Skip to content

Specky 3.11.0 — Target-Correct Agent Capabilities

Choose a tag to compare

@paulanunes85 paulanunes85 released this 13 Jul 22:08
Immutable release. Only release title and notes can be modified.

Specky 3.11.0 - Target-Correct Agent Capabilities

Copy-paste body for the GitHub Release v3.11.0.

Specky 3.11.0 makes agent permissions explicit, portable, and testable across GitHub Copilot, Claude Code, Cursor, and OpenCode.

Highlights

Canonical Capabilities

Agents now declare canonical capabilities: in the APM source. Installation compiles them to the target-native tool vocabulary, so workflows receive the tools they actually require rather than relying on prose or cross-target tokens.

The verifier can run the detected test command, and release workflows have explicit Git, release-gate, and GitHub MCP capabilities. The implementer remains scaffold-only and does not receive production-code edit access.

Scoped or Prompted Permissions

Use the default scoped mode for narrow Claude Code allow rules:

specky install --target=claude --permission-profile=scoped

Or retain host confirmation for every action:

specky install --target=claude --permission-profile=prompt

Scoped mode never grants arbitrary shell execution, destructive shell commands, broad network access, or stored credentials.

Optional GitHub MCP

GitHub operations are now explicit and opt-in:

specky install --target=copilot --integration=github

Specky generates branch, pull request, and issue payloads. The host creates external resources only after the authenticated GitHub MCP tool is invoked. specky doctor verifies registration but intentionally does not claim that it can verify host authentication or user approval.

Release Integrity

Release metadata is synchronized across package.json, APM, config.yml, and the plugin MCP runtime pin. The preflight and installation CI smoke tests now cover Copilot, Claude, Cursor, OpenCode, and the skills-only agent-skills bundle. The publish workflow requires the GitHub Release tag to match the package version and emits OCI version/source/revision labels for GHCR images.

Upgrade

npm install -g specky-sdd@latest
cd your-project
specky upgrade

To enable GitHub MCP in an existing workspace, run a target-specific reinstall:

specky install --force --target=copilot --integration=github
specky doctor --verbose

Read Target Capabilities for the target matrix, security boundaries, and runtime approval model.

References