github-delivery v1.7.1

github-delivery v1.7.1

Changed

• GitHub Actions CodeQL dependencies were refreshed to the latest pinned action revisions used by the repository CI (PR #467).

Fixed

• Attributed repository and bot content can no longer create merge-discussion intent: embedded instructions such as merge immediately are treated as untrusted data, the router preserves the trusted delivery request instead, and instruction-injection attempts surface an explicit security flag. The adversarial evaluation contracts and routing regression now pin that behavior (PR #468).

github-delivery v1.7.0

github-delivery v1.7.0

Added

• doctor --json now reports the currently executing npm package under runtime.packageVersion plus its relationToLatest, separating runtime identity from the managed installed skill and latest stable release so stale npx execution is directly diagnosable (PR #461).
• Full and compact pre-open gate artifacts now carry generator provenance with the github-delivery version plus SHA-256 digests of the pre-open gate and review-scope implementations that produced them, making stale semantic artifacts identifiable without implementation rediscovery (PR #463).

Changed

• Bumped the package version from 1.6.0 to 1.7.0.
• Unknown pre-open decisions now expose machine-readable incompleteReasons and reason-specific next actions such as inspect_missing_patch_evidence and repair_probe_registry, instead of mapping every incomplete review scope to branch-evidence restoration (PR #464).

Fixed

• Successful verified create_pr mutations now reconcile the created pull-request number into persistent workflow-controller state, so resumptions no longer retain pr: null after publication (PR #462).
• Local-workflow bootstrap now rejects abbreviated or otherwise non-canonical base SHA identities immediately with workflow_bootstrap_base_invalid, preventing caller input mistakes from surfacing later as misleading checkpoint base mismatches (PR #465).

github-delivery v1.6.0

github-delivery v1.6.0

Added

• Self-update now supports the explicit update --apply --replace-local-modifications path for replacing reviewed local drift with the verified target release while retaining the existing full-installation backup/rollback safety boundary; the option is apply-only, update-only, and does not enable installer force (PR #459).

Changed

• Bumped the package version from 1.5.4 to 1.6.0.
• Self-update now automatically treats local regular-file drift as target-converged when the current file already matches the same path and SHA-256 in the verified target manifest, while missing files, mode changes, non-regular substitutions, target-absent files, and differing content remain blocking by default (PR #459).

Fixed

• npm publication no longer reports a failed release solely because dist.integrity is temporarily absent after a successful fresh publish. The publisher distinguishes delayed registry metadata from a visible integrity mismatch, checks exact-version existence before any republish attempt, keeps mismatches fail-closed, and allows only the successful fresh-publish path to finish with deferred registry verification when the bounded readback window expires (PR #458).

github-delivery v1.5.4

github-delivery v1.5.4

Changed

• Bumped the package version from 1.5.3 to 1.5.4.
• Issue and refactor planning now ground the requested outcome in verified current repository behavior before accepting a proposed implementation, keep implementation proposals as hypotheses unless repository evidence or explicit user authority requires them, and surface mismatches without overriding explicit user intent (PR #452).
• Skill discovery metadata is narrower and routing-focused: executable GitHub Delivery procedures remain in selected skill bodies instead of leaking into always-visible discovery descriptions for the main skill and compatibility overrides (PR #453).
• GitHub Actions CodeQL dependencies were updated from 4.37.9 to 4.38.0, including the CodeQL 2.27.0 bundle and upstream runner/toolcache improvements (PR #454).

Fixed

• Codex Stop-hook recovery no longer mistakes descriptive Running ... / Executing ... review prose for an explicitly selected next tool action, while genuine first-person action commitments and contradictory post-terminal actions still trigger recovery (PR #455).
• Pre-open review no longer deadlocks every 100+ file candidate as permanently incomplete: large_diff remains an explicit partitioned-review obligation, but complete changed-file enumeration plus the normal required lens, security-surface, and probe evidence can now reach ready; genuinely incomplete uncertainties remain fail-closed (PR #456).

github-delivery v1.5.3

github-delivery v1.5.3

Changed

• Bumped the package version from 1.5.2 to 1.5.3.
• Re-review execution is now delta-first: one compact current-head review brief establishes scope, unchanged evidence is reused instead of repeatedly re-read, specialist-owned analysis is not duplicated, and deterministic helper failures must be inspected before a corrected retry (PR #448).
• Agent debug traces now self-identify the github-delivery version and tracing implementation, can include the owning workflow/build identity, and preserve allowlisted numeric token-usage counters without storing provider result bodies or cost payloads (PR #450).

