v0.8.0

Changed

• Skills, subagents, and commands are about 130 words shorter each. The rules for declining a request, stopping for missing inputs, and refusing an instruction embedded in evidence are now three ordered directions under ## Reply paths, kept in one source file and copied into 392 payloads. A reply no longer has to name one of four situation labels.
• Related links now cover most of the catalog: 125 new composesWith pairs, so 118 artifacts that stood alone point to the artifacts they hand work to or receive it from. An artifact whose text names another by slug is always linked to it.
• The thirty subagents that review a set of paths now search before they read: each brief lists the calls, keywords, and file patterns to look for, opens the highest-risk candidates first, and reports the ones it did not open with the search that found them.
• A subagent handed a request that belongs to the neighbour its description names now says so and stops instead of reviewing it.
• Every subagent description now says what sets it apart: the signals in a request that should select it, and the neighbour to use instead (Not for X; use <slug>). Before, 35 of 62 ended with the same sentence, so an agent choosing a specialist had nothing to go on.
• Nine skills that analyze and then change the repository (define-domain-language, debug-systematically, assess-mutation-test-value, build-repository-quality-gates, simplify-code-with-invariants, enforce-typescript-module-boundaries, request-independent-code-review, evaluate-code-review-feedback, verify-completion-evidence) can be asked for the analysis alone: they report, change nothing, and list the changes they would have made as proposals.
• Thirty subagents can review a set of paths as they stand, not only a diff. Without a baseline they derive the missing invariant, contract, or policy from the code, label it inferred, and list every supplied path they did not open, instead of stopping for missing inputs. Their turn budget is up to four turns higher, capped at sixteen.
• Every subagent reports findings in one format: an id, a category, a severity, a confidence, the claim, each cited file as path:start-end, the quoted evidence, what would prove the claim wrong, the impact, and the smallest next action. Severity is one scale (Critical, High, Medium, Low) and confidence is one scale (Demonstrated, Supported, Suspected), so results from several specialists can be merged and sorted. Blocking is no longer a severity, and missing evidence lowers confidence instead of severity.
• Commands state which steps ask for your permission and what happens when you deny one. The tools a command declares are pre-approved for the turn that invokes it; they never limited what the command could run, and the catalog no longer describes them as an allowlist.
• /re-pin-mcp-tools no longer pre-approves file edits. The pre-approval covered only the turn before you confirm the digest, which is the one turn where the command forbids edits.
• Five commands (/preflight-change-environment, /audit-repository-instructions, /assemble-review-brief, /diagnose-ci-failure, /record-work-checkpoint) no longer open with a precondition step that checked nothing.

Fixed

• packs --json and pack-info --json print JSON instead of refusing the flag. With --target, pack-info --json reports installable and blockingMembers.
• pack-info refuses an unknown --target, and says when a pack cannot be installed on the chosen target and which required members block it. pack-info <pack> --target codex previously printed the pack as if it were installable.
• A --cwd that does not exist or is not a directory is refused. doctor --cwd <missing path> answered No state drift found. and add --dry-run answered Would install.
• /verify-session-ledger stops with a clear message when no ledger exists, instead of reporting an empty ledger as verified.
• The counts in catalog/artifacts.json include commands, contexts, and MCP servers, so the per-kind counts add up to the total.
• Subagent profiles for Claude Code, Gemini CLI, and OpenCode carry the turn budget instruction that only the Copilot profiles had, so a specialist that runs out of turns returns partial evidence instead of being cut off.
• application-security-reviewer names the six narrow specialists it routes to by their catalog slug, so the parent agent can dispatch them.
• configuration-semantics-reviewer no longer lists a refusal that described configuration-drift-analyst.
• 34 skills no longer show a one-line description cut off mid-phrase in the Codex skill list.

Integrity

Root digest: f3d6fbb3eee4829d609c9d9147755eb59d75cfb24686245eb120282e59666a25. Compare it with npx @youdede/toolkit verify-integrity.