0.10.0

Changed — may break callers

• The skeleton runs on cli-core 0.469.0 and cli-base 0.65.0; a CLI that pins cli-base moves both pins together.
  A non-messenger CLI no longer offers messenger settings or the follow-ups and link-conversations skills
  (cli-core 0.468); runs record successes too, under cli-core 0.467's rules. cli-base 0.64 adds cli-dev bundle, the
  shared build that ships the bin as an esbuild bundle, and calendar words in the command vocabulary. cli-base 0.65 adds
  the verbs serve and revoke, and cli-dev lint fails on a baseline entry that names them: the skeleton's
  lint/baseline/unknown-verb.json (mcp serve, mcp revoke) is gone, and a CLI made from the template removes the
  same entries. <cli> upgrade now restarts the HTTP MCP server that mcp server start started, on the new version,
  and names the MCP sessions over stdio that still run the old one (cli-core #2117).

Added

• A CLI made from the template publishes its skill on ClawHub as wirecat-<command> after each release. release.yml
  gets a dry run through ClawHub's pinned workflow and, after the tag, a publish that only warns while ClawHub still holds
  the version pending its scan (openclaw/clawhub#4046); the template's
  own release skips both. The skill names its binary and npm package for OpenClaw (metadata.openclaw). It needs the
  CLAWHUB_TOKEN secret, which the WireCatLabs organization shares.
• new --category calendar names gcal-cli as the reference CLI in AGENTS.md and DESIGN.md, and the
  Reference CLIs page lists it, instead of "No reference CLI for this category yet". gcal-cli is the WireCat Google
  Calendar CLI. A CLI made before this keeps what it wrote; edit its AGENTS.md by hand if you want the link.
• scripts/audit.sh audits beside gcal-cli too: it installs @wirecat/gcal-cli with the other published CLIs
  and passes its gcal bin to cli-dev audit.
• An agent publishes a release itself. The release skill and bin/release let an agent merge the release pull
  request and run bin/release, which publishes from GitHub Actions. bin/release --local stays the owner's, for
  the first release.

Fixed

• The release audit never uses the owner's accounts. Its prompt now says: no sign-in, every folder moved, the
  keyring hidden with DBUS_SESSION_BUS_ADDRESS=disabled:, and no command that writes to a service.
• bin/release raises the next free version to the level the changelog needs. When npm already had the version, it
  took the next patch, so a release with Added (0.1.1 taken, 0.1.2 proposed) failed version:check and stopped;
  it now proposes 0.2.0. A generated CLI gets it with the next template update.
• A CLI made from the template starts from an esbuild bundle. pnpm build runs tsc, then cli-base's
  cli-dev bundle (WC-LAY-10), and the
  bin becomes a loader for dist/bundle/: the skeleton's config show --help starts in 151 ms instead of 366.
  scripts/smoke-bundle.ts runs the bundle under Node (pnpm smoke:node, in CI) and Bun (pnpm smoke:bun).