v0.18.0

What's Changed

• fix(mcp): make OAuth server connections non-blocking at startup by @bug-ops in #2281
• fix(tui): show per-server MCP connection status in TUI by @bug-ops in #2280
• fix(tools): quote cwd path in sandbox_allows_cwd_by_default test by @bug-ops in #2282
• fix(skills): tighten system_prompt_leak pattern to eliminate false positives by @bug-ops in #2283
• fix(memory): compat deserializer and migration for pre-v0.17.1 MessagePart format by @bug-ops in #2287
• feat(classifiers): implement ClassifierMetrics with p50/p95 latency ring buffer by @bug-ops in #2291
• feat(tools): ClaimSource provenance, ErrorDomain recovery, MCP tool pruning by @bug-ops in #2293
• feat(memory): Acon guidelines provider, session digest, crossover context strategy by @bug-ops in #2309
• feat(security): MCP capability attestation, trust calibration, and injection defense by @bug-ops in #2310
• fix(security): sanitizer classifier 401 and regex false positives by @bug-ops in #2314
• fix(mcp): prune_tools max_tools==0 no-cap, description sanitization, always_include semantics by @bug-ops in #2316
• fix(tools): propagate ClaimSource and ErrorDomain to AuditEntry by @bug-ops in #2319
• fix(a2a): drain stale loopback events (#2302), detect stale PID on startup (#2295) by @bug-ops in #2318
• fix(ci): improve cache hit rate with shared-key and job-level sccache env by @bug-ops in #2324
• fix(mcp): centroid drift resistance and trust score decay persistence (#2311, #2312) by @bug-ops in #2325
• fix(memory): eliminate 255 redundant BPE loads in proptest by @bug-ops in #2327
• fix(a2a): drain output_rx until Flush to prevent response shift (#2326, #2313) by @bug-ops in #2328
• fix(mcp): wire DefaultMcpProber and TrustScoreStore into bootstrap, fix stale delta, add ema_floor validation by @bug-ops in #2330
• feat(mcp): per-message caching for prune_tools, integration tests by @bug-ops in #2333
• fix(a2a): add configurable drain timeout to guard against indefinite block by @bug-ops in #2337
• fix(mcp): wire EmbeddingAnomalyGuard into McpManager by @bug-ops in #2336
• feat(security): AEGIS pre-execution firewall, A2A auth identity, dual-threshold classifier by @bug-ops in #2338
• fix(channels): handle /reset as builtin command, fix long_output e2e timeout by @bug-ops in #2344
• feat(mcp): embedding-based semantic tool discovery (#2321) by @bug-ops in #2342
• feat(orchestration): activate VMAO verify-completeness in PlanVerifier by @bug-ops in #2346
• feat(skills): SAGE RL reward signal, trust governance, SkillsBench constraints by @bug-ops in #2348
• fix(telegram): split long streaming responses and reduce edit throttle by @bug-ops in #2349
• fix(tools): write AuditEntry for pre-execution verifier blocks (#2343) by @bug-ops in #2350
• feat(tools): tool invocation phase taxonomy and reasoning model hallucination detection by @bug-ops in #2354
• feat(memory): MemScene consolidation, compress_context tool, A-MAC admission control by @bug-ops in #2355
• feat(memory): All-Mem consolidation, MAGMA edge weights, RuntimeLayer hooks by @bug-ops in #2358
• fix(tools): wire reasoning model detection and compress_provider into agent by @bug-ops in #2367
• fix(classifiers): pass vb.pp("deberta") at DeBERTa model load sites (#2353) by @bug-ops in #2368
• feat(security): IPI defense — DeBERTa soft-signal, three-class AlignSentinel, TurnCausalAnalyzer by @bug-ops in #2369
• feat(db): introduce zeph-db crate with database abstraction layer (Phase 1, SQLite) by @bug-ops in #2371
• feat(db): Phase 2 PostgreSQL backend for zeph-db by @bug-ops in #2372
• ci: run zeph-db postgres integration tests with testcontainers by @bug-ops in #2373
• feat(db): Phase 3 — init wizard, migrate-config, zeph db migrate CLI, CI postgres build by @bug-ops in #2379
• audit(docker): add all missing ZEPH_* env vars to compose files by @bug-ops in #2382
• fix(context): prevent orphaned tool results in MemoryFirst drain by @bug-ops in #2380
• feat(tui): interactive subagent sidebar and transcript viewer (#2376) by @bug-ops in #2381
• test(memory): add rollback and orchestration tests for consolidation by @bug-ops in #2383
• feat(postgres): fix call sites and add tests for postgres build by @bug-ops in #2384
• feat(llm): PILOT LinUCB bandit routing strategy with SLM subsystem audit by @bug-ops in #2390
• feat(db): complete database abstraction layer — eliminate sqlx leaks, fix dynamic queries, security hardening by @bug-ops in #2392
• release: v0.18.0 by @bug-ops in #2391

Full Changelog: v0.17.1...v0.18.0