v0.3.0

What's new

Codex and Pi support

• Added a native Codex plugin manifest and repository marketplace, making all eleven workflows installable through Codex CLI and desktop plugin surfaces.
• Added Codex-specific invocation, verification, update, troubleshooting, and marketplace documentation.
• Added Pi package metadata so pi install git:github.com/waybarrios/opencode-power-pack discovers all eleven bundled skills.
• Added Pi installation, project-local installation, update, verification, and troubleshooting documentation.

Modern OpenCode integration

• Adopted OpenCode 1.18.7+ native skill discovery and same-named slash commands.
• Removed the duplicated legacy commands/ wrappers; each SKILL.md is now the single source of truth for Codex, OpenCode, and Pi.
• Simplified installation and updates with the modern opencode plugin command—no manual command symlinks or cache surgery required.
• Registered code-explorer, code-architect, and code-reviewer as least-privilege, read-only OpenCode subagents without overwriting user-defined agents of the same name.
• Added an OpenCode smoke-test workflow and package-surface regression coverage.

Safer and more complete workflows

• Strengthened feature-dev with explicit specialist assignments, complete before-state capture, phase handoffs, bounded recovery, and a coverage ledger that cannot silently turn incomplete work into a clean result.
• Hardened code-review with frozen PR/local scopes, content-addressed worktree checks, validated child results, bounded recovery, complete coverage ledgers, runtime-input reconciliation, and idempotent comment-posting rules.
• Hardened security-review with explicit scope resolution, path filtering, branch provenance checks, baseline evidence, content-addressed worktree validation, category coverage, secret/runtime-input reconciliation, and distinct complete, empty, and incomplete outcomes.
• Updated code-reviewer, code-explorer, and code-architect to honor authoritative handoffs and treat supplied content as untrusted data.
• Improved frontend-design with separate page/component planning ownership, pre-implementation material requirements, anti-convergence guidance, and objective accessibility and quality thresholds.
• Modernized mcp-builder guidance around immutable protocol evidence, lifecycle and capability negotiation, transports, security boundaries, tools/resources/prompts, MCP error channels, and deterministic protocol tests.
• Corrected project-rule discovery and precedence guidance across Codex, OpenCode, and Claude, including bounded recursive Claude imports and portable packaged-resource resolution.
• Added consistent prompt-injection boundaries and bounded recovery across orchestrators and specialists, including protections for project rules, web evidence, issue text, metadata, and child-agent responses.

Behavioral evaluation and regression testing

• Added an opt-in deterministic behavioral evaluation runner with twelve adversarial cases covering all direct workflow consumers.
• Isolated live evaluation runs from user configuration, plugins, tools, credentials, generated state, and runaway process groups.
• Added strict event parsing, denied-tool detection, response redaction, stable grading, timeouts, schema validation, and fail-closed handling for malformed or incomplete runs.
• Added atomic reports, content-addressed reviewed snapshots, acceptance/replay commands, mutation tests, and documented reviewer workflows.
• Expanded the automated suite to 171 passing tests covering orchestration contracts, prompt safety, plugin registration, package contents, provenance, platform manifests, and behavioral evaluation internals.

Provenance, licensing, and documentation

• Added UPSTREAMS.json with immutable repository commits, source paths, blobs, dates, and adaptation types for every shipped skill.
• Added third-party notices and bundled MIT/Apache-2.0 license texts, with package metadata updated to MIT AND Apache-2.0.
• Reworked the README around Codex, OpenCode, and Pi installation, invocation, architecture, verification, updating, troubleshooting, scope, and contribution workflows.
• Added package metadata and keywords for Codex and Pi, tightened the published file surface, and refreshed the release badge in the project logo.

Compatibility note

• OpenCode users now need OpenCode 1.18.7 or newer.
• Legacy copied or symlinked command files are no longer part of the package. OpenCode creates slash commands directly from the installed skills.

Updating

Codex

codex plugin marketplace upgrade opencode-power-pack
codex plugin add opencode-power-pack@opencode-power-pack

Start a new Codex session after the upgrade.

OpenCode

opencode plugin --global --force "opencode-power-pack@git+https://github.com/waybarrios/opencode-power-pack.git#v0.3.0"

Restart OpenCode after installation. If you previously created command symlinks for an older release, they are no longer required and may override the native skill-derived commands.

Pi

pi update git:github.com/waybarrios/opencode-power-pack

Start a new Pi session after the update.

Validation

• npm test: 171 tests passed
• npm pack --dry-run: verified the 0.3.0 package contents
• GitHub Actions lint-skills: passed on the release commit

Full Changelog: v0.2.0...v0.3.0