v4.5.2

Full Changelog: v4.5.1...v4.5.2

v4.5.1

What's Changed

• chore(deps): bump hashgraph-online/ai-plugin-scanner-action from 1.2.678 to 1.2.693 by @dependabot[bot] in #5

Full Changelog: v4.5.0...v4.5.1

v4.5.0

Full Changelog: v4.4.1...v4.5.0

v4.4.1

Full Changelog: v4.4.0...v4.4.1

v4.4.0

Summary

• Handoff schemas support both schema_version 1.1 and 1.2, with stricter validation for baseline captures (before implementation only), stale HEAD rejection in DriftReports during IMPLEMENTING, and improved nexus run Git HEAD capture.
• Persistence failure handling for symlink boundaries in baseline and verification flows.
• Reviewer prompts include optional verification check categories; expanded tests for baseline transitions and related behavior (485 tests).

Test plan

• npm test (485 tests)

v4.3.9

Summary

• Unified test entry point via nexus-test-runner.js and updated npm test script.
• Cross-platform path identity: samePath in worktree handling, executable resolution improvements, and verification-provider fixes.
• CI hardening: required-jobs gate in the main workflow and clearer plugin-security-scan job naming.
• Expanded tests for worktree paths, test launcher, and verification provider (473 tests).

Test plan

• npm test (473 tests)

v4.3.8

Summary

• Workspace integrity now accepts internal runtime symlinks (for example those created by package managers) while still failing closed on external or dangling links.
• Repository hardening for the HOL plugin scanner: ignore generated temp/ artifacts, add SECURITY.md, Dependabot, and a plugin-security-scan workflow.
• GitHub Actions updates: actions/checkout 7.0.1, actions/setup-node 7.0.0, and the latest HOL plugin scanner action.

Test plan

• npm test (463 tests)

v4.3.7

Summary

• Verification repair lifecycle: eligible verification failures can trigger automatic repair; non-repairable failures require manual reconciliation, with clearer docs and state transitions.
• Enhanced installation and uninstallation (install.sh / uninstall.sh) for more reliable setup and teardown.
• Expanded tests around verification repair, git dirty paths, and workspace integrity.

Test plan

• npm test (460 tests)

v4.3.6

Summary

• Fail-closed filesystem boundary checks (lexical + canonical containment, symlink rejection) across runtime I/O, impact, verification, and worktrees.
• Workspace integrity measurement for non-runtime source: digests sealed at final verification and re-checked on COMPLETED.
• Tighter review-package binding, canonical plan authority, and expanded gate/authority tests.

Test plan

• npm test (437 tests)

4.3.5

What's new

Execution unit contract (plan-check)

• Plans must declare user_outcome, independently_shippable, review_boundary, and estimated_lines on every execution unit.
• nexus plan-check validates and normalizes these fields; writing-plans and agent prompts updated to match.

Review lifecycle and evidence binding

• Task reviews stay bound to prior approvals; final review reuses task evidence only when review boundaries and commit ranges allow it.
• review-package helpers and state-machine gates enforce digest binding and reviewer identity checks.

Plugin and CLI hardening

• Nexus plugin adds context validation before dispatch.
• nexus next / next-action guidance improved for blocked runs and verification states.

Docs and tests

• README, workflow docs, and orchestrator/implementer/reviewer/plan-advisor prompts aligned with the V5 execution-unit model.
• Expanded plan-check, review-package, state-machine, and e2e CLI coverage.

Upgrade

npm install -g @mohammad154/opencode-nexus@4.3.5
nexus install

Then restart OpenCode.