diff --git a/.godpowers/PROGRESS.mdx b/.godpowers/PROGRESS.mdx index cf54322..8037f7e 100644 --- a/.godpowers/PROGRESS.mdx +++ b/.godpowers/PROGRESS.mdx @@ -40,7 +40,7 @@ - [DECISION] PRD and ROADMAP were reconstructed from the shipped v2.1.1 codebase with stable requirement ids, and the linkage map was populated via `scripts/reconstruct-self-ledger.js`. Deliverable status lives in `.godpowers/REQUIREMENTS.mdx`: 32 of 33 requirements done, 1 in progress (deliverable-progress, unreleased), 100% requirement-to-code coverage. - + # Godpowers Progress - [DECISION] This file is a generated human-readable view of `.godpowers/state.json`. @@ -61,18 +61,18 @@ | 4 | Orchestration | Tech Debt | done | tech-debt/ASSESSMENT.mdx | 2026-07-13T05:12:51.236Z | | 5 | Orchestration | Greenfield Simulation | done | audit/GREENFIELD-SIMULATION.mdx | 2026-07-13T05:12:51.236Z | | 6 | Orchestration | Greenfieldify | done | audit/GREENFIELDIFY-PLAN.mdx | 2026-07-13T05:45:00.000Z | -| 7 | Orchestration | Sync | done | SYNC-LOG.mdx | 2026-07-13T05:56:21.000Z | +| 7 | Orchestration | Sync | done | SYNC-LOG.mdx | 2026-07-13T07:06:46.000Z | | 8 | Planning | PRD | done | prd/PRD.mdx | 2026-07-13T05:57:20.000Z | | 9 | Planning | Design | not-required | - | 2026-07-13T05:12:51.236Z | | 10 | Planning | Product | not-required | - | 2026-07-13T05:12:51.236Z | | 11 | Planning | Architecture | done | arch/ARCH.mdx | 2026-07-13T05:45:00.000Z | -| 12 | Planning | Roadmap | done | roadmap/ROADMAP.mdx | 2026-07-13T05:57:20.000Z | +| 12 | Planning | Roadmap | done | roadmap/ROADMAP.mdx | 2026-07-13T07:06:46.000Z | | 13 | Planning | Stack | done | stack/DECISION.mdx | 2026-07-13T05:12:51.236Z | | 14 | Building | Repo | done | repo/AUDIT.mdx | 2026-07-13T05:57:20.000Z | | 15 | Building | Build | done | build/STATE.mdx | 2026-07-13T05:16:48.669Z | -| 16 | Shipping | Deploy | done | deploy/STATE.mdx | 2026-07-13T05:55:15.000Z | +| 16 | Shipping | Deploy | done | deploy/STATE.mdx | 2026-07-13T07:06:46.000Z | | 17 | Shipping | Observe | done | observe/STATE.mdx | 2026-07-13T05:12:51.236Z | | 18 | Shipping | Harden | done | harden/FINDINGS.mdx | 2026-07-13T05:45:20.000Z | -| 19 | Shipping | Launch | done | launch/STATE.mdx | 2026-07-13T05:55:15.000Z | +| 19 | Shipping | Launch | done | launch/STATE.mdx | 2026-07-13T07:06:46.000Z | diff --git a/.godpowers/build/STATE.mdx b/.godpowers/build/STATE.mdx index 82c79b5..28b53d3 100644 --- a/.godpowers/build/STATE.mdx +++ b/.godpowers/build/STATE.mdx @@ -1,5 +1,5 @@ - + # Godpowers Build State - [DECISION] This file is a generated human-readable view of `.godpowers/state.json` for `tier-2.build`. @@ -25,6 +25,6 @@ | Field | Value | |---|---| -| release-version | 5.3.0 | +| release-candidate-version | 5.3.1 | diff --git a/.godpowers/deploy/STATE.mdx b/.godpowers/deploy/STATE.mdx index b5e6774..21282df 100644 --- a/.godpowers/deploy/STATE.mdx +++ b/.godpowers/deploy/STATE.mdx @@ -1,5 +1,5 @@ - + # Godpowers Deploy State - [DECISION] This file is a generated human-readable view of `.godpowers/state.json` for `tier-3.deploy`. @@ -9,8 +9,8 @@ - [DECISION] Step: Shipping: Deploy. - [DECISION] Status: `done`. - [DECISION] Artifact: `.godpowers/deploy/STATE.mdx`. -- [DECISION] Updated: 2026-07-13T05:55:15.000Z. -- [DECISION] Notes: Godpowers 5.3.0 and the MCP companion are published with provenance from merged main and their registry integrity matches the GitHub Release assets.. +- [DECISION] Updated: 2026-07-13T07:06:46.000Z. +- [DECISION] Notes: Local and CI-verifiable npm deployment readiness is complete and the 5.3.1 publication path is authorized.. ## Verification Commands @@ -28,9 +28,9 @@ | Field | Value | |---|---| -| publication-targets | https://github.com/hannsxpeter/godpowers/releases/tag/v5.3.0, npm godpowers@5.3.0, and npm @godpowers/mcp@5.3.0 | -| rollback-evidence | The v5.2.0 tag resolves locally as the prior release rollback reference. | -| target-evidence | GitHub Release assets and npm registry packages share exact integrity values; published CLI and MCP executable verification passed. | -| verified-target-type | published-npm-release | +| publication-targets | npm root package, npm MCP package, GitHub tag, and GitHub Release assets | +| rollback-evidence | The v5.3.0 tag resolves locally as the prior release rollback reference. | +| target-evidence | Root and MCP package allowlists pass against npm pack output on the Godaudits 2.0 integration tree. | +| verified-target-type | authorized-release-candidate | diff --git a/.godpowers/launch/STATE.mdx b/.godpowers/launch/STATE.mdx index cc3a330..2943d11 100644 --- a/.godpowers/launch/STATE.mdx +++ b/.godpowers/launch/STATE.mdx @@ -1,5 +1,5 @@ - + # Godpowers Launch State - [DECISION] This file is a generated human-readable view of `.godpowers/state.json` for `tier-3.launch`. @@ -9,8 +9,8 @@ - [DECISION] Step: Shipping: Launch. - [DECISION] Status: `done`. - [DECISION] Artifact: `.godpowers/launch/STATE.mdx`. -- [DECISION] Updated: 2026-07-13T05:55:15.000Z. -- [DECISION] Notes: Version 5.3.0 is published on GitHub and npm, registry integrity matches the release assets, and published-install verification passes.. +- [DECISION] Updated: 2026-07-13T07:06:46.000Z. +- [DECISION] Notes: The 5.3.1 launch-readiness scope is complete and publication is authorized through the verified tag workflow.. ## Verification Commands @@ -27,9 +27,9 @@ | Field | Value | |---|---| -| launch-scope | published-release | +| launch-scope | release-publication-approved | | production-user-evidence | unavailable; repository records zero production users | -| publication-verification | passed for GitHub Release, npm root, npm MCP, published root install, Claude, Codex, and MCP executable | -| release-version | 5.3.0 | +| publication-verification | required after the tag workflow completes | +| release-candidate-version | 5.3.1 | diff --git a/.godpowers/roadmap/ROADMAP.mdx b/.godpowers/roadmap/ROADMAP.mdx index bb194ec..2616b0c 100644 --- a/.godpowers/roadmap/ROADMAP.mdx +++ b/.godpowers/roadmap/ROADMAP.mdx @@ -1,14 +1,14 @@ # Roadmap -> Reconciled against the published Godpowers 5.3.0 release. Increments carry a +> Reconciled against the Godpowers 5.3.1 release candidate. Increments carry a > stable M-slug id, a Status, and the PRD requirement ids they deliver. Status is > derived from current artifacts, linkage, and executable evidence. ## Evidence Provenance -- [DECISION] Evidence generated at: `2026-07-13T05:57:20.000Z`. -- [DECISION] Source version: `5.3.0`. -- [DECISION] Source hash `package.json`: `sha256:d9184b8af2fba78e000dbf5c9e8b1c23147a6408d11d32e93848340171f73843`. +- [DECISION] Evidence generated at: `2026-07-13T07:06:46.000Z`. +- [DECISION] Source version: `5.3.1`. +- [DECISION] Source hash `package.json`: `sha256:0333d2042a73c58b586ba1e68b6f046e74372905fa37bada26dbe0a5d9880ed2`. - [DECISION] Source hash `.godpowers/prd/PRD.mdx`: `sha256:239990ed2eb267c26d3de744bf318d6260bfd67463fec8e7ccccbc348fc1712c`. - [DECISION] Source hash `.godpowers/arch/ARCH.mdx`: `sha256:ec90f0ec06d07fbc67c3b5ac22f3ae882a10d714ef230316f75823709e44642b`. - [DECISION] Source hash `.godpowers/stack/DECISION.mdx`: `sha256:cc9e9227262d9d472fa7806fbafc9a83b8e621728c3652fae1a423a867989ce3`. diff --git a/.godpowers/state.json b/.godpowers/state.json index 4c5ec19..3313a61 100644 --- a/.godpowers/state.json +++ b/.godpowers/state.json @@ -70,8 +70,8 @@ "status": "done", "artifact": "SYNC-LOG.mdx", "artifact-hash": "sha256:c8c11458826463e04d569455dfac45f43ab27b827dee4366caa13de1dc5941fd", - "updated": "2026-07-13T05:56:21.000Z", - "notes": "Version, surface, state, GitHub Release, npm publication, integrity, and published-install evidence are synchronized." + "updated": "2026-07-13T07:06:46.000Z", + "notes": "Version, surface, state, and Godaudits 2.0 release-candidate documentation are