v0.138.0

What's Changed

• docs(adr): 0101 — context lifecycle: log, surface, pressure (#2772) by @mabry1985 in #2788
• fix(plugins): install-deps re-validates source trust at deps time (#2743) by @mabry1985 in #2771
• feat(telemetry): persist per-turn context fill + cache-hit; project next-request floor (#2773) by @mabry1985 in #2789
• fix(knowledge): clear the context channel when nothing composes (#2774) by @mabry1985 in #2790
• fix(console): the tool context-cost chip estimates from the true result size (#2775) by @mabry1985 in #2791
• fix(mcp): bound tool results — head + omission marker + tail (#2781) by @mabry1985 in #2792
• feat(graph): compose dynamic context once per turn, in the turn's input frame (#2776, #2779) by @mabry1985 in #2793
• feat(graph): subagent stack gets PromptCacheMiddleware (#2778) by @mabry1985 in #2794
• feat(config): profile-aware prompt-cache TTL — 1h for fleet/desktop (#2780) by @mabry1985 in #2795
• feat(graph): rolling cache breakpoints on message history (#2777) by @mabry1985 in #2796
• feat(graph): prune oversized in-history tool results at context pressure (#2782) by @mabry1985 in #2797
• feat(graph): archive-first auto-compaction (#2784) by @mabry1985 in #2799
• chore(chat): un-flag /compact — generally available (#2785) by @mabry1985 in #2800
• feat(graph): round governance — re-grounding nudge + optional hard cap (#2710) by @mabry1985 in #2801
• feat(console): context-pressure surface — projection, series, honest meter (#2787) by @mabry1985 in #2802
• feat(server): catch context overflow — force-compact once, retry once (#2783) by @mabry1985 in #2798
• fix(chat): server-side session fork — the branch actually remembers (#2803) by @mabry1985 in #2805
• docs(adr): 0102 — the trajectory: session log + derived surface (#2806) by @mabry1985 in #2808
• feat(evals): plugin-owned suites (--tasks-file) + forbidden_tools assertion by @mabry1985 in #2804
• docs(adr): 0103 — programmatic tool calls from execute_code (#2807) by @mabry1985 in #2809
• feat(execute_code): PTC spike S1 — curated bridge default, hard denials, measurement (#2807) by @mabry1985 in #2810
• feat(execute_code): PTC S2+S3 — schema signatures + bridged-call observability (#2807) by @mabry1985 in #2812
• feat(observability): trajectory writer — request refs + surface ops (#2806) by @mabry1985 in #2813
• test(execute_code): normalize CRLF in the bridged-audit assertion (#2807) by @mabry1985 in #2814
• ci(e2e): wait out the runner's apt lock before playwright install by @mabry1985 in #2818
• feat(artifact): typed file previews — csv/tsv tables, rendered .md, pretty json (v0.17.0) by @mabry1985 in #2816

Full Changelog: v0.137.2...v0.138.0