v0.22.2

What's Changed

• fix(subagent): strip MessagePart::Image from transcript writes by @bug-ops in #6310
• docs(specs): fix README.md spec-number index drift and resolve collisions by @bug-ops in #6312
• fix(core): redact image bytes from debug dumps by default by @bug-ops in #6314
• docs(specs): enumerate sub-agent transcripts as 4th persistence surface in spec-072 by @bug-ops in #6316
• fix(orchestration): validate idle-timeout wizard input, warn on inert idle_timeout_secs by @bug-ops in #6313
• chore(deps): update gcr.io/distroless/static-debian12:nonroot docker digest to aef9602 by @bug-ops in #6318
• test(orchestration): add direct SC-4/SC-9 assertions for Mode-1 recovery by @bug-ops in #6317
• fix(core): wire real turn_tool_calls counter and collapse delegate boilerplate by @bug-ops in #6328
• fix(subagent): reap orchestration-dispatched sub-agent handles by @bug-ops in #6333
• feat(mcp): MediaSanitizer decode/validate/attach + vision-tier routing for MCP image passthrough by @bug-ops in #6331
• fix(core): redact base64 blobs and message history from debug dumps by @bug-ops in #6326
• test(core): add e2e coverage for TurnSummary tool_calls/llm_requests counters by @bug-ops in #6334
• fix(core): recompute cached_prompt_tokens after system-prompt rebuild by @bug-ops in #6337
• fix(core): use atomic write for debug dumps, fix broken rustdoc links by @bug-ops in #6336
• fix(bench): correct stale Qdrant-collection claim and restore NFR-007 test coverage by @bug-ops in #6338
• fix(core): wire TurnSummary.tool_calls to hook env export and notification body by @bug-ops in #6339
• chore(deps): update ghcr.io/bug-ops/zeph:latest docker digest to 0ac4544 by @bug-ops in #6319
• chore(deps): update github-actions by @bug-ops in #6320
• refactor(experiments): make ParameterKind sync points compiler-enforced by @bug-ops in #6340
• chore(deps): update ollama/ollama:latest docker digest to 57f573b by @bug-ops in #6321
• feat(orchestration): activate idle_timeout via eviction-safe progress-signal plumbing by @bug-ops in #6341
• chore(deps): update rust-minor-patch by @bug-ops in #6324
• feat(mcp): add config/CLI/TUI/migration surface for image passthrough by @bug-ops in #6342
• chore(deps): update prom/prometheus docker tag to v3.13.0 by @bug-ops in #6323
• docs(memory): record hub-degree kill-criterion re-measurement (spec-067 §7.1) by @bug-ops in #6345
• fix(ci): gate ci-status on detect-changes result by @bug-ops in #6344
• feat(mcp): per-call result size override via _meta annotation by @bug-ops in #6343
• chore(deps): update rust:1.96-slim docker digest to 31ee7fc by @bug-ops in #6322
• feat(orchestration): implement Mode-2 route_to reroute-to-alternate recovery by @bug-ops in #6346
• build(docker): bump rust base image to 1.97.1 by @bug-ops in #6347
• chore(deps): update rust crate tokio-tungstenite to 0.30.0 by @bug-ops in #6351
• chore(deps): update actions/setup-node action to v7 by @bug-ops in #6352
• chore(deps): update rust crate rubato to v4 by @bug-ops in #6354
• chore(deps): update rust crate hf-hub to v1 by @bug-ops in #6353
• chore(deps): update debian:bookworm-slim docker digest to 7b140f3 by @bug-ops in #6350
• fix(orchestration): raise verifier_timeout_secs default to 120s by @bug-ops in #6367
• fix(core): wire dump_tool_output into production tool-result path by @bug-ops in #6368
• feat(testing): add coverage-guided fuzzing for parser-like components by @bug-ops in #6369
• fix(security): harden SessionId path handling, secret-mask nonce, stale comment by @bug-ops in #6372
• feat(testing): add plugin_manifest fuzz target and coverage reporting by @bug-ops in #6375
• fix(llm): attach MCP image siblings to Ollama tool-role messages by @bug-ops in #6376
• fix(memory): wire insert_tree_leaf and recent-embeddings fetch into production paths by @bug-ops in #6392
