v3.8.48 v0.8.3

high risk

minitap-ai/mobile-useJul 13, 2026 → Jul 16, 20262 days between releases

What's New

Major overhaul introduces SOP engine and Wasmtime host in v0.8.3.

Breaking Changes

  • Daemon SOP maintenance tick changes execution model from manual to daemon-driven.
  • Unified memory-context injection is now keyed on `TurnOrigin` ingress provenance.
  • Provider requests now thread `provider_timeout_secs` and `extra_headers` through the responses path.
  • Skills install/list/remove are now bundle-aware.

New Features

  • SOP engine lands end-to-end with triggers and an approval plane.
  • WebAssembly plugin host (wasmtime component model) for tools and channels.
  • Git forge channel with GitHub and Gitea/Forgejo providers.
  • TodoWrite tracker with cost tab views.
  • ACF multiple-choice elicitation with form support.

Improvements

  • Security hardening includes SSRF fixes, constant-time token comparison, and secret-leak prevention.
  • Cost & usage accounting gains a task-attributed usage ledger.
  • Desktop app returns as a Tauri sidecar for a self-contained experience.
  • Runtime and provider hardening across the board.

Upgrade Notes

The daemon-driven SOP maintenance tick requires configuration updates for manual execution. Ensure context injection logic uses the new `TurnOrigin` key for memory injection. Provider implementations must now handle `provider_timeout_secs` and `extra_headers` in responses.

The Two Releases

v3.8.48

v3.8.48

Jul 13, 2026· 3 months ago

Hotfix release that fixes critical npm package crashes from v3.8.47 and ships all v3.8.47 features, including the Langfuse observability plugin, 9router Codex import support, and extensive dashboard/routing updates.

Full release notes
v0.8.3

v0.8.3

Jul 16, 2026· 3 months ago

A large consolidation cycle focused on the SOP engine, WebAssembly plugin host, Git forge channel, and broad runtime, provider, and security hardening.

Full release notes