v0.13.3

Added

• Shell/PowerShell languages, nested polyglot detection, Trae target, verify config gate
• (release) auto re-pin homebrew sha256 checksums on the v* tag push
• add 8 languages, remove command, and 4 rules-directory targets

Fixed

• correct code-review findings across verify, introspect, and CLI surface (#25)
• address comprehensive code review findings (#23)
• (ci) make multi-skill test git-identity-independent and unblock release PR
• honor intent-driven CLI rendering, multi-skill/update artifacts, distribution hardening

Other

• split verify modules and main.rs into commands/, add release hygiene (#17)
• fold per-language CLI probes into each language's spec module
• one module per language in introspect/manifest, per-format modules in generate
• list Qoder, Continue, Augment, and Amazon Q as supported agents

Added

• Eight new language ecosystems: Lua (*.rockspec), Julia
  (Project.toml), Crystal (shard.yml), Clojure (deps.edn /
  project.clj), OCaml (dune-project / *.opam), Erlang
  (rebar.config / *.app.src), R (DESCRIPTION), and Perl
  (cpanfile / Makefile.PL / META.json) — with manifest name/version/
  author/license parsing, category/globs hints, and CLI candidates.
• Expanded Dart (CLI detection + pubspec.yaml name/version/authors) and
  Haskell (CLI detection + .cabal name/version), and Nix flake.nix
description capture as a description-hint fallback.
• skillpack remove <name> — the symmetric counterpart to add: drops a
  skill from skillpack.toml, deletes its orphaned per-skill files, and
  regenerates the remaining targets.
• Four new agent ecosystems: Qoder (.qoder/rules/), Continue
  (.continue/rules/), Augment Code (.augment/rules/), and Amazon Q
  Developer (.amazonq/rules/) — plain-markdown workspace-rule targets,
  taking the supported agent count from 14 to 18.
• verify --format json now self-identifies with $schema and
  schemaVersion fields (matched by verify-report.schema.json), and
  doctor --format json gained a verify_category_preview field.
• A schemas CI job meta-validates both committed JSON Schemas and checks a
  representative report instance (via scripts/validate_schemas.py).

Fixed

• owner_type is now validated at config-load time (only individual or
  organization) instead of letting the renderer emit any string.
• allowed_tools hint is now keyed off has_cli (pure-library skills no
  longer get a Bash hint), and derived marketplace keywords are capped at
  16 so a deep CLI subcommand tree can't bloat the marketplace entry.
• add --target help text matched the code: the flag's help claimed it
  defaults to claude, but the implementation delegates to update's
  default (every target already present, falling back to all). The help
  now describes the real behavior.
• GPL license detection distinguishes v2 from v3 — every GPL variant
  used to collapse to GPL-3.0, so a GPLv2 project shipped plugin.json with
  the wrong SPDX id. Detection reads the "Version N" header line and emits
  the modern GPL-2.0-only / GPL-3.0-only ids.
• --target list --format sarif|github|junit now errors instead of
  silently degrading the listing to human output (init/update/diff/add/remove).
• A hand-written SKILL.md whose flag-bearing fenced block is left unclosed
  at EOF is still detected as documenting a CLI (the fallback parser only
  evaluated closed fences).
• discovery.empty's failure message lists .trae/rules/ and Trae, which
  were missing while every other rules directory was named.
• Windows PATH lookup falls back to cmd.exe's default executable extensions
  when PATHEXT is unset, so bare-name probes (node, go) resolve in
  minimal environments.
• resolve_targets now actually dedups into canonical declaration order
  (--target cursor --target all used to reorder Cursor ahead of the pack).

Changed

• Dropped the once_cell dependency (std::sync::LazyLock — MSRV is 1.85)
  and dialoguer's unused fuzzy-select/editor features (only Input is
  used). Removed stale Cargo.toml exclude entries.
• Corrected several doc comments that a refactor left attached to the wrong
  items (is_meta_flag ↔ check_subcommand_drift, run_help ↔
  extract_documented_invocation, spawn_capture ↔ check_flag_drift,
  find_kv_colon ↔ claude_present, canonicalize_for_argv, and the
  SkillConfig::author field), rewrote the garbled verify --watch flag
  doc, updated the stale language list on ProjectProfile::language, and
  reworded the internal "Ponytail" notes.