chore(release): 0.9.0

[willytop8]

Release prep only — version bump, changelog dating, and a compatibility-table row. No source changes.

Version

0.8.2 → 0.9.0 in package.json and package-lock.json.

Minor, per the versioning intent in docs/compatibility.md: restrictedAgents and allowGoalExecutionFromPlan are additive, and nothing is removed from the documented public surface. The one default-behavior change is the safety fix itself — a goal created while a planning-only agent is active is now held rather than started.

Changelog

The five Unreleased entries are consolidated into four under ## 0.9.0 — 2026-08-29. Three of the originals described adding the plan guard, a bug introduced in it, and the fix — all within the same unreleased cycle. A reader only cares about the net behavior, so they are folded into one entry.

Compatibility table

Adds OpenCode 1.18.25, backed by a real run rather than inference:

• /goal command and the native goal agent register
• session-sharded persistence works
• a goal set under the Plan agent is held: stopped: true, stopReason: plan agent active, zero auto-continues
• evidence-gated completion closes cleanly with [goal:evidence] + [goal:complete]
• hook output still not displayed; command text routed to the model (unchanged from 1.17.15)

The existing >=1.17.15 <2 engine pin already covers it, so no pin change.

Verification

npm run release:check → exit 0 at the new version:

• 414 tests, mutation contract 68/68, behavior benchmark 100
• type contract (NodeNext + Bundler), command hook smoke, packed host contract, packed tool contract (11 tools)
• 0 vulnerabilities

npm pack --json inspected: 24 files, 133,309 bytes packed / 479,273 unpacked, shasum 1294a0aa1120f669b8e159fa782aee14aa2da47a. Contents are source, types, docs, demo, and examples only — no test directories or stray artifacts.

After merge

Per docs/releasing.md, the maintainer creates and pushes the annotated v0.9.0 tag, then publishes the workflow-verified tarball. Not done here.

🤖 Generated with Claude Code