@skillsmith/core 0.7.2 → 0.8.1

package/CHANGELOG.md

@@ -4,6 +4,25 @@ All notable changes to `@skillsmith/core` are documented here.
 
 ## [Unreleased]
 
+## v0.8.1
+
+- **Feature**: recover + backfill canonical GitHub source for local skills (SMI-5407) (#1589)
+- **Fix**: harden writeInstallFiles rollback against out-of-bounds delete (SMI-5359 retro) (#1586)
+- **Fix**: scan optional files before write; reject malicious config (SMI-5359 Wave 4.3, Gap-1) (#1580)
+- **Feature**: code_execution + obfuscated_directive scoring categories (SMI-5359 Wave 4.2, core) (#1582)
+- **Feature**: wire doc-context downgrade into core scanSuspiciousPatterns (SMI-5359 Wave 4.1) (#1578)
+- **Feature**: CLI install block + local-search filter + 9 missing quarantine tests (SMI-5358) (#1567)
+
+## v0.8.0
+
+- **Feature**: SMI-5039 — new `./embeddings/probe` subpath export. Extracts the
+  `probeEmbeddingCapability()` helper (originally landed inline in
+  `@skillsmith/mcp-server` under SMI-5009) into `@skillsmith/core` so MCP
+  servers, CLIs, and future tooling can share a single audited probe contract.
+  Hard 2 s `Promise.race` timeout, try/catch wrapper, stderr-only logging, and
+  honors `SKILLSMITH_QUIET=true` (or `opts.quiet`) to suppress the operator
+  warning. Minor bump (additive export, no breaking change).
+
 ## v0.7.2
 
 - **Chore**: SMI-5008 remove stripe SDK from @skillsmith/core dependencies (#869) (#1262)