What's Changed

• fix(daemon): isolate per-connection errors + clean socket on exit (#197, f4554d8). A single malformed local HTTP request to the Unix-domain API socket no longer brings down the entire daemon. serve_forever previously used ? on serve_next_connection, so any client parse error propagated out of the accept loop, exited the process, and left ~/.coven/coven.sock orphaned. The Unix path now mirrors the TCP path's log-and-continue policy.
• Daemon-lifetime cleanup hardening. A ShutdownGuard Drop impl removes coven.sock and daemon.json on every unwind path (normal return, propagated Err, panic). SIGTERM / SIGINT / SIGHUP install an async-signal-safe handler (unlink(2) + _exit(2) only). A panic hook appends panic info + backtrace to ~/.coven/daemon-recovery.log and removes both files. A startup breadcrumb is now logged so post-mortems can reason about daemon lifetime.

Install

npm install -g @opencoven/cli@0.0.36

Or upgrade an existing install:

npm install -g @opencoven/cli@latest

Supported platforms: macOS arm64, Linux x64 (glibc), Windows x64.

Verification

• Release workflow run 27160632141 passed: signed-tag verification, release gates (cargo fmt + clippy + workspace test + secret scan), macOS / Linux / Windows release builds, npm dry-run, and OIDC npm publish — 7/7 jobs green in ~13m.
• Tag v0.0.36 is an annotated SSH-signed tag pointing at f4554d8 on origin/main; signature verified against NPM_RELEASE_ALLOWED_SIGNERS.
• Live registry confirms @opencoven/cli, @opencoven/cli-macos, @opencoven/cli-linux-x64, and @opencoven/cli-windows all published at 0.0.36.
• Post-publish smoke against a fresh install: coven --version → 0.0.36; the daemon survives 3 distinct malformed local requests without crashing; coven daemon stop cleanly removes both coven.sock and daemon.json.

Regression Test

unix_serve_loop_isolates_per_connection_errors (in crates/coven-cli/src/daemon.rs) sends a malformed request followed by a valid one and asserts the daemon stays bound and responsive. 44 daemon tests pass; cargo check --workspace + clippy -- -D warnings + fmt --check all clean.

What's Changed

• feat(coven-memory): archival memory layer — TurboVec + fastembed (nomic-embed-text-v1.5, 768-dim, local / air-gapped).
• feat(capabilities): comprehensive MCP scanner — Cursor, Gemini, OpenCode, coven-code, Copilot.
• feat(cli)!: require coven-code for coven / coven tui (breaking change); delegate the interactive shell to coven-code when installed.
• fix(api): validate events query before session lookup; reject non-integer limit and afterSeq with a structured 400.
• fix(chat): track live session state until terminal events; cover the exit-event transition in the chat session-state test.
• fix(ci): install OpenBLAS for Rust release gates; clear Coven release-audit gates; satisfy Coven CLI publish gates.
• docs: add coven capture design spec; repair broken Mermaid diagrams in ARCHITECTURE.md; clarify first-run flow and doctor status.

Tag points at bc47bf3. See the full diff for the complete commit list.

Install

npm install -g @opencoven/cli@0.0.35

Or pin via:

npm install -g @opencoven/cli@latest

Supported platforms: macOS arm64, Linux x64 (glibc), Windows x64.

Verification

• Release workflow run 27115073040 passed: signed-tag verification, release gates (cargo fmt + clippy + workspace test + secret scan), macOS / Linux / Windows release builds, npm dry-run, and OIDC npm publish.
• Tag v0.0.35 is an annotated SSH-signed tag pointing at bc47bf3 on main; signature verified against NPM_RELEASE_ALLOWED_SIGNERS.
• Live registry confirms @opencoven/cli, @opencoven/cli-macos, @opencoven/cli-linux-x64, and @opencoven/cli-windows are all published at 0.0.35.

This release-page entry was backfilled on 2026年06月08日; the underlying tag, signed commit, and npm publish are the original release artifacts.

What's Changed

• feat(skills): add Coven task manager (#184).
• feat(diagnostics): adapter registry diagnostics (#185).
• fix(clippy): satisfy clippy for external adapter code (#182, thanks @seagpt).
• docs: README revised for comprehensive product documentation and guidance.

Tag points at 3651a5e. See the full diff for the complete commit list.

Install

npm install -g @opencoven/cli@0.0.34

Or pin via:

npm install -g @opencoven/cli@latest

Supported platforms: macOS arm64, Linux x64 (glibc), Windows x64.

Verification

• Release workflow run 27062639112 passed: signed-tag verification, release gates (cargo fmt + clippy + workspace test + secret scan), macOS / Linux / Windows release builds, npm dry-run, and OIDC npm publish.
• Tag v0.0.34 is an annotated SSH-signed tag pointing at 3651a5e on main; signature verified against NPM_RELEASE_ALLOWED_SIGNERS.
• Live registry confirms @opencoven/cli, @opencoven/cli-macos, @opencoven/cli-linux-x64, and @opencoven/cli-windows are all published at 0.0.34.

