v1.19.0

1.19.0 (2026-09-18)

Features

• cli: accept local paths in prs skills add (828d566), closes #457
• cli: add resource-only compile and global output safety (f84d731)
• compiler: pass external content roots to validator (d937597)
• core: add @agents field capability matrix (9863fb8)
• core: add validation.scanExternalContent option (20f3df4)
• core: classify opencode plugin hooks as native (6ced3cb)
• core: constrain output.resources to resource kinds (c252c85)
• formatters: add gitlab-duo target (8527181), closes #460
• formatters: generate opencode lifecycle plugin from @hooks (fa9e03a)
• formatters: warn when @agents fields are dropped by a target (29342e5)
• playground: match opencode plugin outputs (9e1ef82)

Bug Fixes

• cli: clarify AI migration next steps (ce2a4cd)
• cli: harden local skills add after review (4de4010)
• cli: honor output.resources behind empty flag default (9f35e8e)
• cli: rewrite tmp paths in remote skill messages (d035044)
• core: classify relocated skill outputs as skills (abd8af6)
• core: harden resource classification and matrix validation (48c7fa6)
• core: keep KNOWN_TARGETS literal for exhaustiveness (3287b66)
• formatters: gate multifile skills behind skillsInMultifile (10cb337)
• formatters: harden opencode hook runtime (ef159e3)
• formatters: keep agent warnings and codex mcp names (b7c0f52)
• formatters: preserve imported root skill paths (2f4d4da)
• formatters: quote dotted mcp server names in codex TOML (65572c0)
• playground: filter outputs by formatter ownership (cd04cd2)
• resolver: add sparse registry clones and configurable timeout (734c3e1)
• resolver: address CodeRabbit review on sparse clone cone handling (dcde8cb)
• resolver: carry real source paths in synthesized skill nodes (08814ca)
• resolver: improve skill metadata diagnostics (48f7ead), closes #444
• validator: make PS012 and PS026 traceable on imported skills (28d2466)
• validator: require biological context for amino-acid exemption (db09f1a)