Desktop main 71304fcbdd7402cfd4355fffc397079fe37d0c34

Signed App and matching runtime preview.

Desktop main c504ffdb4e788e495e7b9010f2b7cc9c055b591b

Signed App and matching runtime preview.

Desktop main d03863fd0048f57f6dc878e7dc464b17f8d862a1

Signed App and matching runtime preview.

LoopX 1.4.0 — Evidence, continuity and semantic control

LoopX v1.4.0 — Evidence, continuity and semantic control

Release source: 1b452b00a114bd9f0d9c24868c9f45df42661748 (tree d9e4ff7e573c1cca63fb536e0c60ad0a54f89997). Exact-source qualification passed. The public tag archive and source stable installation are verified at this commit. PyPI and desktop publication are waiting for GitHub-hosted runners; desktop-stable remains on 1.3.1.

1.4.0 connects original Goal acceptance, accumulated evidence and the next action more reliably. The shipped changes cover native Chat/Lark continuity, canonical typed work state, reviewed SQLite recovery and evidence-backed work-Turn review. The latest long-horizon study provides observed system-level progress and counterexamples; it is not a paired 1.3.1→1.4.0 score certificate or attribution of all gains to one model.

Release Decision

Who should upgrade: Core developers and users affected by long-running Chat recovery, stale work/lease decisions, evidence reuse or storage recovery; validate the supported profile before extending a SQLite trial.

What this release solves: Keeps original operations and source-bound results intact across continuation, recovery, review and canonical state reads.

Breaking changes: Yes. New unconfigured Goals now create canonical SQLite/hard_lease; existing Goals and explicit v0/v1 opt-out keep their route. Product and benchmark implicit review cadence is six settled work Turns; explicit legacy Todo-unit overrides retain their unit. Both local providers require Node 22.22.3 or newer; SQLite additionally validates the embedded fixed runtime. No automatic existing-Goal migration; package rollback does not roll back data.

How to verify: Inspect named version, installed provenance, managed runtime identity and the current Goal head. For an unconfigured disposable new Goal expect canonical SQLite and authority_initialized=true.

loopx --version
loopx doctor
loopx machine-config inspect
loopx todo list --goal-id "$GOAL_ID"

Contributors: @LIHUA919, @JasonBuildAI and eight other community contributors, including a first-time release contributor, plus the project agent are credited from the exact previous-tag range and merged PR metadata below.

State Kernel & Control Plane

• Canonical typed Todo, dependency, handoff and completion read models retire redundant legacy writer crossings; original fences, leases, scopes and replay identities remain authoritative.
• New Goals inherit canonical SQLite/hard_lease. Reviewed existing-Goal migration, cold-source import, backup and reverse migration preserve original receipts and later writes. Implementation is shipped; sustained D2 qualification remains separately open.
• Quota/scheduler freshness, stopped-Goal admission, bounded monitor failure closeout and six settled work-Turn review separate useful work from polling. Receipt-bound terminal recovery rejects historical replay; in-flight CLI settlement now receives only the guidance for its projected command. Material closeout and MCP still require their full Vision evidence. Review calls still need original acceptance and evidence; a counter is not progress.

Capabilities & Workflows

• Native Chat creation and queued Turn recovery retain original Session identity; private Lark replies/files return to the verified original audience. Binding revocation stops work and answer rendering preserves substantive streamed output.
• Explore ordinary-work capture supplies scope-bound results to actual continuation; acceptance-bound progress review rejects stale criterion/result binding. Content reference outlines retain attribution, caveats and caller facts.
• Reward Memory/repository-experience consumption retains scoped original evidence. Periodic report intent and stopped/disabled-subscription recovery preserve source and audience boundaries. Finance cumulative-flow assessments retain source periods and partial-coverage uncertainty; no transaction authority is added.

Benchmarks, Models & Quality

• Long-horizon Portfolio and Lean studies retain frozen attempts, runner/model settings, observed improvements and unresolved slowdown/zero counterexamples. Task-owned budgets and bounded official feedback improve execution reliability; this release launches no benchmark jobs.
• Astra-assisted semantic control development and typed owner convergence improve evidence, settlement and continuation contracts. Observed gains include model, prompt, runner and LoopX changes; no isolated causal model uplift is claimed.
• Packaging provenance, UTF-8 host entrypoints and Windows/private-path handling improve diagnosis and recovery. Current exact-source tests and installed artifacts remain required before promotion.

Community Contributors

External community contributions are highlighted here; the project agent is credited separately. The links name representative merged work from the exact release range.

• @mikamikasuki — Runtime and installer compatibility, safe source reads, and durable regression fixtures. #5754, #5919, #6005, #6138, #6143
• @Duang777 — Goal lifecycle fencing, quota and scheduler freshness, archive recovery, PostgreSQL identity rotation, retained static rollback validation, and cadence eligibility. #5725, #5862, #5943, #6127, #6201, #6211, #6213
• @hhyykk — Canonical Todo dependencies and scheduled waits, unreadable lease protection, periodic-report recovery, and workspace task identity. #5642, #5853, #5884, #5926, #5939
• @JasonBuildAI — Windows qualification, UTF-8 CLI output, and canonical progress-review digest readback. #6073, #6118, #6119, #6200, #6204
• @songoow — Workspace typography and layout, scoped recovery, invalid ancestry enforcement, and acceptance-bound progress reviews. #5923, #6064, #6065, #6066
• @LIHUA919 — Installer review guidance, private Lark return provenance, provider failure fixtures, and test dependency consistency. #6062, #6075, #6098, #6142, #6212
• @Jim-jimu — Scoped benchmark identity, metric scale comparison, and ready-only Explore dispatch suggestions. #5758, #5887, #6022
• @GZY-SUPER-HACKER — Resolved-thread automation admission and bound-App host delivery windows. #6124, #6129
• @sakurahello1 — Native untracked source paths and typed export rejection of local references. #5896, #5897
• @Hsuehtan — First-time release contributor: shared public-safety owners for credential questions and compact opaque identifiers. #5876, #5880
• @loopx-agent — Project agent contributions: native Chat/Lark continuity, typed ownership, reviewed SQLite import/recovery, Explore evidence capture, benchmark feedback, source build recovery, and regression ownership. #5743, #5763, #5805, #5971, #6193, #6199, #6226, #6214, #6235, #6222, #6236, #6238

Compatibility & Validation

At frozen source 1b452b00a, all 515 full-public smokes passed without skips, timeouts...

Desktop main fb5273002fae9d652a0c21c579bb65ee07755f18

Signed App and matching runtime preview.

Desktop main c2044e3d0fda34cda73830db4b071dd88b65d844

Signed App and matching runtime preview.

Desktop main 8d5a6fc170422ff4ff78818898b172064b1e1591

Signed App and matching runtime preview.

Desktop main 573c655879094d38aec2717e9b229962de8717a8

Signed App and matching runtime preview.

Desktop main 5de71093cee3217c66cc32394fd841f6c831f5e2

Signed App and matching runtime preview.

Desktop main 07eb7a1288e8a33995493f9d50475f2664fcbf2e

Signed App and matching runtime preview.