Specky 3.11.0 — Target-Correct Agent Capabilities
Specky 3.11.0 - Target-Correct Agent Capabilities
Copy-paste body for the GitHub Release
v3.11.0.
Specky 3.11.0 makes agent permissions explicit, portable, and testable across GitHub Copilot, Claude Code, Cursor, and OpenCode.
Highlights
Canonical Capabilities
Agents now declare canonical capabilities: in the APM source. Installation compiles them to the target-native tool vocabulary, so workflows receive the tools they actually require rather than relying on prose or cross-target tokens.
The verifier can run the detected test command, and release workflows have explicit Git, release-gate, and GitHub MCP capabilities. The implementer remains scaffold-only and does not receive production-code edit access.
Scoped or Prompted Permissions
Use the default scoped mode for narrow Claude Code allow rules:
specky install --target=claude --permission-profile=scopedOr retain host confirmation for every action:
specky install --target=claude --permission-profile=promptScoped mode never grants arbitrary shell execution, destructive shell commands, broad network access, or stored credentials.
Optional GitHub MCP
GitHub operations are now explicit and opt-in:
specky install --target=copilot --integration=githubSpecky generates branch, pull request, and issue payloads. The host creates external resources only after the authenticated GitHub MCP tool is invoked. specky doctor verifies registration but intentionally does not claim that it can verify host authentication or user approval.
Release Integrity
Release metadata is synchronized across package.json, APM, config.yml, and the plugin MCP runtime pin. The preflight and installation CI smoke tests now cover Copilot, Claude, Cursor, OpenCode, and the skills-only agent-skills bundle. The publish workflow requires the GitHub Release tag to match the package version and emits OCI version/source/revision labels for GHCR images.
Upgrade
npm install -g specky-sdd@latest
cd your-project
specky upgradeTo enable GitHub MCP in an existing workspace, run a target-specific reinstall:
specky install --force --target=copilot --integration=github
specky doctor --verboseRead Target Capabilities for the target matrix, security boundaries, and runtime approval model.