v2.2.1

v2.2.1 - 2026-08-07

Fixed

• Completed guided title migration in bounded concurrent waves without client-created native-call timeouts, while keeping exact inventory reconciliation and read-only Luna classifiers isolated to temporary installation tasks.
• Prevented delayed/older title callbacks and no-op proposals from racing replacement or uninstall teardown with a locked state-format fence, and registered the controller's actual native runtime ID from its marked home delegation instead of trusting Codex's provisional creation handle.
• Required that marked controller registration also come from Codex's native subagent source, preventing an ordinary user task from forging the delegation text and claiming migration authority.
• Made uninstall resumable from any active native task after a completed migration, a stopped failed migration, or a quiescent pre-controller install, with a canonical undecorated ThreadBear home, durable initiator ownership, exact archive restoration, preservation of user-created files beside the managed skill, and binary-last local teardown.
• Kept ambiguity checks on Luna medium, accepted nonempty one-word actions, ignored surplus action fields only for statuses that do not consume them, and retained fail-closed settlement for every unknown native title result, including canonical-home no-ops.