agent-center v2.0.0

agent-center v2.0 — major release.

Breaking changes — read before upgrading.

Highlights

Web Console v2 — React SPA bundled into the single binary via go:embed; 13 pages cover channel / DM / issue / task / agent / secret / input-request / fleet
SecretManagement BC — at-rest AES-256 encryption + plaintext-never-echo guarantee
AgentInstance first-class entity + lifecycle CLI
Worker enroll bootstrap-token exchange (one-step join from worker side)
AgentAdapter v2 matrix — claudecode + codex + opencode
Conversation v2 unified model (CV1-CV4) — channel first-class, Identity refactor (4→3 kinds), Participants JSON, cross-conversation message carry-over, derive Issue/Task from messages
CLI UX — --format=table|json|text universal flag + grouped help + topic index
agent-center migrate v1-to-v2 — idempotent one-shot migration tool with --dry-run / --apply + bridge-archive JSON
Playwright e2e suite — 12 cases / 7 spec files (opt-in make e2e)
v1 vendor lint guard + positive-fail self-test
Vendor IM (Feishu / Lark / Bridge BC) removed — v3 candidate

Operator upgrade procedure: docs/migration/v1-to-v2.md.

master.key is irreplaceable — back up off-machine before creating the first UserSecret. See docs/operations/master-key.md.
v2 is single-node by design — multi-machine installs each maintain their own master key + UserSecret set. Cross-machine secret sync is a v3 candidate (KMS adapter).
Migration tool refuses-silent default — must pass exactly one of --dry-run / --apply.
Web Console is loopback-only (per ADR-0037). Remote access via SSH tunnel.