v2.2.0 — Auth wizard & claims rectification

What's new

E-65 — Auth Infrastructure & First-Run Setup Wizard

• Solo, VPS, and Connect setup wizard flows (Tauri desktop app)
• OIDC sign-in via system browser + depthfusion://callback deep-link handling
• API key stored in OS keychain via vault::store_tokens
• Unit tests covering IPC layer, Rust vault round-trip, and deep-link callback

E-67 — Claims-Reality Rectification

• Named profiles (minimal / standard / server / research) via DepthFusionConfig.from_profile()
• Fernet CacheManager wired to GET /api/v1/search with principal-isolated cache keys
• MemoryConsolidator uses embedding cosine similarity (token-Jaccard fallback); cross-scope merge guard
• Real evaluation goldset — tests/fixtures/recall_goldset_v2.jsonl (200 entries, graded 0/1/2 relevance)
• Rank-aware metrics — MRR@10 and nDCG@5 in scripts/benchmark.py (measured: MRR@10=1.0000, nDCG@5=0.9934)
• Dispatcher parity test + DISPATCHABLE frozenset sentinel in server.py
• Config flag visibility — depthfusion_status reflects all DepthFusionConfig fields via dataclasses.fields
• Honest README — three-tier status (On by default / Behind flag / Projected); measured numbers replace projections
• Release pipeline set to draft: false

Status

• 3545 Python tests passing · 42 frontend tests passing · ruff clean · mypy clean (216 files)
• All backlog epics (E-01 through E-67) are now [done]

Previous release

v2.1.1 — default server URL updated to https://mcp.tonracein.com; depthfusion_recommend_model dispatch bug fixed.