Install
npm i @opengsd/gsd-core@1.17.0
# or
npm i @opengsd/gsd-core@latestWhat's Changed
Feature
- feat(#4866): add the StateWriteIntent verifying executor and bounded-mutation check by @davesienkowski in #4935
- feat(#5337): OpenCode 2.x plugin entrypoint, generation detection, and 2.x-safe spawn args by @trek-e in #5342
- feat(#5338): OpenCode 2.x installer output, migration 011, JSONC-safe config edits and complete uninstall by @trek-e in #5343
- feat(#5339): OpenCode 2.x feature verification matrix, parity hooks, statusline and 1.x deprecation by @trek-e in #5345
Fix
- fix(#4839): keep update hook advisory on launch failure by @agammann in #5159
- fix(#5084): scan config text in the anchor's separator projection by @ScalingMBA in #5092
- fix(#5083): check npm cache isolation against the injected sandbox HOME by @ScalingMBA in #5093
- fix(#5054): retire the unscoped Bash(npx gsd-core *) allow rule by @behruznassre in #5269
- fix(#5344): stop reporting a same-scope commands + skills pair as a shadow by @trek-e in #5348
- fix(#5228): smart-entry prints the phase's position in the milestone, not its number by @trek-e in #5350
- fix(#5227): one ADR entry per top-level list item, ordered markers stripped by @trek-e in #5349
- fix(#5214): deny a Bash spawn of gsd-debugger so the managed debug loop cannot detach it by @trek-e in #5352
- fix(#4790): let a capability deliver review rules to the built-in code reviewer by @trek-e in #5353
- fix(#4805): resume-project discovers .continue-here files without the external find binary by @trek-e in #5355
- fix(#4817): the stale diagnostic names a phase artifact the report never covered by @trek-e in #5357
- fix(#4824): phase.complete writes Status/Current Plan/Stopped at from the next phase's disk state by @trek-e in #5358
- fix(#4857): verification status names the covered files that moved by @trek-e in #5361
- fix(#4860): the Claude plugin registers each workflow once, through skills/ by @trek-e in #5362
- fix(#4854): init verbs emit the ROADMAP display name, not the directory slug by @trek-e in #5363
- fix(#4985): statusline meter reads 100% where Claude Code auto-compacts, and the full window when auto-compact is off by @0xdhx in #5252
- fix(#4859): runtime-generated guidance names the registered command form by @trek-e in #5372
- fix(#5387): bump proxy-addr to 2.0.8 to clear critical GHSA-jqcg-44mw-7w3h by @trek-e in #5386
- fix(#4840): register the context monitor only on hosts that install a metrics writer by @trek-e in #5389
- fix(#4838): the Codex Windows hook shim resolves node when the hook fires by @trek-e in #5405
Full Changelog: v1.16.0...v1.17.0