v1.7.0

What's Changed

• fix(homebrew): render bundled-path helpers as bare Ruby methods, not quoted strings by @randlee in #603
• fix(homebrew): render bundled-path helpers as bare Ruby methods (forward-port to main) by @randlee in #604
• site: announce sc-compose v1.6.1 by @randlee in #605
• chore(atm): replace deprecated features.codex_hooks with features.hooks by @randlee in #609
• bd init: wire sc-compose to dedicated sc-compose beads DB (server mode) by @randlee in #612
• chore: backfill ATM roster aliases in .atm.toml by @randlee in #610
• fix(site): link primary page to verification reports index by @randlee in #608
• chore: install atm-bd-orchestration 0.11.4 and add comp-sanity by @randlee in #616
• chore: route quality-mgr and team-lead to atm-bd-orchestration by @randlee in #617
• phase-t plan: beads attach and by-path pour, render --append (planning docs for review) by @randlee in #619
• docs(adr-0023): bd 1.3.1 cook behaviour for unknown keys and bad step graphs by @randlee in #621
• feat(beads): add graph contracts and production parser fixtures by @randlee in #622
• test(beads): tolerate poisoned real-bd test lock by @randlee in #624
• sprint/t 5 render append by @randlee in #623
• fix/t 5 sanity r1 by @randlee in #626
• test(beads): enforce graph fixture coverage by @randlee in #627
• test(render): cover append write and invalid input failures by @randlee in #629
• test(beads): update pinned bd version comment by @randlee in #628
• feat(beads): attach workflows and pour formulas by path by @randlee in #630
• feat(beads-python): expose graph request and receipt fields by @randlee in #631
• fix(beads): validate graph edge endpoints and dependency kinds by @randlee in #632
• fix(beads-python): complete graph receipt contract by @randlee in #633
• test: reject append for examples and templates by @randlee in #634
• fix(beads): validate formula names in the public contract by @randlee in #635
• fix(cli): code append mode rejection by @randlee in #636
• fix(beads-python): declare graph error codes by @randlee in #637
• fix(beads): emit invalid pour authorization error by @randlee in #638
• test: preserve append destination for conflicting flags by @randlee in #639
• test(beads): avoid Windows metadata wrapper quoting by @randlee in #640
• fix(render): report append rollback failures by @randlee in #641
• test: preserve typed var-file values in append output by @randlee in #642
• test(t-5): assert ERR_CONFIG_PARSE for append flag conflicts (qa1-f3 r2) by @randlee in #643
• fix(beads): preserve plain Windows BEADS_DIR by @randlee in #644
• test(render): assert append JSON envelopes by @randlee in #646
• fix(render): add append recovery hints by @randlee in #647
• fix(beads): preserve structured graph errors in CLI JSON by @randlee in #650
• test(beads): drain graph bd output pipes by @randlee in #651
• fix(beads-python): reuse request error code and verify graph properties by @randlee in #652
• docs: register append error codes by @randlee in #653
• fix(beads): preserve duplicate keys and classify malformed endpoints by @randlee in #654
• fix(render): report append template diagnostics by @randlee in #655
• fix(beads): preserve typed process errors in graph operations by @randlee in #656
• test(beads): assert precise graph rejection reasons by @randlee in #657
• test(beads-python): verify graph receipt properties and codes by @randlee in #658
• fix(beads): use serde pour mode names by @randlee in #659
• test(beads-python): cover attach request fields by @randlee in #660
• fix(beads): classify receipt decode errors by @randlee in #661
• test(beads): complete real-bd graph issue coverage by @randlee in #662
• feat(observability): migrate CLI to published v2 logger APIs by @randlee in #663
• test(beads): isolate engine bd calls per fixture by @randlee in #665
• fix(beads): preserve typed graph reasons with bd stderr by @randlee in #666
• fix(beads): preserve bd failure causes by @randlee in #667
• docs(beads): clarify graph receipt fixture scope by @randlee in #668
• fix(beads-python): propagate receipt conversion failures by @randlee in #669
• refactor(beads-python): share core enum wire names by @randlee in #670
• test(render): assert append failure and concurrency contracts by @randlee in #671
• fix(observability): share constant validation by @randlee in #672
