v0.19.2

What's Changed

• fix(memory): use effective_embed_provider for all embedding ops in semantic submodules by @bug-ops in #3035
• fix(skills): warn on score threshold drop, fix RL skip log, init active_skills at startup by @bug-ops in #3036
• fix(skills): distinguish infra error from score-threshold empty in skill matcher by @bug-ops in #3037
• refactor(core): initialize all static MetricsSnapshot fields at builder time by @bug-ops in #3038
• fix(skills): assign Trusted trust to bundled skills on startup and hot-reload by @bug-ops in #3042
• feat(skills): hub skill install pipeline with .bundled trust-escalation filter by @bug-ops in #3043
• fix(skills): activate injection scanner and harden bundled skill trust pipeline (#3050) by @bug-ops in #3051
• fix(tui): handle bracketed paste as single message by @bug-ops in #3053
• Fix system metrics log level noise by @bug-ops in #3052
• feat(tui): compact paste indicator in input + collapsible paste in chat by @bug-ops in #3054
• tui: improve multiline composer by @bug-ops in #3055
• feat(skills): wire with_hub_dirs in agent builder to activate M1 defense-in-depth by @bug-ops in #3059
• build: bump MSRV from 1.88 to 1.94 by @bug-ops in #3066
• feat(mcp,cli): MCP outputSchema forwarding + zeph doctor diagnostic (#2931, #2930) by @bug-ops in #3067
• feat(tools,core): OS sandbox (#2808) + speculative tool dispatch (#2290, #2409) by @bug-ops in #3068
• feat(security): egress network logging + VIGIL verify-before-commit gate by @bug-ops in #3069
• fix(llm,index): Thompson 429 double-penalty + upsert CONFLICT target (#3060, #3065) by @bug-ops in #3075
• fix(orchestration): do not cancel sub-agents on stdin EOF when plan tasks are running by @bug-ops in #3076
• fix(tui): clarify skills panel label and fix embed_provider in testing config by @bug-ops in #3081
• fix(mcp): downgrade per-branch depth-cap WARN to debug in sanitizer by @bug-ops in #3082
• fix(sandbox): fix Seatbelt workspace profile and add wizard/migrate support by @bug-ops in #3085
• feat(orchestration,llm): AdaptOrch topology advisor + CoE entropy routing by @bug-ops in #3099
• feat(orchestration): VeriMAP predicate gate, cascade abort defense, interop spec by @bug-ops in #3097
• fix(sandbox): add deny-first Seatbelt rules for well-known secret paths by @bug-ops in #3103
• build(deps): bump rand 0.8.5 to 0.8.6 (RUSTSEC-2026-0097) by @bug-ops in #3104
• fix(mcp): raise output_schema_hint_bytes default to 1024 and fix stub event name by @bug-ops in #3106
• fix(memory): rate-limit Qdrant WARN flood in background embed tasks by @bug-ops in #3109
• fix(config): make migrate-config --in-place idempotent by @bug-ops in #3110
• fix(mcp): wire forward_output_schema for Compatible, Gemini, and Ollama providers by @bug-ops in #3112
• perf(orchestration): cache forward adjacency in CascadeDetector by @bug-ops in #3114
• fix(sandbox): emit canonical deny rules for symlinked secret paths by @bug-ops in #3115
• fix(config): make migrate-config --in-place fully idempotent by @bug-ops in #3118
• feat(llm): add configurable prompt cache TTL with 1-hour Claude variant by @bug-ops in #3123
• feat(orchestration): wire GraphPersistence::save in scheduler loop (#3107) by @bug-ops in #3124
• fix(tools): extend utility gate to recognize natural shell command requests by @bug-ops in #3126
• feat(skills,plugins): add agent-invocable skills and plugin packaging by @bug-ops in #3127
• fix(lint,sandbox): fix clippy violations in test targets and sandbox warn on dropped paths by @bug-ops in #3131
• feat(security): harden file permissions for sensitive Zeph files by @bug-ops in #3132
• feat(ux): session recap — /recap command and auto-summary on resume by @bug-ops in #3136
• fix(core,doctor): run plugin I/O in spawn_blocking and add vault permission remediation by @bug-ops in #3142
• feat(plugins): wire runtime config overlay merge into live Config by @bug-ops in #3145
• fix(skills,tools): exempt invoke_skill from policy gates and fix plugin hot-reload by @bug-ops in #3150
• fix(llm,cost): suppress WARN log floods from cost tracker, provider_factory, and ASI coherence router by @bug-ops in #3151
• fix(common,ux): clippy items_after_statements in fs_secure + /recap deduplication on resume by @bug-ops in #3153
• fix(memory): use effective_embed_provider() in A-MAC admission evaluate() calls by @bug-ops in #3154
• fix(plugins): rename plugin_dir to entry_dir in overlay.rs test helper by @bug-ops in #3157
• feat(plugins): add install-time value-level validation for allowed_commands overlay by @bug-ops in #3159
• fix(memory): correct A-MAC admission provider fallback in bootstrap by @bug-ops in #3162
• feat(tui): multi-session SessionRegistry with /session switch and close commands (#3130) by @bug-ops in #3164
• fix(tools): exempt invoke_skill and load_skill from utility gate by @bug-ops in #3165
• fix(core): clippy violations in test targets and TaskSupervisor shutdown timeout (#3160, #3161) by @bug-ops in #3167
• feat(plugins): live ShellExecutor hot-reload, skipped_plugins UX, sha256 integrity check by @bug-ops in #3166
• release: v0.19.2 by @bug-ops in #3169

Full Changelog: v0.19.1...v0.19.2