open-gsd/gsd-core v1.4.0-rc.2 on GitHub

Install

This pre-release is published to npm under the next dist-tag.

npm i @opengsd/gsd-core@1.4.0-rc.2
# or
npm i @opengsd/gsd-core@next

What's Changed

Feature

feat(#656): Research module — content-addressed cache + provider seam + registry-API legitimacy by @trek-e in #664
feat(#717): re-base workflow size budget on bytes + document quality rationale by @trek-e in #719
feat(#159): auto-use existing RESEARCH.md in /gsd:plan-phase --research-phase by @trek-e in #718
feat(#703): add --granularity override flag to /gsd:plan-phase by @trek-e in #750
feat(#25): scope gsd-verifier Step 7b to enumerate-or-single-test; forbid full-suite re-runs by @trek-e in #753
feat(#52): add agent_skills_security.trusted_global_roots allowlist for global skills by @trek-e in #754
feat(#759): non-destructive CHANGELOG preview in the rc release job by @trek-e in #763
feat(#761): scheduled base-context sweep to close SHA-branch-evading draft PRs by @trek-e in #765
feat(#764): skip cross-platform test matrix for docs-only and inert-CI PRs by @trek-e in #798
feat(#766): distribute gsd-core as a native Claude Code plugin by @trek-e in #797
feat(#786): elevate GitHub Copilot installer — lifecycle hook + AGENTS.md by @trek-e in #804
feat(#785): write .cursor/commands/ Cursor 1.6 slash-command surface by @trek-e in #805
feat(#787): elevate Cline — .clinerules/ dir form, PreToolUse hook, AGENTS.md by @trek-e in #803
feat(#788): expand Qwen Code hook-event coverage by @trek-e in #807
feat(#790): emit Augment slash commands by @trek-e in #808
feat(#773): add --ephemeral and --dangerously-bypass-hook-trust to automated codex exec wrappers by @trek-e in #824
feat(#775): ship a gemini-extension.json extension package for one-step Gemini install by @trek-e in #818
feat(#768): pre-populate settings.json permissions.allow/deny for Claude Code by @trek-e in #819
feat(#774): emit service_tier/model_verbosity in Codex agent TOML + agents/openai.yaml skill chip by @trek-e in #828
feat(#769): adopt context:fork + effort on heavy workflow skills by @trek-e in #820
feat(#772): adopt stable Codex hook events + commandWindows for Windows parity by @trek-e in #827
feat(#778): cross-runtime command enrichment (Gemini {{args}}/!{}, Qwen priority) by @trek-e in #825
feat(#789): elevate CodeBuddy — slash commands by @trek-e in #830
feat(#776): Gemini hook events (BeforeAgent/AfterAgent/BeforeModel) + hooksConfig.enabled check by @trek-e in #829
feat(#777): register Cursor-native hooks (.cursor/hooks.json) for session-start/post-tool parity by @trek-e in #831
feat(#815): add /gsd-update --next to install the @next RC channel by @trek-e in #839
feat(#836): no-LLM duplicate-issue detection + challenge + 1-day auto-close by @trek-e in #843
feat(#770): register Claude Code lifecycle hooks (SubagentStop/Stop/PreCompact/FileChanged) by @trek-e in #821

