6.0.0 (2026-08-23)
⚠ BREAKING CHANGES
- engines.node is now >=24; consumers on Node 18-23 can
no longer install this package.
Features
- build: complete the turbo graph and make pre-push the full gate (1257f1a)
- build: one eslint gate for every file type, plus knip and package checks (10182f0)
- build: prettier coverage for the YAML, JSON, and Markdown surface (1e9cdc6)
- build: raise lint to the full strictness set and eliminate every type assertion (cb42ad1)
- ci: prune inert security overrides instead of accumulating them (cc750c8)
- ci: rebuild the pipeline around a shared setup action and real gates (37b737b)
- dogfood the product with a committed .agents/permissions.json (d757900)
- require Node 24, the current LTS, as the baseline (2825ddc)
Bug Fixes
- build: cover plain-JS files, type to the runtime floor, and close the turbo cache gaps (e525c1a)
- ci: align action pins and repair output plumbing in the pipeline (7010001)
- ci: judge override inertness by the selector and roll back prunes honestly (c7ac3e9)
- ci: scope the turbo cache key per node version (ef40087)
- cli: treat an explicit --help as a successful invocation (ea0b3ec)
- pkg: point the MCP registry entry at the alias that exists (745bcb4)
- pkg: restore bare-package resolution with a root exports entry (3dea947)
- release: accept the pkg scope for package-manifest commits (f54eccd)
- release: drive commitlint and semantic-release from one commitTypes source (bd27df2)
- release: stamp server.json's version fields on every release (c20a625)
Documentation
- add a security policy, contributing guide, and LF normalisation (71aaf07)
Tests
- ci: unit-test the CI helper scripts' pure logic (91a66a0)
- cli: run every CLI invocation from a throwaway cwd (3453086)
- schema: hold the committed JSON schema against the schema source (ffc0cee)
Schema: v6.0.0/agent-permissions.schema.json
