Vogt 0.7.17

Release metadata (machine-readable copy is attached as vogt-release-manifest.json):

{
  "schema": "vogt-release-manifest.v1",
  "product": "Vogt",
  "product_version": "0.7.17",
  "source_tag": "v0.7.17",
  "source_sha": "21c95f674e1b03ee177394f605abb1abfac41cdd",
  "images": {
    "core": "ghcr.io/thedancingdeveloper-org/vogt@sha256:50bae16ecd00955384e3186c62da57b5a76acf42280044c62b49d355ad2dba0f",
    "merged_stack": "ghcr.io/thedancingdeveloper-org/vogt-stack@sha256:47bb3ca8bfecacef2697b0a097bb63fc4ee6f2a3ad7d774f7feb0b773a1dfae4",
    "workbench_stack": "ghcr.io/thedancingdeveloper-org/vogt-stack-workbench@sha256:fd05cba01c6f6066dc3ba266d6e4f14a082d9475f542e7cab635533b2d1533fc",
    "voice": "ghcr.io/thedancingdeveloper-org/vogt-voice@sha256:499b871adc059a44634fe96581e7b3bbe264e77c06a3aa020eeaf66cb5ebdcbd"
  },
  "image_digests": {
    "core": "sha256:50bae16ecd00955384e3186c62da57b5a76acf42280044c62b49d355ad2dba0f",
    "merged_stack": "sha256:47bb3ca8bfecacef2697b0a097bb63fc4ee6f2a3ad7d774f7feb0b773a1dfae4",
    "workbench_stack": "sha256:fd05cba01c6f6066dc3ba266d6e4f14a082d9475f542e7cab635533b2d1533fc",
    "voice": "sha256:499b871adc059a44634fe96581e7b3bbe264e77c06a3aa020eeaf66cb5ebdcbd"
  },
  "image_repositories": {
    "core": "ghcr.io/thedancingdeveloper-org/vogt",
    "merged_stack": "ghcr.io/thedancingdeveloper-org/vogt-stack",
    "workbench_stack": "ghcr.io/thedancingdeveloper-org/vogt-stack-workbench",
    "voice": "ghcr.io/thedancingdeveloper-org/vogt-voice"
  },
  "release_tags": [
    "0.7.17",
    "0.7",
    "latest"
  ],
  "promotion": {
    "method": "build-once-promote-by-digest",
    "rebuilt": false,
    "build_workflow": ".github/workflows/build.yml",
    "build_ref": "refs/heads/main",
    "build_tag": "sha-21c95f6",
    "build_run_id": 38897884252,
    "build_run_url": "https://github.com/TheDancingDeveloper-org/vogt/actions/runs/38897884252",
    "release_run_url": "https://github.com/TheDancingDeveloper-org/vogt/actions/runs/38897907598"
  },
  "provenance": {
    "cosign": "keyless signatures over the same digests from .github/workflows/release.yml (at release) and .github/workflows/build.yml (at build)",
    "cosign_identities": {
      "release": "https://github.com/TheDancingDeveloper-org/vogt/.github/workflows/release.yml@refs/tags/v0.7.17",
      "build": "https://github.com/TheDancingDeveloper-org/vogt/.github/workflows/build.yml@refs/heads/main"
    },
    "cosign_issuer": "https://token.actions.githubusercontent.com",
    "sbom": "BuildKit SBOM and provenance attestations recorded in each image index by build.yml, carried by the digest"
  },
  "deployment_guide": "https://github.com/TheDancingDeveloper-org/vogt/blob/main/docs/DEPLOYMENT.md",
  "assets": {
    "android": "signed APK"
  }
}

Publishing does not deploy production; deployment is a separate, operator-approved step.

What's Changed

• ci(e2e): wait for the engine, test against the latest published release (WI-1647) by @thedancingdeveloper in #1021
• ci: save the Rust cache only on main; cache cargo-audit (WI-1645) by @thedancingdeveloper in #1020
• feat(web): drag to resize the running-session list in the places rail (WI-1664, #1023) by @thedancingdeveloper in #1027
• build: workbench pod-base variant and vogt-stack-workbench image (WI-1650) by @thedancingdeveloper in #1031
• build: build each image once and promote by digest (WI-1649) by @thedancingdeveloper in #1028
• mcp: session_list started_by filter, wait_any head cursor, fields string (WI-1672) by @thedancingdeveloper in #1035
• engine: submit input reliably to resumed Codex sessions (WI-1669) by @thedancingdeveloper in #1033
• engine: handle the Codex folder-trust startup gate (WI-1667) by @thedancingdeveloper in #1034
• sessions: start a worker in an existing worktree (cwd) (WI-1671) by @thedancingdeveloper in #1036
• sessions: carry the full blocked reason (blocked_detail) (WI-1670) by @thedancingdeveloper in #1039
• pin klaudia at the merged WI-1670 gitguard fix by @thedancingdeveloper in #1041
• engine: fetch private repos for worktrees with the session GitHub token (WI-1666) by @thedancingdeveloper in #1037
• build: allow bake to write the gitguard e2e export (fixes main build) by @thedancingdeveloper in #1043
• File browser: sandboxed HTML preview and full-screen browser (WI-1680, WI-1681) by @thedancingdeveloper in #1046
• Files view keeps its selection and focus across session updates (WI-1682) by @thedancingdeveloper in #1048
• Delivery: retry Enter while a resumed Codex still holds the text (WI-1669) by @thedancingdeveloper in #1053
• chore(release): v0.7.17 — bump version by @thedancingdeveloper in #1054

Full Changelog: v0.7.16...v0.7.17