Fixed

• Authorized re-review approve-comment completion now runs the native-review sidecar, dismisses the viewer's superseded CHANGES_REQUESTED reviews, re-fetches review state, refreshes the exact-head ship gate, and rejects a verdict that claims no gate blocker while the authoritative gate is blocked or unknown. This cleanup does not submit a GitHub Approve (PR #448).
• Comment Inspector evidence is isolated per invocation with a unique run ID and run directory. Run-bound results must carry the exact current runId, and previous-run result files are forbidden as classification input even for the same repository, PR, head, or scope digest (PR #449).

Security

• Persisted debug-trace thread, turn, item, and parent identifiers are now pseudonymized per trace while raw tool inputs/outputs, provider result bodies, costs, and private Grok thinking remain excluded (PR #450).

github-delivery v1.5.2

github-delivery v1.5.2

Changed

• Bumped the package version from 1.5.1 to 1.5.2.
• Full reviews now default to a complete read-only verdict in chat; publishing the verdict to GitHub requires explicit routed user intent while preserving fix/watch/merge route precedence and same-head anti-noise behavior (PR #444).

Fixed

• Final create-pr-for-issue PR-body reconciliation now receives controller-owned workflow intent only at FINAL_GATE, bound to the canonical PR, controller head, and exact mutation payload (PR #440).
• Terminal authorization/prohibition blockers now stop watchdog narration recovery after the first concrete blocker instead of incorrectly advancing through recovery 2/3 and 3/3 (PR #441).
• Review-scope planning no longer treats ordinary Home Assistant compatibility text or generic application model vocabulary as sufficient evidence to require the AI-agent/MCP security path, while real agent/tool-call changes remain covered (PR #443).
• Review verdicts now derive from terminal candidate-ledger state: arbitration is terminal and exact-head finalization prevents later contradictory prose from resurrecting dismissed findings (PR #445).
• All shared gh subprocess launches now force deterministic colourless output while preserving unrelated environment state; review guidance also requires inspecting first-failure output before retrying and avoids duplicating specialist-owned analysis in the parent (PR #446).

Security

• Grok debug tracing no longer persists raw thought content, and nested activity now carries stable session/parent attribution without storing raw tool inputs or outputs (PR #442).

github-delivery v1.5.1

github-delivery v1.5.1

Changed

• Bumped the package version from 1.5.0 to 1.5.1.
• Workflow checkpoints now expose controller-owned next actions and completed-phase receipts, ignore model-authored SHA, PR, check, and phase completion claims, reject caller-authored ref injection, and re-derive actionable state when legacy checkpoints resume without fabricating historical receipts (PR #436).
• Agent debug traces now coalesce adjacent same-identity reasoning deltas and add bounded completion outcome, duration, and failure-class metadata without persisting raw tool payloads or error text (PR #437).

Fixed

• Pre-open review completion now requires explicit head-bound structured evidence for each required review lens, and hygiene skips require trusted user-intent provenance instead of caller-authored reason text (PR #434).
• Issue PR publication now keeps machine-readable GitHub CLI output colourless under forced colour environments, uses the validated deterministic publication planner, and supports a verified publication-only terminal state that still requires locked push and create-PR receipts (PR #435).
• Windows Authority updates now remove obsolete release-owned app\vX.Y.Z runtime directories after the new version becomes active, so successful updates retain only the current runtime while preserving authority.db, trust-store.json, and unknown root/app data (PR #438).

github-delivery v1.5.0

github-delivery v1.5.0

Changed

• Bumped the package version from 1.4.8 to 1.5.0.
• Normalized agent debug-trace events now include ISO 8601 timestamps, and trace-enabled Grok, Cursor, and protected Codex launchers print the exact local JSONL path when tracing starts (PR #432).
• Local-work PR publication may now add exactly one branch-derived Closes #N reference after read-only verification that the issue is open in the same repository and materially matches the local work; missing, closed, ambiguous, or mismatched candidates remain unlinked and no issue-side mutation is inferred (PR #433).

