v4.6.0
Minor Changes
- 1M context hard gate (AGNT_037): enabling a
[1m]model variant orcontext-1mbeta header without explicit"context1M": { "allow1M": true }in.thesmos/config.jsonnow blocks the governance hook and fails CI as a BLOCKER, instead of only warning. Scoped to live config contexts — does not fire on docs/prose. - Native Claude Code plugin: install via
/plugin marketplace add Holley-Studio/thesmos-governance— registers the MCP server, governance hooks, and scan/review/advise skills with no separatenpm install. - Power Tiers: new
power: 'lean' | 'god'config.lean(default) is one specialist + a one-line header;godunlocks full council ceremony.thesmos advisenow assigns a model recommendation per plan phase. - Rule tiering: the free CLI runs a 289-rule Essentials set (every BLOCKER + the full AI-code safety net); the remaining 848 rules unlock via a distribution-gated premium pack or
config.tier/THESMOS_TIER. Newthesmos tiercommand reports the active tier.
Patch Changes
claude:govern checknow writes block messages to stderr so Claude Code actually displays them (blocking hooks only surface stderr on exit 2). Ships with the already-fixed VIBE_007 placeholder and VIBE_009 JSX<select>false positives.- Linux secrets vault (
secret-tool) now pipes the master key via real stdin instead of an intermediate shell process that briefly exposed it in argv. Documented, but could not eliminate, a narrower local-only equivalent on macOS (Apple'ssecurityCLI has no safe alternative to-w).
Full Changelog: v4.5.0...v4.6.0