v0.19.2 -> v0.19.3

Summary

Introduces slash-command routing for external CLI agents (/claude, /codex, /gh, /copilot) across all three entry points and a read-only delegation mode for invoke_external_agent; consolidates external-agent execution into a shared internal/agents/external package.

Changes

FEAT

• Add slash-command prefix routing (/claude, /claude-allow, /codex, /codex-allow, /gh, /copilot) so user input is dispatched directly to the matching external CLI agent without consuming a planner LLM call; wired into exec.Run, discord/run.go, and routes/handler/send.go ahead of skill matching.
• Add readonly parameter to invoke_external_agent (default true) to let the calling agent opt into write-enabled delegation; cross_review_with_external_agents remains hardcoded read-only.
• Add per-agent read-only CLI flag mapping in external.Run (claude --disallowedTools=Edit,Write,NotebookEdit vs --permission-mode acceptEdits; codex default sandbox vs --dangerously-bypass-approvals-and-sandbox; copilot bare vs --allow-all-tools --allow-all-paths --allow-all-urls).

FIX

• Allow internal file tools (write_file, patch_edit, and read_file via patch_edit helper path) to bypass the isExclude listing filter so writes to paths like .doc/ (listed in project .gitignore) no longer fail with path is excluded; read_file tool and directory walkers still honour exclusion.

REFACTOR

• Extract external CLI agent install/login/exec logic from internal/tools/externalAgent/ into new internal/agents/external package (external.go, match.go); tool wrappers reduced to thin shells holding only LLM-facing registrations.
• Rename and split external tool files: callExternalAgent.go + command.go removed; invokeExternalAgent.go and crossReviewWithExternalAgents.go carry the renamed tool definitions.
• Add exec.CallExternal indirection (internal/agents/exec/external.go) so session creation, history persistence, and event emission stay unified across prefix-routed external dispatch.

Files Changed

Generated by SKILL