synchronized." } }, "tier-1": { @@ -102,9 +102,9 @@ "roadmap": { "status": "done", "artifact": "roadmap/ROADMAP.mdx", - "artifact-hash": "sha256:907cfcfb5548bca771053b0d5508cfc268d71ae36ca5b08168fca30eb39d3a0a", - "updated": "2026-07-13T05:57:20.000Z", - "notes": "Roadmap provenance is pinned to current source hashes and version 5.3.0." + "artifact-hash": "sha256:86758390bb9c9037b958168c3b5402d204a48141ccc0e1ad51d7469af995d063", + "updated": "2026-07-13T07:06:46.000Z", + "notes": "Roadmap provenance is pinned to current source hashes and version 5.3.1." }, "stack": { "status": "done", @@ -164,7 +164,7 @@ } ] }, - "release-version": "5.3.0" + "release-candidate-version": "5.3.1" } }, "tier-3": { @@ -172,8 +172,8 @@ "status": "done", "artifact": "deploy/STATE.mdx", "artifact-hash": null, - "updated": "2026-07-13T05:55:15.000Z", - "notes": "Godpowers 5.3.0 and the MCP companion are published with provenance from merged main and their registry integrity matches the GitHub Release assets.", + "updated": "2026-07-13T07:06:46.000Z", + "notes": "Local and CI-verifiable npm deployment readiness is complete and the 5.3.1 publication path is authorized.", "verification": { "commands": [ { @@ -230,10 +230,10 @@ } ] }, - "verified-target-type": "published-npm-release", - "target-evidence": "GitHub Release assets and npm registry packages share exact integrity values; published CLI and MCP executable verification passed.", - "rollback-evidence": "The v5.2.0 tag resolves locally as the prior release rollback reference.", - "publication-targets": "https://github.com/hannsxpeter/godpowers/releases/tag/v5.3.0, npm godpowers@5.3.0, and npm @godpowers/mcp@5.3.0" + "verified-target-type": "authorized-release-candidate", + "target-evidence": "Root and MCP package allowlists pass against npm pack output on the Godaudits 2.0 integration tree.", + "rollback-evidence": "The v5.3.0 tag resolves locally as the prior release rollback reference.", + "publication-targets": "npm root package, npm MCP package, GitHub tag, and GitHub Release assets" }, "observe": { "status": "done", @@ -305,8 +305,8 @@ "status": "done", "artifact": "launch/STATE.mdx", "artifact-hash": null, - "updated": "2026-07-13T05:55:15.000Z", - "notes": "Version 5.3.0 is published on GitHub and npm, registry integrity matches the release assets, and published-install verification passes.", + "updated": "2026-07-13T07:06:46.000Z", + "notes": "The 5.3.1 launch-readiness scope is complete and publication is authorized through the verified tag workflow.", "verification": { "commands": [ { @@ -357,9 +357,9 @@ } ] }, - "launch-scope": "published-release", - "release-version": "5.3.0", - "publication-verification": "passed for GitHub Release, npm root, npm MCP, published root install, Claude, Codex, and MCP executable", + "launch-scope": "release-publication-approved", + "release-candidate-version": "5.3.1", + "publication-verification": "required after the tag workflow completes", "production-user-evidence": "unavailable; repository records zero production users" } } @@ -514,7 +514,7 @@ }, "godpowers-features": { "feature-set-version": 1, - "runtime-version": "5.3.0", + "runtime-version": "5.3.1", "known": [ "planning-system-migration", "source-system-sync-back", diff --git a/ARCHITECTURE-MAP.md b/ARCHITECTURE-MAP.md index e676ec7..6b67711 100644 --- a/ARCHITECTURE-MAP.md +++ b/ARCHITECTURE-MAP.md @@ -640,7 +640,7 @@ godpowers/ ├── README.md, CHANGELOG.md, LICENSE, CONTRIBUTING.md, SECURITY.md, USERS.md ├── ARCHITECTURE.md <- Design doc ├── ARCHITECTURE-MAP.md <- This file -├── package.json (v5.3.0) +├── package.json (v5.3.1) ├── .github/workflows/ <- CI + npm publish workflows │ ├── bin/install.js <- CLI installer (15 runtimes) @@ -736,7 +736,7 @@ godpowers/ --- -## Numbers (as of v5.3.0) +## Numbers (as of v5.3.1) | Component | Count | |-----------|-------| diff --git a/ARCHITECTURE.md b/ARCHITECTURE.md index 98c1064..da39f13 100644 --- a/ARCHITECTURE.md +++ b/ARCHITECTURE.md @@ -1,6 +1,6 @@ # Godpowers Architecture (v3 Design Target) -> Status: STABLE v5.3.0 published release (self-project truth, active-session host evidence, explicit Quick Proof scope, lifecycle reconciliation, outcome metrics, mdx-first artifacts, and the existing production runtime surface) +> Status: STABLE v5.3.1 release candidate (Godaudits 2.0 canonical JSON integration, typed remediation synchronization, fail-closed import safety, and the existing production runtime surface) > Authors: Godpowers Team > Last updated: 2026-07-13 diff --git a/CHANGELOG.md b/CHANGELOG.md index 5c6ef4d..915888f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +## [5.3.1] - 2026-07-13 + +Godaudits 2.0 interoperability patch. This release makes the canonical JSON +audit ledger authoritative throughout Godpowers migration, remediation, and +staleness workflows while retaining generated and legacy report fallbacks. + ### Added - Regression coverage for canonical godaudits 2.x JSON detection, parsing, diff --git a/README.md b/README.md index 019f81a..67b97ae 100644 --- a/README.md +++ b/README.md @@ -2,7 +2,7 @@ [![CI](https://github.com/hannsxpeter/godpowers/actions/workflows/ci.yml/badge.svg)](https://github.com/hannsxpeter/godpowers/actions/workflows/ci.yml) [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE) -[![Version](https://img.shields.io/badge/version-5.3.0-blue)](CHANGELOG.md) +[![Version](https://img.shields.io/badge/version-5.3.1-blue)](CHANGELOG.md) [![npm](https://img.shields.io/npm/v/godpowers.svg)](https://www.npmjs.com/package/godpowers) **Ship fast. Ship right. Ship everything. Ship accountably.** diff --git a/RELEASE.md b/RELEASE.md index c1156da..b0efcea 100644 --- a/RELEASE.md +++ b/RELEASE.md @@ -1,39 +1,41 @@ -# Godpowers 5.3.0 Release +# Godpowers 5.3.1 Release -> Status: Published +> Status: Approved for publication > Date: 2026-07-13 -- [DECISION] Godpowers 5.3.0 is the product trust hardening release. +- [DECISION] Godpowers 5.3.1 is the Godaudits 2.0 interoperability patch release. - [DECISION] The public surface contains 122 slash commands, 40 agents, 13 workflows, and 44 recipes. - [DECISION] The core package contains 98 runtime library modules and keeps zero production dependencies. -- [DECISION] The `@godpowers/mcp` companion remains read-only and shares version 5.3.0. +- [DECISION] The `@godpowers/mcp` companion remains read-only and shares version 5.3.1. ## Changes -- [DECISION] `lib/self-project-truth.js` blocks release when package versions, public counts, Pillars, state, progress, requirements, roadmap provenance, or lifecycle artifacts contradict one another. -- [DECISION] `lib/host-capabilities.js` separates installed capability metadata from active-session evidence and prevents `full on unknown` output. -- [DECISION] `lib/quick-proof.js` labels fixture evidence explicitly and uses `--inspect-project` for read-only current-project inspection. -- [DECISION] `lib/outcome-metrics.js` reports time to accepted change, cost, manual intervention, resume success, deployment completion, and rollback proof only when events support the claim. -- [DECISION] The default core profile contains 15 high-level commands, while builder, maintainer, suite, and full profiles preserve progressive access to all 122 commands. -- [DECISION] PRD, architecture, roadmap, stack, repository, build, deploy, observe, harden, launch, final sync, checkpoint, and Pillars evidence are reconciled for this source release. +- [DECISION] `lib/sibling-artifacts.js` reads `.godaudits/AUDIT.json` as canonical machine state and retains checks, evidence metadata, findings, accepted risks, compliance, coverage, score caps, and typed GA tasks. +- [DECISION] Generated `.godaudits/AUDIT.mdx` and legacy `.godaudits/AUDIT.md` remain supported fallbacks without overriding canonical JSON. +- [DECISION] `lib/planning-systems.js` synchronizes