v0.14.2

What's Changed

• docs: RFC-003 + planning prompt — per-company relay architecture (federation topology, A2A landing, apex-routing) by @laulpogan in #129
• docs(rfc-003): status Draft → Discussion + tracking link to #130 by @laulpogan in #131
• docs(rfc-003): iterate per #130 review — S1+S2+S3 fixed, M1+M2 addressed, Q1-Q4 resolved by @laulpogan in #132
• RFC-003 amendment: personal vs organizational deployment tiers by @WILLARDKLEIN in #133
• docs(rfc-003-amendment-deployment-tiers): lock personal-tier signing-key-first explicit (paul directive) by @laulpogan in #134
• docs: clarify did= accepts both did:wire:org:* and did:wire:op:* (RFC-001 §A + RFC-003 §2 + TL;DR cleanup) by @dthoma1 in #136
• docs(rfc-003): status Discussion → Accepted + tracking link to #137 by @laulpogan in #138
• docs(sso-amendment): §B point 5 — pin JWT iss comparison as byte-equal (AC-SSO-strict-iss) by @dthoma1 in #139
• feat(plugin): ship wire as a Claude Code plugin — manifest + skills + MCP + SessionStart hook by @laulpogan in #140
• docs(plugin): advertise plugin install path on README + landing + plugin-vs-wire-setup note by @laulpogan in #141
• RFC-004: Connection health probing — daemon-level pulse + operator dashboard by @WILLARDKLEIN in #135
• docs(rfc-004): status Discussion → Accepted + tracking link to #142 by @laulpogan in #143
• docs(canonical): correct event_id strict-mode verification comment by @dthoma1 in #144
• docs(rfc-001): remove org/v1 from capabilities[] example + lock schema_version as normative identity-layer signal by @laulpogan in #147
• feat(relay-client): parse RFC-003 DNS-TXT pins with field-additive v1 semantics by @dthoma1 in #146
• docs: surgical drift fixes from #145 audit + docs-lint CI step by @laulpogan in #148
• feat(upgrade): wire upgrade --restart-mcp signals MCP server subprocs to respawn on new binary by @laulpogan in #150
• fix(whoami): degrade gracefully on uninitialized per-session WIRE_HOME by @laulpogan in #152
• docs(integrations): add OpenCode + Pi harness integration docs by @laulpogan in #153
• feat(install): native Windows install.ps1 + Scoop manifest (#149) by @laulpogan in #154
• docs(readme): local-first restructure — hero + 60-sec local-only demo + client-picker + collapsed Status by @laulpogan in #155
• fix(install): harden install.ps1 fallback, hash, and PATH shadow checks by @dthoma1 in #157
• feat(daemon): pidfile singleton guard on wire daemon (#162 fix-6) by @laulpogan in #163
• feat(daemon-status): wire_status MCP tool + last_sync tracking + wire_send annotation (#162 fix-1 + fix-3) by @laulpogan in #164
• fix(send): canonicalize against pinned peer's full DID (#162 fix-4) by @laulpogan in #165
• fix(tier): durable bilateral_completed_at stops VERIFIED PENDING_ACK flap (#162 fix-5) by @laulpogan in #166
• docs(deployment-tiers): two-tier operator walkthroughs (AC-DT2, #137) by @WILLARDKLEIN in #161
• feat(send-lifecycle): per-peer pushed log + pending_push_count in wire_status (#162 fix-2) by @laulpogan in #167
• feat(daemon-stream): tighter TCP keepalive + stream_state.json + tool_status surface (#162 fix-7) by @laulpogan in #168
• feat(status): hoist pending_push_count + stale_sync + stream_state into CLI wire status (#162 surface gap) by @laulpogan in #169
• feat(daemon): --all-sessions supervisor — one child per session (#162 launchd-vs-session-isolation) by @laulpogan in #170
• test(rfc-004): heartbeat body-roundtrip property test (AC-HP7, #142) by @WILLARDKLEIN in #160
• fix(pair): clear stale pending_inbound on bilateral pair_drop_ack (#162 cosmetic) by @laulpogan in #171
• fix(enroll): refresh capabilities[] in wire enroll republish (closes #126) by @laulpogan in #172
• feat(status): annotate orphan pids with their served session (#162 diagnostic) by @laulpogan in #173
• fix(supervisor): drop --session flag from child spawn — broke v0.13 by-key sessions (#170 hotfix) by @laulpogan in #174
