chore(v0.8.3): GitHub-close pass — 52 verifier-confirmed issues

[subinium]

Summary

This release is a GitHub-close pass with zero source code change. The 52 issues
that remained open after v0.8.2 (PR #290) had all been implemented in earlier
release PRs (#209, #211, #251, #252, #290), but their close clauses used range
syntax (`Closes #230–#240`, `Closes the 10-issue gap (#241–#250)`) which GitHub
does not auto-process — leaving the issues in OPEN state despite the code being
on `main`.

v0.8.3 verifier-passes the codebase, closes all 52 issues with evidence pointers,
and bumps the version line to a clean cut so consumers can `npm install crowclaw@0.8.3`.

Diff scope

• Source code: 0 lines changed.
• 23 files changed in bootstrap commit `5a6d53a` (version bump on root + 19 packages + `wrangler.jsonc`, plus worklog scaffold + CHANGELOG stub).
• 3 files changed in finalize commit `64c842b` (CHANGELOG consolidation + README badge bump + worklog finalisation).

Issues closed (52, already individually closed via bulk script)

v0.8.1 dashboard verifier gaps — shipped in PR #252

#224, #242, #244, #246, #247, #248

v0.8.2 critical bug remnants — shipped in PR #290

#190, #212, #213, #214

v0.7 / post-v0.7.1 audit — shipped across v0.7.x / v0.8.x sweeps

#181, #182, #183, #185, #186, #189, #191, #192, #196, #197, #198, #199, #200,
#201, #205, #206, #207, #208, #215, #216, #217, #218, #219, #220, #221, #222,
#223, #225, #226, #227, #228

v0.8.0 Hermes parity — shipped in PR #251

#231, #232, #233, #234, #235, #236, #237, #238, #239, #240

v0.8.2 Cloudflare parity — shipped in PR #290

#255

Verifier evidence (high-confidence sample)

Issue	Marker
#190	`runtime-catalogs.ts` `BUILTIN_MCP_CATALOG`; `POST /api/mcp/servers/install` at `route-handlers.ts:5188`
#212	`settings-view.ts:2640` SSRF `Always on (enforced)` badge
#213	`settings-view.ts:1949-1970` Active model read-only line
#214	`route-handlers.ts:3934` explicit `// #214` comment
#218	`route-handlers.ts:1291` explicit `// #218 —` comment
#231	`core/src/reasoning-blocks.ts:118` `parseReasoningBlocks`
#234	`core/src/security.ts:665` v0.8.0 (#234) audit hook
#237	`core/src/structured-output.ts` + `core/src/index.ts:168`
#239	`core/src/index.ts:217` `budget_exhausted_with_synthesis`
#240	`core/src/skill-manifest.ts` agentskills.io v1.0 alignment
#199	`connect-view.ts:935-2526` pairings state + UI
#205	`app.ts:755` `themeMode`
#207	`chat-view.ts:1646` `_exportSession`
#255	`scripts/audit-routes.mjs --check` exits 0

Verification

• `npm run typecheck` — clean
• `node scripts/audit-routes.mjs --check` — zero missing rows
• `gh issue list --state open --label priority/critical` — 0 after the pass
• All 52 closures recorded individually with grep / file inspection evidence

Caveats

• Reviewers checking acceptance criteria for any specific issue here that turn out to be unmet should reopen with the missing detail — the close pass relied on grep / file inspection plus the v0.8.2 worklog verifier results, which are high-signal but not exhaustive.
• No new public API or contract changes ship in v0.8.3. `crowclaw@0.8.3` and `crowclaw@0.8.2` are byte-equivalent at the package code level; pinning to either is functionally identical.

Test plan

• Reviewer confirms CI passes (typecheck + test, no regressions expected)
• After merge: `git tag v0.8.3 && git push --tags`
• After tag: `gh release create v0.8.3` with notes from CHANGELOG `[0.8.3]`
• After release: confirm npm publish workflow succeeds (release event auto-trigger)

🤖 Generated with Claude Code