• refactor(beads): use closed stage failure mapping by @randlee in #673
• fix(beads): report the failing graph identifier rule by @randlee in #674
• refactor(beads): type graph identifier and scope fields by @randlee in #675
• docs(observability): update release checklist to 1.5.0 by @randlee in #676
• test(observability): cover logger builder usage failure by @randlee in #677
• feat(beads): complete CLI attach integration and end-to-end coverage by @randlee in #649
• fix(python): expose bead request graph getters by @randlee in #678
• refactor(observability): cache validated event labels by @randlee in #679
• refactor(observability): simplify CLI logger state by @randlee in #680
• test(observability): validate schema and fallback constants by @randlee in #682
• refactor(beads): type graph plan keys by @randlee in #681
• fix(beads): borrow graph identifier strings by @randlee in #683
• perf(cli): borrow render output path by @randlee in #684
• fix(beads): carry structured missing-edge recovery data by @randlee in #685
• fix(beads): distinguish request-file read failures by @randlee in #687
• fix(cli): display structured bead recovery guidance by @randlee in #688
• test(cli): verify bead help without Beads installed by @randlee in #689
• test(cli): cover attach JSON capability by @randlee in #686
• fix(beads): make graph plan endpoint states explicit by @randlee in #690
• t-7: phase fuzz campaign (FUZZ-012..FUZZ-020 regressions + report) by @randlee in #691
• docs: link Phase T sprint plan from project plan by @randlee in #692
• test(fuzz): move regressions into T7-owned paths by @randlee in #693
• docs: clarify concurrent bead attach outcome by @randlee in #694
• t-7 qa f9: strengthen FUZZ-014/016 regression tests by @randlee in #695
• t-7 FUZZ-019: preserve bead render failure diagnostics by @randlee in #696
• t-7 FUZZ-012: resolve relative templates from request root by @randlee in #697
• t-7 FUZZ-020: preserve graph apply error cause by @randlee in #698
• t-7 FUZZ-018: expand confined formula template includes by @randlee in #699
• t-7 FUZZ-015: bound graph capture separately (16 MiB stdout) by @randlee in #700
• t-7 FUZZ-017: preserve appended JSON number lexemes and key order by @randlee in #701
• t-7 FUZZ-021: invalid ref returns typed BEADS_GRAPH_ID_INVALID by @randlee in #702
• t-7 FUZZ-014: isolate concurrent graph request inputs by @randlee in #703
• t-7 FUZZ-013: Phase R render accepts the formula names develop accepts by @randlee in #704
• t-7 QA r1: fuzz campaign re-run at the phase head (report 20261007-2) by @randlee in #705
• t-7: invalid parent bead id returns typed BEADS_GRAPH_ID_INVALID by @randlee in #706
• t-7 FUZZ-014b: by-path pours validate from request-owned inputs by @randlee in #707
• t-7 FUZZ-016: delimit bead ids passed to bd by @randlee in #708
• t-7 FUZZ-041: classify parent self-edge as self_edge by @randlee in #709
• t-7 FUZZ-042: report invalid output paths with a typed error by @randlee in #710
• t-7 FUZZ-038: no panic on non-UTF-8 request paths by @randlee in #711
• t-7 FUZZ-043: distinguish JSON nesting limits from malformed output by @randlee in #712
• t-7 FUZZ-040: shell-quote graph recovery commands by @randlee in #713
• t-7 FUZZ-039: regression test for human-mode graph refusal details by @randlee in #714
• t-7 QA f4.1: ADR-0023 says invalid ids return GraphIdInvalid by @randlee in #715
• fix(beads): preserve legacy registry formula names (FUZZ-013 r2) by @randlee in #716
• fix(cli): compact nested raw JSON values into single-line records (FUZZ-017 r2) by @randlee in #717
• fix(cli): show typed graph receipt recovery fields (FUZZ-039 r2) by @randlee in #718
• chore: install atm-bd-orchestration 0.11.9 by @randlee in #664
• fix(beads): use Bash escapes for recovery command controls (FUZZ-040 r2) by @randlee in #719
• fix: accept large JSON exponents without numeric conversion (FUZZ-017 r3) by @randlee in #721
• fix(beads): publish attach outputs before bd creates graph (FUZZ-050) by @randlee in #722
• fix(beads): batch graph issue reads within capture limits (FUZZ-015 r3) by @randlee in #723
• fix(t-7): FUZZ-052 request error precedence (comp-t-7.23) by @randlee in #729
• Classify bead-only relations as no-step by @randlee in #724
• fix(t-7): FUZZ-021 r3 retain identifier refusals as diagnostic receipts (comp-t-7.29) by @randlee in #730
