CHANGELOG.md

Changelog

0.2.1 - 2026-07-17

Trusted release pipeline

• Add a tokenless PyPI trusted-publishing workflow with exact-version, exact-main-commit, unused-version, full-test, skill-validation, build, and Twine gates.
• Keep PyPI publication ahead of the existing tag-triggered npm trusted-publishing workflow so the Codex plugin never points at an unavailable Python runtime.
• Synchronize the Python distribution, Codex plugin, npm launcher, Review Room UI, workspace manifests, skills, tests, and public install instructions at 0.2.1.
• Document the GitHub environment and immutable v* tag protections used by the release path.
• Make the Playwright test-server port configurable so local release validation cannot silently reuse an unrelated app on port 5173.

0.2.0 - 2026-07-16

Codex pet v2

• Make codex-pet-v2 the default project contract with an exact 8 × 11, 1536 × 2288 atlas and spriteVersionNumber: 2.
• Vendor and attribute a hash-pinned Apache-2.0 Hatch Pet deterministic backend snapshot.
• Add cardinal extraction, shared-scale look-row registration, sixteen-direction QA, blind-direction consensus, continuity checks, one final linear-light chroma cleanup, and strict v2 package validation.
• Preserve v1 as a readable migration surface rather than a new-build output target.

Source identity and likeness

• Add reference roles, coverage and image-quality reports, provider permissions, identity-analysis handoffs, versioned evidence-linked identity profiles, locked signature traits, mirror policies, and identity packs.
• Hold treatment constant across three source-fidelity candidates, normalize their review framing, and require separate holistic-gestalt, signature-trait, and small-size scores before selection.
• Preserve the likeness winner as a read-only identity anchor; derive optional style candidates from it and block treatments that materially damage identity.
• Compile confirmed identity traits and consented source references into every relevant generation job.
• Add source/baseline/state/direction likeness review media, per-trait evidence verdicts, blocking signature failures, advisory-only drift metrics, and JSON plus Markdown receipts carrying baseline, identity-pack, repair, run, provider, and approval lineage.
• Require identity analysis to verify anatomical and viewer/screen orientation for side-specific traits, preventing a front-view screen-side label from being mistaken for the pet's anatomical side.
• Make identity-changing repairs refresh the run identity snapshot, metadata, every job's profile version, and all repair prompts with an authoritative replacement contract before regenerated outputs can be imported.

Durable orchestration

• Replace flat row planning with a dependency-aware, event-sourced v2 job graph, per-job timestamps, and validated state transitions.
• Add interruption recovery that distinguishes safe deterministic replay from unknown provider outcomes.
• Add targeted repair with archived superseded outputs, dependency-closure invalidation, and repair receipts.
• Make targeted repair archive stale provider handoffs, write a versioned evidence-bearing repair prompt, and force a fresh invocation instead of silently reusing the failed request.
• Scope derived-artifact invalidation so direction-only repairs preserve the valid standard animation atlas.
• Make advance --agent-mode resolve dependency waves and stop at real provider, identity, direction, likeness, visual approval, and install gates.
• Make handoff summaries expose the provider-packed input set, including hard reference-count limits, instead of an impossible unbounded job input list.
• Filter handoff role maps to that exact packed set and prioritize approved direction anchors over general source references.
• Compose row-specific three-anchor references for the two half-turn rows so the opposite-facing profile cannot bias generation.
• Recover intact four-cardinal strips that cross nominal slot margins by registering exactly four disconnected pose components left-to-right with safe cell padding; ambiguous or merged strips still fail.
• Strengthen look-row prompts with explicit back/profile/front half-turn mechanics and forbidden opposite-quadrant poses for every 22.5-degree sequence.
• Give every standard state an ordered frame-by-frame storyboard and loop-closure lock so generation cannot substitute an unrelated pose montage for an animation.
• Lock single-limb actions to one anatomical paw and one screen side, require neutral matching endpoints for processing loops, and constrain emotional recovery to even motion steps so visually valid rows cannot hide paw teleports or pose resets.

Migration, privacy, and exports

• Add a non-destructive v1-to-v2 upgrade that preserves rows 0–8, retains unknown legacy manifest data under legacy_compat, and generates only cardinal and look rows.
• Add per-provider consent receipts and hash-checked EXIF-stripped PNG derivatives; original source photos are never provider inputs.
• Make project exports source-free by default, add explicit source inclusion, and add a sanitized diagnostic export.
• Normalize persisted deterministic receipt paths so packages and exports do not disclose machine-local paths.

Review Room and evaluation

• Wire Review Room to real v2 identity, source, candidate, job, direction, likeness, repair, approval, and export actions.
• Derive the state viewer from the project’s versioned contract rather than a fixed nine-row assumption.
• Ship the compiled Review Room inside the Python wheel and make goodboy ui run the real loopback-only FastAPI/Uvicorn application with optional project auto-open.
• Add a frozen blinded Goodboy-versus-Hatch benchmark with private randomization, complete independent reviewer submissions, identity-level aggregation, Wilson and cluster-bootstrap intervals, and claim-release gates.
• Make animation correctness a first-class product gate: verify exact frame counts and GIF timing, then require evidence-bearing semantics, continuity, and cross-state identity verdicts for all nine standard states in both CLI and Review Room.
• Resolve the Review Room spritesheet from the active run before considering older packages, preventing a repaired project from silently previewing stale animation media.
• Restore saved likeness verdicts and blind-direction validation in the Review Room so an approved gate shows its evidence instead of blank disabled controls or a false 0/3 state.
• Extend paired benchmarks to require matched identity, direction, contact-sheet, and nine-animation media, with separate state-semantics, motion-continuity, and direction-correctness release gates.

Documentation and packaging

• Rewrite the Goodboy skill/plugin and public workflow around v2 My Pet, explicit consent, dependency waves, review gates, repair, migration, and privacy.
• Make the Codex plugin the recommended install surface, with a version-pinned runtime contract, read-only preflight, explicit install consent, uv tool-bin discovery, post-install verification, and guarded execution.
• Add regression coverage for ready, missing, mismatched, denied, failed, and successfully bootstrapped plugin runtimes, and align the npm launcher with the same exact-version discovery rule.
• Add v2 workflow, migration, privacy, and benchmark references.
• Include the vendored backend license, integrity manifest, scripts, and references in Python release packages.
• Test Python 3.10 through 3.12 in CI and build release distributions from the 3.12 lane.

0.1.2 - 2026-05-28

• Publish the Python CLI distribution as goodboy-codex on PyPI.
• Update install docs and npm launcher guidance to prefer python3 -m pip install goodboy-codex.
• Align project, UI, npm launcher, and workspace manifest versions to 0.1.2.

0.1.1 - 2026-05-28

• Publish the scoped npm launcher as @adamallcock/goodboy.
• Add public README badges and npm package links.
• Move Review Room CI and package metadata to Node 24.
• Align the release tag with the public main branch after repository governance setup.

0.1.0 - 2026-05-28

• Initial Goodboy alpha pipeline.
• Manifest-first pet project model.
• Source ingest, candidate baselines, style sheets, row planning, provider handoffs, QA, package export, and install gates.
• Codex skill and plugin wrapper.
• Review Room UI preview with a generic companion demo.