v0.3.3

Full Changelog: v0.3.2...v0.3.3

What's Changed

• fix(mcp): harden hosted tools and redact login API key by @kioie in #26
• feat(mockdrift): Phase 1A/1B harness and OSS test expansion by @kioie in #27
• Bump actions/dependency-review-action from 4 to 5 by @dependabot[bot] in #20
• Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #21
• Bump dorny/paths-filter from 3 to 4 by @dependabot[bot] in #22
• Bump gitleaks/gitleaks-action from 2 to 3 by @dependabot[bot] in #23
• Bump tsx from 4.22.3 to 4.22.4 by @dependabot[bot] in #24
• Bump @types/node from 22.19.19 to 25.9.2 by @dependabot[bot] in #25
• feat(mockdrift): Phase 1C cloud replay + GitHub Action by @kioie in #28
• fix(mockdrift): User-Agent for production cloud replay by @kioie in #29
• feat(fuseguard): Phase 2A OSS loop fuse and budget gate by @kioie in #30
• ToolChange Phase 3A: manifest lint (OSS) by @kioie in #31
• SEC-U03 + SEC-U04: CI redaction and trial logging by @kioie in #33
• [PERF-U05] Merge npm test and c8 coverage in one CI job by @kioie in #43
• SEC-H05: AbortSignal.timeout on hosted fetch by @kioie in #44
• fix(ci): dedupe mockdrift full pytest (PERF-U06) by @kioie in #49
• [PERF-H05] Avoid redundant summarize in nested diffSchemas by @kioie in #50
• Add entry harness tests for check.ts and MCP server (TST-U05) by @kioie in #53
• fix(cli): lazy-load subcommands so version avoids MCP graph (PERF-U04) by @kioie in #51
• ARCH-U01: unify diff core in @driftguard/diff-core by @kioie in #34
• ToolChange 3A action/hooks + SchemaSync 4A lint-nl by @kioie in #32
• [SEC-H07] Gate custom DRIFTGUARD_API base URL by @kioie in #54
• [PERF-H06] Compact MCP compare_json output by @kioie in #52
• Standardize Parallel Agent PR Runner Protocol by @kioie in #55
• Overlay GA: OSS scale/quality hardening (PERF-M04, SEC-M02/M03) by @kioie in #56
• feat(mcp): get_watch_status hosted tool (CP-1.3) by @kioie in #57
• feat(mcp): agent status and affected-agents tools (CP-2.6) by @kioie in #58
• docs: OSS documentation hub (phases 1–4) by @kioie in #59
• feat(fuseguard): CP-3.1 drift preflight gate by @kioie in #60
• feat(fuseguard): CP-3.2 FuseTrip blocked response by @kioie in #62
• docs: plain-language OSS hub and guides by @kioie in #61
• feat(mcp): trigger_remediation hosted tool (CP-4.2) by @kioie in #63
• docs: A2A Contract Watch hub sync and gate ladder by @kioie in #64
• docs: plain language sprint — README and guides index by @kioie in #65
• feat(agents): CP-2.1 agents.yaml CI validation by @kioie in #66
• feat(agents): drift-agents-lint GitHub Action (CP-2.1) by @kioie in #67
• feat(agents): add drift-agents-lint GitHub Action (CP-2.1) by @kioie in #68
• docs(readme): pin hosted trial and MCP tutorial above the fold by @kioie in #69
• feat(harness): bundle ADR, sensor v1, and H1–H5 harness engineering by @kioie in #71
• chore(sonar): OSS SonarCloud config and hotspot guide by @kioie in #72
• chore(docs): move product IP to driftguard-cloud boundary by @kioie in #73
• feat(INT-002): npx-based MCP client config without absolute paths by @kioie in #75
• feat(INT-003): AGENTS.md snippet for consumer repos by @kioie in #76
• build(deps-dev): bump @types/node from 25.9.2 to 25.9.3 by @dependabot[bot] in #70
• docs: agent discovery roadmap with testable P0/P1/P2 tasks by @kioie in #74
• fix: bump hono to resolve high-severity npm audit findings by @kioie in #81
• docs: Singapore MGFA product fit and E1–E23 assessments by @kioie in #77
• feat(DISC-005): design-time discovery keywords by @kioie in #78
• feat(INT-001): single DRIFTGUARD_API_KEY activation story by @kioie in #79
• feat(INT-004): offline-first messaging by @kioie in #80
• feat(DISC-004): cursor rule template for consumer mcp.json repos by @kioie in #82
• docs(DISC-003): canonical llms.txt URL in DISCOVERY by @kioie in #83
• docs(ACT-003): GET /api/me key verification by @kioie in #84
• ACT-002: trial/pricing URLs in hosted failure responses by @kioie in #85
• DES-001: design-time trigger table and agent eval scenarios by @kioie in #86
• DES-002: positioning vs Sentry / OpenAPI lint by @kioie in #87
• DES-003: A2A + MCP correlation narrative by @kioie in #88
• DES-004: gate ladder agent start path by @kioie in #89
• chore: DES-004 merged in roadmap log by @kioie in #90
• docs(roadmap): mark ACT-001 merged by @kioie in #91
• docs: MGFA Wave A evidence pack + ACT-003 log by @kioie in #92
• docs: npm brand collisions and disambiguation by @kioie in #93
• feat(disc-001): scoped npm publish @driftguard/driftguard + defensive @driftguard/cli by @kioie in #94

Full Changelog: merchant-demo-2026-06...v0.3.3