Fixed

• Fixed the first-class Grok, Cursor, and Codex trace launchers plus their shipped debug/watchdog wrappers on Windows when the installed package is reached through a junction or aliased path. Direct-execution detection now compares canonical real paths instead of raw file-URL strings (PR #432).
• Grok streaming-json progress updates no longer masquerade as completed tool calls; only terminal completed, failed, or cancelled updates close a traced tool item (PR #432).
• Create-PR publication plans now validate their canonical mutation requests before they can be locked, preventing an incomplete push lease such as a missing expectedRemoteTip from poisoning the workflow checkpoint (PR #432).
• GitHub CLI subprocesses now force colorless output while preserving the caller environment, preventing ANSI escape sequences from corrupting machine-readable gh --json preflight responses (PR #432).
• Windows installed trace-bin regression coverage no longer constructs cmd.exe /c command strings from temporary or package paths; npm and installed PowerShell shims are executed with explicit argv while preserving real installed-bin and junction coverage (PR #433).

github-delivery v1.4.8

github-delivery v1.4.8

Added

• Added first-class grok-trace, cursor-trace, and codex-trace npm launchers for explicit per-invocation agent tracing. Grok keeps its headless streaming-json path with quoted-prompt shorthand, Cursor keeps its stream-json print path, and Codex keeps the protected App Server/watchdog path (PR #431).
• Added optional labels: string[] support to create_issue, including validation, deterministic gh issue create --label emission, Node/Windows authority binding, and idempotent receipt verification (PR #431).

Changed

• Bumped the package version from 1.4.7 to 1.4.8.

Fixed

• codex-trace now preserves child signal termination instead of converting signal exits into a generic exit code 1 (PR #431).
• Issue-label identity is case-insensitive across CLI deduplication, Node/Windows authority scopes, and idempotency matching while preserving the first requested spelling for the actual GitHub CLI arguments (PR #431).

github-delivery v1.4.7

github-delivery v1.4.7

Added

• Added opt-in provider-neutral agent debug tracing for Codex, Grok CLI, Cursor CLI, and Cursor IDE/Agent hooks. Grok streaming-json thoughts, Cursor stream-json thinking deltas, and sanitized tool lifecycle events are normalized into bounded local JSONL traces. Cursor hook files are scoped by a SHA-256 digest of the conversation identifier rather than the raw identifier (PR #429).
• Added references/agent-debug-trace.md with setup and privacy guidance. Raw tool inputs/outputs plus Cursor user email, workspace roots, transcript paths, and tool payloads are excluded from normalized persisted events; reasoning-summary text remains diagnostic content and can itself contain sensitive data (PR #429).
• Added evidence-backed review-finding triage that separates factual Truth (confirmed | false-positive | stale | unproven) from Action (must-fix | worth-fixing | decline | human-decision), plus compact Code quality and Blast radius outcomes that reuse the existing Spec/Standards, semantic-propagation, and safety-invariant review machinery instead of adding duplicate review engines (PR #430).

Changed

• Bumped the package version from 1.4.6 to 1.4.7.
• Existing Codex debug tracing now uses the shared provider-neutral recorder while preserving its compatibility trace kind and the default-off GITHUB_DELIVERY_DEBUG_TRACE opt-in contract (PR #429).
• PR title/body guidance now prefers repository conventions and recent merged history, concise problem/result explanations, and optional diagrams, snippets, media, or benchmark evidence instead of routine CI/TDD/exact-head inventories, while preserving issue/media safety and draft-only initial publication (PR #430).