v0.4.0

Changed

• BREAKING: SummarizerProviderConfig and StaleInputCapConfig are now #[non_exhaustive]. Earlier releases had silently added public fields to these structs — a SemVer break at an unchanged 0.3.16 (caught by a new cargo-semver-checks CI gate). Bumping to 0.4.0 makes the public-API change explicit; #[non_exhaustive] lets future config fields be added without another breaking release.

Added

• (cli) research-led UX overhaul of wizard/doctor/status/install (#118) (#146)
• (anomaly) detect + report invalid-prune rollbacks (#138) (#142)
• (cli) make trimwire off a true bypass, not a dead socket (#114) (#140)
• (anomaly) make trims legible to the agent + detect/report trimwire anomalies (#135)
• (stale_input_cap) age-gate authoring content with a recoverable marker (#122) (#130)
• (summarizer) resolve provider API key from api_key_file (fixes #111) (#115)

Fixed

• (cli) bound the collector upload + share the runtime-teardown fix (#150) (#154)
• (cli) bound the summarizer-setup ollama probe with a timeout (#145) (#149)
• (bloat_cap) give Read its own recent window to close the 4–16 KB Read gap (#121) (#137)
• (pruning) safety hardening — keep_recent .max(1) clamp, snapshot glob, NotebookEdit exempt (#129)
• (stale_reads) age-gate supersession elision so live reads aren't trimmed (#113) (#120)
• (deps) bump anyhow 1.0.102 → 1.0.103 (RUSTSEC-2026-0190) (#117)

Other

• (bloat_cap) enable the stub_age ladder at 16 in the default profile (#126) (#139)
• (bloat_cap) age-gate Task/Agent subagent results instead of permanent exemption (#124) (#136)
• (stale_input_cap) shape-reduce old successful Task/Agent inputs (#125) (#134)