v0.4.0

Implementation status

What's built today, what's published, and where to track progress.

Podium is at 0.3.x, an early release. The v1 surface is implemented and published. The surface and its behavior may still change before 1.0, so pin a specific version in production and watch the changelog for breaking changes.

Install the CLI via Homebrew, Scoop, a direct binary download, or a build from source. Quickstart has the commands. The published container image carries the podium-server registry binary only.

What's built

The implementation covers:

  • The local tier end-to-end: podium sync against a catalog directory on disk, composing that directory's ordered layers, with the built-in harness adapters.
  • The single-node and clustered tiers end-to-end: podium serve (single node on embedded SQLite and sqlite-vec, clustered on Postgres, pgvector, and S3-compatible object storage), the registry HTTP API, LayerComposer, visibility filtering, OIDC and SCIM, domain composition, immutability and versioning, the layer CLI, signing, the workspace overlay with local BM25 search, the dependency graph and impact analysis, the registry audit log with hash-chain integrity, and the meta-tools (search_domains, search_artifacts, load_domain, load_artifact).
  • MCP server: podium-mcp with the meta-tool surface, materialization through the configured harness adapter, and identity-aware loading.
  • Marketplace publishing: a podium sync target of kind: marketplace renders the catalog into harness-native git-repo distributions (the Claude, Codex, and Cursor plugin marketplaces, the Gemini extension, the Pi package, and the Hermes tap) and runs an operator-configured git workflow to push them. See Marketplace publishing.
  • SDKs: podium-py and @lennylabs/podium-sdk (TypeScript) as thin HTTP clients for programmatic runtimes.
  • Plugin surface: every SPI documented in Extending, including the LayerSourceProvider, GitProvider, IdentityProvider, HarnessAdapter, MaterializationHook, SignatureProvider, NotificationProvider, and search/embedding providers.

What's shipped

ArtifactWhere
Binaries for Linux amd64/arm64, macOS arm64, Windows amd64GitHub Releases
Homebrew formula (brew tap lennylabs/tap && brew install podium)github.com/lennylabs/homebrew-tap
Scoop manifest (scoop bucket add lennylabs https://github.com/lennylabs/scoop-bucket, then scoop install podium)github.com/lennylabs/scoop-bucket
Container imageghcr.io/lennylabs/podium-server
Python SDKpodium-sdk on PyPI, imported as from podium import …
TypeScript SDK@lennylabs/podium-sdk on npm

On the roadmap toward 1.0

Behavior between 0.3.x and 1.0 may break. Watch the changelog for specifics. Topics under active discussion:

  • Tightening the spec where field semantics are still under-specified.
  • Adapters for harnesses outside the current built-in roster, with conformance coverage for each.
  • SBOM and SLSA attestations on every release.
  • Code signing for macOS and Windows binaries.

What contributions help most today

  • Run the suite. Build from source, run make test, and report failures or environment-specific issues.
  • Sketch a harness adapter. Prototyping an adapter for a new harness helps validate the HarnessAdapter SPI.
  • Sketch a LayerSourceProvider plugin. A custom source backend (S3, OCI, internal CMS) helps validate that SPI surface.
  • Comparisons and use cases. Report where Podium does or does not fit a workflow.
  • Security review. Threat-model the design and report findings related to identity, audit, signing, and visibility.
  • Documentation fixes. Small PRs for typos, broken links, or unclear passages are welcome anytime.

How to track progress