nexusd-cluster-v0.1.1

What's Changed

• test(search-plugin): assert plaintext gate directly, not a downstream connect by @elfenlieds7 in #4685
• test(search-plugin): make cross-allocator guard bite on Linux CI too by @elfenlieds7 in #4686
• test(search-plugin): live semantic-over-stream against a real embeddings API by @elfenlieds7 in #4687
• refactor(search-plugin/tests): extract shared MockKernel + poison_handle to tests/common by @elfenlieds7 in #4688
• docs(architecture): add nexus-search-architecture.html — SSOT for search stack by @elfenlieds7 in #4689
• ci(release): publish nexusd-cluster assembly binary to COS + GitHub by @elfenlieds7 in #4690
• ci(release): coscmd + acceleration for nexusd-cluster COS upload by @elfenlieds7 in #4691
• feat(search-plugin): append-incremental DT_STREAM indexing (P4, sudocode FR-C) by @elfenlieds7 in #4692
• docs(architecture): mark sudocode FR-B + FR-C as landed in search doc by @elfenlieds7 in #4693
• feat(http-api): grep + query routes + shared SearchError (R10) by @elfenlieds7 in #4694
• fix(http-api): cover full gRPC status table + fail loud on enum typos (#4694 audit) by @elfenlieds7 in #4697
• fix(search-plugin): close DT_STREAM stale-sweep + SSOT gaps (#4692 audit) by @elfenlieds7 in #4696
• feat(nexusd): take managed_agent + subprocess from nexus-vfs (control plane relocated, SSOT break resolved) by @elfenlieds7 in #4695
• feat(http-api): bearer-token auth middleware over /v2/search/* (R10) by @elfenlieds7 in #4700
• refactor(nexusd): delete cohost.rs; inject sudocode's SudoCodeSpawnAdapter (spawn AgentState collapse) by @elfenlieds7 in #4701
• fix(http-api): reject in-token whitespace + share gRPC status table (#4700 audit) by @elfenlieds7 in #4704
• refactor(http-api): DRY parse_wire_enum + exhaustive gRPC map + drop tombstone mock variant (#4697 audit) by @elfenlieds7 in #4705
• test(e2e): co-host A2A duet over Docker — real LLM agent replies over the mailbox by @elfenlieds7 in #4703
• fix(search-plugin): close remaining DT_STREAM cross-map tombstone sites (#4696 audit) by @elfenlieds7 in #4702
• chore: ruff format tests/e2e/docker/test_cohost_duet_e2e.py by @elfenlieds7 in #4706
• ci(cohost-duet): weekly schedule + manual dispatch (not per-push) by @elfenlieds7 in #4707
• fix(search-plugin): de-flake ann_index tests — assert invariants, not HNSW exhaustive recall by @elfenlieds7 in #4708
• fix(search-plugin): enforce cross-map SSOT in IndexState + close 3rd wire-reachable delete site (#4702 audit) by @elfenlieds7 in #4709
• chore(http-api): parse_bearer docstring + glob/grep mock tombstone cleanup (audit followups) by @elfenlieds7 in #4710
• chore(deps): bump nexus-vfs f3031eef1 + sudocode dd887ce1 (a2a inbox provisioning) by @elfenlieds7 in #4711
• chore(deps): bump nexus-vfs 08460a79 + sudocode 470939a5 (runtime-flavor bridge) by @elfenlieds7 in #4712
• feat(nexusd): wire nexus-http-api as an opt-in ServiceDecl (R10) by @elfenlieds7 in #4713
• test(e2e/docker): http-api real-daemon + real sk-* + real ApiKeyAuthProvider (R10) by @elfenlieds7 in #4715
• test(e2e): CA-pinned mTLS client channel for auth-on drivers by @elfenlieds7 in #4716
• fix(http-api/nexusd): fail-loud on malformed env + bind synchronously at install (#4713 audit) by @elfenlieds7 in #4717
• test(http-api): pin service_decl install under a runtime + fix stale docstring (#4717 audit) by @elfenlieds7 in #4718
• feat(http-api): /v2/documents/{index,refresh,batch,stats} routes (R10) by @elfenlieds7 in #4720
• feat(rebac): crate skeleton + ReBACTupleStore trait + inmem impl (R10 — PR 1/5) by @elfenlieds7 in #4721

Full Changelog: fuse-v0.6.44...nexusd-cluster-v0.1.1