v0.3.43

What's Changed

• ci(release): publish with npm trusted publishing by @intellectronica in #518
• Preserve custom MCP server fields by @intellectronica with @Copilot in #523
• Add per-agent MCP server configuration by @intellectronica with @Copilot in #522
• fix(readme): add Zed to Skills Support requirements list by @intellectronica with @Copilot in #524
• fix(config): reject unsafe output paths by @intellectronica in #541
• Skip external symlinks during .ruler discovery by @intellectronica in #542
• ci: declare read-only contents permission by @intellectronica in #543
• ci: keep package lock version metadata in sync by @intellectronica in #544
• fix(revert): avoid corrupting malformed gitignore blocks by @intellectronica in #545
• fix(revert): honour custom MCP output paths by @intellectronica in #546
• fix(revert): scope auxiliary cleanup to selected agents by @intellectronica in #547
• ci: publish manual releases from the resolved tag by @intellectronica in #548
• ci: harden the Ruler Apply workflow by @intellectronica in #549
• fix(agents): align context filenames with custom outputs by @intellectronica in #550
• test(e2e): fail on missing comprehensive outputs by @intellectronica in #551
• fix(revert): consume backups after restore by @intellectronica in #552
• fix(mcp): normalise server container aliases by @intellectronica in #553
• fix(mcp): reject unsupported OpenHands remote headers by @intellectronica in #554
• fix(agents): honour MCP custom config paths by @intellectronica in #555
• fix(agents): respect backups for OpenCode and Crush by @intellectronica in #556
• Respect --keep-backups during revert by @intellectronica in #561
• Use discovered project root when applying from subdirectories by @intellectronica in #562
• Refuse symlinked generated output paths by @intellectronica in #563
• ci: validate release target before install by @intellectronica in #573
• fix: normalize agent-scoped MCP servers by @intellectronica in #575
• fix: avoid unchanged MCP backup churn by @intellectronica in #574
• fix: harden generated writes against symlinks by @intellectronica in #571
• fix: skip backups for generated outputs by @intellectronica in #572
• fix: revert source-marked rule outputs by @intellectronica in #576
• fix: update js-yaml dependency by @intellectronica in #579
• fix: suppress missing global config noise by @intellectronica in #582
• fix: use .agents/skills for Codex CLI instead of .codex/skills by @intellectronica with @Copilot in #587
• docs: revise scenarios for worktrees and team standards by @maiieul in #588
• Fix README.md formatting to pass Prettier CI check by @intellectronica with @Copilot in #589
• fix: prevent generated output symlink escapes by @intellectronica in #591
• fix: reject unknown ruler config keys by @intellectronica in #593
• Fix Aider MCP output by @intellectronica in #595
• Deduplicate paths during revert by @intellectronica in #597
• Preserve invalid Mistral Vibe config by @intellectronica in #599
• Preserve malformed gitignore marker content by @intellectronica in #601
• Prevent prerelease releases from publishing npm latest by @intellectronica in #603
• Harden Ruler ignore block cleanup by @intellectronica in #605
• Diagnose invalid legacy MCP servers by @intellectronica in #607
• Reject non-object native MCP configs by @intellectronica in #609
• Avoid install-time prepare builds by @intellectronica in #611
• Restrict Copilot workflow tool access by @intellectronica in #613
• Update GitHub Actions action majors by @intellectronica in #615

New Contributors

• @maiieul made their first contribution in #588

Full Changelog: v0.3.42...v0.3.43