chore: bump plugin version 2.42.0 -> 2.42.1; CHANGELOG

Releases the bundle-runtime-deps fix from 2683d16. v2.42.0 is being
superseded same-day rather than left in the wild — anyone who already
pulled v2.42.0 hit the missing-node_modules error on workflows.

Test evidence in the CHANGELOG: 6/6 tests pass on a fresh Debian 13
box at 192.168.1.170 with no prior GSD install. CC's PATH-based
resolution of the plugin bin/ wrapper works as designed, the bundled
cli.js handles state.load + query commands without node_modules,
and the MCP regression test from v2.40.2 still passes on Linux.

Author: jnuyens

.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "gsd",
       "source": "./",
       "description": "Get Shit Done -- structured workflow plugin for Claude Code with planning, execution, verification, and MCP-backed project state",
-      "version": "2.42.0",
+      "version": "2.42.1",
       "author": {
         "name": "Jasper Nuyens"
       },

.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "gsd",
-  "version": "2.42.0",
+  "version": "2.42.1",
   "description": "Get Shit Done -- a structured workflow plugin for Claude Code that adds planning, execution, and verification commands with MCP-backed project state",
   "author": {
     "name": "Jasper Nuyens"

CHANGELOG.md

@@ -8,6 +8,18 @@ History before 2.38.2 lives in git + the per-milestone archive (see `.planning/m
 
 ## [Unreleased]
 
+## [2.42.1] - 2026-05-07
+
+Hotfix that completes v2.42.0's "no external prereq" promise. v2.42.0 shipped `sdk/dist/cli.js` (~3 KB tsc shim) without the ~81 MB of runtime npm dependencies it imports (`ws`, `@anthropic-ai/claude-agent-sdk`, transitives). On a truly fresh box (no prior `npx get-shit-done-cc`) the bundled `gsd-sdk` failed at module-resolution time. **Caught by smoke-testing v2.42.0 on a fresh Debian 13 box** (`192.168.1.170`) — the user's existing macOS/laptop installs had an external `gsd-sdk` already on `PATH` so the bug was invisible there.
+
+### Fixed
+- **`sdk/dist/cli.js`** — switched the SDK build from plain `tsc` to `tsc && esbuild --bundle --platform=node --format=esm --outfile=dist/cli.js --allow-overwrite`, with a `createRequire` shim banner so CJS deps (ws's transitive `require()` calls) work inside the ESM output. Result: `dist/cli.js` is now a single 1.5 MB self-contained file with all runtime deps inlined. No `node_modules` needed at plugin runtime. Verified against 6 test scenarios on fresh Debian 13 with no prior GSD install: `--version`, PATH-based resolution, `query state.load`, `query commands`, MCP regression test, and workflow-style callsite simulation. All pass.
+- **`sdk/package.json`** — added `bundle` script and updated `build` to chain it after `tsc`. Added `esbuild ^0.28.0` as devDependency (build-time only, not shipped).
+
+### Notes
+- Plugin tree size grew by ~+1.5 MB (the bundled `cli.js`). Total cost is still ~80 MB less than committing `node_modules/` would have been.
+- v2.42.0 is being **superseded immediately** rather than left in the wild. Anyone who already pulled v2.42.0 should run `/plugin marketplace update gsd-plugin` to surface this fix.
+
 ## [2.42.0] - 2026-05-07
 
 **No more `gsd-sdk` prerequisite.** The plugin now bundles the GSD SDK inside its own tree, so `/plugin install gsd@gsd-plugin` is genuinely the only install step. Closes [#4](https://github.com/jnuyens/gsd-plugin/issues/4) at the architectural level (v2.41.1's README fix corrected the documentation; this release removes the requirement that documentation was trying to describe).

README.md

@@ -2,7 +2,7 @@
 
 **Based on:** [GSD 1.41.0](https://github.com/gsd-build/get-shit-done/releases/tag/v1.41.0) base tree by **TACHES** (Lex Christopherson)
 
-**Plugin version:** `2.42.0`
+**Plugin version:** `2.42.1`
 
 **GSD Plugin for Claude Code** ensures your coding work gets done in a systematic, structured way. It prompts you only for the important design and architectural decisions that actually need your judgment, and it splits each step into its own focused subcontext so token use stays optimised across long projects.
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "gsd-plugin",
-  "version": "2.42.0",
+  "version": "2.42.1",
   "description": "Performance-optimized plugin packaging of GSD (Get Shit Done) for Claude Code",
   "private": true,
   "scripts": {