v4.17.0

4.17.0 (2026-05-26)

Features

• catalog: add region language metadata (#2311) (205c0ac)
• cli: add MCP generate overrides (#2245) (d522d5f)
• cli: add per-endpoint role gates (#2314) (a255eb1)
• cli: add WebSocket streaming sync scaffold (#2244) (f20cbad)
• cli: emit novel feature command stubs (#2302) (2bb2c4a)
• skills: add raw docs fetch helper (#2295) (f67ad83)

Bug Fixes

• ci: add generated output compile gate (#2319) (fc04a3e)
• cli: accept accounted phase5 skips in gate (#2232) (1771a27)
• cli: accept LAN-only phase5 skips (#2264) (d55da88)
• cli: accept Windows staged live-check binaries (#2250) (9783acd)
• cli: apply research canonical auth env vars (#2298) (6ee70c9)
• cli: backfill publish printer attribution (#2233) (dc19c7c)
• cli: derive header sibling auth env vars (#2254) (5488950)
• cli: detect unsafe chrome impersonation (#2253) (91cd511)
• cli: emit extractResponseData helper only for envelope-shaped responses (#2257) (591d9e7), closes #1345
• cli: make agentcookie soft + stop publishing plans (#2333) (d0b7578)
• cli: narrow pii-audit fixture scope (#2246) (b94ec3b)
• cli: print help on empty invocation of required-input commands (#2243) (0a469f3), closes #1289
• cli: recognize slice/map/typed pflag variants in verify-skill flag scanner (#2222) (bf6a610), closes #1255
• cli: reject invalid enum flag values with the valid set (#2255) (4f8a53c), closes #1139
• cli: render skill anti-triggers from research (#2306) (72ffcd7)
• cli: run publish govulncheck with module toolchain (#2238) (ee5e1be)
• cli: send in:cookie security credential as cookie not header (#2239) (b0b19ce), closes #981
• cli: shape-aware auth-status env var placeholders (#2242) (993a409), closes #1329
• cli: short-circuit oauth2 auth login under verify env (#2223) (0b6279a), closes #1059
• cli: skip auth-flow inputs as bearer tokens (#2247) (bfd4428)
• cli: skip promotion when body exceeds the flag-depth cap (#2258) (061aab8), closes #1520
• cli: strip =value suffix from --flag=value tokens in verify-skill recipe parser (#2256) (72137f9), closes #1316
• cli: sync narrative value props during dogfood (#2292) (1149c6c)
• cli: synthesize Google Discovery API key auth (#2301) (0104716)
• cli: synthesize resource-aware MCP descriptions for summary-less operations (#2267) (474dbf4), closes #1315
• skills: add gosec gate to polish diagnostics (#2300) (cc645eb)
• skills: add LAN reachability carve-out (#2290) (778192b)
• skills: clarify bearer-token auth enrichment (#2251) (81c8a29)
• skills: detect truncated Go stdlib in preflight (#2294) (8c26a9e)
• skills: document multi-positional RunE shape so partial args fail with exit 2 (#2272) (0d21ad3), closes #965
• skills: gate large MCP endpoint surfaces (#2231) (b395352)
• skills: hold sub-60 reprints on missing transcendence rows (#2236) (d0acb24)
• skills: initialize transcendence collector slices with make([]T, 0) (#2268) (3132ea4), closes #1344
• skills: route polish data inserts through typed helpers (#2230) (a2f4659)