v1.7.0

What's Changed

• scoop manifest: agentflare 1.6.0 by @getappz in #286
• fix(search): rivalsearch param name + store FTS query sanitization by @getappz in #288
• feat: bound artifact version history and audit log growth by @getappz in #289
• fix: v1.6.0 verification bugs — opencode filePath guard hole, search web/store arms by @getappz in #287
• feat(skill-detect): intent-to-skill injection + skill install CLI (#231, #233) by @getappz in #290
• fix(hook): close branch-guard bypasses for bare filenames, new dirs, missing path fields by @getappz in #291
• feat(flare-code): regex pre-filter for ponytail over-engineering checks by @getappz in #293
• refactor(flare-code): rename ponytail_engineering_check_internal to over_engineering_check_internal by @getappz in #300
• feat(dev-install): build and install PATH shims alongside the main binary by @getappz in #301
• feat(claims): auto-release claim on cross-agent reassignment by @getappz in #296
• feat: agentflare-jobs crate — background job queue + process supervisor for agent CLIs by @getappz in #298
• refactor(skill-registry): decouple agent-registry dependency by @getappz in #297
• feat(worktree): share sccache across worktrees when available (#133) by @getappz in #299
• feat(skill-registry): skill routing/management epic — FTS5, negation, bandit ranking, pack/hub lifecycle by @getappz in #302
• feat(git-shim): path-scope enforcement for claims (QuorumGit adoption) by @getappz in #303
• feat(git): worktree orphan audit + fix git_binary shims-dir self-deny by @getappz in #304
• feat: flare doctor — claim-worktree health sweep + safe reclaim (#235) by @getappz in #305
• fix(flare-code): case-insensitive + SQL-style SPDX in pre_filter noise patterns by @getappz in #307
• chore: tune .coderabbit.yaml to reduce review rate-limit hits by @getappz in #309
• fix: resilient worktree removal on Windows file-lock (#302) by @getappz in #308
• feat(flare-code): close 3 ponytail parity gaps by @getappz in #310
• feat(flare-code): restyle statusline badge to Claude Code native hint style by @getappz in #311
• feat(git-shim): deny pushing the default branch (PR-only enforcement) by @getappz in #312
• fix(flare-git-core): name touched trust-root paths in push deny message by @getappz in #313
• fix(release): use plain tag ref for SLSA provenance reusable workflow by @getappz in #314
• feat(git-shim): only block trust-root pushes to the default branch by @getappz in #317
• feat: on-demand third-party docs — flare-docs crate + flare_docs MCP tool + agentflare docs CLI by @getappz in #316
• fix(release): use plain tag ref for SLSA provenance reusable workflow by @getappz in #315
• fix(item): surface worktree creation failure reason in claim response by @getappz in #318
• refactor(mcp): split skill tool handler into its own module by @getappz in #319
• fix(git-shim): scope all classify.rs denials to agentflare-tracked projects by @getappz in #320
• fix(worktree): reuse an existing branch that owns no worktree instead of failing by @getappz in #321
• fix(worktree): clear genuine ACL denials on orphaned worktree cleanup by @getappz in #322
• feat: cover the shell layer in agentflare init (bashenv guard, opencode branch-guard, config split) by @getappz in #324
• feat(init): manage a flare-docs usage rule + add agentflare doctor by @getappz in #325
• fix(worktree): never let doctor reclaim delete the main worktree by @getappz in #327
• fix(item): don't open a redundant PR when item done runs after the PR already merged by @getappz in #329
• chore: apply ponytail-audit findings (9 unused deps + 11 dead functions) by @getappz in #330
• feat: migrate artifact storage onto agentflare-store documents+blobs + vent: origin routing, throttle, batched filing, judge-prompt hook by @getappz in #331
• feat(flare-docs): index per-item rustdoc docs, not just the crate overview by @getappz in #323
• feat: retire OpenResearch, fold 17-source search into flare_search by @getappz in #326
• Guard agentflare db files from agent deletion + fix artifact store history tracking by @getappz in #335
• feat: unified config.toml git-shim policy slice (#331) by @getappz in #336
• fix: flare-docs stale-item reconciliation + doc history-skip check by @getappz in #337
• fix: vent tag union + flare-docs fetch-outcome observability by @getappz in #338
• feat(flare-docs): npm/TypeScript ecosystem support; rename tool to docs by @getappz in #342
• fix(store): release blob refs when documents are deleted by @getappz in #343
• fix(flare-docs): caller-vs-service error mapping, search limit cap, non-blocking-fetch test by @getappz in #344
• fix(docs): stop list returning every cached document in full by @getappz in #345
• fix(store): dedup documents before creating the unique index by @getappz in #346
• refactor(store): drive every FTS5 index from triggers, not hand-written sync by @getappz in #347
• feat(store): bound the docs cache with retention, eviction, and page reclaim by @getappz in #348
• ci: cut the Windows build's redundant pass, Defender scanning, and PDB cost by @getappz in #349
• ci: drop the Windows Defender exclusion step, it bought nothing by @getappz in #350
• fix(store): give each db its own blob dir so GC cannot delete a neighbour's content by @getappz in #351
• feat(store): sweep to reclaim orphaned legacy shared blobs by @getappz in #353
• feat(components): auto-enforce core-module usage via init/SessionStart by @getappz in #352
• feat(skill): finish EPIC #272 — Task 6 snooze/dismiss write-path + Task 9 provisioning by @getappz in #354
• feat(flare-proxy): request-optimization short-circuits for CLI bookkeeping calls by @getappz in #355
• fix(asset): close staging symlink/TOCTOU bypass, log swallowed blob-reclaim errors by @getappz in #357
• feat(flare-docs): Python ecosystem, README usage examples, and the docs site by @getappz in #356
• feat(git): warn when editing on a branch stale vs origin/default by @getappz in #360
• fix(mcp): default-limit and paginate item(list) by @getappz in #358
• fix(flare-git-shim): reset recursion depth before exec'ing real git by @getappz in #359
• fix(flare_git): validate action before repo/client setup; resolve default branch via API by @getappz in #363
• feat: repo-local verify gate + pr_wait primitive (#118) by @getappz in #362
• feat: shared nudge-pacing primitive for coaching rules + PostToolUseFailure hook by @getappz in #364
• feat(git-shim): CI paths in trust-root baseline + /flare:git slash command by @getappz in #367
• feat(handoff): verified continuation commit, structured payload, duplicate-item reuse, assignee freeze by @getappz in #365
• feat(components): core-module auto-enforcement, docs-site, flare-docs Python/npm examples, coaching MANDATORY tier by @getappz in #361
• fix(coaching): stop usetsearch blocking every native ToolSearch call by @getappz in #368
• fix(dashboard): log DB errors, validate cost by=, gate non-local bind, add HTTP tests by @getappz in #369
• feat(vault): add flare-vault crate + adopt for gateway secrets/channel tokens/GitHub auth by @getappz in #370
• chore(release): agentflare v1.7.0 by @getappz in #371

Full Changelog: v1.6.0...v1.7.0