v0.35.0

What's Changed

🔧 Other Changes

• fix(hooks): render nested hook metadata as plain JSON by Abhishek Acharya (@abhishekacharya200) in #3211
• test(hooks): align cursor smoke expectations with native flat handlers by Mohammed Alkindi (@MohammedAlkindi) in #3198
• fix: install versioned marketplace package directories by sama Pyb (@Pybsama) in #3156
• fix: keep Codex MCP identity outside native settings by sama Pyb (@Pybsama) in #3157
• fix(cli): report only verified APM build revisions by Daniel Meppiel (@danielmeppiel) in #3280
• fix(hooks): admit and stage hook-only Git-path packages by Daniel Meppiel (@danielmeppiel) in #3282
• fix(hooks): type untyped flat command handlers for Claude by parth (@Parth-Vasave) in #3153
• Fix native Agent Plugin audit replay for Copilot targets by bodapatisaikrishna in #3257
• test(audit): preserve OpenCode local-bundle lifecycle coverage by Daniel Meppiel (@danielmeppiel) in #3292
• fix(auth): recover private files after API throttling by Daniel Meppiel (@danielmeppiel) in #3278
• fix(audit): preserve Grok Cloud target identity and historical checks by Daniel Meppiel (@danielmeppiel) in #3289
• fix(codex): preserve complete compatibility bundles through native user installs by Daniel Meppiel (@danielmeppiel) in #3294
• fix(lockfile): diagnose merge conflicts without automatic recovery by Lachlan Heywood (@lachieh) in #3028
• fix(policy): resolve marketplace object-form deps in ref-consistency check (#3220) by Abhinav Maurya (@Fire162) in #3221
• fix(install): verify local content in frozen mode by Wu Shuwen (@dajiaohuang) in #3236
• fix(pack): preserve and relocate plugin hook resources by Daniel Meppiel (@danielmeppiel) in #3301
• fix(install): include required indirect dependencies in dry-run previews by Daniel Meppiel (@danielmeppiel) in #3302
• fix(install): restore cold frozen plugins with verified MCP declarations by Daniel Meppiel (@danielmeppiel) in #3305
• fix(install): preserve frozen lock bytes and recorded native-service ownership by Daniel Meppiel (@danielmeppiel) in #3307
• fix(audit): preserve project scope across native Windows path spellings by Daniel Meppiel (@danielmeppiel) in #3316
• fix(schema): propose corrected manifest 0.1.48 contract by Daniel Meppiel (@danielmeppiel) in #3308
• fix(triage): prefetch and bound scheduled sweep candidates by Daniel Meppiel (@danielmeppiel) in #3277
• fix(install): capture acquired manifest versions on first install by Daniel Meppiel (@danielmeppiel) in #3311
• fix(deps): support local single-file dependencies by Daniel Meppiel (@danielmeppiel) in #3310
• fix(skills): preserve shared assets and deployment ownership by Daniel Meppiel (@danielmeppiel) in #3313
• fix(opencode): render native MCP environment references by Lenin Mookiah (@leninworld) in #3303
• fix(mcp): preserve conflicting native connections and verify managed updates by Daniel Meppiel (@danielmeppiel) in #3317
• Fix [BUG] Missing kiro prompts primitive entry by DBVamsi (@DBVamsi) in #3263
• fix(audit): respect intentional dependency MCP omissions by Daniel Meppiel (@danielmeppiel) in #3304
• fix(install): preflight selected skill plans before native deployment by Daniel Meppiel (@danielmeppiel) in #3314
• docs: make README manifest example installable by venkatayedidavs in #3086
• add(deps): support consumer-root source replacements by Daniel Meppiel (@danielmeppiel) in #3309
• fix: preserve Windows staging failures and recovery data by Daniel Meppiel (@danielmeppiel) in #3318
• fix(install): retire obsolete absent dependency claims after complete reintegration by Daniel Meppiel (@danielmeppiel) in #3315
• fix(install): persist replacement intent after the last dependency is removed by Daniel Meppiel (@danielmeppiel) in #3328
• fix(audit): fail closed when an explicit --policy cannot be loaded by Daniel Meppiel (@danielmeppiel) in #3230
• fix(ci): restore deterministic fixtures and marketplace replay by Daniel Meppiel (@danielmeppiel) in #3325
• fix(mcp): preserve verified ownership across lifecycle transitions by Daniel Meppiel (@danielmeppiel) in #3329
• fix(ci): use canonical skill results in orchestration fixtures by Daniel Meppiel (@danielmeppiel) in #3336
• fix(ci): align generated skill repair with explicit overwrite consent by Daniel Meppiel (@danielmeppiel) in #3337
• fix(tests): restore canonical fixture contracts for CI by Daniel Meppiel (@danielmeppiel) in #3338
• fix(ci): shard lifecycle smoke without weakening its gate by Daniel Meppiel (@danielmeppiel) in #3345
• fix(install): preserve unchanged manifest requests by Daniel Meppiel (@danielmeppiel) in #3346
• fix(ci): isolate ratchet and scaling execution budgets by Daniel Meppiel (@danielmeppiel) in #3347
• fix(tests): restore MCP and update-plan CI contracts by Daniel Meppiel (@danielmeppiel) in #3343
• fix(install): retain trustworthy rendered skill receipts by Daniel Meppiel (@danielmeppiel) in #3344
• fix(tests): await parallel cache consumers before assertions by Daniel Meppiel (@danielmeppiel) in #3352
• fix(tests): align full-route fixtures with canonical receipt contracts by Daniel Meppiel (@danielmeppiel) in #3353
• chore: release v0.35.0 by Daniel Meppiel (@danielmeppiel) in #3355
• fix(ci): budget macOS ARM full release integration by Daniel Meppiel (@danielmeppiel) in #3360
• fix(ci): budget Linux x64 qualification and expose audit failure by Daniel Meppiel (@danielmeppiel) in #3362
• fix(ci): budget focused Intel release qualification by Daniel Meppiel (@danielmeppiel) in #3364

New Contributors

• Abhishek Acharya (@abhishekacharya200) made their first contribution in #3211
• parth (@Parth-Vasave) made their first contribution in #3153
• Abhinav Maurya (@Fire162) made their first contribution in #3221
• Lenin Mookiah (@leninworld) made their first contribution in #3303
• DBVamsi (@DBVamsi) made their first contribution in #3263
• venkatayedidavs made their first contribution in #3086

Full Changelog: v0.34.0...v0.35.0