open GA remediation into an idempotent managed todo section while preserving user-owned todo content. +- [DECISION] Invalid JSON, unsupported schemas, malformed core records, oversized inputs, and non-regular sibling artifacts fail closed without dispatching remediation or seeding harden work. +- [DECISION] Godaudits staleness follows canonical JSON so regenerated human reports do not create false drift. +- [DECISION] Audit, migration, fix, preflight, doctor, context, orchestration, routing, workflow, template, and architecture documentation now describe the Godaudits 2.0 contract. ## Validation - [DECISION] `npm run release:check` passes on the final source tree. -- [DECISION] Aggregate coverage is 94.69% lines, 79.48% branches, and 96.85% functions. +- [DECISION] Aggregate coverage is 94.76% lines, 79.09% branches, and 96.90% functions. - [DECISION] Per-file line coverage is at least 70% across all 96 expected non-browser runtime modules. - [DECISION] The self-project truth gate passes 141 checks and fails closed on missing lifecycle steps, stale generated bodies, artifact drift, version drift, public surface drift, and stale roadmap hashes. +- [DECISION] The sibling integration suite passes 49 checks, including canonical authority, fallback behavior, safety boundaries, todo synchronization, and staleness. +- [DECISION] A live contract probe passes against the Godaudits 2.0 compiler and renderer. - [DECISION] Root package validation covers 577 files and MCP package validation covers 8 files. ## Upgrade -- [DECISION] After publication, install with `npm install -g godpowers@5.3.0` or `npx godpowers@5.3.0`. -- [DECISION] Existing 5.x projects need no artifact migration because MDX-first reads retain legacy Markdown fallback. -- [DECISION] Re-run the installer for each host runtime so the narrowed core profile and updated skills replace installed copies. +- [DECISION] After publication, install with `npm install -g godpowers@5.3.1` or `npx godpowers@5.3.1`. +- [DECISION] Existing 5.x projects need no Godpowers artifact migration. +- [DECISION] Projects with Godaudits 2.0 should keep `.godaudits/AUDIT.json` canonical and regenerate `.godaudits/AUDIT.mdx` after remediation. +- [DECISION] Re-run the installer for each host runtime so the updated skills and runtime helpers replace installed copies. -## Publication Evidence +## Publication Boundary -- [DECISION] GitHub tag `v5.3.0` and the GitHub Release point to merged main commit `9c6efed128b22df6458273c9428d0ceb0a0b0312`. -- [DECISION] The GitHub Release contains the exact 577-file root tarball and 8-file MCP tarball whose integrity values match the npm registry. -- [DECISION] The tag-triggered workflow verified both package versions and merged-main ancestry, passed the complete release gate, and published npm `godpowers@5.3.0` plus npm `@godpowers/mcp@5.3.0` with provenance. -- [DECISION] Registry verification, root published-install verification, Claude and Codex installation, and the published MCP executable all pass. +- [DECISION] Publication is authorized for npm `godpowers@5.3.1`, npm `@godpowers/mcp@5.3.1`, GitHub tag `v5.3.1`, and a GitHub Release containing both package tarballs. +- [DECISION] The tag-triggered workflow must verify that the tag matches both package versions and belongs to merged main before it runs `npm run release:check` and npm publication with provenance. +- [DECISION] Published-install verification is required before the release is recorded as complete. diff --git a/USERS.md b/USERS.md index 3cfc2b8..ed97fe4 100644 --- a/USERS.md +++ b/USERS.md @@ -1,6 +1,6 @@ # Users and Community -The current source version is v5.3.0, and the latest published release is v5.3.0. +The current source version is v5.3.1, prepared for release. The latest published release remains v5.3.0 until the tag-triggered workflow completes. ## Track record diff --git a/agents/context.md b/agents/context.md