dyoshikawa/rulesync v38.0.0 on GitHub

Breaking Changes

GitLab Duo: project skills are now written to .agents/skills/<name>/SKILL.md instead of the repository-root skills/<name>/SKILL.md. GitLab Duo now reads .agents/skills/ ahead of skills/. Skills generated into skills/ by earlier releases keep working and are still imported, but Rulesync no longer writes or sweeps them, so delete them or move them to .agents/skills/ by hand. rulesync gitignore now adds **/.agents/skills/ for gitlabduo; if a GitLab UI flow reads skills from the committed repository, keep .agents/skills/ out of .gitignore. (#3535)
Reasonix: [sandbox] keys allow_devices, egress_unlisted and host_authorities are now global-only. Reasonix replaces their project values with the user's, so a project-scope generate now skips them with a warning and keeps what the file already had; write them with --global. They also count as trust-affecting and warn when they loosen the sandbox. (#3544)
Grok CLI: a hook that sets if is now skipped with a warning instead of being written unconditionally, because Grok skips such a handler rather than evaluating it. Hook args are now forwarded (Grok 1.0.63+ reads them; 1.0.49–1.0.62 skip a handler that carries args). (#3549)
Kimi Code: MCP executor values other than local are dropped with a warning on generate and import, matching Kimi Code 2.2.0's schema; kaos is no longer written. (#3548)

feat(lettacode): support custom slash commands in .commands/ (project) and ~/.letta/commands/ (global); the project .commands/ is treated as committed output and is neither gitignored nor swept by --delete (#3539)
feat(openclaw): generate and import global MCP servers in ~/.openclaw/openclaw.json, editing the file in place and refusing JSON5-only files it cannot edit safely (#3540)
feat(trae): add global permissions via ~/.trae/permission/global.json (#3545)
feat(opencode): read .opencode/opencode.json(c) on import and warn when it overrides generated values (#3547)
feat(zcode): write MCP timeoutMs, cwd, protocolVersion and OAuth (authored as zcodeOauth) (#3537)
feat(qoder): author non-permissions settings (general, tools, mcp, agents, agentsMdExcludes, autoMode) through the qoder override (#3538)
feat(devin): map preCompact hooks to PreCompact and author plugin governance lists (#3541)
feat(musecode): emit license, compatibility and metadata on skills (#3542)
feat(crush): carry the MCP channel_enabled / channel_reply keys (#3532)
feat(gitlabduo): write project skills to .agents/skills (#3535)

fix(codexcli): treat project_doc_max_bytes = 0 as project docs disabled (#3534)
fix(dsh): emit AGENTS.local.md for localRoot rules and document the shared ~/.agents/AGENTS.md root (#3536)
fix(claudecode-plugin): drop initialPrompt from plugin subagents, which Claude Code ignores (#3543)
fix(reasonix): treat user-only [sandbox] keys as trust-affecting and global-only (#3544)
fix(antigravity-plugin): give the plugin root rule rules/AGENTS.md an always_on trigger (#3546)
fix(kimi-code): drop MCP executor values other than local (#3548)
fix(grokcli): forward hook args and skip hooks carrying an if condition (#3549)

Full Changelog: v37.1.0...v38.0.0