This release-page entry was backfilled on 2026年06月08日; the underlying tag, signed commit, and npm publish are the original release artifacts.

Contributors

• @seagpt

What's Changed

• feat(skill): eval-loop daemon + CovenCave surface (#175); resolve familiar workspace from familiars.toml (#176).
• feat(coven-calls): implement the delegation ledger — record + emit_running + emit_terminal + callerFamiliarId on SessionLaunch; emit delegation events to cave-coven-calls.json (closes #156). Route familiar spells to calls.
• feat(harness): add Hermes harness adapter (#179, thanks @seagpt); define the external harness adapter boundary (#181).
• fix(ci): satisfy clippy on harness adapter code (#183).

Tag points at aa1a55b. See the full diff for the complete commit list.

Install

npm install -g @opencoven/cli@0.0.33

Or pin via:

npm install -g @opencoven/cli@latest

Supported platforms: macOS arm64, Linux x64 (glibc), Windows x64.

Verification

• Release workflow run 27058920176 passed: signed-tag verification, release gates (cargo fmt + clippy + workspace test + secret scan), macOS / Linux / Windows release builds, npm dry-run, and OIDC npm publish.
• Tag v0.0.33 is an annotated SSH-signed tag pointing at aa1a55b on main; signature verified against NPM_RELEASE_ALLOWED_SIGNERS.
• Live registry confirms @opencoven/cli, @opencoven/cli-macos, @opencoven/cli-linux-x64, and @opencoven/cli-windows are all published at 0.0.33.

This release-page entry was backfilled on 2026年06月08日; the underlying tag, signed commit, and npm publish are the original release artifacts.

Contributors

• @seagpt

What's Changed

• feat(cli): add Coven Parallel Work Protocol (#169).
• feat(store): persist familiar_id on sessions (#168).
• docs(release): v0.0.32 notes (#171).
• chore(deps): rusqlite 0.39 → 0.40, toml_edit 0.22 → 0.25, sysinfo 0.39.2 → 0.39.3, uuid 1.23.1 → 1.23.2, json5 0.4.1 → 1.3.1, vitest 4.1.7 → 4.1.8.

Tag points at 02cbedc. See the full diff for the complete commit list.

Install

npm install -g @opencoven/cli@0.0.32

Or pin via:

npm install -g @opencoven/cli@latest

Supported platforms: macOS arm64, Linux x64 (glibc), Windows x64.

Verification

• Release workflow run 26934608485 passed: signed-tag verification, release gates (cargo fmt + clippy + workspace test + secret scan), macOS / Linux / Windows release builds, npm dry-run, and OIDC npm publish.
• Tag v0.0.32 is an annotated SSH-signed tag pointing at 02cbedc on main; signature verified against NPM_RELEASE_ALLOWED_SIGNERS.
• Live registry confirms @opencoven/cli, @opencoven/cli-macos, @opencoven/cli-linux-x64, and @opencoven/cli-windows are all published at 0.0.32.

This release-page entry was backfilled on 2026年06月08日; the underlying tag, signed commit, and npm publish are the original release artifacts.

What's Changed

• security: API socket must resolve inside COVEN_HOME (#150, thanks @maplesyzzurp); daemon fails closed when COVEN_HOME or the socket is owned by another user (#148, thanks @maplesyzzurp); harden daemon TCP origin guard and socket path handling.
• ci: add cargo-deny supply-chain gate for Rust dependencies (#149, thanks @maplesyzzurp).
• feat(capabilities): new GET /v1/capabilities daemon endpoint (#159).
• feat(hexes): scaffold the coven-relay crate — Phase 2A (#152); restore missing src/main.rs and src/ws.rs (#160).
• feat(run): add --familiar flag for harness-agnostic identity injection.
• [prototype] Windows daemon support via named pipes (#146).
• fix(pty_runner): drop --input-format stream-json for one-shot turns (#153).
• feat(familiars): icon field on /api/v1/familiars (read + write).
• chore: freeze PRs until July 2026 — issues / bug reports only.

Tag points at 44b44a3. See the full diff for the complete commit list.

Install

npm install -g @opencoven/cli@0.0.31

Or pin via:

npm install -g @opencoven/cli@latest

Supported platforms: macOS arm64, Linux x64 (glibc), Windows x64.

Verification

• Release workflow run 26872356756 passed: signed-tag verification, release gates (cargo fmt + clippy + workspace test + secret scan), macOS / Linux / Windows release builds, npm dry-run, and OIDC npm publish.
• Tag v0.0.31 is an annotated SSH-signed tag pointing at 44b44a3 on main; signature verified against NPM_RELEASE_ALLOWED_SIGNERS.
• Live registry confirms @opencoven/cli, @opencoven/cli-macos, @opencoven/cli-linux-x64, and @opencoven/cli-windows are all published at 0.0.31.

This release-page entry was backfilled on 2026年06月08日; the underlying tag, signed commit, and npm publish are the original release artifacts.