• feat(status): walk per-session pidfiles for orphan→session map (#173 follow-up) + legacy pidfile parse fix by @laulpogan in #175
• 🚨 fix(tls): rustls-tls-native-roots → webpki-roots — launchd can't read macOS keychain (#170 critical hotfix) by @laulpogan in #176
• fix(notify): cross-process toast dedup — kill the 134-daemon notification storm by @laulpogan in #179
• feat(cli): wire supervisor — multi-session topology view (closes honey BUG 3) by @laulpogan in #178
• fix(daemon): wire daemon --session resolves v0.13 by-key persona names (#174 follow-up) by @laulpogan in #180
• docs(changelog): v0.14.2 — 13-PR batch (silent-send class + supervisor + 3 dogfood hotfixes) by @laulpogan in #181
• feat(tls): dual-roots verifier — webpki bundled + native when accessible (closes #177) by @laulpogan in #183
• docs(changelog): add #183 dual-roots TLS to v0.14.2 entry by @laulpogan in #184
• feat(setup): Pi + OpenCode adapters — wire setup auto-detects + upserts by @laulpogan in #185
• feat(upgrade): skip redundant spawn when supervisor will respawn (#170 follow-up) by @laulpogan in #186
• feat(send): collapse send→outbox→push into sync POST by default (paul's 'queue is a headache' ask) by @laulpogan in #187
• feat(mcp): wire_pull — symmetric receive primitive (#187 follow-up) by @laulpogan in #189
• docs(changelog): v0.14.2 — add #185 #186 #187 #189 (queue collapse + adapters + upgrade polish) by @laulpogan in #190
• fix(status): outbox event count excludes pushed-log audit entries by @laulpogan in #191
• fix(status): suppress stale pending_inbound for already-VERIFIED peers by @laulpogan in #192
• fix(status): exclude supervisor from orphan scan + clearer annotation by @laulpogan in #193
• feat(adapters): harness registry — adding a host is one struct + one test (#92 cat 1) by @laulpogan in #194
• fix(doctor): recognize supervisor topology — stop recommending pkill on the working architecture by @laulpogan in #195
• docs(send): retire stale 'queues and pushes' references post-#187 by @laulpogan in #196
• docs(agents): retire stale 'status: queued' examples in README + AGENT_INTEGRATION (post-#187) by @laulpogan in #197
• feat(supervisor): surface stale-binary daemon sessions by @laulpogan in #198
• feat(status): attribute pending_push by peer + tier by @laulpogan in #199
• feat(send): warn when --queue writes to an unpushable peer by @laulpogan in #200
• fix(here): use effective tier so wire here matches wire peers + wire status by @laulpogan in #201
• feat(doctor): surface pre-#171 stale pending_inbound for VERIFIED peers by @laulpogan in #202
• docs(changelog): v0.14.2 — append #198 + surface-honesty 4-PR batch (#199-202) by @laulpogan in #203
• fix(stream): preserve last_event_at + reconnect_count across reconnect by @laulpogan in #204
• fix(mcp): tool_peers uses effective tier — surface honesty parity with CLI by @laulpogan in #205
• feat(enroll): wire enroll add-membership — ingest member_cert bundle (closes #127) by @laulpogan in #206
• feat(doctor): daemon-written sender-side staleness signal (closes #14) by @laulpogan in #207
• docs(changelog): v0.14.2 — append #204-#207 (post-#203 backfill) by @laulpogan in #208
• feat(upgrade): --refresh-stale-children — kill session daemons stuck on old binary by @laulpogan in #209
• fix(daemon): idle filter for --all-sessions — stop per-home fork storm by @laulpogan in #212
• test(os_notify): make kill-switch tests hermetic — kill suite flake by @laulpogan in #213
• chore(license): REUSE-compliant trio-license + fix stale LICENSE.md paths by @laulpogan in #214
• docs(readme): launch hardening — status/API-stability + CONTRIBUTING + topics by @laulpogan in #215
• chore(ci): fresh-user install-smoke + reproducible Rust test-env container by @laulpogan in #217
• chore: drop unused tower dep, fix dead doc links, fix test-env CMD by @laulpogan in #218
• release: v0.14.2 — multi-session supervisor + queue collapse + launch hardening by @laulpogan in #219

Full Changelog: v0.14.1...v0.14.2