @opencoven/cli@0.0.42
coven --version

Published npm packages:

• @opencoven/cli@0.0.42
• @opencoven/cli-macos@0.0.42
• @opencoven/cli-linux-x64@0.0.42
• @opencoven/cli-windows@0.0.42

Release Assets

This release includes native CLI binaries from the successful tag workflow:

• coven-v0.0.42-macos-aarch64.tar.gz
• coven-v0.0.42-linux-x64.tar.gz
• coven-v0.0.42-windows-x64.zip
• SHA256SUMS

Verification

• Signed annotated tag: v0.0.42
• Commit: 2c92d0703530ebcc7eaa3376301de40597e5f72a
• GitHub Actions release workflow succeeded: https://github.com/OpenCoven/coven/actions/runs/27806743142
• Local pre-publish smoke passed before publish: release secret guard, publish unit tests, npm dry-run, temp install, coven --version, coven doctor, and coven --help.

Full changelog: v0.0.41...v0.0.42

Coven v0.0.40

What's Changed

Features:

• e0642d8 feat(cli): forward coven run --model to harness model flags
• cb20190 feat(cli): surface configured familiars in coven doctor
• 3fed3d6 feat: familiar avatars final — all 7 from Val reference images
• 0577c80 feat: higgsfield skill v2 — full kit absorbed + SKILL.md rewritten
• 7a34e29 feat: add higgsfield skill — runtime-portable image generation
• b44529a docs(familiars): add familiar identity model spec, plan, and public docs (#221)
• a842db7 feat: update Cody avatar to final locked form (2026-06-17)

Fixes:

• 8fa0891 fix(harness): keep Claude permissions enabled by default (#216)
• d8cb938 fix(windows): fail closed on pipe ACL hardening (#217)
• 23dbdac fix: require explicit harness adapter manifests (#218)
• 0e61a3e fix(cli): fail closed when packaged binary is missing (#219)
• d412b9b fix(coven-cli): confine prompt path expansion to workspace (#220)
• dd30c97 Fix Windows harness launcher resolution
• 277a851 fix(docs): drop gray-matter for js-yaml 4.2.0 (GHSA-h67p-54hq-rp68)
• 52b8084 fix(coven-memory): hex-encode SHA-256 digest for sha2 0.11
• ecd41b0 fix(ci): restore rust checks across platforms (#233)
• e8f5c61 fix(ci): gate Dependabot auto-merge on patch/minor + bump fetch-metadata v3
• 6173082 fix(daemon): stop the socket-takeover orphan storm + EINVAL connection drops (#242)

Chores/Deps:

• Multiple Dependabot bumps (uuid, rusqlite, turbovec, regex, ratatui, chrono, sha2, fastembed, windows-sys, dompurify, vitest, markdown-it, actions/checkout)
• 6eb4cb1 chore(docs): remove dead Mintlify-compat site builder (#232)
• 42443f4 ci: auto-merge Dependabot security update PRs

Install

npm install -g @opencoven/cli@0.0.40

Or upgrade:

npm install -g @opencoven/cli@latest

Supported platforms: macOS arm64, Linux x64 (glibc), Windows x64.

Coven v0.0.39

What's Changed

• 65e0e96 fix(harness): bypass permission prompts for claude sessions (#214)
• 1ccfa4e fix(daemon): pre-trust cwd for interactive claude sessions (#215)

Install

npm install -g @opencoven/cli@0.0.39

Or upgrade:

npm install -g @opencoven/cli@latest

Supported platforms: macOS arm64, Linux x64 (glibc), Windows x64.

Coven v0.0.38

What's Changed

• ab6b7f8 fix: restore capabilities scans and windows CI (#211) thanks @BunsDev
• ea22a0d docs: add Coven workflow standard (#212) thanks @BunsDev
• 403bae2 fix(run): resume claude sessions with --resume instead of --session-id (#213)

Install

npm install -g @opencoven/cli@0.0.38

Or upgrade:

npm install -g @opencoven/cli@latest

Supported platforms: macOS arm64, Linux x64 (glibc), Windows x64.

