Ygg v0.6.0

0.6.0 — 2026-08-23

Added

• Deferred tool-schema loading, ported from Pi's deferred-tools design:
  tool results can now carry added_tool_names — the set of tools that became
  available as a consequence of that execution (for example an extension or
  MCP server registering tools on first use). Models advertising the new
  deferred_tool_loading capability stop re-sending announced schemas in the
  static request tool set; providers without the capability are unaffected.
  This is the load-bearing prerequisite for lazily registered extension and
  MCP tool schemas.
• Delegated workers now expose a bounded rolling recent_tools activity ring
  (last six tool calls with flattened argument summaries, host timestamps, and
  an error flag) on every agent/list record, and the /subagents picker rows,
  inspect detail, and headless list render the latest action live — so each
  worker answers "what is it doing right now" without opening its transcript.
• Terminal-gate rejections (CandidateRejected) now carry cumulative session
  cost alongside run cost, so delegated-worker spend tracks token usage between
  accepted turns instead of jumping at settlement.

Changed

• Subagents now inherit the parent's full standard tool scope (read, search,
  edit, write, bash) by default, matching Claude Code's Task workers;
  pass tools: [read, search] to keep a worker read-only. Worker prompts,
  profiles, the spawn schema, and skill guidance were updated accordingly.
• The interactive composer's slash-command list refreshes when extension
  contributions change, and an unknown slash command now names enabled
  extensions that are not ready instead of failing with a bare error.

Added

• Added checksum-verified, bounded, atomic executable-extension bundles for the
  small first-party release catalog and offline/local archives. ygg extension install, list, update, and remove now manage API 0.2 bundles without
  enabling or trusting them; managed nested skills are discoverable but remain
  inactive until explicitly loaded.
• Added deterministic release packaging, complete tracked-file inclusion checks,
  local install/remove smoke coverage, and post-publication install/update smoke
  coverage for every catalog bundle.
• Added an interactive /extensions installed-bundle activation menu that
  persists only enablement, never trust, rebuilds the extension host at the idle
  boundary, and becomes read-only when a higher-precedence activation source is
  authoritative.
• Added a native /subagents worker browser with arrow-key selection,
  owner-bound authoritative live refresh, stable-ID focus, and scrollable,
  owner-authorized read-only delegated transcripts.
• Added subagent_continue to the first-party ygg-subagents extension:
  it steers an active worker through agent/message or resumes a settled
  worker as a new run of its durable session through agent/follow_up. A
  resumed worker keeps its conversation context, and the host clears the
  stale completion timestamp and re-anchors an elapsed wall deadline so the
  new run owns a fresh budget.
• Workers in ygg-subagents can now be granted edit, write, and bash
  per spawn through the spawn tools list. The host's scoped tool snapshot
  is the enforcement boundary; the default remains the read-only
  read/search pair.
• Cargo-installed binaries now embed the text documentation and materialize a
  versioned share/ygg/ tree that refreshes after Cargo-channel updates.

Changed

• Kept the target-specific Ygg Serve package.toml application archive distinct
  from generic executable-extension extension.toml bundles.
• Removed ambient executable-extension header/status/footer and presentation
  activity from TUI chrome; extension and worker state now appears only in
  explicit interactive views.
• Routed the coding product's in-harness child sessions through the trusted,
  owner-bound ygg-subagents extension. Ultra is now unavailable without its
  live observation service, and the root no longer receives a parallel native
  collaboration tool surface.
• Removed the fixed aggregate subagent token/cost reservation pool. First-party
  children now have fresh contexts and inherit the parent's context/output and
  optional session-token settings exactly; an unlimited parent remains unlimited.
• Raised first-party subagent limits from 2 active/16 retained children per
  owner to 8 active/32 retained, with explicit ceilings of 256 turns,
  50,000,000 microdollars, and 24 hours of wall time.
• Made per-child turn, cost, and wall-time ceilings optional in
  agent/spawn.policy: null (or omitted) inherits the parent session's