v1.14.0

1.14.0 (2026-06-30)

Bug Fixes

• agent-sdk: pass settingSources [] so SDK ignores cloned PR .claude/settings.json (#195) (153fef3)
• check: derive scoped-executor scan set from filesystem (dead guard) (#208) (8b0e8ef)
• daemon: sweep full workspace triple on startup and crash exit (#239) (56fa714)
• idempotency: gate side-effecting handlers with Valkey claim to prevent redelivery duplicates (#212) (68dacdb)
• infrastructure: patch krb5 HIGH CVE-2026-40356 in shared Docker base (#180) (1d1bc3b)
• mcp: redact Octokit error tool-results and widen GitHub token regex (#238) (675d610)
• mcp: wrap GitHub-touching MCP servers + state-fetchers in retryWithBackoff (#205) (319beb9)
• observability: canonicalise child-logger entity id under entityNumber (#178) (808ca46)
• security: gate LLM scanner redacted_body to deletion-only (#206) (d52cf78)
• security: set strictMcpConfig to block cloned-PR .mcp.json auto-load (#210) (2c58ec1)
• testing: run colocated src/**/*.test.ts in CI + add drift guard (#204) (5990e0d)

Features

• agent-sdk: block destructive Bash at runtime via PreToolUse hook (#241) (f3132f2)
• observability: add 12 structured Pino event families with Zod-strict schemas (#251) (eaad36b)
• observability: add queue_wait_ms to dispatcher offer/no-daemon logs (#207) (7a5cfb0)
• observability: add structured retry.* events (#225) (6713cbf)
• observability: emit failed_stage and failed_stage_delta_ms on pipeline.failed (#244) (4f2483c)
• observability: emit structured idempotency events on all 4 claimDelivery outcomes (#242) (e1e7f9e)
• observability: installationId on loggers + config-free MCP retry (#189) (ba09f76), closes #177 #184
• observability: log + persist SDK token usage on executions (#209) (5407dcd)
• observability: log octokit rate-limit headers via hook.after (#183) (30e1715)
• observability: periodic fleet-state gauge snapshot (#186) (7429460)
• observability: redact crash logs via uncaughtException/unhandledRejection handlers (#181) (d4248f4)
• observability: structured dispatcher + heartbeat log events (#188) (c615bc4)
• observability: structured pino logger for stdio MCP servers (#185) (5244e8a)
• observability: structured pipeline.stage timing events with delta_ms (#182) (4125971)