v1.7.3
Bug fix release — 5 bugs fixed from audit pass 4
Critical:
- Rewrite LSP server to properly read multi-line JSON-RPC messages using Content-Length byte counting (was reading only first line)
Medium:
- Fix .cursorrules sort priority — now correctly sorts last within always tier (was incorrectly first)
- Fix prototype pollution risk in conflict deduplication (use Object.create(null))
- Fix prototype pollution risk in heading duplicate detection (2 locations)
Low:
- Clean up regex property access spacing