Coven v0.0.37

What's Changed

• b62c330 / 0f11a1e perf: index-backed get_session / index get_session lookup (#198, #199)
• abc8ecb fix: SQLite WAL mode + 5s busy_timeout at connection open (#200)
• e24ed27 ci: add windows-latest matrix leg to Rust checks job (#201)
• b789137 fix: euid/ownership fail-closed on client-side socket connect (#202)
• 59d5884 fix(windows): cmd.exe metacharacter hardening for harness argv (#203)
• c1d3cc7 fix(windows): owner-only DACL on named pipe via SetNamedSecurityInfoW (#204)
• 5087c65 feat(windows): daemon lifecycle — start/stop/status via Windows process APIs (#205)
• 5a8af5a feat(windows): Job Object kill for stream-mode child process tree (#206)
• 8eb998e chore: enable cargo-deny license gate (#208)
• 78810a2 feat: branch-triage GH Action + weekly workflow (#209)

Install

npm install -g @opencoven/cli@0.0.37

Or upgrade:

npm install -g @opencoven/cli@latest

Supported platforms: macOS arm64, Linux x64 (glibc), Windows x64.

Coven v0.0.36

What's Changed

• fix(daemon): isolate per-connection errors + clean socket on exit (#197, f4554d8). A single malformed local HTTP request to the Unix-domain API socket no longer brings down the entire daemon. serve_forever previously used ? on serve_next_connection, so any client parse error propagated out of the accept loop, exited the process, and left ~/.coven/coven.sock orphaned. The Unix path now mirrors the TCP path's log-and-continue policy.
• Daemon-lifetime cleanup hardening. A ShutdownGuard Drop impl removes coven.sock and daemon.json on every unwind path (normal return, propagated Err, panic). SIGTERM / SIGINT / SIGHUP install an async-signal-safe handler (unlink(2) + _exit(2) only). A panic hook appends panic info + backtrace to ~/.coven/daemon-recovery.log and removes both files. A startup breadcrumb is now logged so post-mortems can reason about daemon lifetime.

Install

npm install -g @opencoven/cli@0.0.36

Or upgrade an existing install:

npm install -g @opencoven/cli@latest

Supported platforms: macOS arm64, Linux x64 (glibc), Windows x64.

Verification

• Release workflow run 27160632141 passed: signed-tag verification, release gates (cargo fmt + clippy + workspace test + secret scan), macOS / Linux / Windows release builds, npm dry-run, and OIDC npm publish — 7/7 jobs green in ~13m.
• Tag v0.0.36 is an annotated SSH-signed tag pointing at f4554d8 on origin/main; signature verified against NPM_RELEASE_ALLOWED_SIGNERS.
• Live registry confirms @opencoven/cli, @opencoven/cli-macos, @opencoven/cli-linux-x64, and @opencoven/cli-windows all published at 0.0.36.
• Post-publish smoke against a fresh install: coven --version → 0.0.36; the daemon survives 3 distinct malformed local requests without crashing; coven daemon stop cleanly removes both coven.sock and daemon.json.

Regression Test

unix_serve_loop_isolates_per_connection_errors (in crates/coven-cli/src/daemon.rs) sends a malformed request followed by a valid one and asserts the daemon stays bound and responsive. 44 daemon tests pass; cargo check --workspace + clippy -- -D warnings + fmt --check all clean.

Coven v0.0.35

What's Changed

• feat(coven-memory): archival memory layer — TurboVec + fastembed (nomic-embed-text-v1.5, 768-dim, local / air-gapped).
• feat(capabilities): comprehensive MCP scanner — Cursor, Gemini, OpenCode, coven-code, Copilot.
• feat(cli)!: require coven-code for coven / coven tui (breaking change); delegate the interactive shell to coven-code when installed.
• fix(api): validate events query before session lookup; reject non-integer limit and afterSeq with a structured 400.
• fix(chat): track live session state until terminal events; cover the exit-event transition in the chat session-state test.
• fix(ci): install OpenBLAS for Rust release gates; clear Coven release-audit gates; satisfy Coven CLI publish gates.
• docs: add coven capture design spec; repair broken Mermaid diagrams in ARCHITECTURE.md; clarify first-run flow and doctor status.

