4.17.0 (2026-05-26)
Features
- catalog: add region language metadata (#2311) (205c0ac)
- cli: add MCP generate overrides (#2245) (d522d5f)
- cli: add per-endpoint role gates (#2314) (a255eb1)
- cli: add WebSocket streaming sync scaffold (#2244) (f20cbad)
- cli: emit novel feature command stubs (#2302) (2bb2c4a)
- skills: add raw docs fetch helper (#2295) (f67ad83)
Bug Fixes
- ci: add generated output compile gate (#2319) (fc04a3e)
- cli: accept accounted phase5 skips in gate (#2232) (1771a27)
- cli: accept LAN-only phase5 skips (#2264) (d55da88)
- cli: accept Windows staged live-check binaries (#2250) (9783acd)
- cli: apply research canonical auth env vars (#2298) (6ee70c9)
- cli: backfill publish printer attribution (#2233) (dc19c7c)
- cli: derive header sibling auth env vars (#2254) (5488950)
- cli: detect unsafe chrome impersonation (#2253) (91cd511)
- cli: emit extractResponseData helper only for envelope-shaped responses (#2257) (591d9e7), closes #1345
- cli: make agentcookie soft + stop publishing plans (#2333) (d0b7578)
- cli: narrow pii-audit fixture scope (#2246) (b94ec3b)
- cli: print help on empty invocation of required-input commands (#2243) (0a469f3), closes #1289
- cli: recognize slice/map/typed pflag variants in verify-skill flag scanner (#2222) (bf6a610), closes #1255
- cli: reject invalid enum flag values with the valid set (#2255) (4f8a53c), closes #1139
- cli: render skill anti-triggers from research (#2306) (72ffcd7)
- cli: run publish govulncheck with module toolchain (#2238) (ee5e1be)
- cli: send in:cookie security credential as cookie not header (#2239) (b0b19ce), closes #981
- cli: shape-aware auth-status env var placeholders (#2242) (993a409), closes #1329
- cli: short-circuit oauth2 auth login under verify env (#2223) (0b6279a), closes #1059
- cli: skip auth-flow inputs as bearer tokens (#2247) (bfd4428)
- cli: skip promotion when body exceeds the flag-depth cap (#2258) (061aab8), closes #1520
- cli: strip =value suffix from --flag=value tokens in verify-skill recipe parser (#2256) (72137f9), closes #1316
- cli: sync narrative value props during dogfood (#2292) (1149c6c)
- cli: synthesize Google Discovery API key auth (#2301) (0104716)
- cli: synthesize resource-aware MCP descriptions for summary-less operations (#2267) (474dbf4), closes #1315
- skills: add gosec gate to polish diagnostics (#2300) (cc645eb)
- skills: add LAN reachability carve-out (#2290) (778192b)
- skills: clarify bearer-token auth enrichment (#2251) (81c8a29)
- skills: detect truncated Go stdlib in preflight (#2294) (8c26a9e)
- skills: document multi-positional RunE shape so partial args fail with exit 2 (#2272) (0d21ad3), closes #965
- skills: gate large MCP endpoint surfaces (#2231) (b395352)
- skills: hold sub-60 reprints on missing transcendence rows (#2236) (d0acb24)
- skills: initialize transcendence collector slices with make([]T, 0) (#2268) (3132ea4), closes #1344
- skills: route polish data inserts through typed helpers (#2230) (a2f4659)