v2.3.2 - reliable skill metadata and CI (MCP 0.4.2)

Manifestless skill descriptions now survive compilation and native, Cursor and Zed exports. Zed also retains its existing body preview when metadata is absent, fixing the plugin-export regression that failed the root and OCI checks.

• Preserve complete frontmatter boundaries and quote generated Gemini descriptions, including multiline values and punctuation.
• Recognize Russian and English destructive requests with intervening words while retaining mandatory safety guidance under profile exclusions and small budgets.
• Use proportional core workflows, canonical aliases and evidence reports that distinguish completed, partial and unrun checks.
• Validate every required field in the original TypeScript catalog example and distinguish behavioral checks from syntax, structure and simulations.
• Ship companion contextos-mcp@0.4.2 with restored deterministic handler/recovery coverage, a real Git repair/verification/merge scenario and passing Biome formatting. MCP runtime implementation is unchanged; execution and recovery remain experimental.

Acceptance: 542 core tests, 635 MCP tests and 10 publication-recovery tests passed. Candidate CI passed 19/19 jobs; publication and registry acceptance passed 21/21. Published npm archives match the reviewed SHA-256 identities. Production-only installation, upgrade and checkpoint rollback passed on Windows, Linux and macOS, preserving user rules and read-only MCP behavior. Results are recorded in the release evidence.

The first two publication attempts stopped while newly accepted uploads were not yet visible in npm. Retries verified the existing archive hashes before proceeding; no version or tag was overwritten. The subsequent repository-only helper update extends bounded registry probe delays and passes 12 recovery tests without changing the published package archives. Final main CI passed 19/19 jobs at 12b4e3e, including Windows installed-consumer upgrade/rollback; its actual candidate archives retain the published hashes.

npm install --save-dev --save-exact contextos-agents@2.3.2 contextos-mcp@0.4.2
npx --no-install contextos update
npx --no-install contextos compile
npx --no-install contextos export all
npx --no-install contextos export all --check --json

See release acceptance and scope and the changelog. Previous release archive identities are preserved. No new paid model benchmarks were run.