v1.23.0

1.23.0 (2026-10-27)

Features

• cli: add prs approve (#606) (ba7cddd)
• cli: add prs fmt to format .prs files with the printer (#559) (ac1f3aa)
• cli: add prs release build, promote, rollback and status (#592) (66741d0)
• cli: check release labels against a base ref (#607) (acd65b7)
• cli: enforce governance gates on release promote (#623) (69dcb0f), closes #587
• cli: generate CODEOWNERS from governance (#612) (e340d0f)
• cli: read the system config under the user config (#545) (114e0d0)
• cli: support extends in promptscript.yaml (#547) (503e176)
• core: add eval types, schemas and model pricing (#588) (1c32f43)
• core: add governance config and approval record types (#596) (9621602)
• core: add prompt bundle contracts and conformance vectors (#567) (0484384)
• core: add release config, label schema and render vectors (#584) (849e6c5)
• eval: add the eval package with datasets, suites and assertions (#599) (0e4d3c4)
• eval: run suites against providers with a replay cache (#609) (a9d6c62)
• formatters: add bundle and prompt-text targets for prompts (#573) (f66b3fa)
• parser: keep blank lines and wrap arrays in the printer (#566) (c8e7854)
• playground: preview prompt bundles and add prompt examples (#576) (0ac7c05)
• runtime: add a Node example that renders the prod label (#613) (a04b3a9)
• runtime: add the prompt runtime package (#595) (1b26021)
• validator: add the prompts block with slot validation (#569) (30158c1)
• validator: evaluate governance policies on prompts (#604) (c4979df)

Bug Fixes

• cli: drop temperature from the application prompt examples (#583) (611ba7c)
• cli: keep base policies under extends, never skip them in check (#586) (ff8e75e)
• cli: resolve registry aliases from the user config (#544) (2caf19b)
• core: refuse reserved keys in deepMerge (#618) (b8741e9), closes #597
• parser: decode string escapes in a single pass (#615) (417fba6)
• playground: show every file a target emitted in its output tab (#632) (965305e)
• resolver: make the layer-boundary policy fire (#548) (0aba86b)
• runtime: harden the prompt client cache, callbacks and options (#598) (67bb864)
• runtime: refuse files with a BOM or behind a link like the CLI (#619) (c24129b), closes #611
• server: restrict file routes to source globs (#542) (12d8c72)
• validator: scan text under resources keys outside @skills (#562) (2faa2d4)
• validator: skip resolver metadata in the content scans (#610) (c095ad9)