index d51abc5..12e4efb 100644 --- a/agents/context.md +++ b/agents/context.md @@ -15,7 +15,7 @@ see_also: [arch, quality, deploy] ## Context - [DECISION] Godpowers is an AI-powered development system delivered as slash commands and specialist agents inside AI coding tools. -- [DECISION] The package name is `godpowers`, and the current repository version is `5.3.0`. +- [DECISION] The package name is `godpowers`, and the current repository version is `5.3.1`. - [DECISION] The primary audience is solo founders and small engineering teams using AI coding tools who need accountable production workflow discipline without enterprise process. - [DECISION] The product promise is one slash-command arc from idea to hardened, observable, launch-ready software with traceable artifacts on disk. - [DECISION] Godpowers uses a pure-skill model where `npx godpowers` installs runtime files and in-tool slash commands perform work. @@ -36,7 +36,7 @@ see_also: [arch, quality, deploy] ## Gaps -- [OPEN QUESTION] Which external messy repository should become the first full host-run adoption case study after `5.3.0`? Owner: maintainer. Due: before the next broad product proof claim. +- [OPEN QUESTION] Which external messy repository should become the first full host-run adoption case study after `5.3.1`? Owner: maintainer. Due: before the next broad product proof claim. ## Godpowers artifact sources @@ -60,9 +60,9 @@ From `.godpowers/prd/PRD.mdx`: - [DECISION] For every release candidate, all release-gate checks reach zero failures within the 60-minute verification window before publication, measured by `scripts/run-tests.js` and `npm run release:check`. From `.godpowers/roadmap/ROADMAP.mdx`: -- [DECISION] Evidence generated at: `2026-07-13T05:57:20.000Z`. -- [DECISION] Source version: `5.3.0`. -- [DECISION] Source hash `package.json`: `sha256:d9184b8af2fba78e000dbf5c9e8b1c23147a6408d11d32e93848340171f73843`. +- [DECISION] Evidence generated at: `2026-07-13T07:06:46.000Z`. +- [DECISION] Source version: `5.3.1`. +- [DECISION] Source hash `package.json`: `sha256:0333d2042a73c58b586ba1e68b6f046e74372905fa37bada26dbe0a5d9880ed2`. - [DECISION] Source hash `.godpowers/prd/PRD.mdx`: `sha256:239990ed2eb267c26d3de744bf318d6260bfd67463fec8e7ccccbc348fc1712c`. - [DECISION] Source hash `.godpowers/arch/ARCH.mdx`: `sha256:ec90f0ec06d07fbc67c3b5ac22f3ae882a10d714ef230316f75823709e44642b`. - [DECISION] Source hash `.godpowers/stack/DECISION.mdx`: `sha256:cc9e9227262d9d472fa7806fbafc9a83b8e621728c3652fae1a423a867989ce3`. diff --git a/agents/deploy.md b/agents/deploy.md index b80f306..dd64546 100644 --- a/agents/deploy.md +++ b/agents/deploy.md @@ -20,15 +20,15 @@ see_also: [security, observe] - [DECISION] `.github/workflows/publish-pack.yml` runs `npm run release:check` before publishing first-party extension packs. - [DECISION] `package.json` exposes `bin.godpowers` at `./bin/install.js`. - [DECISION] Manual tarball publish is a fallback only when the tag-triggered workflow cannot run, and provenance is unavailable for that publish. -- [DECISION] Source version `5.3.0` is published through the identity-bound tag workflow from merged main commit `9c6efed128b22df6458273c9428d0ceb0a0b0312`. -- [DECISION] npm `godpowers@5.3.0` and `@godpowers/mcp@5.3.0` are tagged `latest`, and their registry integrity values match the tarballs attached to the GitHub Release. -- [DECISION] Published-install verification passes for the root CLI, Claude, Codex, and the MCP executable. -- [DECISION] The prior `v5.2.0` tag remains the tested rollback reference. +- [DECISION] Source version `5.3.1` is approved for publication through the identity-bound tag workflow. +- [DECISION] npm `godpowers@5.3.0` and `@godpowers/mcp@5.3.0` remain tagged `latest` until the v5.3.1 workflow completes. +- [DECISION] Published-install verification is required for the root CLI, Claude, Codex, and the MCP executable after publication. +- [DECISION] The