Tag points at bc47bf3. See the full diff for the complete commit list.

Install

npm install -g @opencoven/cli@0.0.35

Or pin via:

npm install -g @opencoven/cli@latest

Supported platforms: macOS arm64, Linux x64 (glibc), Windows x64.

Verification

• Release workflow run 27115073040 passed: signed-tag verification, release gates (cargo fmt + clippy + workspace test + secret scan), macOS / Linux / Windows release builds, npm dry-run, and OIDC npm publish.
• Tag v0.0.35 is an annotated SSH-signed tag pointing at bc47bf3 on main; signature verified against NPM_RELEASE_ALLOWED_SIGNERS.
• Live registry confirms @opencoven/cli, @opencoven/cli-macos, @opencoven/cli-linux-x64, and @opencoven/cli-windows are all published at 0.0.35.

---

This release-page entry was backfilled on 2026-06-08; the underlying tag, signed commit, and npm publish are the original release artifacts.

Coven v0.0.34

What's Changed

• feat(skills): add Coven task manager (#184).
• feat(diagnostics): adapter registry diagnostics (#185).
• fix(clippy): satisfy clippy for external adapter code (#182, thanks @seagpt).
• docs: README revised for comprehensive product documentation and guidance.

Tag points at 3651a5e. See the full diff for the complete commit list.

Install

npm install -g @opencoven/cli@0.0.34

Or pin via:

npm install -g @opencoven/cli@latest

Supported platforms: macOS arm64, Linux x64 (glibc), Windows x64.

Verification

• Release workflow run 27062639112 passed: signed-tag verification, release gates (cargo fmt + clippy + workspace test + secret scan), macOS / Linux / Windows release builds, npm dry-run, and OIDC npm publish.
• Tag v0.0.34 is an annotated SSH-signed tag pointing at 3651a5e on main; signature verified against NPM_RELEASE_ALLOWED_SIGNERS.
• Live registry confirms @opencoven/cli, @opencoven/cli-macos, @opencoven/cli-linux-x64, and @opencoven/cli-windows are all published at 0.0.34.

---

This release-page entry was backfilled on 2026-06-08; the underlying tag, signed commit, and npm publish are the original release artifacts.

Coven v0.0.33

What's Changed

• feat(skill): eval-loop daemon + CovenCave surface (#175); resolve familiar workspace from familiars.toml (#176).
• feat(coven-calls): implement the delegation ledger — record + emit_running + emit_terminal + callerFamiliarId on SessionLaunch; emit delegation events to cave-coven-calls.json (closes #156). Route familiar spells to calls.
• feat(harness): add Hermes harness adapter (#179, thanks @seagpt); define the external harness adapter boundary (#181).
• fix(ci): satisfy clippy on harness adapter code (#183).

Tag points at aa1a55b. See the full diff for the complete commit list.

Install

npm install -g @opencoven/cli@0.0.33

Or pin via:

npm install -g @opencoven/cli@latest

Supported platforms: macOS arm64, Linux x64 (glibc), Windows x64.

Verification

• Release workflow run 27058920176 passed: signed-tag verification, release gates (cargo fmt + clippy + workspace test + secret scan), macOS / Linux / Windows release builds, npm dry-run, and OIDC npm publish.
• Tag v0.0.33 is an annotated SSH-signed tag pointing at aa1a55b on main; signature verified against NPM_RELEASE_ALLOWED_SIGNERS.
• Live registry confirms @opencoven/cli, @opencoven/cli-macos, @opencoven/cli-linux-x64, and @opencoven/cli-windows are all published at 0.0.33.

---

This release-page entry was backfilled on 2026-06-08; the underlying tag, signed commit, and npm publish are the original release artifacts.