Contributors

• @maplesyzzurp

What's Changed

• feat(coven-cli): P0 Coven Code parity — JSONC settings, thread upgrades, file refs, stream-JSON (#138). Adds --stream-json / --stream-json-input flags to run with event types matching the Coven Code schema.
• feat(channels): add coven-channels spec and Discord connector documentation.
• docs: v1.1.0 field-manual redesign — no-gradient rule, canonical violet.
• chore(deps): dependency bumps — sysinfo 0.30 → 0.39, toml 0.8 → 1.1, serde_json 1.0.149 → 1.0.150, vitest 4.1.6 → 4.1.7 in openclaw-coven.

Tag points at f56fe42. See the full diff for the complete commit list.

Install

npm install -g @opencoven/cli@0.0.30

Or pin via:

npm install -g @opencoven/cli@latest

Supported platforms: macOS arm64, Linux x64 (glibc), Windows x64.

Verification

• Release workflow run 26545099236 passed: signed-tag verification, release gates (cargo fmt + clippy + workspace test + secret scan), macOS / Linux / Windows release builds, npm dry-run, and OIDC npm publish.
• Tag v0.0.30 is an annotated SSH-signed tag pointing at f56fe42 on main; signature verified against NPM_RELEASE_ALLOWED_SIGNERS.
• Live registry confirms @opencoven/cli, @opencoven/cli-macos, @opencoven/cli-linux-x64, and @opencoven/cli-windows are all published at 0.0.30.

This release-page entry was backfilled on 2026年06月08日; the underlying tag, signed commit, and npm publish are the original release artifacts.

What's Changed

• fix(daemon): persist conversational sessions as idle on a clean harness exit, instead of leaving them in running.
• fix(daemon): enforce loopback-only TCP API binding (#132).
• fix(openclaw-coven): validate cwd before the unavailable-daemon fallback (#131).

Tag points at aa90311. See the full diff for the complete commit list.

Install

npm install -g @opencoven/cli@0.0.29

Or pin via:

npm install -g @opencoven/cli@latest

Supported platforms: macOS arm64, Linux x64 (glibc), Windows x64.

Verification

• Release workflow run 26377337541 passed: signed-tag verification, release gates (cargo fmt + clippy + workspace test + secret scan), macOS / Linux / Windows release builds, npm dry-run, and OIDC npm publish.
• Tag v0.0.29 is an annotated SSH-signed tag pointing at aa90311 on main; signature verified against NPM_RELEASE_ALLOWED_SIGNERS.
• Live registry confirms @opencoven/cli, @opencoven/cli-macos, @opencoven/cli-linux-x64, and @opencoven/cli-windows are all published at 0.0.29.

This release-page entry was backfilled on 2026年06月08日; the underlying tag, signed commit, and npm publish are the original release artifacts.

What's Changed

• feat(daemon): new HTTP endpoints — real-data familiars / skills / memory / research read out of ~/.coven/, with safe empty-array stubs when the directories are missing.
• feat(daemon): add GET /api/v1/cast-codes for the cockpit palette.

Tag points at a256f67. See the full diff for the complete commit list.

Install

npm install -g @opencoven/cli@0.0.28

Or pin via:

npm install -g @opencoven/cli@latest

Supported platforms: macOS arm64, Linux x64 (glibc), Windows x64.

Verification

• Release workflow run 26376822146 passed: signed-tag verification, release gates (cargo fmt + clippy + workspace test + secret scan), macOS / Linux / Windows release builds, npm dry-run, and OIDC npm publish.
• Tag v0.0.28 is an annotated SSH-signed tag pointing at a256f67 on main; signature verified against NPM_RELEASE_ALLOWED_SIGNERS.
• Live registry confirms @opencoven/cli, @opencoven/cli-macos, @opencoven/cli-linux-x64, and @opencoven/cli-windows are all published at 0.0.28.

This release-page entry was backfilled on 2026年06月08日; the underlying tag, signed commit, and npm publish are the original release artifacts.

What's Changed

• chore(style): cargo fmt cleanup after the repos.toml refactor — recovery release for v0.0.26 (which did not ship to npm).

Tag points at 6d9db02. See the full diff for the complete commit list.

Install

npm install -g @opencoven/cli@0.0.27

Or pin via:

npm install -g @opencoven/cli@latest

Supported platforms: macOS arm64, Linux x64 (glibc), Windows x64.

Verification

• Release workflow run 26369492264 passed: signed-tag verification, release gates (cargo fmt + clippy + workspace test + secret scan), macOS / Linux / Windows release builds, npm dry-run, and OIDC npm publish.
• Tag v0.0.27 is an annotated SSH-signed tag pointing at 6d9db02 on main; signature verified against NPM_RELEASE_ALLOWED_SIGNERS.
• Live registry confirms @opencoven/cli, @opencoven/cli-macos, @opencoven/cli-linux-x64, and @opencoven/cli-windows are all published at 0.0.27.

This release-page entry was backfilled on 2026年06月08日; the underlying tag, signed commit, and npm publish are the original release artifacts.