v0.21.0

What's Changed

• refactor(build): promote task-metrics, self-check, env-vault to always-on by @bug-ops in #3661
• docs(specs): update constitution layer DAG to reflect actual workspace structure by @bug-ops in #3666
• fix(core): replace production unwrap() calls with expect() in zeph-core by @bug-ops in #3667
• refactor+feat(core): split native.rs into submodules and add tracing spans by @bug-ops in #3668
• feat(llm): add Cocoon decentralized TEE inference provider by @bug-ops in #3682
• feat(config): add Cocoon provider config validation, wizard, and migration by @bug-ops in #3683
• feat(cli): add zeph cocoon doctor diagnostic subcommand by @bug-ops in #3689
• feat(tui): add Cocoon TUI palette commands and status bar integration by @bug-ops in #3690
• feat(llm): add Cocoon live integration tests by @bug-ops in #3691
• fix(cli): validate cocoon_client_url scheme in cocoon doctor config check by @bug-ops in #3707
• fix(tui): thread tool_call_id through shell executor to fix parallel tool output corruption by @bug-ops in #3708
• feat(tui): native text selection + clipboard shortcuts by @bug-ops in #3722
• feat(tui): editor-inline spinner, priority-collapse footer, user message tint (#3687) by @bug-ops in #3721
• fix(tui): id-based DiffReady routing and two-tier tool rendering by @bug-ops in #3720
• fix(clippy): resolve --all-targets errors in tool_execution tests and cocoon.rs by @bug-ops in #3723
• feat(tui): wire grouping pre-pass into collect_message_lines_from (#3719) by @bug-ops in #3724
• feat(hooks): add PreToolUse/PostToolUse hook context env vars by @bug-ops in #3725
• docs(specs): Telegram Bot API 10.0 specifications (Guest Mode, Bot-to-Bot, Streaming) by @bug-ops in #3734
• feat(memory,security): BeliefMem probabilistic edges + ShadowSentinel safety probe by @bug-ops in #3735
• refactor(context): resolve same-layer violation zeph-context → zeph-memory by @bug-ops in #3736
• feat(cocoon): add per-token pricing and STT Whisper endpoint by @bug-ops in #3737
• fix(hooks): fire pre_tool_use hook before utility gate intercept by @bug-ops in #3740
• fix(security): wire ShadowProbeExecutor into agent executor chain by @bug-ops in #3742
• fix(llm): add missing backticks in stt.rs doc comments by @bug-ops in #3743
• fix(security): extend classify_tool to recognise bare shell and file-write tool ids by @bug-ops in #3745
• feat(channels): configurable Telegram streaming interval and Bot API 10.0 HTTP wrapper by @bug-ops in #3746
• test(memory-backend): add unit tests for ContextMemoryBackend and SemanticMemoryBackend by @bug-ops in #3747
• feat(channels): Telegram Guest Mode and Bot-to-Bot communication (Bot API 10.0) by @bug-ops in #3748
• release: v0.21.0 by @bug-ops in #3749

Full Changelog: v0.20.2...v0.21.0