v0.2.16

What's Changed

• chore(deps): bump mdns-sd from 0.13.11 to 0.21.4 by @dependabot[bot] in #2534
• chore(hygiene): minimal root — drop dead scripts, disabled workflows, untrack generated docs by @iberi22 in #2536
• fix(health): integrity/FTS probe on ephemeral read-only connection (#2479) by @iberi22 in #2537
• chore(hygiene): root minimal round 2 — community files to .github, drop archive/legacy docs, untrack .svelte-kit by @iberi22 in #2538
• fix(maloca): unify store path, CORS/auth on Maloca routes, nested backlog scan by @iberi22 in #2540
• feat(skills): integrate skill-fusion wave #304 + docker hardening + telegram fixes by @iberi22 in #2539
• feat(auth): xavier users create/totp-enroll/totp-disable CLI onboarding by @iberi22 in #2541
• fix(memory): exclude telemetry noise from search, fix ranking root cause + /memory/get 404 by @iberi22 in #2542
• fix(panel): make panel 2FA actually work end-to-end over /auth/* by @iberi22 in #2543
• fix: deprecate dead /v1/auth/* user-login API, document real /auth/* flow by @iberi22 in #2546
• fix(memory): degrade to lexical/FTS instead of hanging when embeddings are unavailable by @iberi22 in #2548
• fix(panel/memory): fix hidden e2e failures, memory/delete cache bug, and token leak (#2547) by @iberi22 in #2549
• fix(panel): move ProvidersPage hooks above conditional loading return by @iberi22 in #2552
• 🛡️ Sentinel: [HIGH] Fix timing side-channel in OAuth state validation by @iberi22 in #2551
• chore(deps-npm): bump jsdom from 30.0.1 to 30.1.1 by @dependabot[bot] in #2550
• Fix observability defects in Skill Dispatcher and Registry by @iberi22 in #2567
• chore(deps-npm): bump vite-plugin-dts from 5.1.0 to 5.1.1 by @dependabot[bot] in #2533
• chore(deps-npm): bump svelte from 5.57.0 to 5.57.1 by @dependabot[bot] in #2509
• chore(deps-npm): bump @tauri-apps/cli from 2.11.4 to 2.11.5 by @dependabot[bot] in #2508
• 🎨 Palette: Improve ThemeToggle focus ring contrast by @iberi22 in #2512
• 🎨 Palette: Improve accessibility in MessagingConfigModal by @iberi22 in #2535
• fix(health): stop reporting unmeasured embedding coverage as healthy (WAVE-29.01) by @iberi22 in #2568
• fix(cli): bound xavier doctor probes and always print the report (WAVE-29.05) by @iberi22 in #2571
• test(panel-e2e): fix flaky settings sidebar iteration (#2569) by @iberi22 in #2570
• fix(memory): reject corrupt content and stop indexing one path twice (WAVE-29.09) by @iberi22 in #2573
• fix(panel): stop Providers page crashing on the real /v1/system/scan shape by @iberi22 in #2572
• fix(cli): report real version, degraded reasons and stats in xavier health (WAVE-29.07) by @iberi22 in #2574
• fix(guardian): env_status user scope, log_scan newest-first (WAVE-29.03) by @iberi22 in #2575
• fix(codegraph): honour dump path and cwd; drop trivial constructors from hubs (WAVE-29.08) by @iberi22 in #2576
• fix(mcp): stop sys_health/health_check fabricating values; gods() skips constructors (WAVE-29.02) by @iberi22 in #2577
• fix(improve): bound every cycle stage and persist partial progress (WAVE-29.06) by @iberi22 in #2579
• test(observability): E2E contract that MCP health agrees with GET /health (WAVE-29.10) by @iberi22 in #2578
• docs(skill-controller): research & design phase — ADR-034, specs, task DAG by @iberi22 in #2626
• docs(pipeline): trunk-based Ship/Show/Ask, autonomous pipeline and DONE protocol (ADR-035 draft) by @iberi22 in #2627
• docs: remove retired-model (Kimi) attributions by @iberi22 in #2628
• [S01] Make skill store paths configurable with identical defaults by @iberi22 in #2678