prior `v5.3.0` tag remains the tested rollback reference. ## Watchouts - [HYPOTHESIS] A release is incomplete until git tag, GitHub release, npm version, package tarball, README badges, CHANGELOG, RELEASE, and local install verification agree. -- [HYPOTHESIS] Registry and published-install proof do not substitute for adoption evidence from an unaffiliated production user. +- [HYPOTHESIS] Production install evidence for `5.3.1` becomes available only after external publication completes. ## Godpowers artifact sources diff --git a/agents/quality.md b/agents/quality.md index 720cd9d..88def91 100644 --- a/agents/quality.md +++ b/agents/quality.md @@ -45,9 +45,9 @@ see_also: [security, deploy] ## Extracted durable signals From `.godpowers/roadmap/ROADMAP.mdx`: -- [DECISION] Evidence generated at: `2026-07-13T05:57:20.000Z`. -- [DECISION] Source version: `5.3.0`. -- [DECISION] Source hash `package.json`: `sha256:d9184b8af2fba78e000dbf5c9e8b1c23147a6408d11d32e93848340171f73843`. +- [DECISION] Evidence generated at: `2026-07-13T07:06:46.000Z`. +- [DECISION] Source version: `5.3.1`. +- [DECISION] Source hash `package.json`: `sha256:0333d2042a73c58b586ba1e68b6f046e74372905fa37bada26dbe0a5d9880ed2`. - [DECISION] Source hash `.godpowers/prd/PRD.mdx`: `sha256:239990ed2eb267c26d3de744bf318d6260bfd67463fec8e7ccccbc348fc1712c`. - [DECISION] Source hash `.godpowers/arch/ARCH.mdx`: `sha256:ec90f0ec06d07fbc67c3b5ac22f3ae882a10d714ef230316f75823709e44642b`. - [DECISION] Source hash `.godpowers/stack/DECISION.mdx`: `sha256:cc9e9227262d9d472fa7806fbafc9a83b8e621728c3652fae1a423a867989ce3`. diff --git a/docs/ROADMAP.md b/docs/ROADMAP.md index 468a7ff..0a61c1e 100644 --- a/docs/ROADMAP.md +++ b/docs/ROADMAP.md @@ -3,7 +3,7 @@ > Status: ACTIVE > Model: Pure-skill for durable work. CLI provides install plus read-only status helpers. > Last updated: 2026-07-03 -> Current source: v5.3.0. Latest published: v5.3.0. +> Current source: v5.3.1 release candidate. Latest published: v5.3.0. This roadmap tracks releases, what's shipped, and what is frozen during the 3.x public adoption window. Everything user-facing remains slash-command based. diff --git a/docs/reference.md b/docs/reference.md index 0f95d42..503f6bc 100644 --- a/docs/reference.md +++ b/docs/reference.md @@ -1,6 +1,6 @@ # Godpowers Reference -Complete command, agent, and artifact reference for v5.3.0. +Complete command, agent, and artifact reference for v5.3.1. ## Slash commands (122 total) diff --git a/package-lock.json b/package-lock.json index efa1116..0d0b96a 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "godpowers", - "version": "5.3.0", + "version": "5.3.1", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "godpowers", - "version": "5.3.0", + "version": "5.3.1", "license": "MIT", "workspaces": [ "packages/mcp" @@ -1796,7 +1796,7 @@ }, "packages/mcp": { "name": "@godpowers/mcp", - "version": "5.3.0", + "version": "5.3.1", "license": "MIT", "dependencies": { "@modelcontextprotocol/sdk": "^1.29.0", diff --git a/package.json b/package.json index 962dac1..b52c9f1 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "godpowers", - "version": "5.3.0", + "version": "5.3.1", "description": "AI-powered development system: 122 slash commands and 40 specialist agents that take a project from raw idea to hardened production, then run it as an autonomous loop. Runs inside Claude Code, Codex, Cursor, Windsurf, Gemini, and 10+ other AI coding tools.", "bin": { "godpowers": "./bin/install.js" diff --git a/packages/mcp/package.json b/packages/mcp/package.json index 71bcadb..e20bb4c 100644 --- a/packages/mcp/package.json +++ b/packages/mcp/package.json @@ -1,6 +1,6 @@ { "name": "@godpowers/mcp", - "version": "5.3.0", + "version": "5.3.1", "description": "Read-only MCP server for Godpowers runtime status, routing, gates, artifact linting, and requirement tracing.", "bin": { "godpowers-mcp": "./bin/godpowers-mcp.js"