• fix/t 7 request fallback typed errors by @randlee in #725
• fix/t 7 fuzz 053 human success lines by @randlee in #726
• fix/t 7 fuzz 055 receipt source path by @randlee in #727
• fix/t 7 fuzz 042 r3 rendered parent file by @randlee in #728
• fix(beads): serialize output paths lossily by @randlee in #733
• fix/t 7 fuzz 040 r3 format chars by @randlee in #734
• fix/t 7 fuzz 012 r3 relative rendered by @randlee in #732
• test(t-7): FUZZ-055 real pour-path cook-failure regression (comp-t-7.25 D2) by @randlee in #735
• fix(t-7): FUZZ-040 r4 escape human refusal fields and stage excerpts (comp-t-7.32) by @randlee in #736
• fix(beads): present public graph plan paths in diagnostics (comp-t-7.33) by @randlee in #737
• report(t-7): fuzz campaign run 4 at the phase top (qa1-f1, qa1-f5) by @randlee in #738
• report(t-7): cite stable tested-tree provenance (qa1-f1 r2) by @randlee in #741
• test(t-7): make Bash round-trip Unix-only by @randlee in #742
• fix(beads): normalize public Windows paths by @randlee in #744
• fix(beads): pass public paths to bd by @randlee in #746
• docs: integrate run-5 fuzz evidence and preserve run-4 provenance by @randlee in #747
• ci: trigger checks for stacked PR base prefixes by @randlee in #749
• fix(beads): present Windows paths by components by @randlee in #750
• fix(t-7): check recovery quoting with Python on every platform (comp-t-7.37) by @randlee in #751
• fix(beads): preserve UNC roots in public paths by @randlee in #752
• fix(beads): build UNC paths from OsStr components by @randlee in #753
• fix(t-7): t40-f1 public paths in Windows errors by @randlee in #754
• report(t-7): campaign rerun at a0ce54d by @randlee in #755
• fix(beads): apply frontmatter required/defaults in bead rendering (pe-f4) by @randlee in #756
• fix(beads): subcommand decides operation before request validation (pe-f6) by @randlee in #757
• fix(beads): validate pour destination before writing it, write once (pe-f1) by @randlee in #760
• fix(beads): Windows replace_output preserves old output on failure (pe-f3) by @randlee in #759
• fix(beads-python): legacy formula names, GraphIdInvalid rule, missing_edges (pe-f5) by @randlee in #761
• fix(beads): report an exit-0 graph apply with an unusable response as unconfirmed (pe-f2) by @randlee in #762
• build: test-support workspace crate, workspace sibling versions, Windows clippy (pe-f8) by @randlee in #763
• fix(beads): open the error enum and let adapters use library accessors (pe-f7) by @randlee in #765
• fix(bead): subcommand operation decides formula_name tolerance and id error class (pe-f6 r2) by @randlee in #764
• fix(beads): public paths in cook diagnostics, escaped human paths, documented recovery quoting (pe-f10) by @randlee in #766
• build(deny): allow wildcard path dependencies for private test-support (pe-f8 s1-f1 r1) by @randlee in #768
• fix(beads): refuse undefined composition variables in bead formulas (pe-f15) by @randlee in #767
• fix(beads): report request JSON error locations from the source file (pe-f12) by @randlee in #769
• fix(compose): inspect-path recovery hint on failed append rollback (pe-f14) by @randlee in #770
• fix(beads): failed registry receipts keep pour_mode registry (pe-f11) by @randlee in #771
• refactor(beads): move path display to paths.rs and split execute by route (pe-f13) by @randlee in #772
• fix(beads): POSIX-portable shell_quote for control characters (pe-f10 r2) by @randlee in #773
• fix(compose): append recovery target in --json envelope, escaped in human output (pe-f14 r2) by @randlee in #774
• fix(beads): refuse undefined values at render time, not by lexical scan (pe-f16) by @randlee in #775
• docs: error registry, ADR-0023 errata, release notes and manual for Phase T (pe-f9) by @randlee in #776
• docs: qualify unchanged bd argv with the isolated cook snapshot (pe-f9 r2) by @randlee in #777
• test(python): pytest uses its own fixtures inside the package (arch-003 r2) by @randlee in #779
• Phase T: beads attach, by-path pour, render --append by @randlee in #778
• chore(release): 1.7.0 — Beads changelog, README section, version bump by @randlee in #780
• fix(release): attach sc-sha-go module bundles to the GitHub Release by @randlee in #781
• release: v1.7.0 by @randlee in #782

Full Changelog: v1.6.1...v1.7.0