• fix(orchestration): mark task Failed when all tool calls were policy-blocked by @bug-ops in #6395
• feat(orchestration): cross-thread KV store and Command-style dynamic task handoff by @bug-ops in #6399
• fix(channels): forward elicit() and send_context_estimate() on AppChannel by @bug-ops in #6400
• fix(core,tui): wire classifier metrics into sanitizer, flash single tool calls by @bug-ops in #6401
• fix(channels): coordinate elicit()/confirm() readline with the background stdin reader by @bug-ops in #6403
• fix(memory): prevent stuck singleton leaves from starving TiMem consolidation by @bug-ops in #6402
• fix(orchestration): catch mixed-trace policy failures and propagate spawn-path corrections by @bug-ops in #6405
• fix(subagent): publish terminal status on LLM timeout and capture debug dumps by @bug-ops in #6406
• fix(core,config): wire ToolsConfig::enabled into tool-def gating by @bug-ops in #6409
• fix(llm): gate Ollama supports_vision on actual model capability by @bug-ops in #6410
• fix(subagent,core): reap panicked sub-agents via join_handle, scrub PII in sub-agent debug dumps by @bug-ops in #6414
• fix(session): record and surface lock holder PID on contention by @bug-ops in #6415
• fix: close spec-080 Command-handoff verification, rejection-visibility, and owner_key gaps by @bug-ops in #6416
• fix(core): stop injecting unfiltered full-body skill dumps outside per-turn matching by @bug-ops in #6422
• fix(llm): gate OpenAI/Compatible supports_vision on model capability by @bug-ops in #6423
• feat(orchestration): make whole-plan verify timeout independently configurable by @bug-ops in #6424
• fix(core,acp): reset owner_key/is_guest_context staleness, thread ACP identity into cross-thread store by @bug-ops in #6428
• fix(core,config): cap sub-agent skill-body token budget on default empty include by @bug-ops in #6429
• fix(channels): close residual ~50ms cli elicitation acquisition window with ack handshake by @bug-ops in #6430
• docs(specs): add resume UX and history visibility to session-persistence spec by @bug-ops in #6417
• chore(arch): enable workspace lints for zeph-experiments by @bug-ops in #6433
• perf(core): make /history transcript_len/transcript_page O(1)/O(count) by @bug-ops in #6434
• fix(serve): compute resume banner for created, reactivated, and forked sessions by @bug-ops in #6435
• fix(llm,memory): eliminate PID-recycled test flake and postgres-only mock panic by @bug-ops in #6436
• test(core): cover build_user_message vision-capability gate by @bug-ops in #6438
• feat(durable): add zeph durable cancel command and Canceled status by @bug-ops in #6439
• feat(tools,scheduler): agent time-awareness — get_current_time tool + schedule add --run-at by @bug-ops in #6441
• fix(experiments): skip postgres-only mock test without ZEPH_TEST_POSTGRES_URL by @bug-ops in #6443
• feat(tools): add native query-based web_search tool by @bug-ops in #6444
• fix(scheduler): stamp user_added provenance on CLI writes and fix periodic hydration prompt loss by @bug-ops in #6446
• feat(durable): add zeph durable rotate-key for AEAD payload key rotation by @bug-ops in #6452
• feat(plugins): add install-time reputation and typosquat scanning by @bug-ops in #6448
• feat(security): add tamper-evidence for transcript, session, and durable journal history by @bug-ops in #6453
• feat(subagent): add opt-in live transcript forwarding to TUI/--bare by @bug-ops in #6455
• fix(tools): web_search follow-ups from PR #6444 review by @bug-ops in #6457
• feat(durable): add HMAC and HWM rotation windows for zeph durable rotate-key by @bug-ops in #6460
• feat(security): add vault-anchor downgrade resistance for transcript integrity by @bug-ops in #6461
• release: v0.22.2 by @bug-ops in #6466

Full Changelog: v0.22.1...v0.22.2