- Document config paths for Claude Code, VSCode Copilot Chat, Copilot CLI, Codex CLI
- Include skills, commands, MCP, rules/instructions for each tool
- Add directory structure comparison and frontmatter schemas

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

* feat: add skills detection for Copilot and Codex user-level paths

- Added path utilities for ~/.copilot/skills/, ~/.codex/skills/, and .codex/skills/
- Extended scanAllSkills to scan all AI provider skill directories
- Added 'codex' to SkillReference.source type
- No deduplication: all skills from all sources are shown

Closes #507

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* improvement: add source grouping and jump navigation to SkillBrowserDialog

- Group skills by source (Claude Code / Copilot / Codex) in each tab
- Add jump navigation buttons to quickly scroll to source sections
- Display section headers with AIProviderBadge for each source group

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

)

* fix: add MCP server detection for Copilot and Codex

- Add McpConfigSource type ('claude' | 'copilot' | 'codex')
- Add config readers for VSCode Copilot, Copilot CLI, and Codex CLI
- Extend getMcpServerConfig to search all sources with priority order
- Add getAllMcpServersWithSource function for unified scanning
- Add MCP config path utilities for Copilot/Codex

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: add grouped UI for MCP servers and fix Copilot CLI config

- Add source-based grouping (claude/copilot/codex) to MCP server list
- Add jump navigation for multiple source groups
- Add sticky section headers with AIProviderBadge
- Remove Copilot CLI project-scope MCP support (not supported by CLI)
- Update documentation to reflect correct Copilot CLI MCP paths

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: improve MCP server detection from Copilot CLI and Codex CLI

- Merge CLI results with config file servers (Copilot/Codex)
- Use source:id combination for unique server identification
- Make status field optional (only Claude Code can determine it)
- Display scope and status badges horizontally
- Fix duplicate selection issue with source-aware key comparison

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: display source badge on MCP Tool nodes in canvas

- Add source field to McpNodeData type definitions
- Pass source from selected server when creating MCP nodes
- Display AIProviderBadge (Claude Code/Copilot/Codex) in node header

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

- Fixes Dependabot alerts #19, #20, #21, #22
- Addresses XSS, cache deception, arbitrary key read, IP spoofing issues

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

- Added targetCli parameter to skill normalization functions
- Copilot CLI: .github/skills/ and .copilot/skills/ are native (no copy dialog)
- Codex CLI: .codex/skills/ is native (no copy dialog)
- Added .copilot/skills/ as alternative Copilot skill directory

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

- Remove ensureProjectTrustedForCodexCli() function
- Remove needsProjectTrustForCodexCli() function
- Remove CodexProjectConfig interface and projects field
- Simplify notification message logic in handleRunForCodexCli()

Closes #495

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

- Use path.resolve() with skillPath directly instead of reconstructing path
- Handles both absolute paths (user-scope) and relative paths (project-scope)
- Mark unused _getSourceSkillsDir() with underscore prefix

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

- Extended source badge visibility from project-only to both project and user scopes
- Allows user-scoped skills from Claude Code, Copilot, and Codex to display their source badge

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

Release: v3.18.2

## [3.18.2](v3.18.1...v3.18.2) (2026-01-29)

### Bug Fixes

* add CLI-aware skill normalization to skip native directories ([#512](#512)) ([0c49d94](0c49d94))
* add MCP server detection for Copilot CLI and Codex CLI ([#509](#509)) ([#510](#510)) ([ef31649](ef31649))
* add skills detection for Copilot/Codex with grouped UI ([#508](#508)) ([ab89f69](ab89f69)), closes [#507](#507)
* remove Codex project trust workaround ([#513](#513)) ([c5a9c45](c5a9c45)), closes [#495](#495)
* resolve skill source path correctly for all scopes ([#514](#514)) ([8caf97e](8caf97e))
* show AI provider badge for user scope skills ([#515](#515)) ([760d411](760d411))

### Documentation

* add AI coding tools configuration reference ([#505](#505)) ([f3bd005](f3bd005))