Current
Hardening that ships in the tarball.
Patch over 4.6.6. CODEOWNERS, honest eval and pack parsing, smaller CLI runtimes, git/gh timeouts, HTML list cap. No required config migration.
Upgrade
Get 4.6.7
Default doctor is one screen. Use --doctor --all for Details.
Compass and the deep-module coach stay in JSON.
What changed
What 4.6.7 hardens.
CODEOWNERS
/src/, /bin/, and /schemas/
list @pedroknigge. GitHub still has to require those reviews.
Eval and pack
Comparative saas-dashboard is a real value-import deny.
npm pack --json ignores ANSI crumbs.
CLI extracts
Hook payload, package-manager helpers, and check args live in
bin/lib/. Module-budget maxima were not raised as a cheat.
Timeouts and HTML
git/gh spawnSync dies after 8s (fail-closed). Showcase
lists cap at 12 with a remainder. KPI tiles still count everything.
Honest limits
What this release does not claim
- GitHub Free still cannot require status checks. Adopted stays honest about that.
- Scripted edits still bypass PreToolUse. Required CI remains the merge boundary.
- No new skill names, sensors, or scores. Does not close the parked claim-gate residual.
Maintainer source: docs/releases/4.6.7.md ↗