Enhancement

docs: promote README/branding fixes from next to main by @trek-e in #540
[codex] docs: promote README version cleanup to main by @jeremymcs in #545
docs(#546): promote changelog update to main by @jeremymcs in #548
chore: merge release v1.3.0 to main by @trek-e in #662
chore: back-merge main into next after v1.3.0 release by @trek-e in #671
chore(#660): bump next to 1.3.1-dev.0 (-dev stream per ADR 660) by @trek-e in #672
ci(#660): scoped GSD_BOT_PR_TOKEN for backmerge & release merge-back PR creation by @trek-e in #673
chore: merge hotfix v1.3.1 back to main by @trek-e in #681
chore: back-merge main (v1.3.1 hotfix) to next + hono advisory bump by @trek-e in #682
chore: back-merge main → next (051588f, #690 CHANGELOG fast-track) by @trek-e in #697
chore: back-merge main → next (3e0578a) by @trek-e in #701
chore(release): archive 463 shipped changeset fragments before wiring render (#690 follow-up) by @trek-e in #714
chore(release): wire CHANGELOG render into release finalize job (#690 follow-up) by @trek-e in #715
docs(#695): document --only and --text flags for /gsd-autonomous by @trek-e in #716
chore: clean up clear-cut ESLint warnings (#732) by @trek-e in #734
chore(lint): justify intentional no-control-regex (ANSI strip) + ratchet to error by @trek-e in #737
chore(lint): eliminate magic-sleep test warnings + ratchet rules to error by @trek-e in #735
refactor(scripts): replace process.exit() with ExitError + runMain handler (part 1 of #738) by @trek-e in #740
refactor(bin): replace process.exit() in CLI entrypoints + ratchet n/no-process-exit to error (part 2 of #738) by @trek-e in #741
refactor(#720): lazy-load MVP-only reference bodies on non-MVP runs by @trek-e in #746
refactor(#712): replace Codex slash-command denylist lookbehind with positive-boundary match by @trek-e in #747
refactor(#651): consolidate verification-status routing into one queryable seam by @trek-e in #755
docs(#58): add ADR for Runtime Install Policy Module boundary by @trek-e in #762
test(#339): regression guard for gsd-sdk refs in runtime surfaces by @jslitzkerttcu in #691
refactor(#60): make runtime config adapter registry explicit by @trek-e in #795
refactor(#56): retire legacy runtime directory helpers into runtime-homes projection by @trek-e in #802
enhancement(#782): emit gsd skills to ~/.cline/skills for Cline >= v3.48 by @trek-e in #809
enh(#784): emit native skills for OpenCode + Kilo runtimes by @trek-e in #810
chore(#771): convert agent color: hex/magenta values to documented named colors by @trek-e in #823
docs(#832): add how-to guide for minimal install / skill profiles by @trek-e in #835

Fix

fix(#663): resolve open CodeQL/Dependabot security alerts (ReDoS, prototype pollution, workflow perms, qs DoS) by @trek-e in #665
fix: accept published installer migration checksums by @Solvely-Colin in #674
fix(#670): tolerate installer-migration checksum drift on upgrade by @trek-e in #675
fix(#676): consolidate hotfix into release.yml (delete standalone hotfix workflow) by @trek-e in #678
fix(#676): update tests/docs referencing deleted hotfix.yml by @trek-e in #680
fix(#690): promote CHANGELOG 1.3.x + gate release-notes promotion by @trek-e in #694
fix(#690): backfill CHANGELOG 1.3.x on main for /gsd:update preview by @trek-e in #696
fix(#698): make auto-backmerge main→next actually land (admin-merge via PAT) by @trek-e in #699
fix(#698): sync main's auto-backmerge.yml to next (hardened admin-merge + scoped PAT) by @trek-e in #700
fix(#637): route 3 more workflows through gsd_run launcher (hardcoded $HOME sweep) by @jslitzkerttcu in #642
fix(#705): route hardcoded $HOME gsd-tools invocations in agents/commands through gsd_run by @trek-e in #707
fix(#685): set windowsHide on all Windows child-process spawns by @trek-e in #688
fix(#687): cap agy -p with a hard wall-clock timeout (no indefinite hang) by @trek-e in #689
fix(#669): /gsd-review --cursor actually invokes cursor-agent by @trek-e in #686
fix(#704): exclude } and ) from Codex path-rewrite lookbehind (no literal $gsd-core in installs) by @trek-e in #710
fix(#706): skip rescue of already-committed SUMMARY to avoid worktree cleanup merge_failed by @trek-e in #709
fix(#730): scope current-milestone Phase Details section in roadmap parser by @trek-e in #748
fix(#683): auto-degrade phase execution to sequential on worktree base mismatch by @trek-e in #749
fix(#751): recognise config-set prototype-pollution guard in CodeQL + test dynamic-key vectors by @trek-e in #752
fix(#758): trigger draft-PR auto-close on pull_request_target by @trek-e in #760
fix(ci): repair Discord release changelog announcements by @Solvely-Colin in #780
fix(#783): resolve Kilo global skills base to ~/.kilo/skills by @trek-e in #806
fix(#812): honor COPILOT_HOME in Copilot global config-dir resolution by @trek-e in #814
fix(#813): apply per-runtime skill path rewrites in applySurface by @trek-e in #817
fix(#816): mirror install command-prefix handling in _syncGsdDir by @trek-e in #822
fix(#837): three-dot diff in ci-test-scope so docs-only PRs skip the heavy matrix by @trek-e in #841
fix(#844): sync runtime manifest versions on npm version bump by @trek-e in #845

Full Changelog: v1.3.1...v1.4.0-rc.2