• [R01] Extract the shared registry constructor by @iberi22 in #2686
• chore: drop stale model attribution from two doc comments by @iberi22 in #2687
• [R04] Unify fusion construction and document confidence constants by @iberi22 in #2688
• [V1] T3: at-rest permissions (0600/0700) and no shadow fallback write when the keyring works by @iberi22 in #2689
• [R02] Use shared registry construction in REST by @iberi22 in #2690
• [R03] Use shared registry construction in MCP by @iberi22 in #2691
• [V1b] T3b: stronger fallback wrapping-key derivation with backward-compatible reads by @iberi22 in #2692
• [V0] Isolate node-secret tests from the real vault by @iberi22 in #2693
• [V2] T1a: library core for value-from-stdin and .env parsing (no value ever in argv) by @iberi22 in #2695
• [J01] Parse and validate TOML manifest v1 by @iberi22 in #2696
• [V3] T1b: CLI surface -- secrets put --stdin, import-env --dry-run|--apply, vault set/get without leaking by @iberi22 in #2699
• [J02] Implement host policy and publication secret gate by @iberi22 in #2700
• style(skill-controller): drop rustfmt::skip and format manifest/policy by @iberi22 in #2703
• docs(skill-controller): split per-issue size cap (D14 amendment) by @iberi22 in #2704
• [V4] T2a: in-process secret execution engine (resolve, lease, inject into child env, revoke) by @iberi22 in #2706
• [D2698] Docs/messages still show the removed 'xavier vault set KEY VALUE' form by @iberi22 in #2708
• [V5] T2b: POST /secrets/exec endpoint, secrets exec CLI, and degrading secrets lend to internal by @iberi22 in #2709
• [J04a] Link-Object Backups and Atomic File Persistence by @iberi22 in #2714
• [J03a] Plan Data Schema, Package Hashing, and Source Inventory by @iberi22 in #2715
• [V6] T4: MCP secret tools and resolve_tool_secret reading from the vault instead of std::env by @iberi22 in #2716
• [J04b] Ownership Journal and Transaction State by @iberi22 in #2717
• chore(hooks): light pre-commit; clippy and panel-ui build run in CI by @iberi22 in #2718
• [OBS] Flaky: observability_contract tests time out waiting for GET /health (90s) by @iberi22 in #2719
• docs(agents): remote sandboxes must not build the full workspace by @iberi22 in #2721
• [CLI2707] src/main.rs compiles the cli module twice (mod cli;), breaking cfg(test) seams by @iberi22 in #2725
• [V6c] by @iberi22 in #2727
• [J03b] Deterministic Dry-Run Plan Generation and Precondition Recheck by @iberi22 in #2728
• [CLI2697] CLI: clap debug_assert fails on the full command tree by @iberi22 in #2720
• [V6b] by @iberi22 in #2726
• [J05] Apply plans with atomic per-skill publication by @iberi22 in #2730
• [V7] by @iberi22 in #2731
• [V8] by @iberi22 in #2734
• feat(pageindex): tree-based document retrieval (ADR-036) — crate, PDF cascade, MCP/HTTP tools, search, hybrid arm by @iberi22 in #2735
• [OBS2736] Flaky: observability_contract servers exit at startup with 'SQL error or missing database' (shared ~/.xavier) by @iberi22 in #2738
• [V9] by @iberi22 in #2737
• [J06] Conditionally roll back owned projections by @iberi22 in #2733
• [J07] Implement the CLI skills handler by @iberi22 in #2740
• [J08] Wire controller modules and CLI subcommands by @iberi22 in #2742
• [SECDEPS-X] security(deps): bump astro/js-yaml/nanoid/sharp/svgo (2 critical, 5 high Dependabot alerts) by @iberi22 in #2743
• [V10] by @iberi22 in #2739
• release: v0.2.16 — PageIndex docs + Linux desktop app (AppImage/deb) by @iberi22 in #2745
• [V11] by @iberi22 in #2747
• fix(skill-controller): portable symlink import so the Windows release builds by @iberi22 in #2748

Full Changelog: v0.2.15...v0.2.16